Katastrofálně pomalý internet

[polsat]

Prosím o pomoc s vyhledáním zaškodníka, mám log z hjt, tak doufám že to není problém.


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:17:37, on 16.7.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\slavek\Data aplikací\dwm.exe
C:\DOCUME~1\slavek\LOCALS~1\Temp\csrss.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\ASUS\AASP\1.00.23\aaCenter.exe
C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\update.tray-7-0\svchost.exe
C:\Documents and Settings\slavek\Data aplikací\Microsoft\conhost.exe
C:\WINDOWS\l1rezerv.exe
C:\WINDOWS\systemup.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSI\Bluetooth Software\bin\btwdins.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\update.5.0\svchost.exe
C:\WINDOWS\update.2\svchost.exe
C:\WINDOWS\update.5.0\svchost.exe
C:\WINDOWS\sysdriver32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\update.1\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\update.2\svchost.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\ICQ7.5\ICQ.exe
C:\Program Files\MSI\Bluetooth Software\BTTray.exe
C:\PROGRA~1\MSI\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\hjt\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/#utm_source=icq&u ... um=generic
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:50848
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
F3 - REG:win.ini: load=C:\DOCUME~1\slavek\LOCALS~1\Temp\csrss.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\JM\JMInsIDE.exe
O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidSetup.exe boot
O4 - HKLM\..\Run: [AsusServiceProvider] C:\Program Files\ASUS\AASP\1.00.23\aaCenter.exe
O4 - HKLM\..\Run: [AsusStartupHelp] C:\Program Files\ASUS\AASP\1.00.23\AsRunHelp.exe
O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [wxpdrv] C:\WINDOWS\services32.exe
O4 - HKLM\..\Run: [tray_ico0] C:\WINDOWS\update.tray-7-0\svchost.exe
O4 - HKLM\..\Run: [8474087.exe] "C:\WINDOWS\TEMP\8474087.exe"
O4 - HKLM\..\Run: [sysdriver32.exe] "C:\WINDOWS\sysdriver32.exe" rezerv
O4 - HKLM\..\Run: [sysdriver32_.exe] "C:\WINDOWS\sysdriver32_.exe" rezerv
O4 - HKLM\..\Run: [3120024.exe] "C:\DOCUME~1\slavek\LOCALS~1\Temp\3120024.exe"
O4 - HKLM\..\Run: [conhost] C:\Documents and Settings\slavek\Data aplikací\Microsoft\conhost.exe
O4 - HKLM\..\Run: [8907344.exe] "C:\WINDOWS\TEMP\8907344.exe"
O4 - HKLM\..\Run: [l1rezerv.exe] "C:\WINDOWS\l1rezerv.exe"
O4 - HKLM\..\Run: [systemup] "C:\WINDOWS\systemup.exe" stand
O4 - HKLM\..\Run: [143150.exe] "C:\WINDOWS\TEMP\143150.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [EPSON Stylus DX7400 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE /FU "C:\WINDOWS\TEMP\E_SF1.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.5\ICQ.exe" silent loginmode=4
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\MSI\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{3F781C49-F97B-472E-9DDA-BF0A13C2CE0D}: NameServer = 82.100.26.35,82.100.26.1
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\MSI\Bluetooth Software\bin\btwdins.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: srvbtcclient - Unknown owner - C:\WINDOWS\update.5.0\svchost.exe
O23 - Service: srviecheck - Unknown owner - C:\WINDOWS\update.2\svchost.exe
O23 - Service: srvsysdriver32 - Unknown owner - C:\WINDOWS\sysdriver32.exe
O23 - Service: wxpdrivers - Unknown owner - C:\WINDOWS\update.1\svchost.exe

--
End of file - 7496 bytes

[vyosek]

Zdravim a pekny den preji

Tam toho je, Vy jste se dal na chov konicku trojskych Mate tam celou zoo i s babkou pokladni

Nejak nevidim antivir, jaky pouzivate

Dejte prosim log z RSIT - viz muj podpis - je podrobnejsi nez HJT

[polsat]

Logfile of random's system information tool 1.09 (written by random/random)
Run by slavek at 2011-07-16 10:53:33
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 134 GB (88%) free of 153 GB
Total RAM: 1023 MB (63% free)

HijackThis download failed

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\slavek\Data aplikací\Mozilla\Firefox\Profiles\y5dqa2c4.default

prefs.js - "browser.startup.homepage" - "http://www.centrum.cz/#utm_source=icq&u ... um=generic"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.2.6&q="

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\slavek\Data aplikací\Mozilla\Firefox\Profiles\y5dqa2c4.default\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}

