Prosím o kontrolu logu Vyřešeno

[M4RTY]

Čau, prosím o kontrolu logu - http://pc-help.cz/viewtopic.php?f=47&t=63872
A taky bych chtěl poradit. Za 7 dní mi končí trial verze ESETU, co by si mi doporučil? Koupit NOD? Nebo free Avast;Avira
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:14:49, on 13.2.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8080.16413)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Windows\PixArt\Pac7302\Monitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\DivX\DivX Plus Web Player\DDMService.exe
C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Martin\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [PAC7302_Monitor] C:\Windows\PixArt\PAC7302\Monitor.exe
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.4\ICQ.exe" silent loginmode=4
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{26A0AE98-9276-4FBB-AA80-3214767AE065}: NameServer = 10.10.10.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{26A0AE98-9276-4FBB-AA80-3214767AE065}: NameServer = 10.10.10.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{26A0AE98-9276-4FBB-AA80-3214767AE065}: NameServer = 10.10.10.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\System32\guard32.dll C:\Windows\System32\guard32.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 5323 bytes


Mbam - Bez nálezu

[Reklama]

[memphisto]

Používám AVAST a MSE a nemůžu si na nic stěžovat


Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.


Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

[M4RTY]

Mbam je výše - bez nálezu

[memphisto]

Přehlídl jsem se

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

[M4RTY]

ComboFix 11-02-12.02 - Martin 13.02.2011 20:36:52.7.3 - x86
Microsoft Windows 7 Professional 6.1.7600.0.1250.420.1029.18.2047.581 [GMT 1:00]
Spuštěný z: c:\users\Martin\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: COMODO Firewall *Disabled* {5F676F4C-DD6D-A47C-12D6-C449366C71EE}
SP: COMODO Defense+ *Disabled/Updated* {DC3D0F8D-B138-AAAA-0339-560EB3387C28}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((( Soubory vytvořené od 2011-01-13 do 2011-02-13 )))))))))))))))))))))))))))))))
.

