pomalé pc, problémy s internetem

[vyosek]

Prozatim neni zac...bude treba tam nahradit atapi co jsem to jen tak projetel, ale to uvidime a detailni postup dodam...

[vyosek]

Nasledujici soubory otestujte na VirusTotalu (viz muj podpis)

• c:\windows.1\system32\drivers\atapi.sys
  c:\windows.1\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\atapi.sys
  c:\windows.1\SoftwareDistribution\Download\50ce127b6bb5262be7f814de23be86b4\atapi.sys
  c:\windows.1\system32\drivers\d347bus.sys
  c:\windows.1\system32\drivers\d347prt.sys
• Kliknete na Prochazet
• Soubor nehledejte, jen vlozte cestu souboru, ktery chci otestovat
• Pokud napise Soubor byl jiz testovan, dejte otestovat znovu
• Kliknete na Otestovat soubor
• Vysledek analyzy sem vlozte (jako odkaz)

Odinstalujte vsechny emulatory virtualnich jednotek (Deamon Tools, Alcohol 120%, PowerISO apod)

Stahnete SPTD http://www.duplexsecure.com/en/downloads

• Vyberte z uvedene stranky verzi dle sveho operacniho systemu (32(x86)bit ci 64(x64)bit)
• Ulozte na plochu a spustte
• Zvolte moznost Uninstall a restartujte PC - pokud nepujde kliknout (tlacitko bude sede), krok preskocte

Stahnete Defogger http://www.jpshortstuff.247fixes.com/Defogger.exe

• Ulozte na plochu a spustte
• Kliknete na Disable a restartujte PC - pokud nepujde kliknout (tlacitko bude sede), krok preskocte

Stahnete MBR na plochu http://www2.gmer.net/mbr/mbr.exe

Kliknete na Start a pote Spustit, pripadne pouzijte klavesou zkratku Win+R

• Vyskoci na Vas okenko, do ktereho zkopirujte text nize

• Kód: Vybrat vše

  "%userprofile%\plocha\mbr" -t

• Kliknete na OK
• Na plose se Vam vytvori log s nazvem mbr.txt, jeho obsah mi sem vlozte

Dejte logy z Gmeru - viz muj podpis. Pokud by se gmer v normalnim rezimu sekal, spustte jej v nouzaku (restart PC, mackat F8, zvolit Stav nouze s praci v siti)

[Nymu]

http://www.virustotal.com/file-scan/rep ... 1282605949
http://www.virustotal.com/file-scan/rep ... 1282606999
http://www.virustotal.com/file-scan/rep ... 1282607100

tyto dva nešly otestovat ... zadal jsem cestu ale nic to nedělalo

c:\windows.1\system32\drivers\d347bus.sys
c:\windows.1\system32\drivers\d347prt.sys

MBR
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
kernel: MBR read successfully
user & kernel MBR OK

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit quick scan 2010-08-24 10:18:53
Windows 5.1.2600 Service Pack 2
Running: gmer.exe; Driver: C:\DOCUME~1\Bohumil\LOCALS~1\Temp\pxtdrpob.sys


---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Ntfs \Ntfs aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

---- EOF - GMER 1.0.15 ----

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-08-24 13:01:39
Windows 5.1.2600 Service Pack 2
Running: gmer.exe; Driver: C:\DOCUME~1\Bohumil\LOCALS~1\Temp\pxtdrpob.sys


---- System - GMER 1.0.15 ----

SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwClose [0xF2DAF6B8]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwCreateKey [0xF2DAF574]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwDeleteValueKey [0xF2DAFA52]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwDuplicateObject [0xF2DAF14C]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwOpenKey [0xF2DAF64E]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwOpenProcess [0xF2DAF08C]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwOpenThread [0xF2DAF0F0]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwQueryValueKey [0xF2DAF76E]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwRestoreKey [0xF2DAF72E]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwSetValueKey [0xF2DAF8AE]

---- Kernel code sections - GMER 1.0.15 ----

.text C:\WINDOWS.1\system32\DRIVERS\nv4_mini.sys section is writeable [0xF6396360, 0x307AC7, 0xE8000020]

