Prosím o kontrolu logu - pomalejší PC

[am83]

ComboFix 15-10-15.01 - admin 19.10.2015 17:37:11.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2009.1321 [GMT 2:00]
Spuštěný z: c:\documents and settings\admin\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\admin\Plocha\CFScript.txt
AV: Bitdefender Antivirus Free Edition *Disabled/Updated* {9488E0FA-F058-4673-850E-E755F112BABC}
FW: *Enabled* {9488E0FA-F058-4673-850E-E755F112BABC}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Google\Update
c:\program files\Google\Update\1.3.28.15\GoogleCrashHandler.exe
c:\program files\Google\Update\1.3.28.15\GoogleCrashHandler64.exe
c:\program files\Google\Update\1.3.28.15\GoogleUpdate.exe
c:\program files\Google\Update\1.3.28.15\GoogleUpdateBroker.exe
c:\program files\Google\Update\1.3.28.15\GoogleUpdateComRegisterShell64.exe
c:\program files\Google\Update\1.3.28.15\GoogleUpdateHelper.msi
c:\program files\Google\Update\1.3.28.15\GoogleUpdateOnDemand.exe
c:\program files\Google\Update\1.3.28.15\GoogleUpdateSetup.exe
c:\program files\Google\Update\1.3.28.15\GoogleUpdateWebPlugin.exe
c:\program files\Google\Update\1.3.28.15\goopdate.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_am.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_ar.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_bg.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_bn.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_ca.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_cs.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_da.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_de.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_el.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_en-GB.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_en.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_es-419.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_es.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_et.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_fa.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_fi.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_fil.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_fr.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_gu.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_hi.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_hr.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_hu.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_id.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_is.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_it.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_iw.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_ja.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_kn.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_ko.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_lt.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_lv.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_ml.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_mr.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_ms.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_nl.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_no.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_pl.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_pt-BR.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_pt-PT.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_ro.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_ru.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_sk.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_sl.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_sr.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_sv.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_sw.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_ta.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_te.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_th.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_tr.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_uk.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_ur.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_vi.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_zh-CN.dll
c:\program files\Google\Update\1.3.28.15\goopdateres_zh-TW.dll
c:\program files\Google\Update\1.3.28.15\npGoogleUpdate3.dll
