Historie úprav
Zeptal/a se – 21.leden 20:29
Jak zapnout nouzový režim na Windows XP ?
Počítače a internet – Ostatní počítače a internet
Mačkám F8 jak blb, ale stejně se nechce spustit :)
Prosím pomoc.
Zeptal/a se – 21.leden 20:35
Jak zapnout nouzový režim na Windows XP ?
Počítače a internet – Ostatní počítače a internet
Mačkám F8 jak blb, ale stejně se nechce spustit :)
Prosím pomoc.
Doplňuji:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:33:45, on 21.1.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Ask.com\Updater\Updater.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Documents and Settings\Tomáš Čevela\Local Settings\Data
aplikací\Google\Update\GoogleUpdate.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Documents and Settings\Tomáš Čevela\Local Settings\Data
aplikací\Facebook\Update\FacebookUpdate.exe
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\Documents and Settings\Tomáš Čevela\Local Settings\Data
aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Tomáš Čevela\Local Settings\Data
aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Tomáš Čevela\75439967573920484\winsvr.exe
C:\Documents and Settings\Tomáš Čevela\Local Settings\Data
aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Tomáš Čevela\76968780866536342\winsvc.exe
C:\Documents and Settings\Tomáš Čevela\Local Settings\Data
aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Tomáš Čevela\Local Settings\Data
aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Tomáš Čevela\Local Settings\Data
aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Tomáš Čevela\Local Settings\Data
aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Tomáš Čevela\Local Settings\Data
aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Tomáš
Čevela\Dokumenty\Downloads\HijackThis.exe
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL
= http://go.microsoft.com/fwlink/?LinkId=69157
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL
= http://go.microsoft.com/fwlink/?LinkId=54896
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 – HKCU\Software\Microsoft\Internet
Explorer\Toolbar,LinksFolderName = Odkazy
R3 – URLSearchHook: UrlSearchHook Class –
{00000000–6E41–4FD3–8538–502F5495E5FC} – C:\Program
Files\Ask.com\GenericAskToolbar.dll
O2 – BHO: AcroIEHlprObj Class –
{06849E9F-C8D7–4D59-B87D-784B7D6BE0B3} – C:\Program Files\Adobe\Acrobat
7.0\ActiveX\AcroIEHelper.dll
O2 – BHO: CrossriderApp0005060 –
{11111111–1111–1111–1111–110011501160} – C:\Program Files\Savings
Sidekick\Savings Sidekick.dll
O2 – BHO: Groove GFS Browser Helper –
{72853161–30C5–4D22-B7F9–0BBC1D38A37E} –
C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 – BHO: uTorrentControl_v2 –
{7473b6bd-4691–4744-a82b-7854eb3d70b6} – C:\Program
Files\uTorrentControl_v2\prxtbuTor.dll
O2 – BHO: Java™ Plug-In SSV Helper –
{761497BB-D6F0–462C-B6EB-D4DAF1D92D43} – C:\Program
Files\Java\jre6\bin\ssv.dll
O2 – BHO: avast! WebRep – {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} –
C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 – BHO: Ask Toolbar BHO – {D4027C7F-154A-4066-A1AD-4243D8127440} –
C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 – BHO: Java™ Plug-In 2 SSV Helper –
{DBC80044-A445–435b-BC74–9C25C1C588A9} – C:\Program
Files\Java\jre6\bin\jp2ssv.dll
O2 – BHO: JQSIEStartDetectorImpl –
{E7E6F031–17CE-4C07-BC86-EABFE594F69C} – C:\Program
Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 – Toolbar: avast! WebRep – {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} –
C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O3 – Toolbar: Ask Toolbar – {D4027C7F-154A-4066-A1AD-4243D8127440} –
C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 – Toolbar: uTorrentControl_v2 Toolbar –
{7473b6bd-4691–4744-a82b-7854eb3d70b6} – C:\Program
Files\uTorrentControl_v2\prxtbuTor.dll
O4 – HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 – HKLM\..\Run: [nwiz] nwiz.exe /install
O4 – HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE
C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 – HKLM\..\Run: [RemoteControl8] „C:\Program
Files\CyberLink\PowerDVD8\PDVD8Serv.exe“
O4 – HKLM\..\Run: [PDVD8LanguageShortcut] „C:\Program
Files\CyberLink\PowerDVD8\Language\Language.exe“
O4 – HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common
Files\Nero\Lib\NeroCheck.exe
O4 – HKLM\..\Run: [NBKeyScan] „C:\Program Files\Nero\Nero8\Nero
BackItUp\NBKeyScan.exe“
O4 – HKLM\..\Run: [GrooveMonitor] „C:\Program Files\Microsoft
Office\Office12\GrooveMonitor.exe“
O4 – HKLM\..\Run: [Samsung PanelMgr]
C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe /autorun
O4 – HKLM\..\Run: [4StoryPrePatch] C:\Program
Files\Gameforge4D\4Story\PrePatch.exe
O4 – HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 – HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 – HKLM\..\Run: [SunJavaUpdateSched] „C:\Program Files\Common
Files\Java\Java Update\jusched.exe“
O4 – HKLM\..\Run: [ApnUpdater] „C:\Program
Files\Ask.com\Updater\Updater.exe“
O4 – HKLM\..\Run: [avast] „C:\Program Files\Alwil
Software\Avast5\avastUI.exe“ /nogui
O4 – HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 – HKCU\..\Run: [IndxStoreSvr_{79662E04–7C6C-4d9f-84C7–88D8A56B10AA}]
„C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe“
ASO-616B5711–6DAE-4795-A05F-39A1E5104020
O4 – HKCU\..\Run: [dllhost] C:\Defrag.exe
O4 – HKCU\..\Run: [Skype] „C:\Program Files\Skype\Phone\Skype.exe“
/minimized /regrun
O4 – HKCU\..\Run: [Google Update] „C:\Documents and Settings\Tomáš
Čevela\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe“
/c
O4 – HKCU\..\Run: [GameCenterMailRu] „C:\Documents and Settings\Tomáš
Čevela\Local Settings\Data
aplikací\Mail.Ru\GameCenter\GameCenter@Mail.Ru.exe“ -autostart
O4 – HKCU\..\Run: [uTorrent] „C:\Program Files\uTorrent\uTorrent.exe“
/MINIMIZED
O4 – HKCU\..\Run: [DAEMON Tools Lite] „C:\Program Files\DAEMON Tools
Lite\DTLite.exe“ -autorun
O4 – HKCU\..\Run: [Facebook Update] „C:\Documents and Settings\Tomáš
Čevela\Local Settings\Data
aplikací\Facebook\Update\FacebookUpdate.exe“ /c /nocrashserver
O4 – HKCU\..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media
Booster\PMB.exe
O4 – HKCU\..\Run: [Microsoft Windows Update] C:\Documents and
Settings\Tomáš Čevela\76968780866536342\winsvc.exe
O4 – HKCU\..\Run: [Windows Service] C:\Documents and Settings\Tomáš
Čevela\75439967573920484\winsvr.exe
O4 – HKLM\..\Policies\Explorer\Run: [4841]
C:\DOCUME~1\ALLUSE~1\LOCALS~1\Temp\msoaiu.com
O4 – HKUS\S-1–5–19\..\Run: [CTFMON.EXE]
C:\WINDOWS\system32\CTFMON.EXE (User ‚LOCAL SERVICE‘)
O4 – HKUS\S-1–5–20\..\Run: [CTFMON.EXE]
C:\WINDOWS\system32\CTFMON.EXE (User ‚NETWORK SERVICE‘)
O4 – HKUS\S-1–5–18\..\Run: [CTFMON.EXE]
C:\WINDOWS\system32\CTFMON.EXE (User ‚SYSTEM‘)
O4 – HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
(User ‚Default user‘)
O4 – Global Startup: Ralink Wireless Utility.lnk = C:\Program
Files\RALINK\Common\RaUI.exe
O8 – Extra context menu item: &Search – http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?s=100000349&p=ZNxdm119YYCZ&si=71080&a=t_xZTIBMfEE6W1Wr.ICPrQ&n=2011071512
O8 – Extra context menu item: E&xportovat do aplikace Microsoft
Excel – res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 – Extra button: Odeslat do aplikace OneNote –
{2670000A-7350–4f3c-8081–5663EE0C6C49} –
C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 – Extra ‚Tools‘ menuitem: Od&eslat do aplikace OneNote –
{2670000A-7350–4f3c-8081–5663EE0C6C49} –
C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 – Extra button: Research –
{92780B25–18CC-41C8-B9BE-3C9C571A8263} –
C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 – Extra button: (no name) –
{e2e2dd38-d088–4134–82b7-f2ba38496583} – C:\WINDOWS\Network
Diagnostic\xpnetdiag.exe
O9 – Extra ‚Tools‘ menuitem: @xpsp3res.dll,–20001 –
{e2e2dd38-d088–4134–82b7-f2ba38496583} – C:\WINDOWS\Network
Diagnostic\xpnetdiag.exe
O9 – Extra button: Messenger –
{FB5F1910-F110–11d2-BB9E-00C04F795683} – C:\Program
Files\Messenger\msmsgs.exe
O9 – Extra ‚Tools‘ menuitem: Windows Messenger –
{FB5F1910-F110–11d2-BB9E-00C04F795683} – C:\Program
Files\Messenger\msmsgs.exe
O14 – IERESET.INF: START_PAGE_URL=http://www.atcomp.cz
O16 – DPF: {D27CDB6E-AE6D-11CF-96B8–444553540000} (Shockwave Flash
Object) – http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 – Protocol: grooveLocalGWS –
{88FED34C-F0CA-4636-A375–3CB6248B04CD} –
C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 – Protocol: skype4com –
{FFC8B962–9B40–4DFF-9458–1830C7DD7F5D} –
C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 – SharedTaskScheduler: Browseui preloader –
{438755C2-A8BA-11D1-B96B-00A0C90312E1} –
C:\WINDOWS\system32\browseui.dll
O22 – SharedTaskScheduler: Proces mezipaměti kategorií součástí –
{8C7461EF-2B13–11d2-BE35–3078302C2030} –
C:\WINDOWS\system32\browseui.dll
O23 – Service: avast! Antivirus – AVAST Software – C:\Program
Files\Alwil Software\Avast5\AvastSvc.exe
O23 – Service: Služba Google Update (gupdate) (gupdate) – Google
Inc. – C:\Program Files\Google\Update\GoogleUpdate.exe
O23 – Service: Služba Google Update (gupdatem) (gupdatem) – Google
Inc. – C:\Program Files\Google\Update\GoogleUpdate.exe
O23 – Service: InstallDriver Table Manager (IDriverT) – Macrovision
Corporation – C:\Program Files\Common Files\InstallShield\Driver\11\Intel
32\IDriverT.exe
O23 – Service: Java Quick Starter (JavaQuickStarterService) – Sun
Microsystems, Inc. – C:\Program Files\Java\jre6\bin\jqs.exe
O23 – Service: Nero BackItUp Scheduler 3 – Nero AG – C:\Program
Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 – Service: NMIndexingService – Nero AG – C:\Program Files\Common
Files\Nero\Lib\NMIndexingService.exe
O23 – Service: NVIDIA Display Driver Service (NVSvc) – NVIDIA
Corporation – C:\WINDOWS\system32\nvsvc32.exe
O23 – Service: PLFlash DeviceIoControl Service – Prolific Technology
Inc. – C:\WINDOWS\system32\IoctlSvc.exe
O23 – Service: Cyberlink RichVideo Service(CRVS) (RichVideo) – Unknown
owner – C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 – Service: Skype Updater (SkypeUpdate) – Skype Technologies –
C:\Program Files\Skype\Updater\Updater.exe
--
End of file – 11341 bytes
zde to je :D
