CLEANUP ANTIVIRUS....

[tmoravek]

konec ?

[motji]

Kolega šel spát , budete pokračovat zítra

[tmoravek]

díky moc

[Caroprd111]

Tak jsem zpět.


Pokud nemáte, přesuňte Combofix na plochu

• Otevřete si Poznámkový blok a zkopírujte do něj text z bílého okénka.

Kód: Vybrat vše

dirlook::
I:\Documents and Settings\Tom\Plocha\s\

SecCenter::
AV: CleanUp Antivirus *On-access scanning enabled* (Updated) {141E8D82-6895-4421-BD20-C78025AC44F5}
FW: CleanUp Antivirus *enabled* {16056CEC-F7B1-4786-8C20-DE57E9A1BD80}

• Uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
• Po uložení uchopte vámi vytvořený skript levým myšítkem a přesuňte ho nad ikonu Combofixu, kde ho upustíte:
  
  
• Po aplikaci na Vás vypadne další log,vložte ho sem

Může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci




Složku I:\Qoobox zazipujte pod názvem "tmoravek" a uložte na http://www.james008.net/web/pluginy/havetosberna.php


Děkuji.

[tmoravek]

DOBRÝ DEN..díky za trpělivost

[tmoravek]

ComboFix 10-03-10.08 - Tom 12.03.2010 10:10:38.6.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.2046.1709 [GMT 1:00]
Spuštěný z: i:\documents and settings\Tom\Plocha\HRY TOMINO\ComboFix.exe
Použité ovládací přepínače :: i:\documents and settings\Tom\Plocha\CFScript.txt
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-02-12 do 2010-03-12 )))))))))))))))))))))))))))))))
.

2010-03-11 21:09 . 2010-03-11 21:09 -------- dc----w- I:\_OTL
2010-03-11 20:27 . 2010-03-11 20:27 9496575 -c--a-w- I:\Qoobox.zip
2010-03-11 20:26 . 2010-03-11 20:26 233759 -c--a-w- I:\_OTM.zip
2010-03-11 19:53 . 2010-03-11 19:53 724217 -c--a-w- I:\Soubory.zip
2010-03-11 18:26 . 2010-01-07 15:07 38224 -c--a-w- i:\c\system32\drivers\mbamswissarmy.sys
2010-03-11 18:26 . 2010-03-11 18:27 -------- d-----w- i:\program files\Malwarebytes' Anti-Malware
2010-03-11 18:26 . 2010-01-07 15:07 19160 -c--a-w- i:\c\system32\drivers\mbam.sys
2010-03-11 15:48 . 2010-03-11 15:48 -------- dc----w- I:\_OTM
2010-03-11 14:26 . 2010-03-11 17:48 -------- d-----w- i:\program files\Spyware Doctor
2010-03-11 14:18 . 2010-03-11 16:21 -------- d-----w- i:\program files\trend micro
2010-03-11 14:18 . 2010-03-11 14:18 -------- dc----w- I:\rsit
2010-03-11 12:39 . 2010-03-11 13:54 -------- d-----w- i:\program files\Enigma Software Group
2010-03-10 11:39 . 2010-03-10 11:39 -------- d-----w- i:\program files\Activision
2010-03-10 11:29 . 2010-03-10 11:29 -------- dcsh--w- i:\c\ftpcache
2010-03-10 11:28 . 2010-03-10 11:28 22328 -c--a-w- i:\c\system32\drivers\PnkBstrK.sys
2010-03-10 11:28 . 2010-03-10 11:28 103736 -c--a-w- i:\c\system32\PnkBstrB.exe
2010-03-10 11:28 . 2010-03-10 11:28 66872 -c--a-w- i:\c\system32\PnkBstrA.exe
2010-03-09 19:59 . 2010-03-09 19:59 -------- d-----w- i:\program files\Free Screen To Video
2010-03-04 20:38 . 2004-08-17 13:49 221184 -c--a-w- i:\c\system32\wmpns.dll
2010-03-04 20:37 . 2010-03-04 20:37 -------- dc----w- I:\10f2fcf118b3d0875d
2010-02-28 13:02 . 2010-03-10 18:04 30 -c--a-w- i:\c\popcinfot.dat
2010-02-28 13:02 . 2010-03-01 17:13 -------- d-----w- i:\program files\PopCap Games
2010-02-28 13:02 . 2010-02-28 13:02 0 -c--a-w- i:\c\popcreg.dat
2010-02-25 14:24 . 2010-02-25 14:24 -------- d-----w- i:\program files\Alcohol Soft
2010-02-25 14:12 . 2010-02-25 14:22 691696 -c--a-w- i:\c\system32\drivers\sptd.sys
2010-02-15 21:19 . 2010-02-15 21:57 737280 -c--a-w- i:\c\iun6002.exe
2010-02-15 21:19 . 2010-02-15 21:59 -------- d-----w- i:\program files\BlueVoda Website Builder
2010-02-14 20:45 . 2004-03-25 07:06 1802240 -c----w- i:\c\UNNMP.exe
2010-02-14 20:43 . 2004-04-19 03:37 1814528 -c----w- i:\c\UNNeroVision.exe
2010-02-14 20:43 . 2001-03-08 18:30 24064 -c--a-w- i:\c\system32\msxml3a.dll
2010-02-14 20:42 . 2001-07-06 17:24 283920 -c--a-w- i:\c\system32\ImagXpr5.dll
2010-02-14 20:42 . 2001-07-06 13:41 569344 -c--a-w- i:\c\system32\imagr5.dll
2010-02-14 20:42 . 2001-07-06 11:44 544768 -c--a-w- i:\c\system32\imagx5.dll
2010-02-14 20:42 . 2001-06-26 07:15 38912 -c--a-w- i:\c\system32\picn20.dll
2010-02-14 20:42 . 2000-06-26 10:45 106496 -c--a-w- i:\c\system32\TwnLib20.dll
2010-02-14 20:42 . 2010-02-14 20:43 -------- d-----w- i:\program files\Common Files\Ahead

