Prosim o kontrolu logu, PC je pomaly Vyřešeno

[Wenca9]

ComboFix 13-03-07.03 - Owner 10.03.2013 22:11:12.3.4 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.3070.2336 [GMT 1:00]
Spuštěný z: c:\documents and settings\Owner\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Owner\Plocha\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_ESEADRIVER2
-------\Service_ESEADriver2
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-02-10 do 2013-03-10 )))))))))))))))))))))))))))))))
.
.
2013-03-10 14:50 . 2009-07-23 03:08 50200 ----a-w- c:\windows\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2013-03-10 14:50 . 2009-07-23 03:08 79896 ----a-w- c:\windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2013-03-10 14:49 . 2013-03-10 14:49 -------- d-----w- c:\windows\system32\RsFx
2013-03-10 14:46 . 2013-03-10 14:49 -------- d-----w- c:\program files\Microsoft SQL Server
2013-03-10 14:46 . 2013-03-10 14:46 -------- d-----w- c:\program files\Microsoft Sync Framework
2013-03-10 14:45 . 2013-03-10 14:45 -------- d-----w- c:\program files\Microsoft Synchronization Services
2013-03-10 14:45 . 2013-03-10 14:45 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2013-03-10 14:44 . 2013-03-10 14:44 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PreEmptive Solutions
2013-03-10 14:40 . 2013-03-10 14:40 -------- d-----w- c:\program files\Microsoft ASP.NET
2013-03-10 14:40 . 2013-03-10 14:40 -------- d-----w- c:\program files\IIS
2013-03-10 14:39 . 2013-03-10 14:39 18368 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\VSA\9.0\1033\ResourceCache.dll
2013-03-10 14:39 . 2013-03-10 14:55 2377696 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\VisualStudio\10.0\1033\ResourceCache.dll
2013-03-10 14:32 . 2013-03-10 14:32 -------- d-----w- c:\windows\symbols
2013-03-10 14:32 . 2013-03-10 14:36 -------- d-----w- c:\program files\Microsoft F#
2013-03-10 14:32 . 2013-03-10 14:34 -------- d-----w- c:\program files\HTML Help Workshop
2013-03-10 14:32 . 2013-03-10 14:46 -------- d-----w- c:\program files\Microsoft SDKs
2013-03-10 14:32 . 2013-03-10 14:44 -------- d-----w- c:\program files\Microsoft Visual Studio 10.0
2013-03-10 14:32 . 2013-03-10 14:35 -------- d-----w- c:\program files\Common Files\Merge Modules
2013-03-10 14:32 . 2013-03-10 14:32 -------- d-----w- c:\program files\Microsoft Help Viewer
2013-03-10 14:30 . 2013-03-10 14:30 -------- d-----w- c:\program files\Microsoft Visual Studio 9.0
2013-03-10 14:17 . 2013-03-10 14:17 -------- d-----w- c:\documents and settings\Owner\Data aplikací\WinArchiver
2013-03-10 12:33 . 2013-02-19 02:58 6954968 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A893DE81-272E-41D1-A8AD-D824323816F4}\mpengine.dll
2013-03-09 18:22 . 2013-03-09 18:22 -------- d-----w- c:\program files\ESEA
2013-03-09 13:19 . 2013-03-09 13:19 -------- d-----w- c:\documents and settings\Owner\Data aplikací\Malwarebytes
2013-03-09 13:19 . 2013-03-09 13:19 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2013-03-09 13:19 . 2013-03-09 13:19 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-03-09 13:19 . 2012-12-14 15:49 21104 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-03-09 12:19 . 2013-02-19 02:58 6954968 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-03-08 15:31 . 2013-03-08 15:31 388096 ----a-r- c:\documents and settings\Owner\Data aplikací\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-03-08 15:31 . 2013-03-08 15:31 -------- d-----w- c:\program files\Trend Micro
2013-03-06 17:40 . 2013-03-06 17:41 -------- d-----w- c:\program files\Microsoft Security Client
2013-03-06 17:38 . 2013-01-30 10:53 232336 ------w- c:\windows\system32\MpSigStub.exe
2013-03-06 17:26 . 2013-03-06 17:29 -------- d-----w- c:\program files\Google
2013-03-06 17:01 . 2013-03-06 17:01 -------- d-sh--w- c:\documents and settings\UpdatusUser\IETldCache
2013-03-05 17:34 . 2013-03-05 20:16 -------- d-----w- c:\documents and settings\Owner\Downloads
2013-03-05 17:29 . 2013-03-05 17:29 -------- d-----w- c:\documents and settings\Owner\Local Settings\Data aplikací\e-academy Inc