---- User IAT/EAT - GMER 1.0.15 ----

IAT C:\WINDOWS.1\system32\services.exe[924] @ C:\WINDOWS.1\system32\services.exe [ADVAPI32.dll!CreateProcessAsUserW] 003C0002
IAT C:\WINDOWS.1\system32\services.exe[924] @ C:\WINDOWS.1\system32\services.exe [KERNEL32.dll!CreateProcessW] 003C0000

---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Ntfs \Ntfs aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

---- EOF - GMER 1.0.15 ----

Snad je to vše

Ještě bych měl dotaz jak se zbavit Avastu ? v přidat nebo odebrat není a nikde jsem nenašel "uninstal" mohli by jste poradit ? mám to jen smazat ? Nebo nainstalovat free verzi (přepíše se to? ) Díky

[motji]

Dobrý večer, než přijde kolega

Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.


A Avast zkuste tímto
http://files.avast.com/files/eng/aswclear.exe

[Nymu]

i vám dobrý večer

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4473

Windows 5.1.2600 Service Pack 2
Internet Explorer 8.0.6001.18702

25.8.2010 2:08:10
mbam-log-2010-08-25 (02-08-10).txt

Typ skenu: Úplný sken (C:\|D:\|E:\|)
Skenované objekty: 258574
Uplynulý čas: 51 minuta(y), 8 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 5
Infikované složky: 2
Infikované soubory: 8

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
HKEY_CLASSES_ROOT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\URL (Hijack.SearchPage) -> Bad: (http://findgala.com/?&uid=231&q={searchTerms}) Good: (http://www.Google.com/) -> No action taken.
HKEY_USERS\S-1-5-19\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\URL (Hijack.SearchPage) -> Bad: (http://findgala.com/?&uid=231&q={searchTerms}) Good: (http://www.Google.com/) -> No action taken.
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\URL (Hijack.SearchPage) -> Bad: (http://findgala.com/?&uid=231&q={searchTerms}) Good: (http://www.Google.com/) -> No action taken.
HKEY_USERS\S-1-5-20\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\URL (Hijack.SearchPage) -> Bad: (http://findgala.com/?&uid=231&q={searchTerms}) Good: (http://www.Google.com/) -> No action taken.
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\URL (Hijack.SearchPage) -> Bad: (http://findgala.com/?&uid=231&q={searchTerms}) Good: (http://www.Google.com/) -> No action taken.

Infikované složky:
C:\Documents and Settings\Bohumil\Data aplikací\My Security Engine (Rogue.MySecurityEngine) -> No action taken.
C:\Program Files\PersonSecurity (Rogue.PersonalSecurity) -> No action taken.

Infikované soubory:
C:\Program Files\PC Tune-Up\RdvChk.exe (Spyware.OnlineGames) -> No action taken.
C:\Qoobox\Quarantine\C\Documents and Settings\All Users\Data aplikací\54c9ebb\BackUp\smgr32.exe.vir (Trojan.Agent) -> No action taken.
C:\Qoobox\Quarantine\C\WINDOWS.1\system32\bqtj.xco.vir (Trojan.Oficla) -> No action taken.
D:\Prog\DVDFab Platinum 5.1.2.0 + Serial + patch.2.2\universal.dvdfab.platinum.5-patch.2.2.exe (Trojan.Patcher) -> No action taken.
E:\Nová složka (2)\packupdate_build107_231.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Bohumil\Data aplikací\My Security Engine\Instructions.ini (Rogue.MySecurityEngine) -> No action taken.
C:\Program Files\PersonSecurity\psecurity.exe.tmp1 (Rogue.PersonalSecurity) -> No action taken.
C:\Documents and Settings\Bohumil\Oblíbené položky\Free Porn Videos, Porn Tube, Free Porn, Free Porno Movies, Porno, Sex.url (Rogue.Link) -> No action taken.

[Nymu]

a málem bych zapoměl díky za pomoc s tím avastem

[motji]

Všechno v mbamu smažte .
A počkejte na kolegu, odpoledne se tu objeví

[vyosek]

Dekuji kolegyni za vstu

Logy z gmeru a mbr jsou v poradku. Jak se chova PC po procisteni MBAMem

[Nymu]

Zdravím, bohužel jsem musel odjet pracovne na Slovensko na 4 dny až týden. Zatím jsem nic nemazal, ale jinak mi přijde pc o neco rychlejši, ale internet laguje stejně tam se žádná změna neprojevila.

[vyosek]

Az se vratite, tam nalezy MBAMu smazte, jsou tam nalezy i spojene s internetem...

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis), pri instalaci dejte fajfku pryc u yahoo toolbaru
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

Vlozte novy log ze RSITu a napiste stav PC

[Nymu]

Logfile of random's system information tool 1.08 (written by random/random)
Run by Bohumil at 2010-08-31 15:16:21
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 10 GB (23%) free of 44 GB
Total RAM: 1023 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:18:14, on 31.8.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS.1\System32\smss.exe
C:\WINDOWS.1\system32\winlogon.exe
C:\WINDOWS.1\system32\services.exe
C:\WINDOWS.1\system32\lsass.exe
C:\WINDOWS.1\system32\svchost.exe
C:\WINDOWS.1\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS.1\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\ASUS\AASP\1.00.01\aaCenter.exe
C:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\WINDOWS.1\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS.1\system32\ctfmon.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\WINDOWS.1\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS.1\system32\nvsvc32.exe
C:\WINDOWS.1\system32\HPZipm12.exe
C:\WINDOWS.1\system32\svchost.exe
C:\PROGRA~1\SPEEDB~2\VideoAcceleratorService.exe
C:\PROGRA~1\SPEEDB~2\VideoAcceleratorEngine.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS.1\system32\wbem\wmiapsrv.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Axesstel\Axesstel Manager\AXESSTEL_MAIN.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\totalcmd\TOTALCMD.EXE
C:\nic - wow\arni\RSIT.exe
C:\Program Files\trend micro\Bohumil.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: XTTBPos00 Class - {055FD26D-3A88-4e15-963D-DC8493744B1D} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS.1\system32\JMRaidTool.exe boot
O4 - HKLM\..\Run: [AsusServiceProvider] C:\Program Files\ASUS\AASP\1.00.01\aaCenter.exe
O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [Flashget] C:\Program Files\FlashGet\FlashGet.exe /min
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS.1\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS.1\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS.1\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS.1\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS.1\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O4 - Global Startup: GetRight - Tray Icon.lnk = C:\Program Files\GetRight\getright.exe
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Download with GetRight Pro - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: Download with Xilisoft Download YouTube Video - C:\Program Files\Xilisoft\Download YouTube Video\upod_link.HTM
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O8 - Extra context menu item: Open with GetRight Pro Browser - C:\Program Files\GetRight\GRbrowse.htm
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/s ... DEXAXO.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{70F7E00D-E90F-4778-956B-2FAC4AB96F23}: NameServer = 160.218.10.200 160.218.43.200
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS.1\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS.1\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\WildGames\Game Console - WildGames\GameConsoleService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS.1\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS.1\system32\HPZipm12.exe
O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~1\SPEEDB~2\VideoAcceleratorService.exe
O24 - Desktop Component 0: (no name) - (no file)

--
End of file - 8322 bytes

======Scheduled tasks folder======

C:\WINDOWS.1\tasks\User_Feed_Synchronization-{9666745A-3060-44D8-BB94-6232D5D75A7B}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
XTTBPos00 Class

