Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Nejdou aktualizace windows

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
jardachal
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 23 bře 2008 15:50

Nejdou aktualizace windows

#1 Příspěvek od jardachal »

me nejde ani odestat zprava s zadosti o pomoc..pomoooc :( tak. nejde mi odaslat zprava se spravnym odkazem na microsoft

prosim o pomoc. nejdou aktualizace windows ani windows defender. pri otevirani stranky http://windo...wsupdate.microsoft.com/ se zobrazi jen "Akce byla zrušena."
problem vznikl asi virem Desktop Security 2010 , ktery jsem vycistil pomoci Malwarebytes' Anti-Malware.


Logfile of random's system information tool 1.07 (written by random/random)
Run by Jára at 2010-05-06 09:41:11
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 61 GB (40%) free of 154 GB
Total RAM: 3582 MB (80% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:41:20, on 6.5.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\Common Files\Portrait Displays\Plugins\AM\dtsslsrv.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Common Files\Portrait Displays\Shared\dtsrvc.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\OO Software\Defrag\oodag.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Portrait Displays\forteManager\DTHtml.exe
C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Common Files\Portrait Displays\Shared\HookManager.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\OO Software\Defrag\oodtray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WinFast\WFDTV\WFWIZ.exe
C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
C:\Program Files\Media Key\MagicKey.exe
C:\Program Files\Globe Software\StatBar\StatBar.exe
C:\Program Files\Media Key\OSD.EXE
C:\Program Files\WinTidy\WinTidy.exe
D:\ PROGRAMY\ INTERNET\Měřič PING\nettester.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\SlimBrowser\sbrowser.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Jára\Plocha\RSIT.exe
C:\Program Files\trend micro\Jára.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\WINDOWS\WebIE.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL (file missing)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL (file missing)
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\PROGRA~1\TRANSLAT\2003\WEBIE.DLL
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [DT LGE] C:\Program Files\Common Files\Portrait Displays\Shared\DT_startup.exe -LGE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [SmartSync - ScheduleSync] C:\PROGRA~1\MOBILE~1\SMARTS~1\SCHEDU~1.EXE
O4 - HKLM\..\Run: [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [OODefragTray] C:\Program Files\OO Software\Defrag\oodtray.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\RunServices: [MacromediaLicensing2.42.000] c:\program files\common files\macromedia shared\service\licensingmacromedia.exe
O4 - HKLM\..\RunServices: [StartedGetting] c:\program files\common files\lightscribe\content\csy\startedgetting.exe
O4 - HKLM\..\RunServices: [AiodAcrobat] C:\program files\adobe\reader 8.0\esl\acrobataiod.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFDTV\WFWIZ.exe
O4 - HKCU\..\Run: [EVEREST AutoStart] C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: WinTidy.lnk = C:\Program Files\WinTidy\WinTidy.exe
O4 - Startup: Zástupce - nettester.exe.lnk = ?
O4 - Global Startup: Media Key.lnk = C:\Program Files\Media Key\MagicKey.exe
O4 - Global Startup: StatBar.lnk = C:\Program Files\Globe Software\StatBar\StatBar.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Stáhnout pomocí USD - D:\ PROGRAMY\ INTERNET\Universal Share Downloader\USDownloader135\Ext\downloadie.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: WebTran - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\PROGRA~1\TRANSLAT\2003\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\PROGRA~1\TRANSLAT\2003\WEBIE.DLL
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\PROGRA~1\TRANSLAT\2003\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\PROGRA~1\TRANSLAT\2003\WEBIE.DLL
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\PROGRA~1\TRANSLAT\2003\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\PROGRA~1\TRANSLAT\2003\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\PROGRA~1\TRANSLAT\2003\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\PROGRA~1\TRANSLAT\2003\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\PROGRA~1\TRANSLAT\2003\WEBIE.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {361E6B79-4A69-4376-B0F2-3D1EBEE9D7E2} (RtspVaPgCtrl Class) - http://www.bartanet.eu/cam/RtspVaPgDec.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resourc ... oscan8.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) - ABBYY (BIT Software) - C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Asset Management Daemon - Unknown owner - C:\Program Files\Common Files\Portrait Displays\Plugins\AM\dtsslsrv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: Portrait Displays Display Tune Service (DTSRVC) - Unknown owner - C:\Program Files\Common Files\Portrait Displays\Shared\dtsrvc.exe
O23 - Service: Google Update Service (gupdate1c9da27158549ea) (gupdate1c9da27158549ea) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: O&O Defrag - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 15513 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\MP Scheduled Scan.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\WINDOWS\WebIE.dll [2008-02-24 491520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2008-09-15 1562960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-02-22 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CB65201-89C4-402c-BA80-02D8C59F9B1D}]
Ask Search Assistant BHO - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL [2008-02-24 57344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-05-21 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE063DB1-4EC0-403e-8DD8-394C54984B2C}]
Ask Toolbar BHO - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} - Easy-WebPrint - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll [2004-08-26 405504]
{FE063DB9-4EC0-403e-8DD8-394C54984B2C} - Ask Toolbar - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL []
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\PROGRA~1\TRANSLAT\2003\WEBIE.DLL [2008-02-24 114688]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"36X Raid Configurer"=C:\WINDOWS\system32\xRaidSetup.exe [2007-11-19 1966080]
"DT LGE"=C:\Program Files\Common Files\Portrait Displays\Shared\DT_startup.exe [2007-10-11 81920]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2005-02-17 221184]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2005-02-17 81920]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2008-05-07 178712]
"SmartSync - ScheduleSync"=C:\PROGRA~1\MOBILE~1\SMARTS~1\SCHEDU~1.EXE [2005-10-21 45056]
"WinFastDTV"=C:\Program Files\WinFast\WFDTV\DTVSchdl.exe [2008-06-20 90112]
"JMB36X IDE Setup"=C:\WINDOWS\RaidTool\xInsIDE.exe [2007-03-20 36864]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-08-01 61440]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-05-21 17881600]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe [2009-09-12 2524416]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-04-14 2790472]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"WinFast Schedule"=C:\Program Files\WinFast\WFDTV\WFWIZ.exe [2008-06-20 2887680]
"EVEREST AutoStart"=C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe [2009-10-02 2430048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\365dni]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [2007-02-16 149024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe [2007-02-19 1962896]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2008-07-04 109056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EasyTuneVPro]
C:\Program Files\Gigabyte\ET5Pro\ETcall.exe [2007-07-26 20480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\PROGRA~1\ICQ6\ICQ.exe [2008-09-01 173304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-06-24 1840424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-06-08 2221352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nero PhotoShow Media Manager]
C:\PROGRA~1\Nero\PHOTOS~1\data\Xtras\mssysmgr.exe [2007-04-27 312848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2008-06-19 570664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OEXPRESS]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OPSE reminder]
C:\Program Files\ScanSoft\OmniPageSE2.0\EregEng\Ereg.exe [2003-07-07 729088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpwareSE2]
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe [2003-05-08 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\r37ph1usfn4w]
C:\Documents and Settings\Jára\Local Settings\Temp\m.262.tmp.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SecurityCenter]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files\Steam\Steam.exe [2009-07-23 1217784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [2008-02-22 144784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-05-21 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2007-02-19 1188456]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateStar]
C:\Documents and Settings\Jára\Data aplikací\UpdateStar\UpdateStar.exe [2009-01-16 4370672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WEBTRAN]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Místní vyhledávání.lnk]
C:\PROGRA~1\WI459E~1\WINDOW~1.EXE [2007-02-05 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Jára^Nabídka Start^Programy^Po spuštění^Mobile Phone Manager.lnk]
C:\PROGRA~1\MOBILE~1\bin\MOBILE~1.EXE [2005-11-30 503808]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Media Key.lnk - C:\Program Files\Media Key\MagicKey.exe
StatBar.lnk - C:\Program Files\Globe Software\StatBar\StatBar.exe

C:\Documents and Settings\Jára\Nabídka Start\Programy\Po spuštění
WinTidy.lnk - C:\Program Files\WinTidy\WinTidy.exe
Zástupce - nettester.exe.lnk - D:\ PROGRAMY\ INTERNET\Měřič PING\nettester.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-08-21 143360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2007-02-05 294400]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
relog_ap

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\Program Files\DAP\DAP.exe"="C:\Program Files\DAP\DAP.exe:*:Enabled:Download Accelerator Plus (DAP)"
"C:\Program Files\ICQ\Icq.exe"="C:\Program Files\ICQ\Icq.exe:*:Enabled:ICQ"
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis"
"C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Program Files\totalcmd\TOTALCMD.EXE"="C:\Program Files\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:uTorrent"
"D:\ PROGRAMY\ INTERNET\sdílení souborů P2P\uTorrent\utorrent.exe"="D:\ PROGRAMY\ INTERNET\sdílení souborů P2P\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\WinFast\WFDTV\DVBTAP.exe"="C:\Program Files\WinFast\WFDTV\DVBTAP.exe:*:Enabled:WinFast DTV Application"
"D:\ PROGRAMY\ INTERNET\Universal Share Downloader\USDownloader135\USDownloader.exe"="D:\ PROGRAMY\ INTERNET\Universal Share Downloader\USDownloader135\USDownloader.exe:*:Enabled:USDownloader.exe"
"C:\Program Files\Electronic Arts\EADM\Core.exe"="C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager"
"C:\Program Files\DreamCom\DreamCom.exe"="C:\Program Files\DreamCom\DreamCom.exe:*:Enabled:DreamCom"
"C:\Program Files\Ubisoft\Far Cry 2\bin\FarCry2.exe"="C:\Program Files\Ubisoft\Far Cry 2\bin\FarCry2.exe:*:Enabled:Far Cry 2"
"C:\Program Files\Ubisoft\Far Cry 2\bin\FC2Launcher.exe"="C:\Program Files\Ubisoft\Far Cry 2\bin\FC2Launcher.exe:*:Enabled:Far Cry 2 Updater"
"C:\Program Files\Ubisoft\Far Cry 2\bin\FC2Editor.exe"="C:\Program Files\Ubisoft\Far Cry 2\bin\FC2Editor.exe:*:Enabled:Editor"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Lineage II-interlude\loader.exe"="C:\Program Files\Lineage II-interlude\loader.exe:*:Enabled:CzechGamers Server AutoUpdater"
"C:\Program Files\SafeTP\SafeTP.exe"="C:\Program Files\SafeTP\SafeTP.exe:*:Disabled:SafeTP"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Disabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Disabled:PnkBstrB"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======File associations======