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-12 08:01 . 2008-10-13 14:39 -------- d-----w- i:\program files\AVG
2010-03-11 20:21 . 2010-01-08 09:49 -------- d-----w- i:\program files\Microsoft LifeCam
2010-03-11 20:21 . 2009-12-25 21:49 -------- d-----w- i:\program files\QuickTime
2010-03-11 20:21 . 2008-11-12 19:36 -------- d-----w- i:\program files\TO2SSM
2010-03-10 17:53 . 2009-12-25 21:56 -------- d-----w- i:\program files\AGEIA Technologies
2010-03-10 11:48 . 2008-10-10 22:13 -------- d--h--w- i:\program files\InstallShield Installation Information
2010-03-04 20:38 . 2009-12-25 21:48 -------- d-----w- i:\program files\Windows Media Connect 2
2010-03-02 20:33 . 2009-12-25 21:52 -------- d-----w- i:\program files\Google
2010-02-25 14:29 . 2009-05-29 13:39 -------- d-----w- i:\program files\Kalypso
2010-02-14 20:45 . 2009-12-25 21:56 -------- d-----w- i:\program files\Ahead
2010-02-10 15:23 . 2009-12-25 21:49 -------- d-----w- i:\program files\sixteen tons entertainment
2010-02-08 05:44 . 2010-02-08 05:43 -------- d-----w- i:\program files\Macromedia
2010-02-08 05:43 . 2010-02-08 05:43 -------- d-----w- i:\program files\Common Files\Macromedia
2010-02-04 06:43 . 2010-02-04 06:43 -------- d-----w- i:\program files\JPEG Imager
2010-02-01 13:05 . 2009-05-02 09:23 -------- d-----w- i:\program files\Common Files\Adobe
2010-02-01 12:50 . 2010-02-01 12:50 135168 -c--a-w- i:\c\system32\CAPI2_JNI.DLL
2010-02-01 12:32 . 2009-12-25 21:54 -------- d-----w- i:\program files\Common Files\Java
2010-02-01 12:31 . 2010-02-01 12:31 411368 -c--a-w- i:\c\system32\deploytk.dll
2010-01-27 16:35 . 2010-01-27 16:35 -------- d-----w- i:\program files\YouTube Downloader
2010-01-27 12:40 . 2009-12-25 21:52 -------- d-----w- i:\program files\FDRLab
2010-01-27 12:33 . 2010-01-27 12:29 -------- d-----w- i:\program files\Krtecek
2010-01-19 20:24 . 2009-03-21 07:26 -------- d-----w- i:\program files\NETGATE
2010-01-17 17:36 . 2010-01-17 17:36 -------- d-----w- i:\program files\Ladicka
2010-01-15 18:39 . 2010-01-15 12:37 40448 -c--a-w- i:\c\system32\ati2mdxx.exe
2010-01-15 12:43 . 2010-01-15 12:43 -------- d-----w- i:\program files\Driver-Soft
2010-01-15 12:38 . 2010-01-15 12:37 -------- d-----w- i:\program files\ATI
2010-01-15 12:38 . 2008-10-13 15:41 -------- d-----w- i:\program files\ATI Technologies
2010-01-15 12:37 . 2010-01-15 12:37 0 -c--a-w- i:\c\ativpsrm.bin
2010-01-15 12:10 . 2010-01-13 18:10 664 -c--a-w- i:\c\system32\d3d9caps.dat
2010-01-14 19:43 . 2010-01-14 19:41 43520 -c--a-w- i:\c\system32\CmdLineExt03.dll
2010-01-14 19:28 . 2010-01-14 19:28 552 -c--a-w- i:\c\system32\d3d8caps.dat
2010-01-14 18:53 . 2001-10-25 14:00 68916 ----a-w- i:\c\system32\perfc005.dat
2010-01-14 18:53 . 2001-10-25 14:00 389938 ----a-w- i:\c\system32\perfh005.dat
2010-01-14 17:37 . 2010-01-14 17:37 -------- d-----w- i:\program files\MSXML 4.0