2013-03-05 17:29 . 2013-03-05 17:29 -------- d-----w- c:\documents and settings\Owner\Data aplikací\e-academy Inc
2013-02-15 22:04 . 2013-02-15 22:04 208448 ----a-w- c:\program files\Internet Explorer\PLUGINS\nppdf32.dll
2013-02-15 00:48 . 2013-02-15 10:46 -------- d-----w- c:\documents and settings\Owner\Local Settings\Data aplikací\FullTiltPoker
2013-02-15 00:47 . 2013-02-19 14:11 -------- d-----w- c:\program files\Full Tilt Poker
2013-02-14 12:09 . 2013-02-14 12:09 -------- d-----w- c:\program files\Casino
2013-02-11 22:59 . 2013-02-11 22:59 -------- d-----w- c:\documents and settings\Owner\Local Settings\Data aplikací\SplitMediaLabs
2013-02-11 22:58 . 2013-02-11 22:58 -------- d-----w- c:\program files\SplitMediaLabs
2013-02-11 22:58 . 2013-02-11 22:58 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SplitMediaLabs
2013-02-11 22:58 . 2013-02-11 22:58 -------- d-----w- c:\documents and settings\Owner\Data aplikací\SplitMediaLabs
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-03-10 14:27 . 2013-02-08 10:07 17488 ----a-w- c:\windows\gdrv.sys
2013-03-06 18:15 . 2012-07-29 20:12 242240 ----a-w- c:\windows\system32\drivers\DTSOFTBUS01.SYS
2013-02-27 21:16 . 2012-07-03 12:24 71024 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-02-27 21:16 . 2012-07-03 12:24 691568 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-01-26 03:55 . 2002-09-23 12:00 552448 ----a-w- c:\windows\system32\oleaut32.dll
2013-01-20 14:59 . 2013-01-20 14:59 195296 ----a-w- c:\windows\system32\drivers\MpFilter.sys
2013-01-07 07:26 . 2002-09-23 12:00 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-01-07 07:26 . 2002-09-20 17:12 2029568 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-01-04 10:10 . 2002-09-23 12:00 1867264 ----a-w- c:\windows\system32\win32k.sys
2013-01-02 06:49 . 2012-07-03 11:52 148992 ----a-w- c:\windows\system32\mpg2splt.ax
2013-01-02 06:49 . 2012-07-03 11:52 1294848 ----a-w- c:\windows\system32\quartz.dll
2012-12-29 10:31 . 2012-12-29 20:07 442296 ----a-w- c:\windows\system32\nvEncodeAPI.dll
2012-12-29 10:31 . 2012-09-13 19:40 889784 ----a-w- c:\windows\system32\nvdispgenco32.dll
2012-12-29 10:31 . 2012-09-13 19:40 6066176 ----a-w- c:\windows\system32\nvopencl.dll
2012-12-29 10:31 . 2012-07-07 11:53 1017272 ----a-w- c:\windows\system32\nvdispco32.dll
2012-12-29 10:31 . 2012-07-07 11:53 17551360 ----a-w- c:\windows\system32\nvcompiler.dll
2012-12-29 10:31 . 2012-07-03 12:38 4154752 ----a-w- c:\windows\system32\nv4_disp.dll
2012-12-29 10:31 . 2012-07-03 12:38 10686200 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2012-12-29 10:31 . 2009-08-16 22:57 7716864 ----a-w- c:\windows\system32\nvcuda.dll
2012-12-29 10:31 . 2009-08-16 22:57 2725304 ----a-w- c:\windows\system32\nvcuvid.dll
2012-12-29 10:31 . 2009-08-16 22:57 2448384 ----a-w- c:\windows\system32\nvapi.dll
2012-12-29 10:31 . 2009-08-16 22:57 1985976 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-12-29 10:31 . 2009-08-16 22:57 19570688 ----a-w- c:\windows\system32\nvoglnt.dll
2012-12-29 08:08 . 2012-09-13 19:41 282624 ----a-w- c:\windows\system32\nvrsit.dll
2012-12-29 08:08 . 2012-09-13 19:41 274432 ----a-w- c:\windows\system32\nvrspt.dll
2012-12-29 08:08 . 2012-09-13 19:41 274432 ----a-w- c:\windows\system32\nvrsnl.dll
2012-12-29 08:08 . 2012-09-13 19:41 274432 ----a-w- c:\windows\system32\nvrsja.dll
2012-12-29 08:08 . 2012-09-13 19:41 270336 ----a-w- c:\windows\system32\nvrsru.dll
2012-12-29 08:08 . 2012-09-13 19:41 270336 ----a-w- c:\windows\system32\nvrsptb.dll
2012-12-29 08:08 . 2012-09-13 19:41 266240 ----a-w- c:\windows\system32\nvrsko.dll
2012-12-29 08:08 . 2012-09-13 19:41 258048 ----a-w- c:\windows\system32\nvrstr.dll
2012-12-29 08:08 . 2012-09-13 19:41 258048 ----a-w- c:\windows\system32\nvrssl.dll
2012-12-29 08:08 . 2012-09-13 19:41 258048 ----a-w- c:\windows\system32\nvrssk.dll
2012-12-29 08:08 . 2012-09-13 19:41 258048 ----a-w- c:\windows\system32\nvrspl.dll
2012-12-29 08:08 . 2012-09-13 19:41 253952 ----a-w- c:\windows\system32\nvrsth.dll
2012-12-29 08:08 . 2012-09-13 19:41 253952 ----a-w- c:\windows\system32\nvrssv.dll
2012-12-29 08:08 . 2012-09-13 19:41 253952 ----a-w- c:\windows\system32\nvrsno.dll
