Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu logu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
VirCz
Návštěvník
Návštěvník
Příspěvky: 1
Registrován: 05 úno 2010 16:34

Prosím o kontrolu logu

#1 Příspěvek od VirCz »

Prosím o kontrolu log, internet píše chybová hlášení a seká se pc.

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 12:58:51, on 5.2.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Documents and Settings\All Users\Data aplikací\LangSoft\OETRN.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [OEXPRESS] C:\Documents and Settings\All Users\Data aplikací\LangSoft\OETRN.EXE
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-18 Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: Registration Assassin.LNK = C:\Program Files\Ubisoft\Assassin's Creed\Register\RegistrationReminder.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: Registration Prince of Persia T2T.LNK = C:\Program Files\Ubisoft\Prince of Persia T2T\Support\Register\RegistrationReminder.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'Default user')
O4 - .DEFAULT Startup: Registration Assassin.LNK = C:\Program Files\Ubisoft\Assassin's Creed\Register\RegistrationReminder.exe (User 'Default user')
O4 - .DEFAULT Startup: Registration Prince of Persia T2T.LNK = C:\Program Files\Ubisoft\Prince of Persia T2T\Support\Register\RegistrationReminder.exe (User 'Default user')
O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Startup: Registration Assassin.LNK = C:\Program Files\Ubisoft\Assassin's Creed\Register\RegistrationReminder.exe
O4 - Startup: Registration Prince of Persia T2T.LNK = C:\Program Files\Ubisoft\Prince of Persia T2T\Support\Register\RegistrationReminder.exe
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

--
End of file - 8597 bytes














ComboFix 10-02-04.06 - 1E 05.02.2010 13:57:15.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2047.1482 [GMT 1:00]
Spuštěný z: c:\stahování\ComboFix.exe
AV: avast! antivirus 4.8.1368 [VPS 100204-1] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\a.bat
c:\program files\driver
c:\windows\regedit.com
c:\windows\system32\ieuinit.inf
c:\windows\system32\taskmgr.com
c:\windows\twain_16.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-01-05 do 2010-02-05 )))))))))))))))))))))))))))))))
.