2011-02-13 19:44 . 2011-02-13 19:44 -------- d-----w- c:\users\Ostatní\AppData\Local\temp
2011-02-13 19:44 . 2011-02-13 19:44 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-02-13 12:13 . 2011-02-13 12:13 94208 ----a-w- c:\program files\Internet Explorer\cs\iediag.resources.dll
2011-02-13 12:11 . 2011-02-13 12:11 -------- d-----w- c:\program files\Feedback Tool
2011-02-13 10:21 . 2011-02-13 10:21 -------- d-----w- c:\users\Ostatní\AppData\Roaming\Opera
2011-02-13 10:21 . 2011-02-13 10:21 -------- d-----w- c:\users\Ostatní\AppData\Local\Opera
2011-02-13 10:04 . 2011-02-13 10:04 -------- d-----w- c:\users\Ostatní\AppData\Roaming\Zoner
2011-02-12 21:03 . 2011-02-12 21:03 -------- d-----w- c:\users\Martin\AppData\Local\ElevatedDiagnostics
2011-02-12 21:03 . 2011-02-12 21:03 -------- d-----w- c:\windows\PixArt
2011-02-12 20:53 . 2011-02-12 20:53 -------- d-----w- c:\users\Ostatní\AppData\Roaming\Reallusion
2011-02-12 20:30 . 2011-02-12 20:31 -------- d-----w- c:\users\Ostatní\AppData\Roaming\ICQ
2011-02-12 20:29 . 2011-02-13 10:54 -------- d-----w- c:\users\Ostatní\AppData\Roaming\skypePM
2011-02-12 20:27 . 2011-02-13 10:59 -------- d-----w- c:\users\Ostatní\AppData\Roaming\Skype
2011-02-12 19:21 . 2011-02-12 19:21 -------- d-----w- c:\users\Martin\AppData\Roaming\Reallusion
2011-02-12 19:18 . 2011-02-12 19:18 -------- d-----w- c:\program files\Common Files\Reallusion
2011-02-12 19:18 . 2008-10-18 04:21 5661488 ----a-w- c:\windows\system32\CSVirtualCamera.ocx
2011-02-12 19:18 . 2008-09-19 23:41 37560 ----a-w- c:\windows\system32\drivers\CamSuiteVAC.sys
2011-02-12 19:18 . 2011-02-12 19:18 -------- d-----w- c:\program files\Reallusion
2011-02-12 19:17 . 2011-02-12 19:17 -------- d-----w- c:\users\Martin\AppData\Roaming\InstallShield
2011-02-12 19:15 . 2009-04-28 09:08 461824 ----a-w- c:\windows\system32\drivers\PAC7302.SYS
2011-02-12 19:15 . 2007-11-02 10:07 6656 ----a-w- c:\windows\system32\CoInst_071029.dll
2011-02-12 19:15 . 2008-03-24 10:09 141824 ----a-w- c:\windows\system32\SP7302.AX
2011-02-11 11:48 . 2004-10-22 01:16 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\DotNetInstaller.exe
2011-02-11 11:40 . 2004-10-22 01:17 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\ctor.dll
2011-02-11 11:40 . 2004-10-22 01:17 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iscript.dll
2011-02-11 11:40 . 2004-10-22 01:16 180224 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iuser.dll
2011-02-11 11:40 . 2004-10-22 01:18 749568 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iKernel.dll
2011-02-11 11:40 . 2011-02-11 11:40 323716 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\setup.dll
2011-02-11 11:40 . 2011-02-11 11:40 192644 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iGdi.dll
2011-02-11 06:06 . 2011-01-13 09:41 5890896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3CC6CC11-1A4F-43BC-AF27-D2A82587FBFF}\mpengine.dll
2011-02-08 06:12 . 2011-02-08 06:12 -------- d-----w- c:\windows\PCHEALTH
2011-02-08 06:12 . 2011-02-08 06:12 -------- d-----w- c:\program files\Microsoft.NET
2011-02-08 06:11 . 2011-02-08 06:11 -------- d-----r- C:\MSOCache
2011-02-07 20:41 . 2011-02-07 20:41 -------- d-----w- c:\users\Martin\AppData\Local\Diagnostics
2011-02-07 16:20 . 2011-02-07 16:20 -------- d-----w- c:\program files\CrystalDiskInfo
2011-02-07 16:05 . 2011-02-07 16:05 -------- d-----w- c:\program files\Recuva
2011-02-06 19:10 . 2011-02-06 19:10 -------- d-----w- c:\users\Martin\AppData\Local\PackageAware
2011-02-06 16:14 . 2011-02-06 16:25 -------- d-----w- c:\windows\W7SBC
2011-02-06 16:14 . 2009-10-31 05:45 2614272 ----a-w- c:\windows\explorer_edit_w7sbc.exe
2011-02-06 16:14 . 2009-10-31 05:45 2614272 ----a-w- c:\windows\explorer_backup_w7sbc.exe
