nový notebook a kontrola Vyřešeno

[shearer79]

spuštěno.

[Reklama]

[shearer79]

ComboFix 09-12-06.07 - Míša 06.12.2009 21:34.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.1976.909 [GMT 1:00]
Spuštěný z: c:\users\Míša\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Míša\Desktop\CFScript.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

FILE ::
"c:\programdata\Google\Google Toolbar\Update\gtb1314.tmp.exe"
"c:\windows\TEMP\006960~1.EXE"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\ICQ6Toolbar
c:\program files\ICQ6Toolbar\ICQToolBar.dll
c:\programdata\Google\Google Toolbar\Update\gtb1314.tmp.exe
c:\programdata\McAfee

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-11-06 do 2009-12-06 )))))))))))))))))))))))))))))))
.

2009-12-06 20:46 . 2009-12-06 20:46 -------- d-----w- c:\users\Public\AppData\Local\temp
2009-12-06 20:46 . 2009-12-06 20:46 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-12-05 20:36 . 2009-12-05 20:37 -------- d-----w- c:\windows\system32\ca-ES
2009-12-05 20:36 . 2009-12-05 20:37 -------- d-----w- c:\windows\system32\eu-ES
2009-12-05 20:36 . 2009-12-05 20:37 -------- d-----w- c:\windows\system32\vi-VN
2009-12-05 16:49 . 2009-12-05 16:49 -------- d-----w- c:\program files\Trend Micro
2009-12-05 16:40 . 2009-12-05 16:40 4096 d-----w- c:\windows\system32\EventProviders
2009-12-05 16:31 . 2009-12-05 16:31 -------- d-----w- c:\program files\VS Revo Group
2009-12-05 15:59 . 2009-12-06 15:12 4096 d-----w- c:\program files\Wise Disk Cleaner
2009-12-05 15:53 . 2009-12-05 15:57 4096 d-----w- c:\program files\Wise Registry Cleaner
2009-12-05 13:07 . 2009-03-08 11:32 72704 ----a-w- c:\windows\system32\admparse.dll
2009-12-05 12:56 . 2009-12-05 12:56 -------- d-----w- c:\program files\CCleaner
2009-11-27 17:21 . 2009-10-29 09:17 2048 ----a-w- c:\windows\system32\tzres.dll
2009-11-25 13:34 . 2009-08-11 16:44 1401856 ----a-w- c:\windows\system32\msxml6.dll
2009-11-25 13:34 . 2009-08-11 16:44 1248768 ----a-w- c:\windows\system32\msxml3.dll
2009-11-20 09:54 . 2009-06-15 14:52 499712 ----a-w- c:\windows\system32\kerberos.dll
2009-11-20 09:54 . 2009-06-15 14:53 270848 ----a-w- c:\windows\system32\schannel.dll
2009-11-19 20:45 . 2009-11-19 20:28 20038136 ----a-w- c:\program files\AVSDVDPlayer.exe
2009-11-19 20:37 . 2009-11-19 20:37 -------- d-----w- c:\programdata\AVS4YOU
2009-11-19 20:36 . 2009-11-19 20:36 -------- d-----w- c:\program files\Common Files\AVSMedia
2009-11-19 20:36 . 2008-11-24 11:00 638976 ----a-w- c:\windows\system32\divx.dll
2009-11-19 20:36 . 2008-11-24 11:00 524288 ----a-w- c:\windows\system32\xvidcore.dll
2009-11-19 20:36 . 2008-11-24 11:00 413760 ----a-w- c:\windows\system32\mpg4c32.dll
2009-11-19 20:36 . 2008-11-24 11:00 261632 ----a-w- c:\windows\system32\mcdvd_32.dll
2009-11-19 20:36 . 2008-11-24 11:00 139264 ----a-w- c:\windows\system32\xvidvfw.dll
2009-11-19 20:36 . 2008-11-24 11:00 1700352 ----a-w- c:\windows\system32\GdiPlus.dll
2009-11-19 20:36 . 2008-11-24 11:00 24576 ----a-w- c:\windows\system32\msxml3a.dll
2009-11-19 20:36 . 2008-11-24 11:00 974848 ----a-w- c:\windows\system32\mfc70.dll
2009-11-19 20:36 . 2008-11-24 11:00 487424 ----a-w- c:\windows\system32\msvcp70.dll
2009-11-19 20:36 . 2009-11-19 20:37 4096 d-----w- c:\program files\AVS4YOU
2009-11-19 20:22 . 2009-04-11 06:28 1589248 ----a-w- c:\windows\system32\msjet40.dll
2009-11-19 20:21 . 2009-04-11 06:28 524288 ----a-w- c:\windows\system32\sqlsrv32.dll
2009-11-19 20:20 . 2009-04-11 06:28 29184 ----a-w- c:\windows\system32\wsepno.dll
2009-11-19 20:19 . 2009-04-11 06:28 47104 ----a-w- c:\windows\system32\wbem\WmiPerfInst.dll
2009-11-19 20:18 . 2009-04-11 06:28 83968 ----a-w- c:\windows\system32\wbem\wmiutils.dll
2009-11-19 20:18 . 2009-04-11 06:28 30208 ----a-w- c:\windows\system32\wbem\wbemprox.dll
2009-11-19 20:18 . 2009-04-11 06:28 189440 ----a-w- c:\windows\system32\wbem\mofd.dll
2009-11-19 20:18 . 2009-04-11 06:28 744448 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2009-11-19 20:18 . 2009-04-11 06:28 265728 ----a-w- c:\windows\system32\wbem\repdrvfs.dll
2009-11-19 20:18 . 2009-04-11 06:28 614912 ----a-w- c:\windows\system32\wbem\fastprox.dll
2009-11-19 20:18 . 2009-04-11 06:28 265728 ----a-w- c:\windows\system32\wbem\esscli.dll
2009-11-19 20:17 . 2009-04-11 06:28 705536 ----a-w- c:\windows\system32\SmiEngine.dll
2009-11-19 20:17 . 2009-04-11 06:28 218624 ----a-w- c:\windows\system32\wdscore.dll
2009-11-19 20:17 . 2009-04-11 06:27 130560 ----a-w- c:\windows\system32\PkgMgr.exe
2009-11-19 20:15 . 2009-04-11 06:28 247808 ----a-w- c:\windows\system32\drvstore.dll
2009-11-15 19:30 . 2009-11-15 19:30 8192 d-----w- c:\windows\SQL9_KB970892_ENU
2009-11-14 11:20 . 2009-11-14 11:20 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2009-11-14 10:51 . 2008-07-27 18:03 41984 ----a-w- c:\windows\system32\netfxperf.dll
2009-11-13 15:32 . 2009-08-14 16:27 904776 ----a-w- c:\windows\system32\drivers\tcpip.sys
2009-11-13 15:32 . 2009-08-14 13:48 105984 ----a-w- c:\windows\system32\netiohlp.dll
2009-11-13 15:32 . 2009-08-14 13:48 30720 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2009-11-13 15:32 . 2009-08-14 13:49 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2009-11-13 15:32 . 2009-08-14 13:49 19968 ----a-w- c:\windows\system32\ARP.EXE