C:\Documents and Settings\slavek\Data aplikací\Mozilla\Firefox\Profiles\y5dqa2c4.default\searchplugins\
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-07-11 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-07-11 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-11-21 1054520]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2006-12-18 868352]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2006-07-13 729088]
"JMB36X IDE Setup"=C:\WINDOWS\JM\JMInsIDE.exe [2006-10-30 36864]
"JMB36X Configure"=C:\WINDOWS\system32\JMRaidSetup.exe [2006-10-30 1953792]
"AsusServiceProvider"=C:\Program Files\ASUS\AASP\1.00.23\aaCenter.exe [2007-01-05 597504]
"AsusStartupHelp"=C:\Program Files\ASUS\AASP\1.00.23\AsRunHelp.exe [2006-12-29 363008]
"Ai Nap"=C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe [2007-01-11 1423360]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe /nogui []
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"wxpdrv"=C:\WINDOWS\services32.exe []
"tray_ico"= []
"tray_ico0"=C:\WINDOWS\update.tray-7-0\svchost.exe [2011-07-14 1094144]
"tray_ico1"= []
"tray_ico2"= []
"tray_ico3"= []
"tray_ico4"= []
"8474087.exe"=C:\WINDOWS\TEMP\8474087.exe [2011-07-14 224768]
"sysdriver32.exe"=C:\WINDOWS\sysdriver32.exe [2011-07-14 224768]
"sysdriver32_.exe"=C:\WINDOWS\sysdriver32_.exe [2011-07-14 224768]
"3120024.exe"=C:\DOCUME~1\slavek\LOCALS~1\Temp\3120024.exe []
"conhost"=C:\Documents and Settings\slavek\Data aplikací\Microsoft\conhost.exe [2011-07-15 169472]
"8907344.exe"=C:\WINDOWS\TEMP\8907344.exe [2011-07-14 224768]
"l1rezerv.exe"=C:\WINDOWS\l1rezerv.exe [2011-07-14 110592]
"systemup"=C:\WINDOWS\systemup.exe [2011-07-14 114176]
"143150.exe"=C:\WINDOWS\TEMP\143150.exe [2011-07-15 483328]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
""= []
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"EPSON Stylus DX7400 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE [2007-04-12 182272]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"ICQ"=C:\Program Files\ICQ7.5\ICQ.exe [2011-07-12 124216]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
BTTray.lnk - C:\Program Files\MSI\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2007-03-15 114688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wxpdrivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\wxpdrivers]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
"EnableSecureUIAPaths"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"
"C:\Documents and Settings\slavek\Dokumenty\Stažené soubory\Flash-Player.exe"="C:\Documents and Settings\slavek\Dokumenty\Stažené soubory\Flash-Player.exe:*:Enabled:C:\Documents and Settings\slavek\Dokumenty\Stažené soubory\Flash-Player.exe"
"C:\WINDOWS\update.1\svchost.exe"="C:\WINDOWS\update.1\svchost.exe:*:Enabled:C:\WINDOWS\update.1\svchost.exe"
"C:\WINDOWS\update.tray-7-0\svchost.exe"="C:\WINDOWS\update.tray-7-0\svchost.exe:*:Enabled:C:\WINDOWS\update.tray-7-0\svchost.exe"
"C:\WINDOWS\update.2\svchost.exe"="C:\WINDOWS\update.2\svchost.exe:*:Enabled:C:\WINDOWS\update.2\svchost.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

[vyosek]

Log neni kompletni

[polsat]

tak a uz to zase jede
tady je jeste listr vytvorenejch souboru ale jelikoz sem ted preinstalovaval win tak je to docela dlouhej list