2010-01-14 13:50 . 2009-12-25 21:51 -------- d-----w- i:\program files\MediaCoder
2010-01-14 09:20 . 2010-01-14 09:20 -------- d-----w- i:\program files\Kaspersky Lab
2010-01-14 09:19 . 2010-01-13 17:41 16608 -c--a-w- i:\c\gdrv.sys
2010-01-14 06:38 . 2008-11-05 18:07 -------- d-----w- i:\program files\Common Files\Apple
2010-01-14 06:04 . 2009-08-19 16:19 -------- d-----w- i:\program files\Windows Messaging
2010-01-14 05:34 . 2010-01-14 05:34 -------- d-----w- i:\program files\Common Files\PCSuite
2010-01-14 05:34 . 2009-02-21 06:36 -------- d-----w- i:\program files\Nokia
2010-01-14 05:34 . 2010-01-13 20:10 -------- d-----w- i:\program files\Common Files\Nokia
2010-01-14 05:34 . 2009-07-14 10:26 -------- d-----w- i:\program files\PC Connectivity Solution
2010-01-13 20:26 . 2010-01-13 20:26 -------- d-----w- i:\program files\MSXML 6.0
2010-01-13 20:11 . 2010-01-13 20:11 0 -c-ha-w- i:\c\system32\drivers\Msft_User_PCCSWpdDriver_01_07_00.Wdf
2010-01-13 20:11 . 2010-01-13 20:11 0 -c-ha-w- i:\c\system32\drivers\MsftWdf_user_01_07_00.Wdf
2010-01-13 20:10 . 2010-01-13 20:10 0 -c-ha-w- i:\c\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
2010-01-13 20:10 . 2010-01-13 20:10 0 -c-ha-w- i:\c\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
2010-01-13 19:36 . 2010-01-13 19:36 -------- d-----w- i:\program files\EA GAMES
2010-01-13 19:22 . 2009-12-25 21:55 -------- d-----w- i:\program files\Audacity
2010-01-13 18:45 . 2010-01-13 18:45 56 -c-ha-w- i:\c\system32\ezsidmv.dat
2010-01-13 18:30 . 2010-01-13 18:30 0 -c--a-w- i:\c\nsreg.dat
2010-01-13 17:44 . 2010-01-13 17:44 315392 -c--a-w- i:\c\HideWin.exe
2010-01-13 17:09 . 2010-01-13 16:21 86291 -c--a-w- i:\c\pchealth\helpctr\OfflineCache\index.dat
2010-01-13 17:09 . 2010-01-13 16:21 2354 -c--a-w- i:\c\pchealth\helpctr\PackageStore\SkuStore.bin
2010-01-13 17:09 . 2010-01-13 16:21 8972 -c--a-w- i:\c\pchealth\helpctr\Config\Cntstore.bin
2010-01-13 16:18 . 2010-01-13 16:18 21812 -c--a-w- i:\c\system32\emptyregdb.dat
2010-01-12 17:26 . 2010-01-12 17:26 -------- d-----w- i:\program files\IObit
2010-01-12 17:23 . 2009-12-25 21:53 -------- d-----w- i:\program files\Common Files\Wise Installation Wizard
2009-08-12 10:38 . 2000-09-26 14:12 1715 -c--a-w- i:\program files\RA2.INI
2009-08-06 12:53 . 2009-08-06 12:42 1112250 -c--a-w- i:\program files\autosave.sav
2008-10-18 20:53 . 2008-10-18 20:56 1851544 ----a-w- i:\program files\install_flash_player.exe
2000-10-01 18:31 . 2000-10-01 18:31 18768 -c--a-w- i:\program files\SECDRV.SYS
2000-09-28 12:02 . 2000-09-28 12:02 73728 -c--a-w- i:\program files\MPH.EXE
2000-07-27 14:22 . 2000-07-27 14:22 286208 ----a-w- i:\program files\BINKW32.DLL
2000-07-17 08:45 . 2000-07-17 08:45 171520 -c--a-w- i:\program files\PATCHW32.DLL
2000-06-27 17:00 . 2000-06-27 17:00 766 -c--a-w- i:\program files\NOTES.ICO
2000-03-10 12:20 . 2000-03-10 12:20 2348 -c--a-w- i:\program files\Blowfish.tlb
.