2011-02-06 16:14 . 2009-10-31 05:45 2614272 ----a-w- c:\windows\explorer.exe
2011-02-06 16:13 . 2011-02-06 16:14 -------- d-----w- c:\windows\záloha explorer
2011-02-06 14:36 . 2011-02-06 14:37 -------- d-----w- c:\programdata\TmForever
2011-02-06 09:57 . 2011-02-06 10:01 -------- d-----w- c:\users\Martin\AppData\Roaming\GetRightToGo
2011-02-05 13:49 . 2011-02-07 06:02 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment
2011-02-02 17:18 . 2011-02-02 17:19 -------- d-----w- c:\programdata\Win7Zilla
2011-01-28 17:56 . 2011-02-06 12:05 -------- d-----w- c:\program files\ICQ7.4
2011-01-28 17:33 . 2011-02-06 17:09 -------- d-----w- c:\programdata\Blizzard Entertainment
2011-01-28 17:32 . 2011-01-28 17:32 -------- d-----w- c:\users\Martin\AppData\Local\Drahyho_Server
2011-01-27 18:08 . 2011-01-27 18:08 -------- d-----w- c:\users\Ostatní\AppData\Roaming\Malwarebytes
2011-01-27 15:46 . 2011-01-27 15:46 -------- d-----w- c:\program files\Free PDF to Word Converter
2011-01-27 15:34 . 2011-02-13 19:44 -------- d-----w- c:\users\Martin\AppData\Local\temp
2011-01-27 13:30 . 2011-01-27 13:30 -------- d-----w- c:\users\Martin\AppData\Local\Opera
2011-01-27 13:29 . 2011-01-27 13:30 -------- d-----w- c:\program files\Opera
2011-01-25 15:14 . 2011-01-25 15:14 -------- d-sh--w- c:\programdata\SecuROM
2011-01-25 15:08 . 2011-01-25 15:10 -------- d-----w- c:\program files\MouseExtender
2011-01-24 13:54 . 2011-01-25 15:14 -------- d-----w- c:\users\Martin\AppData\Local\Rockstar Games
2011-01-24 13:50 . 2011-01-24 13:50 -------- d--h--r- c:\users\Martin\AppData\Roaming\SecuROM
2011-01-24 13:49 . 2011-01-24 13:49 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-01-24 13:24 . 2011-01-25 15:14 -------- d-----w- c:\program files\Rockstar Games
2011-01-21 12:08 . 2011-01-21 12:08 -------- d-----w- c:\program files\ESET
2011-01-19 14:28 . 2011-01-19 14:28 -------- d-----w- c:\users\Martin\AppData\Roaming\Publish Providers
2011-01-19 14:28 . 2011-01-19 14:30 -------- d-----w- c:\users\Martin\AppData\Roaming\Sony
2011-01-19 14:28 . 2011-01-19 14:28 -------- d-----w- c:\users\Martin\AppData\Local\Sony
2011-01-19 14:14 . 2011-01-19 14:14 -------- d-----w- c:\program files\Vstplugins
2011-01-19 14:13 . 2011-01-19 14:13 -------- d-----w- c:\programdata\Sony
2011-01-19 14:13 . 2011-01-19 14:13 -------- d-----w- c:\program files\Sony
2011-01-19 14:11 . 2011-01-19 14:11 -------- d-----w- c:\program files\Sony Setup
2011-01-19 13:41 . 2011-01-19 13:41 -------- d-----w- c:\users\Martin\AppData\Local\Microsoft Help
2011-01-19 13:41 . 2011-02-07 20:01 -------- d-----w- c:\programdata\Microsoft Help
2011-01-18 15:12 . 2011-02-13 16:11 -------- d-----w- c:\users\Martin\AppData\Roaming\AIMP3
2011-01-18 15:12 . 2011-01-18 15:12 -------- d-----w- c:\program files\AIMP3
2011-01-17 13:51 . 2011-01-18 17:41 -------- d-----w- c:\users\Public\CyberLink
2011-01-17 13:51 . 2011-01-17 13:51 -------- d-----w- c:\users\Martin\AppData\Roaming\CyberLink
2011-01-17 13:51 . 2011-01-17 13:57 -------- d-----w- c:\programdata\CyberLink
2011-01-17 13:51 . 2011-01-17 13:51 -------- d-----w- c:\programdata\SmartSound Software Inc
2011-01-17 13:51 . 2011-01-17 13:51 -------- d-----w- c:\programdata\eSellerate
2011-01-17 13:51 . 2011-01-17 13:51 -------- d-----w- c:\program files\SmartSound Software
2011-01-17 13:49 . 2011-01-17 13:50 -------- d-----w- c:\program files\CyberLink
2011-01-16 12:57 . 2011-01-16 12:57 -------- d-----w- c:\users\Martin\AppData\Roaming\Funambol
2011-01-16 12:42 . 2011-01-16 12:42 -------- d-----w- c:\users\Martin\AppData\Roaming\Maxthon3
2011-01-16 12:42 . 2011-01-16 12:42 -------- d-----w- c:\program files\Maxthon3

