Předmět Autor Datum
ComboFix - stáhnout, spustit, postupovat podle instrukcí na obrazovce.
Kurt 22.12.2008 10:15
Kurt
Kurte dík, ale já ten ComboFix nemůžu stáhnout - všude mi to píše error 404 stránka nenalezena. Nemo…
Mirrdass 22.12.2008 11:45
Mirrdass
Když jsou ty Vánoce.... Posláno.
Kurt 22.12.2008 11:50
Kurt
ComboFix 08-12-21.04 - Mirrďass 2008-12-22 12:11:12.1 - NTFSx86 Systém Microsoft Windows XP Professi…
Mirrdass 22.12.2008 12:24
Mirrdass
((((((((((((((((((((((((( Soubory vytvořené od 2008-11-22 do 2008-12-22 ))))))))))))))))))))))))))))…
Mirrdass 22.12.2008 12:27
Mirrdass
2008-12-08 22:20 . 2008-07-14 17:43 <DIR> d-------- c:\documents and settings\Administrator\Dokument…
Mirrdass 22.12.2008 12:28
Mirrdass
2008-11-23 17:16 . 2008-11-30 16:20 <DIR> d-------- c:\program files\Avanquest update(2) 2008-11-23…
Mirrdass 22.12.2008 12:29
Mirrdass
2008-12-10 14:07 --------- d-----w c:\documents and settings\All Users\Data aplikací\Microsoft Help…
Mirrdass 22.12.2008 12:29
Mirrdass
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))…
Mirrdass 22.12.2008 12:30
Mirrdass
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648] "N…
Mirrdass 22.12.2008 12:31
Mirrdass
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List…
Mirrdass 22.12.2008 12:32
Mirrdass
[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{e98ebf44-51c0-1…
Mirrdass 22.12.2008 12:33
Mirrdass
2008-12-22 c:\windows\Tasks\At20.job - c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49] 2008-12-…
Mirrdass 22.12.2008 12:34
Mirrdass
2008-12-22 c:\windows\Tasks\At36.job - c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49] 2008-12-…
Mirrdass 22.12.2008 12:35
Mirrdass
2008-12-22 c:\windows\Tasks\PCConfidential.job - c:\program files\Winferno\PC Confidential\PCConfide…
Mirrdass 22.12.2008 12:36
Mirrdass
skenování skrytých procesů ... skenování skrytých položek 'Po spuštění' ... skenování skrytých sou…
Mirrdass 22.12.2008 12:37
Mirrdass
Do you still have a security problem? Ještě stáhni Superantispyware, aktualizuj a proskenuj PC. Co n…
Kurt 22.12.2008 12:47
Kurt
Moc děkuju Vypadá to, že je to pryč, jiný problém tu nemám, ale přesto to podle tvé rady ještě pros…
Mirrdass 22.12.2008 13:12
Mirrdass
Taky tak. Označím jako Vyřešené a jdu zase pracovat. :-/ poslední
Kurt 22.12.2008 14:36
Kurt
V posledním tažení jsi ty, protoe sis do počítače nainstaloval spyware. Řiď se radou Kurta.
Jan Fiala 22.12.2008 10:19
Jan Fiala
pokouším se ten prográmek stáhnout, ale vůbec mi to nejde
Mirrdass 22.12.2008 11:23
Mirrdass
Protože ti to asi blokuje ten spyware, musíš to stáhnout někde jinde a nějak to přemístit do toho tv…
marekdrtic 22.12.2008 11:27
marekdrtic
jdu to zkusit
Mirrdass 22.12.2008 11:46
Mirrdass
jdu to zkusit
Mirrdass 22.12.2008 11:46
Mirrdass

ComboFix 08-12-21.04 - Mirrďass 2008-12-22 12:11:12.1 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.1.1029.18.2038.1587 [GMT 1:00]
Spuštěný z: c:\downloads\Comb0Fix.exe

[COLOR=RED]VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !![/COLOR]
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
c:\docume~1\MIRRAS~1\LOCALS~1\Tem p\tmp2.tmp
c:\documents and settings\Mirrďass\Data aplikací\inst.exe
c:\program files\Mozilla Firefox\components\iamfamous.dll
C:\resycled
c:\re sycled\boot.com
c:\windows\config.ini
c:\windows\IE 4 Error Log.txt
c:\windows\system32\drivers\msqpdxserv.sys
c:\windows\system32\drivers\TDSSmhct.sys
c:\window s\system32\msxml71.dll
c:\windows\system32\TDSSbrsr .dll
c:\windows\system32\TDSSlxwp.dll
c:\windows\sy stem32\TDSSnmxh.log
c:\windows\system32\TDSSoiqh.dl l
c:\windows\system32\TDSSosvd.dat
c:\windows\syste m32\TDSSrhym.log
c:\windows\system32\TDSSriqp.dll
c :\windows\system32\TDSSsihc.dll
c:\windows\system32 \TDSStkdu.log
c:\windows\system32\TDSSxfum.dll
c:\w indows\system32\TFeJ71tT.exe.a_a
c:\windows\system3 2\tyshb36rfjdf.dll
c:\windows\Temp\tmp3.tmp

.
(((( ((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_TDSSSERV.SYS
-------\Legacy_TDSS SERV.SYS

((((((((((((((((((((((((( Soubory vytvořené od 2008-11-22 do 2008-12-22 )))))))))))))))))))))))))))))))
.