(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of i:\documents and settings\Tom\Plocha\s\ ----

2010-03-11 17:42 . 2009-08-21 11:04 13312 -c--a-w- i:\documents and settings\Tom\Plocha\s\\lsass.exe
2010-03-11 17:42 . 2009-08-21 11:05 57856 -c--a-w- i:\documents and settings\Tom\Plocha\s\\spoolsv.exe
2010-03-11 17:42 . 2009-08-21 11:05 14336 -c--a-w- i:\documents and settings\Tom\Plocha\s\\svchost.exe
2010-03-11 17:42 . 2009-08-21 11:05 502272 -c--a-w- i:\documents and settings\Tom\Plocha\s\\winlogon.exe
2010-03-11 17:42 . 2010-03-11 17:42 724217 -c--a-w- i:\documents and settings\Tom\Plocha\s\\Soubory.zip


((((((((((((((((((((((((((((( SnapShot@2010-03-11_17.15.56 )))))))))))))))))))))))))))))))))))))))))
.
+ 2004-08-17 13:49 . 2009-08-21 11:05 14336 i:\c\system32\svchost.exe
+ 2004-08-17 13:49 . 2009-08-21 11:05 57856 i:\c\system32\spoolsv.exe
+ 2004-08-17 13:49 . 2009-08-21 11:04 13312 i:\c\system32\lsass.exe
+ 2004-08-17 13:49 . 2009-08-21 11:05 14336 i:\c\system32\dllcache\svchost.exe
+ 2004-08-17 13:49 . 2009-08-21 11:05 57856 i:\c\system32\dllcache\spoolsv.exe
+ 2004-08-17 13:49 . 2009-08-21 11:04 13312 i:\c\system32\dllcache\lsass.exe
+ 2004-08-17 13:49 . 2009-08-21 11:05 502272 i:\c\system32\winlogon.exe
+ 2004-08-17 13:49 . 2009-08-21 11:05 502272 i:\c\system32\dllcache\winlogon.exe
+ 2004-08-17 13:49 . 2009-08-21 11:04 1032704 i:\c\system32\dllcache\explorer.exe
+ 2004-08-17 13:49 . 2009-08-21 11:04 1032704 i:\c\explorer.exe
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"="i:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2009-11-11 1451520]
"AlcoholAutomount"="i:\program files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" [2009-11-15 33120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="i:\program files\quicktime\qttask .exe -atboottime" [X]
"RTHDCPL"="RTHDCPL.EXE" [2008-02-13 16857600]
"LifeCam"="i:\program files\Microsoft LifeCam\LifeExp.exe" [2007-05-17 279912]
"TO2SSM_McciTrayApp"="i:\program files\TO2SSM\McciTrayApp.exe" [2008-08-15 1473536]
"SunJavaUpdateSched"="i:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="i:\c\system32\CTFMON.EXE" [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"i:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=
"i:\\C\\system32\\dpvsetup.exe"=
"i:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"i:\\Program Files\\EA GAMES\\The Battle for Middle-earth (tm)\\game.dat"=
"i:\\Program Files\\EA GAMES\\The Battle for Middle-earth (tm)\\patchget.dat"=
"i:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"i:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"i:\\Program Files\\Nokia\\Nokia PC Suite 7\\VideoManager.exe"=
"i:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=
"i:\\Documents and Settings\\Tom\\Data aplikací\\uTorrent\\utorrent.exe"=
"i:\\C\\system32\\PnkBstrA.exe"=
"i:\\C\\system32\\PnkBstrB.exe"=
"i:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"i:\\Program Files\\Skype\\Phone\\Skype.exe"=

S0 sptd;sptd;i:\c\system32\drivers\sptd.sys [25.2.2010 15:12 691696]
S2 gupdate;Google Update Service (gupdate);i:\program files\Google\Update\GoogleUpdate.exe [4.2.2009 23:03 133104]
.
Obsah adresáře 'Naplánované úlohy'

2010-02-27 i:\c\Tasks\AppleSoftwareUpdate.job
- i:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2010-03-12 i:\c\Tasks\GoogleUpdateTaskMachineCore.job
- i:\program files\Google\Update\GoogleUpdate.exe [2009-02-04 22:03]

2010-03-12 i:\c\Tasks\GoogleUpdateTaskMachineUA.job
- i:\program files\Google\Update\GoogleUpdate.exe [2009-02-04 22:03]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://radiobeat.cz/admin/
IE: E&xportovat do aplikace Microsoft Office Excel - i:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - i:\documents and settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\ehwr9ox5.default\
FF - prefs.js: browser.startup.homepage - hxxp://mail.radiobeat.cz/webmail/index.php|http://www.google.cz/
FF - component: i:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - plugin: i:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: i:\program files\Google\Update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: i:\program files\Mozilla Firefox\plugins\np-mswmp.dll

