Prosím o kontrolu logu , při spuštění vyskočí hláška Vyřešeno

[misut]

a co napsal Jaro3 mám udělat??? nebo pokyn dle tebe ?? tápu co kdo navrhe Jerabina měl úplně jiné pokyny než jaro3 a jak se to seklo byl jsem v ...... /malé trenky/

[Reklama]

[jaro3]

Ano , stáhni znovu Combofix , nespouštěj ho , a udělej ten script ,je tam nákaza i v registrech , kromě toho tam chybí soubor , ten se musí nahradit. byl si moc rychlý , já ten script doplnil a jerabina to svoje potom smazal.

[misut]

https://www.virustotal.com/cs/file/e16e ... 447708713/


ComboFix 15-11-15.01 - Josef 16.11.2015 20:38:31.4.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3062.1969 [GMT 1:00]
Spuštěný z: c:\documents and settings\Josef\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Josef\Plocha\CFScript.txt
AV: ESET Smart Security 8.0 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET Personální firewall *Enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
* Rezidentní štít AV je zapnutý
.
.
FILE ::
"c:\windows\Tasks\Component Rest.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job"
"c:\windows\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2659733977-570214497-571619954-1004.job"
"c:\windows\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job"
"c:\windows\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2659733977-570214497-571619954-1004.job"
"c:\windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job"
"c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2659733977-570214497-571619954-1004.job"
"c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job"
"c:\windows\TEMP\9y5ht12u.TMP"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Josef\Local Settings\Application Data\Component Rest
c:\documents and settings\Josef\Local Settings\Application Data\Component Rest\xBin\ComponentRest.dll
.
c:\windows\system32\drivers\i8042prt.sys . . . je infikován!!
.
c:\windows\system32\drivers\i8042prt.sys . . . chybí !!
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_BioNT_BS
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-10-16 do 2015-11-16 )))))))))))))))))))))))))))))))
.
.
2015-11-16 09:46 . 2015-11-16 09:27 24064 ----a-w- c:\windows\zoek-delete.exe
2015-11-16 09:27 . 2015-11-16 09:49 -------- d-----w- C:\zoek_backup
2015-11-15 09:41 . 2015-11-16 10:50 35064 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-11-15 09:41 . 2015-11-15 10:09 -------- d-----w- c:\documents and settings\All Users\Data aplikací\RogueKiller
2015-11-14 19:47 . 2015-11-14 19:47 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2015-11-14 19:47 . 2015-10-05 08:50 121560 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-11-14 19:47 . 2015-10-05 08:50 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-11-14 19:40 . 2015-11-15 09:20 -------- d-----w- C:\AdwCleaner
2015-11-14 16:37 . 2015-11-14 16:37 -------- d-sh--w- c:\documents and settings\Default User\IETldCache
2015-11-14 16:37 . 2015-11-14 16:51 780488 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2015-11-14 16:37 . 2015-11-14 16:51 142536 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2015-11-14 16:35 . 2015-11-14 16:35 2324216 ----a-w- c:\windows\system32\ssins.exe
2015-11-14 08:40 . 2010-05-13 17:34 14232 ----a-w- c:\windows\system32\sh4native.exe
2015-11-01 18:53 . 2015-11-01 18:53 -------- d-----w- c:\documents and settings\Josef\Local Settings\Data aplikací\Showtime
2015-10-27 10:57 . 2015-10-29 10:09 -------- d-----w- C:\Output
2015-10-26 10:58 . 2015-10-26 11:27 -------- d-----w- c:\program files\pazera-software
2015-10-26 09:29 . 2015-10-26 09:29 -------- d-----w- C:\DVDFabDecrypter_Temp
2015-10-22 07:28 . 2015-10-22 07:28 -------- d-----w- c:\program files\Common Files\Skype
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-05 13:05 . 2015-03-15 18:26 2260 -c--a-w- c:\program files\voucher.bin
2013-03-13 07:03 . 2013-03-13 07:03 2174976 -c--a-w- c:\program files\Common Files\atimpenc.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\NBHShellExt]
@="{8D2223A2-B3C6-4e32-B096-CDD11F628C60}"
[HKEY_CLASSES_ROOT\CLSID\{8D2223A2-B3C6-4e32-B096-CDD11F628C60}]
2009-10-16 08:44 97072 ----a-w- c:\program files\Nero\Tools\InCD\NBHshx.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2014-10-01 5088456]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLinkedConnections"= 1 (0x1)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ctfmon.exe"=c:\windows\system32\ctfmon.exe
"Adobe Reader Synchronizer"="c:\program files\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"BluetoothAuthenticationAgent"=rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
"TkBellExe"="c:\program files\real\realplayer\update\realsched.exe" -osboot
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Nero\\Nero 11\\Nero BackItUp\\BackItUp.exe"=
"g:\\instalace\\GAME\\Kyodai Mahjongg\\kmj.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Vzdálená správa systému Windows
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
.
R?2 ssinstall;SInstalátor;c:\windows\system32\ssins.exe [14.11.2015 17:35 2324216]
R0 NBVol;Nero Backup Volume Filter Driver;c:\windows\system32\drivers\NBVol.sys [21.11.2011 12:30 56496]
R0 NBVolUp;Nero Backup Volume Upper Filter Driver;c:\windows\system32\drivers\NBVolUp.sys [21.11.2011 12:30 12464]
R1 BIOS;BIOS;c:\windows\system32\drivers\BIOS.sys [16.12.2012 9:41 13696]
R1 eamonm;eamonm;c:\windows\system32\drivers\eamonm.sys [10.10.2014 8:59 191928]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [10.10.2014 8:59 135296]
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312};Power Control [2012/04/16 14:52];c:\program files\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [1.9.2011 21:51 77296]
R2 CLHNServiceForPowerDVD;CLHNServiceForPowerDVD;c:\program files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [16.4.2012 13:51 83240]
R2 CyberLink PowerDVD 11.0 Monitor Service;CyberLink PowerDVD 11.0 Monitor Service;c:\program files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [16.4.2012 13:51 75048]
R2 CyberLink PowerDVD 11.0 Service;CyberLink PowerDVD 11.0 Service;c:\program files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe [16.4.2012 13:51 292136]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [1.10.2014 14:40 1349576]
R2 NAUpdate;@c:\program files\Nero\Update\NASvc.exe,-200;c:\program files\Nero\Update\NASvc.exe [23.9.2011 18:37 641832]
R2 NeroRegInCDSrv;Nero Registry InCD Service;c:\program files\Nero\Tools\InCD\NBHRegInCDSrv.exe [16.10.2009 9:44 53560]
R2 ntk_PowerDVD;ntk_PowerDVD;c:\program files\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD.sys [16.4.2012 13:51 71664]
R2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [11.5.2014 16:00 167424]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files\RealNetworks\RealDownloader\rndlresolversvc.exe [14.8.2013 15:19 39056]
R2 thdudf;TOSHIBA UDF2.5 Reader File System Driver;c:\windows\system32\drivers\thdudf.sys [25.11.2013 15:01 66944]
S3 AR9271;Wireless Network Adapter Service;c:\windows\system32\drivers\athuw.sys [1.3.2013 21:35 1763584]
S3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [19.3.2014 22:17 20032]
S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [28.11.2014 22:35 13896]
S3 EsgScanner;EsgScanner;c:\windows\system32\drivers\EsgScanner.sys [14.2.2015 13:24 19984]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [28.11.2014 22:35 9160]
S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [11.5.2014 16:00 24576]
S3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\drivers\htcnprot.sys [7.12.2012 17:27 21248]
S3 IT9135BDA;IT9135 BDA Devices;c:\windows\system32\drivers\IT9135BDA.SYS [3.2.2013 15:20 145280]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [29.11.2011 18:32 27064]
.
Obsah adresáře 'Naplánované úlohy'
.
2015-04-26 c:\windows\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job
- c:\program files\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14 14:19]
.
2015-11-16 c:\windows\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2659733977-570214497-571619954-1004.job
- c:\program files\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14 14:19]
.
2015-11-14 c:\windows\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job
- c:\program files\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14 14:19]
.
2015-11-16 c:\windows\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2659733977-570214497-571619954-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2013-08-14 16:13]
.
2015-11-16 c:\windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2013-08-14 16:13]
.
2015-11-16 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2659733977-570214497-571619954-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2013-08-14 16:13]
.
2015-10-30 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2013-08-14 16:13]
.
2015-11-16 c:\windows\Tasks\User_Feed_Synchronization-{02D609C1-B138-47A6-B631-4C8C2E89B3B5}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 03:31]
.
.
------- Doplňkový sken -------
.
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Send To &Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} -
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} -
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} -
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} -
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} -
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\documents and settings\Josef\Data aplikací\Mozilla\Firefox\Profiles\pvst96ez.default-1447488994359\
FF - prefs.js: browser.startup.homepage - hxxps://www.seznam.cz/
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2015-11-16 21:02
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{329F96B6-DF1E-4328-BFDA-39EA953C1312}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD11\Common\NavFilter\000.fcl"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(4084)
c:\program files\Nero\Tools\InCD\NBHshx.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\btncopy.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Nero\Tools\InCD\InCDSrv.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\imapi.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Celkový čas: 2015-11-16 21:03:30 - počítač byl restartován
ComboFix-quarantined-files.txt 2015-11-16 20:03
ComboFix2.txt 2015-11-16 16:21
ComboFix3.txt 2015-11-16 10:06
.
Před spuštěním: Volných bajtů: 79 499 014 144
Po spuštění: Volných bajtů: 79 492 222 976
.
- - End Of File - - BA5B7D002F1C7F6DC2C8159CA8F2BC0E
413FC2A0C716421B3158746D63736515


log Hijack

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:23:29, on 16.11.2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)

FIREFOX: 42.0 (x86 cs)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Nero\Tools\InCD\InCDSrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe
C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Nero\Update\NASvc.exe
C:\Program Files\Nero\Tools\InCD\NBHRegInCDSrv.exe
C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
C:\WINDOWS\System32\ssins.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Josef\Plocha\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: CLHNServiceForPowerDVD - Unknown owner - C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe
O23 - Service: CyberLink PowerDVD 11.0 Monitor Service - CyberLink - C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
O23 - Service: CyberLink PowerDVD 11.0 Service - CyberLink - C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: InCD Helper (InCDSrv) - Nero AG - C:\Program Files\Nero\Tools\InCD\InCDSrv.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: Nero Registry InCD Service (NeroRegInCDSrv) - Nero AG - C:\Program Files\Nero\Tools\InCD\NBHRegInCDSrv.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: SInstalátor (ssinstall) - PS Media s.r.o. - C:\WINDOWS\System32\ssins.exe

--
End of file - 6629 bytes

a AdwCleaner

aswMBR version 1.0.1.2290 Copyright(c) 2014 AVAST Software
Run date: 2015-11-16 21:21:48
-----------------------------
21:21:48.921 OS Version: Windows 5.1.2600 Service Pack 3
21:21:48.921 Number of processors: 2 586 0xF02
21:21:48.921 ComputerName: MISUT UserName: Josef
21:21:51.984 Initialize success
21:21:52.062 VM: initialized successfully
21:21:52.062 VM: Intel CPU BiosDisabled
21:32:43.406 AVAST engine defs: 15111600
21:35:32.296 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
21:35:32.296 Disk 0 Vendor: HDT722525DLA380______________41N3150LEN V44OA9BA Size: 238475MB BusType: 3
21:35:32.296 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP2T0L0-e
21:35:32.296 Disk 1 Vendor: WDC_WD1600AAJB-56WRA0 58.01H58 Size: 152626MB BusType: 3
21:35:32.406 Disk 0 MBR read successfully
21:35:32.406 Disk 0 MBR scan
21:35:32.453 Disk 0 Windows XP default MBR code
21:35:32.453 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 131618 MB offset 63
21:35:32.453 Hidden System thread @ 0x8a3730b0
21:35:32.453 Disk 0 Boot: NTFS code=1
21:35:32.468 Disk 0 Partition - 00 0F Extended LBA 106854 MB offset 269554635
21:35:32.484 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 106854 MB offset 269554698
21:35:32.484 Disk 0 scanning sectors +488392065
21:35:32.531 Disk 0 scanning C:\WINDOWS\system32\drivers
21:35:44.203 Service scanning
21:35:48.953 Service ehdrv C:\WINDOWS\system32\DRIVERS\ehdrv.sys **LOCKED** 5
21:35:49.281 Service epfw C:\WINDOWS\system32\DRIVERS\epfw.sys **LOCKED** 5
21:35:49.328 Service Epfwndis C:\WINDOWS\system32\DRIVERS\Epfwndis.sys **LOCKED** 5
21:35:49.343 Service epfwtdi C:\WINDOWS\system32\DRIVERS\epfwtdi.sys **LOCKED** 5
21:36:05.500 Modules scanning
21:36:05.500 Disk 0 trace - called modules:
21:36:05.515 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
21:36:05.515 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8adcc030]
21:36:05.515 3 CLASSPNP.SYS[ba0e8fd7] -> nt!IofCallDriver -> \Device\00000077[0x8ad86f18]
21:36:05.515 5 ACPI.sys[b9f7f620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x8adb1b00]
21:36:05.953 AVAST engine scan C:\WINDOWS
21:36:11.890 AVAST engine scan C:\WINDOWS\system32
21:39:53.812 AVAST engine scan C:\WINDOWS\system32\drivers
21:40:09.187 AVAST engine scan C:\Documents and Settings\Josef
22:01:19.906 AVAST engine scan C:\Documents and Settings\All Users
22:02:30.625 Disk 0 statistics 2324510/0/0 @ 0,89 MB/s
22:02:30.625 Scan finished successfully
22:17:04.406 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Josef\Plocha\MBR.dat"
22:17:04.421 The log file has been saved successfully to "C:\Documents and Settings\Josef\Plocha\aswMBR.txt"

[misut]

jaro3 moooooc díky tabulka , která vlastně začala tento problém po restartu NENÍ !!!
pokud jsou ale dle logu problémy pokračujeme dále. Jediný nový problém je připojení k netu , oproti začátku snad na tři minuty což nebylo. Půjde-li i toto vyřešit pak vše OK !!!

[jaro3]

Stáhni si zde soubor:
http://leteckaposta.cz/625433514

Rozbal , ze složky vyjmi soubor i8042prt.sys a vlož ho do C:\
Bude zde:
C:\i8042prt.sys

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::
KillAll::
FCOPY::
C:\i8042prt.sys | c:\windows\system32\drivers\i8042prt.sys

File::
c:\windows\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job
c:\windows\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2659733977-570214497-571619954-1004.job
c:\windows\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job
c:\windows\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2659733977-570214497-571619954-1004.job
c:\windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job
c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2659733977-570214497-571619954-1004.job
c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job
c:\program files\Real\RealUpgrade\realupgrade.exe

DDS::
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} -
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} -
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} -
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} -
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} -


je třeba zkopírovat celé , je tam vpravo posuvník!

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si z některého odkazu SystemLook
SystemLook (32-bit)
http://jpshortstuff.247fixes.com/SystemLook.exe

SystemLook (64-bit)
http://jpshortstuff.247fixes.com/SystemLook_x64.exe

a ulož si ho na plochu.

Poklepej na stažený SystemLook , zkopíruj do hlavního text. okna tento následující text:

Kód: Vybrat vše

:filefind
i8042prt.sys.*



Klikni na Look ke startu skenu. Když program skončí objeví se v poznámkovém bloku zpráva skenu. Zkopíruj sem celý jeho obsah. Log se také nachází na ploše pod názvem SystemLook.txt.

[misut]

CFScript :


ComboFix 15-11-17.01 - Josef 17.11.2015 9:30.5.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3062.2344 [GMT 1:00]
Spuštěný z: c:\documents and settings\Josef\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Josef\Plocha\CFScript.txt
AV: ESET Smart Security 8.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET Personální firewall *Enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
.
FILE ::
"c:\program files\Real\RealUpgrade\realupgrade.exe"
"c:\windows\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job"
"c:\windows\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2659733977-570214497-571619954-1004.job"
"c:\windows\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job"
"c:\windows\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2659733977-570214497-571619954-1004.job"
"c:\windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job"
"c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2659733977-570214497-571619954-1004.job"
"c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
--------------- FCopy ---------------
.
c:\i8042prt.sys --> c:\windows\system32\drivers\i8042prt.sys
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-10-17 do 2015-11-17 )))))))))))))))))))))))))))))))
.
.
2015-11-17 08:30 . 2008-04-14 05:51 52096 -c--a-w- c:\windows\system32\dllcache\i8042prt.sys
2015-11-17 08:30 . 2008-04-14 05:51 52096 ----a-w- c:\windows\system32\drivers\i8042prt.sys
2015-11-17 08:24 . 2008-04-14 05:51 52096 ------w- C:\i8042prt.sys
2015-11-16 09:46 . 2015-11-16 09:27 24064 ----a-w- c:\windows\zoek-delete.exe
2015-11-16 09:27 . 2015-11-16 09:49 -------- d-----w- C:\zoek_backup
2015-11-15 09:41 . 2015-11-16 10:50 35064 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-11-15 09:41 . 2015-11-15 10:09 -------- d-----w- c:\documents and settings\All Users\Data aplikací\RogueKiller
2015-11-14 19:47 . 2015-11-14 19:47 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2015-11-14 19:47 . 2015-10-05 08:50 121560 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-11-14 19:47 . 2015-10-05 08:50 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-11-14 19:40 . 2015-11-15 09:20 -------- d-----w- C:\AdwCleaner
2015-11-14 16:37 . 2015-11-14 16:37 -------- d-sh--w- c:\documents and settings\Default User\IETldCache
2015-11-14 16:37 . 2015-11-14 16:51 780488 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2015-11-14 16:37 . 2015-11-14 16:51 142536 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2015-11-14 16:35 . 2015-11-14 16:35 2324216 ----a-w- c:\windows\system32\ssins.exe
2015-11-14 08:40 . 2010-05-13 17:34 14232 ----a-w- c:\windows\system32\sh4native.exe
2015-11-01 18:53 . 2015-11-01 18:53 -------- d-----w- c:\documents and settings\Josef\Local Settings\Data aplikací\Showtime
2015-10-27 10:57 . 2015-10-29 10:09 -------- d-----w- C:\Output
2015-10-26 10:58 . 2015-10-26 11:27 -------- d-----w- c:\program files\pazera-software
2015-10-26 09:29 . 2015-10-26 09:29 -------- d-----w- C:\DVDFabDecrypter_Temp
2015-10-22 07:28 . 2015-10-22 07:28 -------- d-----w- c:\program files\Common Files\Skype
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-05 13:05 . 2015-03-15 18:26 2260 -c--a-w- c:\program files\voucher.bin
2013-03-13 07:03 . 2013-03-13 07:03 2174976 -c--a-w- c:\program files\Common Files\atimpenc.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\NBHShellExt]
@="{8D2223A2-B3C6-4e32-B096-CDD11F628C60}"
[HKEY_CLASSES_ROOT\CLSID\{8D2223A2-B3C6-4e32-B096-CDD11F628C60}]
2009-10-16 08:44 97072 ----a-w- c:\program files\Nero\Tools\InCD\NBHshx.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2014-10-01 5088456]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLinkedConnections"= 1 (0x1)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ctfmon.exe"=c:\windows\system32\ctfmon.exe
"Adobe Reader Synchronizer"="c:\program files\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"BluetoothAuthenticationAgent"=rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
"TkBellExe"="c:\program files\real\realplayer\update\realsched.exe" -osboot
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Nero\\Nero 11\\Nero BackItUp\\BackItUp.exe"=
"g:\\instalace\\GAME\\Kyodai Mahjongg\\kmj.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Vzdálená správa systému Windows
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
.
R?2 ssinstall;SInstalátor;c:\windows\system32\ssins.exe [14.11.2015 17:35 2324216]
R0 NBVol;Nero Backup Volume Filter Driver;c:\windows\system32\drivers\NBVol.sys [21.11.2011 12:30 56496]
R0 NBVolUp;Nero Backup Volume Upper Filter Driver;c:\windows\system32\drivers\NBVolUp.sys [21.11.2011 12:30 12464]
R1 BIOS;BIOS;c:\windows\system32\drivers\BIOS.sys [16.12.2012 9:41 13696]
R1 eamonm;eamonm;c:\windows\system32\drivers\eamonm.sys [10.10.2014 8:59 191928]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [10.10.2014 8:59 135296]
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312};Power Control [2012/04/16 14:52];c:\program files\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [1.9.2011 21:51 77296]
R2 CLHNServiceForPowerDVD;CLHNServiceForPowerDVD;c:\program files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [16.4.2012 13:51 83240]
R2 CyberLink PowerDVD 11.0 Monitor Service;CyberLink PowerDVD 11.0 Monitor Service;c:\program files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [16.4.2012 13:51 75048]
R2 CyberLink PowerDVD 11.0 Service;CyberLink PowerDVD 11.0 Service;c:\program files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe [16.4.2012 13:51 292136]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [1.10.2014 14:40 1349576]
R2 NAUpdate;@c:\program files\Nero\Update\NASvc.exe,-200;c:\program files\Nero\Update\NASvc.exe [23.9.2011 18:37 641832]
R2 NeroRegInCDSrv;Nero Registry InCD Service;c:\program files\Nero\Tools\InCD\NBHRegInCDSrv.exe [16.10.2009 9:44 53560]
R2 ntk_PowerDVD;ntk_PowerDVD;c:\program files\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD.sys [16.4.2012 13:51 71664]
R2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [11.5.2014 16:00 167424]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files\RealNetworks\RealDownloader\rndlresolversvc.exe [14.8.2013 15:19 39056]
R2 thdudf;TOSHIBA UDF2.5 Reader File System Driver;c:\windows\system32\drivers\thdudf.sys [25.11.2013 15:01 66944]
S3 AR9271;Wireless Network Adapter Service;c:\windows\system32\drivers\athuw.sys [1.3.2013 21:35 1763584]
S3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [19.3.2014 22:17 20032]
S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [28.11.2014 22:35 13896]
S3 EsgScanner;EsgScanner;c:\windows\system32\drivers\EsgScanner.sys [14.2.2015 13:24 19984]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [28.11.2014 22:35 9160]
S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [11.5.2014 16:00 24576]
S3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\drivers\htcnprot.sys [7.12.2012 17:27 21248]
S3 IT9135BDA;IT9135 BDA Devices;c:\windows\system32\drivers\IT9135BDA.SYS [3.2.2013 15:20 145280]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [29.11.2011 18:32 27064]
.
Obsah adresáře 'Naplánované úlohy'
.
2015-04-26 c:\windows\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job
- c:\program files\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14 14:19]
.
2015-11-17 c:\windows\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2659733977-570214497-571619954-1004.job
- c:\program files\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14 14:19]
.
2015-11-14 c:\windows\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job
- c:\program files\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14 14:19]
.
2015-11-17 c:\windows\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2659733977-570214497-571619954-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2013-08-14 16:13]
.
2015-11-17 c:\windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2013-08-14 16:13]
.
2015-11-17 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2659733977-570214497-571619954-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2013-08-14 16:13]
.
2015-10-30 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2659733977-570214497-571619954-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2013-08-14 16:13]
.
2015-11-16 c:\windows\Tasks\User_Feed_Synchronization-{02D609C1-B138-47A6-B631-4C8C2E89B3B5}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 03:31]
.
.
------- Doplňkový sken -------
.
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Send To &Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} -
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} -
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} -
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} -
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} -
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\documents and settings\Josef\Data aplikací\Mozilla\Firefox\Profiles\pvst96ez.default-1447488994359\
FF - prefs.js: browser.startup.homepage - hxxps://www.seznam.cz/
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2015-11-17 09:51
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{329F96B6-DF1E-4328-BFDA-39EA953C1312}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD11\Common\NavFilter\000.fcl"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(1364)
c:\program files\Nero\Tools\InCD\NBHshx.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\btncopy.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Nero\Tools\InCD\InCDSrv.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\imapi.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Celkový čas: 2015-11-17 09:53:09 - počítač byl restartován
ComboFix-quarantined-files.txt 2015-11-17 08:53
ComboFix2.txt 2015-11-16 20:03
ComboFix3.txt 2015-11-16 16:21
ComboFix4.txt 2015-11-16 10:06
.
Před spuštěním: Volných bajtů: 79 162 671 104
Po spuštění: Volných bajtů: 79 367 921 664
.
- - End Of File - - 9912185181ED614D921CDFC29134E0DE
413FC2A0C716421B3158746D63736515


hijackthis :

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:00:01, on 17.11.2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)

FIREFOX: 42.0 (x86 cs)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Nero\Tools\InCD\InCDSrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe
C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Nero\Update\NASvc.exe
C:\Program Files\Nero\Tools\InCD\NBHRegInCDSrv.exe
C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
C:\WINDOWS\System32\ssins.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Josef\Plocha\Nová složka\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: CLHNServiceForPowerDVD - Unknown owner - C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe
O23 - Service: CyberLink PowerDVD 11.0 Monitor Service - CyberLink - C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
O23 - Service: CyberLink PowerDVD 11.0 Service - CyberLink - C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: InCD Helper (InCDSrv) - Nero AG - C:\Program Files\Nero\Tools\InCD\InCDSrv.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: Nero Registry InCD Service (NeroRegInCDSrv) - Nero AG - C:\Program Files\Nero\Tools\InCD\NBHRegInCDSrv.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: SInstalátor (ssinstall) - PS Media s.r.o. - C:\WINDOWS\System32\ssins.exe

--
End of file - 6641 bytes


SystemLook :

SystemLook 30.07.11 by jpshortstuff
Log created at 10:01 on 17/11/2015 by Josef
Administrator - Elevation successful

========== filefind ==========

Searching for "i8042prt.sys.*"
C:\i8042prt.sys ------- 52096 bytes [08:24 17/11/2015] [05:51 14/04/2008] C528E27945367191E7BAE364930B6932
C:\WINDOWS\system32\dllcache\i8042prt.sys --a--c- 52096 bytes [08:30 17/11/2015] [05:51 14/04/2008] C528E27945367191E7BAE364930B6932
C:\WINDOWS\system32\drivers\i8042prt.sys --a---- 52096 bytes [08:30 17/11/2015] [05:51 14/04/2008] C528E27945367191E7BAE364930B6932

-= EOF =-

[jerabina]

Odinstaluj vše od Spybot - Search & Destroy

Tohle poznáváš RealPlayer Download and Record Plugin for Internet Explorer ?

Zavři ostatní programy/prohlížeče, odpoj se od internetu a v HJT fixni:
NÁVOD

Kód: Vybrat vše

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

Co problémy?

[misut]

RealPlayer Download and Record Plugin for Internet Explorer znám OK
Problémy nejsou snad jak jjsem psal dlouhá doba připojení PC k netu , možná se mi to jen tak jeví.?.?.že to bylo
rychlejší , ale jinak super
Log po fixnutí HJT


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:47:19, on 17.11.2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)

FIREFOX: 42.0 (x86 cs)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Nero\Tools\InCD\InCDSrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe
C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Nero\Update\NASvc.exe
C:\Program Files\Nero\Tools\InCD\NBHRegInCDSrv.exe
C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
C:\WINDOWS\System32\ssins.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Josef\Plocha\Nová složka\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: CLHNServiceForPowerDVD - Unknown owner - C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe
O23 - Service: CyberLink PowerDVD 11.0 Monitor Service - CyberLink - C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
O23 - Service: CyberLink PowerDVD 11.0 Service - CyberLink - C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: InCD Helper (InCDSrv) - Nero AG - C:\Program Files\Nero\Tools\InCD\InCDSrv.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: Nero Registry InCD Service (NeroRegInCDSrv) - Nero AG - C:\Program Files\Nero\Tools\InCD\NBHRegInCDSrv.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: SInstalátor (ssinstall) - PS Media s.r.o. - C:\WINDOWS\System32\ssins.exe

--
End of file - 4892 bytes


Podívej zda OK a myslím , že

[jaro3]

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Toto otestuj na Virustotal
c:\windows\system32\dllcache\i8042prt.sys
c:\windows\system32\drivers\i8042prt.sys

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

Nebo na:
http://www.virscan.org/

[misut]

c:\windows\system32\dllcache\i8042prt.sys
https://www.virustotal.com/cs/file/1b95 ... 447837032/

c:\windows\system32\drivers\i8042prt.sys
https://www.virustotal.com/cs/file/1b95 ... 447837032/

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Stáhni si zde DelFix
https://toolslib.net/downloads/viewdownload/2-delfix/

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem.Jinak je zpráva zde:
v C: \ DelFix.txt

c:\i8042prt.sys
najdi a smaž tento soubor.

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.

[misut]

# DelFix v1.011 - Logfile created 18/11/2015 at 11:11:53
# Updated 18/08/2015 by Xplode
# Username : Josef - MISUT
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)

~ Removing disinfection tools ...

Deleted : C:\Qoobox
Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\zoek-results.log
Deleted : C:\Documents and Settings\Josef\Plocha\hijackthis.log
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis
Deleted : HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASWMBR

~ Cleaning system restore ...

Deleted : RP #1020 [Kontrolní bod systému | 11/05/2015 19:52:51]
Deleted : RP #1021 [Kontrolní bod systému | 11/06/2015 20:00:56]
Deleted : RP #1022 [Kontrolní bod systému | 11/07/2015 20:47:58]
Deleted : RP #1023 [Kontrolní bod systému | 11/08/2015 21:07:14]
Deleted : RP #1024 [Kontrolní bod systému | 11/10/2015 14:24:50]
Deleted : RP #1025 [Revo Uninstaller Pro's restore point - HD Tune 2.55 | 11/10/2015 20:57:30]
Deleted : RP #1026 [Revo Uninstaller Pro's restore point - R-Studio 5.2 | 11/11/2015 07:30:53]
Deleted : RP #1027 [Kontrolní bod systému | 11/12/2015 08:33:36]
Deleted : RP #1028 [Kontrolní bod systému | 11/13/2015 09:07:16]
Deleted : RP #1029 [Operace obnovení | 11/14/2015 08:52:44]
Deleted : RP #1030 [Revo Uninstaller Pro's restore point - Component Rest | 11/14/2015 09:12:58]
Deleted : RP #1031 [Revo Uninstaller Pro's restore point - Component Rest | 11/14/2015 09:16:32]
Deleted : RP #1032 [Revo Uninstaller Pro's restore point - Component Rest | 11/14/2015 09:24:11]
Deleted : RP #1033 [Revo Uninstaller Pro's restore point - Component Rest | 11/14/2015 09:24:36]
Deleted : RP #1034 [Installed SpyHunter | 11/14/2015 09:33:11]
Deleted : RP #1035 [PC Speed Up Fix | 11/14/2015 10:05:43]
Deleted : RP #1036 [PC Speed Up Fix | 11/14/2015 10:09:40]
Deleted : RP #1037 [PC Speed Up Fix | 11/14/2015 10:11:43]
Deleted : RP #1038 [Revo Uninstaller Pro's restore point - SpyHunter | 11/14/2015 10:21:23]
Deleted : RP #1039 [Removed SpyHunter | 11/14/2015 10:21:46]
Deleted : RP #1040 [Revo Uninstaller Pro's restore point - Zrychleni Pocitace | 11/14/2015 10:22:12]
Deleted : RP #1041 [Operace obnovení | 11/14/2015 10:40:32]
Deleted : RP #1042 [Revo Uninstaller Pro's restore point - Google Chrome | 11/14/2015 15:33:33]
Deleted : RP #1043 [Revo Uninstaller Pro's restore point - Adobe Flash Player 19 NPAPI | 11/14/2015 15:34:18]
Deleted : RP #1044 [Revo Uninstaller Pro's restore point - Adobe Flash Player 19 ActiveX | 11/14/2015 15:34:44]
Deleted : RP #1045 [Revo Uninstaller Pro's restore point - Adobe Flash Player 19 ActiveX | 11/14/2015 15:35:17]
Deleted : RP #1046 [Revo Uninstaller Pro's restore point - Adobe Flash Player 19 ActiveX | 11/14/2015 15:35:47]
Deleted : RP #1047 [Revo Uninstaller Pro's restore point - TuneUp Utilities 2013 | 11/14/2015 19:09:22]
Deleted : RP #1048 [Odebráno: TuneUp Utilities 2013 | 11/14/2015 19:10:10]
Deleted : RP #1049 [Odebráno: TuneUp Utilities Language Pack (en-GB) | 11/14/2015 19:10:48]
Deleted : RP #1050 [Revo Uninstaller Pro's restore point - Malwarebytes Anti-Malware verze 2.2.0.1024 | 11/14/2015 19:48:53]
Deleted : RP #1051 [Revo Uninstaller Pro's restore point - CCleaner | 11/14/2015 19:49:30]
Deleted : RP #1052 [Revo Uninstaller Pro's restore point - Malwarebytes Anti-Malware verze 2.2.0.1024 | 11/14/2015 19:55:55]
Deleted : RP #1053 [JRT Pre-Junkware Removal | 11/15/2015 09:25:41]
Deleted : RP #1054 [zoek.exe restore point | 11/16/2015 09:29:19]
Deleted : RP #1055 [Kontrolní bod systému | 11/17/2015 09:39:20]

New restore point created !

########## - EOF - ##########


Je vše OK ???