Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Padá mi internet
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Padá mi internet
Reinstaloval jsem to a stále to padá... jinak název ovladače je Realtek RTL8111B/C LAN Driver a mám jí integrovanou
-
Rudy
- Site Admin
- Příspěvky: 118311
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Padá mi internet
Vypadá to na chybu routeru. Abychom zcela vyloučili vliv viru. Dejte ještě log z Combofix.
Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
pote spustte aplikaci pod uctem s administratorskym opravnenim
hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.
v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho
behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)
upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Padá mi internet
ComboFix 10-04-27.04 - Steew 29.04.2010 15:18:14.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3326.2566 [GMT 2:00]
Spuštěný z: c:\users\Steew\Desktop\ComboFix.exe
AV: Eset NOD32 Antivirus 2.70 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-03-28 do 2010-04-29 )))))))))))))))))))))))))))))))
.
2010-04-29 13:26 . 2010-04-29 13:27 -------- d-----w- c:\users\Steew\AppData\Local\temp
2010-04-29 13:26 . 2010-04-29 13:26 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-04-29 13:26 . 2010-04-29 13:26 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-04-27 16:16 . 2010-04-27 16:16 -------- d-----w- c:\windows\AsDmiHtm
2010-04-27 16:15 . 2008-05-02 05:59 122368 ----a-w- c:\windows\system32\drivers\Rtlh86.sys
2010-04-27 16:15 . 2010-04-27 16:15 -------- d-----w- c:\users\Steew\AppData\Roaming\InstallShield
2010-04-21 13:20 . 2010-04-24 12:06 0 ----a-w- c:\windows\system32\Access.dat
2010-04-20 21:35 . 2010-04-20 21:35 -------- d-----w- c:\users\Steew\AppData\Roaming\Malwarebytes
2010-04-20 21:35 . 2010-03-29 22:46 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-20 21:35 . 2010-04-20 21:35 -------- d-----w- c:\programdata\Malwarebytes
2010-04-20 21:35 . 2010-03-29 22:45 20824 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-04-20 21:35 . 2010-04-20 21:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-04-19 19:04 . 2010-04-19 19:04 -------- d-----w- c:\programdata\Media Center Programs
2010-04-19 16:26 . 2010-04-19 16:26 -------- d-----w- c:\program files\THQ
2010-04-18 14:35 . 2010-04-18 14:58 -------- d-----w- c:\users\Steew\AppData\Roaming\Tropico 3
2010-04-18 14:31 . 2010-04-18 15:00 -------- d-----w- c:\program files\Kalypso
2010-04-17 19:21 . 2010-04-17 19:21 -------- d-----w- c:\users\Steew\AppData\Local\GHISLER
2010-04-17 18:21 . 2010-04-17 18:21 -------- d-----w- C:\totalcmd
2010-04-17 18:21 . 2010-04-17 18:21 -------- d-----w- c:\users\Steew\AppData\Roaming\GHISLER
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\UC.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\RAR.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\PKZIP.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\PKUNZIP.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\NOCLOSE.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\LHA.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\ARJ.PIF
2010-04-17 11:57 . 2010-04-29 13:12 -------- d-----w- c:\users\Steew\AppData\Roaming\Tunngle
2010-04-17 11:57 . 2010-04-29 13:12 -------- d-----w- c:\programdata\Tunngle
2010-04-17 11:57 . 2009-09-16 05:02 27136 ----a-w- c:\windows\system32\drivers\tap0901t.sys
2010-04-17 11:56 . 2010-04-17 11:58 -------- d-----w- c:\program files\Tunngle
2010-04-17 11:46 . 2010-04-29 06:23 -------- d-----w- c:\users\Steew\AppData\Local\LogMeIn Hamachi
2010-04-17 11:44 . 2010-04-17 11:44 -------- d-----w- c:\program files\LogMeIn Hamachi
2010-04-17 01:18 . 2010-04-17 01:18 -------- d-----w- c:\program files\Windows Portable Devices
2010-04-17 01:01 . 2009-10-08 21:08 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2010-04-17 01:01 . 2009-10-08 21:08 234496 ----a-w- c:\windows\system32\oleacc.dll
2010-04-17 01:01 . 2009-10-08 21:07 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2010-04-16 23:49 . 2010-01-06 15:39 1696256 ----a-w- c:\windows\system32\gameux.dll
2010-04-16 23:49 . 2010-01-06 15:38 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2010-04-16 23:49 . 2010-01-06 13:30 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2010-04-16 15:24 . 2010-04-16 15:26 -------- d-----w- c:\windows\system32\ca-ES
2010-04-16 15:24 . 2010-04-16 15:26 -------- d-----w- c:\windows\system32\eu-ES
2010-04-16 15:24 . 2010-04-16 15:26 -------- d-----w- c:\windows\system32\vi-VN
2010-04-16 15:20 . 2010-04-16 15:20 -------- d-----w- c:\windows\system32\SPReview
2010-04-16 15:09 . 2009-04-10 21:28 928768 ----a-w- c:\windows\system32\scavenge.dll
2010-04-16 15:09 . 2009-04-10 21:27 57856 ----a-w- c:\windows\system32\compcln.exe
2010-04-16 15:02 . 2009-04-10 21:32 438744 ----a-w- c:\windows\system32\mcupdate_GenuineIntel.dll
2010-04-16 14:38 . 2010-04-16 14:38 -------- d-----w- C:\3761acbd78d0957dbfbd5708fb09042d
2010-04-16 14:08 . 2010-04-16 14:08 -------- d-----w- c:\windows\system32\EventProviders