---- NASTAVENÍ FIREFOXU ----
i:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
i:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
i:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
i:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
i:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-12 10:15
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(692)
i:\c\system32\Ati2evxx.dll
.
Celkový čas: 2010-03-12 10:16:47
ComboFix-quarantined-files.txt 2010-03-12 09:16
ComboFix2.txt 2010-03-11 21:21
ComboFix3.txt 2010-03-11 20:23
ComboFix4.txt 2010-03-11 20:04
ComboFix5.txt 2010-03-12 09:09

Před spuštěním: Volných bajtů: 18 922 725 376
Po spuštění: Volných bajtů: 19 226 030 080

- - End Of File - - EE514F1D05AF994F03593B911576EFDB

[motji]

Než přijde kolega
jak to vypadá s počítačem? Já bych řekla, že je čisto

Tuto složku smažte
i:\documents and settings\Tom\Plocha\s\



Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


***********


Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir



***********


Vložte nový log ze RSIT a řekněte co počítač, jak se chová, už je vše v pořádku?

[tmoravek]

Logfile of random's system information tool 1.06 (written by random/random)
Run by Tom at 2010-03-12 14:00:35
Systém Microsoft Windows XP Professional Service Pack 2
System drive I: has 19 GB (8%) free of 238 GB
Total RAM: 2046 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:00:39, on 12.3.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
I:\C\System32\smss.exe
I:\C\system32\winlogon.exe
I:\C\system32\services.exe
I:\C\system32\lsass.exe
I:\C\system32\Ati2evxx.exe
I:\C\system32\svchost.exe
I:\C\System32\svchost.exe
I:\C\system32\svchost.exe
I:\C\system32\Ati2evxx.exe
I:\C\system32\spoolsv.exe
I:\C\Explorer.EXE
I:\Program Files\Common Files\Motive\McciCMService.exe
I:\Program Files\Microsoft LifeCam\MSCamS32.exe
I:\C\system32\PnkBstrA.exe
I:\C\system32\PnkBstrB.exe
I:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
I:\C\system32\svchost.exe
I:\C\system32\wscntfy.exe
I:\C\RTHDCPL.EXE
I:\Program Files\TO2SSM\McciTrayApp.exe
I:\Program Files\Java\jre6\bin\jusched.exe
I:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
I:\Program Files\PC Connectivity Solution\ServiceLayer.exe
I:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
I:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
I:\Program Files\Mozilla Firefox\firefox.exe
I:\Documents and Settings\Tom\Plocha\HRY TOMINO\RSIT.exe
I:\Program Files\trend micro\Tom.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://radiobeat.cz/admin/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - I:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - I:\Program Files\AVG\AVG9\avgssie.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - I:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [QuickTime Task] "i:\program files\quicktime\qttask .exe" -atboottime
O4 - HKLM\..\Run: [LifeCam] "I:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [TO2SSM_McciTrayApp] I:\Program Files\TO2SSM\McciTrayApp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "I:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [combofix] "I:\ComboFix\CF170.cfxxe" /c "I:\ComboFix\C.bat"
O4 - HKCU\..\Run: [PC Suite Tray] "I:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [AlcoholAutomount] "I:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] I:\C\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] I:\C\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://I:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - I:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: I:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - I:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - I:\C\system32\Ati2evxx.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - I:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: McciCMService - Motive Communications, Inc. - I:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: PnkBstrA - Unknown owner - I:\C\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - I:\C\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia - I:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - I:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 4577 bytes

======Scheduled tasks folder======

I:\C\tasks\AppleSoftwareUpdate.job
I:\C\tasks\GoogleUpdateTaskMachineCore.job
I:\C\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - I:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16 37808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - I:\Program Files\AVG\AVG9\avgssie.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - I:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-02-01 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=I:\C\RTHDCPL.EXE [2008-02-13 16857600]
"QuickTime Task"=i:\program files\quicktime\qttask .exe -atboottime []
"LifeCam"=I:\Program Files\Microsoft LifeCam\LifeExp.exe [2007-05-17 279912]
"TO2SSM_McciTrayApp"=I:\Program Files\TO2SSM\McciTrayApp.exe [2008-08-15 1473536]
"SunJavaUpdateSched"=I:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"combofix"=I:\ComboFix\CF170.cfxxe /c I:\ComboFix\C.bat []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"=I:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-11-11 1451520]
"AlcoholAutomount"=I:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2009-11-15 33120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
I:\C\system32\Ati2evxx.dll [2009-11-25 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
I:\C\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - I:\C\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"I:\Program Files\Microsoft LifeCam\LifeExp.exe"="I:\Program Files\Microsoft LifeCam\LifeExp.exe:*:Enabled:LifeExp.exe"
"I:\C\system32\dpvsetup.exe"="I:\C\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"I:\Program Files\Skype\Plugin Manager\skypePM.exe"="I:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"I:\Program Files\EA GAMES\The Battle for Middle-earth (tm)\game.dat"="I:\Program Files\EA GAMES\The Battle for Middle-earth (tm)\game.dat:*:Enabled:The Battle for Middle-earth (tm)"
"I:\Program Files\EA GAMES\The Battle for Middle-earth (tm)\patchget.dat"="I:\Program Files\EA GAMES\The Battle for Middle-earth (tm)\patchget.dat:*:Enabled:patchgrabber"
"I:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe"="I:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater"
"I:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe"="I:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"I:\Program Files\Nokia\Nokia PC Suite 7\VideoManager.exe"="I:\Program Files\Nokia\Nokia PC Suite 7\VideoManager.exe:*:Enabled:Nokia Video Manager"
"I:\Program Files\Microsoft LifeCam\LifeCam.exe"="I:\Program Files\Microsoft LifeCam\LifeCam.exe:*:Enabled:LifeCam.exe"
"I:\Documents and Settings\Tom\Data aplikací\uTorrent\utorrent.exe"="I:\Documents and Settings\Tom\Data aplikací\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"I:\C\system32\PnkBstrA.exe"="I:\C\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"I:\C\system32\PnkBstrB.exe"="I:\C\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"I:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="I:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM)"
"I:\Program Files\Skype\Phone\Skype.exe"="I:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======File associations======