2012-12-29 08:08 . 2012-09-13 19:41 229376 ----a-w- c:\windows\system32\nvrszhc.dll
2012-12-29 08:08 . 2012-09-13 19:41 126976 ----a-w- c:\windows\system32\nvrszht.dll
2012-12-29 08:08 . 2012-09-13 19:41 335872 ----a-w- c:\windows\system32\nvrshe.dll
2012-12-29 08:08 . 2012-09-13 19:41 286720 ----a-w- c:\windows\system32\nvrsfr.dll
2012-12-29 08:08 . 2012-09-13 19:41 282624 ----a-w- c:\windows\system32\nvrses.dll
2012-12-29 08:08 . 2012-09-13 19:41 282624 ----a-w- c:\windows\system32\nvrsel.dll
2012-12-29 08:08 . 2012-09-13 19:41 278528 ----a-w- c:\windows\system32\nvrsde.dll
2012-12-29 08:08 . 2012-09-13 19:41 274432 ----a-w- c:\windows\system32\nvrsesm.dll
2012-12-29 08:08 . 2012-09-13 19:41 262144 ----a-w- c:\windows\system32\nvrshu.dll
2012-12-29 08:08 . 2012-09-13 19:41 253952 ----a-w- c:\windows\system32\nvrsda.dll
2012-12-29 08:08 . 2012-09-13 19:41 249856 ----a-w- c:\windows\system32\nvrsfi.dll
2012-12-29 08:08 . 2012-09-13 19:41 249856 ----a-w- c:\windows\system32\nvrseng.dll
2012-12-29 08:08 . 2012-09-13 19:41 249856 ----a-w- c:\windows\system32\nvrscs.dll
2012-12-29 08:08 . 2012-09-13 19:41 335872 ----a-w- c:\windows\system32\nvrsar.dll
2012-12-29 08:07 . 2009-08-17 01:04 54272 ----a-w- c:\windows\system32\nvwddi.dll
2012-12-29 08:07 . 2009-08-17 01:03 157112 ----a-w- c:\windows\system32\nvsvc32.exe
2012-12-29 08:07 . 2009-08-17 01:03 15635896 ----a-w- c:\windows\system32\nvcpl.dll
2012-12-29 08:07 . 2009-08-17 01:03 108984 ----a-w- c:\windows\system32\nvmctray.dll
2012-12-29 08:07 . 2009-08-17 01:03 144312 ----a-w- c:\windows\system32\nvcolor.exe
2012-12-26 20:20 . 2002-09-23 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2012-12-26 20:19 . 2002-09-23 12:00 43520 ------w- c:\windows\system32\licmgr10.dll
2012-12-26 20:19 . 2002-09-23 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-12-24 06:40 . 2012-07-03 12:38 385024 ------w- c:\windows\system32\html.iec
2012-12-17 10:38 . 2012-07-03 20:53 867344 ----a-w- c:\windows\system32\drivers\ESLWireACD.sys
2012-12-16 12:23 . 2002-09-23 12:00 290560 ----a-w- c:\windows\system32\atmfd.dll
2012-07-03 14:40 . 2012-07-03 20:53 265120 -c--a-w- c:\program files\Common Files\WireHelpSvc.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files\Valve\Steam\steam.exe" [2013-02-25 1602984]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BCU"="c:\program files\DeviceVM\Browser Configuration Utility\BCU.exe" [2009-08-04 346320]
"RTHDCPL"="RTHDCPL.EXE" [2009-08-14 18702336]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 153672]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2012-12-29 15635896]
"NvMediaCenter"="NvMCTray.dll" [2012-12-29 108984]
"nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2012-12-29 1982312]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2008-04-14 06:52 15360 ----a-w- c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EasyTuneVI]
2012-09-25 09:40 40960 ----a-w- c:\program files\Gigabyte\ET6\ETcall.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GBTUpd]
2008-04-03 08:01 297480 ----a-w- c:\program files\Gigabyte\GBTUpd\PreRun.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2012-07-03 12:45 116648 ----atw- c:\documents and settings\Owner\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR]
2012-11-05 20:14 843208 ----a-w- c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
2012-09-28 11:18 965560 ----a-w- c:\program files\Samsung\Kies\Kies.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
2012-09-28 11:18 309688 ----a-w- c:\program files\Samsung\Kies\KiesTrayAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2012-12-29 08:07 15635896 ----a-w- c:\windows\system32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2012-12-29 08:07 108984 ----a-w- c:\windows\system32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2012-04-18 18:56 421888 -c--a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TBPanel]
2009-10-05 16:05 2158592 -c--a-w- c:\program files\Vtune\TBPANEL.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\QIP Infium\\infium.exe"=
"c:\\Documents and Settings\\Owner\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.exe"=
"c:\\Program Files\\Valve\\Steam\\SteamApps\\blondyy\\counter-strike\\hl.exe"=
"c:\\Program Files\\Casino\\Sportingbet Casino\\casino.exe"=
"c:\\Program Files\\Valve\\Steam\\steam.exe"=
"c:\\Program Files\\Origin Games\\FIFA 13\\Game\\fifa13.exe"=
"c:\\Program Files\\Valve\\Steam\\SteamApps\\common\\Counter-Strike Global Offensive\\csgo.exe"=
.
R?2 Autodesk Content Service;Autodesk Content Service;c:\program files\Autodesk\Content Service\Connect.Service.ContentService.exe [2.2.2011 14:08 18656]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\DTSOFTBUS01.SYS [29.7.2012 21:12 242240]
R2 BCUService;Browser Configuration Utility Service;c:\program files\DeviceVM\Browser Configuration Utility\BCUService.exe [3.7.2012 12:56 219360]
R2 ES lite Service;ES lite Service for program management.;c:\program files\Gigabyte\EasySaver\essvr.exe [3.7.2012 12:56 68136]
R2 ESLWireAC;ESLWireAC;c:\windows\system32\drivers\ESLWireACD.sys [3.7.2012 21:53 867344]
R2 EslWireHelper;ESL Wire Helper Service;c:\program files\EslWire\service\WireHelperSvc.exe [4.9.2012 18:16 615440]
S3 acsint;acsint;c:\windows\system32\drivers\acsint.sys [23.10.2012 23:52 38440]
S3 acsmux;acsmux;c:\windows\system32\drivers\acsmux.sys [23.10.2012 23:52 57000]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [3.7.2012 12:56 1684736]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\drivers\ssadadb.sys [14.7.2012 19:21 30312]
S3 AODDriver;AODDriver;c:\program files\Gigabyte\ET6\i386\AODDriver.sys [22.2.2009 23:16 36864]
S3 etdrv;etdrv;c:\windows\etdrv.sys [3.7.2012 13:44 17488]
S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files\Futuremark\Futuremark SystemInfo\FMSISvc.exe [8.2.2013 1:31 137488]
S3 GVTDrv;GVTDrv;c:\windows\system32\drivers\GVTDrv.sys [3.7.2012 13:44 24944]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [14.7.2012 19:21 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [14.7.2012 19:21 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [14.7.2012 19:21 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\drivers\ssadserd.sys [14.7.2012 19:21 114280]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\sqladhlp.exe [23.7.2009 4:08 47128]
S4 RsFx0103;RsFx0103 Driver;c:\windows\system32\drivers\RsFx0103.sys [30.3.2009 3:09 239336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-03-06 17:29 1630672 ----a-w- c:\program files\Google\Chrome\Application\25.0.1364.152\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-03-10 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-03 21:16]
.
2013-03-10 c:\windows\Tasks\Microsoft Antimalware Scheduled Scan.job
- c:\program files\Microsoft Security Client\MpCmdRun.exe [2013-01-27 10:11]
.
2013-03-10 c:\windows\Tasks\MpIdleTask.job
- c:\program files\Microsoft Security Client\MpCmdRun.exe [2013-01-27 10:11]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: Interfaces\{6C8859CC-DA80-4293-8C7F-0E3ADCD47FC3}: NameServer = 62.240.163.170,62.204.224.3
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-03-10 22:23
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Reinstall\:őwjY
*]
"DisplayName"="???\17?\11\09"
"DeviceDesc"="???\17?\11\09"
"ProviderName"="???\11?\17?\11??"
"MFG"="???????"
"ReinstallString"=".10.1000.8"
"DeviceInstanceIds"=multi:"d:\\chipset\\7-ser\\xp\\sbdrv\\smbus\\smbusati.inf\00"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(3108)
c:\windows\system32\AcSignIcon.dll
c:\program files\Autodesk\Inventor Fusion 2012\AcSignCore16.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Microsoft Security Client\MsMpEng.exe
c:\program files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RunDLL32.exe
c:\windows\system32\nvsvc32.exe
c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\windows\system32\imapi.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Celkový čas: 2013-03-10 22:23:57 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-03-10 21:23
ComboFix2.txt 2013-03-10 12:58
ComboFix3.txt 2013-03-09 16:08
.
Před spuštěním: Volných bajtů: 221 014 171 648
Po spuštění: Volných bajtů: 223 409 082 368
.
- - End Of File - - 066BA4581B2F881378D5037F4870A74B