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-13 12:12 . 2011-02-13 12:12 203776 ----a-w- c:\windows\system32\webcheck.dll
2011-01-18 14:33 . 2010-12-29 00:41 80064 ----a-w- c:\windows\system32\drivers\inspect.sys
2011-01-18 14:33 . 2010-12-29 00:41 35768 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2011-01-18 14:33 . 2010-12-29 00:41 236600 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2011-01-18 14:33 . 2010-12-29 00:41 17256 ----a-w- c:\windows\system32\drivers\cmderd.sys
2011-01-11 17:02 . 2011-01-11 17:02 445016 ----a-w- c:\windows\system32\wrap_oal.dll
2011-01-11 17:02 . 2011-01-11 17:02 109144 ----a-w- c:\windows\system32\OpenAL32.dll
2011-01-09 16:58 . 2011-01-09 16:44 137464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-01-09 16:58 . 2011-01-09 16:43 214520 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-01-09 16:58 . 2011-01-09 16:44 214520 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-01-09 16:43 . 2011-01-09 16:43 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-01-03 17:55 . 2011-01-03 17:55 472808 ----a-w- c:\windows\system32\deployJava1.dll
2010-12-29 00:42 . 2010-12-29 00:42 285480 ----a-w- c:\windows\system32\guard32.dll
2010-12-23 10:02 . 2010-12-23 10:02 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-12-22 07:48 . 2010-12-22 07:48 176488 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10136.bin
2010-12-20 17:09 . 2010-12-26 18:20 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 17:08 . 2010-12-26 18:20 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\UC.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\RAR.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\PKZIP.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\PKUNZIP.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\NOCLOSE.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\LHA.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\ARJ.PIF
2010-12-02 08:25 . 2010-12-02 08:25 86016 ----a-w- c:\windows\system32\frapsvid.dll
2010-11-30 16:23 . 2010-12-22 15:22 553984 ----a-w- c:\windows\system32\RCoRes.dat
2010-11-30 16:06 . 2010-12-22 15:22 3317800 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2010-11-29 17:48 . 2010-12-22 15:22 1723536 ----a-w- c:\windows\system32\WavesGUILib.dll
2010-11-29 17:48 . 2010-12-22 15:22 1439064 ----a-w- c:\windows\system32\MaxxAudioRealtek.dll
2010-11-26 04:19 . 2010-11-26 04:19 6650368 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2010-11-26 03:02 . 2010-11-26 03:02 16702976 ----a-w- c:\windows\system32\atioglxx.dll
2010-11-26 02:58 . 2010-11-26 02:58 143360 ----a-w- c:\windows\system32\atiapfxx.exe
2010-11-26 02:58 . 2010-12-20 19:22 550400 ----a-w- c:\windows\system32\aticfx32.dll
2010-11-26 02:54 . 2010-11-26 02:54 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2010-11-26 02:54 . 2010-11-26 02:54 393216 ----a-w- c:\windows\system32\atieclxx.exe
2010-11-26 02:54 . 2010-11-26 02:54 176128 ----a-w- c:\windows\system32\atiesrxx.exe
2010-11-26 02:52 . 2010-11-26 02:52 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2010-11-26 02:52 . 2010-11-26 02:52 356352 ----a-w- c:\windows\system32\atipdlxx.dll
2010-11-26 02:52 . 2010-11-26 02:52 278528 ----a-w- c:\windows\system32\Oemdspif.dll
2010-11-26 02:52 . 2010-11-26 02:52 15872 ----a-w- c:\windows\system32\atimuixx.dll
2010-11-26 02:52 . 2010-11-26 02:52 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2010-11-26 02:49 . 2010-12-20 19:22 4066816 ----a-w- c:\windows\system32\atidxx32.dll
2010-11-26 02:30 . 2010-12-20 19:22 4122624 ----a-w- c:\windows\system32\atiumdag.dll
2010-11-26 02:30 . 2010-11-26 02:30 46080 ----a-w- c:\windows\system32\aticalrt.dll
2010-11-26 02:30 . 2010-11-26 02:30 44032 ----a-w- c:\windows\system32\aticalcl.dll
2010-11-26 02:28 . 2010-11-26 02:28 5441024 ----a-w- c:\windows\system32\aticaldd.dll
2010-11-26 02:24 . 2010-12-20 19:22 52736 ----a-w- c:\windows\system32\coinst.dll
2010-11-26 02:22 . 2010-12-20 19:22 3460096 ----a-w- c:\windows\system32\atiumdva.dll
2010-11-26 02:17 . 2010-11-26 02:17 249856 ----a-w- c:\windows\system32\atiadlxx.dll
2010-11-26 02:17 . 2010-11-26 02:17 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2010-11-26 02:16 . 2010-11-26 02:16 27136 ----a-w- c:\windows\system32\atigktxx.dll
2010-11-26 02:16 . 2010-11-26 02:16 231936 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2010-11-26 02:15 . 2010-12-20 19:22 30720 ----a-w- c:\windows\system32\atiuxpag.dll
2010-11-26 02:15 . 2010-12-20 19:22 28672 ----a-w- c:\windows\system32\atiu9pag.dll
2010-11-26 02:15 . 2010-11-26 02:15 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2010-11-26 02:09 . 2010-11-26 02:09 52736 ----a-w- c:\windows\system32\atimpc32.dll
2010-11-26 02:09 . 2010-11-26 02:09 52736 ----a-w- c:\windows\system32\amdpcom32.dll
2010-11-24 13:24 . 2010-12-22 15:22 3790440 ----a-w- c:\windows\system32\RtkAPO.dll
2010-11-24 13:24 . 2010-12-22 15:22 1976936 ----a-w- c:\windows\system32\RtkPgExt.dll
2010-11-22 10:39 . 2010-12-22 15:22 469608 ----a-w- c:\windows\system32\RtkApoApi.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ICQ"="c:\program files\ICQ7.4\ICQ.exe" [2011-02-06 119608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-11-30 9914984]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-11-25 336384]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-02-07 2548552]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-11-18 2219184]
"PAC7302_Monitor"="c:\windows\PixArt\PAC7302\Monitor.exe" [2007-12-10 323584]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\guard32.dll c:\windows\System32\guard32.dll