.js - edit - "I:\Program Files\Macromedia\Dreamweaver 8\dreamweaver.exe" "%1"

======List of files/folders created in the last 1 months======

2010-03-12 14:00:36 ----D---- I:\Program Files\trend micro
2010-03-12 14:00:35 ----DC---- I:\rsit
2010-03-12 12:38:16 ----SHDC---- I:\RECYCLER
2010-03-12 10:16:49 ----DC---- I:\C\temp
2010-03-11 19:26:52 ----D---- I:\Program Files\Malwarebytes' Anti-Malware
2010-03-11 17:55:55 ----AC---- I:\Boot.bak
2010-03-11 17:55:50 ----RASHDC---- I:\cmdcons
2010-03-11 17:54:47 ----DC---- I:\C\ERDNT
2010-03-11 15:26:03 ----D---- I:\Program Files\Spyware Doctor
2010-03-11 13:41:55 ----DC---- I:\C\pss
2010-03-11 13:39:12 ----D---- I:\Program Files\Enigma Software Group
2010-03-11 12:42:13 ----DC---- I:\Documents and Settings\Tom\Data aplikací\Malwarebytes
2010-03-11 12:42:09 ----DC---- I:\Documents and Settings\All Users.C\Data aplikací\Malwarebytes
2010-03-10 12:39:20 ----D---- I:\Program Files\Activision
2010-03-10 12:29:48 ----SHDC---- I:\C\ftpcache
2010-03-10 12:28:31 ----AC---- I:\C\system32\PnkBstrB.exe
2010-03-10 12:28:30 ----AC---- I:\C\system32\PnkBstrA.exe
2010-03-10 12:28:28 ----AC---- I:\C\game.ini
2010-03-09 20:59:57 ----DC---- I:\Documents and Settings\Tom\Data aplikací\FreeScreenToVideo
2010-03-09 20:59:57 ----D---- I:\Program Files\Free Screen To Video
2010-03-04 21:38:48 ----HDC---- I:\C\$NtUninstallKB926239$
2010-03-04 21:38:31 ----C---- I:\C\system32\spmsg.dll
2010-03-04 21:38:30 ----HDC---- I:\C\$NtUninstallMSCompPackV1$
2010-03-04 21:38:24 ----AC---- I:\C\system32\wmpns.dll
2010-03-04 21:38:12 ----HDC---- I:\C\$NtUninstallwmp11$
2010-03-04 21:37:22 ----DC---- I:\10f2fcf118b3d0875d
2010-03-02 21:42:24 ----DC---- I:\Documents and Settings\Tom\Data aplikací\FileZilla
2010-03-01 23:37:13 ----DC---- I:\Documents and Settings\Tom\Data aplikací\Ahead
2010-02-28 14:02:40 ----D---- I:\Program Files\PopCap Games
2010-02-25 15:24:45 ----D---- I:\Program Files\Alcohol Soft
2010-02-23 17:08:05 ----DC---- I:\Documents and Settings\Tom\Data aplikací\uTorrent
2010-02-23 15:22:05 ----AC---- I:\C\system32\javaws.exe
2010-02-23 15:22:05 ----AC---- I:\C\system32\javaw.exe
2010-02-23 15:22:05 ----AC---- I:\C\system32\java.exe
2010-02-15 22:19:30 ----AC---- I:\C\iun6002.exe
2010-02-15 22:19:01 ----D---- I:\Program Files\BlueVoda Website Builder
2010-02-15 10:23:48 ----AC---- I:\C\NeroDigital.ini
2010-02-14 21:45:45 ----C---- I:\C\UNNMP.exe
2010-02-14 21:44:19 ----AC---- I:\C\system32\nerocheck.exe.delme49
2010-02-14 21:43:16 ----C---- I:\C\UNNeroVision.exe
2010-02-14 21:43:16 ----AC---- I:\C\system32\msxml3a.dll
2010-02-14 21:43:00 ----DC---- I:\Documents and Settings\All Users.C\Data aplikací\Ahead
2010-02-14 21:42:59 ----AC---- I:\C\system32\TwnLib20.dll
2010-02-14 21:42:59 ----AC---- I:\C\system32\picn20.dll
2010-02-14 21:42:59 ----AC---- I:\C\system32\ImagXpr5.dll
2010-02-14 21:42:59 ----AC---- I:\C\system32\imagx5.dll
2010-02-14 21:42:59 ----AC---- I:\C\system32\imagr5.dll
2010-02-14 21:42:58 ----D---- I:\Program Files\Common Files\Ahead