c:\program files\Google\Update\1.3.28.15\psmachine.dll
c:\program files\Google\Update\1.3.28.15\psmachine_64.dll
c:\program files\Google\Update\1.3.28.15\psuser.dll
c:\program files\Google\Update\1.3.28.15\psuser_64.dll
c:\program files\Google\Update\Download\{375F8E88-84C8-4C75-AA76-899887FC8608}\GoogleUpdateSetup.exe
c:\program files\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.28.15\GoogleUpdateSetup.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\program files\Google\Update\Install\{03D09A5C-3028-4EB2-AF12-62A373C41925}\41.0.2272.101_41.0.2272.89_chrome_updater.exe
c:\program files\Google\Update\Install\{0DCC382E-4619-44EF-B73F-C6AEFA3F2F1E}\42.0.2311.152_42.0.2311.135_chrome_updater.exe
c:\program files\Google\Update\Install\{1F47DD08-030F-4CC4-8318-EA8200AEF2E2}\45.0.2454.93_45.0.2454.85_chrome_updater.exe
c:\program files\Google\Update\Install\{2CAD8DCB-54EB-44CD-8D9D-067A02A7A23D}\42.0.2311.90_41.0.2272.118_chrome_updater.exe
c:\program files\Google\Update\Install\{2D09162F-77B3-457E-BA64-2C46C3E791B3}\42.0.2311.135_42.0.2311.90_chrome_updater.exe
c:\program files\Google\Update\Install\{3812C48A-E1F6-4305-AC0B-811920860779}\41.0.2272.89_40.0.2214.115_chrome_updater.exe
c:\program files\Google\Update\Install\{3D340F8D-1014-443E-90A1-D66BF47F9C34}\40.0.2214.111_40.0.2214.93_chrome_updater.exe
c:\program files\Google\Update\Install\{3FB2D0F2-46C8-42CA-BA98-2FC3EF8E1E16}\40.0.2214.115_40.0.2214.111_chrome_updater.exe
c:\program files\Google\Update\Install\{5E8CB9F4-D395-4DE3-A660-97D20E3C58EB}\45.0.2454.85_44.0.2403.157_chrome_updater.exe
c:\program files\Google\Update\Install\{756C7614-EDA7-4BE6-A4D1-B2B919E487B3}\45.0.2454.99_45.0.2454.93_chrome_updater.exe
c:\program files\Google\Update\Install\{7D91F006-B8C9-47BF-8612-DC222DE432A0}\GoogleUpdateSetup.exe
c:\program files\Google\Update\Install\{7F535A81-CC1B-4FE4-8B25-C5337C5EB1A3}\44.0.2403.125_44.0.2403.107_chrome_updater.exe
c:\program files\Google\Update\Install\{8EADAB3E-BFAC-4A69-A080-65C79ED8294A}\43.0.2357.130_43.0.2357.124_chrome_updater.exe
c:\program files\Google\Update\Install\{99F2EC99-C449-42F5-A358-D18BE9B52E90}\43.0.2357.124_43.0.2357.81_chrome_updater.exe
c:\program files\Google\Update\Install\{A8BDF514-4055-4E86-A196-6AC44CA0E6DD}\44.0.2403.155_44.0.2403.130_chrome_updater.exe
c:\program files\Google\Update\Install\{AADD172D-5AA1-4477-8C54-D711070E23B5}\GoogleUpdateSetup.exe
c:\program files\Google\Update\Install\{AC5CB199-6D98-474A-B277-BC62EE76A1B2}\44.0.2403.130_44.0.2403.125_chrome_updater.exe
c:\program files\Google\Update\Install\{AD859128-104B-4A7C-B388-DD7DFB6F4FFA}\45.0.2454.101_45.0.2454.99_chrome_updater.exe
c:\program files\Google\Update\Install\{B11898AA-51D5-41F8-86C9-12D61B8FF719}\43.0.2357.65_42.0.2311.152_chrome_updater.exe
c:\program files\Google\Update\Install\{C2A20BD8-033C-41BA-90E5-193B79F8229A}\44.0.2403.107_44.0.2403.89_chrome_updater.exe
c:\program files\Google\Update\Install\{CB49FA3C-3168-4E1B-B6AE-7F237FA6EAD3}\GoogleUpdateSetup.exe
c:\program files\Google\Update\Install\{D0BBD02E-D4CF-4778-B2AF-B44E3B51F459}\43.0.2357.134_43.0.2357.130_chrome_updater.exe
c:\program files\Google\Update\Install\{D0F20605-A513-49D2-B61F-B77D112F3E6B}\46.0.2490.71_45.0.2454.101_chrome_updater.exe
c:\program files\Google\Update\Install\{D921188D-3A7D-4E68-A332-3E756A30A5A6}\GoogleUpdateSetup.exe
c:\program files\Google\Update\Install\{E2E2C7D8-559F-4C45-BFC2-62A2DE7AF803}\44.0.2403.157_44.0.2403.155_chrome_updater.exe
c:\program files\Google\Update\Install\{EB2CE774-522D-4D67-B313-E24827F5FDC5}\41.0.2272.118_41.0.2272.101_chrome_updater.exe
c:\program files\Google\Update\Install\{F27818DA-022B-442F-97B3-4D3FFB45A4C9}\GoogleUpdateSetup.exe
c:\program files\Google\Update\Install\{F527AF0F-12D5-418F-B11E-A864126AB26C}\44.0.2403.89_43.0.2357.134_chrome_updater.exe
c:\program files\Google\Update\Install\{F6C16371-879A-4AD9-B5C8-8182A16801BC}\43.0.2357.81_43.0.2357.65_chrome_updater.exe
c:\program files\Skype\Updater
c:\program files\Skype\Updater\Updater.dll
c:\program files\Skype\Updater\Updater.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_SKYPEUPDATE
-------\Service_SkypeUpdate
-------\Legacy_gupdate
-------\Legacy_gupdatem
-------\Legacy_gupdate
-------\Legacy_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-09-19 do 2015-10-19 )))))))))))))))))))))))))))))))
.
.
2015-10-18 18:05 . 2015-10-18 17:58 24064 ----a-w- c:\windows\zoek-delete.exe
2015-10-18 17:53 . 2015-10-18 17:53 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Mozilla
2015-10-18 17:53 . 2015-10-18 18:04 -------- d-----w- C:\zoek_backup
2015-10-17 08:38 . 2015-10-18 17:24 35064 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-10-17 08:38 . 2015-10-17 08:55 -------- d-----w- c:\documents and settings\All Users\Data aplikací\RogueKiller
2015-10-11 16:41 . 2015-10-18 16:51 -------- d-----w- C:\Call of Duty 1
2015-10-11 15:43 . 2009-09-04 15:44 238936 ----a-w- c:\windows\system32\xactengine3_5.dll
2015-10-11 15:42 . 2015-10-11 15:42 -------- d-----w- c:\windows\Logs
2015-10-11 14:20 . 2015-10-11 14:20 -------- d-----w- c:\windows\system32\config\systemprofile\Data aplikací\QuickScan
2015-10-10 16:43 . 2015-10-10 16:43 -------- d-----w- c:\documents and settings\LocalService\Data aplikací\QuickScan
2015-10-10 16:41 . 2015-10-10 16:41 173939 ----a-w- c:\documents and settings\All Users\Data aplikací\1444495224.bdinstall.bin
2015-10-10 16:40 . 2009-07-14 21:27 1461992 ----a-w- c:\windows\system32\WdfCoInstaller01009.dll
2015-10-10 16:40 . 2015-10-10 16:41 -------- d-----w- c:\program files\Bitdefender
2015-10-10 16:40 . 2013-04-17 12:59 633344 ----a-w- c:\windows\system32\drivers\avc3.sys
2015-10-10 16:40 . 2013-04-17 12:59 486536 ----a-w- c:\windows\system32\drivers\avckf.sys
2015-10-10 16:40 . 2012-11-02 12:17 242504 ----a-w- c:\windows\system32\drivers\avchv.sys
2015-10-10 16:40 . 2013-04-22 11:20 164952 ----a-w- c:\windows\system32\drivers\gzflt.sys
2015-10-10 16:40 . 2013-05-28 10:11 355744 ----a-w- c:\windows\system32\drivers\trufos.sys
2015-10-02 14:40 . 2015-10-02 14:40 17314496 ----a-w- c:\program files\Common Files\Microsoft Shared\OFFICE12\MSO.DLL
2015-09-28 20:23 . 2015-09-28 20:23 -------- d-----w- c:\program files\Common Files\Skype
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-10-17 08:49 . 2012-04-07 15:35 780488 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2015-10-17 08:49 . 2011-05-21 09:06 142536 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner.exe" [2015-05-08 6369048]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-07-17 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-07-17 178712]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-07-17 150040]
"RTHDCPL"="RTHDCPL.EXE" [2008-03-26 16859136]
"SoundMan"="SOUNDMAN.EXE" [2006-07-21 86016]
"AlcWzrd"="ALCWZRD.EXE" [2006-05-04 2808832]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-05-08 1105920]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2007-03-14 71216]
"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2007-01-08 52256]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"SecurDisc"="c:\program files\Nero\Nero 7\InCD\NBHGui.exe" [2007-11-26 1629480]
"InCD"="c:\program files\Nero\Nero 7\InCD\InCD.exe" [2007-11-26 1057064]
"HPWRTOOLBOX"="c:\program files\HP\HP Deskjet 460 Series\Toolbox\HPWRTBX.exe" [2007-04-04 356352]
"RIMBBLaunchAgent.exe"="c:\program files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe" [2013-01-17 267792]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-05-08 959904]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Magdička\Nabídka Start\Programy\Po spuštění\
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\startupfolder\C:^Documents and Settings^admin^Nabídka Start^Programy^Po spuštění^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
path=c:\documents and settings\admin\Nabídka Start\Programy\Po spuštění\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
backup=c:\windows\pss\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnkStartup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^hp psc 1000 series.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\hp psc 1000 series.lnk
backup=c:\windows\pss\hp psc 1000 series.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^hpoddt01.exe.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\hpoddt01.exe.lnk
backup=c:\windows\pss\hpoddt01.exe.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2015-08-07 18:04 53729824 ----a-r- c:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\QIP\\qip.exe"=
"c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"c:\\Program Files\\Research In Motion\\BlackBerry Desktop\\Rim.Desktop.exe"=
"c:\\Program Files\\Google\\Chrome\\Application\\chrome.exe"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
.
R0 avc3;avc3;c:\windows\system32\drivers\avc3.sys [10.10.2015 18:40 633344]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [28.2.2010 13:02 691696]
R1 gzflt;gzflt;c:\windows\system32\drivers\gzflt.sys [10.10.2015 18:40 164952]
R2 gzserv;Bitdefender Antivirus Free Edition;c:\program files\Bitdefender\Antivirus Free Edition\gzserv.exe [10.10.2015 18:40 57520]
R3 avckf;avckf;c:\windows\system32\drivers\avckf.sys [10.10.2015 18:40 486536]
R3 avchv;avchv Function Driver;c:\windows\system32\drivers\avchv.sys [10.10.2015 18:40 242504]
R3 Blackberry Device Manager;BlackBerry Device Manager;c:\program files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [18.1.2013 18:10 577536]
R3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [17.12.2008 17:42 84240]
S3 libusb0;LibUsb-Win32 - Kernel Driver 03/20/2007, 0.1.12.1;c:\windows\system32\drivers\libusb0.sys [29.1.2012 20:47 28672]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2008-07-16 22:02 997704 ----a-w- c:\program files\Google\Chrome\Application\46.0.2490.71\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2015-10-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-07 08:49]
.
2012-08-26 c:\windows\Tasks\FRU Task 2003-04-10 00:56ewlett-Packard2003-04-10 00:56p psc 1200 series272A572217594EBCF1CEE215E352B92AD073FDE4336924407.job
- c:\program files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe [2003-04-09 15:56]
.
2015-08-08 c:\windows\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
- c:\windows\system32\xp_eos.exe [2014-03-07 23:28]
.
2015-10-19 c:\windows\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
- c:\windows\system32\xp_eos.exe [2014-03-07 23:28]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Free YouTube to Mp3 Converter - c:\documents and settings\admin\Data aplikací\DVDVideoSoftIEHelpers\youtubetomp3.htm
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
TCP: DhcpNameServer = 178.72.241.110 10.152.32.1
FF - ProfilePath - c:\documents and settings\admin\Data aplikací\Mozilla\Firefox\Profiles\kkkuw8pe.default\
FF - ExtSQL: !HIDDEN! 2009-12-31 15:34; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2015-10-19 18:00
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(3808)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Nero\Nero 7\InCD\InCDsrv.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\program files\Bitdefender\Antivirus Free Edition\gziface.exe
c:\windows\system32\rundll32.exe
c:\windows\RTHDCPL.EXE
c:\windows\SOUNDMAN.EXE
c:\windows\system32\igfxsrvc.exe
.
**************************************************************************
.
Celkový čas: 2015-10-19 18:04:05 - počítač byl restartován
ComboFix-quarantined-files.txt 2015-10-19 16:04
ComboFix2.txt 2015-10-18 18:30
.
Před spuštěním: Volných bajtů: 103 049 732 096
Po spuštění: Volných bajtů: 102 843 658 240
.
- - End Of File - - 39013D9F025779C8132EB17E49B596F2
413FC2A0C716421B3158746D63736515

[Reklama]

[am83]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:07:43, on 19.10.2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)

FIREFOX: 41.0.2 (x86 cs)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Bitdefender\Antivirus Free Edition\gziface.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
C:\WINDOWS\explorer.exe
C:\Install\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [HPWRTOOLBOX] C:\Program Files\HP\HP Deskjet 460 Series\Toolbox\HPWRTBX.exe "-i"
O4 - HKLM\..\Run: [RIMBBLaunchAgent.exe] C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Documents and Settings\admin\Data aplikací\DVDVideoSoftIEHelpers\youtubetomp3.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 8310757468
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: BlackBerry Device Manager (Blackberry Device Manager) - Research In Motion Limited - C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
O23 - Service: Bitdefender Antivirus Free Edition (gzserv) - Bitdefender - C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

--
End of file - 7062 bytes

[jerabina]

Zavři ostatní programy/prohlížeče, odpoj se od internetu a v HJT fixni:
NÁVOD

Kód: Vybrat vše

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Co problémy?

[am83]

Zatím pravděpodobně ok. Určitě je to rychlejší, i internet. Uvidíme až tam budu sedět delší dobu v kuse, pak byl vždycky největší problém s tím vypnutím. Každopádně díky!

[jaro3]

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.