===List of files/folders created in the last 1 month======

2011-07-16 10:53:06 ----D---- C:\rsit
2011-07-16 10:53:06 ----D---- C:\Program Files\trend micro
2011-07-16 09:34:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2011-07-16 09:34:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2011-07-16 09:34:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2011-07-16 09:34:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2011-07-16 09:34:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2011-07-16 09:34:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2011-07-16 09:34:24 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2011-07-16 09:34:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2011-07-16 09:34:17 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2011-07-16 09:34:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2011-07-16 09:34:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2011-07-16 09:34:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2011-07-16 09:33:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2011-07-16 09:33:54 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2011-07-16 09:33:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2530548$
2011-07-16 09:33:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2011-07-16 09:33:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2510581$
2011-07-16 09:33:20 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2011-07-16 09:33:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2476490$
2011-07-16 09:33:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2503665$
2011-07-16 09:33:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2011-07-16 09:32:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2011-07-16 09:32:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$
2011-07-16 09:32:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2011-07-16 09:32:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2524375$
2011-07-16 09:32:26 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2011-07-16 09:32:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2011-07-16 09:32:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2412687$
2011-07-16 09:29:20 ----SHD---- C:\Config.Msi
2011-07-16 09:28:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2508272$
2011-07-16 09:28:12 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2011-07-16 09:28:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276$
2011-07-16 09:28:04 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2011-07-16 09:27:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2507618$
2011-07-16 09:27:48 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2011-07-16 09:27:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2011-07-16 09:27:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2011-07-16 09:27:26 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2011-07-16 09:27:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2011-07-16 09:25:14 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2011-07-16 09:25:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893$
2011-07-16 09:25:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2011-07-16 09:25:01 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2011-07-16 09:24:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2541763$
2011-07-16 09:24:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2544521$
2011-07-16 09:24:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2555917$
2011-07-16 09:24:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2011-07-16 09:24:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2011-07-16 09:24:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2011-07-16 09:24:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2011-07-15 21:49:57 ----D---- C:\Program Files\hjt
2011-07-15 19:37:54 ----A---- C:\Documents and Settings\slavek\Data aplikací\dwm.exe
2011-07-15 19:26:31 ----A---- C:\WINDOWS\system32\wmpns.dll
2011-07-15 19:26:05 ----D---- C:\WINDOWS\Prefetch
2011-07-15 19:23:57 ----HDC---- C:\WINDOWS\$NtUninstallKB982381$
2011-07-15 19:23:52 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2011-07-15 19:23:48 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2011-07-15 19:23:43 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2011-07-15 19:23:39 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2011-07-15 19:23:35 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2011-07-15 19:23:31 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2011-07-15 19:23:27 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2011-07-15 19:23:23 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2011-07-15 19:23:19 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2011-07-15 19:23:15 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2011-07-15 19:23:12 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2011-07-15 19:23:07 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2011-07-15 19:23:02 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2011-07-15 19:22:58 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2011-07-15 19:22:53 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2011-07-15 19:22:48 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2011-07-15 19:22:45 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2011-07-15 19:22:41 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2011-07-15 19:22:37 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2011-07-15 19:22:32 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2011-07-15 19:22:28 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2011-07-15 19:22:25 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2011-07-15 19:22:20 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2011-07-15 19:22:15 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2011-07-15 19:22:11 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2011-07-15 19:22:08 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2011-07-15 19:22:04 