2009-11-13 15:32 . 2009-08-14 13:49 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2009-11-13 15:32 . 2009-08-14 13:49 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2009-11-13 15:32 . 2009-08-14 13:49 10240 ----a-w- c:\windows\system32\finger.exe
2009-11-13 15:32 . 2009-08-14 13:49 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2009-11-13 15:32 . 2009-08-14 13:49 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2009-11-13 15:32 . 2009-08-14 15:53 17920 ----a-w- c:\windows\system32\netevent.dll
2009-11-13 15:30 . 2009-07-11 19:01 513536 ----a-w- c:\windows\system32\wlansvc.dll
2009-11-13 15:30 . 2009-04-11 06:28 68096 ----a-w- c:\windows\system32\wlanhlp.dll
2009-11-13 15:30 . 2009-07-11 19:01 293376 ----a-w- c:\windows\system32\wlanmsm.dll
2009-11-13 15:30 . 2009-07-11 19:01 302592 ----a-w- c:\windows\system32\wlansec.dll
2009-11-13 15:30 . 2009-07-11 19:01 65024 ----a-w- c:\windows\system32\wlanapi.dll
2009-11-13 15:30 . 2009-07-11 17:03 127488 ----a-w- c:\windows\system32\L2SecHC.dll
2009-11-13 15:29 . 2009-06-15 12:42 289792 ----a-w- c:\windows\system32\atmfd.dll
2009-11-13 15:29 . 2009-06-15 14:53 156672 ----a-w- c:\windows\system32\t2embed.dll
2009-11-13 15:29 . 2009-06-15 14:52 23552 ----a-w- c:\windows\system32\lpk.dll
2009-11-13 15:29 . 2009-06-15 14:52 72704 ----a-w- c:\windows\system32\fontsub.dll
2009-11-13 15:29 . 2009-06-15 14:51 10240 ----a-w- c:\windows\system32\dciman32.dll
2009-11-13 15:29 . 2009-04-11 06:28 34304 ----a-w- c:\windows\system32\atmlib.dll
2009-11-13 15:29 . 2009-06-15 14:52 1259008 ----a-w- c:\windows\system32\lsasrv.dll
2009-11-13 15:29 . 2009-09-10 16:48 218624 ----a-w- c:\windows\system32\msv1_0.dll
2009-11-13 15:29 . 2009-06-15 14:54 175104 ----a-w- c:\windows\system32\wdigest.dll
2009-11-13 15:29 . 2009-06-15 23:15 439864 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-11-13 15:29 . 2009-06-15 14:53 72704 ----a-w- c:\windows\system32\secur32.dll
2009-11-13 15:29 . 2009-06-15 12:48 9728 ----a-w- c:\windows\system32\lsass.exe
2009-11-13 15:24 . 2009-06-10 11:41 2868224 ----a-w- c:\windows\system32\mf.dll
2009-11-13 15:24 . 2009-04-11 06:28 98816 ----a-w- c:\windows\system32\mfps.dll
2009-11-13 15:24 . 2009-04-11 06:27 53248 ----a-w- c:\windows\system32\rrinstaller.exe
2009-11-13 15:24 . 2009-04-11 06:27 24576 ----a-w- c:\windows\system32\mfpmp.exe
2009-11-13 15:24 . 2009-04-11 04:54 2048 ----a-w- c:\windows\system32\mferror.dll
2009-11-13 15:23 . 2009-07-17 13:54 71680 ----a-w- c:\windows\system32\atl.dll
2009-11-13 15:23 . 2009-08-04 12:34 3600456 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-11-13 15:23 . 2009-08-04 12:34 3548216 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-11-13 15:23 . 2009-06-10 11:42 160256 ----a-w- c:\windows\system32\wkssvc.dll
2009-11-13 15:22 . 2009-06-04 12:07 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-11-13 15:22 . 2009-04-11 06:28 136192 ----a-w- c:\windows\system32\aaclient.dll
2009-11-13 15:22 . 2009-04-11 06:28 53248 ----a-w- c:\windows\system32\tsgqec.dll
2009-11-13 15:18 . 2009-06-10 11:38 91136 ----a-w- c:\windows\system32\avifil32.dll
2009-11-13 15:18 . 2009-04-23 12:14 623616 ----a-w- c:\windows\system32\localspl.dll
2009-11-13 15:16 . 2009-08-14 13:27 2036736 ----a-w- c:\windows\system32\win32k.sys
2009-11-13 14:48 . 2009-11-13 14:48 -------- d-----w- c:\programdata\ICQ
2009-11-13 14:45 . 2009-11-13 14:50 12288 d-----w- c:\program files\ICQ6.5
2009-11-13 14:42 . 2009-07-15 12:39 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2009-11-13 14:42 . 2009-04-11 06:28 1696768 ----a-w- c:\windows\system32\gameux.dll
2009-11-13 14:42 . 2009-08-29 00:14 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2009-11-13 14:42 . 2009-08-29 00:27 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-11-13 14:38 . 2009-09-04 11:41 60928 ----a-w- c:\windows\system32\msasn1.dll
2009-11-13 14:38 . 2009-04-23 12:15 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2009-11-13 14:38 . 2009-09-14 09:29 144896 ----a-w- c:\windows\system32\drivers\srv2.sys
2009-11-13 14:38 . 2009-08-10 12:35 355328 ----a-w- c:\windows\system32\WSDApi.dll
2009-11-13 14:32 . 2009-05-08 12:53 604672 ----a-w- c:\windows\system32\WMSPDMOD.DLL
2009-11-13 14:31 . 2009-09-10 14:58 310784 ----a-w- c:\windows\system32\unregmp2.exe
2009-11-13 14:31 . 2009-07-15 12:39 7680 ----a-w- c:\windows\system32\spwmp.dll
2009-11-13 14:31 . 2009-07-15 12:39 4096 ----a-w- c:\windows\system32\dxmasf.dll
2009-11-13 14:31 . 2009-09-10 14:59 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2009-11-13 14:21 . 2009-11-24 23:49 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-11-13 14:21 . 2009-11-24 23:48 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-11-13 14:21 . 2009-11-24 23:47 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-11-13 14:21 . 2009-09-15 10:55 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-11-13 14:21 . 2009-09-15 10:55 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-11-13 14:20 . 2009-11-24 23:54 1280480 ----a-w- c:\windows\system32\aswBoot.exe
2009-11-13 14:20 . 2009-09-15 10:55 53328 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2009-11-13 14:20 . 2003-03-18 21:20 1060864 ----a-w- c:\windows\system32\MFC71.dll
2009-11-13 14:20 . 2003-03-18 20:14 499712 ----a-w- c:\windows\system32\MSVCP71.dll
2009-11-13 14:20 . 2003-02-21 04:42 348160 ----a-w- c:\windows\system32\MSVCR71.dll
2009-11-13 14:20 . 2009-11-13 14:20 -------- d-----w- c:\program files\Alwil Software
2009-11-13 13:42 . 2009-08-07 02:24 44768 ----a-w- c:\windows\system32\wups2.dll
2009-11-13 13:42 . 2009-08-07 02:24 53472 ----a-w- c:\windows\system32\wuauclt.exe
2009-11-13 13:42 . 2009-08-07 02:23 1929952 ----a-w- c:\windows\system32\wuaueng.dll
2009-11-13 13:42 . 2009-08-07 01:45 2421760 ----a-w- c:\windows\system32\wucltux.dll
2009-11-13 13:41 . 2009-08-07 02:24 35552 ----a-w- c:\windows\system32\wups.dll
2009-11-13 13:41 . 2009-08-07 02:23 575704 ----a-w- c:\windows\system32\wuapi.dll
2009-11-13 13:41 . 2009-08-07 01:44 87552 ----a-w- c:\windows\system32\wudriver.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-06 19:55 . 2008-01-21 06:46 645540 ----a-w- c:\windows\system32\perfh005.dat
2009-12-06 19:55 . 2008-01-21 06:46 132514 ----a-w- c:\windows\system32\perfc005.dat
2009-12-06 14:54 . 2009-12-06 14:54 4096 d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-06 14:54 . 2009-12-06 14:54 -------- d-----w- c:\programdata\Malwarebytes
2009-12-05 20:37 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Sidebar
2009-12-05 20:37 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-12-05 20:37 . 2006-11-02 11:18 4096 d-----w- c:\program files\Windows Mail
2009-12-05 20:37 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Photo Gallery
2009-12-05 20:37 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Journal
2009-12-05 20:37 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Collaboration
2009-12-05 20:37 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Defender
2009-12-05 20:36 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-12-03 15:14 . 2009-12-06 14:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-03 15:13 . 2009-12-06 14:54 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-11-19 14:24 . 2009-11-19 14:24 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2009-11-15 19:39 . 2009-05-16 15:47 12288 d-----w- c:\programdata\Microsoft Help
2009-11-15 19:36 . 2009-05-16 15:49 4096 d-----w- c:\program files\Microsoft Works
2009-11-15 19:31 . 2009-05-16 15:50 -------- d-----w- c:\program files\Microsoft SQL Server
2009-11-13 14:48 . 2009-05-16 15:38 4096 d--h--w- c:\program files\InstallShield Installation Information
2009-11-13 14:02 . 2009-05-16 16:00 4096 d-----w- c:\program files\Google
2009-11-06 22:11 . 2009-05-16 16:27 4096 d-----w- c:\program files\Acer
2009-11-06 22:03 . 2009-11-06 22:03 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_SynTP_01007.Wdf
2009-11-06 21:49 . 2009-05-16 15:35 -------- d-----w- c:\program files\Intel
2009-11-06 21:45 . 2009-11-06 21:45 -------- d-sh--we c:\programdata\Plocha
2009-11-06 21:45 . 2009-11-06 21:45 -------- d-sh--we c:\programdata\Oblíbené položky
2009-11-06 21:45 . 2009-11-06 21:45 -------- d-sh--we c:\programdata\Šablony
2009-11-06 21:45 . 2009-11-06 21:45 -------- d-sh--we c:\programdata\Nabídka Start
2009-11-06 21:45 . 2009-11-06 21:45 -------- d-sh--we c:\programdata\Dokumenty
2009-11-06 21:45 . 2009-11-06 21:45 -------- d-sh--we c:\programdata\Data aplikací
2009-11-02 19:42 . 2009-12-06 14:34 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-09-30 05:53 . 2009-09-30 05:53 1184768 ----a-w- c:\windows\system32\drivers\athr.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ProductReg"="c:\program files\Acer\WR_PopUp\ProductReg.exe" [2008-11-17 135168]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-11-06 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-03-25 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-03-25 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-03-25 150552]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe" [2008-11-05 474168]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-03-05 1434920]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2009-04-03 698912]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Acer VCM.lnk - c:\program files\Acer\Acer VCM\AcerVCM.exe [2009-5-16 565248]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
backup=c:\windows\pss\Bluetooth.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
c:\program files\ICQ6.5\ICQ.exe silent [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-06-12 00:38 34672 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
2009-05-16 16:00 30192 ----a-w- c:\program files\Google\Google Desktop Search\GoogleDesktop.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif]
2009-02-11 15:38 186904 ----a-w- c:\program files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
2009-03-05 07:43 805384 ----a-w- c:\program files\Launch Manager\LManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
2009-12-03 15:14 429392 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PLFSetI]
2008-07-29 18:29 200704 ----a-w- c:\windows\PLFSetI.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-11-06 21:49 68856 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
2008-01-21 02:23 1008184 ----a-w- c:\program files\Windows Defender\MSASCui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
2008-01-21 02:25 202240 ----a-w- c:\program files\Windows Media Player\wmpnscfg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):45,c3,f7,83,eb,75,ca,01

R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [13.11.2009 15:21 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [13.11.2009 15:21 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [13.11.2009 15:20 53328]
R2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [6.11.2009 23:06 723488]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [23.9.2008 13:11 144632]
R2 regi;regi;c:\windows\System32\drivers\regi.sys [17.4.2007 20:09 11032]
R2 RS_Service;Raw Socket Service;c:\program files\Acer\Acer VCM\RS_Service.exe [16.5.2009 17:27 237568]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\System32\drivers\L1C60x86.sys [4.9.2009 5:34 53248]
S3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [16.5.2009 17:00 30192]
S3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\System32\drivers\NETw5v32.sys [17.5.2009 0:06 4232704]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [23.9.2008 13:11 50424]
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACA ... ensa_5635z
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-06 21:47
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...


c:\users\MA7580~1\AppData\Local\Temp\catchme.dll 53248 bytes executable

sken byl úspešně dokončen
skryté soubory: 1

**************************************************************************
.
Celkový čas: 2009-12-06 21:50
ComboFix-quarantined-files.txt 2009-12-06 20:50
ComboFix2.txt 2009-12-06 20:13

Před spuštěním: Volných bajtů: 194 546 319 360
Po spuštění: Volných bajtů: 194 528 968 704

- - End Of File - - 88A579AF28D6BB14E47EDA440CE29296

[Damned]

Ještě jeden.
Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok).
Zkopíruj do něj následující celý text označený zeleně:

File::
c:\users\MA7580~1\AppData\Local\Temp\catchme.dll

Driver::
catchme



Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.


Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe
a když se oba soubory překryjí, skript upusť.


- Automaticky se spustí ComboFix, oprava může trvat i déle než 10 minut. ! Nech ComboFix dokončit svou práci !
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT a popiš chování počítače

[shearer79]

tak zase chviličku strpení:-)můžu sem pak ještě poslat na kontrolu log mého stolního pc?

[Damned]

Jasně. Začni HJT a popiš zda jsou nějaké problémy.

[shearer79]

tak už se připravuje log.

[shearer79]

tak log nemám,nechce mě to pustit k tomu.pokus použít neplatnnou operaci na klíč registru,kterýje označen pro odstranění.

[Damned]

Kdo, kde a co ti to hlásí? Pokud to jde, udělej screen a přilož ho sem.

[shearer79]

už to mám:-)
ComboFix 09-12-06.07 - Míša 06.12.2009 22:13.3.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.1976.1013 [GMT 1:00]
Spuštěný z: c:\users\Míša\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Míša\Desktop\CFScript.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

FILE ::
"c:\users\MA7580~1\AppData\Local\Temp\catchme.dll"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_CATCHME
-------\Service_catchme


((((((((((((((((((((((((( Soubory vytvořené od 2009-11-06 do 2009-12-06 )))))))))))))))))))))))))))))))
.

