Nutně potřebuji kontrolu Vyřešeno

[jaro3]

Zkopíruj soubor a vlož ho sem zararovaný.
stejně tak toto:
c:\windows\system32\sfcfiles.dll

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

KillAll::
RegLock::
[HKEY_LOCAL_MACHINE\software\ESET\ESET Security\CurrentVersion\Info]

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT


Upozornění : Může se stát, že po aplikaci skriptu a restartu počítače Windows nenaběhnou, pak znovu restartuj počítač, mačkej F8 a pak zvol poslední známou funkční konfiguraci.

A nainstaluj si antivir:
Avast5:
http://avast.anti-virus.cz/avast-antivi ... zdarma.htm

Avira:
http://free-av.de/de/download/1/avira_a ... virus.html

AVG:
http://free.avg.com/cz-cs/uvod
Doporučuji Avast 5:
http://www.avast.com/cs-cz/index

[Reklama]

[Airm]

ComboFix 11-02-17.01 - Hlavni 18.02.2011 6:22.4.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3070.2604 [GMT 1:00]
Spuštěný z: c:\documents and settings\Hlavni\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Hlavni\Plocha\CFScript.txt
.

((((((((((((((((((((((((( Soubory vytvořené od 2011-01-18 do 2011-02-18 )))))))))))))))))))))))))))))))
.

2011-02-17 20:20 . 2011-02-17 20:20 669184 ----a-w- c:\windows\system32\pbsvc.exe
2011-02-17 20:20 . 2011-02-17 20:20 -------- d-----w- c:\windows\LastGood.Tmp
2011-02-16 17:42 . 2004-10-22 01:18 749568 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iKernel.dll
2011-02-16 17:42 . 2004-10-22 01:17 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\ctor.dll
2011-02-16 17:42 . 2004-10-22 01:17 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iscript.dll
2011-02-16 17:42 . 2004-10-22 01:16 180224 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iuser.dll
2011-02-16 17:42 . 2004-10-22 01:16 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\DotNetInstaller.exe
2011-02-16 17:42 . 2011-02-16 17:42 192644 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iGdi.dll
2011-02-16 17:42 . 2011-02-16 17:42 323716 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\setup.dll
2011-02-15 21:55 . 2011-02-18 01:00 -------- d-----w- c:\documents and settings\Hlavni\Data aplikací\Hamachi
2011-02-15 21:54 . 2011-02-15 21:55 -------- d-----w- c:\program files\Hamachi
2011-02-15 21:54 . 2011-02-15 21:54 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2011-02-15 21:44 . 2011-02-15 21:44 94208 ----a-w- c:\windows\DIIUnin.exe
2011-02-15 21:44 . 2011-02-15 21:44 2829 ----a-w- c:\windows\DIIUnin.pif
2011-02-15 21:44 . 2011-02-15 21:44 -------- d-----w- c:\documents and settings\Hlavni\Data aplikací\Malwarebytes
2011-02-15 21:44 . 2011-02-15 21:44 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2011-02-15 21:44 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-02-15 21:44 . 2011-02-15 21:44 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-02-15 21:44 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-02-15 21:19 . 2011-02-15 21:41 -------- d-----w- c:\documents and settings\Hlavni\DoctorWeb
2011-02-15 19:41 . 2011-02-15 19:41 -------- d-----w- c:\documents and settings\Hlavni\Data aplikací\id Software
2011-02-15 19:41 . 2011-02-15 19:41 -------- d-----w- c:\documents and settings\All Users\Data aplikací\id Software
2011-02-15 09:14 . 2011-02-15 09:14 -------- d-----w- C:\Utilities
2011-02-15 08:25 . 2011-02-15 08:25 -------- d-----w- c:\documents and settings\Administrator
2011-02-13 18:04 . 2009-03-30 11:00 261392 ----a-w- C:\AutoItx3.dll
2011-02-09 03:34 . 2011-02-09 03:34 -------- d-----w- c:\documents and settings\Hlavni\Local Settings\Data aplikací\The Lord of the Rings Online
2011-02-08 17:43 . 2011-02-08 18:16 -------- d-----w- c:\documents and settings\Hlavni\Local Settings\Data aplikací\Turbine
2011-02-08 17:42 . 2011-02-09 14:27 -------- d-----w- c:\documents and settings\Hlavni\Local Settings\Data aplikací\ApplicationHistory
2011-02-05 01:06 . 2011-02-05 01:06 -------- d-----w- c:\program files\Bonjour
2011-02-05 00:46 . 2011-02-05 00:46 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2011-02-02 02:11 . 2011-02-02 02:11 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Codemasters
2011-02-02 01:59 . 2011-02-02 01:59 -------- d-----w- c:\program files\OpenAL
2011-02-02 01:59 . 2011-02-03 03:06 445016 ----a-w- c:\windows\system32\wrap_oal.dll
2011-02-02 01:59 . 2011-02-03 03:06 109144 ----a-w- c:\windows\system32\OpenAL32.dll
2011-01-31 09:06 . 2011-01-31 09:11 -------- d-----w- c:\documents and settings\Hlavni\Local Settings\Data aplikací\Divinity 2
2011-01-31 09:06 . 2011-01-31 09:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Divinity 2
2011-01-30 14:47 . 2011-01-30 14:47 -------- d-----w- c:\documents and settings\Hlavni\Local Settings\Data aplikací\Temp
2011-01-30 14:45 . 2011-02-02 06:22 -------- d-----w- c:\documents and settings\Hlavni\Data aplikací\uTorrent
2011-01-29 01:54 . 2011-01-29 01:54 -------- d-----w- c:\documents and settings\Hlavni\Data aplikací\DVDVideoSoft
2011-01-28 23:53 . 2011-02-14 16:51 -------- d-----w- c:\program files\Pando Networks
2011-01-23 21:41 . 2011-01-23 21:45 -------- d-----w- c:\documents and settings\Hlavni\Data aplikací\My Macros
2011-01-23 21:35 . 2011-01-23 21:35 -------- d-----w- c:\program files\Rekenwonder Software
2011-01-23 21:25 . 2011-01-23 21:26 -------- d-----w- c:\documents and settings\Hlavni\Data aplikací\SeventhDigit
2011-01-20 01:20 . 2011-01-20 01:20 0 ----a-w- c:\windows\system\WINSSPOT0.DRV