2008-12-22 03:21 . 2008-12-22 03:21 <DIR> d-------- c:\program files\Lavasoft
2008-12-22 03:21 . 2008-12-22 03:22 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\Lavasoft
2008-12-22 03:00 . 2008-12-22 03:00 <DIR> dr------- c:\documents and settings\NetworkService\Oblíbené položky
2008-12-22 01:40 . 2008-12-22 01:40 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\CrucialSoft Ltd
2008-12-22 01:39 . 2008-12-22 01:49 73,728 --a------ c:\windows\system32\TFeJ71t T.exe
2008-12-16 09:57 . 2008-12-16 09:57 25,574 --a------ c:\windows\IM14.CFG
2008-12 -14 22:26 . 2008-12-14 22:26 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\Winferno
2008-12-14 22:16 . 2006-07-24 08:56 212,240 --a------ c:\windows\system32\Richtx 32.ocx
2008-12-13 23:42 . 2008-12-13 23:42 <DIR> d-------- c:\program files\Google
2008-12-08 22:20 . 2008-07-14 17:43 <DIR> d-------- c:\documents and settings\Administrator\Plocha
2008-12-08 22:20 . 2008-07-14 17:43 <DIR> d--h----- c:\documents and settings\Administrator\Okolní tiskárny
2008-12-08 22:20 . 2008-07-14 17:43 <DIR> d--h----- c:\documents and settings\Administrator\Okolní síť
2008-12-08 22:20 . 2008-07-14 17:43 <DIR> d-------- c:\documents and settings\Administrator\Oblíbené položky
2008-12-08 22:20 . 2008-07-14 16:26 <DIR> d--h----- c:\documents and settings\Administrator\Šablony
2008-12-08 22:20 . 2008-07-14 17:43 <DIR> dr------- c:\documents and settings\Administrator\Nabídka Start

2008-12-08 22:20 . 2008-07-14 17:43 <DIR> d-------- c:\documents and settings\Administrator\Dokumenty
2008-12-08 22:20 . 2008-08-12 15:56 <DIR> d-------- c:\documents and settings\Administrator\Data aplikací\MetaProducts
2008-12-08 22:20 . 2008-08-12 15:56 <DIR> dr-h----- c:\documents and settings\Administrator\Data aplikací
2008-12-08 22:20 . 2008-12-08 22:20 <DIR> d-------- c:\documents and settings\Administrator
2008-12-02 19:56 . 2008-12-02 19:56 <DIR> d-------- c:\documents and settings\Mirrďass\Data aplikací\Iomatic
2008-12-02 19:34 . 2008-12-02 19:34 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\Iomatic
2008-12-02 19:14 . 2008-12-02 19:22 <DIR> d-a------ c:\documents and settings\All Users\Data aplikací\TEMP
2008-11-30 18:20 . 2008-12-22 00:28 <DIR> d-------- c:\windows\system32\drivers\ Avg
2008-11-30 18:20 . 2008-11-30 18:20 <DIR> d-------- c:\program files\AVG
2008-11-30 18:20 . 2008-12-22 02:00 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\avg8
2008-11-30 18:20 . 2008-12-02 18:58 98,440 --a------ c:\windows\system32\drivers \avgldx86.sys
2008-11-30 18:20 . 2008-12-02 18:58 90,632 --a------ c:\windows\system32\drivers \avgtdix.sys
2008-11-30 18:20 . 2008-12-02 18:58 12,936 --a------ c:\windows\system32\drivers \avgrkx86.sys
2008-11-30 18:20 . 2008-12-02 18:58 10,520 --a------ c:\windows\system32\avgrsst x.dll
2008-11-30 16:44 . 2008-11-10 05:43 410,984 --a------ c:\windows\system32\deploy tk.dll
2008-11-25 10:16 . 2008-11-25 10:16 23,970,870 --a------ c:\windows\PhotoFiltre- Wallpaper.bmp

2008-11-23 17:16 . 2008-11-30 16:20 <DIR> d-------- c:\program files\Avanquest update(2)
2008-11-23 17:15 . 2008-11-30 16:21 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\Sony Ericsson(2)
2008-11-23 11:21 . 2008-11-23 11:21 <DIR> d-------- c:\documents and settings\Mirrďass\Data aplikací\Teleca
2008-11-23 11:19 . 2008-11-30 16:25 <DIR> d-------- c:\program files\Common Files\Teleca Shared
2008-11-22 09:36 . 2008-12-22 02:02 <DIR> d-------- C:\$AVG8.VAULT$
2008-11-22 09:14 . 2008-11-30 16:11 <DIR> d-------- c:\windows\system32\drivers\ Avg(2)
2008-11-22 09:14 . 2008-11-22 09:14 10,520 --a------ c:\windows\system32\avgrsst x(2).dll

.
((((((((((((((((((((((((((((((((((((((( ( Find3M výpis )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2008-12-22 11:02 --------- d-----w c:\documents and settings\Mirrďass\Data aplikací\Skype
2008-12-22 09:45 --------- d-----w c:\documents and settings\Mirrďass\Data aplikací\skypePM
2008-12-22 02:21 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
2008-12-17 09:03 --------- d-----w c:\program files\Java
2008-12-16 15:00 --------- d-----w c:\documents and settings\Mirrďass\Data aplikací\MSN6
2008-12-13 22:16 --------- d-----w c:\program files\TeamViewer3
2008-12-13 14:04 --------- d-----w c:\program files\Skype

2008-12-10 14:07 --------- d-----w c:\documents and settings\All Users\Data aplikací\Microsoft Help
2008-11-30 15:22 --------- d--h--w c:\program files\InstallShield Installation Information
2008-11-20 13:46 --------- d-----w c:\documents and settings\Mirrďass\Data aplikací\TeamViewer
2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\ mrxsmb.sys
2008-10-23 12:42 286,720 ----a-w c:\windows\system32\gdi32.dl l
2008-10-16 20:33 826,368 ----a-w c:\windows\system32\wininet. dll
2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dl l
2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuauen g.dll
2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dl l
2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui. dll
2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll
2 008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.e xe
2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll
2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2(2). dll
2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll
2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups(2).d ll
2008-10-16 13:06 268,648 ----a-w c:\windows\system32\mucltui. dll
2008-10-16 13:06 208,744 ----a-w c:\windows\system32\muweb.dl l
2008-10-03 10:04 247,326 ----a-w c:\windows\system32\strmdll. dll
2008-10-01 22:02 796,672 ----a-w c:\windows\GPInstall.exe
200 8-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4 .dll
2008-07-14 18:47 47,360 ----a-w c:\documents and settings\Mirrďass\Data aplikací\pcouffin.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\M icrosoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=" c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56 B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-05-16 153136]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-11-07 21633320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Run]
"HotKeysCmds"="c:\windo ws\system32\hkcmd.exe" [2006-10-06 114688]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-01-05 761946]
"IndicatorUtility"="c:\addon\Fujitsu\Fujit su Hotkey Utility\IndicatorUty.exe" [2005-08-09 81920]
"LoadFUJ02E3"="c:\program files\Fujitsu\FUJ02E3\FUJ02E3.exe" [2006-11-17 80688]
"LoadFujitsuQuickTouch"="c:\addon\Fujitsu\A pplication Panel\QuickTouch.exe" [2005-07-21 353792]
"LoadBtnHnd"="c:\program files\Fujitsu\BtnHnd\BtnHnd.exe" [2005-07-21 61440]
"PSUtility"="c:\addon\Fujitsu\PSUtility\Tra yManager.exe" [2006-07-05 118784]
"SSUtility"="c:\program files\Fujitsu\SSUtility\FJSSDMN.exe" [2006-07-22 233472]
"VirtualCloneDrive"="c:\program files\VirtualCloneDrive\VCDDaemon.exe" [2006-04-29 94208]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]

"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-10 136600]
"RTHDCPL"="RTHDCPL.EXE" [2006-03-07 c:\windows\RTHDCPL.exe]
"AGRSMMSG"="AGRSMMSG.exe" [2006-06-29 c:\windows\AGRSMMSG.exe]

[HKEY_USERS\.DEFAULT\Sof tware\Microsoft\Windows\CurrentVersion\Run]
"CTFMON .EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\MirrÔass\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-07 101440]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2007-08-02 2760704]
TMMonitor.lnk - c:\program files\MSI\ArcSoft\TotalMedia\TMMonitor.exe [2008-07-15 249856]

[HKEY_LOCAL_MACHINE\software\microsoft\wi ndows nt\currentversion\winlogon\notify\FJWSEL]
2006-06- 29 13:45 32768 c:\windows\system32\FJWSWNP.dll

[HKEY_LOCAL_MACHI NE\software\microsoft\windows nt\currentversion\winlogon\notify\PSUTY]
2006-06-0 2 16:04 32768 c:\windows\system32\PSUWNP.dll

[HKEY_LOCAL_MACHIN E\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx .dll

[HKEY_LOCAL_MACHINE\software\microsoft\window s nt\currentversion\drivers32]
"msacm.divxa32"= msaud32_divx.acm

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
" %windir%\\system32\\sessmgr.exe"=
"%windir%\\Networ k Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\Drivers\ avgrkx86.sys [2008-11-30 12936]
R0 FJGSDisk;G-Sensor Application Filter Driver;c:\windows\system32\DRIVERS\FJGSDisk.sys [2008-07-14 7168]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys [2008-11-30 98440]
R1 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\Drivers\avgtdix.sys [2008-11-30 90632]
R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2008-11-30 231704]
R2 PDRJNDL;PDRJNDL;\??\c:\programy\Dekart Private Disk\PDRJNDL.SYS [2008-08-02 16512]
R2 PRVDISK;PRVDISK;\??\c:\programy\Dekart Private Disk\PRVDISK.SYS [2008-08-02 14848]
R3 FUJ02E1;%FUJ02E1.DeviceDesc%;c:\windows\system32\D rivers\FUJ02E1.sys [2008-07-14 5632]
R3 FUJ02E3;Fujitsu FUJ02E3 Device Driver;c:\windows\system32\DRIVERS\FUJ02E3.sys [2008-07-14 4864]
R3 PSched;Plánovač paketů technologie QoS;c:\windows\system32\DRIVERS\psched.sys [2003-04-16 69120]
S1 aswSP;avast! Self Protection; []
S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswF sBlk.sys []
S3 vmfilter323;323 filter service, Normal;c:\windows\system32\drivers\vmfilter323.sys [2008-09-24 476672]
S3 ZSMC326;VIMICRO USB2.0 PC Camera(VC0323);c:\windows\system32\Drivers\usbvm32 3.sys [2008-09-24 257920]

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{e98ebf44-51c0-11dd -9448-806d6172696f}]
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL resycled\boot.com c:
\Shell\Open\command - "resycled\boot

*Newly Created Service* - PROCEXP90
.
Obsah adresáře 'Naplánované úlohy'

2008-12-22 c:\windows\Tasks\At1.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At10.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At11.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At12.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At13.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At14.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At15.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At16.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At17.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At18.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At19.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At2.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At20.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At21.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At22.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At23.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At24.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At25.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At26.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At27.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At28.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At29.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At3.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At30.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At31.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At32.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At33.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At34.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At35.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At36.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At37.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At38.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At39.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At4.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At40.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At41.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At42.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At43.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At44.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At45.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At46.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At47.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At48.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At5.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At6.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At7.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At8.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At9.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\PCConfidential.job
- c:\program files\Winferno\PC Confidential\PCConfidential.exe []
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

BHO-{D5BF49A2-94F1-42BD-F434-3604812C807D} - c:\windows\system32\tyshb36rfjdf.dll
HKLM-Run-SMai l - c:\program files\Seznam\Postak\Postak.exe
SharedTaskScheduler -{D5BF49A2-94F1-42BD-F434-3604812C807D} - c:\windows\system32\tyshb36rfjdf.dll

.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Stáhnout pomocí Download &Expressu - c:\program files\Download Express\Add_Url.htm
Name-Space Handler: ftp\HIEClickCatcher - {E131C96E-4DDB-11D4-84B8-008048B33DEA} - c:\progra~1\DOWNLO~1\mdpph.dll
Name-Space Handler: http\HIEClickCatcher - {E131C96E-4DDB-11D4-84B8-008048B33DEA} - c:\progra~1\DOWNLO~1\mdpph.dll
Name-Space Handler: https\HIEClickCatcher - {E131C96E-4DDB-11D4-84B8-008048B33DEA} - c:\progra~1\DOWNLO~1\mdpph.dll
.

**************** *************************************************** *******

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, www.gmer.net
Rootkit scan 2008-12-22 12:13:43
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

*********************************************** ***************************

[HKEY_LOCAL_MACHINE\sy stem\ControlSet004\Services\TDSSserv.sys]
"imagepat h"="\systemroot\system32\drivers\TDSSmhct.sys"
.
-- ------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1156)
c:\windows\system32\FJWSWNP.d ll
c:\windows\system32\PSUWNP.dll
.
Celkový čas: 2008-12-22 12:14:29
ComboFix-quarantined-files.txt 2008-12-22 11:14:18

Před spuštěním: Volných bajtů: 93,075,767,296
Po spuštění: Volných bajtů: 93,520,416,768

314 --- E O F --- 2008-12-18 23:15:02

Zpět do poradny Odpovědět na původní otázku Nahoru