.js - open - "C:\Program Files\Macromedia\Dreamweaver MX 2004\Dreamweaver.exe" "%1"

======List of files/folders created in the last 1 months======

2010-05-06 09:20:44 ----D---- C:\rsit
2010-05-06 09:20:44 ----D---- C:\Program Files\trend micro
2010-05-05 18:28:14 ----HD---- C:\WINDOWS\system32\GroupPolicy
2010-05-05 12:18:52 ----D---- C:\Documents and Settings\Jára\Data aplikací\Malwarebytes
2010-05-05 12:15:54 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-05-05 12:15:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-04-22 00:16:09 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-04-22 00:16:05 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-04-22 00:14:26 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-04-22 00:13:19 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-04-22 00:13:16 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-04-22 00:13:12 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-04-22 00:12:06 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-04-20 23:12:53 ----D---- C:\Program Files\Common Files\INCA Shared
2010-04-19 15:30:34 ----D---- C:\Program Files\NCsoft

======List of files/folders modified in the last 1 months======

2010-05-06 09:41:16 ----D---- C:\Documents and Settings\Jára\Data aplikací\SlimBrowser
2010-05-06 09:41:13 ----D---- C:\WINDOWS\Temp
2010-05-06 09:36:10 ----D---- C:\WINDOWS
2010-05-06 09:36:10 ----A---- C:\WINDOWS\TRNCOM.INI
2010-05-06 09:28:35 ----D---- C:\WINDOWS\system32\CatRoot2
2010-05-06 09:28:33 ----SD---- C:\WINDOWS\Tasks
2010-05-06 09:27:52 ----A---- C:\WINDOWS\system32\everest_cpl.ini
2010-05-06 09:27:45 ----A---- C:\WINDOWS\win.ini
2010-05-06 09:24:09 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-05-06 09:20:44 ----D---- C:\Program Files
2010-05-06 08:42:06 ----A---- C:\WINDOWS\MAILTRAN.INI
2010-05-05 23:20:04 ----D---- C:\WINDOWS\system32
2010-05-05 19:33:27 ----D---- C:\Program Files\Mozilla Firefox
2010-05-05 18:42:54 ----D---- C:\WINDOWS\system32\ias
2010-05-05 14:29:22 ----D---- C:\odebráno z C
2010-05-05 14:01:56 ----SHD---- C:\WINDOWS\Installer
2010-05-05 14:01:56 ----SHD---- C:\Config.Msi
2010-05-05 13:40:59 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-05-05 13:34:00 ----HDC---- C:\WINDOWS\$NtUninstallKB945553$
2010-05-05 13:34:00 ----D---- C:\WINDOWS\system32\drivers
2010-05-05 12:07:34 ----D---- C:\Program Files\WinTidy
2010-05-05 11:15:54 ----ASH---- C:\boot.ini
2010-05-05 11:15:54 ----A---- C:\WINDOWS\system.ini
2010-05-05 10:52:44 ----D---- C:\WINDOWS\Prefetch
2010-05-03 23:45:49 ----D---- C:\Program Files\The Bat!
2010-05-03 23:38:36 ----D---- C:\Documents and Settings\Jára\Data aplikací\Skype
2010-05-01 21:46:13 ----A---- C:\WINDOWS\system32\Dvbpws.dll
2010-04-26 08:00:30 ----A---- C:\WINDOWS\NeroDigital.ini
2010-04-26 07:31:52 ----D---- C:\Documents and Settings\Jára\Data aplikací\MyPhoneExplorer
2010-04-22 00:16:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-04-22 00:16:13 ----HD---- C:\WINDOWS\inf
2010-04-22 00:16:12 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-22 00:16:08 ----HD---- C:\WINDOWS\$hf_mig$
2010-04-22 00:16:07 ----A---- C:\WINDOWS\imsins.BAK
2010-04-20 23:12:53 ----D---- C:\Program Files\Common Files
2010-04-19 15:30:32 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-19 14:33:19 ----D---- C:\Documents and Settings\Jára\Data aplikací\uTorrent
2010-04-17 03:51:49 ----D---- C:\Program Files\Google
2010-04-15 15:45:45 ----D---- C:\WINDOWS\system32\config
2010-04-14 18:47:03 ----A---- C:\WINDOWS\system32\aswBoot.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-04-14 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-04-14 162768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-04-14 46672]
R1 ATITool;ATITool Overclocking Utility; C:\WINDOWS\system32\DRIVERS\ATITool.sys [2007-08-08 28968]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 kbfilter;Keyboard Filter Driver; C:\WINDOWS\system32\drivers\kbfilter.sys [2002-07-11 12856]
R1 NetworkX;NetworkX; C:\WINDOWS\system32\ckldrv.sys [2006-01-10 31846]
R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys [2002-09-16 4228]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2006-03-18 26844]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]
R1 UsbFltr;WayTechUSBFilterDriver; C:\WINDOWS\system32\drivers\UsbFltr.sys [2006-04-28 9291]
R2 Aspi32;Aspi32; C:\WINDOWS\System32\drivers\aspi32.sys [2005-11-21 16512]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-04-14 19024]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-04-14 100432]
R2 CX23880;WinFast CX2388x WDM Video Capture.; C:\WINDOWS\system32\drivers\cx88vid.sys [2006-10-18 162944]
R2 CXAVXBAR;WinFast CX2388x WDM Crossbar.; C:\WINDOWS\system32\drivers\cxavxbar.sys [2006-10-18 9728]
R2 CXTUNE;WinFast CX2388x WDM TVTuner.; C:\WINDOWS\system32\drivers\CX88TUNE.sys [2006-10-18 50816]
R2 Hardlock;Hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
R2 tifsfilter;Acronis True Image FS Filter; C:\WINDOWS\System32\DRIVERS\tifsfilt.sys [2008-02-22 32768]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-04-14 23376]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-08-21 3299840]
R3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt []
R3 HdAudAddService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-06-02 5085184]
R3 LVRS;Logitech RightSound Filter Driver; C:\WINDOWS\system32\DRIVERS\lvrs.sys [2009-05-01 265496]
R3 LVUVC;Logitech Webcam 200(UVC); C:\WINDOWS\system32\DRIVERS\lvuvc.sys [2009-05-01 6754712]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 PdiPorts;Portrait Displays low level device driver; C:\WINDOWS\System32\Drivers\PdiPorts.sys [2006-11-16 15920]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-06-16 109184]
R3 SaiMini;SaiMini; C:\WINDOWS\system32\DRIVERS\SaiMini.sys [2007-10-05 14080]
R3 SaiNtBus;SaiNtBus; C:\WINDOWS\system32\drivers\SaiBus.sys [2007-10-05 35200]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 ULCDRHlp;ULCDRHlp; C:\WINDOWS\System32\Drivers\ULCDRHlp.sys [2004-12-23 27392]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 vsbus;Virtual Serial Bus Enumerator; C:\WINDOWS\system32\DRIVERS\vsb.sys [2005-11-30 15264]
S3 actser;actser; C:\WINDOWS\system32\drivers\actser.sys [2005-11-30 29440]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 ET5Drv;ET5Drv; \??\C:\WINDOWS\system32\Drivers\ET5Drv.sys []
S3 FilterService;UVC Filter Service; C:\WINDOWS\system32\DRIVERS\lvuvcflt.sys [2009-05-01 23832]
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 GVTDrv;GVTDrv; \??\C:\WINDOWS\system32\Drivers\GVTDrv.sys []
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 lvpopflt;Logitech POP Suppression Filter; C:\WINDOWS\system32\DRIVERS\lvpopflt.sys [2009-05-01 114712]
S3 MarkFun_NT;MarkFun_NT; \??\C:\Program Files\Gigabyte\ET5Pro\markfun.w32 []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nm;Ovladač programu Sledování sítě; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-13 40320]
S3 npkcrypt;npkcrypt; \??\C:\Program Files\Lineage II C4 Trp\system\npkcrypt.sys []
S3 pdiddcci;DDC/CI monitor; C:\WINDOWS\System32\DRIVERS\pdiddcci.sys [2007-06-12 11776]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 SaiH0464;SaiH0464; C:\WINDOWS\system32\DRIVERS\SaiH0464.sys [2007-05-01 132232]
S3 SE31bus;Sony Ericsson Device 049 Driver driver (WDM); C:\WINDOWS\system32\DRIVERS\SE31bus.sys [2006-05-01 61600]
S3 SE31mdfl;Sony Ericsson Device 049 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\SE31mdfl.sys [2006-05-01 9360]
S3 SE31mdm;Sony Ericsson Device 049 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\SE31mdm.sys [2006-05-01 97184]
S3 SE31mgmt;Sony Ericsson Device 049 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\SE31mgmt.sys [2006-05-01 88688]
S3 se31nd5;Sony Ericsson Device 049 USB Ethernet Emulation SEMC49 (NDIS); C:\WINDOWS\system32\DRIVERS\se31nd5.sys [2006-05-01 18704]
S3 SE31obex;Sony Ericsson Device 049 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\SE31obex.sys [2006-05-01 86560]
S3 se31unic;Sony Ericsson Device 049 USB Ethernet Emulation SEMC49 (WDM); C:\WINDOWS\system32\DRIVERS\se31unic.sys [2006-05-01 90800]
S3 Ser2pl;SIEMENS Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys [2005-11-30 41472]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 TVICHW32;TVICHW32; \??\C:\WINDOWS\system32\DRIVERS\TVICHW32.SYS []
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 vserial;ELTIMA Virtual Serial Ports Driver; C:\WINDOWS\System32\DRIVERS\vserial.sys [2005-11-30 47744]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service; C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [2007-12-06 660768]
R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2008-07-03 109056]
R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [2007-02-16 411168]
R2 Asset Management Daemon;Asset Management Daemon; C:\Program Files\Common Files\Portrait Displays\Plugins\AM\dtsslsrv.exe [2007-10-11 114688]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-08-21 573440]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-04-14 40384]
R2 Crypkey License;Crypkey License; C:\WINDOWS\system32\crypserv.exe [2006-09-22 69632]
R2 DTSRVC;Portrait Displays Display Tune Service; C:\Program Files\Common Files\Portrait Displays\Shared\dtsrvc.exe [2007-10-11 65536]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2008-05-07 354840]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-07-30 73728]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-06-08 877864]
R2 O&O Defrag;O&O Defrag; C:\Program Files\OO Software\Defrag\oodag.exe [2009-09-12 1488128]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-08-21 66872]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2009-08-21 107832]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2004-12-13 49152]
R2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-04-14 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-04-14 40384]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-08-20 593920]
S2 gupdate1c9da27158549ea;Google Update Service (gupdate1c9da27158549ea); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-05-21 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-21 183280]
S2 WSearch;Vyhledávání systému Windows; C:\WINDOWS\system32\SearchIndexer.exe [2007-02-05 300032]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Macromedia Licensing Service;Macromedia Licensing Service; C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe [2008-04-26 68096]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2009-10-11 3369044]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119408
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Nejdou aktualizace windows

