Prosím o kontrolu

[Linkic]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:35:41, on 5.10.2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.17037)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Launch Manager\WisKeyState.exe
C:\Program Files\Launch Manager\OSD.exe
C:\Program Files\Launch Manager\OSDCtrl.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Windows\System32\rundll32.exe
C:\Users\user\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\wuauclt.exe
C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSoft.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSoft.dll
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSoft.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: PandoraTV Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [HotkeyApp] "C:\Program Files\Launch Manager\HotkeyApp.exe"
O4 - HKLM\..\Run: [WisKeyState] "C:\Program Files\Launch Manager\WisKeyState.exe"
O4 - HKLM\..\Run: [LMgrVolOSD] "C:\Program Files\Launch Manager\OSD.exe"
O4 - HKLM\..\Run: [LMgrOSD] "C:\Program Files\Launch Manager\OSDCtrl.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NetFxUpdate_v1.1.4322] "C:\Windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe" 1 v1.1.4322 GAC + NI NID
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [Google Update] "C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [stoappLang] rundll32.exe "C:\Users\user\AppData\Local\stoappLang\stoappLang.dll", DllInit
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [RGSC] C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Autodesk Data Management Job Dispatch - Autodesk - C:\Program Files\Autodesk\Data Management Server 2009\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
O23 - Service: Autodesk EDM Server - Autodesk - C:\Program Files\Autodesk\Data Management Server 2009\Server\Webserver\Connectivity.EDMWS.Server.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: WisLMSvc - Wistron Corp. - C:\Program Files\Launch Manager\WisLMSvc.exe

--
End of file - 8440 bytes

Předem děkuji

[Reklama]

[jaro3]

Nezakládej další témata se stejným logem , tím nic neuspíšíš!! Jedno mažu..

Odinstaluj:
Ask.com,GenericAskToolbar, Ask Toolbar
Softonic-Eng7 Toolbar
ICQToolBar
DAEMON Tools Toolbar
PandoraTV Toolbar


Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSoft.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSoft.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSoft.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: PandoraTV Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKCU\..\Run: [stoappLang] rundll32.exe "C:\Users\user\AppData\Local\stoappLang\stoappLang.dll", DllInit
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab


Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.

Vypni si rez.ochrany i firewall.
Stáhni si Dr. Web CureIt
dej update , po aktualizaci dej start.
Tlacitky dole můzeš soubor léčit(systémové soubory), smazat, přesunout nebo přejmenovat

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

[Linkic]

Jo pardon omlouvám se moje chyba..

Jinak tady je ten log z Malwarebytes:


Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4752

Windows 6.0.6000
Internet Explorer 7.0.6000.17037

6.10.2010 12:56:18
mbam-log-2010-10-06 (12-56-18).txt

Typ skenu: Rychlý sken
Skenované objekty: 143476
Uplynulý čas: 11 minuta(y), 0 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 2
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055fd26d-3a88-4e15-963d-dc8493744b1d} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{055fd26d-3a88-4e15-963d-dc8493744b1d} (Trojan.BHO) -> No action taken.

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
C:\Users\user\Local Settings\Temporary Internet Files\Softonic-Eng7_EN.exe (Trojan.Agent) -> No action taken.
C:\Program Files\ICQToolbar\toolbaru.dll (Trojan.BHO) -> No action taken.

[jaro3]

OK. ale psal jsem , abys mimo jiné odinstaloval ICQToolBar.....

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Můžeš sem pak vložit nový log z MbAM.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

[Linkic]

ComboFix


ComboFix 10-10-05.04 - user 06.10.2010 14:02:11.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1250.420.1029.18.2269.1626 [GMT 2:00]
Spuštěný z: c:\users\user\Videos\Downloads\ComboFix.exe
AV: avast! antivirus 4.8.1368 [VPS 100402-1] *On-access scanning disabled* (Outdated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: avast! antivirus 4.8.1368 [VPS 100402-1] *disabled* (Outdated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Downloaded Program Files\IDropPTB.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-09-06 do 2010-10-06 )))))))))))))))))))))))))))))))
.

2010-10-06 12:11 . 2010-10-06 12:12 -------- d-----w- c:\users\user\AppData\Local\temp
2010-10-06 12:11 . 2010-10-06 12:11 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-10-06 11:18 . 2010-10-06 11:18 -------- d-----w- c:\program files\IObit
2010-10-06 10:43 . 2010-10-06 10:43 -------- d-----w- c:\users\user\AppData\Roaming\Malwarebytes
2010-10-06 10:43 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-06 10:43 . 2010-10-06 10:43 -------- d-----w- c:\programdata\Malwarebytes
2010-10-06 10:43 . 2010-10-06 10:43 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-10-06 10:43 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-05 22:53 . 2010-10-05 22:53 -------- d-----w- c:\users\user\DoctorWeb
2010-10-05 19:34 . 2010-10-05 19:34 388096 ----a-r- c:\users\user\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-10-05 19:34 . 2010-10-05 19:34 -------- d-----w- c:\program files\Trend Micro
2010-10-04 17:09 . 2010-10-04 17:09 -------- d-----w- c:\users\user\AppData\Roaming\Leadertech
2010-10-04 16:54 . 2010-10-04 16:54 -------- d-----w- c:\program files\EA Sports
2010-09-23 21:33 . 2010-09-23 21:33 471040 ----a-w- c:\programdata\MGS\cache\m\menucore.32d59a09a352408245e7b605da4978ca.dll
2010-09-21 18:37 . 2010-09-21 18:37 932288 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\971\AdobeARM.exe
2010-09-21 18:37 . 2010-09-21 18:37 70584 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\971\AdobeExtractFiles.dll
2010-09-21 18:37 . 2010-09-21 18:37 338856 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\971\ReaderUpdater.exe
2010-09-21 18:37 . 2010-09-21 18:37 338856 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\971\AcrobatUpdater.exe
2010-09-12 03:24 . 2010-09-12 03:24 -------- d-----w- c:\programdata\Norton
2010-09-12 03:24 . 2010-09-12 03:24 -------- d-----w- c:\windows\system32\drivers\NSS
2010-09-12 03:24 . 2010-09-12 03:24 -------- d-----w- c:\program files\Norton Security Scan
2010-09-12 03:24 . 2010-09-12 03:24 -------- d-----w- c:\programdata\Symantec
2010-09-12 03:24 . 2010-09-12 03:24 -------- d-----w- c:\programdata\NortonInstaller
2010-09-12 03:24 . 2010-09-12 03:24 -------- d-----w- c:\program files\NortonInstaller
2010-09-11 15:32 . 2010-09-11 15:32 57344 ----a-w- c:\programdata\DivX\RunAsUser\RUNASUSERPROCESS.dll
2010-09-11 15:31 . 2010-09-11 15:21 185640 ----a-w- c:\programdata\DivX\Setup\finishPlugin.dll
2010-09-11 15:31 . 2010-09-11 15:21 1062184 ----a-w- c:\programdata\DivX\Setup\Resource.dll
2010-09-11 15:31 . 2010-09-11 15:21 850200 ----a-w- c:\programdata\DivX\Setup\DivXSetup.exe
2010-09-11 15:30 . 2010-09-11 15:30 56765 ----a-w- c:\programdata\DivX\DivXPlusShortcuts\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 15:30 56997 ----a-w- c:\programdata\DivX\WebPlayer\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 15:30 57691 ----a-w- c:\programdata\DivX\Player\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 15:30 53600 ----a-w- c:\programdata\DivX\Update\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 17:37 -------- d-----w- c:\users\user\AppData\Roaming\DivX
2010-09-11 15:30 . 2010-09-11 15:30 84063 ----a-w- c:\programdata\DivX\TransferWizard\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 15:30 -------- d-----w- c:\program files\Common Files\PX Storage Engine
2010-09-11 15:30 . 2010-09-11 15:30 57054 ----a-w- c:\programdata\DivX\DSDesktopComponents\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 15:30 54166 ----a-w- c:\programdata\DivX\DSAVCDecoder\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 57532 ----a-w- c:\programdata\DivX\DSASPDecoder\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 56458 ----a-w- c:\programdata\DivX\DivXDecoderShortcut\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54174 ----a-w- c:\programdata\DivX\DSAACDecoder\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54153 ----a-w- c:\programdata\DivX\DFXPlugin\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54128 ----a-w- c:\programdata\DivX\Converter\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54644 ----a-w- c:\programdata\DivX\TranscodeEngine\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54101 ----a-w- c:\programdata\DivX\MPEG2Plugin\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 57409 ----a-w- c:\programdata\DivX\ControlPanel\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 52963 ----a-w- c:\programdata\DivX\MSVC80CRTRedist\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54073 ----a-w- c:\programdata\DivX\Qt4.5\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 56969 ----a-w- c:\programdata\DivX\ASPEncoder\Uninstaller.exe
2010-09-11 15:21 . 2010-09-11 15:21 144696 ----a-w- c:\programdata\DivX\RunAsUser\RUNASUSERPROCESS.exe
2010-09-11 15:21 . 2010-09-11 15:30 -------- d-----w- c:\programdata\DivX

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-06 11:40 . 2010-06-05 14:46 -------- d-----w- c:\users\user\AppData\Roaming\Microgaming
2010-10-05 22:26 . 2009-12-17 16:30 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2010-10-04 16:24 . 2009-12-20 11:54 -------- d-----w- c:\users\user\AppData\Roaming\uTorrent
2010-09-30 10:55 . 2010-06-19 18:38 -------- d-----w- c:\program files\Microsoft Silverlight
2010-09-24 18:23 . 2010-04-13 12:21 138520 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-09-24 18:23 . 2010-04-13 12:21 233960 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-09-14 19:28 . 2009-12-11 18:18 528618 ----a-w- c:\windows\system32\perfh005.dat
2010-09-14 19:28 . 2009-12-11 18:18 103816 ----a-w- c:\windows\system32\perfc005.dat
2010-09-11 15:30 . 2009-12-19 23:41 -------- d-----w- c:\program files\DivX
2010-09-11 15:29 . 2009-12-19 23:41 -------- d-----w- c:\program files\Common Files\DivX Shared
2010-09-04 17:08 . 2010-09-04 17:08 65536 ----a-w- c:\programdata\MGS\cache\v\void.c19b3dfc09b07295326d40aca47e2109.dll
2010-09-04 17:07 . 2010-09-04 17:07 471040 ----a-w- c:\programdata\MGS\cache\m\menucore.b82f22b48abe791a8dce5a82060c61b9.dll
2010-09-01 16:04 . 2010-04-13 12:21 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-08-30 12:36 . 2010-04-13 12:21 22328 ----a-w- c:\users\user\AppData\Roaming\PnkBstrK.sys
2010-08-30 12:36 . 2010-04-13 12:21 22328 ----a-w- c:\users\user\AppData\Roaming\PnkBstrK.sys
2010-08-30 12:35 . 2009-12-11 09:48 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-08-30 11:48 . 2009-12-23 20:53 -------- d-----w- c:\program files\Activision
2010-08-25 10:11 . 2010-08-25 10:11 -------- d-----w- c:\program files\Noel Danjou
2010-08-25 10:11 . 2010-08-25 10:11 -------- d-----w- c:\users\user\AppData\Roaming\UseNeXT
2010-08-25 10:11 . 2010-08-25 10:11 -------- d-----w- c:\program files\UseNeXT
2010-08-16 17:25 . 2010-08-16 17:25 -------- d-----w- c:\program files\GamePark
2010-07-11 17:41 . 2010-07-11 17:41 159744 ----a-w- c:\programdata\MGS\cache\p\progressive_temp.979c9e04248bf52052c2caf1e627d86b.dll
2010-07-11 17:41 . 2010-07-11 17:41 151552 ----a-w- c:\programdata\MGS\cache\p\progressive.8fe1347dac5a6804834d35e86c789f9a.dll
2010-07-11 17:41 . 2010-07-11 17:41 131072 ----a-w- c:\programdata\MGS\cache\r\rouletteroyale.78fbb4e6860f34eb015928fa5c78c605.dll
2010-07-11 17:41 . 2010-07-11 17:41 114688 ----a-w- c:\programdata\MGS\cache\e\euroroulette.fa2b524975a5d8bbc30203d094e2b084.dll
2010-07-11 17:40 . 2010-07-11 17:40 32768 ----a-w- c:\programdata\MGS\cache\_\_crt_keno.ed975aa9c9bb5e5ec89c8ffeee254e8a.dll
2010-07-11 17:37 . 2010-07-11 17:37 233472 ----a-w- c:\programdata\MGS\cache\b\bjstrategyui1.5a2f52359fe99e4484435bbaf8f92b30.dll
2010-07-11 17:37 . 2010-07-11 17:37 49152 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakstrategylogic1.64d4f0467e0e777ddfbb02e7544f98fa.dll
2010-07-11 17:37 . 2010-07-11 17:37 225280 ----a-w- c:\programdata\MGS\cache\b\bjgoldautoplayplugin.9e04124b2f25d98a562d14260b995f0c.dll
2010-07-11 17:37 . 2010-07-11 17:37 602112 ----a-w- c:\programdata\MGS\cache\b\bjgoldplugin.f7a40649bbd758b8f99cf67e1769d71c.dll
2010-07-11 17:37 . 2010-07-11 17:37 512000 ----a-w- c:\programdata\MGS\cache\b\bjgoldxxx.e2caa9292f5de8579a9ad479e877ced8.dll
2010-07-11 17:37 . 2010-07-11 17:37 192512 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakxxx.9edf63783590e61148711da2563c8d47.dll
2010-07-11 17:37 . 2010-07-11 17:37 147456 ----a-w- c:\programdata\MGS\cache\b\bjstrategylogic1.cae96e5e68740973929725d2ac549cc0.dll
2010-07-11 17:37 . 2010-07-11 17:37 98304 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakautoplayplugin.bd0995adc01c55d3f345d8fc81d6bf13.dll
2010-07-11 17:37 . 2010-07-11 17:37 233472 ----a-w- c:\programdata\MGS\cache\b\bjgoldstatsplugin.67546387f1af1fe46f021dbce8a072f4.dll
2010-07-11 17:37 . 2010-07-11 17:37 417792 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakplugin.85c5094e4412e0647ba5f7a72219a89d.dll
2010-07-11 17:37 . 2010-07-11 17:37 106496 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakstatsplugin.c622fc192c22f951a4bf27988c8c48e0.dll
2010-07-11 17:37 . 2010-07-11 17:37 126976 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakstrategyui1.c4a60b718047a7230c1f7eb62e24ac16.dll
2010-07-11 17:36 . 2010-07-11 17:36 618496 ----a-w- c:\programdata\MGS\cache\g\gamble2_wealthspa.a58c586ab4d974ea2d4142fb4d851c2b.dll
2010-07-11 17:35 . 2010-07-11 17:35 94208 ----a-w- c:\programdata\MGS\cache\l\lua51host.461d2601d0d39d2e2d5cd4a02a2b3087.dll
2010-07-11 17:35 . 2010-07-11 17:35 618496 ----a-w- c:\programdata\MGS\cache\g\gamble2_octgao_09.ae6289cf11b05446123a7e16d97ef025.dll
2010-07-11 17:35 . 2010-07-11 17:35 213264 ----a-w- c:\programdata\MGS\cache\g\gamble2.9d7f0f3cf78a68d28fc5a3e77fdc77da.dll
2010-07-11 17:35 . 2010-07-11 17:35 176400 ----a-w- c:\programdata\MGS\cache\g\gamble.212eaf21a4805f8521d0d0c57b6a933b.dll
2010-07-11 17:35 . 2010-07-11 17:35 86016 ----a-w- c:\programdata\MGS\cache\g\gambleplugin.c4d8c6f5542066f894b7f2e575038afb.dll
2010-07-11 17:34 . 2010-07-11 17:34 307472 ----a-w- c:\programdata\MGS\cache\g\gamble2_tggg.436ea9e59e2a2b9a2106e598920cba26.dll
2010-07-11 17:34 . 2010-07-11 17:34 221456 ----a-w- c:\programdata\MGS\cache\g\gamble2_temp.5a22e38498bf34a124cc458bf6408ad3.dll
2010-07-11 17:34 . 2010-07-11 17:34 618496 ----a-w- c:\programdata\MGS\cache\g\gamble2_septgao_09.d8cd6b206ce4b18e0867e42785806a63.dll
2010-07-11 17:33 . 2010-07-11 17:33 602112 ----a-w- c:\programdata\MGS\cache\g\gamble2_flightzone.d149c5c0a243e45a82d87b40855052ab.dll
2010-07-11 17:33 . 2010-07-11 17:33 606208 ----a-w- c:\programdata\MGS\cache\g\gamble2_summerholiday.b02744e18c4cdb3dd3394f69d8987073.dll
2010-07-11 17:22 . 2010-07-11 17:22 262416 ----a-w- c:\programdata\MGS\cache\t\transition_temp.c6aaf42b66fa6688c8ea18a671984287.dll
2010-07-11 17:22 . 2010-07-11 17:22 655360 ----a-w- c:\programdata\MGS\cache\t\transition_flightzone.2d8aa10da872f1ac4a34a2122bf3c4b2.dll
2010-07-11 17:22 . 2010-07-11 17:22 266512 ----a-w- c:\programdata\MGS\cache\t\transition_tggg.399218aff849d2e187d4554dd62a73b6.dll
2010-07-11 17:22 . 2010-07-11 17:22 679936 ----a-w- c:\programdata\MGS\cache\t\transition_septgao_09.04686bb06cfe59ecb3f271eb95218422.dll
2010-07-11 17:22 . 2010-07-11 17:22 254224 ----a-w- c:\programdata\MGS\cache\t\transition.26c3e2ce55c7cca8b63e5e8d7b4627e4.dll
2010-07-11 17:22 . 2010-07-11 17:22 679936 ----a-w- c:\programdata\MGS\cache\t\transition_wealthspa.5a3f4e96415d8b3050681cdd275f3d88.dll
2010-07-11 17:22 . 2010-07-11 17:22 679936 ----a-w- c:\programdata\MGS\cache\t\transition_octgao_09.7768fe95f9efff3962c913196fe05f6a.dll
2010-07-11 17:18 . 2010-07-11 17:18 376832 ----a-w- c:\programdata\MGS\cache\m\mptadvancedslots.c25cbc913a8fbff25d5ff4436d66df8a.dll
2010-07-11 17:18 . 2010-07-11 17:18 188416 ----a-w- c:\programdata\MGS\cache\m\mptleaderboard.4146c172bd98dcfce86f1098fd229eb4.dll
2010-07-11 17:18 . 2010-07-11 17:18 65536 ----a-w- c:\programdata\MGS\cache\v\void.df7f7ef643b2f9803f9738f1b85d08e7.dll
2010-07-11 17:17 . 2010-07-11 17:17 471040 ----a-w- c:\programdata\MGS\cache\m\menucore.165da379d8a0adee611c449ba3662532.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
2009-09-23 10:50 2261016 ----a-w- c:\program files\Softonic-Eng7\tbSoft.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}"= "c:\program files\Softonic-Eng7\tbSoft.dll" [2009-09-23 2261016]

[HKEY_CLASSES_ROOT\clsid\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}"= "c:\program files\Softonic-Eng7\tbSoft.dll" [2009-09-23 2261016]

[HKEY_CLASSES_ROOT\clsid\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-12-17 1232896]
"WindowsWelcomeCenter"="oobefldr.dll" [2006-11-02 2159104]
"Google Update"="c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-12-17 135664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-02 1004136]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"RtHDVCpl"="RtHDVCpl.exe" [2008-06-13 6183456]
"Skytel"="Skytel.exe" [2007-11-20 1826816]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-08-17 102400]
"HotkeyApp"="c:\program files\Launch Manager\HotkeyApp.exe" [2008-05-23 192512]
"WisKeyState"="c:\program files\Launch Manager\WisKeyState.exe" [2008-03-07 208896]
"LMgrVolOSD"="c:\program files\Launch Manager\OSD.exe" [2008-03-03 258048]
"LMgrOSD"="c:\program files\Launch Manager\OSDCtrl.exe" [2007-12-25 241664]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2009-07-27 180224]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"NetFxUpdate_v1.1.4322"="c:\windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe" [2004-08-10 106496]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-09-01 1164584]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-04-29 1090952]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

R3 WisLMSvc;WisLMSvc;c:\program files\Launch Manager\WisLMSvc.exe [2008-01-15 118784]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2009-12-17 691696]
S1 aswSP;avast! Self Protection; [x]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2009-11-24 20560]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\DRIVERS\aswMonFlt.sys [2009-11-24 53328]
S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2008-04-11 84240]

.
Obsah adresáře 'Naplánované úlohy'

2010-09-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2774903098-3325646863-3127335589-1000Core.job
- c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2009-12-17 15:39]

2010-10-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2774903098-3325646863-3127335589-1000UA.job
- c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2009-12-17 15:39]

2010-10-04 c:\windows\Tasks\Norton Security Scan for user.job
- c:\program files\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-09-12 07:48]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/
IE: {{C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - c:\microgaming\Poker\UnibetpokerMPP\MPPoker.exe
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKCU-Run-EA Core - c:\program files\Electronic Arts\EADM\Core.exe
HKCU-Run-RGSC - c:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe


.
Celkový čas: 2010-10-06 14:14:01
ComboFix-quarantined-files.txt 2010-10-06 12:14

Před spuštěním: Volných bajtů: 119 954 698 240
Po spuštění: Volných bajtů: 121 039 511 552

- - End Of File - - DC4EF291CF1438924C1502B27F819925

A MbAM:


Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4752
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4752

Windows 6.0.6000
Internet Explorer 7.0.6000.17037

6.10.2010 13:41:38
mbam-log-2010-10-06 (13-41-38).txt

Typ skenu: Rychlý sken
Skenované objekty: 143476
Uplynulý čas: 11 minuta(y), 0 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 2
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055fd26d-3a88-4e15-963d-dc8493744b1d} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{055fd26d-3a88-4e15-963d-dc8493744b1d} (Trojan.BHO) -> Quarantined and deleted successfully.

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
C:\Users\user\Local Settings\Temporary Internet Files\Softonic-Eng7_EN.exe (Trojan.Agent) -> Quarantined and delete

[jaro3]

Odinstaluj:
Norton Security Scan/Norton/Symantec(pokud tam máš)

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

KillAll::
File::
c:\windows\system32\perfh005.dat
c:\windows\system32\perfc005.dat
c:\windows\Tasks\Norton Security Scan for user.job
c:\program files\Norton Security Scan\Engine\2.7.3.34\Nss.exe

Folder::
c:\programdata\Norton
c:\windows\system32\drivers\NSS
c:\program files\Norton Security Scan
c:\programdata\Symantec
c:\programdata\NortonInstaller
c:\program files\NortonInstaller
c:\program files\DAEMON Tools Toolbar

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}"=-
[-HKEY_CLASSES_ROOT\clsid\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}"=-
[-HKEY_CLASSES_ROOT\clsid\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

[Linkic]

ComboFix 10-10-05.04 - user 06.10.2010 20:39:15.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1250.420.1029.18.2269.1505 [GMT 2:00]
Spuštěný z: c:\users\user\Videos\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\user\Desktop\CFScript.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

FILE ::
"c:\program files\Norton Security Scan\Engine\2.7.3.34\Nss.exe"
"c:\windows\system32\perfc005.dat"
"c:\windows\system32\perfh005.dat"
"c:\windows\Tasks\Norton Security Scan for user.job"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\DAEMON Tools Toolbar
c:\program files\DAEMON Tools Toolbar\_DTLite.xml
c:\programdata\Norton
c:\programdata\Norton\symdata.xml
c:\programdata\NortonInstaller
c:\programdata\NortonInstaller\Logs\09-12-2010-05h24m34s\Install.1.mft.7z
c:\programdata\NortonInstaller\Logs\09-12-2010-05h24m34s\NortonInstall-09-12-2010-05h24m34s.log
c:\programdata\NortonInstaller\Logs\10-06-2010-17h14m11s\Install.1.mft.7z
c:\programdata\NortonInstaller\Logs\10-06-2010-17h14m11s\NortonInstall-10-06-2010-17h14m11s.log
c:\programdata\NortonInstaller\Logs\10-06-2010-17h14m21s\NortonInstall-10-06-2010-17h14m21s.log
c:\programdata\Symantec
c:\programdata\Symantec\symdata.xml
c:\windows\system32\perfc005.dat
c:\windows\system32\perfh005.dat

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-09-06 do 2010-10-06 )))))))))))))))))))))))))))))))
.

2010-10-06 18:47 . 2010-10-06 18:51 -------- d-----w- c:\users\user\AppData\Local\temp
2010-10-06 18:47 . 2010-10-06 18:47 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-10-06 11:18 . 2010-10-06 11:18 -------- d-----w- c:\program files\IObit
2010-10-06 10:43 . 2010-10-06 10:43 -------- d-----w- c:\users\user\AppData\Roaming\Malwarebytes
2010-10-06 10:43 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-06 10:43 . 2010-10-06 10:43 -------- d-----w- c:\programdata\Malwarebytes
2010-10-06 10:43 . 2010-10-06 10:43 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-10-06 10:43 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-05 22:53 . 2010-10-05 22:53 -------- d-----w- c:\users\user\DoctorWeb
2010-10-05 19:34 . 2010-10-05 19:34 388096 ----a-r- c:\users\user\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-10-05 19:34 . 2010-10-05 19:34 -------- d-----w- c:\program files\Trend Micro
2010-10-04 17:09 . 2010-10-04 17:09 -------- d-----w- c:\users\user\AppData\Roaming\Leadertech
2010-10-04 16:54 . 2010-10-04 16:54 -------- d-----w- c:\program files\EA Sports
2010-09-23 21:33 . 2010-09-23 21:33 471040 ----a-w- c:\programdata\MGS\cache\m\menucore.32d59a09a352408245e7b605da4978ca.dll
2010-09-21 18:37 . 2010-09-21 18:37 932288 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\971\AdobeARM.exe
2010-09-21 18:37 . 2010-09-21 18:37 932288 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\12281\AdobeARM.exe
2010-09-21 18:37 . 2010-09-21 18:37 70584 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\971\AdobeExtractFiles.dll
2010-09-21 18:37 . 2010-09-21 18:37 70584 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\12281\AdobeExtractFiles.dll
2010-09-21 18:37 . 2010-09-21 18:37 338856 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\971\ReaderUpdater.exe
2010-09-21 18:37 . 2010-09-21 18:37 338856 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\971\AcrobatUpdater.exe
2010-09-21 18:37 . 2010-09-21 18:37 338856 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\12281\ReaderUpdater.exe
2010-09-21 18:37 . 2010-09-21 18:37 338856 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\12281\AcrobatUpdater.exe
2010-09-11 15:32 . 2010-09-11 15:32 57344 ----a-w- c:\programdata\DivX\RunAsUser\RUNASUSERPROCESS.dll
2010-09-11 15:31 . 2010-09-11 15:21 185640 ----a-w- c:\programdata\DivX\Setup\finishPlugin.dll
2010-09-11 15:31 . 2010-09-11 15:21 1062184 ----a-w- c:\programdata\DivX\Setup\Resource.dll
2010-09-11 15:31 . 2010-09-11 15:21 850200 ----a-w- c:\programdata\DivX\Setup\DivXSetup.exe
2010-09-11 15:30 . 2010-09-11 15:30 56765 ----a-w- c:\programdata\DivX\DivXPlusShortcuts\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 15:30 56997 ----a-w- c:\programdata\DivX\WebPlayer\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 15:30 57691 ----a-w- c:\programdata\DivX\Player\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 15:30 53600 ----a-w- c:\programdata\DivX\Update\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 17:37 -------- d-----w- c:\users\user\AppData\Roaming\DivX
2010-09-11 15:30 . 2010-09-11 15:30 84063 ----a-w- c:\programdata\DivX\TransferWizard\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 15:30 -------- d-----w- c:\program files\Common Files\PX Storage Engine
2010-09-11 15:30 . 2010-09-11 15:30 57054 ----a-w- c:\programdata\DivX\DSDesktopComponents\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 15:30 54166 ----a-w- c:\programdata\DivX\DSAVCDecoder\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 57532 ----a-w- c:\programdata\DivX\DSASPDecoder\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 56458 ----a-w- c:\programdata\DivX\DivXDecoderShortcut\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54174 ----a-w- c:\programdata\DivX\DSAACDecoder\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54153 ----a-w- c:\programdata\DivX\DFXPlugin\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54128 ----a-w- c:\programdata\DivX\Converter\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54644 ----a-w- c:\programdata\DivX\TranscodeEngine\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54101 ----a-w- c:\programdata\DivX\MPEG2Plugin\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 57409 ----a-w- c:\programdata\DivX\ControlPanel\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 52963 ----a-w- c:\programdata\DivX\MSVC80CRTRedist\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54073 ----a-w- c:\programdata\DivX\Qt4.5\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 56969 ----a-w- c:\programdata\DivX\ASPEncoder\Uninstaller.exe
2010-09-11 15:21 . 2010-09-11 15:21 144696 ----a-w- c:\programdata\DivX\RunAsUser\RUNASUSERPROCESS.exe
2010-09-11 15:21 . 2010-09-11 15:30 -------- d-----w- c:\programdata\DivX

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-06 12:18 . 2010-06-05 14:46 -------- d-----w- c:\users\user\AppData\Roaming\Microgaming
2010-10-04 16:24 . 2009-12-20 11:54 -------- d-----w- c:\users\user\AppData\Roaming\uTorrent
2010-09-30 10:55 . 2010-06-19 18:38 -------- d-----w- c:\program files\Microsoft Silverlight
2010-09-24 18:23 . 2010-04-13 12:21 138520 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-09-24 18:23 . 2010-04-13 12:21 233960 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-09-11 15:30 . 2009-12-19 23:41 -------- d-----w- c:\program files\DivX
2010-09-11 15:29 . 2009-12-19 23:41 -------- d-----w- c:\program files\Common Files\DivX Shared
2010-09-04 17:08 . 2010-09-04 17:08 65536 ----a-w- c:\programdata\MGS\cache\v\void.c19b3dfc09b07295326d40aca47e2109.dll
2010-09-04 17:07 . 2010-09-04 17:07 471040 ----a-w- c:\programdata\MGS\cache\m\menucore.b82f22b48abe791a8dce5a82060c61b9.dll
2010-09-01 16:04 . 2010-04-13 12:21 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-08-30 12:36 . 2010-04-13 12:21 22328 ----a-w- c:\users\user\AppData\Roaming\PnkBstrK.sys
2010-08-30 12:36 . 2010-04-13 12:21 22328 ----a-w- c:\users\user\AppData\Roaming\PnkBstrK.sys
2010-08-30 12:35 . 2009-12-11 09:48 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-08-30 11:48 . 2009-12-23 20:53 -------- d-----w- c:\program files\Activision
2010-08-25 10:11 . 2010-08-25 10:11 -------- d-----w- c:\program files\Noel Danjou
2010-08-25 10:11 . 2010-08-25 10:11 -------- d-----w- c:\users\user\AppData\Roaming\UseNeXT
2010-08-25 10:11 . 2010-08-25 10:11 -------- d-----w- c:\program files\UseNeXT
2010-08-16 17:25 . 2010-08-16 17:25 -------- d-----w- c:\program files\GamePark
2010-07-11 17:41 . 2010-07-11 17:41 159744 ----a-w- c:\programdata\MGS\cache\p\progressive_temp.979c9e04248bf52052c2caf1e627d86b.dll
2010-07-11 17:41 . 2010-07-11 17:41 151552 ----a-w- c:\programdata\MGS\cache\p\progressive.8fe1347dac5a6804834d35e86c789f9a.dll
2010-07-11 17:41 . 2010-07-11 17:41 131072 ----a-w- c:\programdata\MGS\cache\r\rouletteroyale.78fbb4e6860f34eb015928fa5c78c605.dll
2010-07-11 17:41 . 2010-07-11 17:41 114688 ----a-w- c:\programdata\MGS\cache\e\euroroulette.fa2b524975a5d8bbc30203d094e2b084.dll
2010-07-11 17:40 . 2010-07-11 17:40 32768 ----a-w- c:\programdata\MGS\cache\_\_crt_keno.ed975aa9c9bb5e5ec89c8ffeee254e8a.dll
2010-07-11 17:37 . 2010-07-11 17:37 233472 ----a-w- c:\programdata\MGS\cache\b\bjstrategyui1.5a2f52359fe99e4484435bbaf8f92b30.dll
2010-07-11 17:37 . 2010-07-11 17:37 49152 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakstrategylogic1.64d4f0467e0e777ddfbb02e7544f98fa.dll
2010-07-11 17:37 . 2010-07-11 17:37 225280 ----a-w- c:\programdata\MGS\cache\b\bjgoldautoplayplugin.9e04124b2f25d98a562d14260b995f0c.dll
2010-07-11 17:37 . 2010-07-11 17:37 602112 ----a-w- c:\programdata\MGS\cache\b\bjgoldplugin.f7a40649bbd758b8f99cf67e1769d71c.dll
2010-07-11 17:37 . 2010-07-11 17:37 512000 ----a-w- c:\programdata\MGS\cache\b\bjgoldxxx.e2caa9292f5de8579a9ad479e877ced8.dll
2010-07-11 17:37 . 2010-07-11 17:37 192512 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakxxx.9edf63783590e61148711da2563c8d47.dll
2010-07-11 17:37 . 2010-07-11 17:37 147456 ----a-w- c:\programdata\MGS\cache\b\bjstrategylogic1.cae96e5e68740973929725d2ac549cc0.dll
2010-07-11 17:37 . 2010-07-11 17:37 98304 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakautoplayplugin.bd0995adc01c55d3f345d8fc81d6bf13.dll
2010-07-11 17:37 . 2010-07-11 17:37 233472 ----a-w- c:\programdata\MGS\cache\b\bjgoldstatsplugin.67546387f1af1fe46f021dbce8a072f4.dll
2010-07-11 17:37 . 2010-07-11 17:37 417792 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakplugin.85c5094e4412e0647ba5f7a72219a89d.dll
2010-07-11 17:37 . 2010-07-11 17:37 106496 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakstatsplugin.c622fc192c22f951a4bf27988c8c48e0.dll
2010-07-11 17:37 . 2010-07-11 17:37 126976 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakstrategyui1.c4a60b718047a7230c1f7eb62e24ac16.dll
2010-07-11 17:36 . 2010-07-11 17:36 618496 ----a-w- c:\programdata\MGS\cache\g\gamble2_wealthspa.a58c586ab4d974ea2d4142fb4d851c2b.dll
2010-07-11 17:35 . 2010-07-11 17:35 94208 ----a-w- c:\programdata\MGS\cache\l\lua51host.461d2601d0d39d2e2d5cd4a02a2b3087.dll
2010-07-11 17:35 . 2010-07-11 17:35 618496 ----a-w- c:\programdata\MGS\cache\g\gamble2_octgao_09.ae6289cf11b05446123a7e16d97ef025.dll
2010-07-11 17:35 . 2010-07-11 17:35 213264 ----a-w- c:\programdata\MGS\cache\g\gamble2.9d7f0f3cf78a68d28fc5a3e77fdc77da.dll
2010-07-11 17:35 . 2010-07-11 17:35 176400 ----a-w- c:\programdata\MGS\cache\g\gamble.212eaf21a4805f8521d0d0c57b6a933b.dll
2010-07-11 17:35 . 2010-07-11 17:35 86016 ----a-w- c:\programdata\MGS\cache\g\gambleplugin.c4d8c6f5542066f894b7f2e575038afb.dll
2010-07-11 17:34 . 2010-07-11 17:34 307472 ----a-w- c:\programdata\MGS\cache\g\gamble2_tggg.436ea9e59e2a2b9a2106e598920cba26.dll
2010-07-11 17:34 . 2010-07-11 17:34 221456 ----a-w- c:\programdata\MGS\cache\g\gamble2_temp.5a22e38498bf34a124cc458bf6408ad3.dll
2010-07-11 17:34 . 2010-07-11 17:34 618496 ----a-w- c:\programdata\MGS\cache\g\gamble2_septgao_09.d8cd6b206ce4b18e0867e42785806a63.dll
2010-07-11 17:33 . 2010-07-11 17:33 602112 ----a-w- c:\programdata\MGS\cache\g\gamble2_flightzone.d149c5c0a243e45a82d87b40855052ab.dll
2010-07-11 17:33 . 2010-07-11 17:33 606208 ----a-w- c:\programdata\MGS\cache\g\gamble2_summerholiday.b02744e18c4cdb3dd3394f69d8987073.dll
2010-07-11 17:22 . 2010-07-11 17:22 262416 ----a-w- c:\programdata\MGS\cache\t\transition_temp.c6aaf42b66fa6688c8ea18a671984287.dll
2010-07-11 17:22 . 2010-07-11 17:22 655360 ----a-w- c:\programdata\MGS\cache\t\transition_flightzone.2d8aa10da872f1ac4a34a2122bf3c4b2.dll
2010-07-11 17:22 . 2010-07-11 17:22 266512 ----a-w- c:\programdata\MGS\cache\t\transition_tggg.399218aff849d2e187d4554dd62a73b6.dll
2010-07-11 17:22 . 2010-07-11 17:22 679936 ----a-w- c:\programdata\MGS\cache\t\transition_septgao_09.04686bb06cfe59ecb3f271eb95218422.dll
2010-07-11 17:22 . 2010-07-11 17:22 254224 ----a-w- c:\programdata\MGS\cache\t\transition.26c3e2ce55c7cca8b63e5e8d7b4627e4.dll
2010-07-11 17:22 . 2010-07-11 17:22 679936 ----a-w- c:\programdata\MGS\cache\t\transition_wealthspa.5a3f4e96415d8b3050681cdd275f3d88.dll
2010-07-11 17:22 . 2010-07-11 17:22 679936 ----a-w- c:\programdata\MGS\cache\t\transition_octgao_09.7768fe95f9efff3962c913196fe05f6a.dll
2010-07-11 17:18 . 2010-07-11 17:18 376832 ----a-w- c:\programdata\MGS\cache\m\mptadvancedslots.c25cbc913a8fbff25d5ff4436d66df8a.dll
2010-07-11 17:18 . 2010-07-11 17:18 188416 ----a-w- c:\programdata\MGS\cache\m\mptleaderboard.4146c172bd98dcfce86f1098fd229eb4.dll
2010-07-11 17:18 . 2010-07-11 17:18 65536 ----a-w- c:\programdata\MGS\cache\v\void.df7f7ef643b2f9803f9738f1b85d08e7.dll
2010-07-11 17:17 . 2010-07-11 17:17 471040 ----a-w- c:\programdata\MGS\cache\m\menucore.165da379d8a0adee611c449ba3662532.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-12-17 1232896]
"WindowsWelcomeCenter"="oobefldr.dll" [2006-11-02 2159104]
"Google Update"="c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-12-17 135664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-02 1004136]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"RtHDVCpl"="RtHDVCpl.exe" [2008-06-13 6183456]
"Skytel"="Skytel.exe" [2007-11-20 1826816]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-08-17 102400]
"HotkeyApp"="c:\program files\Launch Manager\HotkeyApp.exe" [2008-05-23 192512]
"WisKeyState"="c:\program files\Launch Manager\WisKeyState.exe" [2008-03-07 208896]
"LMgrVolOSD"="c:\program files\Launch Manager\OSD.exe" [2008-03-03 258048]
"LMgrOSD"="c:\program files\Launch Manager\OSDCtrl.exe" [2007-12-25 241664]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2009-07-27 180224]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"NetFxUpdate_v1.1.4322"="c:\windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe" [2004-08-10 106496]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-09-01 1164584]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-04-29 1090952]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

R3 WisLMSvc;WisLMSvc;c:\program files\Launch Manager\WisLMSvc.exe [2008-01-15 118784]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2009-12-17 691696]
S1 aswSP;avast! Self Protection; [x]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2009-11-24 20560]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\DRIVERS\aswMonFlt.sys [2009-11-24 53328]
S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2008-04-11 84240]

.
Obsah adresáře 'Naplánované úlohy'

2010-09-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2774903098-3325646863-3127335589-1000Core.job
- c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2009-12-17 15:39]

2010-10-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2774903098-3325646863-3127335589-1000UA.job
- c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2009-12-17 15:39]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/
IE: {{C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - c:\microgaming\Poker\UnibetpokerMPP\MPPoker.exe
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Autodesk\Data Management Server 2009\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
c:\program files\Autodesk\Data Management Server 2009\Server\Webserver\Connectivity.EDMWS.Server.exe
c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\windows\system32\conime.exe
.
**************************************************************************
.
Celkový čas: 2010-10-06 20:56:12 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-10-06 18:56
ComboFix2.txt 2010-10-06 12:14

Před spuštěním: Volných bajtů: 122 306 568 192
Po spuštění: Volných bajtů: 122 257 850 368

- - End Of File - - 0C142FA1F76CE321621E09B413CFAABA


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:08:08, on 6.10.2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.17037)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\WisKeyState.exe
C:\Program Files\Launch Manager\OSD.exe
C:\Program Files\Launch Manager\OSDCtrl.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Users\user\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe
C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\wuauclt.exe
C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [HotkeyApp] "C:\Program Files\Launch Manager\HotkeyApp.exe"
O4 - HKLM\..\Run: [WisKeyState] "C:\Program Files\Launch Manager\WisKeyState.exe"
O4 - HKLM\..\Run: [LMgrVolOSD] "C:\Program Files\Launch Manager\OSD.exe"
O4 - HKLM\..\Run: [LMgrOSD] "C:\Program Files\Launch Manager\OSDCtrl.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NetFxUpdate_v1.1.4322] "C:\Windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe" 1 v1.1.4322 GAC + NI NID
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [Google Update] "C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Autodesk Data Management Job Dispatch - Autodesk - C:\Program Files\Autodesk\Data Management Server 2009\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
O23 - Service: Autodesk EDM Server - Autodesk - C:\Program Files\Autodesk\Data Management Server 2009\Server\Webserver\Connectivity.EDMWS.Server.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: WisLMSvc - Wistron Corp. - C:\Program Files\Launch Manager\WisLMSvc.exe

--
End of file - 5842 bytes

[Linkic]

ComboFix 10-10-05.04 - user 06.10.2010 20:39:15.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1250.420.1029.18.2269.1505 [GMT 2:00]
Spuštěný z: c:\users\user\Videos\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\user\Desktop\CFScript.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

FILE ::
"c:\program files\Norton Security Scan\Engine\2.7.3.34\Nss.exe"
"c:\windows\system32\perfc005.dat"
"c:\windows\system32\perfh005.dat"
"c:\windows\Tasks\Norton Security Scan for user.job"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\DAEMON Tools Toolbar
c:\program files\DAEMON Tools Toolbar\_DTLite.xml
c:\programdata\Norton
c:\programdata\Norton\symdata.xml
c:\programdata\NortonInstaller
c:\programdata\NortonInstaller\Logs\09-12-2010-05h24m34s\Install.1.mft.7z
c:\programdata\NortonInstaller\Logs\09-12-2010-05h24m34s\NortonInstall-09-12-2010-05h24m34s.log
c:\programdata\NortonInstaller\Logs\10-06-2010-17h14m11s\Install.1.mft.7z
c:\programdata\NortonInstaller\Logs\10-06-2010-17h14m11s\NortonInstall-10-06-2010-17h14m11s.log
c:\programdata\NortonInstaller\Logs\10-06-2010-17h14m21s\NortonInstall-10-06-2010-17h14m21s.log
c:\programdata\Symantec
c:\programdata\Symantec\symdata.xml
c:\windows\system32\perfc005.dat
c:\windows\system32\perfh005.dat

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-09-06 do 2010-10-06 )))))))))))))))))))))))))))))))
.

2010-10-06 18:47 . 2010-10-06 18:51 -------- d-----w- c:\users\user\AppData\Local\temp
2010-10-06 18:47 . 2010-10-06 18:47 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-10-06 11:18 . 2010-10-06 11:18 -------- d-----w- c:\program files\IObit
2010-10-06 10:43 . 2010-10-06 10:43 -------- d-----w- c:\users\user\AppData\Roaming\Malwarebytes
2010-10-06 10:43 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-06 10:43 . 2010-10-06 10:43 -------- d-----w- c:\programdata\Malwarebytes
2010-10-06 10:43 . 2010-10-06 10:43 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-10-06 10:43 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-05 22:53 . 2010-10-05 22:53 -------- d-----w- c:\users\user\DoctorWeb
2010-10-05 19:34 . 2010-10-05 19:34 388096 ----a-r- c:\users\user\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-10-05 19:34 . 2010-10-05 19:34 -------- d-----w- c:\program files\Trend Micro
2010-10-04 17:09 . 2010-10-04 17:09 -------- d-----w- c:\users\user\AppData\Roaming\Leadertech
2010-10-04 16:54 . 2010-10-04 16:54 -------- d-----w- c:\program files\EA Sports
2010-09-23 21:33 . 2010-09-23 21:33 471040 ----a-w- c:\programdata\MGS\cache\m\menucore.32d59a09a352408245e7b605da4978ca.dll
2010-09-21 18:37 . 2010-09-21 18:37 932288 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\971\AdobeARM.exe
2010-09-21 18:37 . 2010-09-21 18:37 932288 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\12281\AdobeARM.exe
2010-09-21 18:37 . 2010-09-21 18:37 70584 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\971\AdobeExtractFiles.dll
2010-09-21 18:37 . 2010-09-21 18:37 70584 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\12281\AdobeExtractFiles.dll
2010-09-21 18:37 . 2010-09-21 18:37 338856 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\971\ReaderUpdater.exe
2010-09-21 18:37 . 2010-09-21 18:37 338856 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\971\AcrobatUpdater.exe
2010-09-21 18:37 . 2010-09-21 18:37 338856 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\12281\ReaderUpdater.exe
2010-09-21 18:37 . 2010-09-21 18:37 338856 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\12281\AcrobatUpdater.exe
2010-09-11 15:32 . 2010-09-11 15:32 57344 ----a-w- c:\programdata\DivX\RunAsUser\RUNASUSERPROCESS.dll
2010-09-11 15:31 . 2010-09-11 15:21 185640 ----a-w- c:\programdata\DivX\Setup\finishPlugin.dll
2010-09-11 15:31 . 2010-09-11 15:21 1062184 ----a-w- c:\programdata\DivX\Setup\Resource.dll
2010-09-11 15:31 . 2010-09-11 15:21 850200 ----a-w- c:\programdata\DivX\Setup\DivXSetup.exe
2010-09-11 15:30 . 2010-09-11 15:30 56765 ----a-w- c:\programdata\DivX\DivXPlusShortcuts\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 15:30 56997 ----a-w- c:\programdata\DivX\WebPlayer\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 15:30 57691 ----a-w- c:\programdata\DivX\Player\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 15:30 53600 ----a-w- c:\programdata\DivX\Update\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 17:37 -------- d-----w- c:\users\user\AppData\Roaming\DivX
2010-09-11 15:30 . 2010-09-11 15:30 84063 ----a-w- c:\programdata\DivX\TransferWizard\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 15:30 -------- d-----w- c:\program files\Common Files\PX Storage Engine
2010-09-11 15:30 . 2010-09-11 15:30 57054 ----a-w- c:\programdata\DivX\DSDesktopComponents\Uninstaller.exe
2010-09-11 15:30 . 2010-09-11 15:30 54166 ----a-w- c:\programdata\DivX\DSAVCDecoder\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 57532 ----a-w- c:\programdata\DivX\DSASPDecoder\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 56458 ----a-w- c:\programdata\DivX\DivXDecoderShortcut\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54174 ----a-w- c:\programdata\DivX\DSAACDecoder\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54153 ----a-w- c:\programdata\DivX\DFXPlugin\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54128 ----a-w- c:\programdata\DivX\Converter\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54644 ----a-w- c:\programdata\DivX\TranscodeEngine\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54101 ----a-w- c:\programdata\DivX\MPEG2Plugin\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 57409 ----a-w- c:\programdata\DivX\ControlPanel\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 52963 ----a-w- c:\programdata\DivX\MSVC80CRTRedist\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 54073 ----a-w- c:\programdata\DivX\Qt4.5\Uninstaller.exe
2010-09-11 15:29 . 2010-09-11 15:29 56969 ----a-w- c:\programdata\DivX\ASPEncoder\Uninstaller.exe
2010-09-11 15:21 . 2010-09-11 15:21 144696 ----a-w- c:\programdata\DivX\RunAsUser\RUNASUSERPROCESS.exe
2010-09-11 15:21 . 2010-09-11 15:30 -------- d-----w- c:\programdata\DivX

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-06 12:18 . 2010-06-05 14:46 -------- d-----w- c:\users\user\AppData\Roaming\Microgaming
2010-10-04 16:24 . 2009-12-20 11:54 -------- d-----w- c:\users\user\AppData\Roaming\uTorrent
2010-09-30 10:55 . 2010-06-19 18:38 -------- d-----w- c:\program files\Microsoft Silverlight
2010-09-24 18:23 . 2010-04-13 12:21 138520 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-09-24 18:23 . 2010-04-13 12:21 233960 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-09-11 15:30 . 2009-12-19 23:41 -------- d-----w- c:\program files\DivX
2010-09-11 15:29 . 2009-12-19 23:41 -------- d-----w- c:\program files\Common Files\DivX Shared
2010-09-04 17:08 . 2010-09-04 17:08 65536 ----a-w- c:\programdata\MGS\cache\v\void.c19b3dfc09b07295326d40aca47e2109.dll
2010-09-04 17:07 . 2010-09-04 17:07 471040 ----a-w- c:\programdata\MGS\cache\m\menucore.b82f22b48abe791a8dce5a82060c61b9.dll
2010-09-01 16:04 . 2010-04-13 12:21 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-08-30 12:36 . 2010-04-13 12:21 22328 ----a-w- c:\users\user\AppData\Roaming\PnkBstrK.sys
2010-08-30 12:36 . 2010-04-13 12:21 22328 ----a-w- c:\users\user\AppData\Roaming\PnkBstrK.sys
2010-08-30 12:35 . 2009-12-11 09:48 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-08-30 11:48 . 2009-12-23 20:53 -------- d-----w- c:\program files\Activision
2010-08-25 10:11 . 2010-08-25 10:11 -------- d-----w- c:\program files\Noel Danjou
2010-08-25 10:11 . 2010-08-25 10:11 -------- d-----w- c:\users\user\AppData\Roaming\UseNeXT
2010-08-25 10:11 . 2010-08-25 10:11 -------- d-----w- c:\program files\UseNeXT
2010-08-16 17:25 . 2010-08-16 17:25 -------- d-----w- c:\program files\GamePark
2010-07-11 17:41 . 2010-07-11 17:41 159744 ----a-w- c:\programdata\MGS\cache\p\progressive_temp.979c9e04248bf52052c2caf1e627d86b.dll
2010-07-11 17:41 . 2010-07-11 17:41 151552 ----a-w- c:\programdata\MGS\cache\p\progressive.8fe1347dac5a6804834d35e86c789f9a.dll
2010-07-11 17:41 . 2010-07-11 17:41 131072 ----a-w- c:\programdata\MGS\cache\r\rouletteroyale.78fbb4e6860f34eb015928fa5c78c605.dll
2010-07-11 17:41 . 2010-07-11 17:41 114688 ----a-w- c:\programdata\MGS\cache\e\euroroulette.fa2b524975a5d8bbc30203d094e2b084.dll
2010-07-11 17:40 . 2010-07-11 17:40 32768 ----a-w- c:\programdata\MGS\cache\_\_crt_keno.ed975aa9c9bb5e5ec89c8ffeee254e8a.dll
2010-07-11 17:37 . 2010-07-11 17:37 233472 ----a-w- c:\programdata\MGS\cache\b\bjstrategyui1.5a2f52359fe99e4484435bbaf8f92b30.dll
2010-07-11 17:37 . 2010-07-11 17:37 49152 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakstrategylogic1.64d4f0467e0e777ddfbb02e7544f98fa.dll
2010-07-11 17:37 . 2010-07-11 17:37 225280 ----a-w- c:\programdata\MGS\cache\b\bjgoldautoplayplugin.9e04124b2f25d98a562d14260b995f0c.dll
2010-07-11 17:37 . 2010-07-11 17:37 602112 ----a-w- c:\programdata\MGS\cache\b\bjgoldplugin.f7a40649bbd758b8f99cf67e1769d71c.dll
2010-07-11 17:37 . 2010-07-11 17:37 512000 ----a-w- c:\programdata\MGS\cache\b\bjgoldxxx.e2caa9292f5de8579a9ad479e877ced8.dll
2010-07-11 17:37 . 2010-07-11 17:37 192512 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakxxx.9edf63783590e61148711da2563c8d47.dll
2010-07-11 17:37 . 2010-07-11 17:37 147456 ----a-w- c:\programdata\MGS\cache\b\bjstrategylogic1.cae96e5e68740973929725d2ac549cc0.dll
2010-07-11 17:37 . 2010-07-11 17:37 98304 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakautoplayplugin.bd0995adc01c55d3f345d8fc81d6bf13.dll
2010-07-11 17:37 . 2010-07-11 17:37 233472 ----a-w- c:\programdata\MGS\cache\b\bjgoldstatsplugin.67546387f1af1fe46f021dbce8a072f4.dll
2010-07-11 17:37 . 2010-07-11 17:37 417792 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakplugin.85c5094e4412e0647ba5f7a72219a89d.dll
2010-07-11 17:37 . 2010-07-11 17:37 106496 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakstatsplugin.c622fc192c22f951a4bf27988c8c48e0.dll
2010-07-11 17:37 . 2010-07-11 17:37 126976 ----a-w- c:\programdata\MGS\cache\b\bjghighstreakstrategyui1.c4a60b718047a7230c1f7eb62e24ac16.dll
2010-07-11 17:36 . 2010-07-11 17:36 618496 ----a-w- c:\programdata\MGS\cache\g\gamble2_wealthspa.a58c586ab4d974ea2d4142fb4d851c2b.dll
2010-07-11 17:35 . 2010-07-11 17:35 94208 ----a-w- c:\programdata\MGS\cache\l\lua51host.461d2601d0d39d2e2d5cd4a02a2b3087.dll
2010-07-11 17:35 . 2010-07-11 17:35 618496 ----a-w- c:\programdata\MGS\cache\g\gamble2_octgao_09.ae6289cf11b05446123a7e16d97ef025.dll
2010-07-11 17:35 . 2010-07-11 17:35 213264 ----a-w- c:\programdata\MGS\cache\g\gamble2.9d7f0f3cf78a68d28fc5a3e77fdc77da.dll
2010-07-11 17:35 . 2010-07-11 17:35 176400 ----a-w- c:\programdata\MGS\cache\g\gamble.212eaf21a4805f8521d0d0c57b6a933b.dll
2010-07-11 17:35 . 2010-07-11 17:35 86016 ----a-w- c:\programdata\MGS\cache\g\gambleplugin.c4d8c6f5542066f894b7f2e575038afb.dll
2010-07-11 17:34 . 2010-07-

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

vyčisti systém CCleanerem

a použij i T-Cleaner
smaže vše po Combu,MWAVu atd.-stáhneš>spustíš

pozn. před stažením T-Cleaneru a po dobu čištění deaktivuj AVG , Avast,Avira či Microsoft Security Essentials následně T-Cleaner smaž a zapni si AVG , Avast, Avira či Microsoft Security Essentials


********************************************************************************************************************************************
Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab


Nainstaluj si místo Avast 4.8 Avast 5.

Jsou nějaké problémy??

[Linkic]

Všechno jsem udělala a zdá se být vše v pořádku kdybych měl ještě nějaký problém tak napíše,ale zatím to je vše..chtěl bych poděkovat za vaší ochotu a rady :)

[jaro3]

Pokud bude potom vše OK:

je to vše a můžeš dát vyřešeno , zelenou fajfku.