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll [2003-11-04 54248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}]
FGCatchUrl - C:\Program Files\FlashGet\jccatch.dll [2007-08-06 94308]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31FF080D-12A3-439A-A2EF-4BA95A3148E8}]
bho2gr Class - C:\Program Files\GetRight\xx2gr.dll [2006-03-14 233472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F156768E-81EF-470C-9057-481BA8380DBA}]
FlashGet GetFlash Class - C:\Program Files\FlashGet\getflash.dll [2007-05-18 163840]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2006-05-18 843776]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2005-01-12 32768]
"JMB36X Configure"=C:\WINDOWS.1\system32\JMRaidTool.exe [2006-06-02 385024]
"AsusServiceProvider"=C:\Program Files\ASUS\AASP\1.00.01\aaCenter.exe [2006-06-30 582144]
"Ai Nap"=C:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe [2006-07-10 1093632]
"SweetIM"=C:\Program Files\SweetIM\Messenger\SweetIM.exe [2008-12-02 111928]
"Flashget"=C:\Program Files\FlashGet\FlashGet.exe [2007-09-25 2007088]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]
"NvCplDaemon"=C:\WINDOWS.1\system32\NvCpl.dll [2007-09-16 8491008]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS.1\system32\NvMcTray.dll [2007-09-16 81920]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-06-28 2837864]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-06-27 152872]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-05-13 26192168]
"ctfmon.exe"=C:\WINDOWS.1\system32\ctfmon.exe [2004-08-17 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
GetRight - Tray Icon.lnk - C:\Program Files\GetRight\getright.exe

C:\Documents and Settings\Bohumil\Nabídka Start\Programy\Po spuštění
OpenOffice.org 2.4.lnk - C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=0
"NoClose"=0
"DisableChangePassword"=0
"NoShutDown"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoLogOff"=0x00000000
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Vuze\Azureus.exe"="C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus"
"C:\Program Files\FlashGet\flashget.exe"="C:\Program Files\FlashGet\flashget.exe:*:Enabled:Flashget"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
"D:\Hry\World of Warcraft\Launcher.exe"="D:\Hry\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"D:\Hry\bwin Casino\casino.exe"="D:\Hry\bwin Casino\casino.exe:*:Enabled:casino"
"D:\Hry\World of Warcraft\WoW-3.0.9.9551-to-3.1.0.9767-enUS-downloader.exe"="D:\Hry\World of Warcraft\WoW-3.0.9.9551-to-3.1.0.9767-enUS-downloader.exe:*:Enabled:Blizzard Downloader"
"D:\Hry\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-enUS-downloader.exe"="D:\Hry\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-enUS-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"D:\Hry\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-enUS-downloader.exe"="D:\Hry\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-enUS-downloader.exe:*:Enabled:Blizzard Downloader"
"D:\Hry\Dungeon Siege 2\DungeonSiege2.exe"="D:\Hry\Dungeon Siege 2\DungeonSiege2.exe:*:Enabled:Dungeon Siege 2 Game Executable"
"C:\nic - wow\patche\WoW-3.2.2.10505-to-3.3.0.10958-enGB-downloader.exe"="C:\nic - wow\patche\WoW-3.2.2.10505-to-3.3.0.10958-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\ICQ7.1\ICQ.exe"="C:\Program Files\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1"
"C:\Program Files\ICQ7.1\aolload.exe"="C:\Program Files\ICQ7.1\aolload.exe:*:Enabled:aolload.exe"
"C:\WINDOWS.1\system32\dpnsvr.exe"="C:\WINDOWS.1\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.1\ICQ.exe"="C:\Program Files\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1"
"C:\Program Files\ICQ7.1\aolload.exe"="C:\Program Files\ICQ7.1\aolload.exe:*:Enabled:aolload.exe"

======List of files/folders created in the last 1 months======

2010-08-31 10:54:55 ----D---- C:\Program Files\CCleaner
2010-08-25 02:32:45 ----A---- C:\WINDOWS.1\system32\drivers\aswTdi.sys
2010-08-25 02:32:45 ----A---- C:\WINDOWS.1\system32\drivers\aswSP.sys
2010-08-25 02:32:45 ----A---- C:\WINDOWS.1\system32\drivers\aswRdr.sys
2010-08-25 02:32:45 ----A---- C:\WINDOWS.1\system32\drivers\aswFsBlk.sys
2010-08-25 02:32:44 ----A---- C:\WINDOWS.1\system32\drivers\aswmon2.sys
2010-08-25 02:32:44 ----A---- C:\WINDOWS.1\system32\drivers\aswmon.sys
2010-08-25 02:32:44 ----A---- C:\WINDOWS.1\system32\drivers\aavmker4.sys
2010-08-25 02:32:37 ----A---- C:\WINDOWS.1\system32\aswBoot.exe
2010-08-25 02:29:29 ----D---- C:\WINDOWS.1\CSC
2010-08-25 01:10:47 ----D---- C:\Documents and Settings\Bohumil\Data aplikací\Malwarebytes
2010-08-25 01:10:33 ----A---- C:\WINDOWS.1\system32\drivers\mbamswissarmy.sys
2010-08-25 01:10:32 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-08-25 01:10:31 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-08-25 01:10:31 ----A---- C:\WINDOWS.1\system32\drivers\mbam.sys
2010-08-23 14:03:24 ----SHD---- C:\RECYCLER
2010-08-23 13:15:41 ----D---- C:\WINDOWS.1\temp
2010-08-23 13:15:39 ----A---- C:\ComboFix.txt
2010-08-23 12:58:01 ----A---- C:\Boot.bak
2010-08-23 12:57:58 ----RASHD---- C:\cmdcons
2010-08-23 12:34:36 ----A---- C:\WINDOWS.1\zip.exe
2010-08-23 12:34:36 ----A---- C:\WINDOWS.1\SWXCACLS.exe
2010-08-23 12:34:36 ----A---- C:\WINDOWS.1\SWSC.exe
2010-08-23 12:34:36 ----A---- C:\WINDOWS.1\SWREG.exe
2010-08-23 12:34:36 ----A---- C:\WINDOWS.1\sed.exe
2010-08-23 12:34:36 ----A---- C:\WINDOWS.1\PEV.exe
2010-08-23 12:34:36 ----A---- C:\WINDOWS.1\NIRCMD.exe
2010-08-23 12:34:36 ----A---- C:\WINDOWS.1\MBR.exe
2010-08-23 12:34:36 ----A---- C:\WINDOWS.1\grep.exe
2010-08-23 12:34:28 ----D---- C:\WINDOWS.1\ERDNT
2010-08-23 12:34:26 ----D---- C:\ComboFix
2010-08-23 12:34:13 ----D---- C:\Qoobox
2010-08-23 12:17:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2010-08-22 02:54:50 ----D---- C:\Program Files\trend micro
2010-08-22 02:54:46 ----D---- C:\rsit
2010-08-21 12:35:14 ----HDC---- C:\WINDOWS.1\$NtUninstallKB980218$
2010-08-21 12:35:02 ----HDC---- C:\WINDOWS.1\$NtUninstallKB980195$
2010-08-21 12:34:16 ----HDC---- C:\WINDOWS.1\$NtUninstallKB2229593$
2010-08-21 12:31:23 ----HDC---- C:\WINDOWS.1\$NtUninstallKB981793$
2010-08-21 12:31:14 ----HDC---- C:\WINDOWS.1\$NtUninstallKB979559$
2010-08-21 12:30:19 ----HDC---- C:\WINDOWS.1\$NtUninstallKB978695_WM9$
2010-08-21 12:30:10 ----HDC---- C:\WINDOWS.1\$NtUninstallKB979482$
2010-08-21 12:29:53 ----HDC---- C:\WINDOWS.1\$NtUninstallKB975562$
2010-08-19 01:50:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2010-08-19 01:44:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\avg9
2010-08-14 04:07:30 ----D---- C:\Documents and Settings\Bohumil\Data aplikací\Media Player Classic
2010-08-14 04:06:57 ----A---- C:\WINDOWS.1\avisplitter.ini
2010-08-14 04:06:56 ----A---- C:\WINDOWS.1\system32\yv12vfw.dll
2010-08-14 04:06:56 ----A---- C:\WINDOWS.1\system32\xvidvfw.dll
2010-08-14 04:06:56 ----A---- C:\WINDOWS.1\system32\xvidcore.dll
2010-08-14 04:06:56 ----A---- C:\WINDOWS.1\system32\ff_vfw.dll.manifest
2010-08-14 04:06:56 ----A---- C:\WINDOWS.1\system32\ff_vfw.dll
2010-08-14 04:06:54 ----D---- C:\Program Files\K-Lite Codec Pack
2010-08-13 18:00:11 ----D---- C:\Program Files\Gr8_Player
2010-08-09 12:28:20 ----D---- C:\MyBackup

