Neustálý samovolný restart

[Caroprd111]

Přejmenujte Gmer na cokoliv.com a spusťte ho v nouzovém režimu.

[bartmilano]

Dobrý večer(ráno),tak po návratu z práce jsem našel hlášku "Gmer hasn´t found any system modification",doběhl v nouzovém režimu,log je prázdný.

[Caroprd111]

Jak to vypadá s PC

[bartmilano]

PC teď běží krásně,nemám sice na něj moc času,...něco tam ale pořád je,i když zatím nezjišťuju žádný problém,pořád testuju avg-čkem,našel před chvílí 2infekce(viz níže),přesunul do trezoru...ještě dotaz,stačí prozkoumat pomocí AVG i paměťové karty,pokud byly v minulosti připojeny s infikovaným PC?

"Název objektu";"C:\_OTL\MovedFiles\05012010_150938\C_Documents and Settings\r\ylvicryt.exe"
"Název detekce";"Trojský kůň Generic17.BNIK"
"Typ objektu";"Soubor"
"Typ SDK";"Jádro"
"Výsledek";"Přesunuto do trezoru"
"Historie akcí";"Přesunuto do virového trezoru"


"Název objektu";"C:\_OTL\MovedFiles\05012010_150938\C_WINDOWS\system32\ylvicryt.exe"
"Název detekce";"Trojský kůň Generic17.BNIK"
"Typ objektu";"Soubor"
"Typ SDK";"Jádro"
"Výsledek";"Přesunuto do trezoru"
"Historie akcí";"Přesunuto do virového trezoru"

[Caroprd111]

Paměťové karty prohledat můžete. Soubory co nachází AVG jsou neškodné (záloha OTL).


Stáhněte TFC http://oldtimer.geekstogo.com/TFC.exe

• Spusťte.
• Klikněte na "Start". Potvrďte hlášku kliknutím na "Ok" (Bude následovat restart)

Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe

• Spusťte.
• Klikněte na "CleanUp!". Potvrďte hlášky kliknutím na "Yes" (Bude následovat restart)

Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478

• Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.
  
  Záložka Čistič
• Dejte analyzovat, po dokončení dejte Spustit Ccleaner.
  
  Záložka Registry
• Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
  OK Zavřít

Dejte nový log z RSIT.

[bartmilano]

všechno jsem instaloval a PC pročistil,na počítači neshledávám zatím žádný problém,jen ten RSIT prostě nedojede a log neudělá.Dal jsem název erroru do vyhledávače(...non-Array variable),a nejsem sám,i na toto fórum vede odkaz.Pátral jsem,no zřejmě to má na svědomí nějaký poškozený soubor Windows,snad přeinstalovat servis pack,netuším a moc do toho nevidím.mockrát děkuji za léčení.

[Caroprd111]

Dejte log z DDS: http://www.viry.cz/forum/viewtopic.php?f=24&t=81946

[bartmilano]

DDS (Ver_10-03-17.01) - NTFSx86
Run by r at 7:18:42,39 on st 05. 05. 2010
Internet Explorer: 8.0.6001.18702
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.1.1029.18.1015.440 [GMT 2:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
svchost.exe
C:\WINDOWS\system32\astsrv.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\r\Plocha\dds.pif

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.seznam.cz/
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
uURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\data aplikací\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
StartupFolder: c:\docume~1\r\nabdka~1\programy\posput~1\OPENOF~1.LNK -
StartupFolder: c:\docume~1\alluse~1\nabdka~1\programy\posput~1\BLUETO~1.LNK -
IE: Free YouTube Download - c:\documents and settings\r\data aplikací\dvdvideosoftiehelpers\youtubedownload.htm
IE: Free YouTube to Mp3 Converter - c:\documents and settings\r\data aplikací\dvdvideosoftiehelpers\youtubetomp3.htm
IE: WikiKomentáře Google... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll
Notify: avgrsstarter - avgrsstx.dll
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

============= SERVICES / DRIVERS ===============

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2010-4-15 216200]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2010-4-15 29512]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2010-4-15 242896]
R1 eusk2par;Aladdin SmartKey Parallel Driver;c:\windows\system32\drivers\eusk2par.sys [2010-4-4 25680]
R2 avg9emc;AVG Free E-mail Scanner;c:\program files\avg\avg9\avgemc.exe [2010-4-15 916760]
R2 avg9wd;AVG Free WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2010-4-15 308064]
R3 GTIPCI21;GTIPCI21;c:\windows\system32\drivers\gtipci21.sys [2009-2-10 88192]
R3 PSched;Plánovač paketů technologie QoS;c:\windows\system32\drivers\psched.sys [2004-8-18 69120]
S2 ASTSRV;Nalpeiron Licensing Service;c:\windows\system32\ASTSRV.EXE [2010-3-22 57344]
S2 gupdate;Služba Google Update (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-15 135664]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg9\toolbar\ToolbarBroker.exe [2010-4-15 369920]
S3 eusk3usb;SmartKey 3 USB;c:\windows\system32\drivers\eusk3usb.sys [2010-4-4 43968]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2010-5-1 38224]

============== File Associations ===============

.txt=

=============== Created Last 30 ================


==================== Find3M ====================

2010-05-04 19:49:46 78250 ----a-w- c:\windows\system32\perfc005.dat
2010-05-04 19:49:46 429262 ----a-w- c:\windows\system32\perfh005.dat
2010-04-24 21:53:46 116022 ----a-w- c:\windows\fonts\AdobeFnt.lst
2010-03-31 19:30:37 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-03-28 23:31:55 111530 ----a-w- c:\windows\system32\FeIF82-_SUP.exe
2010-03-10 06:17:40 420352 ----a-w- c:\windows\system32\vbscript.dll
2010-02-25 06:18:56 916480 ----a-w- c:\windows\system32\wininet.dll
2010-02-16 19:08:57 2148352 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-02-16 19:08:57 2026496 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-02-14 23:43:39 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-02-12 10:03:03 293376 ------w- c:\windows\system32\browserchoice.exe
2010-02-12 04:35:01 100864 ----a-w- c:\windows\system32\6to4svc.dll

============= FINISH: 7:19:25,53 ===============

[Caroprd111]

V logu nevidím firewall, doinstalujte Přehled: http://www.viry.cz/forum/viewtopic.php?f=41&t=6523

[bartmilano]

DDS (Ver_10-03-17.01) - NTFSx86
Run by r at 18:00:47,96 on st 05. 05. 2010
Internet Explorer: 8.0.6001.18702
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.1.1029.18.1015.488 [GMT 2:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: Sunbelt Personal Firewall *enabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
svchost.exe
C:\WINDOWS\system32\astsrv.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\r\Plocha\dds.pif

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.seznam.cz/
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
uURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\data aplikací\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
StartupFolder: c:\docume~1\r\nabdka~1\programy\posput~1\OPENOF~1.LNK -
StartupFolder: c:\docume~1\alluse~1\nabdka~1\programy\posput~1\BLUETO~1.LNK -
IE: Free YouTube Download - c:\documents and settings\r\data aplikací\dvdvideosoftiehelpers\youtubedownload.htm
IE: Free YouTube to Mp3 Converter - c:\documents and settings\r\data aplikací\dvdvideosoftiehelpers\youtubetomp3.htm
IE: WikiKomentáře Google... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll
Notify: avgrsstarter - avgrsstx.dll
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

============= SERVICES / DRIVERS ===============

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2010-4-15 216200]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2010-4-15 29512]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2010-4-15 242896]
R1 eusk2par;Aladdin SmartKey Parallel Driver;c:\windows\system32\drivers\eusk2par.sys [2010-4-4 25680]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [2010-5-5 270888]
R1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [2008-6-21 66600]
R2 avg9emc;AVG Free E-mail Scanner;c:\program files\avg\avg9\avgemc.exe [2010-4-15 916760]
R2 avg9wd;AVG Free WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2010-4-15 308064]
R2 SbPF.Launcher;SbPF.Launcher;c:\program files\sunbelt software\personal firewall\SbPFLnch.exe [2008-10-31 95528]
R2 SPF4;Sunbelt Personal Firewall 4;c:\program files\sunbelt software\personal firewall\SbPFSvc.exe [2008-10-31 1365288]
R3 GTIPCI21;GTIPCI21;c:\windows\system32\drivers\gtipci21.sys [2009-2-10 88192]
R3 PSched;Plánovač paketů technologie QoS;c:\windows\system32\drivers\psched.sys [2004-8-18 69120]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [2010-5-5 65576]
S2 ASTSRV;Nalpeiron Licensing Service;c:\windows\system32\ASTSRV.EXE [2010-3-22 57344]
S2 gupdate;Služba Google Update (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-15 135664]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg9\toolbar\ToolbarBroker.exe [2010-4-15 369920]
S3 eusk3usb;SmartKey 3 USB;c:\windows\system32\drivers\eusk3usb.sys [2010-4-4 43968]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2010-5-1 38224]

============== File Associations ===============

.txt=

=============== Created Last 30 ================

2010-05-05 15:48:56 65576 ----a-w- c:\windows\system32\drivers\SbFwIm.sys
2010-05-05 15:48:56 270888 ----a-r- c:\windows\system32\drivers\SbFw.sys
2010-05-05 15:48:47 0 d-----w- c:\program files\Sunbelt Software
2010-05-04 22:30:28 218 ----a-w- c:\documents and settings\r\.recently-used.xbel
2010-05-04 22:29:04 0 d-----w- c:\docume~1\r\dataap~1\inkscape
2010-05-04 20:11:33 0 d-----w- c:\program files\CCleaner
2010-05-04 18:30:17 0 d-----w- c:\windows\xsl
2010-05-04 09:19:40 0 d-----w- c:\docume~1\r\dataap~1\DVDVideoSoftIEHelpers
2010-05-04 09:19:09 0 d-----w- c:\program files\DVDVideoSoft
2010-05-04 09:19:09 0 d-----w- c:\program files\common files\DVDVideoSoft
2010-05-03 07:09:36 0 ----a-w- c:\documents and settings\r\defogger_reenable
2010-05-01 16:49:22 0 d-----w- c:\windows\system32\wbem\Repository
2010-05-01 16:31:09 0 d-----w- C:\abcd.com
2010-05-01 08:54:47 0 d-----w- c:\program files\trend micro
2010-05-01 06:07:52 0 d-----w- c:\docume~1\r\dataap~1\Malwarebytes
2010-05-01 06:07:35 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-05-01 06:07:34 0 d-----w- c:\docume~1\alluse~1\dataap~1\Malwarebytes
2010-05-01 06:07:32 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-05-01 06:07:32 0 d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-05-01 01:51:37 0 d-----w- c:\program files\Spybot - Search & Destroy
2010-05-01 01:51:37 0 d-----w- c:\docume~1\alluse~1\dataap~1\Spybot - Search & Destroy
2010-05-01 00:12:47 0 d-sha-r- C:\cmdcons
2010-05-01 00:10:53 77312 ----a-w- c:\windows\MBR.exe
2010-05-01 00:10:53 256512 ----a-w- c:\windows\PEV.exe
2010-04-30 16:27:40 390144 ----a-w- c:\windows\system32\cmd.execf
2010-04-27 13:01:48 15360 -c--a-w- c:\windows\system32\dllcache\ctfmon.exe
2010-04-27 13:01:48 15360 ----a-w- c:\windows\system32\ctfmon.exe
2010-04-27 12:58:54 0 d-----w- c:\program files\UPM
2010-04-27 01:00:38 0 d-----w- c:\program files\MSXML 4.0
2010-04-26 22:48:27 18944 ----a-w- c:\windows\system32\BORLNDMM.DLL
2010-04-26 14:59:59 0 d-----w- c:\windows\SxsCaPendDel
2010-04-26 12:13:44 0 d-----w- c:\docume~1\r\dataap~1\Serif
2010-04-25 20:38:38 0 d-----w- c:\program files\common files\SWF Studio
2010-04-24 21:56:35 176 ----a-w- c:\windows\KPCMS.INI
2010-04-24 21:56:34 72192 ----a-w- c:\windows\KPCP32.DLL
2010-04-24 21:56:34 24576 ----a-w- c:\windows\KPFP32.DLL
2010-04-24 21:56:34 20992 ----a-w- c:\windows\KPSYS32.DLL
2010-04-24 21:56:34 12800 ----a-w- c:\windows\KPSHARP.DLL
2010-04-24 21:56:34 12800 ----a-w- c:\windows\KPSCALE.DLL
2010-04-20 15:47:55 0 d-----w- c:\documents and settings\r\Library
2010-04-20 15:47:55 0 d-----w- c:\docume~1\r\dataap~1\com.adobe.ExMan
2010-04-19 18:51:16 0 d-----w- c:\documents and settings\r\kbpki
2010-04-19 18:48:35 0 d-----w- c:\documents and settings\r\KBCertifikat
2010-04-17 20:55:27 0 d-----w- c:\program files\IObit
2010-04-17 20:55:27 0 d-----w- c:\docume~1\r\dataap~1\IObit
2010-04-15 19:18:34 0 d-----w- c:\docume~1\alluse~1\dataap~1\FileCure
2010-04-15 17:20:11 73728 ----a-w- c:\windows\system32\javacpl.cpl
2010-04-15 17:20:11 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-04-15 11:47:19 0 d-----w- C:\$AVG
2010-04-15 11:47:08 242896 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-04-15 11:47:08 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-04-15 11:47:03 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-04-15 11:46:56 0 d-----w- c:\windows\system32\drivers\Avg
2010-04-15 11:46:53 0 d-----w- c:\docume~1\alluse~1\dataap~1\AVG Security Toolbar
2010-04-15 11:46:42 0 d-----w- c:\program files\AVG
2010-04-15 11:46:42 0 d-----w- c:\docume~1\alluse~1\dataap~1\avg9
2010-04-15 11:38:30 0 d-----w- C:\AVGTemp
2010-04-15 01:25:39 221184 ----a-w- c:\windows\system32\wmpns.dll
2010-04-11 17:47:45 0 d-----w- c:\program files\TurboFloorPlan-9.0.0
2010-04-10 06:07:31 0 d-----w- c:\program files\TurboFloorPlan-1.0.0

==================== Find3M ====================

2010-05-04 19:49:46 78250 ----a-w- c:\windows\system32\perfc005.dat
2010-05-04 19:49:46 429262 ----a-w- c:\windows\system32\perfh005.dat
2010-04-24 21:53:46 116022 ----a-w- c:\windows\fonts\AdobeFnt.lst
2010-03-31 19:30:37 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-03-28 23:31:55 111530 ----a-w- c:\windows\system32\FeIF82-_SUP.exe
2010-03-10 06:17:40 420352 ----a-w- c:\windows\system32\vbscript.dll
2010-02-25 06:18:56 916480 ----a-w- c:\windows\system32\wininet.dll
2010-02-16 19:08:57 2148352 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-02-16 19:08:57 2026496 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-02-14 23:43:39 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-02-12 10:03:03 293376 ------w- c:\windows\system32\browserchoice.exe
2010-02-12 04:35:01 100864 ----a-w- c:\windows\system32\6to4svc.dll

============= FINISH: 18:02:19,43 ===============

[Caroprd111]

Log je v pořádku.

[bartmilano]

Děkuji vám moc!

[Caroprd111]

Nemáte zač