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-17 20:20 . 2011-01-03 11:51 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-02-17 20:20 . 2011-01-03 11:51 22328 ----a-w- c:\documents and settings\Hlavni\Data aplikací\PnkBstrK.sys
2011-02-17 20:20 . 2011-01-03 11:51 22328 ----a-w- c:\documents and settings\Hlavni\Data aplikací\PnkBstrK.sys
2011-02-17 20:20 . 2011-01-03 11:50 103736 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-02-17 20:20 . 2011-01-03 11:50 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-02-15 19:33 . 2011-01-14 13:39 270240 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-02-15 19:22 . 2011-01-03 11:50 189248 ----a-w- c:\windows\system32\PnkBstrB.ex0
2011-01-21 14:42 . 2010-06-23 21:34 440832 ----a-w- c:\windows\system32\shimgvw.dll
2011-01-07 14:09 . 2010-06-23 21:32 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-12-31 14:02 . 2010-06-23 21:34 1864064 ----a-w- c:\windows\system32\win32k.sys
2010-12-29 00:37 . 2010-12-29 00:37 230752 ----a-w- c:\windows\patchw32.dll
2010-12-22 12:32 . 2010-06-23 21:32 301568 ----a-w- c:\windows\system32\kerberos.dll
2010-12-20 23:51 . 2010-06-23 21:34 919552 ----a-w- c:\windows\system32\wininet.dll
2010-12-20 23:51 . 2010-06-23 21:33 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-12-20 23:51 . 2010-06-23 21:32 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2010-12-20 17:24 . 2010-06-23 21:33 729088 ----a-w- c:\windows\system32\lsasrv.dll
2010-12-20 12:48 . 2010-06-23 21:32 385024 ----a-w- c:\windows\system32\html.iec
2010-12-09 15:15 . 2009-02-09 10:59 713216 ----a-w- c:\windows\system32\ntdll.dll
2010-12-09 15:14 . 2010-02-16 19:02 2029056 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-12-09 15:14 . 2010-06-23 21:33 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-12-09 14:28 . 2010-06-23 21:32 33280 ----a-w- c:\windows\system32\csrsrv.dll
2010-11-26 13:23 . 2010-11-26 13:23 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
.