[Reklama]

[memphisto]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem
a použij i T-Cleaner
smaže vše po Combu,MWAVu atd.-stáhneš>spustíš

pozn. před stažením T-Cleaneru a po dobu čištění deaktivuj antivir a antispyware ,následně T-Cleaner smaž a zapni si znovu antivir a antispyware.


+ HJT

Jak se chová PC?

[Wenca9]

Bohuzel ten odkaz na T-Cleaner nefunguje, jinak pocituji mirne zlepseni, ale nejspise jsem hodne narocny uzivatel :)

[jaro3]

Místo toho použij tohle:
Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.

[Wenca9]

aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software
Run date: 2013-03-11 20:19:58
-----------------------------
20:19:58.937 OS Version: Windows 5.1.2600 Service Pack 3
20:19:58.937 Number of processors: 4 586 0x502
20:19:58.937 ComputerName: HORAKUS-8N5ZSNK UserName: Owner
20:19:59.609 Initialize success
20:20:05.937 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-5
20:20:05.937 Disk 0 Vendor: SAMSUNG_HD322HJ 1AC01118 Size: 305245MB BusType: 3
20:20:05.953 Disk 0 MBR read successfully
20:20:05.953 Disk 0 MBR scan
20:20:05.953 Disk 0 Windows XP default MBR code
20:20:05.953 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 305234 MB offset 63
20:20:05.968 Disk 0 scanning sectors +625121280
20:20:06.015 Disk 0 scanning C:\WINDOWS\system32\drivers
20:20:09.421 Service scanning
20:20:17.765 Modules scanning
20:20:20.640 Disk 0 trace - called modules:
20:20:20.656 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
20:20:20.671 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8b082ab8]
20:20:20.671 3 CLASSPNP.SYS[b8108fd7] -> nt!IofCallDriver -> \Device\0000006e[0x8b0ae178]
20:20:20.671 5 ACPI.sys[b7f7f620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-5[0x8b0e1940]
20:20:20.671 Scan finished successfully
20:20:32.703 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Owner\Plocha\MBR.dat"
20:20:32.703 The log file has been saved successfully to "C:\Documents and Settings\Owner\Plocha\aswMBR.txt"

[jaro3]

Log Ok. Jak to vypadá? Ještě stále problémy?

[Wenca9]

Ne, je to lepsi:) mnohokrat Dekuji ! :)