#2 Příspěvek od Rudy »

Dejte log z ComboFix.
Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

jardachal
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 23 bře 2008 15:50

Re: Nejdou aktualizace windows

#3 Příspěvek od jardachal »

takze po procisteni combofixem jsou aktualizace funkcni. dokonce se mi zpustil uz davno zapomenuty spybot :)
ac jsem pred spustenim combofixu vypnul vsechny ochrany, po restartech se o5 spustily. snad to nemelo nejaky zasedni vliv :( avast mi pritom take nasel afd.sys a ulozil do truhly.

tady je log:

ComboFix 10-05-06.01 - Jára 07.05.2010 7:09.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3582.2930 [GMT 2:00]
Spuštěný z: c:\documents and settings\Jára\Plocha\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-3568053021-986898911-3848740074-1001
c:\$recycle.bin\S-1-5-21-3568053021-986898911-3848740074-1003
c:\$recycle.bin\S-1-5-21-3568053021-986898911-3848740074-1004
c:\$recycle.bin\S-1-5-21-3568053021-986898911-3848740074-1005
c:\windows\system32\Dvbpws.dll

Nakažená kopie c:\windows\system32\drivers\afd.sys byla nalezena a vyléčena.
Obnovena kopie z - Kitty had a snack :p
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-04-07 do 2010-05-07 )))))))))))))))))))))))))))))))
.

2010-05-06 13:34 . 2010-05-06 13:34 -------- d-----w- c:\windows\Sun
2010-05-06 07:20 . 2010-05-06 07:41 -------- d-----w- c:\program files\trend micro
2010-05-06 07:20 . 2010-05-06 07:20 -------- d-----w- C:\rsit
2010-05-05 16:28 . 2010-05-05 16:28 -------- d--h--w- c:\windows\system32\GroupPolicy
2010-05-05 10:15 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-05-05 10:15 . 2010-05-05 10:15 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-05-05 10:15 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-04-20 21:12 . 2010-04-20 21:12 -------- d-----w- c:\program files\Common Files\INCA Shared
2010-04-19 13:30 . 2010-04-19 13:30 -------- d-----w- c:\program files\NCsoft

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-05-07 05:06 . 2009-12-28 12:13 0 ----a-w- c:\windows\system32\drivers\lvuvc.hs
2010-05-07 05:06 . 2009-12-28 12:13 0 ----a-w- c:\windows\system32\drivers\logiflt.iad
2010-05-06 11:55 . 2008-02-23 20:08 -------- d-----w- c:\program files\WinTidy
2010-05-03 21:45 . 2008-02-22 20:05 -------- d-----w- c:\program files\The Bat!
2010-04-19 13:30 . 2008-02-22 18:04 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-04-17 01:51 . 2009-05-21 15:15 -------- d-----w- c:\program files\Google
2010-04-14 16:47 . 2009-02-15 17:14 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-04-14 16:47 . 2009-02-15 17:13 153184 ----a-w- c:\windows\system32\aswBoot.exe
2010-04-14 16:35 . 2009-02-15 17:14 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-04-14 16:35 . 2009-02-15 17:14 162768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-04-14 16:31 . 2009-02-15 17:14 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-04-14 16:31 . 2009-02-15 17:14 100432 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-04-14 16:31 . 2009-02-15 17:14 94800 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-04-14 16:31 . 2009-02-15 17:14 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-04-14 16:30 . 2009-02-15 17:14 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-04-04 15:59 . 2001-10-25 12:00 469486 ----a-w- c:\windows\system32\perfh005.dat
2010-04-04 15:59 . 2001-10-25 12:00 96394 ----a-w- c:\windows\system32\perfc005.dat
2010-03-15 19:36 . 2008-02-22 20:16 -------- d-----w- c:\program files\Alwil Software
2010-03-13 11:46 . 2010-03-13 11:44 -------- d-----w- c:\program files\Tony Tough
2010-03-09 15:40 . 2008-02-27 10:54 -------- d-----w- c:\program files\Microsoft Games
2010-03-09 11:11 . 2002-09-20 16:04 430080 ----a-w- c:\windows\system32\vbscript.dll
2010-02-26 05:43 . 2002-09-20 16:05 668160 ----a-w- c:\windows\system32\wininet.dll
2010-02-26 05:43 . 2008-02-22 18:58 81920 ----a-w- c:\windows\system32\ieencode.dll
2010-02-24 13:11 . 2002-08-28 23:59 455680 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-02-24 08:16 . 2009-10-03 15:07 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-16 19:08 . 2002-09-20 17:12 2026496 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-02-16 19:08 . 2002-09-20 15:12 2148352 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-02-12 04:35 . 2002-09-20 16:03 100864 ----a-w- c:\windows\system32\6to4svc.dll
2010-02-11 12:02 . 2002-08-28 23:37 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys
2006-12-13 03:12 . 2008-04-18 23:10 66648 ----a-w- c:\program files\mozilla firefox\components\jar50.dll
2006-12-13 03:12 . 2008-04-18 23:10 54352 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll
2006-12-13 03:12 . 2008-04-18 23:10 34928 ----a-w- c:\program files\mozilla firefox\components\myspell.dll
2006-12-13 03:12 . 2008-04-18 23:10 46696 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll
2006-12-13 03:12 . 2008-04-18 23:10 172120 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll
2006-05-03 10:06 . 2008-02-23 20:24 163328 --sh--r- c:\windows\system32\flvDX.dll
.

------- Sigcheck -------

[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . F830958C63DEBE477FE8617685CF543D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2007-10-30 . 90CAFF4B094573449A0872A0F919B178 . 360064 . . [5.1.2600.3244] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
[-] 2007-10-30 . 64798ECFA43D78C7178375FCDD16D8C8 . 360832 . . [5.1.2600.3244] . . c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[7] 2004-08-03 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB941644$\tcpip.sys
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{9CB65206-89C4-402c-BA80-02D8C59F9B1D}"= "c:\program files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL" [2008-02-24 57344]

[HKEY_CLASSES_ROOT\clsid\{9cb65206-89c4-402c-ba80-02d8c59f9b1d}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinFast Schedule"="c:\program files\WinFast\WFDTV\WFWIZ.exe" [2008-06-20 2887680]
"EVEREST AutoStart"="c:\program files\Lavalys\EVEREST Ultimate Edition\everest.exe" [2009-10-01 2430048]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"36X Raid Configurer"="c:\windows\system32\xRaidSetup.exe" [2007-11-19 1966080]
"DT LGE"="c:\program files\Common Files\Portrait Displays\Shared\DT_startup.exe" [2007-10-11 81920]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2005-02-17 221184]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2005-02-17 81920]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-05-07 178712]
"WinFastDTV"="c:\program files\WinFast\WFDTV\DTVSchdl.exe" [2008-06-20 90112]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-01 61440]
"RTHDCPL"="RTHDCPL.EXE" [2009-05-21 17881600]
"OODefragTray"="c:\program files\OO Software\Defrag\oodtray.exe" [2009-09-11 2524416]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-04-14 2790472]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-03 866584]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Andy\Nabˇdka Start\Programy\Po spuçtŘnˇ\
WinTidy.lnk - c:\program files\WinTidyA\WinTidy.exe [2001-10-8 585216]

c:\documents and settings\David\Nabˇdka Start\Programy\Po spuçtŘnˇ\
WinTidy.lnk - c:\program files\WinTidyD\WinTidy.exe [2001-10-8 585216]

c:\documents and settings\Radim\Nabˇdka Start\Programy\Po spuçtŘnˇ\
WinTidy.lnk - c:\program files\WinTidyR\WinTidy.exe [2001-10-8 585216]

c:\documents and settings\J ra\Nabˇdka Start\Programy\Po spuçtŘnˇ\
WinTidy.lnk - c:\program files\WinTidy\WinTidy.exe [2001-10-8 585216]
Z stupce - nettester.exe.lnk - d:\ programy\ INTERNET\MŘýiź PING\nettester.exe [2009-11-10 232960]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Media Key.lnk - c:\program files\Media Key\MagicKey.exe [2008-4-12 159744]
StatBar.lnk - c:\program files\Globe Software\StatBar\StatBar.exe [2003-7-25 339456]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0oodbs

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Místní vyhledávání.lnk]
backup=c:\windows\pss\Místní vyhledávání.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Jára^Nabídka Start^Programy^Po spuštění^Mobile Phone Manager.lnk]
backup=c:\windows\pss\Mobile Phone Manager.lnkStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\365dni
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SecurityCenter