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2011-07-15 19:22:00 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2011-07-15 19:21:56 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2011-07-15 19:21:53 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2011-07-15 19:21:48 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2011-07-15 19:21:43 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2011-07-15 19:21:39 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2011-07-15 19:21:34 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2011-07-15 19:21:29 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2011-07-15 19:21:25 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2011-07-15 19:21:16 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2011-07-15 19:21:12 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2011-07-15 19:21:08 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2011-07-15 19:21:04 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2011-07-15 19:21:00 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2011-07-15 19:20:57 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2011-07-15 19:20:53 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2011-07-15 19:20:49 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2011-07-15 19:20:44 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2011-07-15 19:20:37 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2011-07-15 19:20:33 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2011-07-15 19:20:28 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$
2011-07-15 19:20:24 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2011-07-15 19:20:20 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2011-07-15 19:20:16 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2011-07-15 19:20:11 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2011-07-15 19:20:07 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2011-07-15 19:20:03 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2011-07-15 19:19:59 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-07-15 19:19:55 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2011-07-15 19:19:51 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2011-07-15 19:19:48 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2011-07-15 19:19:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2011-07-15 19:16:56 ----D---- C:\WINDOWS\system32\cs-cz
2011-07-15 19:16:55 ----D---- C:\WINDOWS\system32\cs
2011-07-15 19:16:55 ----D---- C:\WINDOWS\system32\bits
2011-07-15 19:16:55 ----D---- C:\WINDOWS\l2schemas
2011-07-15 19:13:49 ----D---- C:\WINDOWS\network diagnostic
2011-07-15 19:10:11 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2011-07-15 02:12:38 ----D---- C:\Program Files\AMD APP
2011-07-15 02:12:33 ----D---- C:\Program Files\ATI
2011-07-15 02:01:58 ----D---- C:\ATI
2011-07-15 00:09:13 ----D---- C:\WINDOWS\ufa
2011-07-14 23:07:56 ----A---- C:\WINDOWS\btc_client_iplist.txt
2011-07-14 23:07:50 ----A---- C:\WINDOWS\iecheck_iplist.txt
2011-07-14 23:07:50 ----A---- C:\WINDOWS\ddh_iplist.txt
2011-07-14 23:07:44 ----A---- C:\WINDOWS\systemup.exe
2011-07-14 23:07:43 ----A---- C:\WINDOWS\l1rezerv.exe
2011-07-14 23:07:35 ----HD---- C:\WINDOWS\update.5.0
2011-07-14 23:07:33 ----D---- C:\Microsoft
2011-07-14 23:07:25 ----HD---- C:\WINDOWS\update.2
2011-07-14 23:07:22 ----A---- C:\WINDOWS\gbot111.exe
2011-07-14 23:07:19 ----A---- C:\WINDOWS\sysdriver32_.exe
2011-07-14 23:07:19 ----A---- C:\WINDOWS\iplist.txt
2011-07-14 23:07:05 ----A---- C:\WINDOWS\sysdriver32.exe
2011-07-14 23:06:38 ----A---- C:\WINDOWS\front_ip_list.txt
2011-07-14 23:06:36 ----D---- C:\WINDOWS\av_ico
2011-07-14 23:05:06 ----HD---- C:\WINDOWS\update.1
2011-07-14 23:04:54 ----HD---- C:\WINDOWS\update.tray-7-0-lnk
2011-07-14 23:04:54 ----HD---- C:\WINDOWS\update.tray-7-0
2011-07-14 19:57:53 ----A---- C:\WINDOWS\winlog-ids.txt
2011-07-14 19:57:53 ----A---- C:\WINDOWS\winlog-dirs.txt
2011-07-13 18:02:39 ----HDC---- C:\WINDOWS\$NtUninstallKB961118_0$
2011-07-13 17:59:00 ----HDC---- C:\WINDOWS\$NtUninstallKB925720$
2011-07-13 11:42:06 ----D---- C:\Program Files\MSI
2011-07-13 11:41:33 ----A---- C:\WINDOWS\system32\drivers\frmupgr.sys
2011-07-13 11:41:32 ----A---- C:\WINDOWS\system32\drivers\btwusb.sys
2011-07-13 11:41:29 ----RA---- C:\WINDOWS\system32\btw_ci.dll
2011-07-13 11:40:54 ----D---- C:\WINDOWS\system32\appmgmt
2011-07-13 10:40:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2011-07-12 21:09:17 ----D---- C:\WINDOWS\system32\XPSViewer
2011-07-12 21:09:13 ----D---- C:\Program Files\MSBuild
2011-07-12 21:09:12 ----D---- C:\WINDOWS\system32\en-US
2011-07-12 21:09:08 ----D---- C:\Program Files\Reference Assemblies
2011-07-12 21:08:40 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2011-07-12 21:08:40 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2011-07-12 21:08:40 ----N---- C:\WINDOWS\system32\prntvpt.dll
2011-07-12 21:06:33 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2011-07-12 21:06:28 ----D---- C:\Program Files\MSXML 6.0
2011-07-12 13:53:29 ----D---- C:\Program Files\ICQ7.5
2011-07-12 03:01:19 ----HDC---- C:\WINDOWS\$NtUninstallKB970430_0$
2011-07-12 03:01:03 ----HDC---- C:\WINDOWS\$NtUninstallKB971737_0$
2011-07-11 23:38:57 ----D---- C:\Program Files\QIP
2011-07-11 22:45:12 ----D---- C:\Program Files\ICQ6Toolbar
2011-07-11 22:45:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\ICQ
2011-07-11 22:44:23 ----D---- C:\Documents and Settings\slavek\Data aplikací\ICQ
2011-07-11 22:42:41 ----D---- C:\Documents and Settings\slavek\Data aplikací\WinRAR
2011-07-11 22:42:27 ----D---- C:\Program Files\WinRAR
2011-07-11 22:41:56 ----D---- C:\Program Files\Common Files\Adobe
2011-07-11 22:41:56 ----D---- C:\Program Files\Adobe
2011-07-11 22:41:23 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-07-11 22:38:36 ----D---- C:\Documents and Settings\slavek\Data aplikací\vlc
2011-07-11 22:37:56 ----D---- C:\Program Files\VideoLAN
2011-07-11 13:17:52 ----A---- C:\WINDOWS\system32\MRT.exe
