Internet Saving Optimizer nejde odinstalovat Vyřešeno

[Owner]

Dávám zde obecnou radu, protože přesně nevím,jaké programy má nainstalovány.
Pokud by tedy neměl nainstalován další antivir,stačilo by tu větu akorát poupravit,že není zde další potřeba instalovat jiné ochranné prvky na antivirové bázi ,protože se o viry ESS postará sama.
Přeloženo do normální řeči ať tam necpe další antiviry.

[Reklama]

[Damned]

Stačí juknout na logy a víš že má děvče (nebo tedy rodiče) ESS a SUPERAntiSpyware + Trojan Hunter + Spybot (ty jsou asi zbytné).
Pokud myslíš toto, navrhnu jí to v závěru odšmějdění.

[braque]

Ok, combofix log:

ComboFix 09-07-23.04 - xxxxxxxxxxxx 25.07.2009 12:30.2.1 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.421.1033.18.511.229 [GMT 2:00]
Running from: c:\documents and settings\xxxxxxxxxxxx\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\xxxxxxxxxxxx\Desktop\CFScript.txt
AV: ESET Smart Security 3.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *disabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE ::
"c:\windows\system32\B47C9A38FC.sys"
"c:\windows\system32\KB905474\wgasetup.exe"
"c:\windows\Tasks\WGASetup.job"
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\DoubleD
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\config.md
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\ipdata.md
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090707-114636.250.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090708-090728.484.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090708-120228.093.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090708-120314.359.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090708-121311.906.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090708-132958.890.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090708-142922.953.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090708-143530.500.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090708-144143.250.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090709-091415.062.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090710-081851.750.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-074701.250.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-133650.812.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-141611.359.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-090611.390.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-172638.921.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-175130.281.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-175135.593.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-175138.250.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-181110.234.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090715-131353.640.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090715-151423.609.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090716-155915.203.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090716-160212.937.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090717-063606.906.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090720-201043.390.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090721-013852.671.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\rstatus.md
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\config.md
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090707-114543.937.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090707-114635.859.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090708-090727.875.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090708-120227.484.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090708-120314.328.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090708-121311.812.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090708-132958.609.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090708-142922.921.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090708-143530.390.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090708-144143.171.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090709-091414.671.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090710-081851.703.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-074656.656.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-133649.328.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-141611.093.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090714-090610.515.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090714-172638.078.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\config.md
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090713-134733.843.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090714-175138.171.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090714-181110.187.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090715-131353.343.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090715-151423.531.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090716-155915.171.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090716-160212.843.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-063606.718.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090720-201043.312.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090721-013852.593.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090721-014009.156.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090721-014010.875.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090721-031959.187.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090721-032006.781.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090721-032010.562.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090721-032546.562.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090721-123652.671.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090722-100706.392.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090723-000852.454.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090723-094631.421.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090723-234741.781.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090724-110427.140.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090724-113206.453.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090724-120238.062.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090724-121058.203.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090724-133619.843.log
c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\Media Access Startup\1.5.0.850\ipdata.md
c:\windows\system32\B47C9A38FC.sys
c:\windows\system32\KB905474\wgasetup.exe
c:\windows\Tasks\WGASetup.job

.
((((((((((((((((((((((((( Files Created from 2009-06-25 to 2009-07-25 )))))))))))))))))))))))))))))))
.

2009-07-24 11:37 . 2009-07-24 11:37 -------- d-----w- c:\documents and settings\xxxxxxxxxxxx\Application Data\Malwarebytes
2009-07-24 11:37 . 2009-07-24 11:37 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-07-24 09:37 . 2009-07-24 09:37 -------- d-----w- c:\program files\File Scanner Library (Spybot - Search & Destroy)
2009-07-24 09:37 . 2009-07-24 09:37 -------- d-----w- c:\program files\Misc. Support Library (Spybot - Search & Destroy)
2009-07-24 03:48 . 2009-07-24 03:48 -------- d-----w- c:\documents and settings\xxxxxxxxxxxx\Local Settings\Application Data\ESET
2009-07-24 00:10 . 2009-07-24 00:10 -------- d-----w- c:\documents and settings\xxxxxxxxxxxx\Application Data\TrojanHunter
2009-07-23 22:11 . 2009-07-24 09:22 -------- d-----w- c:\program files\TrojanHunter 5.0
2009-07-23 18:03 . 2009-07-23 18:03 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2009-07-23 18:02 . 2009-07-25 10:21 -------- d-----w- c:\documents and settings\xxxxxxxxxxxx\Application Data\SUPERAntiSpyware.com
2009-07-23 18:02 . 2009-07-25 10:20 -------- d-----w- c:\program files\SUPERAntiSpyware

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-25 06:09 . 2005-02-01 20:29 -------- d-----w- c:\documents and settings\xxxxxxxxxxxx\Application Data\Skype
2009-07-24 10:02 . 2005-05-06 22:22 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-07-24 10:02 . 2005-05-06 22:22 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-07-24 09:27 . 2008-02-27 23:46 -------- d-----w- c:\program files\Kate's Video Converter
2009-07-24 09:27 . 2003-09-20 09:20 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-07-22 22:33 . 2007-08-22 10:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2009-07-21 01:50 . 2009-03-09 10:07 -------- d-----w- c:\documents and settings\xxxxxxxxxxxx\Application Data\uTorrent
2009-07-21 01:24 . 2004-12-20 21:15 -------- d-----w- c:\program files\MSN Messenger
2009-06-16 14:55 . 2001-08-23 12:00 82432 ----a-w- c:\windows\system32\fontsub.dll
2009-06-16 14:55 . 2001-08-23 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-03 19:27 . 2002-08-29 03:41 1290752 ----a-w- c:\windows\system32\quartz.dll
2009-05-26 11:29 . 2006-10-08 10:45 -------- d-----w- c:\program files\Google
2009-05-07 15:44 . 2002-08-29 03:41 344064 ----a-w- c:\windows\system32\localspl.dll
2009-04-29 04:56 . 2004-08-23 18:32 827392 ----a-w- c:\windows\system32\wininet.dll
2009-04-29 04:55 . 2004-12-05 17:29 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-07-22 22:08 . 2008-09-07 09:54 137208 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll
2006-09-28 19:21 . 2006-09-27 18:02 3350 --sha-w- c:\windows\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((( SnapShot@2009-07-24_18.51.18 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-25 10:25 . 2009-07-25 10:25 16384 c:\windows\Temp\Perflib_Perfdata_188.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-03 15360]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2006-10-13 20058152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2004-12-14 221184]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2004-12-14 458752]
"LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2004-12-14 217088]
"PCSuiteTrayApplication"="c:\program files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2006-11-08 222208]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2008-10-24 1451264]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2004-08-03 15360]
"PcSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2006-11-09 1634304]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Network Assistant\\Nassi.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R2 Angelnt;Angelnt;c:\windows\system32\drivers\ANGELNT.SYS [22.3.2007 14:11 51072]
R2 ekrn;Eset Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [24.10.2008 20:51 468224]
S2 gupdate1c9b0631bca1850;Služba Google Update (gupdate1c9b0631bca1850);c:\program files\Google\Update\GoogleUpdate.exe [29.3.2009 13:40 133104]
S3 TNET1130;IEEE 802.11g Wireless Cardbus/PCI Adapter;c:\windows\system32\drivers\TNET1130.sys [12.11.2004 13:18 385792]
.
Contents of the 'Scheduled Tasks' folder

2009-07-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-29 11:39]

2009-07-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-29 11:39]
.
.
------- Supplementary Scan -------
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
TCP: {7F01BD21-6B8B-4C6C-A518-3CA6590DC878} = 172.16.0.2,62.168.96.4
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\xxxxxxxxxxxx\Application Data\Mozilla\Firefox\Profiles\q0j42ncw.Nepojmenovaný\
FF - prefs.js: browser.startup.homepage - hxxp://www.gmail.com/
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Google\Update\1.2.183.7\npGoogleOneClick8.dll

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-25 12:40
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2009-07-25 12:44
ComboFix-quarantined-files.txt 2009-07-25 10:44
ComboFix2.txt 2009-07-24 18:55

Pre-Run: 60 418 752 512 bytes free
Post-Run: 25 adresárov, 60 442 763 264 voľných bajtov

252 --- E O F --- 2009-07-15 20:03


------------------------------------------------------------------------------------------------------------------------------------------------

A hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:49:41, on 25.7.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\MUDr.Hajdak Jozef\Desktop\hijackthis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7F01BD21-6B8B-4C6C-A518-3CA6590DC878}: NameServer = 172.16.0.2,62.168.96.4
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Služba Google Update (gupdate1c9b0631bca1850) (gupdate1c9b0631bca1850) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

--
End of file - 4208 bytes




---------------------------------------------------------------------------------------------------------------------------------

ako to vyzera? Mna sa zda, ze pocitac bezi lepsie a aj rychlejsie uz od vcera. A okna sa uz neotvaraju.

Odinstalovala som vsetky antivirusove, antispywareove programy a nechala len Eset.

[Damned]

Logy jsou čisté. Občas si stáhni nějaký antispyware a pro kontrolu jím projdi PC (bez zapnutého štítu u antispyware) třeba SUPERAntiSpyware nebo Spybot.
Odinstaluj ComboFix.
ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix[mezera]/u

takže jestli nejsou problémy,tak vyčisti systém CCleanerem
a použij i T-Cleaner
smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš->spustíš

(pozn.Pokud máš AVG, před stažením T-Cleaneru a po dobu čištění deaktivuj AVG, následně T-Cleaner smaž
a zapni si AVG.)


Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni select all found,
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected, pak klik Empty selected.

ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache,
cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer,
Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.
Kdyby něco, tak se zastav.
Označ topic za vyřešený (zelená fajfka) a měj se.

[braque]

Moc dakujem! A taky se mej