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
2007-02-16 17:49 149024 ----a-w- c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
2007-02-19 15:38 1962896 ----a-w- c:\program files\Acronis\TrueImageHome\TimounterMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-01-11 20:16 39792 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
2008-07-04 13:00 109056 ----a-w- c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EasyTuneVPro]
2007-07-26 14:05 20480 ----a-w- c:\program files\Gigabyte\ET5Pro\ETcall.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2008-09-01 15:08 173304 ----a-w- c:\progra~1\ICQ6\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2008-06-24 14:06 1840424 ----a-w- c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 03:22 1695232 ------w- c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
2008-06-08 07:31 2221352 ----a-w- c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nero PhotoShow Media Manager]
2007-04-27 18:22 312848 ----a-w- c:\progra~1\Nero\PHOTOS~1\data\Xtras\mssysmgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2008-06-19 07:53 570664 ----a-w- c:\program files\Common Files\Nero\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OPSE reminder]
2003-07-07 09:29 729088 ----a-r- c:\program files\ScanSoft\OmniPageSE2.0\EregEng\Ereg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpwareSE2]
2003-05-08 11:00 49152 ----a-w- c:\program files\ScanSoft\OmniPageSE2.0\opwareSE2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
2009-03-05 14:07 2260480 --sha-r- c:\program files\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2009-07-23 08:24 1217784 ----a-w- c:\program files\Steam\Steam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2008-02-22 03:25 144784 ----a-w- c:\program files\Java\jre1.6.0_05\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-05-21 15:15 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
2007-02-19 15:32 1188456 ----a-w- c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateStar]
2009-01-16 11:52 4370672 ----a-w- c:\documents and settings\Jára\Data aplikací\UpdateStar\UpdateStar.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\DAP\\DAP.exe"=
"c:\\Program Files\\ICQ\\Icq.exe"=
"c:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"d:\\ PROGRAMY\\ INTERNET\\sdílení souborů P2P\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\ICQ6\\ICQ.exe"=
"c:\\Program Files\\WinFast\\WFDTV\\DVBTAP.exe"=
"d:\\ PROGRAMY\\ INTERNET\\Universal Share Downloader\\USDownloader135\\USDownloader.exe"=
"c:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=
"c:\\Program Files\\DreamCom\\DreamCom.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FarCry2.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Launcher.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Editor.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Lineage II-interlude\\loader.exe"=
"c:\\Program Files\\SafeTP\\SafeTP.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R0 OODrvled;OODrvled;c:\windows\system32\drivers\OODrvled.sys [22.9.2004 14:57 15488]
R0 xmasscsi;xmasscsi;c:\windows\system32\drivers\xmasscsi.sys [23.2.2008 22:52 5248]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [15.2.2009 19:14 162768]
R1 kbfilter;Keyboard Filter Driver;c:\windows\system32\drivers\kbfilter.sys [12.4.2008 12:42 12856]
R1 UsbFltr;WayTechUSBFilterDriver;c:\windows\system32\drivers\UsbFltr.sys [12.4.2008 12:42 9291]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service;c:\program files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [6.12.2007 21:03 660768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [15.2.2009 19:14 19024]
R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [3.11.2006 20:19 13592]
R3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [23.2.2008 0:23 27248]
S2 gupdate1c9da27158549ea;Google Update Service (gupdate1c9da27158549ea);c:\program files\Google\Update\GoogleUpdate.exe [21.5.2009 17:16 133104]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [24.7.2009 16:44 1684736]
S3 GVTDrv;GVTDrv;c:\windows\system32\drivers\GVTDrv.sys [23.2.2008 18:19 24944]
S3 MarkFun_NT;MarkFun_NT;c:\program files\Gigabyte\ET5Pro\MARKFUN.W32 [23.2.2008 18:04 17912]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 SaiH0464;SaiH0464;c:\windows\system32\drivers\SaiH0464.sys [1.5.2007 16:37 132232]
S3 SE31bus;Sony Ericsson Device 049 Driver driver (WDM);c:\windows\system32\drivers\SE31bus.sys [1.5.2006 13:56 61600]
S3 SE31mdfl;Sony Ericsson Device 049 USB WMC Modem Filter;c:\windows\system32\drivers\SE31mdfl.sys [1.5.2006 13:57 9360]
S3 SE31mdm;Sony Ericsson Device 049 USB WMC Modem Driver;c:\windows\system32\drivers\SE31mdm.sys [1.5.2006 13:57 97184]
S3 SE31mgmt;Sony Ericsson Device 049 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\SE31mgmt.sys [1.5.2006 13:58 88688]
S3 se31nd5;Sony Ericsson Device 049 USB Ethernet Emulation SEMC49 (NDIS);c:\windows\system32\drivers\se31nd5.sys [1.5.2006 13:56 18704]
S3 SE31obex;Sony Ericsson Device 049 USB WMC OBEX Interface;c:\windows\system32\drivers\SE31obex.sys [1.5.2006 13:59 86560]
S3 se31unic;Sony Ericsson Device 049 USB Ethernet Emulation SEMC49 (WDM);c:\windows\system32\drivers\se31unic.sys [1.5.2006 13:56 90800]
S3 TVICHW32;TVICHW32;c:\windows\system32\drivers\TVICHW32.SYS [6.3.2008 12:52 23600]
S4 xmasbus;xmasbus;c:\windows\system32\drivers\xmasbus.sys [23.2.2008 22:52 141184]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-07-30 08:39 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'

2010-05-07 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-21 15:15]

2010-05-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-05-21 15:16]

2010-05-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-05-21 15:16]

2010-05-07 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 18:20]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: &Clean Traces - c:\program files\DAP\Privacy Package\dapcleanerie.htm
IE: &Download with &DAP - c:\program files\DAP\dapextie.htm
IE: >> Download This Youtube Video - UnlockForUs
IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm
IE: E&xportovat do aplikace Microsoft Excel
IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: Stáhnout pomocí USD - d:\ programy\ INTERNET\Universal Share Downloader\USDownloader135\Ext\downloadie.html
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\progra~1\TRANSLAT\2003\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\progra~1\TRANSLAT\2003\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\progra~1\TRANSLAT\2003\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\progra~1\TRANSLAT\2003\WEBIE.DLL
LSP: c:\windows\SAFETP\STPLAYER.DLL
DPF: DirectAnimation Java Classes
DPF: Microsoft XML Parser for Java
DPF: {361E6B79-4A69-4376-B0F2-3D1EBEE9D7E2} - hxxp://www.bartanet.eu/cam/RtspVaPgDec.cab
FF - ProfilePath - c:\documents and settings\Jára\Data aplikací\Mozilla\Firefox\Profiles\jviapeb2.default\
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

MSConfigStartUp-r37ph1usfn4w - c:\documents and settings\Jára\Local Settings\Temp\m.262.tmp.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-05-07 07:22
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt"

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\MarkFun_NT]
"ImagePath"="\??\c:\program files\Gigabyte\ET5Pro\markfun.w32"

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG10.00.00.01WORKSTATION"="75CA5A7EE429DC43C71F019123BFEE2C51D86486928C1317362D04E9DBBC4767BDEF5B6E779E0599B3838968D1AEF8A0CB961210FD0ECB1520B92B13F9AB70AD3B3B9E7C7A57968E33D9B1E8571816E3D045AB88F554FC51506FDE764DC5A329A3A8C9DAFDC9D1FDD396C261EBF5F57FE96FBA7C797DEBA0E68D07FAC1F0D59A50CD456CF240FD37C9C145D1AB15CFECC1B0072A6DFDDFCB29E44F3DA3E37FB8BF4EBF4AB0D464FCEB7607719317DF9F2938A2031B9AA3918159288D242B9BAE93662840F0F7D10734621BA90973E1F714CADE2FAD70FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC7933A2D97226D213B5558EDD5E5BE2F6E6675D575E7D6A3B98080CAA5DFEF58CF522CE24869F96305FB4CA47CA033F1C6175DE106271C6AAC9F470775D36D753D10DE293549A673893051A7B9BB948708C0C180A15A0C935AF809C68073EE24E0709DE6A832275DEE77ED4BB6A14177233A0065CEC69F5672B24F66A2BBD409F52051B44E074AA04603460F09B8077DE430DBE5B058E99FAB21EE76143F05F1A5243F1B25DDD3839E48D2A77380679238C7A62D0226E455B9F7DDCA469A672C98AD841388C468FC4C24520A16E3DF164C56A0F7CA775CD29B0A749FDDBC2EDEAE2AFEB4DA4A4E8A129E8B7328ED377FA07AFE80E2225CEB98956A1AD7EBB8DEFA505D8DE83043FFE2D5DE6650D89E76FCF719AAEBD94A294AF15DF65571DCEFC036BF2CB2886513EC6D6AAE403B5E2047EADD0F4CCEF6BF58CC5814E9106F3EC0E48A768B6DFA277D26203542D41CBABDB323A71C4718E50701B8781FB2A034DBE56EA7DF658F9F212DDF147ECA84C8C8FA40D25406EB4468C20F88E0AD0465FF022B345D44BE2B0A7FA80C6C7FCCE04A67A01077C4C4CB077B05FF853D5CB97E10DFA7260AA2CE31EC2B851E4E484209201D37FDB06849CAA7D47B61026E5A0374F4126CC7969F1DF8E2C569118E0A5A9D6C56DE3A8534A860C42342148AB58F6EF877AF250F175BE0D6D3C40E41D8B25F11B22BED6F2AE4CB367CF0AD0754F8DCDD57A4EDBDF3CECC194D9042D34FC22979B65BAC66072A2224FDBEF6CE24BC81A35267E5B12C985823D7E97E3E6D9A2E417EFC9C35A7194D918211F59D4465EDC36F24925AE55047B86E9D5943A368AC95A6F802BE8BB0F2B635906EC726D63ECE947931F1949C62A1452415BF458240ABC8799EF5396E443D633B68B2622D479E7FEEBC67FC195E18E5FFD6A24BD1DBB15CCF396A7FACC9D9BD269B39C7912054BEB00ACCE14964921AE5506171387CD42498FBBB79462895FCE7871C8BEDDE331D0A5743BC557DBFB523488623E56FC237C148C164422AC54B1E26AE0EDDF41BD65D256BB914766504D2B5D5ED6E55E1CD6"
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
"OODEFRAG11.00.00.01WORKSTATION"="5985B4636A142B705D8C5FBB0F680773BCC66E7C8FF797B21D69568E5807687FBD2B92182FA43BD5E576191EC8DCE3C7AA25A0B9B301767C7ACE30D58F0143357F298B8A94CCA0E850775F72EE4D0E71EE82C9AAE4ED18439C31B24BCFAB9BB9751EE700E6445071E6CB95A7D1E5A32F69DE100898F8E6DF1870DC0ED6754B218A6B2324464AAFD9897758911853B96510FC46ED1A61C54F97B1E12432CC21203C346F04A89F1AB0ACBE72663B4AD79AE9E2F85D076C88B357DA2A7748A8DF119DE22F14570ADFA9562DE6C308807A7D14DDE53BD461F8CFA999D0D5CE7F3BF053A4FD29EC53C21BFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC79338EDD5E5BE2F6E6675D575E7D6A3B9808A9C6AECB7A5D1407648B188F22E0E936221CB844AB0687C50F8177CDF823BE1B493A61FB357893463B2ADAEC2AAFE9903CBCC11F91FB8FCF0416E016275597D866CBB90C933C0B7466B512B32691616B984F5D8ADB7CCE21CE22F1BD35E261BE20C70718E6EAE9ECAE7390894697BF9CD2975F361FEAC2E7058C979B409EC3739F5674BFEB69A6EEF2EC5DF60E56E4209E1FC835C2ABD978CAFEF2EC33DE5A44A1616189B61E2862A26BB46B5466A891C2B1547B8628F5C85E67D9CFD07D361FF519DDDB2EF5CC4EC30107B547E3D5B49862ED64F7CDEEF30D7757C72F5A5A9A01EF34848C5F6560EF02F58CE3F0A7EC0F06B530FD8F8FB7B926A63CB6583FEB3A9DDB33DFCEB6E8D4065A0AFE31D14727B4817ED0E218F85D2E3BF8A7DC5171AF9D84FB8D3B79DCB169BFA9414D7A6FF7CC58587D40B93E028CB92D1253EEA9002E11D749215BD5DECA654FA4723C38AC6F77A664A61CB2C804FA6CDB2BEE38DFD297239F007D8FC290BDBEFA50A3978280CFB6B9965A23621A0DAD3F5596E517D2611FEE5BF3EB5CE272A1E69C33A64C29053D869604041799324DC8C8A31E04396FEDE8BAC96F3CABDD04DF0FE024EE586FCFA8301B6C43115F095C0145F094D4F299172978C3871D0FD9B2E497F0E63E1C6850F0979755D13D852EFCA012CE39D18E51B774B4F8AAC977FE5E3414C04F4CE5026964E2CF71ABCAC83E4BD9C93DA79C48F822335B8C8616B6C08A379FC5F30A16B060D14B4BB942894CD443317CC3F8FD05D855123FEF5325D4DEA7B89DBBFB3A60DD8C72FD2E3DA2B03AEEC756A5BA48F76752120266306266EAD858990045EF9525DC05E9036E98FA7122DE6D86DF54708E09E2D87B9360C6DD5EDA3E505589727031D43764EBC7BE61C1E12951481F1281F8A40DF944E14AD9F233D372FDB19C6E9D4BCE34B3DA90E55C4A34A1B67B856BC7062BD97100C9F376E7E7DE76653DC3D862DE89A3D58C509F2AFDCCD511F568BCCD814D2D2521B6E8"
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
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1144)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'lsass.exe'(1200)
c:\windows\system32\relog_ap.dll
.
Celkový čas: 2010-05-07 07:24:46
ComboFix-quarantined-files.txt 2010-05-07 05:24