2011-07-11 12:20:37 ----HDC---- C:\WINDOWS\$NtUninstallKB973507_0$
2011-07-11 11:42:21 ----D---- C:\WINDOWS\Sun
2011-07-11 11:42:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2011-07-11 11:42:11 ----D---- C:\Program Files\Common Files\Java
2011-07-11 11:41:49 ----A---- C:\WINDOWS\system32\javaws.exe
2011-07-11 11:41:49 ----A---- C:\WINDOWS\system32\javaw.exe
2011-07-11 11:41:49 ----A---- C:\WINDOWS\system32\java.exe
2011-07-11 11:41:49 ----A---- C:\WINDOWS\system32\deployJava1.dll
2011-07-11 11:41:33 ----D---- C:\Program Files\Java
2011-07-11 11:40:42 ----D---- C:\Documents and Settings\slavek\Data aplikací\Sun
2011-07-11 10:16:19 ----HDC---- C:\WINDOWS\$NtUninstallKB980218_0$
2011-07-11 10:16:08 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$
2011-07-11 10:15:57 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$
2011-07-11 10:15:46 ----HDC---- C:\WINDOWS\$NtUninstallKB959426_0$
2011-07-11 10:15:36 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2011-07-11 10:15:26 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
2011-07-11 10:15:11 ----HDC---- C:\WINDOWS\$NtUninstallKB960859_0$
2011-07-11 10:14:58 ----HDC---- C:\WINDOWS\$NtUninstallKB971468_0$
2011-07-11 10:14:44 ----HDC---- C:\WINDOWS\$NtUninstallKB979683_0$
2011-07-11 10:14:35 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2011-07-11 10:14:27 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2011-07-11 10:14:21 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2011-07-11 10:14:11 ----HDC---- C:\WINDOWS\$NtUninstallKB980232_0$
2011-07-11 10:14:00 ----HDC---- C:\WINDOWS\$NtUninstallKB981350$
2011-07-11 10:13:49 ----HDC---- C:\WINDOWS\$NtUninstallKB955759_0$
2011-07-11 10:13:29 ----HDC---- C:\WINDOWS\$NtUninstallKB974318_0$
2011-07-11 10:13:19 ----HDC---- C:\WINDOWS\$NtUninstallKB969059_0$
2011-07-11 10:13:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593_0$
2011-07-11 10:12:58 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_0$
2011-07-11 10:12:49 ----HDC---- C:\WINDOWS\$NtUninstallKB978037_0$
2011-07-11 10:12:40 ----HDC---- C:\WINDOWS\$NtUninstallKB975713_0$
2011-07-11 10:12:31 ----HDC---- C:\WINDOWS\$NtUninstallKB971657_0$
2011-07-11 10:12:21 ----HDC---- C:\WINDOWS\$NtUninstallKB978338_0$
2011-07-11 10:12:12 ----HDC---- C:\WINDOWS\$NtUninstallKB960225_0$
2011-07-11 10:12:01 ----HDC---- C:\WINDOWS\$NtUninstallKB972270_0$
2011-07-11 10:11:52 ----HDC---- C:\WINDOWS\$NtUninstallKB974112_0$
2011-07-11 10:11:22 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_0$
2011-07-11 10:11:11 ----HDC---- C:\WINDOWS\$NtUninstallKB956844_0$
2011-07-11 10:11:03 ----HDC---- C:\WINDOWS\$NtUninstallKB961501_0$
2011-07-11 10:10:54 ----HDC---- C:\WINDOWS\$NtUninstallKB975561_0$
2011-07-11 10:10:46 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2011-07-11 10:10:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973869_0$
2011-07-11 10:10:32 ----HDC---- C:\WINDOWS\$NtUninstallKB975025_0$
2011-07-11 10:10:24 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2011-07-11 10:10:16 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_0$
2011-07-11 10:10:08 ----HDC---- C:\WINDOWS\$NtUninstallKB974571_0$
2011-07-11 10:10:00 ----HDC---- C:\WINDOWS\$NtUninstallKB975560_0$
2011-07-11 10:09:49 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2011-07-11 10:09:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_0$
2011-07-11 10:09:32 ----HDC---- C:\WINDOWS\$NtUninstallKB950762_0$
2011-07-11 10:09:24 ----HDC---- C:\WINDOWS\$NtUninstallKB981793$
2011-07-11 10:09:18 ----HDC---- C:\WINDOWS\$NtUninstallKB978601_0$
2011-07-11 10:09:10 ----HDC---- C:\WINDOWS\$NtUninstallKB979559_0$
2011-07-11 10:09:02 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_0$
2011-07-11 10:08:53 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2011-07-11 10:08:42 ----HDC---- C:\WINDOWS\$NtUninstallKB967715_0$
2011-07-11 10:08:34 ----HDC---- C:\WINDOWS\$NtUninstallKB974392_0$
2011-07-11 10:08:22 ----HDC---- C:\WINDOWS\$NtUninstallKB977914_0$
2011-07-11 10:08:09 ----HDC---- C:\WINDOWS\$NtUninstallKB951748_0$
2011-07-11 10:08:01 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2011-07-11 10:07:52 ----HDC---- C:\WINDOWS\$NtUninstallKB978542_0$
2011-07-11 10:07:44 ----HDC---- C:\WINDOWS\$NtUninstallKB970238_0$
2011-07-11 10:07:37 ----HDC---- C:\WINDOWS\$NtUninstallKB979309_0$
2011-07-11 10:07:30 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2011-07-11 10:07:24 ----HDC---- C:\WINDOWS\$NtUninstallKB979482_0$
2011-07-11 10:07:17 ----HDC---- C:\WINDOWS\$NtUninstallKB978706_0$
2011-07-11 10:07:08 ----D---- C:\WINDOWS\ServicePackFiles
2011-07-11 10:07:06 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2011-07-11 10:06:58 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$
2011-07-11 10:06:50 ----HDC---- C:\WINDOWS\$NtUninstallKB973815_0$
2011-07-11 10:06:41 ----HDC---- C:\WINDOWS\$NtUninstallKB975562_0$
2011-07-11 10:06:29 ----HDC---- C:\WINDOWS\$NtUninstallKB971032$
2011-07-11 10:06:20 ----HDC---- C:\WINDOWS\$NtUninstallKB958644_0$
2011-07-11 10:06:12 ----HDC---- C:\WINDOWS\$NtUninstallKB955069_0$
2011-07-11 10:06:03 ----HDC---- C:\WINDOWS\$NtUninstallKB979402_WM9L$
2011-07-11 10:05:57 ----HDC---- C:\WINDOWS\$NtUninstallKB956802_0$
2011-07-11 10:05:31 ----HDC---- C:\WINDOWS\$NtUninstallKB982381_0$
2011-07-11 10:05:20 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2011-07-11 10:05:11 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$
2011-07-11 10:05:03 ----HDC---- C:\WINDOWS\$NtUninstallKB975467_0$
2011-07-11 10:04:50 ----HDC---- C:\WINDOWS\$NtUninstallKB968389_0$