2010-02-05 12:10 . 2010-02-05 12:10 -------- d---a-w- c:\windows\VDLL.DLL
2010-02-05 12:10 . 2010-02-05 12:10 -------- d---a-w- c:\windows\system32\runouce.exe
2010-02-05 12:10 . 2010-02-05 12:10 -------- d---a-w- c:\windows\rundll16.exe
2010-02-05 12:10 . 2010-02-05 12:10 -------- d---a-w- c:\windows\RUNDL132.EXE
2010-02-05 12:10 . 2010-02-05 12:10 -------- d---a-w- c:\windows\logo1_.exe
2010-02-05 12:10 . 2010-02-05 12:10 -------- d---a-w- c:\windows\logo_1.exe
2010-02-05 12:08 . 2010-02-05 12:08 632064 ----a-w- c:\windows\system32\msvcr80.dll
2010-02-05 12:08 . 2010-02-05 12:08 554240 ----a-w- c:\windows\system32\msvcp80.dll
2010-02-05 12:08 . 2010-02-05 12:08 34048 ----a-w- c:\windows\system32\eEmpty.exe
2010-02-05 12:08 . 2008-04-14 06:52 137216 ----a-w- c:\windows\system32\T.COM
2010-02-05 12:08 . 2008-04-14 06:52 147968 ----a-w- c:\windows\R.COM
2010-02-05 12:08 . 2010-02-05 12:08 -------- d-----w- c:\program files\Common Files\MicroWorld
2010-02-05 12:01 . 2010-02-05 12:52 -------- d-----w- C:\Stahování
2010-02-05 11:58 . 2010-02-05 11:58 -------- d-----w- c:\program files\TrendMicro
2010-02-04 20:37 . 2009-09-23 12:55 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-02-04 20:36 . 2010-02-04 20:36 -------- d-----w- c:\program files\Lavasoft
2010-02-04 14:33 . 2010-02-04 14:33 -------- d-----w- C:\users
2010-02-04 13:30 . 2010-02-04 13:39 -------- d-----w- c:\program files\Opera
2010-02-02 14:56 . 2010-02-02 15:03 -------- d-----w- c:\program files\Unlocker
2010-02-01 18:21 . 2010-02-01 18:21 30272 ----a-w- c:\windows\system32\drivers\pssdk31.drv
2010-01-30 15:46 . 2010-01-30 15:46 278984 ----a-w- c:\windows\system32\drivers\atksgt.sys
2010-01-30 15:46 . 2010-01-30 15:46 25416 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2010-01-30 15:39 . 2010-01-30 16:51 -------- d-----w- c:\program files\Zaklínač
2010-01-30 14:15 . 2009-01-25 22:36 679936 ----a-w- c:\windows\system32\D3DX81ab.dll
2010-01-30 14:15 . 2009-01-25 22:36 1970176 ----a-w- c:\windows\system32\d3dx9.dll
2010-01-29 10:59 . 2010-01-29 20:18 -------- d-----w- c:\program files\Polda 4
2010-01-29 09:35 . 2010-01-29 09:36 -------- d-----w- c:\program files\Game_Maker6
2010-01-29 09:32 . 2010-01-29 09:34 -------- d-----w- C:\TRANSLAT
2010-01-28 16:28 . 2010-01-28 16:28 -------- d-----w- c:\program files\Mortal Kombat 4
2010-01-28 16:28 . 2000-05-04 12:24 397312 ----a-w- c:\windows\N00FDB49B-Mortal Kombat 4-Setup.exe
2010-01-27 15:11 . 2010-01-27 15:11 -------- d-----w- c:\program files\LucasArts
2010-01-26 21:04 . 2010-01-26 21:08 -------- d-----w- c:\program files\Google
2010-01-25 15:53 . 2010-01-25 15:53 157184 --sh--w- c:\windows\system32\SCS.dll
2010-01-25 15:53 . 2010-01-25 15:53 113152 --sh--w- c:\windows\system32\SCX.dll
2010-01-25 14:53 . 2010-01-25 14:53 -------- d-----w- c:\program files\Aspyr
2010-01-23 18:39 . 2003-06-19 00:31 18944 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\mdippr.dll
2010-01-23 18:39 . 2003-06-19 00:31 17920 ----a-w- c:\windows\system32\mdimon.dll
2010-01-23 18:38 . 2010-01-23 18:38 -------- d-----w- c:\program files\Microsoft Works
2010-01-23 18:38 . 2010-01-23 18:39 -------- d-----w- c:\windows\SHELLNEW
2010-01-23 18:38 . 2010-01-23 18:38 -------- d-----w- c:\program files\Microsoft.NET
2010-01-23 18:32 . 2010-01-23 18:33 -------- d-----w- c:\program files\Bentley
2010-01-23 18:32 . 2010-01-23 18:32 -------- d-----w- c:\program files\Common Files\Bentley Shared
2010-01-23 18:31 . 2010-01-23 18:31 -------- d-----w- c:\windows\Downloaded Installations
2010-01-22 16:20 . 2010-01-22 16:20 -------- d-----w- c:\program files\mresreg
2010-01-22 14:41 . 2010-01-22 14:41 -------- d-----w- c:\documents and settings\1E\WINDOWS
2010-01-21 19:42 . 2004-03-29 16:23 90112 ----a-w- c:\windows\unvise32.exe
