Kontrola logu - reklamy Vyřešeno

[Damned]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok).
Zkopíruj do něj následující celý text označený zeleně:

KillAll::
DDS::
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - hxxp://www.daemon-search.com/startpage

File::
c:\windows\DED53B0BB67C4244AE6AD6FD3C28D1EF.TMP
c:\program files\MediaCoder\SysInfo.sys
c:\docume~1\SCREPH~1\LOCALS~1\Temp\UGG172.tmp
c:\windows\Tasks\WGASetup.job
c:\windows\system32\KB905474\wgasetup.exe

Folder::
c:\windows\DED53B0BB67C4244AE6AD6FD3C28D1EF.TMP

DirLook::
c:\program files\MDM
c:\program files\DsNET Corp

Driver::
ntiomin;ntiomin
ntiomin
CrystalSysInfo;CrystalSysInfo
CrystalSysInfo
GarenaPEngine;GarenaPEngine
GarenaPEngine

Registry::
[-HKEY_LOCAL_MACHINE\System\ControlSet003\Services\GarenaPEngine]

FixCSet::




Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.


Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe
a když se oba soubory překryjí, skript upusť.


- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT a popiš chování počítače

[Reklama]

[Screpheep]

Reklamy už nevyskakujou, díky moc


ComboFix 09-08-27.A0 - Screpheep 24.08.2009 13:00.4.2 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.2046.1413 [GMT 2:00]
Spuštěný z: c:\documents and settings\Screpheep\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Screpheep\Plocha\CFScript.txt
AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Rezidentní štít AV je zapnutý


VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!

FILE ::
"c:\docume~1\SCREPH~1\LOCALS~1\Temp\UGG172.tmp"
"c:\program files\MediaCoder\SysInfo.sys"
"c:\windows\DED53B0BB67C4244AE6AD6FD3C28D1EF.TMP"
"c:\windows\system32\KB905474\wgasetup.exe"
"c:\windows\Tasks\WGASetup.job"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\DED53B0BB67C4244AE6AD6FD3C28D1EF.TMP
c:\windows\DED53B0BB67C4244AE6AD6FD3C28D1EF.TMP\WiseCustCall64.dll
c:\windows\DED53B0BB67C4244AE6AD6FD3C28D1EF.TMP\WiseCustomCall.dll
c:\windows\DED53B0BB67C4244AE6AD6FD3C28D1EF.TMP\WiseCustomCalla.dll
c:\windows\DED53B0BB67C4244AE6AD6FD3C28D1EF.TMP\WiseCustomCalla1.dll
c:\windows\system32\KB905474\wgasetup.exe
c:\windows\Tasks\WGASetup.job

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_CRYSTALSYSINFO
-------\Legacy_GARENAPENGINE
-------\Legacy_NTIOMIN
-------\Service_CrystalSysInfo
-------\Service_ntiomin


((((((((((((((((((((((((( Soubory vytvořené od 2009-07-24 do 2009-08-24 )))))))))))))))))))))))))))))))
.

2009-08-23 06:33 . 2009-08-23 06:33 -------- d-----w- c:\program files\Common Files\DirectX
2009-08-23 06:33 . 2009-08-23 06:33 -------- d-----w- c:\windows\system32\AGEIA
2009-08-23 06:33 . 2009-08-23 06:33 -------- d-----w- c:\program files\AGEIA Technologies
2009-08-23 06:09 . 2009-08-23 06:09 -------- d-----w- c:\program files\Codemasters
2009-08-22 07:58 . 2009-08-22 08:04 -------- d-----w- c:\program files\DAEMON Tools Pro
2009-08-22 07:43 . 2009-08-22 07:50 -------- d-----w- c:\program files\Zaklínač
2009-08-22 07:38 . 2009-08-22 07:38 -------- d-----w- c:\program files\PowerISO
2009-08-10 06:56 . 2009-07-10 13:42 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2009-08-10 06:56 . 2009-06-05 07:46 655872 -c----w- c:\windows\system32\dllcache\mstscax.dll
2009-08-05 09:07 . 2009-08-05 09:07 205312 -c----w- c:\windows\system32\dllcache\mswebdvd.dll
2009-07-27 02:43 . 2009-07-27 02:43 58908 ----a-w- c:\windows\system32\drivers\scdemu.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-24 08:55 . 2009-05-23 21:34 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-08-23 06:32 . 2008-12-15 16:37 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-08-23 06:09 . 2008-12-14 16:07 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-08-22 10:20 . 2009-02-28 16:49 -------- d-----w- c:\program files\Warcraft III
2009-08-22 07:57 . 2009-06-11 13:28 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-08-22 07:56 . 2009-06-11 13:25 722416 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-08-22 07:50 . 2009-01-23 18:46 278984 ----a-w- c:\windows\system32\drivers\atksgt.sys
2009-08-11 19:23 . 2009-05-30 08:58 -------- d-----w- c:\program files\Garena
2009-08-05 09:07 . 2002-09-23 12:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-03 11:36 . 2009-05-23 21:34 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-08-03 11:36 . 2009-05-23 21:35 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-07-17 18:57 . 2002-09-23 12:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-13 00:18 . 2008-12-14 16:02 233472 ------w- c:\windows\system32\wmpdxm.dll
2009-06-30 15:03 . 2009-06-30 14:53 -------- d-----w- c:\program files\MDM
2009-06-29 16:00 . 2002-09-23 12:00 827392 ------w- c:\windows\system32\wininet.dll
2009-06-29 15:59 . 2008-12-14 16:02 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-06-29 15:59 . 2002-09-23 12:00 17408 ------w- c:\windows\system32\corpol.dll
2009-06-28 18:19 . 2009-06-28 18:19 -------- d-----w- c:\program files\DsNET Corp
2009-06-27 20:28 . 2009-06-20 18:04 -------- d-----w- c:\program files\Microsoft ActiveSync
2009-06-25 18:37 . 2002-09-23 12:00 95744 ----a-w- c:\windows\system32\mqsec.dll
2009-06-25 18:37 . 2002-09-23 12:00 517120 ----a-w- c:\windows\system32\mqsnap.dll
2009-06-25 18:37 . 2002-09-23 12:00 489472 ----a-w- c:\windows\system32\mqutil.dll
2009-06-25 18:37 . 2002-09-23 12:00 48640 ----a-w- c:\windows\system32\mqupgrd.dll
2009-06-25 18:37 . 2002-09-23 12:00 186880 ----a-w- c:\windows\system32\mqtrig.dll
2009-06-25 18:37 . 2002-09-23 12:00 123392 ----a-w- c:\windows\system32\mqrtdep.dll
2009-06-25 18:37 . 2002-09-23 12:00 661504 ----a-w- c:\windows\system32\mqqm.dll
2009-06-25 18:37 . 2002-09-23 12:00 47104 ----a-w- c:\windows\system32\mqdscli.dll
2009-06-25 18:37 . 2002-09-23 12:00 225280 ----a-w- c:\windows\system32\mqoa.dll
2009-06-25 18:37 . 2002-09-23 12:00 177152 ----a-w- c:\windows\system32\mqrt.dll
2009-06-25 18:37 . 2002-09-23 12:00 16896 ----a-w- c:\windows\system32\mqise.dll
2009-06-25 18:37 . 2002-09-23 12:00 138240 ----a-w- c:\windows\system32\mqad.dll
2009-06-25 08:48 . 2002-09-23 12:00 723456 ----a-w- c:\windows\system32\lsasrv.dll
2009-06-25 08:48 . 2002-09-23 12:00 59392 ----a-w- c:\windows\system32\wdigest.dll
2009-06-25 08:48 . 2002-09-23 12:00 56320 ----a-w- c:\windows\system32\secur32.dll
2009-06-25 08:48 . 2002-09-23 12:00 298496 ----a-w- c:\windows\system32\kerberos.dll
2009-06-25 08:48 . 2002-09-23 12:00 168448 ----a-w- c:\windows\system32\schannel.dll
2009-06-25 08:48 . 2002-09-23 12:00 133632 ----a-w- c:\windows\system32\msv1_0.dll
2009-06-22 11:49 . 2002-09-23 12:00 19968 ----a-w- c:\windows\system32\mqbkup.exe
2009-06-22 11:49 . 2002-09-23 12:00 117248 ----a-w- c:\windows\system32\mqtgsvc.exe
2009-06-22 11:49 . 2002-09-23 12:00 4608 ----a-w- c:\windows\system32\mqsvc.exe
2009-06-22 11:48 . 2002-09-23 12:00 91776 ----a-w- c:\windows\system32\drivers\mqac.sys
2009-06-22 11:34 . 2002-09-23 12:00 92544 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-06-20 18:10 . 2002-09-23 12:00 76696 ----a-w- c:\windows\system32\perfc005.dat
2009-06-20 18:10 . 2002-09-23 12:00 424356 ----a-w- c:\windows\system32\perfh005.dat
2009-06-16 14:55 . 2002-09-23 12:00 82432 ----a-w- c:\windows\system32\fontsub.dll
2009-06-16 14:55 . 2002-09-23 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-15 11:33 . 2002-09-23 12:00 78336 ----a-w- c:\windows\system32\telnet.exe
2009-06-15 11:33 . 2002-09-23 12:00 81408 ----a-w- c:\windows\system32\tlntsess.exe
2009-06-10 14:24 . 2002-09-23 12:00 84992 ----a-w- c:\windows\system32\avifil32.dll
2009-06-10 06:31 . 2002-09-23 12:00 132096 ----a-w- c:\windows\system32\wkssvc.dll
2009-06-05 07:46 . 2008-12-14 15:46 655872 ----a-w- c:\windows\system32\mstscax.dll
2009-06-03 19:27 . 2002-09-23 12:00 1293312 ----a-w- c:\windows\system32\quartz.dll
2006-05-03 09:06 . 2009-01-07 21:49 163328 --sh--r- c:\windows\system32\flvDX.dll
2007-02-21 10:47 . 2009-01-07 21:49 31232 --sh--r- c:\windows\system32\msfDX.dll
.

(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of c:\program files\DsNET Corp ----

2007-11-18 02:30 . 2007-11-18 02:30 1236992 ----a-w- c:\program files\DsNET Corp\aTube Catcher 1.0\yct.exe
2007-11-18 00:10 . 2007-11-18 00:10 290816 ----a-w- c:\program files\DsNET Corp\aTube Catcher 1.0\smh.exe
2007-11-17 23:57 . 2007-11-17 23:57 192512 ----a-w- c:\program files\DsNET Corp\aTube Catcher 1.0\atc_lvr.exe
2007-11-15 19:19 . 2007-11-15 19:19 86016 ----a-w- c:\program files\DsNET Corp\aTube Catcher 1.0\flvplayer.exe
2007-10-30 03:19 . 2007-10-30 03:19 73728 ----a-w- c:\program files\DsNET Corp\aTube Catcher 1.0\vbzlib1.dll
2007-09-10 20:21 . 2007-09-10 20:21 7271424 ----a-w- c:\program files\DsNET Corp\aTube Catcher 1.0\ffmpeg.dll
2007-09-10 15:24 . 2007-09-10 15:24 70553 ----a-w- c:\program files\DsNET Corp\aTube Catcher 1.0\pthreadGC2.dll
2007-09-02 00:19 . 2007-09-02 00:19 73728 ----a-w- c:\program files\DsNET Corp\aTube Catcher 1.0\aux_mediahunter.exe
2007-04-26 08:02 . 2007-04-26 08:02 393216 ----a-w- c:\program files\DsNET Corp\aTube Catcher 1.0\asfbin.exe
2004-03-08 21:00 . 2004-03-08 21:00 124688 ----a-w- c:\program files\DsNET Corp\aTube Catcher 1.0\MSWINSCK.OCX

---- Directory of c:\program files\MDM ----

2009-06-30 15:03 . 2002-06-24 14:09 4710 ----a-w- c:\program files\MDM\Age of Empires Video\Default.ico
2009-06-30 15:03 . 2009-06-30 15:03 213 ----a-w- c:\program files\MDM\Age of Empires Video\ini1C0.tmp
2009-06-30 15:03 . 2003-09-28 15:45 4228987 ----a-w- c:\program files\MDM\Age of Empires Video\Age of Empires Video.PPC300.cab
2009-06-30 15:02 . 2009-06-30 15:02 213 ----a-w- c:\program files\MDM\Age of Empires Manual\ini1BF.tmp
2009-06-30 15:02 . 2003-09-28 15:45 353850 ----a-w- c:\program files\MDM\Age of Empires Manual\Age of Empires Manual.PPC300.cab
2009-06-30 15:02 . 2002-06-24 14:09 4710 ----a-w- c:\program files\MDM\Age of Empires Manual\Default.ico
2009-06-30 15:00 . 2002-06-24 14:09 4710 ----a-w- c:\program files\MDM\Age of Empires Campaigns\Default.ico
2009-06-30 15:00 . 2009-06-30 15:00 213 ----a-w- c:\program files\MDM\Age of Empires Campaigns\ini1BD.tmp
2009-06-30 15:00 . 2003-09-28 15:45 6716524 ----a-w- c:\program files\MDM\Age of Empires Campaigns\Age of Empires Campaigns.PPC300.cab
2009-06-30 14:59 . 2009-06-30 14:59 213 ----a-w- c:\program files\MDM\Age of Empires Scenarios\ini1BC.tmp
2009-06-30 14:59 . 2002-06-24 14:09 4710 ----a-w- c:\program files\MDM\Age of Empires Scenarios\Default.ico
2009-06-30 14:59 . 2003-09-28 15:45 1547043 ----a-w- c:\program files\MDM\Age of Empires Scenarios\Age of Empires Scenarios.PPC300.cab
2009-06-30 14:53 . 2009-06-30 14:53 213 ----a-w- c:\program files\MDM\Age of Empires\ini194.tmp
2009-06-30 14:53 . 2002-06-24 14:09 4710 ----a-w- c:\program files\MDM\Age of Empires\Default.ico
2009-06-30 14:53 . 2003-10-22 08:34 10343115 ----a-w- c:\program files\MDM\Age of Empires\Age of Empires.PPC300_2577.cab


((((((((((((((((((((((((((((( SnapShot_2009-08-24_09.50.10 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-08-24 11:05 . 2009-08-24 11:05 16384 c:\windows\temp\Perflib_Perfdata_b60.dat
+ 2009-08-24 11:05 . 2009-08-24 11:05 16384 c:\windows\temp\Perflib_Perfdata_248.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-07-07 2156368]
"CTSyncU.exe"="c:\program files\Creative\Sync Manager Unicode\CTSyncU.exe" [2007-07-17 868352]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2008-06-09 2363392]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-04-16 24264488]
"H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\wcescomm.exe" [2006-11-13 1289000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinFast Schedule"="c:\program files\WinFast\WFTVFM\WFWIZ.exe" [2004-12-22 266240]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-10-24 1451264]
"CTCheck"="c:\program files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe" [2007-11-06 397312]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"CloneCDTray"="c:\program files\SlySoft\CloneCD\CloneCDTray.exe" [2009-01-29 57344]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2009-07-27 180224]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-05-10 16342528]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2004-08-17 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2008-9-9 525664]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Sports Interactive\\Football Manager 2009\\fm.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Electronic Arts\\Crytek\\Crysis SP Demo\\Bin32\\Crysis.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FarCry2.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Launcher.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Editor.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx10.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Launcher.exe"=
"c:\\Program Files\\TmNationsForever\\TmForever.exe"=
"c:\\Program Files\\Stardock Games\\Demigod\\bin\\Demigod.exe"=
"c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Garena\\Garena.exe"=
"c:\\Program Files\\Codemasters\\Overlord II\\Overlord2.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [24.10.2008 21:53 34824]
R2 BT848;WinFast TV2000 XP WDM Video Capture;c:\windows\system32\drivers\wf2kvcap.sys [14.12.2008 18:37 75925]
R2 ekrn;Eset Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [24.10.2008 21:51 468224]
R2 tv2ktunr;WinFast TV2000 XP WDM TVTuner;c:\windows\system32\drivers\wf2ktunr.sys [14.12.2008 19:08 36423]
R2 Tv2kXbar;WinFast TV2000 XP WDM Crossbar;c:\windows\system32\drivers\wf2kXbar.sys [14.12.2008 19:08 10005]
R3 AtiHdmiService;ATI Function Driver for HDMI Service;c:\windows\system32\drivers\AtiHdmi.sys [14.12.2008 18:13 84992]
R3 WFIOCTL;WFIOCTL;c:\program files\WinFast\WFTVFM\WFIOCTL.sys [14.12.2008 18:40 9510]
S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [3.4.2009 19:47 8704]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [3.4.2009 19:47 3072]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
.
------- Doplňkový sken -------
.
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Screpheep\Data aplikací\Mozilla\Firefox\Profiles\fm61qrqt.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - hxxp://www.daemon-search.com/startpage
FF - prefs.js: network.proxy.type - 2

---- NASTAVENÍ FIREFOXU ----
FF - user.js: general.useragent.extra.zencast - Creative ZENcast v2.00.13);user_pref(general.useragent.extra.zencast, c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-24 13:05
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-861567501-854245398-839522115-1003\Software\SecuROM\License information*]
"datasecu"=hex:17,eb,10,54,a6,6f,b9,b8,14,bd,e6,40,6e,19,05,89,88,70,67,83,17,
16,c2,e4,b8,c8,1a,87,04,a1,82,f0,da,a6,78,42,d7,48,73,93,63,b2,db,9f,fe,5e,\
"rkeysecu"=hex:21,9e,bb,98,95,4d,cc,49,11,6e,ec,a1,24,20,4e,54
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(928)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(268)
c:\windows\system32\msi.dll
c:\program files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\program files\Lavasoft\Ad-Aware\aawservice.exe
c:\windows\system32\ati2evxx.exe
c:\windows\system32\CTSVCCDA.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
c:\progra~1\MI3AA1~1\rapimgr.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\program files\Skype\Plugin Manager\skypePM.exe
.
**************************************************************************
.
Celkový čas: 2009-08-24 13:09 - počítač byl restartován
ComboFix-quarantined-files.txt 2009-08-24 11:09
ComboFix2.txt 2009-08-24 09:50
ComboFix3.txt 2009-05-24 21:06
ComboFix4.txt 2009-05-24 18:53

Před spuštěním: Volných bajtů: 31 440 916 480
Po spuštění: Volných bajtů: 31 348 842 496

264 --- E O F --- 2009-08-22 18:00

[Damned]

Odinstaluj ComboFix.
ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix[mezera]/u

takže jestli nejsou problémy,tak vyčisti systém CCleanerem
a použij i T-Cleaner
smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš->spustíš

(pozn.Pokud máš AVG nebo Aviru, před stažením T-Cleaneru a po dobu čištění deaktivuj AVG (i rezidenta, Aviru), následně T-Cleaner smaž a zapni si AVG (Aviru).)


Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni select all found, pak klik empty selected.
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.

ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache,
cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer,
Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Kdyby něco, tak se zastav.
Označ topic za vyřešený (zelená fajfka) a měj se.

[Screpheep]

Ještě jednou díky za strpení