2011-07-10 03:37:02 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2011-07-10 03:37:02 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2011-07-10 03:37:02 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2011-07-10 03:37:01 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2011-07-10 03:37:01 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2011-07-10 03:37:01 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2011-07-10 03:36:58 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2011-07-10 03:36:58 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2011-07-10 03:36:58 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2011-07-10 03:36:57 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2011-07-10 03:36:57 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2011-07-10 03:36:56 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2011-07-10 03:36:55 ----N---- C:\WINDOWS\system32\drivers\nv4_mini.sys
2011-07-10 03:36:55 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2011-07-10 03:36:53 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2011-07-10 03:36:53 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2011-07-10 03:36:53 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2011-07-10 03:36:52 ----N---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2011-07-10 03:36:47 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2011-07-10 03:36:47 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2011-07-10 03:36:47 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2011-07-10 03:35:03 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2011-07-10 03:35:03 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2011-07-10 03:35:03 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2011-07-10 03:35:03 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2011-07-10 03:35:03 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2011-07-10 03:35:03 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2011-07-10 03:35:03 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2011-07-10 03:35:03 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2011-07-10 03:35:03 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2011-07-10 03:35:03 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2011-07-10 03:35:02 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2011-07-10 03:35:02 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2011-07-10 03:35:02 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2011-07-10 03:35:02 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2011-07-10 03:35:02 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2011-07-10 03:35:02 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2011-07-10 03:35:02 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2011-07-10 03:35:02 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2011-07-10 03:35:02 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2011-07-10 03:35:02 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2011-07-10 03:35:02 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2011-07-10 03:09:04 ----N---- C:\WINDOWS\system32\browserchoice.exe
2011-07-10 03:06:56 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2011-07-10 03:04:48 ----N---- C:\WINDOWS\system32\tzchange.exe
2011-07-10 03:00:25 ----D---- C:\WINDOWS\system32\PreInstall
2011-07-10 03:00:22 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2011-07-09 23:36:23 ----D---- C:\Documents and Settings\slavek\Data aplikací\Macromedia
2011-07-09 23:36:23 ----D---- C:\Documents and Settings\slavek\Data aplikací\Adobe
2011-07-09 23:31:48 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2011-07-09 18:05:55 ----A---- C:\WINDOWS\system32\h323log.txt
2011-07-09 18:05:53 ----A---- C:\WINDOWS\system32\wpa.bak
2011-07-09 18:04:09 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2011-07-09 18:03:08 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2011-07-09 18:02:11 ----A---- C:\WINDOWS\system32\usbui.dll
2011-07-09 18:01:14 ----A---- C:\WINDOWS\imsins.BAK
2011-07-09 18:01:12 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-07-09 18:01:11 ----SHD---- C:\WINDOWS\Installer
2011-07-09 18:01:11 ----D---- C:\Program Files\Common Files\ODBC
2011-07-09 18:01:11 ----A---- C:\WINDOWS\ODBCINST.INI
2011-07-09 18:01:09 ----D---- C:\Program Files\Common Files\SpeechEngines
2011-07-09 18:01:08 ----RD---- C:\Program Files
2011-07-09 18:01:08 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-07-09 18:01:08 ----D---- C:\Program Files\Common Files
2011-07-09 18:01:06 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2011-07-09 18:01:06 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2011-07-09 18:01:06 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2011-07-09 18:01:05 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2011-07-09 18:01:05 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2011-07-09 18:01:05 ----RA---- C:\WINDOWS\system32\kbdur.dll
2011-07-09 18:01:05 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2011-07-09 18:01:05 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2011-07-09 18:01:05 ----RA---- C:\WINDOWS\system32\kbdru.dll
2011-07-09 18:01:05 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2011-07-09 18:01:05 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2011-07-09 18:01:05 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2011-07-09 18:01:05 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2011-07-09 18:01:05 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2011-07-09 18:01:04 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2011-07-09 18:01:03 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2011-07-09 18:01:03 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2011-07-09 18:01:03 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2011-07-09 18:01:03 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2011-07-09 18:01:03 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2011-07-09 18:01:03 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2011-07-09 18:01:03 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2011-07-09 18:01:02 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2011-07-09 18:01:02 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2011-07-09 18:01:02 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2011-07-09 18:01:02 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2011-07-09 18:01:02 ----RA---- C:\WINDOWS\system32\kbdest.dll

[vyosek]

Proc ho davate po takovych kousickach

Uploadnete mi cely log sem prosim http://vyosek.ic.cz/havet/uploader.php

[polsat]

kdyz davam min znaku tak to de spis poslat nez kdyz je to dlouhy, nevim porad mi to blbne...jeste zbytek ale ten uz to nechce dat :/

[vyosek]

Dejte mi jej ke me na uploader, ja se na nej podivam na celej...

[polsat]

jo to je rozumnejsi

[polsat]

nejde mi to tam nahrat.
Připojení bylo ukončeno vzdáleným serverem

Zkontrolujte, že je adresa zadána správně nebo se požadovaný web pokuste vyhledat.

[vyosek]

Uvidime ci se nam to povede dat do kupy, ale snad ano

Spustte HJT a provedeme fixnuti polozek

• HJT najdete zde C:\Program Files\hjt\Trend Micro\HiJackThis\HiJackThis.exe
• Otevre se Vam okno, kliknete na Do a system scan only
• V dalsim okne najdete radky které jsem Vam vypsal nize, vedle nich je ctverecek, do ktereho udelate zatrzitko
• R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/#utm_source=icq&u ... um=generic
  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:50848
• Kliknete na Fix checked (vlevo dole)
• HJT se Vas zepta zda opravdu ANO, s tim souhlasite a je hotovo

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

• Pokud ho havet blokuje, pouzijte jeden z nasledujicich

  Rkill EXE:
  http://download.bleepingcomputer.com/grinler/rkill.exe
  
  Rkill SCR:
  http://download.bleepingcomputer.com/grinler/rkill.scr
  
  Rkill PIF:
  http://download.bleepingcomputer.com/grinler/rkill.pif

• Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
• Spustte tradicne dvojklikem - program probehne temer okamzite a ukonci i svou cinnost
• RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
• Ted nerestartujte PC - prisli byste o ucinek RKillu

Aplikujte exeHelper by Raktor

• Linky ke stazeni
  • COM soubor http://vyosek.ic.cz/BE/exeHelper.com
  • SCR soubor http://vyosek.ic.cz/BE/exeHelper.scr
• Utilitu staci spustit jako Spravce (klik pravym mysidlem), probehne oprava a vznikne log exehelperlog.txt

RKill i eXeHelper by mely udelat logy, vlozte mi je sem - pokud ne, nevadi

[polsat]

log z rkill se sam neulozil a ja ho zavrel :/

exeHelper by Raktor
Build 20100414
Run at 17:52:42 on 07/17/11
Now searching...
Checking for numerical processes...
Removing HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\8474087.exe
Removing HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\3120024.exe
Removing HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\8907344.exe
Removing HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\143150.exe
Checking for sysguard processes...
Checking for bad processes...
Checking for bad files...
Checking for bad registry entries...
Resetting filetype association for .exe
Resetting filetype association for .com
Resetting userinit and shell values...
Resetting policies...
--Finished--

[vyosek]

Nic se nedeje

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

[polsat]

tak tady je ten log.

ComboFix 11-07-17.02 - slavek 17.07.2011 18:04:58.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1023.584 [GMT 2:00]
Spuštěný z: c:\documents and settings\slavek\Plocha\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\slavek\Data aplikací\dwm.exe
c:\documents and settings\slavek\Data aplikací\Microsoft\conhost.exe
C:\Microsoft
c:\program files\Internet Explorer\conhost.exe
c:\windows\btc_client_iplist.txt
c:\windows\ddh_iplist.txt
c:\windows\front_ip_list.txt
c:\windows\gbot111.exe
c:\windows\iecheck_iplist.txt
c:\windows\info1
c:\windows\iplist.txt
c:\windows\l1rezerv.exe
c:\windows\loader2.exe_ok
c:\windows\proc_list1.log
c:\windows\sysdriver32.exe
c:\windows\sysdriver32_.exe
c:\windows\system32\drivers\etc\HSTS~1
c:\windows\systemup.exe
c:\windows\update.1
c:\windows\update.1\svchost.exe
c:\windows\update.2
c:\windows\update.2\svchost.exe
c:\windows\update.5.0
c:\windows\update.5.0\svchost.exe
c:\windows\winlog-dirs.txt
c:\windows\winlog-ids.txt
c:\windows\winsetupapi.log
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_SRVIECHECK
-------\Legacy_SRVSYSDRIVER32
-------\Legacy_WXPDRIVERS
-------\Service_srviecheck
-------\Service_srvsysdriver32
-------\Service_wxpdrivers
-------\Legacy_srvbtcclient
-------\Legacy_srvbtcclient
-------\Service_srvbtcclient
-------\Service_srvbtcclient
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-06-17 do 2011-07-17 )))))))))))))))))))))))))))))))
.
.
2011-07-16 08:53 . 2011-07-16 08:53 -------- d-----w- C:\rsit
2011-07-15 00:01 . 2011-07-15 00:01 -------- d-----w- C:\ATI
2011-07-09 16:01 . 2011-07-16 08:53 -------- d-----r- C:\Program Files
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-17 16:14 . 2011-07-17 16:14 169472 ----a-w- c:\windows\gbot111.exe
2011-07-17 16:13 . 2011-07-17 16:14 232960 ----a-w- c:\windows\sysdriver32_.exe
2011-07-17 16:13 . 2011-07-17 16:13 232960 ----a-w- c:\windows\sysdriver32.exe
2011-06-06 11:35 . 2006-03-02 12:00 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-05-24 21:44 . 2011-05-24 21:44 59904 ----a-w- c:\windows\system32\OVDecode.dll
2011-05-24 21:44 . 2011-05-24 21:44 51712 ----a-w- c:\windows\system32\OpenCL.dll
2011-05-24 21:43 . 2011-05-24 21:43 12798976 ----a-w- c:\windows\system32\amdocl.dll
2011-04-29 17:25 . 2006-03-02 12:00 151552 ----a-w- c:\windows\system32\schannel.dll
2011-04-29 16:19 . 2006-03-02 12:00 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-26 11:07 . 2006-03-02 12:00 33280 ----a-w- c:\windows\system32\csrsrv.dll
2011-04-26 11:07 . 2006-03-02 12:00 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-04-25 14:47 . 2006-03-02 12:00 668160 ----a-w- c:\windows\system32\wininet.dll
2011-04-25 14:47 . 2006-03-02 12:00 61952 ----a-w- c:\windows\system32\tdc.ocx
2011-04-25 14:47 . 2006-03-02 12:00 1510912 ----a-w- c:\windows\system32\shdocvw.dll
2011-04-25 14:47 . 2006-03-02 12:00 81920 ----a-w- c:\windows\system32\ieencode.dll
2011-04-25 14:43 . 2006-03-02 12:00 370176 ----a-w- c:\windows\system32\html.iec
2011-04-21 13:37 . 2006-03-02 12:00 105472 ----a-w- c:\windows\system32\drivers\mup.sys
2011-06-16 04:30 . 2011-07-09 15:39 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"ICQ"="c:\program files\ICQ7.5\ICQ.exe" [2011-07-12 124216]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-12-18 868352]
"JMB36X IDE Setup"="c:\windows\JM\JMInsIDE.exe" [2006-10-30 36864]
"JMB36X Configure"="c:\windows\system32\JMRaidSetup.exe" [2006-10-30 1953792]
"AsusServiceProvider"="c:\program files\ASUS\AASP\1.00.23\aaCenter.exe" [2007-01-05 597504]
"AsusStartupHelp"="c:\program files\ASUS\AASP\1.00.23\AsRunHelp.exe" [2006-12-29 363008]
"Ai Nap"="c:\program files\ASUS\AI Suite\AiNap\AiNap.exe" [2007-01-11 1423360]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"tray_ico0"="c:\windows\update.tray-7-0\svchost.exe" [2011-07-14 1094144]
"sysdriver32.exe"="c:\windows\sysdriver32.exe" [2011-07-17 232960]
"sysdriver32_.exe"="c:\windows\sysdriver32_.exe" [2011-07-17 232960]
"l1rezerv.exe"="c:\windows\l1rezerv.exe" [2011-07-17 110592]
"systemup"="c:\windows\systemup.exe" [2011-07-17 114176]
"5650084.exe"="c:\docume~1\slavek\LOCALS~1\Temp\5650084.exe" [2011-07-17 232960]
"6693894.exe"="c:\windows\TEMP\6693894.exe" [2011-07-17 232960]
"947531.exe"="c:\windows\TEMP\947531.exe" [2011-07-17 483328]
"conhost"="c:\program files\Internet Explorer\conhost.exe" [2011-07-17 169472]
.
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
BTTray.lnk - c:\program files\MSI\Bluetooth Software\BTTray.exe [2004-3-31 507965]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableSecureUIAPaths"= 0 (0x0)
"EnableLUA"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"FirewallOverride"=dword:00000001
"DisableThumbnailCache"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\ICQ7.5\\ICQ.exe"=
"c:\\Documents and Settings\\slavek\\Dokumenty\\Stažené soubory\\Flash-Player.exe"=
"c:\\WINDOWS\\update.tray-7-0\\svchost.exe"=
"c:\\WINDOWS\\update.2\\svchost.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
.
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [11.7.2011 22:45 247608]
R2 srvbtcclient;srvbtcclient;c:\windows\update.5.0\svchost.exe srv --> c:\windows\update.5.0\svchost.exe srv [?]
R2 srviecheck;srviecheck;c:\windows\update.2\svchost.exe srv --> c:\windows\update.2\svchost.exe srv [?]
R2 srvsysdriver32;srvsysdriver32;c:\windows\sysdriver32.exe srv --> c:\windows\sysdriver32.exe srv [?]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - SRVBTCCLIENT
*NewlyCreated* - SRVIECHECK
*NewlyCreated* - SRVSYSDRIVER32
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Send To &Bluetooth - c:\program files\MSI\Bluetooth Software\btsendto_ie_ctx.htm
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
TCP: Interfaces\{3F781C49-F97B-472E-9DDA-BF0A13C2CE0D}: NameServer = 82.100.26.35,82.100.26.1
FF - ProfilePath - c:\documents and settings\slavek\Data aplikací\Mozilla\Firefox\Profiles\y5dqa2c4.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.centrum.cz/#utm_source=icq&utm_medium=generic
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.2.6&q=
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 50848
FF - prefs.js: network.proxy.type - 1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - c:\program files\AVAST Software\Avast\ashShell.dll
HKLM-Run-avast - c:\program files\AVAST Software\Avast\avastUI.exe
HKLM-Run-wxpdrv - c:\windows\services32.exe
HKLM-Run-tray_ico - (no file)
HKLM-Run-tray_ico1 - (no file)
HKLM-Run-tray_ico2 - (no file)
HKLM-Run-tray_ico3 - (no file)
HKLM-Run-tray_ico4 - (no file)
SafeBoot-wxpdrivers
AddRemove-avast - c:\program files\AVAST Software\Avast\aswRunDll.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-07-17 18:13
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(756)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(3136)
c:\program files\Microsoft Office\OFFICE11\msohev.dll
c:\program files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\MSI\Bluetooth Software\bin\btwdins.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\progra~1\MSI\BLUETO~1\BTSTAC~1.EXE
c:\windows\update.5.0\svchost.exe
c:\windows\update.5.0\svchost.exe
c:\windows\update.2\svchost.exe
c:\windows\update.2\svchost.exe
c:\windows\gbot111.exe
c:\program files\Windows NT\dwm.exe
c:\windows\TEMP\csrss.exe
c:\windows\ufa\ufa.exe
.
**************************************************************************
.
Celkový čas: 2011-07-17 18:16:10 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-07-17 16:16
.
Před spuštěním: Volných bajtů: 140 983 021 568
Po spuštění: Volných bajtů: 142 226 751 488
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=AlwaysOff /fastdetect
.
- - End Of File - - 16EEE06F575D730E00A54350EE57FBD9

[vyosek]

Poprosim jeste o DDS dle tohoto navodu http://www.viry.cz/forum/viewtopic.php?f=24&t=81946