2010-01-21 19:42 . 2010-01-21 19:42 -------- d-----w- c:\program files\LooksBuilderSE
2010-01-21 19:40 . 2005-09-23 21:18 171520 ----a-w- c:\windows\system32\drivers\MarvinBus.sys
2010-01-21 19:40 . 2010-01-21 19:40 -------- d-----w- c:\program files\Common Files\Pinnacle
2010-01-21 19:40 . 2010-01-21 19:44 -------- d-----w- c:\documents and settings\All Users\Data aplikac
2010-01-21 19:35 . 2010-01-21 19:35 -------- d-----w- c:\program files\Common Files\Pegasus Imaging
2010-01-21 19:35 . 2010-01-21 19:35 -------- d-----w- c:\program files\Common Files\Yahoo!
2010-01-21 19:32 . 2010-01-21 19:41 -------- d-----w- c:\program files\Pinnacle
2010-01-21 17:46 . 2010-01-21 17:46 737280 ----a-w- c:\windows\iun6002.exe
2010-01-21 17:46 . 2010-01-21 17:46 -------- d-----w- c:\program files\Codec Pack - All In 1
2010-01-21 16:11 . 2010-02-02 15:09 -------- d-s---w- c:\documents and settings\1E\UserData
2010-01-21 12:14 . 2010-01-21 12:14 -------- d-----w- c:\windows\Sun
2010-01-20 20:50 . 2010-01-20 20:50 -------- d-----w- c:\program files\Sony
2010-01-20 20:47 . 2010-01-20 20:47 -------- d-----w- c:\windows\system32\drivers\UMDF
2010-01-20 20:45 . 2010-01-20 20:45 -------- d-----w- c:\program files\MSBuild
2010-01-20 20:43 . 2010-01-21 19:27 -------- d-----w- c:\windows\system32\XPSViewer
2010-01-20 20:43 . 2010-01-20 20:43 -------- d-----w- c:\program files\Reference Assemblies
2010-01-20 20:43 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2010-01-20 20:43 . 2007-11-30 11:18 26488 ----a-w- c:\windows\system32\spupdsvc.exe
2010-01-20 20:43 . 2006-06-29 12:07 14048 ------w- c:\windows\system32\spmsg2.dll
2010-01-18 17:37 . 2010-01-18 17:37 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-01-18 17:37 . 2010-01-18 17:37 -------- d-----w- c:\program files\Java
2010-01-18 17:08 . 2010-01-18 17:08 -------- d-----w- c:\program files\OpenOffice.org 3
2010-01-17 21:12 . 2010-01-17 21:12 279265 ----a-w- c:\windows\Pro Jäger -Die 3D Entenjagd Simulation Uninstaller.exe
2010-01-17 21:11 . 2010-01-17 21:12 -------- d-----w- c:\program files\Pro Jäger -Die 3D Entenjagd Simulation
2010-01-17 15:02 . 2010-02-04 15:21 -------- d-----w- c:\program files\Mozilla Thunderbird
2010-01-17 12:58 . 2010-01-17 12:58 -------- d-----w- c:\program files\NVIDIA Corporation
2010-01-17 12:44 . 2010-01-17 12:44 -------- d-----w- c:\program files\Kalypso
2010-01-16 14:25 . 2010-01-20 12:59 -------- d-----w- c:\program files\EA Sports
2010-01-15 21:48 . 2010-01-17 12:58 -------- d-----w- c:\program files\AGEIA Technologies
2010-01-15 21:48 . 2010-01-17 12:59 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-01-15 21:42 . 2010-01-30 11:57 -------- d-----w- c:\program files\Unreal Tournament 3
2010-01-15 19:09 . 2010-01-22 16:26 -------- d-----w- c:\program files\Ubisoft
2010-01-15 18:54 . 2010-01-15 18:54 -------- d--h--w- c:\windows\system32\GroupPolicy
2010-01-15 14:41 . 2010-01-15 14:41 -------- d-----w- C:\G3iMap
2010-01-14 21:18 . 2010-01-14 21:20 -------- d-----w- c:\program files\Driving Simulator 2009
2010-01-14 21:12 . 2010-01-14 21:12 -------- d-----w- c:\program files\Common Files\Adobe
2010-01-13 16:39 . 2010-01-17 16:39 -------- d-----w- c:\program files\Electronic Arts
2010-01-13 14:08 . 2010-01-13 14:11 -------- d-----w- c:\program files\Gothic III
2010-01-13 04:24 . 2010-01-13 04:28 -------- d-----w- c:\program files\Prison Tycoon 4
2010-01-13 04:04 . 2010-01-13 04:04 139152 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-01-13 04:04 . 2010-01-13 04:04 111928 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-01-13 04:04 . 2010-02-05 11:52 -------- d-----w- c:\windows\system32\LogFiles
2010-01-13 04:04 . 2010-01-13 04:04 794408 ----a-w- c:\windows\system32\pbsvc.exe