2010-04-14 10:56 . 2010-02-23 11:10 79360 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2010-04-14 10:56 . 2010-02-23 11:10 212992 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-04-14 10:56 . 2010-02-23 11:10 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-04-14 10:56 . 2010-02-18 14:07 3548040 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-04-14 10:56 . 2010-02-18 14:07 3600776 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-04-14 10:56 . 2010-03-04 17:33 430080 ----a-w- c:\windows\system32\vbscript.dll
2010-04-14 10:55 . 2010-02-18 13:30 200704 ----a-w- c:\windows\system32\iphlpsvc.dll
2010-04-14 10:55 . 2010-02-18 14:07 904576 ----a-w- c:\windows\system32\drivers\tcpip.sys
2010-04-14 10:55 . 2010-02-18 11:28 25088 ----a-w- c:\windows\system32\drivers\tunnel.sys
2010-04-14 10:54 . 2009-12-23 11:33 172032 ----a-w- c:\windows\system32\wintrust.dll
2010-04-14 10:54 . 2010-01-13 17:34 98304 ----a-w- c:\windows\system32\cabview.dll
2010-04-09 08:11 . 2010-04-10 16:24 -------- d-----w- c:\users\Steew\AppData\Roaming\ICQ
2010-04-09 08:10 . 2010-04-09 08:13 -------- d-----w- c:\program files\ICQ6.5
2010-04-04 14:40 . 2010-04-16 15:51 -------- d-----w- c:\program files\TeamSpeak 3 Client
2010-04-03 16:57 . 2010-04-03 16:57 -------- d-----w- c:\users\Steew\AppData\Local\Logitech
2010-04-03 16:57 . 2010-04-03 16:57 -------- d-----w- c:\programdata\Logitech
2010-04-03 16:57 . 2010-04-03 16:57 -------- d-----w- c:\program files\Logitech
2010-04-03 13:15 . 2010-04-03 13:27 -------- d-----w- c:\program files\UP 2.0n Full
2010-04-03 11:08 . 2010-04-03 14:06 -------- d-----w- c:\program files\Ubisoft
2010-04-03 09:53 . 2010-04-03 09:53 -------- d-----w- c:\users\Steew\AppData\Roaming\KWorld Multimedia
2010-04-03 09:52 . 2010-04-03 09:53 -------- d-----w- c:\program files\Genius TVGo DVB-T03
2010-04-03 09:52 . 2010-04-03 09:53 -------- d-----w- c:\temp\Uninstall
2010-04-03 09:52 . 2010-04-03 09:52 -------- d-----w- c:\program files\KWorld Multimedia
2010-04-03 09:51 . 2007-12-27 03:57 299008 ----a-w- c:\windows\afaunist.exe
2010-04-03 09:51 . 2007-10-26 17:26 224 ----a-w- c:\windows\system32\AF15IRTBL.bin
2010-04-03 09:51 . 2007-06-22 01:13 28672 ----a-w- c:\windows\system32\AF15BDAEX.dll
2010-04-03 09:51 . 2008-04-30 00:34 449408 ----a-w- c:\windows\system32\drivers\AF15BDA.sys
2010-04-03 09:51 . 2010-04-03 09:52 -------- d-----w- C:\Temp
2010-04-03 09:51 . 2010-04-03 09:51 -------- d-----w- c:\temp\Driver
2010-04-02 21:28 . 2010-04-02 22:44 -------- d-----w- c:\users\Steew\AppData\Roaming\TeamViewer
2010-04-02 21:27 . 2010-04-02 21:27 -------- d-----w- c:\program files\TeamViewer
2010-04-01 15:02 . 2010-04-01 15:02 -------- d-----w- c:\users\Steew\AppData\Local\PunkBuster
2010-04-01 14:52 . 2010-04-01 14:52 138056 ----a-w- c:\users\Steew\AppData\Roaming\PnkBstrK.sys
2010-04-01 14:47 . 2010-04-28 21:30 139128 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-03-31 22:05 . 2010-04-28 21:29 215128 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-03-31 13:02 . 2010-03-31 13:02 -------- d-----w- c:\users\Steew\AppData\Local\Ironclad Games
2010-03-31 11:48 . 2010-03-31 11:48 -------- d-----w- c:\programdata\Ironclad Games
2010-03-31 11:42 . 2010-03-31 11:42 -------- d-----w- c:\program files\Stardock
2010-03-31 10:35 . 2010-04-03 17:41 -------- d-----w- C:\Fraps
2010-03-30 22:21 . 2009-08-24 11:36 377344 ----a-w- c:\windows\system32\winhttp.dll
2010-03-30 22:20 . 2010-03-09 15:42 834048 ----a-w- c:\windows\system32\wininet.dll
2010-03-30 22:20 . 2010-03-09 16:25 78336 ----a-w- c:\windows\system32\ieencode.dll
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-29 13:23 . 2008-01-21 06:46 598594 ----a-w- c:\windows\system32\perfh005.dat
2010-04-29 13:23 . 2008-01-21 06:46 114786 ----a-w- c:\windows\system32\perfc005.dat
2010-04-29 01:20 . 2010-03-26 17:09 -------- d-----w- c:\program files\Steam
2010-04-29 01:20 . 2010-03-26 17:09 -------- d-----w- c:\program files\Common Files\Steam
2010-04-28 22:02 . 2010-03-26 01:30 -------- d-----w- c:\users\Steew\AppData\Roaming\skypePM
2010-04-28 22:02 . 2010-03-26 01:30 -------- d-----w- c:\users\Steew\AppData\Roaming\Skype
2010-04-27 16:15 . 2010-03-26 14:00 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-04-21 13:42 . 2010-03-28 20:03 -------- d-----w- c:\users\Steew\AppData\Roaming\uTorrent
2010-04-20 21:59 . 2010-03-26 14:06 -------- d-----w- c:\program files\ASUS
2010-04-20 20:12 . 2010-03-26 21:20 -------- d-----w- c:\users\Steew\AppData\Roaming\FileZilla
2010-04-20 19:05 . 2010-03-26 00:02 -------- d-----w- c:\program files\ESET
2010-04-19 04:23 . 2010-03-26 13:40 55080 ----a-w- c:\users\Steew\AppData\Local\GDIPFONTCACHEV1.DAT
2010-04-17 01:18 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2010-04-17 01:18 . 2010-04-17 01:18 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2010-04-16 15:26 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2010-04-07 11:35 . 2010-04-07 11:35 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2010-04-04 16:12 . 2010-03-26 01:23 -------- d-----w- c:\users\Steew\AppData\Roaming\TS3Client
2010-04-02 11:10 . 2010-03-26 01:12 -------- d-----w- c:\program files\Miranda IM
2010-04-01 14:47 . 2010-03-27 10:30 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-04-01 14:44 . 2010-03-27 10:30 2434856 ----a-w- c:\windows\system32\pbsvc_bc2.exe
2010-03-30 09:09 . 2010-03-30 09:09 45056 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimwmp.dll
2010-03-30 09:09 . 2010-03-30 09:09 49152 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Components\nprpffbrowserrecordext.dll
2010-03-30 09:09 . 2010-03-30 09:09 45056 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimswf.dll
2010-03-30 09:09 . 2010-03-30 09:09 45056 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimrp.dll
2010-03-30 09:09 . 2010-03-30 09:09 45056 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimqt.dll
2010-03-30 09:09 . 2010-03-30 09:09 40960 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Chrome\Hook\rpchromebrowserrecordhelper.dll
2010-03-30 09:09 . 2010-03-30 09:09 341600 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
2010-03-30 09:09 . 2010-03-30 09:09 308808 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Common\rpmainbrowserrecordplugin.dll
2010-03-30 09:09 . 2010-03-30 09:09 14848 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
2010-03-30 09:09 . 2010-03-30 09:08 -------- d-----w- c:\program files\Common Files\Real
2010-03-30 09:08 . 2010-03-30 09:08 -------- d-----w- c:\program files\Real
2010-03-30 09:08 . 2010-03-30 09:08 -------- d-----w- c:\program files\Common Files\xing shared
2010-03-30 09:08 . 2010-03-30 09:08 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-03-30 09:08 . 2010-03-30 09:08 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-03-30 01:17 . 2010-03-25 23:40 -------- d-----w- c:\programdata\NVIDIA
2010-03-28 21:41 . 2010-03-28 21:41 -------- d-----w- c:\program files\PowerISO
2010-03-28 21:09 . 2010-03-28 20:59 -------- d-----w- c:\users\Steew\AppData\Roaming\DAEMON Tools Lite
2010-03-28 21:05 . 2010-03-28 21:05 -------- d-----w- c:\users\Steew\AppData\Roaming\DAEMON Tools Pro
2010-03-28 21:05 . 2010-03-28 21:05 -------- d-----w- c:\users\Steew\AppData\Roaming\DAEMON Tools
2010-03-28 21:04 . 2010-03-28 21:04 -------- d-----w- c:\programdata\DAEMON Tools Lite
2010-03-28 21:04 . 2010-03-28 21:04 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-03-28 20:59 . 2010-03-28 20:59 717296 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-03-28 20:52 . 2010-03-28 20:52 -------- d-----w- c:\users\Steew\AppData\Roaming\GameRanger
2010-03-28 20:08 . 2010-03-28 20:08 -------- d-----w- c:\program files\uTorrent
2010-03-28 10:54 . 2010-03-28 10:54 -------- d-----w- c:\program files\Microsoft.NET
2010-03-28 00:34 . 2010-03-28 00:34 -------- d-----w- c:\program files\Play+Smile
2010-03-27 22:57 . 2010-03-27 22:57 -------- d-----w- c:\program files\YomaTools
2010-03-27 18:38 . 2010-03-27 18:38 -------- d-----w- c:\program files\Bohemia Interactive
2010-03-27 10:23 . 2010-03-27 10:23 -------- d--h--r- c:\users\Steew\AppData\Roaming\SecuROM
2010-03-27 09:45 . 2010-03-27 09:45 -------- d-----w- c:\program files\Electronic Arts
2010-03-27 09:38 . 2010-03-27 01:08 -------- d-----w- c:\users\Steew\AppData\Roaming\BSplayer
2010-03-27 01:08 . 2010-03-27 01:08 -------- d-----w- c:\users\Steew\AppData\Roaming\BSplayer Pro
2010-03-27 01:07 . 2010-03-27 01:07 -------- d-----w- c:\program files\Webteh
2010-03-26 21:20 . 2010-03-26 21:20 -------- d-----w- c:\program files\FileZilla FTP Client
2010-03-26 20:08 . 2010-03-26 20:08 -------- d-----w- c:\users\Steew\AppData\Roaming\ArcSoft
2010-03-26 20:07 . 2010-03-26 20:07 -------- d-----w- c:\program files\Common Files\ArcSoft
2010-03-26 20:07 . 2010-03-26 20:07 -------- d-----w- c:\program files\ArcSoft
2010-03-26 20:05 . 2010-03-26 20:05 -------- d-----w- c:\program files\Common Files\PAC207
2010-03-26 20:05 . 2010-03-26 20:05 -------- d-----w- c:\program files\Trust
2010-03-26 19:08 . 2010-03-26 19:08 -------- d-----w- c:\program files\A4Tech
2010-03-26 14:02 . 2010-03-26 14:00 -------- d-----w- c:\program files\Realtek
2010-03-26 14:00 . 2010-03-26 14:00 319456 ----a-w- c:\windows\DIFxAPI.dll
2010-03-26 14:00 . 2010-03-26 14:00 315392 ----a-w- c:\windows\HideWin.exe
2010-03-26 13:51 . 2010-03-26 13:51 -------- d-----w- c:\program files\Intel
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Šablony
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Plocha
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Oblíbené položky
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Nabídka Start
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Dokumenty
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Data aplikací
2010-03-26 01:30 . 2010-03-26 01:30 56 ---ha-w- c:\programdata\ezsidmv.dat
2010-03-26 01:29 . 2010-03-26 01:29 -------- d-----r- c:\program files\Skype
2010-03-26 01:29 . 2010-03-26 01:29 -------- d-----w- c:\program files\Common Files\Skype
2010-03-26 01:29 . 2010-03-26 01:29 -------- d-----w- c:\programdata\Skype
2010-03-26 01:20 . 2010-03-26 01:20 -------- d-----w- c:\programdata\boost_interprocess
2010-03-26 00:02 . 2010-03-26 00:04 512096 ----a-w- c:\windows\system32\drivers\amon.sys
2010-03-26 00:02 . 2010-03-26 00:04 298104 ----a-w- c:\windows\system32\imon.dll
2010-03-26 00:02 . 2010-03-26 00:04 15424 ----a-w- c:\windows\system32\drivers\nod32drv.sys
2010-03-25 23:40 . 2010-03-25 23:35 -------- d-----w- c:\programdata\Comodo
2010-03-25 23:35 . 2010-03-25 23:35 74328 ----a-w- c:\windows\system32\drivers\inspect.sys
2010-03-25 23:35 . 2010-03-25 23:35 29520 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2010-03-25 23:35 . 2010-03-25 23:35 171552 ----a-w- c:\windows\system32\guard32.dll
2010-03-25 23:35 . 2010-03-25 23:35 130960 ----a-w- c:\windows\system32\drivers\cmdguard.sys
2010-03-25 23:35 . 2010-03-25 23:35 -------- d-----w- c:\program files\COMODO
2010-03-25 23:30 . 2010-03-25 23:30 -------- d-----w- c:\program files\My Company Name
2010-03-25 23:17 . 2010-03-26 13:59 -------- d-----w- c:\program files\Common Files\InstallShield
2010-03-25 23:11 . 2010-03-26 13:39 680 ----a-w- c:\users\Steew\AppData\Local\d3d9caps.dat
2010-03-22 13:52 . 2010-03-27 01:09 697690 ----a-w- c:\users\Steew\AppData\Roaming\BSplayer\AC3 Filter\unins000.exe
2010-02-24 08:16 . 2010-03-26 00:55 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-23 16:01 . 2010-03-27 01:09 1185871 ----a-w- c:\users\Steew\AppData\Roaming\BSplayer\FFDShow\unins000.exe
2010-02-23 15:00 . 2010-03-27 01:09 42288 ----a-w- c:\users\Steew\AppData\Roaming\BSplayer\Haali media splitter\uninstall.exe
2010-02-20 23:06 . 2010-03-26 18:56 24064 ----a-w- c:\windows\system32\nshhttp.dll
2010-02-20 23:05 . 2010-03-26 18:56 30720 ----a-w- c:\windows\system32\httpapi.dll
2010-02-20 20:53 . 2010-03-26 18:56 411648 ----a-w- c:\windows\system32\drivers\http.sys
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-10 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-10 2153472]
"Skype"="c:\program files\Skype\\Phone\Skype.exe" [2010-04-06 26102056]
"Steam"="c:\program files\Steam\Steam.exe" [2010-04-26 1238352]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-12-29 687560]
"Center Agent"="c:\program files\Genius TVGo DVB-T03\HyperMediaCenter\DTVR\Scheduled.exe" [2008-04-14 1519616]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"RtHDVCpl"="RtHDVCpl.exe" [2008-05-20 6144000]
"Skytel"="Skytel.exe" [2007-11-20 1826816]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2010-03-25 1800464]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2010-03-26 949376]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2007-05-15 204800]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2009-11-09 180224]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-03-11 13527584]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-03-11 92704]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-03-30 202256]
"Launch LGDCore"="c:\program files\Logitech\G-series Software\LGDCore.exe" [2006-03-06 1122304]
"Launch LCDMon"="c:\program files\Logitech\G-series Software\LCDMon.exe" [2006-03-06 497152]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2010-03-30 1820040]
c:\users\Steew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Remote Control.lnk - c:\program files\Genius TVGo DVB-T03\Genius TVGo DVB-T03 Utilities\AFRCtl.exe [2010-4-3 81920]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\guard32.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):41,15,14,61,7a,dd,ca,01
R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-03-28 717296]
R3 PAC207;Trust WB-1400T Webcam;c:\windows\system32\DRIVERS\PFC027.SYS [2007-05-14 508288]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2010-03-25 130960]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2010-03-25 29520]
S1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [2010-03-26 15424]
S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1107336]
S2 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2010-02-11 172328]
S2 TunngleService;TunngleService;c:\program files\Tunngle\TnglCtrl.exe [2010-03-23 704760]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [2009-09-16 27136]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
LSP: c:\windows\system32\imon.dll
FF - ProfilePath - c:\users\Steew\AppData\Roaming\Mozilla\Firefox\Profiles\9o57y87o.default\
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - component: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-29 15:27
Windows 6.0.6002 Service Pack 2 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_USERS\S-1-5-21-62988530-4219308771-1675412009-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
"??"=hex:a2,02,85,26,5c,b4,96,38,16,05,72,6f,87,49,18,d8,ae,98,25,4b,60,c1,2e,
74,d3,3a,f0,64,01,5d,5a,0a,b7,c9,e8,37,dc,cb,dc,9d,13,6a,0a,96,c7,33,d5,fc,\
"??"=hex:d5,1a,22,f0,84,c1,52,33,85,a1,43,ea,fd,a0,56,c6
[HKEY_USERS\S-1-5-21-62988530-4219308771-1675412009-1000\Software\SecuROM\License information*]
"datasecu"=hex:87,1f,d6,84,17,c5,ff,83,15,01,d9,66,17,c6,f6,07,07,20,0e,2a,e1,
fe,2c,8a,ae,cb,75,87,eb,60,f9,3f,25,80,e2,12,fa,eb,70,5d,c9,2f,79,62,27,fd,\
"rkeysecu"=hex:08,28,4f,72,b3,a0,ba,fc,f5,79,91,8d,3b,fb,50,c5
.
Celkový čas: 2010-04-29 15:29:57
ComboFix-quarantined-files.txt 2010-04-29 13:29
ComboFix2.txt 2010-04-20 19:19
Před spuštěním: Volných bajtů: 104 731 684 864
Po spuštění: Volných bajtů: 104 755 425 280
- - End Of File - - 41C48451187C79EF3B5F649F7FDB273D
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3326.2566 [GMT 2:00]
Spuštěný z: c:\users\Steew\Desktop\ComboFix.exe
AV: Eset NOD32 Antivirus 2.70 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-03-28 do 2010-04-29 )))))))))))))))))))))))))))))))
.
2010-04-29 13:26 . 2010-04-29 13:27 -------- d-----w- c:\users\Steew\AppData\Local\temp
2010-04-29 13:26 . 2010-04-29 13:26 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-04-29 13:26 . 2010-04-29 13:26 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-04-27 16:16 . 2010-04-27 16:16 -------- d-----w- c:\windows\AsDmiHtm
2010-04-27 16:15 . 2008-05-02 05:59 122368 ----a-w- c:\windows\system32\drivers\Rtlh86.sys
2010-04-27 16:15 . 2010-04-27 16:15 -------- d-----w- c:\users\Steew\AppData\Roaming\InstallShield
2010-04-21 13:20 . 2010-04-24 12:06 0 ----a-w- c:\windows\system32\Access.dat
2010-04-20 21:35 . 2010-04-20 21:35 -------- d-----w- c:\users\Steew\AppData\Roaming\Malwarebytes
2010-04-20 21:35 . 2010-03-29 22:46 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-20 21:35 . 2010-04-20 21:35 -------- d-----w- c:\programdata\Malwarebytes
2010-04-20 21:35 . 2010-03-29 22:45 20824 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-04-20 21:35 . 2010-04-20 21:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-04-19 19:04 . 2010-04-19 19:04 -------- d-----w- c:\programdata\Media Center Programs
2010-04-19 16:26 . 2010-04-19 16:26 -------- d-----w- c:\program files\THQ
2010-04-18 14:35 . 2010-04-18 14:58 -------- d-----w- c:\users\Steew\AppData\Roaming\Tropico 3
2010-04-18 14:31 . 2010-04-18 15:00 -------- d-----w- c:\program files\Kalypso
2010-04-17 19:21 . 2010-04-17 19:21 -------- d-----w- c:\users\Steew\AppData\Local\GHISLER
2010-04-17 18:21 . 2010-04-17 18:21 -------- d-----w- C:\totalcmd
2010-04-17 18:21 . 2010-04-17 18:21 -------- d-----w- c:\users\Steew\AppData\Roaming\GHISLER
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\UC.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\RAR.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\PKZIP.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\PKUNZIP.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\NOCLOSE.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\LHA.PIF
2010-04-17 18:21 . 2009-09-24 05:50 545 ----a-w- c:\windows\ARJ.PIF
2010-04-17 11:57 . 2010-04-29 13:12 -------- d-----w- c:\users\Steew\AppData\Roaming\Tunngle
2010-04-17 11:57 . 2010-04-29 13:12 -------- d-----w- c:\programdata\Tunngle
2010-04-17 11:57 . 2009-09-16 05:02 27136 ----a-w- c:\windows\system32\drivers\tap0901t.sys
2010-04-17 11:56 . 2010-04-17 11:58 -------- d-----w- c:\program files\Tunngle
2010-04-17 11:46 . 2010-04-29 06:23 -------- d-----w- c:\users\Steew\AppData\Local\LogMeIn Hamachi
2010-04-17 11:44 . 2010-04-17 11:44 -------- d-----w- c:\program files\LogMeIn Hamachi
2010-04-17 01:18 . 2010-04-17 01:18 -------- d-----w- c:\program files\Windows Portable Devices
2010-04-17 01:01 . 2009-10-08 21:08 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2010-04-17 01:01 . 2009-10-08 21:08 234496 ----a-w- c:\windows\system32\oleacc.dll
2010-04-17 01:01 . 2009-10-08 21:07 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2010-04-16 23:49 . 2010-01-06 15:39 1696256 ----a-w- c:\windows\system32\gameux.dll
2010-04-16 23:49 . 2010-01-06 15:38 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2010-04-16 23:49 . 2010-01-06 13:30 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2010-04-16 15:24 . 2010-04-16 15:26 -------- d-----w- c:\windows\system32\ca-ES
2010-04-16 15:24 . 2010-04-16 15:26 -------- d-----w- c:\windows\system32\eu-ES
2010-04-16 15:24 . 2010-04-16 15:26 -------- d-----w- c:\windows\system32\vi-VN
2010-04-16 15:20 . 2010-04-16 15:20 -------- d-----w- c:\windows\system32\SPReview
2010-04-16 15:09 . 2009-04-10 21:28 928768 ----a-w- c:\windows\system32\scavenge.dll
2010-04-16 15:09 . 2009-04-10 21:27 57856 ----a-w- c:\windows\system32\compcln.exe
2010-04-16 15:02 . 2009-04-10 21:32 438744 ----a-w- c:\windows\system32\mcupdate_GenuineIntel.dll
2010-04-16 14:38 . 2010-04-16 14:38 -------- d-----w- C:\3761acbd78d0957dbfbd5708fb09042d
2010-04-16 14:08 . 2010-04-16 14:08 -------- d-----w- c:\windows\system32\EventProviders
2010-04-14 10:56 . 2010-02-23 11:10 79360 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2010-04-14 10:56 . 2010-02-23 11:10 212992 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-04-14 10:56 . 2010-02-23 11:10 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-04-14 10:56 . 2010-02-18 14:07 3548040 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-04-14 10:56 . 2010-02-18 14:07 3600776 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-04-14 10:56 . 2010-03-04 17:33 430080 ----a-w- c:\windows\system32\vbscript.dll
2010-04-14 10:55 . 2010-02-18 13:30 200704 ----a-w- c:\windows\system32\iphlpsvc.dll
2010-04-14 10:55 . 2010-02-18 14:07 904576 ----a-w- c:\windows\system32\drivers\tcpip.sys
2010-04-14 10:55 . 2010-02-18 11:28 25088 ----a-w- c:\windows\system32\drivers\tunnel.sys
2010-04-14 10:54 . 2009-12-23 11:33 172032 ----a-w- c:\windows\system32\wintrust.dll
2010-04-14 10:54 . 2010-01-13 17:34 98304 ----a-w- c:\windows\system32\cabview.dll
2010-04-09 08:11 . 2010-04-10 16:24 -------- d-----w- c:\users\Steew\AppData\Roaming\ICQ
2010-04-09 08:10 . 2010-04-09 08:13 -------- d-----w- c:\program files\ICQ6.5
2010-04-04 14:40 . 2010-04-16 15:51 -------- d-----w- c:\program files\TeamSpeak 3 Client
2010-04-03 16:57 . 2010-04-03 16:57 -------- d-----w- c:\users\Steew\AppData\Local\Logitech
2010-04-03 16:57 . 2010-04-03 16:57 -------- d-----w- c:\programdata\Logitech
2010-04-03 16:57 . 2010-04-03 16:57 -------- d-----w- c:\program files\Logitech
2010-04-03 13:15 . 2010-04-03 13:27 -------- d-----w- c:\program files\UP 2.0n Full
2010-04-03 11:08 . 2010-04-03 14:06 -------- d-----w- c:\program files\Ubisoft
2010-04-03 09:53 . 2010-04-03 09:53 -------- d-----w- c:\users\Steew\AppData\Roaming\KWorld Multimedia
2010-04-03 09:52 . 2010-04-03 09:53 -------- d-----w- c:\program files\Genius TVGo DVB-T03
2010-04-03 09:52 . 2010-04-03 09:53 -------- d-----w- c:\temp\Uninstall
2010-04-03 09:52 . 2010-04-03 09:52 -------- d-----w- c:\program files\KWorld Multimedia
2010-04-03 09:51 . 2007-12-27 03:57 299008 ----a-w- c:\windows\afaunist.exe
2010-04-03 09:51 . 2007-10-26 17:26 224 ----a-w- c:\windows\system32\AF15IRTBL.bin
2010-04-03 09:51 . 2007-06-22 01:13 28672 ----a-w- c:\windows\system32\AF15BDAEX.dll
2010-04-03 09:51 . 2008-04-30 00:34 449408 ----a-w- c:\windows\system32\drivers\AF15BDA.sys
2010-04-03 09:51 . 2010-04-03 09:52 -------- d-----w- C:\Temp
2010-04-03 09:51 . 2010-04-03 09:51 -------- d-----w- c:\temp\Driver
2010-04-02 21:28 . 2010-04-02 22:44 -------- d-----w- c:\users\Steew\AppData\Roaming\TeamViewer
2010-04-02 21:27 . 2010-04-02 21:27 -------- d-----w- c:\program files\TeamViewer
2010-04-01 15:02 . 2010-04-01 15:02 -------- d-----w- c:\users\Steew\AppData\Local\PunkBuster
2010-04-01 14:52 . 2010-04-01 14:52 138056 ----a-w- c:\users\Steew\AppData\Roaming\PnkBstrK.sys
2010-04-01 14:47 . 2010-04-28 21:30 139128 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-03-31 22:05 . 2010-04-28 21:29 215128 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-03-31 13:02 . 2010-03-31 13:02 -------- d-----w- c:\users\Steew\AppData\Local\Ironclad Games
2010-03-31 11:48 . 2010-03-31 11:48 -------- d-----w- c:\programdata\Ironclad Games
2010-03-31 11:42 . 2010-03-31 11:42 -------- d-----w- c:\program files\Stardock
2010-03-31 10:35 . 2010-04-03 17:41 -------- d-----w- C:\Fraps
2010-03-30 22:21 . 2009-08-24 11:36 377344 ----a-w- c:\windows\system32\winhttp.dll
2010-03-30 22:20 . 2010-03-09 15:42 834048 ----a-w- c:\windows\system32\wininet.dll
2010-03-30 22:20 . 2010-03-09 16:25 78336 ----a-w- c:\windows\system32\ieencode.dll
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-29 13:23 . 2008-01-21 06:46 598594 ----a-w- c:\windows\system32\perfh005.dat
2010-04-29 13:23 . 2008-01-21 06:46 114786 ----a-w- c:\windows\system32\perfc005.dat
2010-04-29 01:20 . 2010-03-26 17:09 -------- d-----w- c:\program files\Steam
2010-04-29 01:20 . 2010-03-26 17:09 -------- d-----w- c:\program files\Common Files\Steam
2010-04-28 22:02 . 2010-03-26 01:30 -------- d-----w- c:\users\Steew\AppData\Roaming\skypePM
2010-04-28 22:02 . 2010-03-26 01:30 -------- d-----w- c:\users\Steew\AppData\Roaming\Skype
2010-04-27 16:15 . 2010-03-26 14:00 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-04-21 13:42 . 2010-03-28 20:03 -------- d-----w- c:\users\Steew\AppData\Roaming\uTorrent
2010-04-20 21:59 . 2010-03-26 14:06 -------- d-----w- c:\program files\ASUS
2010-04-20 20:12 . 2010-03-26 21:20 -------- d-----w- c:\users\Steew\AppData\Roaming\FileZilla
2010-04-20 19:05 . 2010-03-26 00:02 -------- d-----w- c:\program files\ESET
2010-04-19 04:23 . 2010-03-26 13:40 55080 ----a-w- c:\users\Steew\AppData\Local\GDIPFONTCACHEV1.DAT
2010-04-17 01:18 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2010-04-17 01:18 . 2010-04-17 01:18 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2010-04-16 15:26 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2010-04-16 15:26 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2010-04-07 11:35 . 2010-04-07 11:35 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2010-04-04 16:12 . 2010-03-26 01:23 -------- d-----w- c:\users\Steew\AppData\Roaming\TS3Client
2010-04-02 11:10 . 2010-03-26 01:12 -------- d-----w- c:\program files\Miranda IM
2010-04-01 14:47 . 2010-03-27 10:30 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-04-01 14:44 . 2010-03-27 10:30 2434856 ----a-w- c:\windows\system32\pbsvc_bc2.exe
2010-03-30 09:09 . 2010-03-30 09:09 45056 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimwmp.dll
2010-03-30 09:09 . 2010-03-30 09:09 49152 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Components\nprpffbrowserrecordext.dll
2010-03-30 09:09 . 2010-03-30 09:09 45056 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimswf.dll
2010-03-30 09:09 . 2010-03-30 09:09 45056 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimrp.dll
2010-03-30 09:09 . 2010-03-30 09:09 45056 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimqt.dll
2010-03-30 09:09 . 2010-03-30 09:09 40960 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Chrome\Hook\rpchromebrowserrecordhelper.dll
2010-03-30 09:09 . 2010-03-30 09:09 341600 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
2010-03-30 09:09 . 2010-03-30 09:09 308808 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Common\rpmainbrowserrecordplugin.dll
2010-03-30 09:09 . 2010-03-30 09:09 14848 ----a-w- c:\programdata\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
2010-03-30 09:09 . 2010-03-30 09:08 -------- d-----w- c:\program files\Common Files\Real
2010-03-30 09:08 . 2010-03-30 09:08 -------- d-----w- c:\program files\Real
2010-03-30 09:08 . 2010-03-30 09:08 -------- d-----w- c:\program files\Common Files\xing shared
2010-03-30 09:08 . 2010-03-30 09:08 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-03-30 09:08 . 2010-03-30 09:08 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-03-30 01:17 . 2010-03-25 23:40 -------- d-----w- c:\programdata\NVIDIA
2010-03-28 21:41 . 2010-03-28 21:41 -------- d-----w- c:\program files\PowerISO
2010-03-28 21:09 . 2010-03-28 20:59 -------- d-----w- c:\users\Steew\AppData\Roaming\DAEMON Tools Lite
2010-03-28 21:05 . 2010-03-28 21:05 -------- d-----w- c:\users\Steew\AppData\Roaming\DAEMON Tools Pro
2010-03-28 21:05 . 2010-03-28 21:05 -------- d-----w- c:\users\Steew\AppData\Roaming\DAEMON Tools
2010-03-28 21:04 . 2010-03-28 21:04 -------- d-----w- c:\programdata\DAEMON Tools Lite
2010-03-28 21:04 . 2010-03-28 21:04 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-03-28 20:59 . 2010-03-28 20:59 717296 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-03-28 20:52 . 2010-03-28 20:52 -------- d-----w- c:\users\Steew\AppData\Roaming\GameRanger
2010-03-28 20:08 . 2010-03-28 20:08 -------- d-----w- c:\program files\uTorrent
2010-03-28 10:54 . 2010-03-28 10:54 -------- d-----w- c:\program files\Microsoft.NET
2010-03-28 00:34 . 2010-03-28 00:34 -------- d-----w- c:\program files\Play+Smile
2010-03-27 22:57 . 2010-03-27 22:57 -------- d-----w- c:\program files\YomaTools
2010-03-27 18:38 . 2010-03-27 18:38 -------- d-----w- c:\program files\Bohemia Interactive
2010-03-27 10:23 . 2010-03-27 10:23 -------- d--h--r- c:\users\Steew\AppData\Roaming\SecuROM
2010-03-27 09:45 . 2010-03-27 09:45 -------- d-----w- c:\program files\Electronic Arts
2010-03-27 09:38 . 2010-03-27 01:08 -------- d-----w- c:\users\Steew\AppData\Roaming\BSplayer
2010-03-27 01:08 . 2010-03-27 01:08 -------- d-----w- c:\users\Steew\AppData\Roaming\BSplayer Pro
2010-03-27 01:07 . 2010-03-27 01:07 -------- d-----w- c:\program files\Webteh
2010-03-26 21:20 . 2010-03-26 21:20 -------- d-----w- c:\program files\FileZilla FTP Client
2010-03-26 20:08 . 2010-03-26 20:08 -------- d-----w- c:\users\Steew\AppData\Roaming\ArcSoft
2010-03-26 20:07 . 2010-03-26 20:07 -------- d-----w- c:\program files\Common Files\ArcSoft
2010-03-26 20:07 . 2010-03-26 20:07 -------- d-----w- c:\program files\ArcSoft
2010-03-26 20:05 . 2010-03-26 20:05 -------- d-----w- c:\program files\Common Files\PAC207
2010-03-26 20:05 . 2010-03-26 20:05 -------- d-----w- c:\program files\Trust
2010-03-26 19:08 . 2010-03-26 19:08 -------- d-----w- c:\program files\A4Tech
2010-03-26 14:02 . 2010-03-26 14:00 -------- d-----w- c:\program files\Realtek
2010-03-26 14:00 . 2010-03-26 14:00 319456 ----a-w- c:\windows\DIFxAPI.dll
2010-03-26 14:00 . 2010-03-26 14:00 315392 ----a-w- c:\windows\HideWin.exe
2010-03-26 13:51 . 2010-03-26 13:51 -------- d-----w- c:\program files\Intel
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Šablony
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Plocha
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Oblíbené položky
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Nabídka Start
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Dokumenty
2010-03-26 13:37 . 2010-03-26 13:37 -------- d-sh--we c:\programdata\Data aplikací
2010-03-26 01:30 . 2010-03-26 01:30 56 ---ha-w- c:\programdata\ezsidmv.dat
2010-03-26 01:29 . 2010-03-26 01:29 -------- d-----r- c:\program files\Skype
2010-03-26 01:29 . 2010-03-26 01:29 -------- d-----w- c:\program files\Common Files\Skype
2010-03-26 01:29 . 2010-03-26 01:29 -------- d-----w- c:\programdata\Skype
2010-03-26 01:20 . 2010-03-26 01:20 -------- d-----w- c:\programdata\boost_interprocess
2010-03-26 00:02 . 2010-03-26 00:04 512096 ----a-w- c:\windows\system32\drivers\amon.sys
2010-03-26 00:02 . 2010-03-26 00:04 298104 ----a-w- c:\windows\system32\imon.dll
2010-03-26 00:02 . 2010-03-26 00:04 15424 ----a-w- c:\windows\system32\drivers\nod32drv.sys
2010-03-25 23:40 . 2010-03-25 23:35 -------- d-----w- c:\programdata\Comodo
2010-03-25 23:35 . 2010-03-25 23:35 74328 ----a-w- c:\windows\system32\drivers\inspect.sys
2010-03-25 23:35 . 2010-03-25 23:35 29520 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2010-03-25 23:35 . 2010-03-25 23:35 171552 ----a-w- c:\windows\system32\guard32.dll
2010-03-25 23:35 . 2010-03-25 23:35 130960 ----a-w- c:\windows\system32\drivers\cmdguard.sys
2010-03-25 23:35 . 2010-03-25 23:35 -------- d-----w- c:\program files\COMODO
2010-03-25 23:30 . 2010-03-25 23:30 -------- d-----w- c:\program files\My Company Name
2010-03-25 23:17 . 2010-03-26 13:59 -------- d-----w- c:\program files\Common Files\InstallShield
2010-03-25 23:11 . 2010-03-26 13:39 680 ----a-w- c:\users\Steew\AppData\Local\d3d9caps.dat
2010-03-22 13:52 . 2010-03-27 01:09 697690 ----a-w- c:\users\Steew\AppData\Roaming\BSplayer\AC3 Filter\unins000.exe
2010-02-24 08:16 . 2010-03-26 00:55 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-23 16:01 . 2010-03-27 01:09 1185871 ----a-w- c:\users\Steew\AppData\Roaming\BSplayer\FFDShow\unins000.exe
2010-02-23 15:00 . 2010-03-27 01:09 42288 ----a-w- c:\users\Steew\AppData\Roaming\BSplayer\Haali media splitter\uninstall.exe
2010-02-20 23:06 . 2010-03-26 18:56 24064 ----a-w- c:\windows\system32\nshhttp.dll
2010-02-20 23:05 . 2010-03-26 18:56 30720 ----a-w- c:\windows\system32\httpapi.dll
2010-02-20 20:53 . 2010-03-26 18:56 411648 ----a-w- c:\windows\system32\drivers\http.sys
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-10 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-10 2153472]
"Skype"="c:\program files\Skype\\Phone\Skype.exe" [2010-04-06 26102056]
"Steam"="c:\program files\Steam\Steam.exe" [2010-04-26 1238352]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-12-29 687560]
"Center Agent"="c:\program files\Genius TVGo DVB-T03\HyperMediaCenter\DTVR\Scheduled.exe" [2008-04-14 1519616]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"RtHDVCpl"="RtHDVCpl.exe" [2008-05-20 6144000]
"Skytel"="Skytel.exe" [2007-11-20 1826816]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2010-03-25 1800464]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2010-03-26 949376]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2007-05-15 204800]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2009-11-09 180224]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-03-11 13527584]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-03-11 92704]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-03-30 202256]
"Launch LGDCore"="c:\program files\Logitech\G-series Software\LGDCore.exe" [2006-03-06 1122304]
"Launch LCDMon"="c:\program files\Logitech\G-series Software\LCDMon.exe" [2006-03-06 497152]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2010-03-30 1820040]
c:\users\Steew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Remote Control.lnk - c:\program files\Genius TVGo DVB-T03\Genius TVGo DVB-T03 Utilities\AFRCtl.exe [2010-4-3 81920]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\guard32.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):41,15,14,61,7a,dd,ca,01
R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-03-28 717296]
R3 PAC207;Trust WB-1400T Webcam;c:\windows\system32\DRIVERS\PFC027.SYS [2007-05-14 508288]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2010-03-25 130960]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2010-03-25 29520]
S1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [2010-03-26 15424]
S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1107336]
S2 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2010-02-11 172328]
S2 TunngleService;TunngleService;c:\program files\Tunngle\TnglCtrl.exe [2010-03-23 704760]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [2009-09-16 27136]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
LSP: c:\windows\system32\imon.dll
FF - ProfilePath - c:\users\Steew\AppData\Roaming\Mozilla\Firefox\Profiles\9o57y87o.default\
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - component: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-29 15:27
Windows 6.0.6002 Service Pack 2 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_USERS\S-1-5-21-62988530-4219308771-1675412009-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
"??"=hex:a2,02,85,26,5c,b4,96,38,16,05,72,6f,87,49,18,d8,ae,98,25,4b,60,c1,2e,
74,d3,3a,f0,64,01,5d,5a,0a,b7,c9,e8,37,dc,cb,dc,9d,13,6a,0a,96,c7,33,d5,fc,\
"??"=hex:d5,1a,22,f0,84,c1,52,33,85,a1,43,ea,fd,a0,56,c6
[HKEY_USERS\S-1-5-21-62988530-4219308771-1675412009-1000\Software\SecuROM\License information*]
"datasecu"=hex:87,1f,d6,84,17,c5,ff,83,15,01,d9,66,17,c6,f6,07,07,20,0e,2a,e1,
fe,2c,8a,ae,cb,75,87,eb,60,f9,3f,25,80,e2,12,fa,eb,70,5d,c9,2f,79,62,27,fd,\
"rkeysecu"=hex:08,28,4f,72,b3,a0,ba,fc,f5,79,91,8d,3b,fb,50,c5
.
Celkový čas: 2010-04-29 15:29:57
ComboFix-quarantined-files.txt 2010-04-29 13:29
ComboFix2.txt 2010-04-20 19:19
Před spuštěním: Volných bajtů: 104 731 684 864
Po spuštění: Volných bajtů: 104 755 425 280
- - End Of File - - 41C48451187C79EF3B5F649F7FDB273D
Re: Padá mi internet
ještě bych chtěl dodat, že těsně před spadnutím tzn sekunda - 2 mi vzroste ztráta packetů. Nevím jestli je to nějak důležité,ale přece jenom to píšu.
-
Rudy
- Site Admin
- Příspěvky: 118311
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Padá mi internet
Log vypadá čistý. Výpadky paketů znamenají rozpad spojení. Konaktujte providera.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Padá mi internet
Problém vyřešen, Operátor mi poradil, abych přepojil kabel do 4. portu na routeru 
eště teď drbu nad tím,jaká kravina to byla 
takže :
eště teď drbu nad tím,jaká kravina to byla takže :-
Rudy
- Site Admin
- Příspěvky: 118311
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Padá mi internet
Někdy se podobné věci stávají. zamykám.
zamykám.Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?