Před spuštěním: Volných bajtů: 65 221 074 944
Po spuštění: Volných bajtů: 67 287 404 544

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
;
;Warning: Boot.ini is used on Windows XP and earlier operating systems.
;Warning: Use BCDEDIT.exe to modify Windows Vista boot options.
;
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /FASTDETECT /NOEXECUTE=OPTIN

- - End Of File - - E1C3F4161855909E442DA783608FC458

jardachal
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 23 bře 2008 15:50

Re: Nejdou aktualizace windows

#4 Příspěvek od jardachal »

jeste dodam, ze sem preinstaloval Alkohol 52% protoze sem potreboval virtualni mechaniku. combofix mi to povipinal nebo co :)
doufam, ze vse bude v pohode uz.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119408
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Nejdou aktualizace windows

#5 Příspěvek od Rudy »

Budete muset ještě jednou spustit CF. Otevřte poznámkový blok a zkopírujte do něj:
Collect::
c:\windows\system32\drivers\lvuvc.hs
c:\windows\system32\drivers\logiflt.iad

Driver::
lvuvc
logiflt
Uložte na plochu jako CFScript.txt. pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Obrázek
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

jardachal
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 23 bře 2008 15:50

Re: Nejdou aktualizace windows

#6 Příspěvek od jardachal »

takze..CF po me chtel aktualizaci, kterou jsem povolil. snad to nevadi. pak jakmile na me vyskocil log, PC zamrzlo :( takze restart. a tet tady mam totalne rozhozenou stranku do nebesske šíře:(

log zde:

ComboFix 10-05-06.05 - Jára 07.05.2010 20:04:40.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3582.2799 [GMT 2:00]
Spuštěný z: c:\documents and settings\Jára\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Jára\Plocha\CFScript.txt
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

file zipped: c:\windows\system32\drivers\logiflt.iad
file zipped: c:\windows\system32\drivers\lvuvc.hs
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\drivers\logiflt.iad
c:\windows\system32\drivers\lvuvc.hs

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_LVUVC


((((((((((((((((((((((((( Soubory vytvořené od 2010-04-07 do 2010-05-07 )))))))))))))))))))))))))))))))
.

2010-05-07 11:48 . 2010-05-07 11:48 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-05-06 13:34 . 2010-05-06 13:34 -------- d-----w- c:\windows\Sun
2010-05-06 07:20 . 2010-05-06 07:41 -------- d-----w- c:\program files\trend micro
2010-05-06 07:20 . 2010-05-06 07:20 -------- d-----w- C:\rsit
2010-05-05 16:28 . 2010-05-05 16:28 -------- d--h--w- c:\windows\system32\GroupPolicy
2010-05-05 10:15 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-05-05 10:15 . 2010-05-05 10:15 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-05-05 10:15 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-04-20 21:12 . 2010-04-20 21:12 -------- d-----w- c:\program files\Common Files\INCA Shared
2010-04-19 13:30 . 2010-04-19 13:30 -------- d-----w- c:\program files\NCsoft

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-05-07 11:43 . 2008-02-23 20:08 -------- d-----w- c:\program files\WinTidy
2010-05-06 20:59 . 2009-02-15 17:13 165032 ----a-w- c:\windows\system32\aswBoot.exe
2010-05-06 20:39 . 2009-02-15 17:14 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-05-06 20:39 . 2009-02-15 17:14 164048 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-05-06 20:34 . 2009-02-15 17:14 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-05-06 20:33 . 2009-02-15 17:14 100432 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-05-06 20:33 . 2009-02-15 17:14 94800 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-05-06 20:33 . 2009-02-15 17:14 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-05-06 20:33 . 2009-02-15 17:14 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-05-03 21:45 . 2008-02-22 20:05 -------- d-----w- c:\program files\The Bat!
2010-04-19 13:30 . 2008-02-22 18:04 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-04-17 01:51 . 2009-05-21 15:15 -------- d-----w- c:\program files\Google
2010-04-14 16:47 . 2009-02-15 17:14 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-04-04 15:59 . 2001-10-25 12:00 469486 ----a-w- c:\windows\system32\perfh005.dat
2010-04-04 15:59 . 2001-10-25 12:00 96394 ----a-w- c:\windows\system32\perfc005.dat
2010-03-15 19:36 . 2008-02-22 20:16 -------- d-----w- c:\program files\Alwil Software
2010-03-13 11:46 . 2010-03-13 11:44 -------- d-----w- c:\program files\Tony Tough
2010-03-09 15:40 . 2008-02-27 10:54 -------- d-----w- c:\program files\Microsoft Games
2010-03-09 11:11 . 2002-09-20 16:04 430080 ----a-w- c:\windows\system32\vbscript.dll
2010-02-26 05:43 . 2002-09-20 16:05 668160 ----a-w- c:\windows\system32\wininet.dll
2010-02-26 05:43 . 2008-02-22 18:58 81920 ----a-w- c:\windows\system32\ieencode.dll
2010-02-24 13:11 . 2002-08-28 23:59 455680 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-02-24 08:16 . 2009-10-03 15:07 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-16 19:08 . 2002-09-20 17:12 2026496 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-02-16 19:08 . 2002-09-20 15:12 2148352 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-02-12 04:35 . 2002-09-20 16:03 100864 ----a-w- c:\windows\system32\6to4svc.dll
2010-02-11 12:02 . 2002-08-28 23:37 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys
2006-12-13 03:12 . 2008-04-18 23:10 66648 ----a-w- c:\program files\mozilla firefox\components\jar50.dll
2006-12-13 03:12 . 2008-04-18 23:10 54352 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll
2006-12-13 03:12 . 2008-04-18 23:10 34928 ----a-w- c:\program files\mozilla firefox\components\myspell.dll
2006-12-13 03:12 . 2008-04-18 23:10 46696 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll
2006-12-13 03:12 . 2008-04-18 23:10 172120 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll
2006-05-03 10:06 . 2008-02-23 20:24 163328 --sh--r- c:\windows\system32\flvDX.dll
.

------- Sigcheck -------

[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . F830958C63DEBE477FE8617685CF543D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2007-10-30 . 90CAFF4B094573449A0872A0F919B178 . 360064 . . [5.1.2600.3244] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
[-] 2007-10-30 . 64798ECFA43D78C7178375FCDD16D8C8 . 360832 . . [5.1.2600.3244] . . c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[7] 2004-08-03 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB941644$\tcpip.sys
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{9CB65206-89C4-402c-BA80-02D8C59F9B1D}"= "c:\program files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL" [2008-02-24 57344]

[HKEY_CLASSES_ROOT\clsid\{9cb65206-89c4-402c-ba80-02d8c59f9b1d}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinFast Schedule"="c:\program files\WinFast\WFDTV\WFWIZ.exe" [2008-06-20 2887680]
"EVEREST AutoStart"="c:\program files\Lavalys\EVEREST Ultimate Edition\everest.exe" [2009-10-01 2430048]
"AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 52\axcmd.exe" [2009-04-24 203416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"36X Raid Configurer"="c:\windows\system32\xRaidSetup.exe" [2007-11-19 1966080]
"DT LGE"="c:\program files\Common Files\Portrait Displays\Shared\DT_startup.exe" [2007-10-11 81920]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2005-02-17 221184]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2005-02-17 81920]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-05-07 178712]
"WinFastDTV"="c:\program files\WinFast\WFDTV\DTVSchdl.exe" [2008-06-20 90112]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-01 61440]
"RTHDCPL"="RTHDCPL.EXE" [2009-05-21 17881600]
"OODefragTray"="c:\program files\OO Software\Defrag\oodtray.exe" [2009-09-11 2524416]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-05-06 2815192]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-03 866584]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Andy\Nabˇdka Start\Programy\Po spuçtŘnˇ\
WinTidy.lnk - c:\program files\WinTidyA\WinTidy.exe [2001-10-8 585216]

c:\documents and settings\David\Nabˇdka Start\Programy\Po spuçtŘnˇ\
WinTidy.lnk - c:\program files\WinTidyD\WinTidy.exe [2001-10-8 585216]

c:\documents and settings\Radim\Nabˇdka Start\Programy\Po spuçtŘnˇ\
WinTidy.lnk - c:\program files\WinTidyR\WinTidy.exe [2001-10-8 585216]

c:\documents and settings\J ra\Nabˇdka Start\Programy\Po spuçtŘnˇ\
WinTidy.lnk - c:\program files\WinTidy\WinTidy.exe [2001-10-8 585216]
Z stupce - nettester.exe.lnk - d:\ programy\ INTERNET\MŘýiź PING\nettester.exe [2009-11-10 232960]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Media Key.lnk - c:\program files\Media Key\MagicKey.exe [2008-4-12 159744]
StatBar.lnk - c:\program files\Globe Software\StatBar\StatBar.exe [2003-7-25 339456]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0oodbs

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Místní vyhledávání.lnk]
backup=c:\windows\pss\Místní vyhledávání.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Jára^Nabídka Start^Programy^Po spuštění^Mobile Phone Manager.lnk]
backup=c:\windows\pss\Mobile Phone Manager.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
2007-02-16 17:49 149024 ----a-w- c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
2007-02-19 15:38 1962896 ----a-w- c:\program files\Acronis\TrueImageHome\TimounterMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-01-11 20:16 39792 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
2009-04-24 03:05 203416 ----a-w- c:\program files\Alcohol Soft\Alcohol 52\AxCmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
2008-07-04 13:00 109056 ----a-w- c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EasyTuneVPro]
2007-07-26 14:05 20480 ----a-w- c:\program files\Gigabyte\ET5Pro\ETcall.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2008-09-01 15:08 173304 ----a-w- c:\progra~1\ICQ6\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2008-06-24 14:06 1840424 ----a-w- c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 03:22 1695232 ------w- c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
2008-06-08 07:31 2221352 ----a-w- c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nero PhotoShow Media Manager]
2007-04-27 18:22 312848 ----a-w- c:\progra~1\Nero\PHOTOS~1\data\Xtras\mssysmgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2008-06-19 07:53 570664 ----a-w- c:\program files\Common Files\Nero\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OPSE reminder]
2003-07-07 09:29 729088 ----a-r- c:\program files\ScanSoft\OmniPageSE2.0\EregEng\Ereg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpwareSE2]
2003-05-08 11:00 49152 ----a-w- c:\program files\ScanSoft\OmniPageSE2.0\opwareSE2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
2009-03-05 14:07 2260480 --sha-r- c:\program files\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2009-07-23 08:24 1217784 ----a-w- c:\program files\Steam\Steam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2008-02-22 03:25 144784 ----a-w- c:\program files\Java\jre1.6.0_05\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-05-21 15:15 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
2007-02-19 15:32 1188456 ----a-w- c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateStar]
2009-01-16 11:52 4370672 ----a-w- c:\documents and settings\Jára\Data aplikací\UpdateStar\UpdateStar.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\DAP\\DAP.exe"=
"c:\\Program Files\\ICQ\\Icq.exe"=
"c:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"d:\\ PROGRAMY\\ INTERNET\\sdílení souborů P2P\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\ICQ6\\ICQ.exe"=
"c:\\Program Files\\WinFast\\WFDTV\\DVBTAP.exe"=
"d:\\ PROGRAMY\\ INTERNET\\Universal Share Downloader\\USDownloader135\\USDownloader.exe"=
"c:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=
"c:\\Program Files\\DreamCom\\DreamCom.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FarCry2.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Launcher.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Editor.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Lineage II-interlude\\loader.exe"=
"c:\\Program Files\\SafeTP\\SafeTP.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R0 OODrvled;OODrvled;c:\windows\system32\drivers\OODrvled.sys [22.9.2004 14:57 15488]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [7.5.2010 13:48 691696]
R0 xmasscsi;xmasscsi;c:\windows\system32\drivers\xmasscsi.sys [23.2.2008 22:52 5248]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [15.2.2009 19:14 164048]
R1 kbfilter;Keyboard Filter Driver;c:\windows\system32\drivers\kbfilter.sys [12.4.2008 12:42 12856]
R1 UsbFltr;WayTechUSBFilterDriver;c:\windows\system32\drivers\UsbFltr.sys [12.4.2008 12:42 9291]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service;c:\program files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [6.12.2007 21:03 660768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [15.2.2009 19:14 19024]
R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [3.11.2006 20:19 13592]
R3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [23.2.2008 0:23 27248]
S2 gupdate1c9da27158549ea;Google Update Service (gupdate1c9da27158549ea);c:\program files\Google\Update\GoogleUpdate.exe [21.5.2009 17:16 133104]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [24.7.2009 16:44 1684736]
S3 GVTDrv;GVTDrv;c:\windows\system32\drivers\GVTDrv.sys [23.2.2008 18:19 24944]
S3 MarkFun_NT;MarkFun_NT;c:\program files\Gigabyte\ET5Pro\MARKFUN.W32 [23.2.2008 18:04 17912]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 SaiH0464;SaiH0464;c:\windows\system32\drivers\SaiH0464.sys [1.5.2007 16:37 132232]
S3 SE31bus;Sony Ericsson Device 049 Driver driver (WDM);c:\windows\system32\drivers\SE31bus.sys [1.5.2006 13:56 61600]
S3 SE31mdfl;Sony Ericsson Device 049 USB WMC Modem Filter;c:\windows\system32\drivers\SE31mdfl.sys [1.5.2006 13:57 9360]
S3 SE31mdm;Sony Ericsson Device 049 USB WMC Modem Driver;c:\windows\system32\drivers\SE31mdm.sys [1.5.2006 13:57 97184]
S3 SE31mgmt;Sony Ericsson Device 049 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\SE31mgmt.sys [1.5.2006 13:58 88688]
S3 se31nd5;Sony Ericsson Device 049 USB Ethernet Emulation SEMC49 (NDIS);c:\windows\system32\drivers\se31nd5.sys [1.5.2006 13:56 18704]
S3 SE31obex;Sony Ericsson Device 049 USB WMC OBEX Interface;c:\windows\system32\drivers\SE31obex.sys [1.5.2006 13:59 86560]
S3 se31unic;Sony Ericsson Device 049 USB Ethernet Emulation SEMC49 (WDM);c:\windows\system32\drivers\se31unic.sys [1.5.2006 13:56 90800]
S3 TVICHW32;TVICHW32;c:\windows\system32\drivers\TVICHW32.SYS [6.3.2008 12:52 23600]
S4 xmasbus;xmasbus;c:\windows\system32\drivers\xmasbus.sys [23.2.2008 22:52 141184]

--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - EVERESTDRIVER

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-07-30 08:39 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'

2010-05-07 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-21 15:15]

2010-05-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-05-21 15:16]

2010-05-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-05-21 15:16]

2010-05-07 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 18:20]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: &Clean Traces - c:\program files\DAP\Privacy Package\dapcleanerie.htm
IE: &Download with &DAP - c:\program files\DAP\dapextie.htm
IE: >> Download This Youtube Video - UnlockForUs
IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm
IE: E&xportovat do aplikace Microsoft Excel
IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: Stáhnout pomocí USD - d:\ programy\ INTERNET\Universal Share Downloader\USDownloader135\Ext\downloadie.html
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\progra~1\TRANSLAT\2003\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\progra~1\TRANSLAT\2003\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\progra~1\TRANSLAT\2003\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\progra~1\TRANSLAT\2003\WEBIE.DLL
LSP: c:\windows\SAFETP\STPLAYER.DLL
DPF: DirectAnimation Java Classes
DPF: Microsoft XML Parser for Java
DPF: {361E6B79-4A69-4376-B0F2-3D1EBEE9D7E2} - hxxp://www.bartanet.eu/cam/RtspVaPgDec.cab
FF - ProfilePath - c:\documents and settings\Jára\Data aplikací\Mozilla\Firefox\Profiles\jviapeb2.default\
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-05-07 20:10
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys sphc.sys >>UNKNOWN [0x8B548938]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xba10cf28
\Driver\ACPI -> ACPI.sys @ 0xb9e74cb8
\Driver\atapi -> atapi.sys @ 0xb9e09b40
\Driver\iaStor -> iaStor.sys @ 0xb9d775a0
IoDeviceObjectType -> SecurityProcedure -> ntkrnlpa.exe @ 0x80583d4a
\Device\Harddisk0\DR0 -> SecurityProcedure -> ntkrnlpa.exe @ 0x80583d4a
NDIS: Realtek RTL8168/8111 PCI-E Gigabit Ethernet NIC -> SendCompleteHandler -> NDIS.sys @ 0xb9c2abb0
PacketIndicateHandler -> NDIS.sys @ 0xb9c37a21
SendHandler -> NDIS.sys @ 0xb9c1587b
user & kernel MBR OK

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt"

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\MarkFun_NT]
"ImagePath"="\??\c:\program files\Gigabyte\ET5Pro\markfun.w32"

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG10.00.00.01WORKSTATION"="75CA5A7EE429DC43C71F019123BFEE2C51D86486928C1317362D04E9DBBC4767BDEF5B6E779E0599B3838968D1AEF8A0CB961210FD0ECB1520B92B13F9AB70AD3B3B9E7C7A57968E33D9B1E8571816E3D045AB88F554FC51506FDE764DC5A329A3A8C9DAFDC9D1FDD396C261EBF5F57FE96FBA7C797DEBA0E68D07FAC1F0D59A50CD456CF240FD37C9C145D1AB15CFECC1B0072A6DFDDFCB29E44F3DA3E37FB8BF4EBF4AB0D464FCEB7607719317DF9F2938A2031B9AA3918159288D242B9BAE93662840F0F7D10734621BA90973E1F714CADE2FAD70FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC7933A2D97226D213B5558EDD5E5BE2F6E6675D575E7D6A3B98080CAA5DFEF58CF522CE24869F96305FB4CA47CA033F1C6175DE106271C6AAC9F470775D36D753D10DE293549A673893051A7B9BB948708C0C180A15A0C935AF809C68073EE24E0709DE6A832275DEE77ED4BB6A14177233A0065CEC69F5672B24F66A2BBD409F52051B44E074AA04603460F09B8077DE430DBE5B058E99FAB21EE76143F05F1A5243F1B25DDD3839E48D2A77380679238C7A62D0226E455B9F7DDCA469A672C98AD841388C468FC4C24520A16E3DF164C56A0F7CA775CD29B0A749FDDBC2EDEAE2AFEB4DA4A4E8A129E8B7328ED377FA07AFE80E2225CEB98956A1AD7EBB8DEFA505D8DE83043FFE2D5DE6650D89E76FCF719AAEBD94A294AF15DF65571DCEFC036BF2CB2886513EC6D6AAE403B5E2047EADD0F4CCEF6BF58CC5814E9106F3EC0E48A768B6DFA277D26203542D41CBABDB323A71C4718E50701B8781FB2A034DBE56EA7DF658F9F212DDF147ECA84C8C8FA40D25406EB4468C20F88E0AD0465FF022B345D44BE2B0A7FA80C6C7FCCE04A67A01077C4C4CB077B05FF853D5CB97E10DFA7260AA2CE31EC2B851E4E484209201D37FDB06849CAA7D47B61026E5A0374F4126CC7969F1DF8E2C569118E0A5A9D6C56DE3A8534A860C42342148AB58F6EF877AF250F175BE0D6D3C40E41D8B25F11B22BED6F2AE4CB367CF0AD0754F8DCDD57A4EDBDF3CECC194D9042D34FC22979B65BAC66072A2224FDBEF6CE24BC81A35267E5B12C985823D7E97E3E6D9A2E417EFC9C35A7194D918211F59D4465EDC36F24925AE55047B86E9D5943A368AC95A6F802BE8BB0F2B635906EC726D63ECE947931F1949C62A1452415BF458240ABC8799EF5396E443D633B68B2622D479E7FEEBC67FC195E18E5FFD6A24BD1DBB15CCF396A7FACC9D9BD269B39C7912054BEB00ACCE14964921AE5506171387CD42498FBBB79462895FCE7871C8BEDDE331D0A5743BC557DBFB523488623E56FC237C148C164422AC54B1E26AE0EDDF41BD65D256BB914766504D2B5D5ED6E55E1CD6"
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
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1164)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'lsass.exe'(1220)
c:\windows\system32\relog_ap.dll

- - - - - - - > 'Explorer.EXE'(1592)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\SAFETP\STPLAYER.DLL
c:\program files\Common Files\Portrait Displays\Shared\dthook.dll
c:\program files\Common Files\Portrait Displays\Shared\PresetsCOM.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\windows\system32\WgaTray.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\program files\Common Files\Acronis\Schedule2\schedul2.exe
c:\program files\Common Files\Portrait Displays\Plugins\AM\dtsslsrv.exe
c:\windows\system32\crypserv.exe
c:\program files\Common Files\Portrait Displays\Shared\dtsrvc.exe
c:\program files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\program files\OO Software\Defrag\oodag.exe
c:\windows\system32\IoctlSvc.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\program files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\windows\system32\SearchIndexer.exe
c:\program files\Portrait Displays\forteManager\DTHtml.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\Common Files\Portrait Displays\Shared\HookManager.exe
c:\windows\RTHDCPL.EXE
c:\program files\Media Key\OSD.EXE
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
d:\ programy\ INTERNET\Měřič PING\nettester.exe
c:\windows\system32\drwtsn32.exe
c:\windows\system32\drwtsn32.exe
.
**************************************************************************
.
Celkový čas: 2010-05-07 20:14:50 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-05-07 18:14
ComboFix2.txt 2010-05-07 05:24

Před spuštěním: Volných bajtů: 67 190 661 120
Po spuštění: Volných bajtů: 66 918 785 024

- - End Of File - - 8113E1CBC9ED9493C67A22C42359E9BD

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119408
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Nejdou aktualizace windows

#7 Příspěvek od Rudy »

Zkuste spustit ještě jednou tímto skriptem:
Folder::
c:\program files\AskTBar

Registry::
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{9CB65206-89C4-402c-BA80-02D8C59F9B1D}"=-
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

jardachal
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 23 bře 2008 15:50

Re: Nejdou aktualizace windows

#8 Příspěvek od jardachal »

zatim je to OK :)

ComboFix 10-05-07.07 - Jára 08.05.2010 18:55:57.3.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3582.2947 [GMT 2:00]
Spuštěný z: c:\documents and settings\Jára\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Jára\Plocha\CFScript.txt
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\AskTBar
c:\program files\AskTBar\PopSwatr\History\notallow
c:\program files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-04-08 do 2010-05-08 )))))))))))))))))))))))))))))))
.

2010-05-07 11:48 . 2010-05-07 11:48 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-05-06 13:34 . 2010-05-06 13:34 -------- d-----w- c:\windows\Sun
2010-05-06 07:20 . 2010-05-06 07:41 -------- d-----w- c:\program files\trend micro
2010-05-06 07:20 . 2010-05-06 07:20 -------- d-----w- C:\rsit
2010-05-05 16:28 . 2010-05-05 16:28 -------- d--h--w- c:\windows\system32\GroupPolicy
2010-05-05 10:15 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-05-05 10:15 . 2010-05-05 10:15 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-05-05 10:15 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-04-20 21:12 . 2010-04-20 21:12 -------- d-----w- c:\program files\Common Files\INCA Shared
2010-04-19 13:30 . 2010-04-19 13:30 -------- d-----w- c:\program files\NCsoft

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-05-07 11:43 . 2008-02-23 20:08 -------- d-----w- c:\program files\WinTidy
2010-05-06 20:59 . 2009-02-15 17:13 165032 ----a-w- c:\windows\system32\aswBoot.exe
2010-05-06 20:39 . 2009-02-15 17:14 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-05-06 20:39 . 2009-02-15 17:14 164048 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-05-06 20:34 . 2009-02-15 17:14 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-05-06 20:33 . 2009-02-15 17:14 100432 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-05-06 20:33 . 2009-02-15 17:14 94800 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-05-06 20:33 . 2009-02-15 17:14 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-05-06 20:33 . 2009-02-15 17:14 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-05-03 21:45 . 2008-02-22 20:05 -------- d-----w- c:\program files\The Bat!
2010-04-19 13:30 . 2008-02-22 18:04 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-04-17 01:51 . 2009-05-21 15:15 -------- d-----w- c:\program files\Google
2010-04-14 16:47 . 2009-02-15 17:14 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-04-04 15:59 . 2001-10-25 12:00 469486 ----a-w- c:\windows\system32\perfh005.dat
2010-04-04 15:59 . 2001-10-25 12:00 96394 ----a-w- c:\windows\system32\perfc005.dat
2010-03-15 19:36 . 2008-02-22 20:16 -------- d-----w- c:\program files\Alwil Software
2010-03-13 11:46 . 2010-03-13 11:44 -------- d-----w- c:\program files\Tony Tough
2010-03-09 11:11 . 2002-09-20 16:04 430080 ----a-w- c:\windows\system32\vbscript.dll
2010-02-26 05:43 . 2002-09-20 16:05 668160 ----a-w- c:\windows\system32\wininet.dll
2010-02-26 05:43 . 2008-02-22 18:58 81920 ----a-w- c:\windows\system32\ieencode.dll
2010-02-24 13:11 . 2002-08-28 23:59 455680 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-02-24 08:16 . 2009-10-03 15:07 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-16 19:08 . 2002-09-20 17:12 2026496 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-02-16 19:08 . 2002-09-20 15:12 2148352 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-02-12 04:35 . 2002-09-20 16:03 100864 ----a-w- c:\windows\system32\6to4svc.dll
2010-02-11 12:02 . 2002-08-28 23:37 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys
2006-12-13 03:12 . 2008-04-18 23:10 66648 ----a-w- c:\program files\mozilla firefox\components\jar50.dll
2006-12-13 03:12 . 2008-04-18 23:10 54352 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll
2006-12-13 03:12 . 2008-04-18 23:10 34928 ----a-w- c:\program files\mozilla firefox\components\myspell.dll
2006-12-13 03:12 . 2008-04-18 23:10 46696 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll
2006-12-13 03:12 . 2008-04-18 23:10 172120 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll
2006-05-03 10:06 . 2008-02-23 20:24 163328 --sh--r- c:\windows\system32\flvDX.dll
.

------- Sigcheck -------

[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . F830958C63DEBE477FE8617685CF543D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2007-10-30 . 90CAFF4B094573449A0872A0F919B178 . 360064 . . [5.1.2600.3244] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
[-] 2007-10-30 . 64798ECFA43D78C7178375FCDD16D8C8 . 360832 . . [5.1.2600.3244] . . c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[7] 2004-08-03 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB941644$\tcpip.sys
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinFast Schedule"="c:\program files\WinFast\WFDTV\WFWIZ.exe" [2008-06-20 2887680]
"EVEREST AutoStart"="c:\program files\Lavalys\EVEREST Ultimate Edition\everest.exe" [2009-10-01 2430048]
"AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 52\axcmd.exe" [2009-04-24 203416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"36X Raid Configurer"="c:\windows\system32\xRaidSetup.exe" [2007-11-19 1966080]
"DT LGE"="c:\program files\Common Files\Portrait Displays\Shared\DT_startup.exe" [2007-10-11 81920]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2005-02-17 221184]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2005-02-17 81920]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-05-07 178712]
"WinFastDTV"="c:\program files\WinFast\WFDTV\DTVSchdl.exe" [2008-06-20 90112]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-01 61440]
"RTHDCPL"="RTHDCPL.EXE" [2009-05-21 17881600]
"OODefragTray"="c:\program files\OO Software\Defrag\oodtray.exe" [2009-09-11 2524416]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-05-06 2815192]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-03 866584]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Radim\Nabˇdka Start\Programy\Po spuçtŘnˇ\
WinTidy.lnk - c:\program files\WinTidyR\WinTidy.exe [2001-10-8 585216]

c:\documents and settings\J ra\Nabˇdka Start\Programy\Po spuçtŘnˇ\
WinTidy.lnk - c:\program files\WinTidy\WinTidy.exe [2001-10-8 585216]
Z stupce - nettester.exe.lnk - d:\ programy\ INTERNET\MŘýiź PING\nettester.exe [2009-11-10 232960]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Media Key.lnk - c:\program files\Media Key\MagicKey.exe [2008-4-12 159744]
StatBar.lnk - c:\program files\Globe Software\StatBar\StatBar.exe [2003-7-25 339456]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0oodbs