2010-01-13 04:04 . 2010-01-13 04:04 75064 ----a-w- c:\windows\system32\PnkBstrA.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-05 11:56 . 2001-10-25 12:00 78076 ----a-w- c:\windows\system32\perfc005.dat
2010-02-05 11:56 . 2001-10-25 12:00 429080 ----a-w- c:\windows\system32\perfh005.dat
2010-01-30 15:47 . 2010-01-13 02:56 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-25 16:42 . 2010-01-13 03:55 -------- d-----w- c:\program files\Activision
2010-01-25 16:41 . 2010-01-13 02:57 -------- d-----w- c:\program files\Common Files\InstallShield
2010-01-14 21:35 . 2010-01-13 02:50 2426 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2010-01-14 21:35 . 2010-01-13 02:50 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2010-01-13 03:39 . 2010-01-13 03:38 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-01-13 03:38 . 2010-01-13 03:38 691696 ----a-w- c:\windows\system32\drivers\sptd.sys.59533289
2010-01-13 03:36 . 2010-01-13 03:35 -------- d-----w- c:\program files\The KMPlayer
2010-01-13 03:28 . 2010-01-13 03:28 -------- d-----w- c:\program files\CCleaner
2010-01-13 03:15 . 2010-01-13 03:15 -------- d-----w- c:\program files\Alwil Software
2010-01-13 03:12 . 2010-01-13 03:12 0 ----a-w- c:\windows\nsreg.dat
2010-01-13 03:08 . 2010-01-13 02:57 -------- d-----w- c:\program files\ATI Technologies
2010-01-13 03:07 . 2010-01-13 03:07 -------- d-----w- c:\program files\Common Files\ATI Technologies
2010-01-13 03:06 . 2010-01-13 03:06 0 ----a-w- c:\windows\ativpsrm.bin
2010-01-13 03:05 . 2010-01-13 03:05 -------- d-----w- c:\program files\ATI
2010-01-13 03:02 . 2010-01-13 03:02 -------- d-----w- c:\program files\HW Monitor
2010-01-13 03:02 . 2010-01-13 03:02 -------- d-----w- c:\program files\Tseries BIOS Update
2010-01-13 03:01 . 2010-01-13 03:01 -------- d-----w- c:\program files\eHOT Line
2010-01-13 03:01 . 2010-01-13 03:01 -------- d-----w- c:\program files\BIOSTAR
2010-01-13 03:01 . 2010-01-13 03:00 -------- d-----w- c:\program files\Realtek
2010-01-13 02:56 . 2010-01-13 02:56 -------- d-----w- c:\program files\AMD
2010-01-13 02:51 . 2010-01-13 02:51 -------- d-----w- c:\program files\microsoft frontpage
2010-01-13 02:48 . 2010-01-13 02:48 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2009-11-24 23:54 . 2010-01-13 03:15 1280480 ----a-w- c:\windows\system32\aswBoot.exe
2009-11-24 23:51 . 2010-01-13 03:16 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-11-24 23:49 . 2010-01-13 03:16 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-11-24 23:48 . 2010-01-13 03:16 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-11-24 23:47 . 2010-01-13 03:16 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-11-24 23:47 . 2010-01-13 03:16 97480 ----a-w- c:\windows\system32\AvastSS.scr
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]
"OEXPRESS"="c:\documents and settings\All Users\Data aplikací\LangSoft\OETRN.EXE" [2010-01-29 26624]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2008-12-09 18063872]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-11-04 98304]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-01-18 149280]
"USBToolTip"="c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe" [2007-02-20 199752]
"UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2009-10-26 15872]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\1E\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 3.1.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-9-16 384512]
Registration Assassin.LNK - c:\program files\Ubisoft\Assassin's Creed\Register\RegistrationReminder.exe [2010-1-22 967304]
Registration Prince of Persia T2T.LNK - c:\program files\Ubisoft\Prince of Persia T2T\Support\Register\RegistrationReminder.exe [2010-1-15 868352]

c:\documents and settings\1E\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 3.1.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-9-16 384512]
Registration Assassin.LNK - c:\program files\Ubisoft\Assassin's Creed\Register\RegistrationReminder.exe [2010-1-22 967304]
Registration Prince of Persia T2T.LNK - c:\program files\Ubisoft\Prince of Persia T2T\Support\Register\RegistrationReminder.exe [2010-1-15 868352]

c:\documents and settings\1E\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 3.1.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-9-16 384512]
Registration Assassin.LNK - c:\program files\Ubisoft\Assassin's Creed\Register\RegistrationReminder.exe [2010-1-22 967304]
Registration Prince of Persia T2T.LNK - c:\program files\Ubisoft\Prince of Persia T2T\Support\Register\RegistrationReminder.exe [2010-1-15 868352]

c:\documents and settings\1E\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 3.1.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-9-16 384512]
Registration Assassin.LNK - c:\program files\Ubisoft\Assassin's Creed\Register\RegistrationReminder.exe [2010-1-22 967304]
Registration Prince of Persia T2T.LNK - c:\program files\Ubisoft\Prince of Persia T2T\Support\Register\RegistrationReminder.exe [2010-1-15 868352]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Activision\\Wolfenstein\\MP\\Wolf2MP.exe"=
"c:\\Program Files\\Activision\\Wolfenstein\\MP\\Wolf2MPLite.exe"=
"c:\\Program Files\\Electronic Arts\\Battlefield 2142\\BF2142.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\umi.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx9.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx10.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Launcher.exe"=

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [4.2.2010 21:37 64288]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [13.1.2010 4:16 114768]
R1 BIOS;BIOS;c:\windows\system32\drivers\BIOS.sys [13.1.2010 3:55 13696]
R1 BS_I2cIo;BS_I2cIo;c:\windows\system32\drivers\BS_I2cIo.sys [13.1.2010 4:16 17024]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [13.1.2010 4:16 20560]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [24.9.2009 12:17 1169232]
S0 sptd;sptd;c:\windows\system32\Drivers\sptd.sys --> c:\windows\system32\Drivers\sptd.sys [?]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [26.1.2010 22:04 135664]
S3 PsSdk31;PsSdk31;c:\windows\system32\drivers\pssdk31.drv [1.2.2010 19:21 30272]
.
Obsah adresáře 'Naplánované úlohy'

2010-02-05 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 13:06]

2010-02-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-26 21:04]

2010-02-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-26 21:04]
.
.
------- Doplňkový sken -------
.
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
FF - ProfilePath - c:\documents and settings\1E\Data aplikací\Mozilla\Firefox\Profiles\ynt24vhx.default\
FF - prefs.js: browser.startup.homepage - Seznam.cz
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-Nektra OEAPI - (no file)
HKCU-Run-WEBTRAN - (no file)
AddRemove-PC Translator - c:\docume~1\1E\LOCALS~1\Temp\UN32.EXE



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-05 13:59
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\PsSdk31]
"ImagePath"="\??\c:\windows\system32\Drivers\pssdk31.drv"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(756)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2010-02-05 14:00:20
ComboFix-quarantined-files.txt 2010-02-05 13:00

Před spuštěním: Volných bajtů: 38 749 577 216
Po spuštění: Volných bajtů: 39 096 786 944

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /usepmtimer

- - End Of File - - B42471303A56D48DB7EBB599E55B8478

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119399
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosím o kontrolu logu

#2 Příspěvek od Rudy »

Log vypadá čistý. O jaká chybová hlášení jde?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět