Kontrola logu HJT Vyřešeno

[miruska27]

ComboFix 13-08-31.01 - PC 02.09.2013 19:48:18.6.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2559.1999 [GMT 2:00]
Spuštěný z: c:\documents and settings\PC\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\PC\Plocha\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Skype\Updater
c:\program files\Skype\Updater\Updater.dll
c:\program files\Skype\Updater\Updater.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_SKYPEUPDATE
-------\Service_SkypeUpdate
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-08-02 do 2013-09-02 )))))))))))))))))))))))))))))))
.
.
2013-09-02 09:59 . 2013-09-02 09:59 -------- d-----w- c:\documents and settings\PC\Data aplikací\22523
2013-09-01 18:55 . 2013-08-06 07:28 7166848 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{B0C4CDAB-AE2B-4E8D-BFDC-CBD26B211D6F}\mpengine.dll
2013-08-31 18:01 . 2013-08-31 18:01 -------- d-sh--w- c:\documents and settings\PC\IECompatCache
2013-08-31 10:15 . 2013-08-31 10:15 -------- d-----w- c:\windows\ERUNT
2013-08-24 18:02 . 2013-08-28 20:23 -------- d-----w- c:\documents and settings\PC\Data aplikací\uTorrent
2013-08-23 15:46 . 2013-08-23 15:46 -------- d-----w- c:\documents and settings\PC\Data aplikací\DVDFab9
2013-08-23 15:46 . 2013-08-23 17:03 -------- d-----w- c:\program files\DVDFab 9
2013-08-23 15:23 . 2013-08-23 15:23 -------- d-----w- c:\documents and settings\PC\Data aplikací\17008
2013-08-12 21:37 . 2013-08-12 21:37 -------- d-----w- c:\documents and settings\PC\Local Settings\Data aplikací\NokiaAccount
2013-08-12 21:34 . 2013-08-12 21:35 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Nokia
2013-08-12 21:33 . 2013-08-12 21:33 -------- d-----w- c:\program files\DIFX
2013-08-12 21:33 . 2012-10-17 12:53 19072 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2013-08-12 21:33 . 2013-08-12 21:33 -------- d-----w- c:\program files\PC Connectivity Solution
2013-08-10 07:00 . 2013-08-10 07:00 -------- d-----w- c:\program files\SlimDrivers
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-08-10 16:52 . 2012-09-20 21:33 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-08-10 16:52 . 2012-09-20 21:33 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-08-06 07:28 . 2013-07-29 17:10 7166848 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-08-02 23:48 . 2006-10-18 19:47 1543680 ------w- c:\windows\system32\wmvdecod.dll
2013-07-27 11:48 . 2013-07-27 11:48 49152 ----a-r- c:\documents and settings\PC\Data aplikací\Microsoft\Installer\{7130468A-F53F-4698-8C09-A339EA3B05E6}\Uninstall_QA_OTI_H_FE5D756F71E147C4972AD6775344B40B.exe
2013-07-27 11:48 . 2013-07-27 11:48 73728 ----a-r- c:\documents and settings\PC\Data aplikací\Microsoft\Installer\{7130468A-F53F-4698-8C09-A339EA3B05E6}\NewShortcut47_74B9CE5DF1F4447F982DCA29A461B529.exe
2013-07-27 11:48 . 2013-07-27 11:48 73728 ----a-r- c:\documents and settings\PC\Data aplikací\Microsoft\Installer\{7130468A-F53F-4698-8C09-A339EA3B05E6}\NewShortcut46_74B9CE5DF1F4447F982DCA29A461B529.exe
2013-07-27 11:48 . 2013-07-27 11:48 53248 ----a-r- c:\documents and settings\PC\Data aplikací\Microsoft\Installer\{7130468A-F53F-4698-8C09-A339EA3B05E6}\ARPPRODUCTICON.exe
2013-07-27 11:48 . 2013-07-27 11:48 49152 ----a-r- c:\documents and settings\PC\Data aplikací\Microsoft\Installer\{7130468A-F53F-4698-8C09-A339EA3B05E6}\NewShortcut2_1C7B7089989A424FB39D41A32581C775.exe
2013-07-26 02:49 . 2008-04-14 12:00 920064 ----a-w- c:\windows\system32\wininet.dll
2013-07-26 02:48 . 2008-04-14 12:00 43520 ------w- c:\windows\system32\licmgr10.dll
2013-07-26 02:48 . 2008-04-14 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2013-07-25 15:52 . 2008-04-14 12:00 385024 ------w- c:\windows\system32\html.iec
2013-07-10 10:37 . 2008-04-14 12:00 406016 ----a-w- c:\windows\system32\usp10.dll
2013-07-04 07:34 . 2008-04-14 12:00 2151936 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-07-04 07:33 . 2008-04-14 08:06 2030592 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-07-02 21:01 . 2013-07-02 21:02 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-07-02 21:01 . 2013-07-02 21:02 144896 ----a-w- c:\windows\system32\javacpl.cpl
2013-07-02 21:01 . 2012-05-14 17:10 867240 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-07-02 21:01 . 2012-05-14 17:07 789416 ----a-w- c:\windows\system32\deployJava1.dll
2013-06-05 09:08 . 2008-04-14 12:00 1876736 ----a-w- c:\windows\system32\win32k.sys
.
.
(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of c:\documents and settings\PC\Data aplikací\17008 ----
.
.
---- Directory of c:\documents and settings\PC\Data aplikací\22034 ----
.
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-09-20 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-09-20 114688]
"PAC7302_Monitor"="c:\windows\PixArt\PAC7302\Monitor.exe" [2006-11-03 319488]
"RTHDCPL"="RTHDCPL.EXE" [2000-01-01 20143688]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AmIcoSinglun]
2000-01-01 00:00 258048 ----a-w- c:\program files\AmIcoSingLun\AmIcoSinglun.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON SX100 Series]
2008-02-05 15:00 188928 ----a-w- c:\windows\system32\spool\drivers\w32x86\3\E_FATIEDE.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2012-05-14 14:16 116648 ----atw- c:\documents and settings\PC\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]
2011-06-15 14:16 997920 ----a-w- c:\program files\Microsoft Security Client\msseces.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSU_agent]
2012-02-28 13:53 190768 ----a-w- c:\program files\Nokia\Nokia Software Updater\nsu3ui_agent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2013-01-03 08:44 108984 ----a-w- c:\windows\system32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
2000-01-01 00:00 1982312 ----a-w- c:\program files\NVIDIA Corporation\nview\nwiz.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2013-06-21 07:58 19875432 ----a-r- c:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SlimDrivers]
2013-07-10 06:58 29378880 ----a-w- c:\program files\SlimDrivers\SlimDrivers.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
2013-08-24 18:03 1052496 ----a-w- c:\documents and settings\PC\Data aplikací\uTorrent\uTorrent.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Update Core\\daemonu.exe"=
"c:\\Program Files\\Mozilla Firefox\\plugin-container.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Documents and Settings\\PC\\Data aplikací\\uTorrent\\uTorrent.exe"=
.
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.sys [1.1.2000 2:00 52312]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [31.1.2013 19:46 47360]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [28.7.2013 16:38 27064]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
Obsah adresáře 'Naplánované úlohy'
.
2013-08-10 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-20 16:52]
.
2013-09-02 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2011-04-27 14:39]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
TCP: DhcpNameServer = 10.0.0.138
DPF: {45830FF9-D9E6-4F41-86ED-B266933D8E90} - hxxp://93.91.146.154:8080/RtspVaPgDec.cab
FF - ProfilePath - c:\documents and settings\PC\Data aplikací\Mozilla\Firefox\Profiles\xpkdeqc5.default-1349209841078\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-09-02 19:54
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(2504)
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\btncopy.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Microsoft Security Client\Antimalware\MsMpEng.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\program files\Java\jre7\bin\jqs.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\wscntfy.exe
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Celkový čas: 2013-09-02 19:57:29 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-09-02 17:57
ComboFix2.txt 2013-09-01 11:46
.
Před spuštěním: Volných bajtů: 118 191 341 568
Po spuštění: Volných bajtů: 118 099 947 520
.
- - End Of File - - 308F44DBD42BF5CE39C04D69925CD9E2
413FC2A0C716421B3158746D63736515


aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-09-02 19:59:25
-----------------------------
19:59:25.484 OS Version: Windows 5.1.2600 Service Pack 3
19:59:25.484 Number of processors: 2 586 0x40A
19:59:25.484 ComputerName: PC-7C45B7D3D4B1 UserName: PC
19:59:25.875 Initialize success
19:59:34.937 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-5
19:59:34.937 Disk 0 Vendor: ST3160812AS 3.AHH Size: 152627MB BusType: 3
19:59:34.937 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP3T0L0-11
19:59:34.953 Disk 1 Vendor: ST500DM002-1BC142 JC4B Size: 476940MB BusType: 3
19:59:35.140 Disk 0 MBR read successfully
19:59:35.140 Disk 0 MBR scan
19:59:35.140 Disk 0 Windows XP default MBR code
19:59:35.140 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 152617 MB offset 63
19:59:35.140 Disk 0 scanning sectors +312560640
19:59:35.171 Disk 0 scanning C:\WINDOWS\system32\drivers
19:59:41.718 Service scanning
19:59:53.343 Modules scanning
19:59:59.203 Disk 0 trace - called modules:
19:59:59.203 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
19:59:59.203 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8a17bab8]
19:59:59.203 3 CLASSPNP.SYS[b80e8fd7] -> nt!IofCallDriver -> \Device\00000063[0x8a17c510]
19:59:59.203 5 ACPI.sys[b7f7f620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-5[0x8a14b940]
19:59:59.218 Scan finished successfully
20:00:09.265 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\PC\Plocha\MBR.dat"
20:00:09.265 The log file has been saved successfully to "C:\Documents and Settings\PC\Plocha\aswMBR.txt"

[Reklama]

[jaro3]

c:\documents and settings\PC\Data aplikací\17008
c:\documents and settings\PC\Data aplikací\22034

Ty složky můžeš smazat.

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.


Co problémy?

[miruska27]

Vše provedeno,zatím dobrý a snad to tak i vydrží

[memphisto]

Pak dej kdyžtak vyřešeno...

[miruska27]

DÍKY,dávám zelenou a mizím..........

[memphisto]

I za jara není zač