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Místní vyhledávání.lnk]
backup=c:\windows\pss\Místní vyhledávání.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Jára^Nabídka Start^Programy^Po spuštění^Mobile Phone Manager.lnk]
backup=c:\windows\pss\Mobile Phone Manager.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
2007-02-16 17:49 149024 ----a-w- c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
2007-02-19 15:38 1962896 ----a-w- c:\program files\Acronis\TrueImageHome\TimounterMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-01-11 20:16 39792 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
2009-04-24 03:05 203416 ----a-w- c:\program files\Alcohol Soft\Alcohol 52\AxCmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
2008-07-04 13:00 109056 ----a-w- c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EasyTuneVPro]
2007-07-26 14:05 20480 ----a-w- c:\program files\Gigabyte\ET5Pro\ETcall.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2008-09-01 15:08 173304 ----a-w- c:\progra~1\ICQ6\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2008-06-24 14:06 1840424 ----a-w- c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 03:22 1695232 ------w- c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
2008-06-08 07:31 2221352 ----a-w- c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nero PhotoShow Media Manager]
2007-04-27 18:22 312848 ----a-w- c:\progra~1\Nero\PHOTOS~1\data\Xtras\mssysmgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2008-06-19 07:53 570664 ----a-w- c:\program files\Common Files\Nero\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OPSE reminder]
2003-07-07 09:29 729088 ----a-r- c:\program files\ScanSoft\OmniPageSE2.0\EregEng\Ereg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpwareSE2]
2003-05-08 11:00 49152 ----a-w- c:\program files\ScanSoft\OmniPageSE2.0\opwareSE2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
2009-03-05 14:07 2260480 --sha-r- c:\program files\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2009-07-23 08:24 1217784 ----a-w- c:\program files\Steam\Steam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2008-02-22 03:25 144784 ----a-w- c:\program files\Java\jre1.6.0_05\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-05-21 15:15 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
2007-02-19 15:32 1188456 ----a-w- c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateStar]
2009-01-16 11:52 4370672 ----a-w- c:\documents and settings\Jára\Data aplikací\UpdateStar\UpdateStar.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\DAP\\DAP.exe"=
"c:\\Program Files\\ICQ\\Icq.exe"=
"c:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"d:\\ PROGRAMY\\ INTERNET\\sdílení souborů P2P\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\ICQ6\\ICQ.exe"=
"c:\\Program Files\\WinFast\\WFDTV\\DVBTAP.exe"=
"d:\\ PROGRAMY\\ INTERNET\\Universal Share Downloader\\USDownloader135\\USDownloader.exe"=
"c:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=
"c:\\Program Files\\DreamCom\\DreamCom.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FarCry2.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Launcher.exe"=
"c:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Editor.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Lineage II-interlude\\loader.exe"=
"c:\\Program Files\\SafeTP\\SafeTP.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R0 OODrvled;OODrvled;c:\windows\system32\drivers\OODrvled.sys [22.9.2004 14:57 15488]
R0 xmasscsi;xmasscsi;c:\windows\system32\drivers\xmasscsi.sys [23.2.2008 22:52 5248]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [15.2.2009 19:14 164048]
R1 kbfilter;Keyboard Filter Driver;c:\windows\system32\drivers\kbfilter.sys [12.4.2008 12:42 12856]
R1 UsbFltr;WayTechUSBFilterDriver;c:\windows\system32\drivers\UsbFltr.sys [12.4.2008 12:42 9291]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service;c:\program files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [6.12.2007 21:03 660768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [15.2.2009 19:14 19024]
R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [3.11.2006 20:19 13592]
R3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [23.2.2008 0:23 27248]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [7.5.2010 13:48 691696]
S2 gupdate1c9da27158549ea;Google Update Service (gupdate1c9da27158549ea);c:\program files\Google\Update\GoogleUpdate.exe [21.5.2009 17:16 133104]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [24.7.2009 16:44 1684736]
S3 GVTDrv;GVTDrv;c:\windows\system32\drivers\GVTDrv.sys [23.2.2008 18:19 24944]
S3 MarkFun_NT;MarkFun_NT;c:\program files\Gigabyte\ET5Pro\MARKFUN.W32 [23.2.2008 18:04 17912]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 SaiH0464;SaiH0464;c:\windows\system32\drivers\SaiH0464.sys [1.5.2007 16:37 132232]
S3 SE31bus;Sony Ericsson Device 049 Driver driver (WDM);c:\windows\system32\drivers\SE31bus.sys [1.5.2006 13:56 61600]
S3 SE31mdfl;Sony Ericsson Device 049 USB WMC Modem Filter;c:\windows\system32\drivers\SE31mdfl.sys [1.5.2006 13:57 9360]
S3 SE31mdm;Sony Ericsson Device 049 USB WMC Modem Driver;c:\windows\system32\drivers\SE31mdm.sys [1.5.2006 13:57 97184]
S3 SE31mgmt;Sony Ericsson Device 049 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\SE31mgmt.sys [1.5.2006 13:58 88688]
S3 se31nd5;Sony Ericsson Device 049 USB Ethernet Emulation SEMC49 (NDIS);c:\windows\system32\drivers\se31nd5.sys [1.5.2006 13:56 18704]
S3 SE31obex;Sony Ericsson Device 049 USB WMC OBEX Interface;c:\windows\system32\drivers\SE31obex.sys [1.5.2006 13:59 86560]
S3 se31unic;Sony Ericsson Device 049 USB Ethernet Emulation SEMC49 (WDM);c:\windows\system32\drivers\se31unic.sys [1.5.2006 13:56 90800]
S3 TVICHW32;TVICHW32;c:\windows\system32\drivers\TVICHW32.SYS [6.3.2008 12:52 23600]
S4 xmasbus;xmasbus;c:\windows\system32\drivers\xmasbus.sys [23.2.2008 22:52 141184]

--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - EVERESTDRIVER

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-07-30 08:39 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'

2010-05-08 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-21 15:15]

2010-05-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-05-21 15:16]

2010-05-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-05-21 15:16]

2010-05-08 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 18:20]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: &Clean Traces - c:\program files\DAP\Privacy Package\dapcleanerie.htm
IE: &Download with &DAP - c:\program files\DAP\dapextie.htm
IE: >> Download This Youtube Video - UnlockForUs
IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm
IE: E&xportovat do aplikace Microsoft Excel
IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: Stáhnout pomocí USD - d:\ programy\ INTERNET\Universal Share Downloader\USDownloader135\Ext\downloadie.html
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\progra~1\TRANSLAT\2003\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\progra~1\TRANSLAT\2003\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\progra~1\TRANSLAT\2003\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\progra~1\TRANSLAT\2003\WEBIE.DLL
LSP: c:\windows\SAFETP\STPLAYER.DLL
DPF: DirectAnimation Java Classes
DPF: Microsoft XML Parser for Java
DPF: {361E6B79-4A69-4376-B0F2-3D1EBEE9D7E2} - hxxp://www.bartanet.eu/cam/RtspVaPgDec.cab
FF - ProfilePath - c:\documents and settings\Jára\Data aplikací\Mozilla\Firefox\Profiles\jviapeb2.default\
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-05-08 18:59
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt"

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\MarkFun_NT]
"ImagePath"="\??\c:\program files\Gigabyte\ET5Pro\markfun.w32"

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
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
"OODEFRAG11.00.00.01WORKSTATION"="5985B4636A142B705D8C5FBB0F680773BCC66E7C8FF797B21D69568E5807687FBD2B92182FA43BD5E576191EC8DCE3C7AA25A0B9B301767C7ACE30D58F0143357F298B8A94CCA0E850775F72EE4D0E71EE82C9AAE4ED18439C31B24BCFAB9BB9751EE700E6445071E6CB95A7D1E5A32F69DE100898F8E6DF1870DC0ED6754B218A6B2324464AAFD9897758911853B96510FC46ED1A61C54F97B1E12432CC21203C346F04A89F1AB0ACBE72663B4AD79AE9E2F85D076C88B357DA2A7748A8DF119DE22F14570ADFA9562DE6C308807A7D14DDE53BD461F8CFA999D0D5CE7F3BF053A4FD29EC53C21BFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC79338EDD5E5BE2F6E6675D575E7D6A3B9808A9C6AECB7A5D1407648B188F22E0E936221CB844AB0687C50F8177CDF823BE1B493A61FB357893463B2ADAEC2AAFE9903CBCC11F91FB8FCF0416E016275597D866CBB90C933C0B7466B512B32691616B984F5D8ADB7CCE21CE22F1BD35E261BE20C70718E6EAE9ECAE7390894697BF9CD2975F361FEAC2E7058C979B409EC3739F5674BFEB69A6EEF2EC5DF60E56E4209E1FC835C2ABD978CAFEF2EC33DE5A44A1616189B61E2862A26BB46B5466A891C2B1547B8628F5C85E67D9CFD07D361FF519DDDB2EF5CC4EC30107B547E3D5B49862ED64F7CDEEF30D7757C72F5A5A9A01EF34848C5F6560EF02F58CE3F0A7EC0F06B530FD8F8FB7B926A63CB6583FEB3A9DDB33DFCEB6E8D4065A0AFE31D14727B4817ED0E218F85D2E3BF8A7DC5171AF9D84FB8D3B79DCB169BFA9414D7A6FF7CC58587D40B93E028CB92D1253EEA9002E11D749215BD5DECA654FA4723C38AC6F77A664A61CB2C804FA6CDB2BEE38DFD297239F007D8FC290BDBEFA50A3978280CFB6B9965A23621A0DAD3F5596E517D2611FEE5BF3EB5CE272A1E69C33A64C29053D869604041799324DC8C8A31E04396FEDE8BAC96F3CABDD04DF0FE024EE586FCFA8301B6C43115F095C0145F094D4F299172978C3871D0FD9B2E497F0E63E1C6850F0979755D13D852EFCA012CE39D18E51B774B4F8AAC977FE5E3414C04F4CE5026964E2CF71ABCAC83E4BD9C93DA79C48F822335B8C8616B6C08A379FC5F30A16B060D14B4BB942894CD443317CC3F8FD05D855123FEF5325D4DEA7B89DBBFB3A60DD8C72FD2E3DA2B03AEEC756A5BA48F76752120266306266EAD858990045EF9525DC05E9036E98FA7122DE6D86DF54708E09E2D87B9360C6DD5EDA3E505589727031D43764EBC7BE61C1E12951481F1281F8A40DF944E14AD9F233D372FDB19C6E9D4BCE34B3DA90E55C4A34A1B67B856BC7062BD97100C9F376E7E7DE76653DC3D862DE89A3D58C509F2AFDCCD511F568BCCD814D2D2521B6E8"
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
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1136)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'lsass.exe'(1192)
c:\windows\system32\relog_ap.dll
.
Celkový čas: 2010-05-08 19:01:09
ComboFix-quarantined-files.txt 2010-05-08 17:01
ComboFix2.txt 2010-05-07 18:14
ComboFix3.txt 2010-05-07 05:24

Před spuštěním: Volných bajtů: 67 375 779 840
Po spuštění: Volných bajtů: 67 326 636 032

- - End Of File - - 4D58D7BC3CA94F72C861548C71F1D4EC

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119408
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Nejdou aktualizace windows

#9 Příspěvek od Rudy »

Log již vypadá čistý.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

jardachal
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 23 bře 2008 15:50

Re: Nejdou aktualizace windows

#10 Příspěvek od jardachal »

no..tak chci podekovat..a zase stranka s odpovedi siroka az k sousedom :(

zkusim s tim neco udelat :)

jinak teda moc moc diky za vycisteni. :)

edit: tak se mi zda, ze ten problem mam jen tady na forku ;)
jeste jednou diky.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119408
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Nejdou aktualizace windows

#11 Příspěvek od Rudy »

Nemáte zač!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět