pC suspenzor

[Bretal]

myslel jsi vlevo dole, ne - já sem se vpravo mohl uhledat :-))

takže teď se pustím do toho jak si mi to psal, akurát eště nevím jak na to hitači

[Reklama]

[Bretal]

tady je to z toho komba
ComboFix 08-01-30.6 - Breta 2008-01-30 14:36:23.1 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.1.1029.18.2917 [GMT 1:00]
Running from: C:\Documents and Settings\Breta\Plocha\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Data aplikací\Microsoft\Network\Downloader\qmgr0.dat
C:\Documents and Settings\All Users\Data aplikací\Microsoft\Network\Downloader\qmgr1.dat

----- BITS: Possible infected sites -----

hxxp://au.download.windowsupdate.
.
((((((((((((((((((((((((( Files Created from 2007-12-28 to 2008-01-30 )))))))))))))))))))))))))))))))
.

2008-01-30 14:14 . 2008-01-30 14:26 118 --a------ C:\WINDOWS\wcx_ftp.ini
2008-01-30 14:13 . 2008-01-30 14:13 <DIR> d-------- C:\totalcmd
2008-01-30 14:13 . 2008-01-30 14:29 674 --a------ C:\WINDOWS\wincmd.ini
2008-01-30 14:13 . 2007-09-14 07:02 545 --a------ C:\WINDOWS\UC.PIF
2008-01-30 14:13 . 2007-09-14 07:02 545 --a------ C:\WINDOWS\RAR.PIF
2008-01-30 14:13 . 2007-09-14 07:02 545 --a------ C:\WINDOWS\PKZIP.PIF
2008-01-30 14:13 . 2007-09-14 07:02 545 --a------ C:\WINDOWS\PKUNZIP.PIF
2008-01-30 14:13 . 2007-09-14 07:02 545 --a------ C:\WINDOWS\NOCLOSE.PIF
2008-01-30 14:13 . 2007-09-14 07:02 545 --a------ C:\WINDOWS\LHA.PIF
2008-01-30 14:13 . 2007-09-14 07:02 545 --a------ C:\WINDOWS\ARJ.PIF
2008-01-29 19:52 . 2008-01-29 19:52 <DIR> d-------- C:\Program Files\Common Files\ACD Systems
2008-01-29 19:52 . 2008-01-29 19:52 <DIR> d-------- C:\Program Files\ACD Systems
2008-01-29 19:52 . 2008-01-29 19:52 <DIR> d-------- C:\Documents and Settings\Breta\Data aplikací\ACD Systems
2008-01-29 19:52 . 2008-01-29 19:52 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\ACD Systems
2008-01-29 19:50 . 2008-01-29 19:50 <DIR> d-------- C:\Program Files\AAA Photo Album
2008-01-29 19:46 . 2006-09-28 16:05 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll
2008-01-29 19:46 . 2006-09-28 16:04 68,888 --a------ C:\WINDOWS\system32\xinput1_3.dll
2008-01-29 19:45 . 2008-01-29 19:45 <DIR> d-------- C:\WINDOWS\system32\AGEIA
2008-01-29 19:45 . 2008-01-29 19:45 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-01-29 19:45 . 2008-01-29 19:45 <DIR> d-------- C:\Program Files\AGEIA Technologies
2008-01-29 19:38 . 2008-01-30 09:40 <DIR> d-------- C:\Program Files\Common Files\Panda Software
2008-01-29 19:34 . 2008-01-29 19:34 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\MailFrontier
2008-01-29 19:34 . 2008-01-30 14:37 434,208 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-01-29 19:34 . 2008-01-29 19:34 75,932 --a------ C:\WINDOWS\system32\drivers\klick.dat
2008-01-29 19:34 . 2007-06-21 21:54 75,248 --a------ C:\WINDOWS\zllsputility.exe
2008-01-29 19:34 . 2008-01-29 19:34 74,396 --a------ C:\WINDOWS\system32\drivers\klin.dat
2008-01-29 19:34 . 2004-04-27 04:40 11,264 --a------ C:\WINDOWS\system32\SpOrder.dll
2008-01-29 19:34 . 2008-01-30 13:56 7,532 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2008-01-29 19:34 . 2008-01-30 10:05 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2008-01-29 19:31 . 2008-01-30 14:10 <DIR> d-------- C:\WINDOWS\Internet Logs
2008-01-29 19:27 . 2008-01-29 19:27 <DIR> d-------- C:\Program Files\Alwil Software
2008-01-29 19:27 . 2003-03-18 22:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
2008-01-29 19:27 . 2007-12-04 14:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe
2008-01-29 19:27 . 2004-01-09 11:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx
2008-01-29 19:27 . 2007-12-04 13:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr
2008-01-29 19:27 . 2007-12-04 15:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2008-01-29 19:27 . 2007-12-04 15:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2008-01-29 19:27 . 2007-12-04 15:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2008-01-29 19:27 . 2007-12-04 15:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2008-01-29 19:27 . 2007-12-04 15:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2008-01-29 16:44 . 2008-01-29 16:44 <DIR> d-------- C:\ADOBEAPP
2008-01-29 16:29 . 2008-01-29 16:29 <DIR> d-------- C:\WINDOWS\system32\COLOR
2008-01-29 16:29 . 1996-05-06 17:53 6,144 --a------ C:\WINDOWS\system32\W95FIBER.DLL
2008-01-29 16:29 . 2008-01-29 16:29 573 --a------ C:\WINDOWS\WININI.QTW
2008-01-29 16:29 . 2008-01-29 16:29 231 --a------ C:\WINDOWS\SYSINI.QTW
2008-01-29 16:29 . 2008-01-29 16:29 37 --a------ C:\WINDOWS\QTW.INI
2008-01-29 16:29 . 2008-01-29 16:30 30 --a------ C:\WINDOWS\RESULT.QTW
2008-01-29 16:24 . 2008-01-29 16:24 <DIR> d-------- C:\Documents and Settings\Breta\WINDOWS
2008-01-29 16:24 . 1997-01-22 13:13 298,496 --a------ C:\WINDOWS\unin0405.exe
2008-01-28 20:50 . 2008-01-28 20:50 <DIR> d-------- C:\Program Files\Codec Pack - All In 1
2008-01-28 20:50 . 2008-01-28 20:49 737,280 --a------ C:\WINDOWS\iun6002.exe
2008-01-28 20:48 . 2008-01-28 20:51 <DIR> d-------- C:\Program Files\Mv2Player
2008-01-28 20:45 . 2008-01-28 20:45 <DIR> d-------- C:\WINDOWS\Downloaded Installations
2008-01-28 20:41 . 2008-01-28 20:41 <DIR> d-------- C:\Program Files\Common Files\Ahead
2008-01-28 20:41 . 2008-01-28 20:41 <DIR> d-------- C:\Program Files\Ahead
2008-01-28 20:41 . 2001-07-06 14:41 569,344 --a------ C:\WINDOWS\system32\imagr5.dll
2008-01-28 20:41 . 2001-07-06 12:44 544,768 --a------ C:\WINDOWS\system32\imagx5.dll
2008-01-28 20:41 . 2001-07-06 18:24 283,920 --a------ C:\WINDOWS\system32\ImagXpr5.dll
2008-01-28 20:41 . 2001-07-09 11:50 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe
2008-01-28 20:41 . 2004-03-03 21:30 125,184 --a------ C:\WINDOWS\system32\drivers\imagesrv.sys
2008-01-28 20:41 . 2000-06-26 11:45 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll
2008-01-28 20:41 . 2001-06-26 08:15 38,912 --a------ C:\WINDOWS\system32\picn20.dll
2008-01-28 20:41 . 2004-03-03 21:30 5,504 --a------ C:\WINDOWS\system32\drivers\imagedrv.sys
2008-01-28 20:37 . 2003-06-19 01:31 17,920 --a------ C:\WINDOWS\system32\mdimon.dll
2008-01-28 20:37 . 2008-01-28 20:37 390 --a------ C:\WINDOWS\ODBC.INI
2008-01-28 20:36 . 2008-01-29 16:28 <DIR> d-------- C:\WINDOWS\SHELLNEW
2008-01-28 20:36 . 2008-01-28 20:36 <DIR> d-------- C:\Program Files\Microsoft.NET
2008-01-26 21:32 . 2007-05-14 10:12 3,526,464 --a------ C:\WINDOWS\system32\drivers\RtHDMI.sys
2008-01-26 21:32 . 2007-01-16 10:39 1,191,936 --a------ C:\WINDOWS\RtkUpd.exe
2008-01-26 20:55 . 2008-01-26 20:55 <DIR> d-------- C:\drivers
2008-01-26 20:05 . 2008-01-26 20:05 <DIR> d-------- C:\Documents and Settings\Breta\Data aplikací\ATI
2008-01-26 20:05 . 2008-01-26 20:05 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\ATI
2008-01-25 09:13 . 2008-01-26 20:14 <DIR> d--h----- C:\WINDOWS\$hf_mig$
2008-01-25 00:27 . 2008-01-25 00:27 <DIR> d-------- C:\Documents and Settings\LocalService\Data aplikací\AVG7
2008-01-25 00:27 . 2008-01-25 00:27 <DIR> d-------- C:\Documents and Settings\Breta\Data aplikací\AVG7
2008-01-25 00:27 . 2008-01-25 00:27 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll
2008-01-25 00:27 . 2008-01-25 00:27 9,216 --a------ C:\WINDOWS\system32\avgwlntf.dll
2008-01-25 00:26 . 2008-01-25 00:26 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Grisoft
2008-01-25 00:26 . 2008-01-25 00:27 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\avg7
2008-01-25 00:25 . 2008-01-25 00:25 <DIR> d-------- C:\Program Files\ZipGenius 6
2008-01-25 00:25 . 2008-01-26 20:55 <DIR> d-------- C:\Documents and Settings\Breta\Data aplikací\ZipGenius
2008-01-25 00:24 . 2008-01-25 00:24 <DIR> d-------- C:\Program Files\K-Lite Codec Pack
2008-01-25 00:23 . 2008-01-25 00:23 <DIR> d-------- C:\Program Files\IrfanView
2008-01-25 00:21 . 2008-01-25 00:21 <DIR> d-------- C:\Program Files\Common Files\Adobe
2008-01-25 00:19 . 2008-01-25 00:19 <DIR> d---s---- C:\Documents and Settings\Breta\UserData
2008-01-25 00:15 . 2008-01-25 00:15 0 --a------ C:\WINDOWS\ativpsrm.bin
2008-01-25 00:06 . 2008-01-26 20:02 <DIR> d-------- C:\Program Files\ATI Technologies
2008-01-25 00:06 . 2007-12-20 21:05 593,920 --------- C:\WINDOWS\system32\ati2sgag.exe
2008-01-25 00:05 . 2008-01-25 00:05 <DIR> d-------- C:\WINDOWS\ATI
2008-01-25 00:03 . 2008-01-25 00:03 <DIR> d-------- C:\WINDOWS\system32\Lang
2008-01-25 00:03 . 2008-01-25 00:03 940,794 --a------ C:\WINDOWS\system32\LoopyMusic.wav
2008-01-25 00:03 . 2008-01-25 00:03 146,650 --a------ C:\WINDOWS\system32\BuzzingBee.wav
2008-01-25 00:01 . 2008-01-25 10:41 <DIR> d-------- C:\WINDOWS\system32\RTCOM
2008-01-25 00:01 . 2004-08-17 15:49 130,048 --a------ C:\WINDOWS\system32\ksproxy.ax
2008-01-25 00:01 . 2004-08-17 15:49 130,048 --a--c--- C:\WINDOWS\system32\dllcache\ksproxy.ax
2008-01-25 00:01 . 2004-08-03 23:08 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2008-01-25 00:01 . 2004-08-03 23:08 60,288 --a--c--- C:\WINDOWS\system32\dllcache\drmk.sys
2008-01-25 00:01 . 2006-08-01 15:02 49,152 --a------ C:\WINDOWS\system32\ChCfg.exe
2008-01-25 00:01 . 2004-08-17 15:49 4,096 --a------ C:\WINDOWS\system32\ksuser.dll
2008-01-25 00:01 . 2004-08-17 15:49 4,096 --a--c--- C:\WINDOWS\system32\dllcache\ksuser.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-26 20:32 --------- d-----w C:\Program Files\Realtek
2008-01-25 09:59 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-24 23:00 315,392 ----a-w C:\WINDOWS\HideWin.exe
2008-01-24 21:57 --------- d-----w C:\Documents and Settings\Breta\Data aplikací\InstallShield
2008-01-24 20:58 --------- d--h--w C:\Program Files\Uninstall Information
2008-01-24 20:40 --------- d-----w C:\Program Files\microsoft frontpage
2007-11-07 09:29 720,896 ----a-w C:\WINDOWS\system32\lsasrv.dll
2007-10-29 22:44 1,290,240 ----a-w C:\WINDOWS\system32\quartz.dll
2007-10-25 09:00 230,912 ----a-w C:\WINDOWS\system32\wmasf.dll
2007-10-16 17:30 16,855,552 ----a-w C:\WINDOWS\RTHDCPL.exe
2007-10-11 10:04 1,826,816 ----a-w C:\WINDOWS\SkyTel.exe
2007-10-11 06:14 660,480 ----a-w C:\WINDOWS\system32\wininet.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-17 15:49 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2008-01-25 08:56 579072]
"RTHDCPL"="RTHDCPL.EXE" [2007-10-16 18:30 16855552 C:\WINDOWS\RTHDCPL.exe]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 12:35 90112]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-06-21 21:54 919016]
"Device Detector"="DevDetect.exe" []

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-17 15:49 15360]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2008-01-25 08:56 219136]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgwlntf]
avgwlntf.dll 2008-01-25 00:27 9216 C:\WINDOWS\system32\avgwlntf.dll

R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\system32\DRIVERS\psched.sys [2004-08-03 23:04]
R3 RTHDMIAzAudService;Service for HDMI;C:\WINDOWS\system32\drivers\RtHDMI.sys [2007-05-14 10:12]

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-30 14:37:01
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-01-30 14:37:14
ComboFix-quarantined-files.txt 2008-01-30 13:37:12
.
2008-01-26 19:14:26 --- E O F ---

a to hitači nebo jak se to menuje najdu gde?

moc díky

[majkll]

Zřejmě to patří k tomuto tématu, tak prosím o sloučení

[Bretal]

no ale baron prášil mi radil si založit vlastní blok, tak jsem to udělal :-)
asi furt robím neco špatně

[Baron Prášil]

ne,seš správně.ostatních si nevšímej
pošli log z hijackthis(máš problém se čtením nebo psaním?)
návod na něj najdeš dole,jak se to tam točí a posouvá,taky se tomu říká podpis.
a jak sem jenom očkem mrk na ten combo,tak změnilo se něco?ještě to vyskakuje?

[Bretal]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:39:57, on 31.1.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Documents and Settings\Breta\Plocha\HiJack This\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?linkid= ... eckError=8
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = 10.40.93.10
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 1216878937
O17 - HKLM\System\CCS\Services\Tcpip\..\{910685FD-1C76-45D0-BAFB-BCEA129EED5D}: NameServer = 10.40.93.1,217.112.160.1
O20 - Winlogon Notify: avgwlntf - C:\WINDOWS\SYSTEM32\avgwlntf.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe

--
End of file - 5115 bytes

[Baron Prášil]

,tak změnilo se něco?ještě to vyskakuje?

prosím,prosím-jako u doktora-objektivní potíže a subjektivní potíže

odinstaluj Avg a nainstaluj firewall a antispyware
vyber si tady,doporučuju ZoneAlarm nebo Comodo
ANTISPYWARE
doporučuju Spyware Terminator nebo Spybot S&D

log z hitači je ok

[Bretal]

Už to nevyskakuje - to se mi ulevilo

to jako pomohlo jenom to, že jsem to prohnal kompem a hitačim?


a tot je co???
vylezlo to z toho comba
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!


a když odinstaluju avg - tak to už si ho nemám ani nikdy instalovat?
já se jenom ptám

díky za radu a za pomoc, za odpovědi na neználkovy otázky

[Bretal]

Jo a eště sem zapomněl

mám v kompu i avast - ten mám taky odinstalovat???

[Baron Prášil]

každej je v něčem neználek

nemůžeš mít v kompu dva antiviry se zapnutými štíty a protože si myslim,že Avast je lepší než Avg,radím
ti ho odinstalovat zcela.z toho vyplívá,že avast si nech.

to co vylezlo,je varování,že nemáš zálohu systému.

pomohl combofix

že to nevyskakuje se mi ulevilo taky

takže je to vše a není zač.(kdyby něco,pokračuj tady v tom tématu)

[Bretal]

Takže mám v kompu avast houma, terminatora a komodo.

Ty instalace - to byl zase nářez, ale snad jsem to zvládnul.

všechny ostatní ochrany jsem odinstaloval (avg, nějaké firewally atd.)

ještě jednou díky za tvůj čas a pomoc - už jsem se o svůj nový komp začínal bát

b