2009-12-06 21:26 . 2009-12-06 21:26 -------- d-----w- c:\users\Public\AppData\Local\temp
2009-12-06 14:54 . 2009-12-03 15:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-06 14:54 . 2009-12-06 14:54 4096 d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-06 14:54 . 2009-12-06 14:54 -------- d-----w- c:\programdata\Malwarebytes
2009-12-06 14:54 . 2009-12-03 15:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-12-06 14:34 . 2009-11-02 19:42 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-12-05 20:36 . 2009-12-05 20:37 -------- d-----w- c:\windows\system32\ca-ES
2009-12-05 20:36 . 2009-12-05 20:37 -------- d-----w- c:\windows\system32\eu-ES
2009-12-05 20:36 . 2009-12-05 20:37 -------- d-----w- c:\windows\system32\vi-VN
2009-12-05 16:49 . 2009-12-05 16:49 -------- d-----w- c:\program files\Trend Micro
2009-12-05 16:40 . 2009-12-05 16:40 -------- d-----w- c:\windows\system32\EventProviders
2009-12-05 16:31 . 2009-12-05 16:31 -------- d-----w- c:\program files\VS Revo Group
2009-12-05 15:59 . 2009-12-06 15:12 4096 d-----w- c:\program files\Wise Disk Cleaner
2009-12-05 15:53 . 2009-12-05 15:57 4096 d-----w- c:\program files\Wise Registry Cleaner
2009-12-05 13:07 . 2009-03-08 11:32 72704 ----a-w- c:\windows\system32\admparse.dll
2009-12-05 12:56 . 2009-12-05 12:56 -------- d-----w- c:\program files\CCleaner
2009-11-27 17:21 . 2009-10-29 09:17 2048 ----a-w- c:\windows\system32\tzres.dll
2009-11-25 13:34 . 2009-08-11 16:44 1401856 ----a-w- c:\windows\system32\msxml6.dll
2009-11-25 13:34 . 2009-08-11 16:44 1248768 ----a-w- c:\windows\system32\msxml3.dll
2009-11-20 09:54 . 2009-06-15 14:52 499712 ----a-w- c:\windows\system32\kerberos.dll
2009-11-20 09:54 . 2009-06-15 14:53 270848 ----a-w- c:\windows\system32\schannel.dll
2009-11-19 20:45 . 2009-11-19 20:28 20038136 ----a-w- c:\program files\AVSDVDPlayer.exe
2009-11-19 20:37 . 2009-11-19 20:37 -------- d-----w- c:\programdata\AVS4YOU
2009-11-19 20:36 . 2009-11-19 20:36 -------- d-----w- c:\program files\Common Files\AVSMedia
2009-11-19 20:36 . 2008-11-24 11:00 638976 ----a-w- c:\windows\system32\divx.dll
2009-11-19 20:36 . 2008-11-24 11:00 524288 ----a-w- c:\windows\system32\xvidcore.dll
2009-11-19 20:36 . 2008-11-24 11:00 413760 ----a-w- c:\windows\system32\mpg4c32.dll
2009-11-19 20:36 . 2008-11-24 11:00 261632 ----a-w- c:\windows\system32\mcdvd_32.dll
2009-11-19 20:36 . 2008-11-24 11:00 139264 ----a-w- c:\windows\system32\xvidvfw.dll
2009-11-19 20:36 . 2008-11-24 11:00 1700352 ----a-w- c:\windows\system32\GdiPlus.dll
2009-11-19 20:36 . 2008-11-24 11:00 24576 ----a-w- c:\windows\system32\msxml3a.dll
2009-11-19 20:36 . 2008-11-24 11:00 974848 ----a-w- c:\windows\system32\mfc70.dll
2009-11-19 20:36 . 2008-11-24 11:00 487424 ----a-w- c:\windows\system32\msvcp70.dll
2009-11-19 20:36 . 2009-11-19 20:37 4096 d-----w- c:\program files\AVS4YOU
2009-11-19 20:22 . 2009-04-11 06:28 1589248 ----a-w- c:\windows\system32\msjet40.dll
2009-11-19 20:21 . 2009-04-11 06:28 524288 ----a-w- c:\windows\system32\sqlsrv32.dll
2009-11-19 20:20 . 2009-04-11 06:28 29184 ----a-w- c:\windows\system32\wsepno.dll
2009-11-19 20:19 . 2009-04-11 06:28 47104 ----a-w- c:\windows\system32\wbem\WmiPerfInst.dll
2009-11-19 20:18 . 2009-04-11 06:28 83968 ----a-w- c:\windows\system32\wbem\wmiutils.dll
2009-11-19 20:18 . 2009-04-11 06:28 30208 ----a-w- c:\windows\system32\wbem\wbemprox.dll
2009-11-19 20:18 . 2009-04-11 06:28 189440 ----a-w- c:\windows\system32\wbem\mofd.dll
2009-11-19 20:18 . 2009-04-11 06:28 744448 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2009-11-19 20:18 . 2009-04-11 06:28 265728 ----a-w- c:\windows\system32\wbem\repdrvfs.dll
2009-11-19 20:18 . 2009-04-11 06:28 614912 ----a-w- c:\windows\system32\wbem\fastprox.dll
2009-11-19 20:18 . 2009-04-11 06:28 265728 ----a-w- c:\windows\system32\wbem\esscli.dll
2009-11-19 20:17 . 2009-04-11 06:28 705536 ----a-w- c:\windows\system32\SmiEngine.dll
2009-11-19 20:17 . 2009-04-11 06:28 218624 ----a-w- c:\windows\system32\wdscore.dll
2009-11-19 20:17 . 2009-04-11 06:27 130560 ----a-w- c:\windows\system32\PkgMgr.exe
2009-11-19 20:15 . 2009-04-11 06:28 247808 ----a-w- c:\windows\system32\drvstore.dll
2009-11-15 19:30 . 2009-11-15 19:30 -------- d-----w- c:\windows\SQL9_KB970892_ENU
2009-11-14 11:20 . 2009-11-14 11:20 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2009-11-14 10:51 . 2008-07-27 18:03 41984 ----a-w- c:\windows\system32\netfxperf.dll
2009-11-13 15:32 . 2009-08-14 16:27 904776 ----a-w- c:\windows\system32\drivers\tcpip.sys
2009-11-13 15:32 . 2009-08-14 13:48 105984 ----a-w- c:\windows\system32\netiohlp.dll
2009-11-13 15:32 . 2009-08-14 13:48 30720 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2009-11-13 15:32 . 2009-08-14 13:49 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2009-11-13 15:32 . 2009-08-14 13:49 19968 ----a-w- c:\windows\system32\ARP.EXE
2009-11-13 15:32 . 2009-08-14 13:49 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2009-11-13 15:32 . 2009-08-14 13:49 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2009-11-13 15:32 . 2009-08-14 13:49 10240 ----a-w- c:\windows\system32\finger.exe
2009-11-13 15:32 . 2009-08-14 13:49 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2009-11-13 15:32 . 2009-08-14 13:49 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2009-11-13 15:32 . 2009-08-14 15:53 17920 ----a-w- c:\windows\system32\netevent.dll
2009-11-13 15:30 . 2009-07-11 19:01 513536 ----a-w- c:\windows\system32\wlansvc.dll
2009-11-13 15:30 . 2009-04-11 06:28 68096 ----a-w- c:\windows\system32\wlanhlp.dll
2009-11-13 15:30 . 2009-07-11 19:01 293376 ----a-w- c:\windows\system32\wlanmsm.dll
2009-11-13 15:30 . 2009-07-11 19:01 302592 ----a-w- c:\windows\system32\wlansec.dll
2009-11-13 15:30 . 2009-07-11 19:01 65024 ----a-w- c:\windows\system32\wlanapi.dll
2009-11-13 15:30 . 2009-07-11 17:03 127488 ----a-w- c:\windows\system32\L2SecHC.dll
2009-11-13 15:29 . 2009-06-15 12:42 289792 ----a-w- c:\windows\system32\atmfd.dll
2009-11-13 15:29 . 2009-06-15 14:53 156672 ----a-w- c:\windows\system32\t2embed.dll
2009-11-13 15:29 . 2009-06-15 14:52 23552 ----a-w- c:\windows\system32\lpk.dll
2009-11-13 15:29 . 2009-06-15 14:52 72704 ----a-w- c:\windows\system32\fontsub.dll
2009-11-13 15:29 . 2009-06-15 14:51 10240 ----a-w- c:\windows\system32\dciman32.dll
2009-11-13 15:29 . 2009-04-11 06:28 34304 ----a-w- c:\windows\system32\atmlib.dll
2009-11-13 15:29 . 2009-06-15 14:52 1259008 ----a-w- c:\windows\system32\lsasrv.dll
2009-11-13 15:29 . 2009-09-10 16:48 218624 ----a-w- c:\windows\system32\msv1_0.dll
2009-11-13 15:29 . 2009-06-15 14:54 175104 ----a-w- c:\windows\system32\wdigest.dll
2009-11-13 15:29 . 2009-06-15 23:15 439864 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-11-13 15:29 . 2009-06-15 14:53 72704 ----a-w- c:\windows\system32\secur32.dll
2009-11-13 15:29 . 2009-06-15 12:48 9728 ----a-w- c:\windows\system32\lsass.exe
2009-11-13 15:24 . 2009-06-10 11:41 2868224 ----a-w- c:\windows\system32\mf.dll
2009-11-13 15:24 . 2009-04-11 06:28 98816 ----a-w- c:\windows\system32\mfps.dll
2009-11-13 15:24 . 2009-04-11 06:27 53248 ----a-w- c:\windows\system32\rrinstaller.exe
2009-11-13 15:24 . 2009-04-11 06:27 24576 ----a-w- c:\windows\system32\mfpmp.exe
2009-11-13 15:24 . 2009-04-11 04:54 2048 ----a-w- c:\windows\system32\mferror.dll
2009-11-13 15:23 . 2009-07-17 13:54 71680 ----a-w- c:\windows\system32\atl.dll
2009-11-13 15:23 . 2009-08-04 12:34 3600456 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-11-13 15:23 . 2009-08-04 12:34 3548216 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-11-13 15:23 . 2009-06-10 11:42 160256 ----a-w- c:\windows\system32\wkssvc.dll
2009-11-13 15:22 . 2009-06-04 12:07 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-11-13 15:22 . 2009-04-11 06:28 136192 ----a-w- c:\windows\system32\aaclient.dll
2009-11-13 15:22 . 2009-04-11 06:28 53248 ----a-w- c:\windows\system32\tsgqec.dll
2009-11-13 15:18 . 2009-06-10 11:38 91136 ----a-w- c:\windows\system32\avifil32.dll
2009-11-13 15:18 . 2009-04-23 12:14 623616 ----a-w- c:\windows\system32\localspl.dll
2009-11-13 15:16 . 2009-08-14 13:27 2036736 ----a-w- c:\windows\system32\win32k.sys
2009-11-13 14:48 . 2009-11-13 14:48 -------- d-----w- c:\programdata\ICQ
2009-11-13 14:45 . 2009-11-13 14:50 12288 d-----w- c:\program files\ICQ6.5
2009-11-13 14:42 . 2009-07-15 12:39 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2009-11-13 14:42 . 2009-04-11 06:28 1696768 ----a-w- c:\windows\system32\gameux.dll
2009-11-13 14:42 . 2009-08-29 00:14 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2009-11-13 14:42 . 2009-08-29 00:27 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-11-13 14:38 . 2009-09-04 11:41 60928 ----a-w- c:\windows\system32\msasn1.dll
2009-11-13 14:38 . 2009-04-23 12:15 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2009-11-13 14:38 . 2009-09-14 09:29 144896 ----a-w- c:\windows\system32\drivers\srv2.sys
2009-11-13 14:38 . 2009-08-10 12:35 355328 ----a-w- c:\windows\system32\WSDApi.dll
2009-11-13 14:32 . 2009-05-08 12:53 604672 ----a-w- c:\windows\system32\WMSPDMOD.DLL
2009-11-13 14:31 . 2009-09-10 14:58 310784 ----a-w- c:\windows\system32\unregmp2.exe
2009-11-13 14:31 . 2009-07-15 12:39 7680 ----a-w- c:\windows\system32\spwmp.dll
2009-11-13 14:31 . 2009-07-15 12:39 4096 ----a-w- c:\windows\system32\dxmasf.dll
2009-11-13 14:31 . 2009-09-10 14:59 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2009-11-13 14:21 . 2009-11-24 23:49 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-11-13 14:21 . 2009-11-24 23:48 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-11-13 14:21 . 2009-11-24 23:47 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-11-13 14:21 . 2009-09-15 10:55 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-11-13 14:21 . 2009-09-15 10:55 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-11-13 14:20 . 2009-11-24 23:54 1280480 ----a-w- c:\windows\system32\aswBoot.exe
2009-11-13 14:20 . 2009-09-15 10:55 53328 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2009-11-13 14:20 . 2003-03-18 21:20 1060864 ----a-w- c:\windows\system32\MFC71.dll
2009-11-13 14:20 . 2003-03-18 20:14 499712 ----a-w- c:\windows\system32\MSVCP71.dll
2009-11-13 14:20 . 2003-02-21 04:42 348160 ----a-w- c:\windows\system32\MSVCR71.dll
2009-11-13 14:20 . 2009-11-13 14:20 -------- d-----w- c:\program files\Alwil Software
2009-11-13 13:42 . 2009-08-07 02:24 44768 ----a-w- c:\windows\system32\wups2.dll
2009-11-13 13:42 . 2009-08-07 02:24 53472 ----a-w- c:\windows\system32\wuauclt.exe
2009-11-13 13:42 . 2009-08-07 02:23 1929952 ----a-w- c:\windows\system32\wuaueng.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-06 19:55 . 2008-01-21 06:46 645540 ----a-w- c:\windows\system32\perfh005.dat
2009-12-06 19:55 . 2008-01-21 06:46 132514 ----a-w- c:\windows\system32\perfc005.dat
2009-12-05 20:37 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Sidebar
2009-12-05 20:37 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-12-05 20:37 . 2006-11-02 11:18 4096 d-----w- c:\program files\Windows Mail
2009-12-05 20:37 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Photo Gallery
2009-12-05 20:37 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Journal
2009-12-05 20:37 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Collaboration
2009-12-05 20:37 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Defender
2009-12-05 20:36 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-11-19 14:24 . 2009-11-19 14:24 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2009-11-15 19:39 . 2009-05-16 15:47 12288 d-----w- c:\programdata\Microsoft Help
2009-11-15 19:36 . 2009-05-16 15:49 4096 d-----w- c:\program files\Microsoft Works
2009-11-15 19:31 . 2009-05-16 15:50 -------- d-----w- c:\program files\Microsoft SQL Server
2009-11-13 14:48 . 2009-05-16 15:38 4096 d--h--w- c:\program files\InstallShield Installation Information
2009-11-13 14:02 . 2009-05-16 16:00 4096 d-----w- c:\program files\Google
2009-11-06 22:11 . 2009-05-16 16:27 4096 d-----w- c:\program files\Acer
2009-11-06 22:03 . 2009-11-06 22:03 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_SynTP_01007.Wdf
2009-11-06 21:49 . 2009-05-16 15:35 -------- d-----w- c:\program files\Intel
2009-11-06 21:45 . 2009-11-06 21:45 -------- d-sh--we c:\programdata\Plocha
2009-11-06 21:45 . 2009-11-06 21:45 -------- d-sh--we c:\programdata\Oblíbené položky
2009-11-06 21:45 . 2009-11-06 21:45 -------- d-sh--we c:\programdata\Šablony
2009-11-06 21:45 . 2009-11-06 21:45 -------- d-sh--we c:\programdata\Nabídka Start
2009-11-06 21:45 . 2009-11-06 21:45 -------- d-sh--we c:\programdata\Dokumenty
2009-11-06 21:45 . 2009-11-06 21:45 -------- d-sh--we c:\programdata\Data aplikací
2009-09-30 05:53 . 2009-09-30 05:53 1184768 ----a-w- c:\windows\system32\drivers\athr.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ProductReg"="c:\program files\Acer\WR_PopUp\ProductReg.exe" [2008-11-17 135168]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-11-06 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-03-25 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-03-25 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-03-25 150552]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe" [2008-11-05 474168]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-03-05 1434920]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2009-04-03 698912]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Acer VCM.lnk - c:\program files\Acer\Acer VCM\AcerVCM.exe [2009-5-16 565248]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
backup=c:\windows\pss\Bluetooth.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
c:\program files\ICQ6.5\ICQ.exe silent [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-06-12 00:38 34672 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
2009-05-16 16:00 30192 ----a-w- c:\program files\Google\Google Desktop Search\GoogleDesktop.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif]
2009-02-11 15:38 186904 ----a-w- c:\program files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
2009-03-05 07:43 805384 ----a-w- c:\program files\Launch Manager\LManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
2009-12-03 15:14 429392 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PLFSetI]
2008-07-29 18:29 200704 ----a-w- c:\windows\PLFSetI.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-11-06 21:49 68856 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
2008-01-21 02:23 1008184 ----a-w- c:\program files\Windows Defender\MSASCui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
2008-01-21 02:25 202240 ----a-w- c:\program files\Windows Media Player\wmpnscfg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):45,c3,f7,83,eb,75,ca,01

R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [13.11.2009 15:21 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [13.11.2009 15:21 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [13.11.2009 15:20 53328]
R2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [6.11.2009 23:06 723488]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [23.9.2008 13:11 144632]
R2 regi;regi;c:\windows\System32\drivers\regi.sys [17.4.2007 20:09 11032]
R2 RS_Service;Raw Socket Service;c:\program files\Acer\Acer VCM\RS_Service.exe [16.5.2009 17:27 237568]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\System32\drivers\L1C60x86.sys [4.9.2009 5:34 53248]
S3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [16.5.2009 17:00 30192]
S3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\System32\drivers\NETw5v32.sys [17.5.2009 0:06 4232704]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [23.9.2008 13:11 50424]
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACA ... ensa_5635z
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-06 22:28
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(2020)
c:\program files\WIDCOMM\Bluetooth Software\btncopy.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\windows\system32\WLANExt.exe
c:\program files\Alwil Software\Avast4\ashWebSv.exe
c:\program files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
c:\program files\WIDCOMM\Bluetooth Software\btwdins.exe
c:\program files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
c:\program files\Common Files\Protexis\License Service\PsiService_2.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\windows\system32\WUDFHost.exe
c:\program files\Alwil Software\Avast4\ashMaiSv.exe
c:\program files\Alwil Software\Avast4\ashDisp.exe
c:\windows\system32\igfxsrvc.exe
c:\windows\ehome\ehmsas.exe
c:\windows\system32\igfxext.exe
c:\windows\system32\wbem\unsecapp.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
.
**************************************************************************
.
Celkový čas: 2009-12-06 22:34 - počítač byl restartován
ComboFix-quarantined-files.txt 2009-12-06 21:34
ComboFix2.txt 2009-12-06 20:50
ComboFix3.txt 2009-12-06 20:13

Před spuštěním: Volných bajtů: 194 547 331 072
Po spuštění: Volných bajtů: 194 130 477 056

- - End Of File - - 49A29D6D50BDFE727A2F1967F51B4B24

[shearer79]

mám už log mého stolního pc,tak pak ho sem vložim,at se to nemotá.

[Damned]

Odinstaluj ComboFix ( nutné ) .
ComboFix se odinstaluje takto:
Start-Spustit a zadej Combofix[mezera]/uninstall

Pokud nepůjde a ComboFix je na Ploše, tak Start-->Spustit a do řádku zkopíruj:

Kód: Vybrat vše

"%userprofile%\Plocha\combofix" /uninstall

(Podle CF community bylo změněno /u na uninstall, pokud je na Ploše, tak daný řetězec)

Pokud ti nepůjde ani to tak najdi a smaž:
C:\327882R2FWJFW
C:\ComboFix
C:\Qoobox
C:\Combofix.txt
a Combofix.exe
Pak si stáhni OTCleanIt.
- Připoj se k internetu a dvojklikem spusť program
- Klikni na tlačítko CleanUp
- Po dokončení povol restart PC
- Po restartu tento nástroj smaž - není určen pro běžné používání


Stáhni si ToolsCleaner2 (by de A.Rothstein & Dj Quiou) na Plochu a spusť ho.

Klikni na Pt. Restauration (obnova) a poté na OK.
Klikni na Corbeille (koš) a poté na OK.
Klikni na Fichiers temp (temp složky) a poté na OK.
Klikni na Recherche (hledání) a nech Cleaner pracovat. Může se během čištění zastavit , ale nech ho pokračovat.
Když program skončí , klikni na Suppression (odstranění) a odstraň nalezené.
Zavři a smaž program.

Pokud založíš nový topic se stolním PC, tak tenhle označ za vyřešený (zelená fajfka).

Jinak můžem pokračovat logem z HJT ze stolního PC.

[shearer79]

notebook nemám připojenej k netu,tak co s tím prvním programem?combo je odinstalovaný.