======List of files/folders modified in the last 1 months======

2010-08-31 15:18:14 ----D---- C:\WINDOWS.1\Prefetch
2010-08-31 15:18:08 ----A---- C:\WINDOWS.1\ModemLog_Axesstel USB Modem.txt
2010-08-31 15:14:53 ----A---- C:\WINDOWS.1\wincmd.ini
2010-08-31 15:05:09 ----D---- C:\Documents and Settings\Bohumil\Data aplikací\Skype
2010-08-31 15:03:20 ----D---- C:\Program Files\FlashGet
2010-08-31 15:02:58 ----D---- C:\Documents and Settings\Bohumil\Data aplikací\OpenOffice.org2
2010-08-31 11:11:45 ----D---- C:\WINDOWS.1
2010-08-31 10:56:26 ----D---- C:\WINDOWS.1\Minidump
2010-08-31 10:56:26 ----D---- C:\WINDOWS.1\Debug
2010-08-31 10:56:26 ----D---- C:\Program Files\GetRight
2010-08-31 10:54:55 ----RD---- C:\Program Files
2010-08-31 10:33:15 ----N---- C:\WINDOWS.1\SchedLgU.Txt
2010-08-31 10:33:01 ----D---- C:\WINDOWS.1\system32
2010-08-31 10:29:27 ----SHD---- C:\WINDOWS.1\Installer
2010-08-31 10:29:27 ----RD---- C:\Program Files\Skype
2010-08-31 10:29:27 ----D---- C:\Config.Msi
2010-08-31 10:28:54 ----HDC---- C:\WINDOWS.1\$NtUninstallKB972270$
2010-08-31 10:28:54 ----D---- C:\WINDOWS.1\system32\drivers
2010-08-31 09:56:11 ----D---- C:\Documents and Settings\Bohumil\Data aplikací\skypePM
2010-08-29 06:57:00 ----D---- C:\WINDOWS.1\system32\CatRoot2
2010-08-28 19:37:38 ----A---- C:\WINDOWS.1\NeroDigital.ini
2010-08-25 02:32:42 ----D---- C:\WINDOWS.1\WinSxS
2010-08-25 02:32:34 ----D---- C:\Program Files\Alwil Software
2010-08-24 01:22:03 ----HD---- C:\WINDOWS.1\inf
2010-08-23 13:40:05 ----HD---- C:\Program Files\InstallShield Installation Information
2010-08-23 13:11:25 ----A---- C:\WINDOWS.1\system.ini
2010-08-23 13:11:17 ----D---- C:\WINDOWS.1\system32\drivers\etc
2010-08-23 13:10:04 ----D---- C:\WINDOWS.1\system32\config
2010-08-23 13:09:23 ----SD---- C:\WINDOWS.1\Tasks
2010-08-23 13:09:23 ----D---- C:\WINDOWS.1\system
2010-08-23 13:08:12 ----D---- C:\WINDOWS.1\AppPatch
2010-08-23 13:08:11 ----D---- C:\Program Files\Common Files
2010-08-23 12:58:01 ----RASH---- C:\boot.ini
2010-08-23 12:17:02 ----D---- C:\Program Files\Google
2010-08-23 12:07:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\SpeedBit
2010-08-23 12:06:55 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-08-23 11:41:25 ----D---- C:\Program Files\SweetIM
2010-08-23 11:41:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\SweetIM
2010-08-22 18:39:25 ----RSD---- C:\WINDOWS.1\assembly
2010-08-22 18:39:22 ----D---- C:\WINDOWS.1\Microsoft.NET
2010-08-21 12:45:45 ----A---- C:\WINDOWS.1\system32\PerfStringBackup.INI
2010-08-21 12:35:17 ----RSHDC---- C:\WINDOWS.1\system32\dllcache
2010-08-21 12:35:01 ----HD---- C:\WINDOWS.1\$hf_mig$
2010-08-21 12:30:46 ----D---- C:\Program Files\Internet Explorer
2010-08-21 12:30:33 ----D---- C:\WINDOWS.1\ie8updates
2010-08-21 12:26:56 ----D---- C:\Downloads
2010-08-19 01:43:56 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-08-14 04:06:38 ----D---- C:\Program Files\ACE Mega CoDecS Pack
2010-08-14 04:05:30 ----D---- C:\Program Files\Xvid
2010-08-13 22:36:51 ----D---- C:\Program Files\Cradle Of Rome
2010-08-03 11:09:32 ----A---- C:\WINDOWS.1\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 JGOGO;JMicron Hot-Plug Driver; C:\WINDOWS.1\system32\DRIVERS\JGOGO.sys [2006-02-07 6912]
R0 JRAID;JRAID; C:\WINDOWS.1\system32\DRIVERS\jraid.sys [2006-07-05 43392]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS.1\system32\DRIVERS\ohci1394.sys [2004-08-03 61056]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS.1\system32\drivers\Aavmker4.sys [2010-06-28 28880]
R1 AsIO;AsIO; C:\WINDOWS.1\system32\drivers\AsIO.sys [2005-12-22 5685]
R1 aswSP;aswSP; C:\WINDOWS.1\system32\drivers\aswSP.sys [2010-06-28 165456]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS.1\system32\drivers\aswTdi.sys [2010-06-28 46672]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS.1\System32\DRIVERS\intelppm.sys [2004-08-17 39936]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS.1\system32\drivers\aswFsBlk.sys [2010-06-28 17744]
R2 aswMon2;aswMon2; C:\WINDOWS.1\system32\drivers\aswMon2.sys [2010-06-28 100176]
R3 ADIDTSFiltService;ADI DTS Filter Service; C:\WINDOWS.1\system32\drivers\adidts.sys [2006-06-15 142464]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS.1\system32\drivers\ADIHdAud.sys [2006-05-02 229376]
R3 AEAudio;AE Audio Service; C:\WINDOWS.1\system32\drivers\AEAudio.sys [2006-04-27 93824]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS.1\System32\DRIVERS\arp1394.sys [2004-08-17 60800]
R3 aswRdr;aswRdr; C:\WINDOWS.1\system32\drivers\aswRdr.sys [2010-06-28 23376]
R3 Axtmvflt;Axesstel USB Filter Service; C:\WINDOWS.1\System32\DRIVERS\Axtmvflt.sys [2007-09-20 3456]
R3 Axtmvmdm;Axesstel USB Modem; C:\WINDOWS.1\System32\DRIVERS\Axtmvmdm.sys [2007-09-20 40064]
R3 Axtmvprt;Axesstel Diagnostic Port; C:\WINDOWS.1\System32\Drivers\Axtmvprt.sys [2007-09-20 38784]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS.1\System32\DRIVERS\HDAudBus.sys [2004-10-27 138240]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS.1\System32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;1394 Net Driver; C:\WINDOWS.1\System32\DRIVERS\nic1394.sys [2004-08-17 61824]
R3 nv;nv; C:\WINDOWS.1\system32\DRIVERS\nv4_mini.sys [2007-09-16 6853088]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS.1\System32\Drivers\pcouffin.sys [2008-12-29 47360]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS.1\System32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS.1\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS.1\System32\DRIVERS\yk51x86.sys [2006-05-23 245248]
S3 ATIAVAIW;ATI T200 Unified AVStream service; C:\WINDOWS.1\system32\DRIVERS\atinavt2.sys [2009-01-07 170496]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS.1\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024]
S3 giveio;giveio; \??\C:\WINDOWS.1\System32\giveio.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS.1\system32\DRIVERS\HPZid412.sys [2005-10-28 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS.1\system32\DRIVERS\HPZipr12.sys [2005-10-28 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS.1\system32\DRIVERS\HPZius12.sys [2005-10-28 21568]
S3 MPE;Filtr MPE BDA; C:\WINDOWS.1\system32\DRIVERS\MPE.sys [2004-08-17 15360]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS.1\system32\drivers\MSTEE.sys [2004-08-04 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS.1\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS.1\system32\DRIVERS\NdisIP.sys [2004-08-17 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS.1\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS.1\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\idsdefs\20050901.036\symidsco.sys []
S3 usbprint;Třída USB Printer; C:\WINDOWS.1\system32\DRIVERS\usbprint.sys [2004-08-04 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS.1\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS.1\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S3 WpdUsb;WpdUsb; C:\WINDOWS.1\System32\Drivers\wpdusb.sys [2004-08-11 18944]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS.1\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328]
S4 sptd;sptd; C:\WINDOWS.1\System32\Drivers\sptd.sys [2008-12-23 639224]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS.1\System32\drivers\ws2ifsl.sys [2001-10-25 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS.1\system32\nvsvc32.exe [2007-09-16 155716]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS.1\system32\HPZipm12.exe [2005-03-14 69632]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS.1\system32\wdfmgr.exe [2004-08-11 38912]
R2 VideoAcceleratorService;VideoAcceleratorService; C:\PROGRA~1\SPEEDB~2\VideoAcceleratorService.exe [2009-03-19 288368]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS.1\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS.1\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS.1\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 GameConsoleService;GameConsoleService; C:\Program Files\WildGames\Game Console - WildGames\GameConsoleService.exe [2009-03-31 250616]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS.1\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS.1\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Nymu]

Pc i net jsou rychlejší moc díky za pomoc

[vyosek]

Jeste mi neutikejte Uklidime po utilitach a docistime log

MBAM muzete odinstalovat nebo nechat na obcasny sken - v pripade nalezu velmi doporucuji dat sem log na posouzeni, at si neodstrelite neco legitimniho

Odinstalujte Combofix

• Start - Spustit (nebo pouzijte klavesobou zkratku Win+R)
• Napiste ComboFix /Uninstall
• Stisknete Enter
• Tohle smaze Combofix a jeho slozky

T-Cleaner http://sweb.cz/Marinus/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

Havet se usadila v bodech obnoveni - smazte je dle navodu kolegy riffa http://www.viry.cz/forum/viewtopic.php?f=11&t=47040

Otevrete si poznamkovy blok

• Start->spustit->notepad
• Vlozte text nize

• Kód: Vybrat vše

  Windows Registry Editor Version 5.00
  
  [HKCU\Software\Microsoft\Internet Explorer\Main]
  "Start Page"="www.seznam.cz"
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner]
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  "SweetIM"=-
  "Flashget"=-
  "NeroFilterCheck"=-
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=-
  "Skype"=-

• Soubor ulozte jako oprava.reg
• Pri ukladani dejte ulozit jako typ Vsechny soubory (nastevni je uvedeno na obrazku nize)
• 
• Zavrit notepad a spustit dvojklikem oprava.reg
• Pripadny dotaz na zmenu registru potvrdte
• Okno jen problikne a opravi regsitry - soubor muzete smazat

Z logu je patrno, ze nemate aktualni verzi Windows - chybi Vam ServicePack 3 - doinstalujte jej

• Vice info mate zde http://www.viry.cz/forum/viewtopic.php?f=46&t=86100

Z logu je patrno, ze nepouzivate firewall - doporucuji doinstalovat

• k cemu je dobry http://www.viry.cz/forum/viewtopic.php?f=41&t=20980
• prehled osobnich firewallu http://www.viry.cz/forum/viewtopic.php?f=41&t=6523

Jinak by to melo byt z me strany vse pokud jiz nejsou problemy a ani dotazy...

Nemate zac, rad jsem pomohl

[Nymu]

Zdravím asi jsem to zakřikl, pc je rychlejší ale internet, chvilku to šlo v pohodě, ale jsou chvilky kdy je načítání stránek pomalé, všiml jsem si že Skype mi sem tam padá na pár sekund. Ale nejvíc se to projevuje při hraní wow.
Nevím jestli vám to něco říká ale normálně mívám Latency 136ms, od té doby co začali problémy, po vstupu do dungu, raidu, bg nebo do města mi Latency vyletí na 20k-25k ... mám spoždění kolem 5-12 minut, nevím jestli to pomůže, ale v noci když je město prázdné nemám tam žádný problém a latency je kolem 150ms.

[vyosek]

Bohuzel s hrou Vam neporadim, jsme forum bezpecnostni (vice zde http://www.viry.cz/forum/viewtopic.php?f=5&t=64194 ), zkuste pravidelne cistit CCleanerem, pripadne se obratit na poskytovatele internetu...
Z nasi strany (havet) je PC v poradku...