======List of files/folders modified in the last 1 months======

2010-03-12 14:00:36 ----RD---- I:\Program Files
2010-03-12 14:00:19 ----DC---- I:\C\Prefetch
2010-03-12 13:59:49 ----SHD---- I:\System Volume Information
2010-03-12 13:59:49 ----DC---- I:\C\system32\Restore
2010-03-12 13:56:01 ----DC---- I:\C
2010-03-12 13:53:50 ----AC---- I:\C\SchedLgU.Txt
2010-03-12 12:41:32 ----DC---- I:\C\system32\CatRoot2
2010-03-12 10:15:57 ----AC---- I:\C\system.ini
2010-03-12 10:14:44 ----DC---- I:\C\system32
2010-03-12 10:14:43 ----DC---- I:\C\system32\drivers
2010-03-12 10:14:43 ----DC---- I:\C\AppPatch
2010-03-12 10:14:40 ----D---- I:\Program Files\Common Files
2010-03-12 10:03:40 ----D---- I:\Program Files\Mozilla Firefox
2010-03-12 09:35:35 ----SDC---- I:\Documents and Settings\Tom\Data aplikací\Microsoft
2010-03-12 09:01:36 ----D---- I:\Program Files\AVG
2010-03-12 09:01:30 ----SHDC---- I:\C\Installer
2010-03-12 09:01:24 ----DC---- I:\Config.Msi
2010-03-12 08:40:44 ----DC---- I:\Documents and Settings\Tom\Data aplikací\vlc
2010-03-11 21:21:09 ----D---- I:\Program Files\TO2SSM
2010-03-11 21:21:09 ----D---- I:\Program Files\QuickTime
2010-03-11 21:21:09 ----D---- I:\Program Files\Microsoft LifeCam
2010-03-11 21:03:28 ----D---- I:\Program Files\Internet Explorer
2010-03-11 20:58:47 ----DC---- I:\C\system32\dllcache
2010-03-11 20:50:02 ----DC---- I:\C\Resources
2010-03-11 18:20:27 ----SDC---- I:\C\Tasks
2010-03-11 18:14:24 ----DC---- I:\C\system32\config
2010-03-11 17:55:55 ----RASHC---- I:\boot.ini
2010-03-11 15:06:16 ----AC---- I:\C\win.ini
2010-03-11 08:02:31 ----HDC---- I:\C\inf
2010-03-10 18:53:04 ----D---- I:\Program Files\AGEIA Technologies
2010-03-10 17:34:13 ----DC---- I:\Documents and Settings\Tom\Data aplikací\Skype
2010-03-10 16:47:42 ----DC---- I:\Documents and Settings\Tom\Data aplikací\skypePM
2010-03-10 12:48:50 ----DC---- I:\C\system32\DirectX
2010-03-10 12:48:42 ----RSDC---- I:\C\assembly
2010-03-10 12:48:21 ----HD---- I:\Program Files\InstallShield Installation Information
2010-03-10 12:28:30 ----DC---- I:\C\system32\LogFiles
2010-03-08 19:42:00 ----DC---- I:\Documents and Settings\Tom\Data aplikací\dvdcss
2010-03-04 23:24:37 ----D---- I:\Program Files\Windows Media Player
2010-03-04 21:38:20 ----D---- I:\Program Files\Windows Media Connect 2
2010-03-04 21:38:18 ----DC---- I:\C\Help
2010-03-04 21:37:48 ----DC---- I:\C\system32\CatRoot
2010-03-02 21:33:32 ----D---- I:\Program Files\Google
2010-02-28 14:02:41 ----SDC---- I:\Documents and Settings\All Users.C\Data aplikací\Microsoft
2010-02-25 15:29:49 ----D---- I:\Program Files\Kalypso
2010-02-14 21:45:38 ----D---- I:\Program Files\Ahead