[HKLM\~\startupfolder\C:^Users^Martin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Win7ZillaBootEnd.exe]
path=c:\users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Win7ZillaBootEnd.exe
backup=c:\windows\pss\Win7ZillaBootEnd.exe.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2010-04-01 09:16 357696 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivX Download Manager]
2010-12-08 21:15 63360 ----a-w- c:\program files\DivX\DivX Plus Web Player\DDMService.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2010-12-09 19:28 1226608 ----a-w- c:\program files\DivX\DivX Update\DivXUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON SX210 Series]
2008-11-05 14:00 199680 ----a-w- c:\windows\System32\spool\drivers\w32x86\3\E_FATIFDE.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware (reboot)]
2010-12-20 17:08 963976 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-05-14 10:44 248552 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Google Update"="c:\users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe" /c

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

R0 Win7Zilla;Win7Zilla;c:\windows\system32\drivers\Win7Zilla.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-12-21 1343400]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-12-23 691696]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2011-01-18 236600]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2011-01-18 35768]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-11-26 176128]
S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 140224]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-09-03 137144]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-11-18 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 96920]
S3 amdiox86;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox86.sys [2010-02-18 37944]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2010-11-26 6650368]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-11-26 231936]
S3 CamSuiteVAC;CamSuite Virtual Audio;c:\windows\system32\DRIVERS\CamSuiteVAC.sys [2008-09-19 37560]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]

.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - c:\program files\ICQ7.4\ICQ.exe
TCP: {26A0AE98-9276-4FBB-AA80-3214767AE065} = 10.10.10.1
FF - ProfilePath - c:\users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\730ycoe2.default\
FF - prefs.js: browser.startup.homepage - www.google.cz
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: DivX Plus Web Player HTML5 &lt;video&gt;: {23fcfd51-4958-4f00-80a3-ae97e717ed8b} - c:\program files\DivX\DivX Plus Web Player\firefox\html5video
FF - Ext: DivX HiQ: {6904342A-8307-11DF-A508-4AE2DFD72085} - c:\program files\DivX\DivX Plus Web Player\firefox\wpa
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-2389715676-1705300900-3093446007-1000\Software\SecuROM\License information*]
"datasecu"=hex:b3,d6,b8,10,4d,b0,09,ee,3f,00,0e,cf,5b,bb,f7,20,95,4f,8b,03,dc,
d7,9e,f4,f3,67,d9,9f,d3,fb,35,a0,e9,17,72,c8,50,a1,ae,a1,f6,aa,f9,c4,24,e4,\
"rkeysecu"=hex:66,e2,77,8a,0f,b4,d6,2c,27,b5,3e,f6,03,af,e0,a5
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'lsass.exe'(600)
c:\windows\system32\guard32.dll

- - - - - - - > 'Explorer.exe'(4196)
c:\windows\system32\guard32.dll
c:\windows\system32\BatMeter.dll
c:\windows\system32\WINHTTP.dll
.
Celkový čas: 2011-02-13 20:46:24
ComboFix-quarantined-files.txt 2011-02-13 19:46
ComboFix2.txt 2011-01-27 15:34

Před spuštěním: Volných bajtů: 46 572 232 704
Po spuštění: Volných bajtů: 46 581 960 704

- - End Of File - - 7D5445E0F3CA47EE8E90F53EEA9EBD2D

[memphisto]

Log je v pořádku. Viry to nebude.

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

vyčisti systém CCleanerem

a použij i T-Cleaner
smaže vše po Combu,MWAVu atd.-stáhneš>spustíš

pozn. před stažením T-Cleaneru a po dobu čištění deaktivuj AVG , Avast,Avira či Microsoft Security Essentials následně T-Cleaner smaž a zapni si AVG , Avast, Avira či Microsoft Security Essentials


+ startuplite
+HJT

[M4RTY]

T-Cleaner nejde stáhnout ani když vypnu AV.


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:19:53, on 14.2.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8080.16413)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\taskeng.exe
C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Users\Martin\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{26A0AE98-9276-4FBB-AA80-3214767AE065}: NameServer = 10.10.10.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{26A0AE98-9276-4FBB-AA80-3214767AE065}: NameServer = 10.10.10.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{26A0AE98-9276-4FBB-AA80-3214767AE065}: NameServer = 10.10.10.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\System32\guard32.dll C:\Windows\System32\guard32.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 4827 bytes

[memphisto]

Log v pořádku.

Stáhni si ToolsCleaner2( by de A.Rothstein & Dj Quiou )

na plochu a spusť ho.
Klikni na Pt. Restauration (obnova) a poté na OK.
Klikni na Corbeille (koš) a poté na OK.
Klikni na Fichiers temp (temp složky) a poté na OK.
Klikni na Recherche (hledání) a nech Cleaner pracovat. Může se během čištění zastavit , ale nech ho pokračovat.
Když program skončí , klikni na Suppression (odstranění)a odstraň nalezené.
Zavři program.
Program maže i všechny nástroje na odvirování a vytváření logů , které se zde používají (HJT, Combofix, OTM, OTL, OTS atd.)

[M4RTY]

Hotovo. Je to všechno? :)

[memphisto]

Z mé strany ano, pokud nemáš ty něco?

[M4RTY]

No tak se ještě na něco zeptám
Kdybych nastavil uložiště na to největší, tak kam se to ukládá? Dá se to po nějakém čase vyčistit?

[memphisto]

To vůbec nevím, kam se to ukládá. Jestli nějaká vyrovnávací paměť