Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:29:30 odp., on 28.11.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
C:\Program Files\WinFast\WFDTV\WFWIZ.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\Adobe-skola\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Documents and Settings\All Users\Data aplikací\iWin Games\DesktopAlerts\DesktopAlerts.exe
C:\Program Files\NetSoftware\NetSoftware.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\imapi.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~2\ICQTOO~1\toolbaru.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
O4 - HKLM\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFDTV\WFWIZ.exe
O4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe-skola\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [NetSoftware] "C:\Program Files\NetSoftware\Starter.exe" /path="C:\Program Files\NetSoftware"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: iWin Desktop Alerts.lnk = ?
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést cíl vazby do existujícího PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést do existujícího PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Převést vybrané vazby do Adobe PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést vybrané vazby do existujícího PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Převést výběr do Adobe PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést výběr do existujícího PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\ICQ\ICQ 6 czech\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\ICQ\ICQ 6 czech\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/v ... .2.4.3.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Adobe Systems Incorporated - C:\Program Files\Adobe-skola\Adobe Version Cue CS2\bin\VersionCueCS2.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O24 - Desktop Component 1: Frekvence 1 - http://www.frekvence1.cz/cs/webova_radi ... 2_ad.shtml
--
End of file - 8482 bytes
Prosím o kontrolu logu
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43294
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: Prosím o kontrolu logu
Stahni si Avanger
do něj podle navodu:
zadej prikaz z kodu:
po restartu novy log z avengeru, stejne tak si zopakuj Combofix,
do něj podle navodu:
zadej prikaz z kodu:
Kód: Vybrat vše
Files to delete:
c:\program files\temp01
Folders to delete:
c:\program files\temp01po restartu novy log z avengeru, stejne tak si zopakuj Combofix,
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: Prosím o kontrolu logu
Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com
Platform: Windows XP
*******************
Script file opened successfully.
Script file read successfully.
Backups directory opened successfully at C:\Avenger
*******************
Beginning to process script file:
Rootkit scan active.
No rootkits found!
File "c:\program files\temp01" deleted successfully.
Error: folder "c:\program files\temp01" not found!
Deletion of folder "c:\program files\temp01" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist
Completed script processing.
*******************
Finished! Terminate.
http://swandog46.geekstogo.com
Platform: Windows XP
*******************
Script file opened successfully.
Script file read successfully.
Backups directory opened successfully at C:\Avenger
*******************
Beginning to process script file:
Rootkit scan active.
No rootkits found!
File "c:\program files\temp01" deleted successfully.
Error: folder "c:\program files\temp01" not found!
Deletion of folder "c:\program files\temp01" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist
Completed script processing.
*******************
Finished! Terminate.
Re: Prosím o kontrolu logu
ComboFix 08-11-27.07 - Administrator 2008-11-28 16:01:18.5 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.1.1029.18.637 [GMT 1:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
* Resident AV is active
.
((((((((((((((((((((((((( Soubory vytvořené od 2008-10-28 do 2008-11-28 )))))))))))))))))))))))))))))))
.
2008-11-27 17:13 . 2008-11-27 17:13 <DIR> d-------- C:\rsit
2008-11-27 14:48 . 2008-11-27 14:48 <DIR> d-------- C:\zprava_806
2008-11-27 14:46 . 2008-11-27 14:46 3,054,988 --a------ C:\zprava_806.zip
2008-11-27 14:38 . 2008-11-27 14:38 1,259,897 --a------ C:\ComboFix.rar
2008-11-26 17:33 . 2008-11-27 13:20 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware
2008-11-25 20:57 . 2008-11-25 20:57 <DIR> d-------- C:\GameHouse Games
2008-11-25 20:56 . 2008-11-26 23:21 <DIR> d-------- c:\program files\RealArcade
2008-11-22 17:25 . 2008-11-22 17:34 <DIR> d-------- c:\program files\EscapetheMuseum_at
2008-11-22 16:15 . 2008-11-22 17:35 <DIR> d-------- c:\program files\SpookyManor_at
2008-11-22 10:19 . 2008-11-22 10:20 <DIR> d-------- c:\program files\SpiritofWanderingTheLegend_at
2008-11-21 22:37 . 2008-11-21 22:37 <DIR> d-------- c:\documents and settings\Administrator\Data aplikací\Friday's games
2008-11-21 17:10 . 2008-11-22 17:35 <DIR> d-------- c:\program files\MagicEncyclopedia_at
2008-11-21 16:49 . 2008-11-21 16:50 <DIR> d-------- c:\program files\MysteryoftheCrystalPortal_at
2008-11-21 16:46 . 2008-11-27 13:21 <DIR> d-------- c:\program files\SamanthaSwift_at
2008-11-20 19:10 . 2008-11-20 19:10 <DIR> d-------- c:\program files\TreasuresofMysteryIsland_at
2008-11-20 19:10 . 2008-11-20 19:11 <DIR> d-------- c:\documents and settings\Administrator\Data aplikací\SecretIslandEng
2008-11-17 18:54 . 2008-11-22 17:30 <DIR> d-------- c:\program files\Alice Greenfingers 2
2008-11-16 22:27 . 2008-11-22 17:35 <DIR> d-------- c:\program files\PopCap Games
2008-11-16 21:11 . 2008-11-16 21:11 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\Zylom
2008-11-15 21:14 . 2008-11-15 21:14 <DIR> d-------- c:\program files\PlayFirst
2008-11-14 17:06 . 2008-11-17 16:26 <DIR> d-------- c:\program files\AliceGreenfingers2_at
2008-11-06 11:51 . 2008-11-06 12:17 <DIR> d-------- c:\program files\OperationMania_at
2008-11-06 11:51 . 2008-11-06 11:51 <DIR> d-------- c:\documents and settings\Administrator\Data aplikací\Pogo Games
2008-11-04 20:18 . 2008-11-24 20:28 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\PrevxCSI
2008-11-03 17:18 . 2008-11-17 16:28 <DIR> d-------- c:\program files\Cake Mania
2008-11-02 21:30 . 2008-11-28 15:59 <DIR> d-------- c:\program files\NetSoftware
2008-11-01 13:32 . 2008-11-15 20:44 <DIR> d-------- c:\program files\Retro64 Games
2008-10-29 17:50 . 2008-10-29 17:50 <DIR> d-------- c:\program files\Realore
2008-10-28 17:59 . 2008-10-29 21:52 <DIR> d-------- c:\program files\Venice
2008-10-28 14:23 . 2008-10-28 15:50 <DIR> d-------- c:\program files\Cooking Dash
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-27 13:01 --------- d-----w c:\program files\EA GAMES
2008-11-26 22:14 --------- d-----w c:\documents and settings\Administrator\Data aplikací\GameHouse
2008-11-25 19:06 --------- d---a-w c:\documents and settings\All Users\Data aplikací\TEMP
2008-11-24 19:33 --------- d-----w c:\program files\GameHouse
2008-11-24 08:53 --------- d-----w c:\program files\Miranda IM
2008-11-22 18:36 --------- d-----w c:\program files\iWin.com
2008-11-22 16:30 --------- d-----w c:\program files\Alawar
2008-11-21 15:47 --------- d-----w c:\documents and settings\All Users\Data aplikací\MumboJumbo
2008-11-17 15:26 --------- d--h--w c:\program files\InstallShield Installation Information
2008-11-17 15:26 --------- d-----w c:\program files\Common Files\soft602
2008-11-16 16:52 --------- d-----w c:\program files\Shockwave.com
2008-11-15 20:15 --------- d-----w c:\documents and settings\Administrator\Data aplikací\PlayFirst
2008-11-15 16:00 --------- d-----w c:\documents and settings\All Users\Data aplikací\AlawarWrapper
2008-11-15 12:37 --------- d-----w c:\documents and settings\All Users\Data aplikací\Valusoft
2008-11-15 12:37 --------- d-----w c:\documents and settings\Administrator\Data aplikací\Valusoft
2008-11-14 15:59 --------- d-----w c:\documents and settings\All Users\Data aplikací\PlayFirst
2008-11-13 19:31 --------- d-----w c:\documents and settings\Administrator\Data aplikací\Gamelab
2008-11-03 16:18 --------- d-----w c:\documents and settings\All Users\Data aplikací\Sandlot Games
2008-11-02 11:02 --------- d-----w c:\program files\Google
2008-10-31 13:16 --------- d-----w c:\program files\iWin Games
2008-10-28 14:50 --------- d-----w c:\program files\Cake Mania 3
2008-10-28 14:47 --------- d-----w c:\program files\RanchRush_at
2008-10-27 18:43 --------- d-----w c:\program files\Garmin GPS Plugin
2008-10-25 10:12 --------- d-----w c:\documents and settings\All Users\Data aplikací\Fugazo
2008-10-24 11:10 453,632 ----a-w c:\windows\system32\drivers\mrxsmb.sys
2008-10-24 09:18 --------- d-----w c:\program files\Software602
2008-10-24 09:03 --------- d-----w c:\documents and settings\All Users\Data aplikací\WinZip
2008-10-22 14:52 --------- d-----w c:\documents and settings\Administrator\Data aplikací\PetShowCraze
2008-10-18 17:05 --------- d-----w c:\documents and settings\All Users\Data aplikací\iWin
2008-10-18 17:04 --------- d-----w c:\documents and settings\Administrator\Data aplikací\iWin
2008-10-18 11:53 --------- d-----w c:\documents and settings\Administrator\Data aplikací\MysteryStudio
2008-10-18 08:05 --------- d-----w c:\documents and settings\Administrator\Data aplikací\GARMIN
2008-10-18 07:53 --------- d-----w c:\documents and settings\Administrator\Data aplikací\Download Manager
2008-10-11 18:45 --------- d-----w c:\program files\LambsofDreams_at
2008-10-05 09:56 --------- d-----w c:\documents and settings\All Users\Data aplikací\GameHouse
2008-10-04 15:15 --------- d-----w c:\program files\FarmFrenzy2_at
2008-10-03 11:17 --------- d-----w c:\documents and settings\Administrator\Data aplikací\iWin_DressUpRush
2008-10-03 09:38 --------- d-----w c:\documents and settings\Administrator\Data aplikací\BeachPartyCraze
2008-10-02 17:21 --------- d-----w c:\program files\SallysSalon_at
2008-10-02 12:02 --------- d-----w c:\documents and settings\All Users\Data aplikací\Legacy Interactive
2008-10-02 09:19 --------- d-----w c:\documents and settings\All Users\Data aplikací\Ludia
2008-10-02 09:19 --------- d-----w c:\documents and settings\Administrator\Data aplikací\Ludia
2008-10-01 14:33 --------- d-----w c:\documents and settings\All Users\Data aplikací\Astar Games
2008-10-01 09:55 --------- d-----w c:\documents and settings\All Users\Data aplikací\Fitn17
2008-10-01 09:54 --------- d-----w c:\documents and settings\All Users\Data aplikací\iWin Games
2008-10-01 09:54 --------- d-----w c:\documents and settings\Administrator\Data aplikací\iWinArcade
2008-10-01 08:43 --------- d-----w c:\program files\TeddyTavern_at
2008-10-01 08:43 --------- d-----w c:\program files\FitnessFrenzy_at
2008-10-01 08:43 --------- d-----w c:\documents and settings\Administrator\Data aplikací\SpinTop
2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
2008-09-30 14:59 7,780 ----a-w c:\documents and settings\Administrator\FMCodec.dat
2008-09-28 14:57 --------- d-----w c:\documents and settings\Administrator\Data aplikací\EleFun Games
2008-09-15 15:40 1,846,016 ----a-w c:\windows\system32\win32k.sys
2008-09-04 16:46 1,106,944 ----a-w c:\windows\system32\msxml3.dll
2008-07-20 21:37 241 ----a-w c:\documents and settings\Administrator\SR.vbs
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-17 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMBgMonitor.exe" [2007-08-03 202024]
"DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2007-09-18 171464]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-10-22 7700480]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-10-22 86016]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2007-11-01 949376]
"WinFastDTV"="c:\program files\WinFast\WFDTV\DTVSchdl.exe" [2007-10-09 90112]
"WinFast Schedule"="c:\program files\WinFast\WFDTV\WFWIZ.exe" [2007-10-01 413696]
"StatusClient"="c:\program files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe" [2002-12-16 36864]
"TomcatStartup"="c:\program files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe" [2003-03-31 155648]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048]
"Adobe Version Cue CS2"="c:\program files\Adobe-skola\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe" [2005-05-25 856064]
"Acrobat Assistant 7.0"="c:\program files\Adobe-skola\Adobe Acrobat 7.0\Distillr\Acrotray.exe" [2004-12-14 483328]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-03-30 267048]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"NetSoftware"="c:\program files\NetSoftware\Starter.exe" [2008-11-02 94208]
"SkyTel"="SkyTel.EXE" [2006-05-16 c:\windows\SkyTel.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]
c:\documents and settings\Administrator\Nabˇdka Start\Programy\Po spuçtŘnˇ\
iWin Desktop Alerts.lnk - c:\documents and settings\All Users\Data aplikacˇ\iWin Games\DesktopAlerts\DesktopAlerts.exe [2008-10-01 108032]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Acrobat Speed Launcher.lnk - c:\windows\Installer\{AC76BA86-1033-C740-7760-100000000002}\SC_Acrobat.exe [2008-04-05 25214]
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 113664]
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoActiveDesktopChanges"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
R1 wfcxacap;WinFast TV PCI Audio Capture Driver;c:\windows\system32\DRIVERS\wfcxacap.sys [2006-10-23 9856]
R2 wfcxatun;WinFast TV Analog Tuner Driver;c:\windows\system32\drivers\wfcxatun.sys [2006-03-24 31616]
R2 WFCXVCAP;WinFast TV Video Capture Driver;c:\windows\system32\drivers\wfcxvcap.sys [2006-03-24 167424]
R3 PSched;Plánovač paketů technologie QoS;c:\windows\system32\DRIVERS\psched.sys [2004-08-04 69120]
R3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver;c:\windows\system32\drivers\wfcxdtun.sys [2006-03-24 21248]
R3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver;c:\windows\system32\drivers\wfcxtcap.sys [2006-10-23 15872]
R3 wfcxxbar;WinFast TV Crossbar Driver;c:\windows\system32\drivers\wfcxxbar.sys [2006-03-24 10496]
R3 WFIOCTL;WFIOCTL;\??\c:\program files\WinFast\WFDTV\WFIOCTL.SYS [2007-11-01 9446]
S1 ensqio;ensqio;c:\windows\system32\DRIVERS\ensqio.sys []
S1 sbpcint4;SB AudioPCI 128;c:\windows\system32\DRIVERS\sbpcint4.sys []
.
Obsah adresáře 'Naplánované úlohy'
2008-11-27 c:\windows\Tasks\Antispyware Scheduled Scan.job
- c:\program files\Antispyware\Antispyware.exe []
2008-11-27 c:\windows\Tasks\Antispyware Scheduled Scan.job
- c:\program files\Antispyware []
2008-11-27 c:\windows\Tasks\{D34F18B0-576E-11D0-B28C-00C04FD7CD22}_LERCH_Administrator.job
- c:\windows\system32\mobsync.exe [2004-08-17 17:49]
.
.
------- Doplňkový sken -------
.
FireFox -: Profile - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\qc1d6ayl.default\
FF -: plugin - c:\program files\iTunes\Mozilla Plugins\npitunes.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-28 16:03:12
Windows 5.1.2600 Service Pack 2 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'lsass.exe'(820)
c:\windows\system32\imon.dll
.
Celkový čas: 2008-11-28 16:04:21
ComboFix-quarantined-files.txt 2008-11-28 15:03:40
ComboFix2.txt 2008-11-28 14:27:34
ComboFix3.txt 2008-11-28 10:45:18
ComboFix4.txt 2008-11-28 10:42:34
ComboFix5.txt 2008-11-28 15:01:06
Před spuštěním: Volných bajtů: 26 883 411 968
Po spuštění: Volných bajtů: 26,870,116,352
181 --- E O F --- 2008-11-26 21:08:20
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.1.1029.18.637 [GMT 1:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
* Resident AV is active
.
((((((((((((((((((((((((( Soubory vytvořené od 2008-10-28 do 2008-11-28 )))))))))))))))))))))))))))))))
.
2008-11-27 17:13 . 2008-11-27 17:13 <DIR> d-------- C:\rsit
2008-11-27 14:48 . 2008-11-27 14:48 <DIR> d-------- C:\zprava_806
2008-11-27 14:46 . 2008-11-27 14:46 3,054,988 --a------ C:\zprava_806.zip
2008-11-27 14:38 . 2008-11-27 14:38 1,259,897 --a------ C:\ComboFix.rar
2008-11-26 17:33 . 2008-11-27 13:20 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware
2008-11-25 20:57 . 2008-11-25 20:57 <DIR> d-------- C:\GameHouse Games
2008-11-25 20:56 . 2008-11-26 23:21 <DIR> d-------- c:\program files\RealArcade
2008-11-22 17:25 . 2008-11-22 17:34 <DIR> d-------- c:\program files\EscapetheMuseum_at
2008-11-22 16:15 . 2008-11-22 17:35 <DIR> d-------- c:\program files\SpookyManor_at
2008-11-22 10:19 . 2008-11-22 10:20 <DIR> d-------- c:\program files\SpiritofWanderingTheLegend_at
2008-11-21 22:37 . 2008-11-21 22:37 <DIR> d-------- c:\documents and settings\Administrator\Data aplikací\Friday's games
2008-11-21 17:10 . 2008-11-22 17:35 <DIR> d-------- c:\program files\MagicEncyclopedia_at
2008-11-21 16:49 . 2008-11-21 16:50 <DIR> d-------- c:\program files\MysteryoftheCrystalPortal_at
2008-11-21 16:46 . 2008-11-27 13:21 <DIR> d-------- c:\program files\SamanthaSwift_at
2008-11-20 19:10 . 2008-11-20 19:10 <DIR> d-------- c:\program files\TreasuresofMysteryIsland_at
2008-11-20 19:10 . 2008-11-20 19:11 <DIR> d-------- c:\documents and settings\Administrator\Data aplikací\SecretIslandEng
2008-11-17 18:54 . 2008-11-22 17:30 <DIR> d-------- c:\program files\Alice Greenfingers 2
2008-11-16 22:27 . 2008-11-22 17:35 <DIR> d-------- c:\program files\PopCap Games
2008-11-16 21:11 . 2008-11-16 21:11 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\Zylom
2008-11-15 21:14 . 2008-11-15 21:14 <DIR> d-------- c:\program files\PlayFirst
2008-11-14 17:06 . 2008-11-17 16:26 <DIR> d-------- c:\program files\AliceGreenfingers2_at
2008-11-06 11:51 . 2008-11-06 12:17 <DIR> d-------- c:\program files\OperationMania_at
2008-11-06 11:51 . 2008-11-06 11:51 <DIR> d-------- c:\documents and settings\Administrator\Data aplikací\Pogo Games
2008-11-04 20:18 . 2008-11-24 20:28 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\PrevxCSI
2008-11-03 17:18 . 2008-11-17 16:28 <DIR> d-------- c:\program files\Cake Mania
2008-11-02 21:30 . 2008-11-28 15:59 <DIR> d-------- c:\program files\NetSoftware
2008-11-01 13:32 . 2008-11-15 20:44 <DIR> d-------- c:\program files\Retro64 Games
2008-10-29 17:50 . 2008-10-29 17:50 <DIR> d-------- c:\program files\Realore
2008-10-28 17:59 . 2008-10-29 21:52 <DIR> d-------- c:\program files\Venice
2008-10-28 14:23 . 2008-10-28 15:50 <DIR> d-------- c:\program files\Cooking Dash
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-27 13:01 --------- d-----w c:\program files\EA GAMES
2008-11-26 22:14 --------- d-----w c:\documents and settings\Administrator\Data aplikací\GameHouse
2008-11-25 19:06 --------- d---a-w c:\documents and settings\All Users\Data aplikací\TEMP
2008-11-24 19:33 --------- d-----w c:\program files\GameHouse
2008-11-24 08:53 --------- d-----w c:\program files\Miranda IM
2008-11-22 18:36 --------- d-----w c:\program files\iWin.com
2008-11-22 16:30 --------- d-----w c:\program files\Alawar
2008-11-21 15:47 --------- d-----w c:\documents and settings\All Users\Data aplikací\MumboJumbo
2008-11-17 15:26 --------- d--h--w c:\program files\InstallShield Installation Information
2008-11-17 15:26 --------- d-----w c:\program files\Common Files\soft602
2008-11-16 16:52 --------- d-----w c:\program files\Shockwave.com
2008-11-15 20:15 --------- d-----w c:\documents and settings\Administrator\Data aplikací\PlayFirst
2008-11-15 16:00 --------- d-----w c:\documents and settings\All Users\Data aplikací\AlawarWrapper
2008-11-15 12:37 --------- d-----w c:\documents and settings\All Users\Data aplikací\Valusoft
2008-11-15 12:37 --------- d-----w c:\documents and settings\Administrator\Data aplikací\Valusoft
2008-11-14 15:59 --------- d-----w c:\documents and settings\All Users\Data aplikací\PlayFirst
2008-11-13 19:31 --------- d-----w c:\documents and settings\Administrator\Data aplikací\Gamelab
2008-11-03 16:18 --------- d-----w c:\documents and settings\All Users\Data aplikací\Sandlot Games
2008-11-02 11:02 --------- d-----w c:\program files\Google
2008-10-31 13:16 --------- d-----w c:\program files\iWin Games
2008-10-28 14:50 --------- d-----w c:\program files\Cake Mania 3
2008-10-28 14:47 --------- d-----w c:\program files\RanchRush_at
2008-10-27 18:43 --------- d-----w c:\program files\Garmin GPS Plugin
2008-10-25 10:12 --------- d-----w c:\documents and settings\All Users\Data aplikací\Fugazo
2008-10-24 11:10 453,632 ----a-w c:\windows\system32\drivers\mrxsmb.sys
2008-10-24 09:18 --------- d-----w c:\program files\Software602
2008-10-24 09:03 --------- d-----w c:\documents and settings\All Users\Data aplikací\WinZip
2008-10-22 14:52 --------- d-----w c:\documents and settings\Administrator\Data aplikací\PetShowCraze
2008-10-18 17:05 --------- d-----w c:\documents and settings\All Users\Data aplikací\iWin
2008-10-18 17:04 --------- d-----w c:\documents and settings\Administrator\Data aplikací\iWin
2008-10-18 11:53 --------- d-----w c:\documents and settings\Administrator\Data aplikací\MysteryStudio
2008-10-18 08:05 --------- d-----w c:\documents and settings\Administrator\Data aplikací\GARMIN
2008-10-18 07:53 --------- d-----w c:\documents and settings\Administrator\Data aplikací\Download Manager
2008-10-11 18:45 --------- d-----w c:\program files\LambsofDreams_at
2008-10-05 09:56 --------- d-----w c:\documents and settings\All Users\Data aplikací\GameHouse
2008-10-04 15:15 --------- d-----w c:\program files\FarmFrenzy2_at
2008-10-03 11:17 --------- d-----w c:\documents and settings\Administrator\Data aplikací\iWin_DressUpRush
2008-10-03 09:38 --------- d-----w c:\documents and settings\Administrator\Data aplikací\BeachPartyCraze
2008-10-02 17:21 --------- d-----w c:\program files\SallysSalon_at
2008-10-02 12:02 --------- d-----w c:\documents and settings\All Users\Data aplikací\Legacy Interactive
2008-10-02 09:19 --------- d-----w c:\documents and settings\All Users\Data aplikací\Ludia
2008-10-02 09:19 --------- d-----w c:\documents and settings\Administrator\Data aplikací\Ludia
2008-10-01 14:33 --------- d-----w c:\documents and settings\All Users\Data aplikací\Astar Games
2008-10-01 09:55 --------- d-----w c:\documents and settings\All Users\Data aplikací\Fitn17
2008-10-01 09:54 --------- d-----w c:\documents and settings\All Users\Data aplikací\iWin Games
2008-10-01 09:54 --------- d-----w c:\documents and settings\Administrator\Data aplikací\iWinArcade
2008-10-01 08:43 --------- d-----w c:\program files\TeddyTavern_at
2008-10-01 08:43 --------- d-----w c:\program files\FitnessFrenzy_at
2008-10-01 08:43 --------- d-----w c:\documents and settings\Administrator\Data aplikací\SpinTop
2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
2008-09-30 14:59 7,780 ----a-w c:\documents and settings\Administrator\FMCodec.dat
2008-09-28 14:57 --------- d-----w c:\documents and settings\Administrator\Data aplikací\EleFun Games
2008-09-15 15:40 1,846,016 ----a-w c:\windows\system32\win32k.sys
2008-09-04 16:46 1,106,944 ----a-w c:\windows\system32\msxml3.dll
2008-07-20 21:37 241 ----a-w c:\documents and settings\Administrator\SR.vbs
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-17 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMBgMonitor.exe" [2007-08-03 202024]
"DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2007-09-18 171464]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-10-22 7700480]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-10-22 86016]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2007-11-01 949376]
"WinFastDTV"="c:\program files\WinFast\WFDTV\DTVSchdl.exe" [2007-10-09 90112]
"WinFast Schedule"="c:\program files\WinFast\WFDTV\WFWIZ.exe" [2007-10-01 413696]
"StatusClient"="c:\program files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe" [2002-12-16 36864]
"TomcatStartup"="c:\program files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe" [2003-03-31 155648]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048]
"Adobe Version Cue CS2"="c:\program files\Adobe-skola\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe" [2005-05-25 856064]
"Acrobat Assistant 7.0"="c:\program files\Adobe-skola\Adobe Acrobat 7.0\Distillr\Acrotray.exe" [2004-12-14 483328]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-03-30 267048]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"NetSoftware"="c:\program files\NetSoftware\Starter.exe" [2008-11-02 94208]
"SkyTel"="SkyTel.EXE" [2006-05-16 c:\windows\SkyTel.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]
c:\documents and settings\Administrator\Nabˇdka Start\Programy\Po spuçtŘnˇ\
iWin Desktop Alerts.lnk - c:\documents and settings\All Users\Data aplikacˇ\iWin Games\DesktopAlerts\DesktopAlerts.exe [2008-10-01 108032]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Acrobat Speed Launcher.lnk - c:\windows\Installer\{AC76BA86-1033-C740-7760-100000000002}\SC_Acrobat.exe [2008-04-05 25214]
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 113664]
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoActiveDesktopChanges"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
R1 wfcxacap;WinFast TV PCI Audio Capture Driver;c:\windows\system32\DRIVERS\wfcxacap.sys [2006-10-23 9856]
R2 wfcxatun;WinFast TV Analog Tuner Driver;c:\windows\system32\drivers\wfcxatun.sys [2006-03-24 31616]
R2 WFCXVCAP;WinFast TV Video Capture Driver;c:\windows\system32\drivers\wfcxvcap.sys [2006-03-24 167424]
R3 PSched;Plánovač paketů technologie QoS;c:\windows\system32\DRIVERS\psched.sys [2004-08-04 69120]
R3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver;c:\windows\system32\drivers\wfcxdtun.sys [2006-03-24 21248]
R3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver;c:\windows\system32\drivers\wfcxtcap.sys [2006-10-23 15872]
R3 wfcxxbar;WinFast TV Crossbar Driver;c:\windows\system32\drivers\wfcxxbar.sys [2006-03-24 10496]
R3 WFIOCTL;WFIOCTL;\??\c:\program files\WinFast\WFDTV\WFIOCTL.SYS [2007-11-01 9446]
S1 ensqio;ensqio;c:\windows\system32\DRIVERS\ensqio.sys []
S1 sbpcint4;SB AudioPCI 128;c:\windows\system32\DRIVERS\sbpcint4.sys []
.
Obsah adresáře 'Naplánované úlohy'
2008-11-27 c:\windows\Tasks\Antispyware Scheduled Scan.job
- c:\program files\Antispyware\Antispyware.exe []
2008-11-27 c:\windows\Tasks\Antispyware Scheduled Scan.job
- c:\program files\Antispyware []
2008-11-27 c:\windows\Tasks\{D34F18B0-576E-11D0-B28C-00C04FD7CD22}_LERCH_Administrator.job
- c:\windows\system32\mobsync.exe [2004-08-17 17:49]
.
.
------- Doplňkový sken -------
.
FireFox -: Profile - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\qc1d6ayl.default\
FF -: plugin - c:\program files\iTunes\Mozilla Plugins\npitunes.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-28 16:03:12
Windows 5.1.2600 Service Pack 2 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'lsass.exe'(820)
c:\windows\system32\imon.dll
.
Celkový čas: 2008-11-28 16:04:21
ComboFix-quarantined-files.txt 2008-11-28 15:03:40
ComboFix2.txt 2008-11-28 14:27:34
ComboFix3.txt 2008-11-28 10:45:18
ComboFix4.txt 2008-11-28 10:42:34
ComboFix5.txt 2008-11-28 15:01:06
Před spuštěním: Volných bajtů: 26 883 411 968
Po spuštění: Volných bajtů: 26,870,116,352
181 --- E O F --- 2008-11-26 21:08:20
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43294
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: Prosím o kontrolu logu
Log O.K. ještě nový log z HJT.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: Prosím o kontrolu logu
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:57:32 dop., on 30.11.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
C:\Program Files\WinFast\WFDTV\WFWIZ.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Adobe-skola\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\acrobat_sl.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Documents and Settings\All Users\Data aplikací\iWin Games\DesktopAlerts\DesktopAlerts.exe
C:\Program Files\NetSoftware\NetSoftware.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wuauclt.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~2\ICQTOO~1\toolbaru.dll
O2 - BHO: IEHlprObj Class - {CE7C3CF0-4B15-11D1-ABED-709549C10000} - C:\Program Files\NetSoftware\IEHelper.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
O4 - HKLM\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFDTV\WFWIZ.exe
O4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe-skola\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [NetSoftware] "C:\Program Files\NetSoftware\Starter.exe" /path="C:\Program Files\NetSoftware"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: iWin Desktop Alerts.lnk = ?
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést cíl vazby do existujícího PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést do existujícího PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Převést vybrané vazby do Adobe PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést vybrané vazby do existujícího PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Převést výběr do Adobe PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést výběr do existujícího PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\ICQ\ICQ 6 czech\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\ICQ\ICQ 6 czech\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/v ... .2.4.3.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Adobe Systems Incorporated - C:\Program Files\Adobe-skola\Adobe Version Cue CS2\bin\VersionCueCS2.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O24 - Desktop Component 1: Frekvence 1 - http://www.frekvence1.cz/cs/webova_radi ... 2_ad.shtml
--
End of file - 8646 bytes
Scan saved at 11:57:32 dop., on 30.11.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
C:\Program Files\WinFast\WFDTV\WFWIZ.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Adobe-skola\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\acrobat_sl.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Documents and Settings\All Users\Data aplikací\iWin Games\DesktopAlerts\DesktopAlerts.exe
C:\Program Files\NetSoftware\NetSoftware.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wuauclt.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~2\ICQTOO~1\toolbaru.dll
O2 - BHO: IEHlprObj Class - {CE7C3CF0-4B15-11D1-ABED-709549C10000} - C:\Program Files\NetSoftware\IEHelper.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
O4 - HKLM\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFDTV\WFWIZ.exe
O4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe-skola\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [NetSoftware] "C:\Program Files\NetSoftware\Starter.exe" /path="C:\Program Files\NetSoftware"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: iWin Desktop Alerts.lnk = ?
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést cíl vazby do existujícího PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést do existujícího PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Převést vybrané vazby do Adobe PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést vybrané vazby do existujícího PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Převést výběr do Adobe PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést výběr do existujícího PDF - res://C:\Program Files\Adobe-skola\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\ICQ\ICQ 6 czech\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\ICQ\ICQ 6 czech\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/v ... .2.4.3.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Adobe Systems Incorporated - C:\Program Files\Adobe-skola\Adobe Version Cue CS2\bin\VersionCueCS2.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O24 - Desktop Component 1: Frekvence 1 - http://www.frekvence1.cz/cs/webova_radi ... 2_ad.shtml
--
End of file - 8646 bytes
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43294
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: Prosím o kontrolu logu
Log O.K.
ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix[mezera]/u
takže jestli nejsou problémy,tak vyčisti systém CCleanerem
a použij i T-Cleaner
smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš>spustíš
Aktualizuj javu:
Java SE Runtime Environment 6u10
Vyber OS ( předpokládám Windows), zatržítko agree-continue
Vyber:
Windows Offline Installation
jre-6u10-windows-i586-p.exe
Ostatní javy odeber v přidat/odebrat programy.
Vše.
ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix[mezera]/u
takže jestli nejsou problémy,tak vyčisti systém CCleanerem
a použij i T-Cleaner
smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš>spustíš
Aktualizuj javu:
Java SE Runtime Environment 6u10
Vyber OS ( předpokládám Windows), zatržítko agree-continue
Vyber:
Windows Offline Installation
jre-6u10-windows-i586-p.exe
Ostatní javy odeber v přidat/odebrat programy.
Vše.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Kdo je online
Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 104 hostů