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Řadič procesoru Intel; I:\C\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
R1 kbdhid;Ovladač klávesnice standardu HID; I:\C\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R3 ati2mtag;ati2mtag; I:\C\system32\DRIVERS\ati2mtag.sys [2009-11-25 4463104]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; I:\C\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Ovladač třídy standardu HID; I:\C\system32\DRIVERS\hidusb.sys [2001-10-25 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); I:\C\system32\drivers\RtkHDAud.sys [2008-02-14 4676096]
R3 mouhid;Ovladač myši standardu HID; I:\C\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; I:\C\system32\DRIVERS\Rtenicxp.sys [2008-01-03 105856]
R3 usbaudio;Ovladač zvukové karty USB (WDM); I:\C\system32\drivers\usbaudio.sys [2004-08-04 59264]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; I:\C\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; I:\C\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Rozbočovač umožnující USB2; I:\C\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; I:\C\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; I:\C\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S3 CCDECODE;Dekodér Closed Caption; I:\C\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 CrystalSysInfo;CrystalSysInfo; \??\I:\Program Files\MediaCoder\SysInfo.sys []
S3 gdrv;gdrv; \??\I:\C\gdrv.sys []
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\I:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\I:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\I:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\I:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\I:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\I:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; I:\C\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; I:\C\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; I:\C\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 nmwcd;Nokia USB Phone Parent; I:\C\system32\drivers\ccdcmb.sys [2009-10-06 17664]
S3 nmwcdc;Nokia USB Generic; I:\C\system32\drivers\ccdcmbo.sys [2009-10-06 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; I:\C\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; I:\C\System32\Drivers\RootMdm.sys [2001-10-25 5888]
S3 SLIP;BDA Slip De-Framer; I:\C\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; I:\C\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 upperdev;upperdev; I:\C\system32\DRIVERS\usbser_lowerflt.sys [2009-10-06 7936]
S3 usbser;USB Modem Driver; I:\C\system32\drivers\usbser.sys [2004-08-03 25600]
S3 UsbserFilt;UsbserFilt; I:\C\system32\DRIVERS\usbser_lowerfltj.sys [2009-10-06 7936]
S3 VX3000;VX-3000; I:\C\system32\DRIVERS\VX3000.sys [2007-04-10 1966696]
S3 Wdf01000;Kernel Mode Driver Frameworks service; I:\C\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WSTCODEC;Dálnopisný kodek světového standardu; I:\C\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; I:\C\system32\DRIVERS\wudfrd.sys [2008-01-18 83328]
S4 IntelIde;IntelIde; I:\C\system32\drivers\IntelIde.sys []
S4 sptd;sptd; I:\C\System32\Drivers\sptd.sys [2010-02-25 691696]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; I:\C\system32\Ati2evxx.exe [2009-11-25 602112]
R2 McciCMService;McciCMService; I:\Program Files\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
R2 MSCamSvc;MSCamSvc; I:\Program Files\Microsoft LifeCam\MSCamS32.exe [2007-05-17 271720]
R2 PnkBstrA;PnkBstrA; I:\C\system32\PnkBstrA.exe [2010-03-10 66872]
R2 PnkBstrB;PnkBstrB; I:\C\system32\PnkBstrB.exe [2010-03-10 103736]
R2 StarWindServiceAE;StarWind AE Service; I:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; I:\C\system32\svchost.exe [2009-08-21 14336]
R3 ServiceLayer;ServiceLayer; I:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-10-27 657408]
S2 gupdate;Google Update Service (gupdate); I:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-04 133104]
S3 aspnet_state;ASP.NET State Service; I:\C\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; I:\C\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; I:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]

-----------------EOF-----------------


zatím šlape jako hodinky

[Caroprd111]

Vydržte, podívám se na log.

[Caroprd111]

Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe

• Spusťte.
• Klikněte na "CleanUp!". Potvrďte hlášky stiskem "Yes" (Bude následovat restart)

Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478

• Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.
  
  Záložka Čistič
• Dejte analyzovat, po dokončení dejte Spustit Ccleaner.
  
  Záložka Registry
• Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
  OK Zavřít

V logu nevidím antivir a firewall, doinstalujte http://www.viry.cz/forum/viewtopic.php?f=29&t=6152 + http://www.viry.cz/forum/viewtopic.php?f=41&t=6523

[tmoravek]

Tak jsem to nějak zakřiknul...najednou mi nejde otevřít firemní mejl..

[Caroprd111]

Zkuste vypnout firewal, pokud nepůjde, tak mi přesněji popište problém.

[tmoravek]

máme firemní mejl..KERIO CONNECT...ještě dnes ráno fungoval normálně..dnes jde pouze v jakési záložní mini verzi...ta normální se sice otevře, přihlásím se, ale nenačte se..jak bych Vám mohl poslat obrázky ..??

[tmoravek]

tak vyřešeno..nevím čím to bylo..ale CTRL+SHIFT+DEL...a je to OK..

[Caroprd111]

Takže s PC žádné problémy