------- Sigcheck -------

[-] 2010-06-23 . 8F41FD1CC693054347C6FB7B0E618B07 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((( SnapShot@2011-02-16_04.34.12 )))))))))))))))))))))))))))))))))))))))))
.
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\LastGood.Tmp\system32\xinput1_3.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\LastGood.Tmp\system32\d3dx9_35.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\LastGood.Tmp\system32\d3dx9_34.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\LastGood.Tmp\system32\d3dx10_35.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\LastGood.Tmp\system32\d3dx10_34.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\LastGood.Tmp\system32\D3DCompiler_35.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\LastGood.Tmp\system32\D3DCompiler_34.dll
+ 2011-02-18 05:28 . 2011-02-18 05:28 16384 c:\windows\temp\Perflib_Perfdata_334.dat
+ 2011-02-17 20:19 . 2011-02-17 21:41 10134 c:\windows\Installer\{000E79B7-E725-4F01-870A-C12942B7F8E4}\visitWebsite_000E79B7E7254F01870AC12942B7F8E4.exe
+ 2011-02-17 20:19 . 2011-02-17 21:41 10134 c:\windows\Installer\{000E79B7-E725-4F01-870A-C12942B7F8E4}\checkForUpdatesSC_000E79B7E7254F01870AC12942B7F8E4.exe
+ 2003-12-13 07:30 . 2003-12-13 07:30 70656 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\zlib1.dll
+ 2007-10-24 20:13 . 2007-10-24 20:13 13024 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\shallocator.dll
+ 2007-10-24 23:11 . 2007-10-24 23:11 17120 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\crysisdedicatedserver.exe
+ 2011-02-17 20:19 . 2011-02-17 21:41 9662 c:\windows\Installer\{000E79B7-E725-4F01-870A-C12942B7F8E4}\ARPPRODUCTICON.exe
+ 2007-09-19 15:29 . 2007-09-19 15:29 294912 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\pbsv.dll
+ 2004-01-13 19:16 . 2004-01-13 19:16 153966 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\jpeg62.dll
+ 2007-06-14 09:20 . 2007-06-14 09:20 118784 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\intellaptopgaming.dll
+ 2004-06-16 09:57 . 2004-06-16 09:57 372736 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\ijl15.dll
+ 2007-05-16 15:45 . 2007-05-16 15:45 118104 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\fxc.exe
+ 2007-10-14 14:30 . 2007-10-14 14:30 794624 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\fmodex.dll
+ 2007-10-14 14:25 . 2007-10-14 14:25 237568 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\fmod_event_net.dll
+ 2007-10-14 14:26 . 2007-10-14 14:26 208896 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\fmod_event.dll
+ 2007-10-24 20:13 . 2007-10-24 20:13 644320 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\crysoundsystem.dll
+ 2007-10-24 20:13 . 2007-10-24 20:13 660704 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\cryscriptsystem.dll
+ 2007-10-24 20:13 . 2007-10-24 20:13 885984 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\cryrendernull.dll
+ 2007-10-24 20:13 . 2007-10-24 20:13 943328 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\crynetwork.dll
+ 2007-10-24 20:13 . 2007-10-24 20:13 386272 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\crymovie.dll
+ 2007-10-24 20:13 . 2007-10-24 20:13 197856 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\cryinput.dll
+ 2007-10-24 20:13 . 2007-10-24 20:13 394464 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\cryfont.dll
+ 2007-10-24 20:13 . 2007-10-24 20:13 840928 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\cryentitysystem.dll
+ 2007-09-24 10:55 . 2007-09-24 10:55 159744 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\atimgpud.dll
+ 2010-07-18 21:38 . 2011-02-16 23:34 2176752 c:\windows\system32\FNTCACHE.DAT
+ 2011-02-17 20:19 . 2011-02-17 20:19 5521920 c:\windows\Installer\469b5a4.msi
+ 2007-10-24 20:13 . 2007-10-24 20:13 2098400 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\crysystem.dll
+ 2007-10-24 23:11 . 2007-10-24 23:11 4674784 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\crysis.exe
+ 2007-10-24 20:13 . 2007-10-24 20:13 3024096 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\cryrenderd3d9.dll
+ 2007-10-24 20:13 . 2007-10-24 20:13 3036384 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\cryrenderd3d10.dll
+ 2007-10-24 20:13 . 2007-10-24 20:13 1991904 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\cryphysics.dll
+ 2007-10-24 20:13 . 2007-10-24 20:13 2823392 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\crygame.dll
+ 2007-10-24 20:13 . 2007-10-24 20:13 1574112 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\cryanimation.dll
+ 2007-10-24 20:13 . 2007-10-24 20:13 1942752 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\cryaisystem.dll
+ 2007-10-24 20:13 . 2007-10-24 20:13 2942176 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\cryaction.dll
+ 2007-10-24 20:13 . 2007-10-24 20:13 1778912 c:\windows\Installer\$PatchCache$\Managed\7B97E000527E10F478A01C92247B8F4E\1.0.0\cry3dengine.dll
+ 2011-02-17 21:40 . 2011-02-17 21:40 38363136 c:\windows\Installer\4bbd2c6.msp
+ 2011-02-17 21:35 . 2011-02-17 21:35 378156544 c:\windows\Installer\4bbd2a7.msp
+ 2011-02-17 20:23 . 2011-02-17 20:23 145476096 c:\windows\Installer\469b5c9.msp
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DWPersistentQueuedReporting"="c:\program files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE" [2007-03-13 39264]
"RTHDCPL"="RTHDCPL.EXE" [2006-11-14 16270848]
"SkyTel"="SkyTel.EXE" [2006-05-17 2879488]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-10-16 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-10-16 13851752]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-08-25 1753192]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"KB976002-v5"="advpack.dll" [2010-06-23 128512]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
LOLRecorder.lnk - c:\program files\LOLReplay\LOLRecorder.exe [N/A]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2010-06-23 304128]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\QIP\\qip.exe"=
"c:\\Program Files\\Ventrilo\\Ventrilo.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer_Service.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Steam\\steamapps\\alifok\\counter-strike\\hl.exe"=
"h:\\Hry\\League of Legends\\air\\LolClient.exe"=
"h:\\Hry\\League of Legends\\game\\League of Legends.exe"=
"h:\\Hry\\Half-Life\\hl.exe"=
"h:\\Hry\\Crysis\\Bin32\\Crysis.exe"=
"h:\\Hry\\Crysis\\Bin32\\CrysisDedicatedServer.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"8396:TCP"= 8396:TCP:League of Legends Launcher
"8396:UDP"= 8396:UDP:League of Legends Launcher

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [26.11.2010 14:23 691696]
S1 DumpDrv;Crash Dump Driver;c:\windows\system32\drivers\dumpdrv.sys [23.6.2010 22:37 9472]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.7.2010 20:56 130384]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [23.6.2010 22:34 14848]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
.
.
------- Doplňkový sken -------
.
IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\Hlavni\Nabídka Start\Programy\IMVU\Run IMVU.lnk
FF - ProfilePath - c:\documents and settings\Hlavni\Data aplikací\Mozilla\Firefox\Profiles\yi9idbk5.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/ig?rls=ig&hl=cs&source=iglk
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Revelation: {586bd060-22d6-11de-8c30-0800200c9a66} - %profile%\extensions\{586bd060-22d6-11de-8c30-0800200c9a66}
FF - Ext: Virtus Search Opt-in: extension@virtusdesigns.com - %profile%\extensions\extension@virtusdesigns.com
FF - Ext: Aero Fox Silver: {45d2c180-ef6c-11de-8a39-0800200c9a66} - %profile%\extensions\{45d2c180-ef6c-11de-8a39-0800200c9a66}
FF - Ext: Battlefield Heroes Updater: battlefieldheroespatcher@ea.com - %profile%\extensions\battlefieldheroespatcher@ea.com
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-18 06:28
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-1547161642-1425521274-842925246-1004\Software\SecuROM\License information*]
"datasecu"=hex:c9,3a,58,b3,cb,49,4a,b1,d5,48,34,5f,e3,60,e5,5b,35,95,33,bb,10,
98,9e,02,d1,9b,36,89,de,2c,f1,c3,f0,5e,ac,60,f9,b9,48,95,a5,43,a5,a8,dc,ee,\
"rkeysecu"=hex:65,72,a0,07,2f,10,12,10,37,cc,9d,6e,5d,db,36,95
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(3644)
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RUNDLL32.EXE
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\SearchIndexer.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Celkový čas: 2011-02-18 06:33:44 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-02-18 05:33
ComboFix2.txt 2011-02-16 23:40
ComboFix3.txt 2011-02-16 17:21
ComboFix4.txt 2011-02-16 04:39

Před spuštěním: 6 933 712 896
Po spuštění: 7 342 546 944

- - End Of File - - 9AC05B5E3B23FEB5AB72A111E915009B

[Airm]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:36:52, on 18.2.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Hlavni\Plocha\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [DWPersistentQueuedReporting] C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE -a
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [KB976002-v5] rundll32.exe advpack.dll,LaunchINFSection OPMWXPUP.inf,BrowserChoiceGoo (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: LOLRecorder.lnk = C:\Program Files\LOLReplay\LOLRecorder.exe
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Hlavni\Nabídka Start\Programy\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - https://www.battlefieldheroes.com/stati ... 0.31.0.cab
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

--
End of file - 4309 bytes

[Airm]

http://www.uloz.to/7914457/2-soubory-rar

Nevím jak to jinak sem uploadout tak to dávám přes uloz.to

Slyšel jsem že avast kontroluje pořád počítač a z toho se také zpomaluje. Mám už tak pomalej pc a další takový zpomalovací program by mě ubíjel ... je to pravda ?

[jaro3]

Ano , na pomalejší PC bys měl spíš použít Aviru , ta méně zatěžuje systém.

Najdi a smaž:
c:\windows\system\WINSSPOT0.DRV

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

vyčisti systém CCleanerem

a použij i T-Cleaner
smaže vše po Combu,MWAVu atd.-stáhneš>spustíš

pozn. před stažením T-Cleaneru a po dobu čištění deaktivuj AVG , Avast,Avira či Microsoft Security Essentials následně T-Cleaner smaž a zapni si AVG , Avast, Avira či Microsoft Security Essentials


Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: (no name) - - (no file)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - https://www.battlefieldheroes.com/stati ... 0.31.0.cab


Jsou nějaké problémy?

[Airm]

Hotovo ... tak jestli to už je všechno tak všem moc děkuji za pomoc. Moc si cením vaší práci kterou provádíte.

[jaro3]

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.