prosím o kontrolu logu,comp se neustále hryže

[hrdinaj]

Logfile of random's system information tool 1.08 (written by random/random)
Run by mirek at 2010-09-14 20:38:35
Microsoft Windows 7 Ultimate
System drive C: has 48 GB (42%) free of 114 GB
Total RAM: 2038 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:39:31, on 14.9.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files\ICQ7.1\ICQ.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\trademanager\AliIM.exe
C:\Program Files\Spyware Terminator\SpywareTerminator.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Users\mirek\Downloads\RSIT(2).exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\trend micro\mirek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... tbid=60327
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: {A777FC6F-16C6-4C2A-AACB-BCDF73762F78} - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Microsoft Antimalware Script Scanner - {97055CD1-F6C4-40F8-AF50-932F1890E7F5} - c:\Program Files\Microsoft Security Client\Antimalware\MpBHO.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - (no file)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.1\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O15 - Trusted Zone: http://*.alipay.com
O15 - Trusted Zone: http://*.alisoft.com
O15 - Trusted Zone: http://*.taobao.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{078E2232-B641-4B50-8845-BFDE625BEE55}: NameServer = 192.168.42.1,81.19.33.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{078E2232-B641-4B50-8845-BFDE625BEE55}: NameServer = 192.168.42.1,81.19.33.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{078E2232-B641-4B50-8845-BFDE625BEE55}: NameServer = 192.168.42.1,81.19.33.2
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ABBYY FineReader 10 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.10.0) - ABBYY - C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 6548 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-05-14 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{97055CD1-F6C4-40F8-AF50-932F1890E7F5}]
Microsoft Antimalware Script Scanner - c:\Program Files\Microsoft Security Client\Antimalware\MpBHO.dll [2010-06-26 88960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D5D47440-0750-463D-BAEF-A47D02414806}
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-06-28 2837864]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-01-11 246504]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-23 173592]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-05-13 26192168]
""= []
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2010-05-27 3037696]
"eyeBeam SIP Client"= []
"ICQ"=C:\Program Files\ICQ7.1\ICQ.exe [2010-08-22 133432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\aliim]
C:\Program Files\trademanager\aliim.exe [2009-12-22 222552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlazeServoTool]
C:\Program Files\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe [2009-07-07 282624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bonus.SSR.FR10]
C:\Program Files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe [2009-12-24 941320]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
C:\Windows\system32\igfxtray.exe [2009-09-23 141848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]
c:\Program Files\Microsoft Security Client\msseces.exe [2010-07-14 957776]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2]
C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2010-02-05 385856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
C:\Windows\system32\igfxpers.exe [2009-09-23 150552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2009-10-26 1458176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrojanScanner]
C:\Program Files\Trojan Remover\Trjscan.exe [2009-09-15 1069960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^mirek^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-02-16 384512]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-23 218112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-09-14 20:34:10 ----D---- C:\Program Files\trend micro
2010-09-14 20:34:07 ----D---- C:\rsit
2010-09-13 12:35:18 ----D---- C:\Program Files\PowerDataRecovery
2010-09-12 23:35:02 ----D---- C:\ProgramData\Google
2010-09-12 22:29:23 ----D---- C:\Program Files\Flash File Recovery
2010-09-12 21:37:13 ----D---- C:\Program Files\GetData
2010-09-12 21:17:37 ----D---- C:\Program Files\RestoreDeletedFilesNow
2010-09-12 20:34:43 ----D---- C:\Removable Data Recovery
2010-09-09 20:24:37 ----HD---- C:\ProgramData\CanonIJScan
2010-09-09 20:24:22 ----D---- C:\Users\mirek\AppData\Roaming\Canon
2010-09-09 20:03:12 ----D---- C:\Program Files\Common Files\CANON
2010-09-09 19:58:33 ----A---- C:\Windows\system32\CNHMCA.dll
2010-09-09 19:57:37 ----A---- C:\Windows\system32\CNMLMA0.DLL
2010-09-09 19:57:05 ----D---- C:\Windows\system32\STRING
2010-09-09 19:57:05 ----A---- C:\Windows\system32\CNMNPUI.DLL
2010-09-09 19:57:05 ----A---- C:\Windows\system32\CNMNPPM.DLL
2010-09-09 19:57:04 ----D---- C:\Windows\system32\CHM
2010-09-09 19:56:09 ----D---- C:\Program Files\Canon
2010-09-09 19:07:49 ----D---- C:\Program Files\Mozilla Thunderbird
2010-08-25 08:44:21 ----A---- C:\Windows\system32\oleaut32.dll
2010-08-15 23:02:25 ----D---- C:\Users\mirek\AppData\Roaming\Happy Foto
2010-08-15 23:02:21 ----D---- C:\Program Files\HappyFoto
2010-08-15 22:04:45 ----A---- C:\Windows\system32\pdfcmnnt.dll
2010-08-15 22:04:42 ----D---- C:\Program Files\PDFCreator
2010-08-15 22:04:42 ----A---- C:\Windows\system32\MSMPIDE.DLL
2010-08-15 21:34:28 ----D---- C:\Users\mirek\AppData\Roaming\ABBYY
2010-08-15 21:24:38 ----D---- C:\Program Files\Common Files\ABBYY
2010-08-15 21:19:13 ----D---- C:\ProgramData\ABBYY
2010-08-15 21:19:13 ----D---- C:\Program Files\ABBYY FineReader 10
2010-08-15 20:30:27 ----D---- C:\Users\mirek\AppData\Roaming\GetRightToGo
2010-08-15 20:09:52 ----D---- C:\Users\mirek\AppData\Roaming\gtk-2.0
2010-08-15 19:52:41 ----A---- C:\Windows\system32\d3dx9_33.dll

======List of files/folders modified in the last 1 months======

2010-09-14 20:39:22 ----D---- C:\Windows\Temp
2010-09-14 20:38:31 ----D---- C:\Windows\Prefetch
2010-09-14 20:34:10 ----RD---- C:\Program Files
2010-09-14 20:33:03 ----D---- C:\Program Files\trademanager
2010-09-14 20:20:23 ----SHD---- C:\System Volume Information
2010-09-14 20:20:21 ----D---- C:\ProgramData\Spyware Terminator
2010-09-14 20:19:43 ----D---- C:\Program Files\Spyware Terminator
2010-09-14 20:17:00 ----D---- C:\Users\mirek\AppData\Roaming\Spyware Terminator
2010-09-14 20:15:45 ----AD---- C:\ProgramData\TEMP
2010-09-14 19:19:18 ----D---- C:\Users\mirek\AppData\Roaming\ICQ
2010-09-14 19:16:27 ----D---- C:\Windows\system32\config
2010-09-14 19:15:55 ----D---- C:\Users\mirek\AppData\Roaming\Skype
2010-09-14 16:55:14 ----D---- C:\Users\mirek\AppData\Roaming\skypePM
2010-09-14 07:36:24 ----SHD---- C:\Windows\Installer
2010-09-13 01:38:13 ----D---- C:\Windows\System32
2010-09-13 01:38:11 ----D---- C:\Windows
2010-09-12 23:43:10 ----D---- C:\Windows\system32\NDF
2010-09-12 23:35:03 ----D---- C:\Windows\system32\Tasks
2010-09-12 23:35:02 ----HD---- C:\ProgramData
2010-09-12 23:35:02 ----D---- C:\Windows\Tasks
2010-09-12 23:35:02 ----D---- C:\Program Files\Google
2010-09-12 23:30:44 ----D---- C:\Windows\winsxs
2010-09-12 23:29:37 ----D---- C:\Windows\debug
2010-09-12 23:25:32 ----D---- C:\Program Files\Common Files
2010-09-12 23:15:08 ----D---- C:\Windows\system32\catroot2
2010-09-12 23:15:07 ----D---- C:\Windows\twain_32
2010-09-12 23:15:03 ----D---- C:\Windows\system32\DriverStore
2010-09-12 23:15:03 ----D---- C:\Windows\system32\catroot
2010-09-12 23:15:02 ----D---- C:\Windows\inf
2010-09-12 19:58:06 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-09-09 20:23:29 ----D---- C:\Windows\system32\FxsTmp
2010-09-09 20:11:02 ----AD---- C:\Windows\system32\drivers
2010-09-09 20:11:01 ----RSD---- C:\Windows\Media
2010-09-08 22:28:16 ----D---- C:\Program Files\Mozilla Firefox
2010-09-08 21:31:55 ----D---- C:\Windows\Logs
2010-09-05 09:58:10 ----D---- C:\Program Files\Microsoft Silverlight
2010-08-27 08:50:34 ----D---- C:\Windows\AppPatch
2010-08-25 20:35:26 ----D---- C:\Program Files\ICQ7.1
2010-08-23 18:35:07 ----D---- C:\Windows\system32\drivers\UMDF
2010-08-15 21:06:35 ----D---- C:\Temp
2010-08-15 20:10:20 ----D---- C:\Users\mirek\AppData\Roaming\VSO

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-06-28 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-06-28 165456]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-06-28 46672]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-06-29 165520]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\Windows\system32\drivers\sp_rsdrv2.sys [2010-05-27 142592]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-06-28 17744]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-06-28 50256]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-23 4808192]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\Windows\system32\drivers\MODEMCSA.sys [2009-07-14 18432]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-06-29 43392]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2010-06-29 54400]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2008-07-22 51200]
R3 SIS163u;SiS163 USB Wireless LAN Adapter Driver; C:\Windows\system32\DRIVERS\sis163u.sys [2007-05-07 218624]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2009-10-26 1095936]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 AF15BDA;AF9015 BDA Device; C:\Windows\system32\DRIVERS\AF15BDA.sys [2010-06-21 483200]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-08-05 54632]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-01-21 18048]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2009-12-30 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 ser2at;ATEN USB to Serial port driver; C:\Windows\system32\DRIVERS\ser2at.sys [2009-10-15 80896]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2009-12-30 7936]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2009-12-30 7936]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Professional.10.0;ABBYY FineReader 10 PE Licensing Service; C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe [2009-12-22 814344]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2010-06-26 10688]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-05-14 249136]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2010-05-27 488960]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-06-26 261992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 fsssvc;Služba Windows Live Zabezpečení rodiny; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-01-26 652800]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-05-19 1343400]

-----------------EOF-----------------

[motji]

Hezké odpoledne
Odinstalujte C:\Program Files\Trojan Remover\

Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.

[hrdinaj]

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4623

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

15.9.2010 23:35:59
mbam-log-2010-09-15 (23-35-59).txt

Typ skenu: Úplný sken (C:\|)
Skenované objekty: 277949
Uplynulý čas: 1 hodina(y), 16 minuta(y), 30 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

[hrdinaj]

Logfile of random's system information tool 1.08 (written by random/random)
Run by mirek at 2010-09-15 23:42:30
Microsoft Windows 7 Ultimate
System drive C: has 48 GB (42%) free of 114 GB
Total RAM: 2038 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:42:56, on 15.9.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\System32\hkcmd.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files\ICQ7.1\ICQ.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\WinDjView\WinDjView.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Users\mirek\Downloads\RSIT(3).exe
C:\Program Files\trend micro\mirek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... tbid=60327
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: {A777FC6F-16C6-4C2A-AACB-BCDF73762F78} - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Microsoft Antimalware Script Scanner - {97055CD1-F6C4-40F8-AF50-932F1890E7F5} - c:\Program Files\Microsoft Security Client\Antimalware\MpBHO.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - (no file)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.1\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O15 - Trusted Zone: http://*.alipay.com
O15 - Trusted Zone: http://*.alisoft.com
O15 - Trusted Zone: http://*.taobao.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{078E2232-B641-4B50-8845-BFDE625BEE55}: NameServer = 192.168.42.1,81.19.33.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{078E2232-B641-4B50-8845-BFDE625BEE55}: NameServer = 192.168.42.1,81.19.33.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{078E2232-B641-4B50-8845-BFDE625BEE55}: NameServer = 192.168.42.1,81.19.33.2
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ABBYY FineReader 10 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.10.0) - ABBYY - C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 6559 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-05-14 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{97055CD1-F6C4-40F8-AF50-932F1890E7F5}]
Microsoft Antimalware Script Scanner - c:\Program Files\Microsoft Security Client\Antimalware\MpBHO.dll [2010-06-26 88960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D5D47440-0750-463D-BAEF-A47D02414806}
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-06-28 2837864]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-01-11 246504]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-23 173592]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-04-29 437584]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-05-13 26192168]
""= []
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2010-05-27 3037696]
"eyeBeam SIP Client"= []
"ICQ"=C:\Program Files\ICQ7.1\ICQ.exe [2010-08-22 133432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\aliim]
C:\Program Files\trademanager\aliim.exe [2009-12-22 222552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlazeServoTool]
C:\Program Files\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe [2009-07-07 282624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bonus.SSR.FR10]
C:\Program Files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe [2009-12-24 941320]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
C:\Windows\system32\igfxtray.exe [2009-09-23 141848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]
c:\Program Files\Microsoft Security Client\msseces.exe [2010-07-14 957776]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2]
C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2010-02-05 385856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
C:\Windows\system32\igfxpers.exe [2009-09-23 150552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2009-10-26 1458176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrojanScanner]
C:\Program Files\Trojan Remover\Trjscan.exe /boot []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^mirek^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-02-16 384512]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-23 218112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[motji]

Tyto adresy znáte, že je máte v důvěrných?
O15 - Trusted Zone: http://*.alipay.com
O15 - Trusted Zone: http://*.alisoft.com
O15 - Trusted Zone: http://*.taobao.com




Stáhněte na plochu, ukončete všechna aktivní okna a spusťte ComboFix - http://download.bleepingcomputer.com/sUBs/ComboFix.exe

- ComboFix je třeba spustit pod účtem s právy administrátora

- Před použitím vypněte všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary

- Po spuštění se zobrazí podmínky užití, potvrďte je stiskem tlačítka Ano

- Dále postupujte dle pokynů, během aplikování ComboFixu neklikejte do zobrazujícího se okna

- Po dokončení skenování, trvajícího maximálně 10 minut, by měl program vytvořit log - C:\ComboFix.txt, zkopírujte celý jeho obsah sem

[hrdinaj]

ComboFix 10-09-16.04 - mirek 16.09.2010 23:24:04.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1033.18.2038.1199 [GMT 2:00]
Spuštěný z: c:\users\mirek\Desktop\ComboFix.exe
SP: Spyware Terminator *disabled* (Updated) {55EE49A8-16BE-4601-BBE6-607B7F7317DE}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\spool\prtprocs\w32x86\CNMPDA0.DLL
c:\windows\system32\spool\prtprocs\w32x86\CNMPPA0.DLL
c:\windows\system32\systeminfo.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-08-16 do 2010-09-16 )))))))))))))))))))))))))))))))
.

2010-09-16 21:33 . 2010-09-16 21:33 -------- d-----w- c:\users\mirek\AppData\Local\temp
2010-09-16 21:33 . 2010-09-16 21:33 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-09-16 21:20 . 2010-09-16 21:21 -------- d-----w- C:\32788R22FWJFW
2010-09-16 06:38 . 2010-08-31 22:57 439632 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D926AD6A-571D-4866-A605-E20346A58CDF}\gapaengine.dll
2010-09-15 20:18 . 2010-09-15 20:18 -------- d-----w- c:\users\mirek\AppData\Roaming\Malwarebytes
2010-09-15 20:18 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-09-15 20:18 . 2010-09-15 20:18 -------- d-----w- c:\programdata\Malwarebytes
2010-09-15 20:18 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-09-15 20:18 . 2010-09-15 20:18 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-09-15 15:27 . 2010-09-15 15:27 -------- d-----w- c:\program files\WinDjView
2010-09-15 12:46 . 2010-08-21 05:32 316928 ----a-w- c:\windows\system32\spoolsv.exe
2010-09-14 18:34 . 2010-09-15 21:42 -------- d-----w- c:\program files\trend micro
2010-09-14 18:34 . 2010-09-14 18:34 -------- d-----w- C:\rsit
2010-09-13 10:35 . 2010-09-13 10:35 -------- d-----w- c:\program files\PowerDataRecovery
2010-09-12 20:29 . 2010-09-12 20:29 -------- d-----w- c:\program files\Flash File Recovery
2010-09-12 19:37 . 2010-09-12 19:37 -------- d-----w- c:\program files\GetData
2010-09-12 19:17 . 2010-09-12 23:27 -------- d-----w- c:\program files\RestoreDeletedFilesNow
2010-09-12 18:34 . 2010-09-12 18:34 34 ---ha-w- c:\windows\system32\Removable Data Recovery_sysquict.dat
2010-09-12 18:34 . 2010-09-12 18:34 -------- d-----w- C:\Removable Data Recovery
2010-09-09 18:24 . 2010-09-12 21:15 -------- d--h--w- c:\programdata\CanonIJScan
2010-09-09 18:24 . 2010-09-12 21:15 -------- d-----w- c:\users\mirek\AppData\Roaming\Canon
2010-09-09 18:03 . 2010-09-09 18:03 -------- d-----w- c:\program files\Common Files\CANON
2010-09-09 17:58 . 2008-08-25 16:02 15872 ----a-w- c:\windows\system32\CNHMCA.dll
2010-09-09 17:57 . 2009-03-24 03:00 272384 ----a-w- c:\windows\system32\CNMLMA0.DLL
2010-09-09 17:57 . 2010-09-09 17:57 -------- d-----w- c:\windows\system32\STRING
2010-09-09 17:57 . 2009-04-03 16:51 137216 ----a-w- c:\windows\system32\CNMNPUI.DLL
2010-09-09 17:57 . 2009-04-03 16:51 353792 ----a-w- c:\windows\system32\CNMNPPM.DLL
2010-09-09 17:57 . 2010-09-09 17:57 -------- d-----w- c:\windows\system32\CHM
2010-09-09 17:56 . 2010-09-12 21:24 -------- d-----w- c:\program files\Canon
2010-09-09 17:07 . 2010-09-09 17:07 -------- d-----w- c:\program files\Mozilla Thunderbird
2010-09-03 08:56 . 2010-08-31 22:57 439632 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DE8EF405-E8B0-4A2B-9A19-C93D5D47A768}\gapaengine.dll
2010-08-31 22:58 . 2010-08-31 22:57 439632 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2010-08-25 06:44 . 2010-04-07 07:10 571904 ----a-w- c:\windows\system32\oleaut32.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-16 20:18 . 2010-03-07 09:47 628886 ----a-w- c:\windows\system32\perfh005.dat
2010-09-16 20:18 . 2010-03-07 09:47 121940 ----a-w- c:\windows\system32\perfc005.dat
2010-09-16 09:29 . 2010-05-27 19:22 -------- d-----w- c:\programdata\Spyware Terminator
2010-09-16 06:28 . 2010-03-07 09:59 -------- d-----w- c:\users\mirek\AppData\Roaming\ICQ
2010-09-15 08:07 . 2010-03-07 17:55 1 ----a-w- c:\users\mirek\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-09-14 18:33 . 2010-03-12 07:01 -------- d-----w- c:\program files\trademanager
2010-09-14 18:19 . 2010-05-27 19:22 -------- d-----w- c:\program files\Spyware Terminator
2010-09-14 18:17 . 2010-05-27 19:22 -------- d-----w- c:\users\mirek\AppData\Roaming\Spyware Terminator
2010-09-14 17:15 . 2010-03-07 10:07 -------- d-----w- c:\users\mirek\AppData\Roaming\Skype
2010-09-14 14:55 . 2010-03-07 10:08 -------- d-----w- c:\users\mirek\AppData\Roaming\skypePM
2010-09-12 21:35 . 2010-05-20 05:25 -------- d-----w- c:\program files\Google
2010-09-05 07:58 . 2010-03-07 10:57 -------- d-----w- c:\program files\Microsoft Silverlight
2010-08-25 18:35 . 2010-07-20 18:25 -------- d-----w- c:\program files\ICQ7.1
2010-08-23 16:35 . 2010-08-23 16:35 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2010-08-15 22:48 . 2010-08-15 18:31 2276 ----a-w- c:\users\mirek\AppData\Roaming\mdbu.bin
2010-08-15 21:02 . 2010-08-15 21:02 -------- d-----w- c:\users\mirek\AppData\Roaming\Happy Foto
2010-08-15 21:02 . 2010-08-15 21:02 -------- d-----w- c:\program files\HappyFoto
2010-08-15 20:06 . 2010-08-15 20:04 -------- d-----w- c:\program files\PDFCreator
2010-08-15 19:34 . 2010-08-15 19:34 -------- d-----w- c:\users\mirek\AppData\Roaming\ABBYY
2010-08-15 19:32 . 2010-08-15 19:19 -------- d-----w- c:\program files\ABBYY FineReader 10
2010-08-15 19:24 . 2010-08-15 19:24 -------- d-----w- c:\program files\Common Files\ABBYY
2010-08-15 19:19 . 2010-08-15 19:19 -------- d-----w- c:\programdata\ABBYY
2010-08-15 18:31 . 2010-08-15 18:30 -------- d-----w- c:\users\mirek\AppData\Roaming\GetRightToGo
2010-08-15 18:14 . 2010-08-15 18:09 -------- d-----w- c:\users\mirek\AppData\Roaming\gtk-2.0
2010-08-15 18:10 . 2010-04-25 15:14 -------- d-----w- c:\users\mirek\AppData\Roaming\VSO
2010-07-29 06:30 . 2010-08-11 12:44 197632 ----a-w- c:\windows\system32\ir32_32.dll
2010-07-29 06:30 . 2010-08-11 12:44 82944 ----a-w- c:\windows\system32\iccvid.dll
2010-07-27 17:46 . 2010-07-27 17:45 -------- d-----w- c:\program files\Microsoft Security Client
2010-07-20 18:27 . 2010-03-07 09:21 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-07-20 18:27 . 2010-03-07 10:01 -------- d-----w- c:\program files\ICQ6Toolbar
2010-07-20 18:26 . 2010-03-07 10:01 -------- d-----w- c:\programdata\ICQ
2010-07-18 21:51 . 2010-07-16 10:55 -------- d-----w- c:\users\mirek\AppData\Roaming\Meriel
2010-07-16 10:55 . 2010-07-16 10:55 239104 ----a-w- c:\users\mirek\AppData\Roaming\Meriel\libtheora0.dll
2010-07-16 10:55 . 2010-07-16 10:55 170496 ----a-w- c:\users\mirek\AppData\Roaming\Meriel\libspeex0.dll
2010-07-16 10:55 . 2010-07-16 10:55 107008 ----a-w- c:\users\mirek\AppData\Roaming\Meriel\libspeexdsp0.dll
2010-06-30 06:25 . 2010-08-11 12:43 978432 ----a-w- c:\windows\system32\wininet.dll
2010-06-29 21:56 . 2010-06-29 21:56 54400 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2010-06-29 21:56 . 2010-06-29 21:56 43392 ----a-w- c:\windows\system32\drivers\MpNWMon.sys
2010-06-29 21:56 . 2010-06-29 21:56 165520 ----a-w- c:\windows\system32\drivers\MpFilter.sys
2010-06-28 20:57 . 2010-07-15 09:25 38848 ----a-w- c:\windows\avastSS.scr
2010-06-28 20:57 . 2010-03-07 09:56 165032 ----a-w- c:\windows\system32\aswBoot.exe
2010-06-28 20:37 . 2010-03-07 09:57 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-06-28 20:37 . 2010-03-07 09:57 165456 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-06-28 20:33 . 2010-03-07 09:57 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-06-28 20:32 . 2010-03-07 09:57 50256 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-06-28 20:32 . 2010-03-07 09:57 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-06-23 10:58 . 2010-06-21 16:26 12263 ----a-w- c:\programdata\BlazeVideo\BlazeDTV 6.0\blazedvd.dll
2010-06-22 02:47 . 2010-08-11 12:44 310784 ----a-w- c:\windows\system32\drivers\srv.sys
2010-06-22 02:47 . 2010-08-11 12:44 307200 ----a-w- c:\windows\system32\drivers\srv2.sys
2010-06-22 02:47 . 2010-08-11 12:44 113664 ----a-w- c:\windows\system32\drivers\srvnet.sys
2010-06-21 16:23 . 2010-06-21 16:23 28672 ----a-w- c:\windows\system32\AF15BDAEX.dll
2010-06-21 16:23 . 2010-06-21 16:23 140 ----a-w- c:\windows\system32\AF15IRTBL.bin
2010-06-21 16:23 . 2009-06-02 22:57 483200 ----a-w- c:\windows\system32\drivers\AF15BDA.sys
2010-06-19 06:33 . 2010-08-11 12:44 3955080 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-06-19 06:33 . 2010-08-11 12:44 3899784 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-06-19 06:23 . 2010-08-11 12:44 37376 ----a-w- c:\windows\system32\rtutils.dll
2010-06-19 04:07 . 2010-08-11 12:43 2326016 ----a-w- c:\windows\system32\win32k.sys
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{97055CD1-F6C4-40F8-AF50-932F1890E7F5}]
2010-06-26 21:03 88960 ----a-w- c:\program files\Microsoft Security Client\Antimalware\MpBHO.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\\Phone\Skype.exe" [2010-05-13 26192168]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2010-05-27 3037696]
"ICQ"="c:\program files\ICQ7.1\ICQ.exe" [2010-08-22 133432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-06-28 2837864]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-01-11 246504]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-23 173592]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2010-3-7 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"

[HKLM\~\startupfolder\C:^Users^mirek^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
path=c:\users\mirek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
backup=c:\windows\pss\OpenOffice.org 3.2.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
c:\program files\Common Files\Nokia\MPlatform\NokiaMServer [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\aliim]
2009-12-22 04:29 222552 ----a-w- c:\program files\trademanager\AliIM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlazeServoTool]
2009-07-07 14:29 282624 ----a-w- c:\program files\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bonus.SSR.FR10]
2009-12-24 06:57 941320 ----a-w- c:\program files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
2009-09-23 17:30 141848 ----a-w- c:\windows\System32\igfxtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]
2010-07-14 13:26 957776 ----a-w- c:\program files\Microsoft Security Client\msseces.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
2009-07-26 15:45 3883840 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2]
2010-02-05 12:45 385856 ----a-w- c:\program files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
2009-09-23 17:30 150552 ----a-w- c:\windows\System32\igfxpers.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
2009-07-14 01:14 1173504 ----a-w- c:\program files\Windows Sidebar\sidebar.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]
2009-10-26 12:46 1458176 ----a-w- c:\program files\Motorola\SMSERIAL\sm56hlpr.exe

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 ser2at;ATEN USB to Serial port driver;c:\windows\system32\DRIVERS\ser2at.sys [2009-10-15 80896]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-19 1343400]
S1 aswSP;aswSP; [x]
S1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [2010-05-27 142592]
S2 ABBYY.Licensing.FineReader.Professional.10.0;ABBYY FineReader 10 PE Licensing Service;c:\program files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe [2009-12-21 814344]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-06-28 50256]
S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-06-29 43392]
S3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2010-06-29 54400]
S3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-06-26 261992]
S3 SIS163u;SiS163 USB Wireless LAN Adapter Driver;c:\windows\system32\DRIVERS\sis163u.sys [2007-05-07 218624]

.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - c:\program files\ICQ7.1\ICQ.exe
Trusted Zone: alipay.com
Trusted Zone: alisoft.com
Trusted Zone: taobao.com
TCP: {078E2232-B641-4B50-8845-BFDE625BEE55} = 192.168.42.1,81.19.33.2
FF - ProfilePath - c:\users\mirek\AppData\Roaming\Mozilla\Firefox\Profiles\xafodm85.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=302398&p=
FF - component: c:\program files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\components\FirefoxExtension.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npww.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: c:\windows\system32\Wat\npWatWeb.dll
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKCU-Run-eyeBeam SIP Client - (no file)
MSConfigStartUp-TrojanScanner - c:\program files\Trojan Remover\Trjscan.exe


.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2010-09-16 23:36:21
ComboFix-quarantined-files.txt 2010-09-16 21:36

Před spuštěním: Volných bajtů: 49 794 162 688
Po spuštění: Volných bajtů: 49 733 853 184

- - End Of File - - CBD746886781DAF4428F6D7F1AD8286D

[motji]

Co počítač?

[hrdinaj]

Dobrý den,zdá se,že funguje normálně čím tam proboha bylo ??,trápil jsem se s tím zhruba 4 měsíce a chystal se na přeinstalaci.

[motji]

Nějaké potvůrky tam byli .
ještě se zeptám, tyto adresy znáte?
Trusted Zone: alipay.com
Trusted Zone: alisoft.com
Trusted Zone: taobao.com

[hrdinaj]

Ne tyto adresy mi nic neříkají. Pokud mohu poprosit ještě vám pošlu log z mého pracovního compu,který také není v optimální kondici.momentalně mu dělám první test dle vašeho návodu a pak zašlu log.

[hrdinaj]

Mimochodem s tím prvním compem-notesem se trápili IT odborníci ze Selier belot cca 14 dní ,když mi z ničoho nic naskočil nějaký boot manažér a nešlo s tím nikam hnout a žádný virus po všech možných analýzách,které jsem aplikoval i já nenašli.Prostě kdo umí ,ten umí.

[motji]

Ještě něco domažeme, ale já ted musím od počítače, takže asi až večer.
na ten druhý počítač si založte nový topic a napište pro Motji. Děkuji

[motji]

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]

Firefox::
FF - ProfilePath - c:\users\mirek\AppData\Roaming\Mozilla\Firefox\Profiles\xafodm85.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=green ... =302398&p=

Reglock::
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

[hrdinaj]

ComboFix 10-09-16.04 - mirek 18.09.2010 19:44:00.2.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1033.18.2038.1066 [GMT 2:00]
Spuštěný z: c:\users\mirek\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\mirek\Desktop\CFScript.txt
SP: Spyware Terminator *disabled* (Updated) {55EE49A8-16BE-4601-BBE6-607B7F7317DE}
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-08-18 do 2010-09-18 )))))))))))))))))))))))))))))))
.

2010-09-18 17:53 . 2010-09-18 17:53 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-09-18 17:53 . 2010-09-18 17:53 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-09-18 17:41 . 2010-09-18 17:42 -------- d-----w- C:\32788R22FWJFW
2010-09-16 21:36 . 2010-09-18 17:53 -------- d-----w- c:\users\mirek\AppData\Local\temp
2010-09-16 06:38 . 2010-08-31 22:57 439632 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D926AD6A-571D-4866-A605-E20346A58CDF}\gapaengine.dll
2010-09-15 20:18 . 2010-09-15 20:18 -------- d-----w- c:\users\mirek\AppData\Roaming\Malwarebytes
2010-09-15 20:18 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-09-15 20:18 . 2010-09-15 20:18 -------- d-----w- c:\programdata\Malwarebytes
2010-09-15 20:18 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-09-15 20:18 . 2010-09-15 20:18 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-09-15 15:27 . 2010-09-15 15:27 -------- d-----w- c:\program files\WinDjView
2010-09-15 12:46 . 2010-08-21 05:32 316928 ----a-w- c:\windows\system32\spoolsv.exe
2010-09-14 18:34 . 2010-09-15 21:42 -------- d-----w- c:\program files\trend micro
2010-09-14 18:34 . 2010-09-14 18:34 -------- d-----w- C:\rsit
2010-09-13 10:35 . 2010-09-13 10:35 -------- d-----w- c:\program files\PowerDataRecovery
2010-09-12 20:29 . 2010-09-12 20:29 -------- d-----w- c:\program files\Flash File Recovery
2010-09-12 19:37 . 2010-09-12 19:37 -------- d-----w- c:\program files\GetData
2010-09-12 19:17 . 2010-09-12 23:27 -------- d-----w- c:\program files\RestoreDeletedFilesNow
2010-09-12 18:34 . 2010-09-12 18:34 34 ---ha-w- c:\windows\system32\Removable Data Recovery_sysquict.dat
2010-09-12 18:34 . 2010-09-12 18:34 -------- d-----w- C:\Removable Data Recovery
2010-09-09 18:24 . 2010-09-12 21:15 -------- d--h--w- c:\programdata\CanonIJScan
2010-09-09 18:24 . 2010-09-12 21:15 -------- d-----w- c:\users\mirek\AppData\Roaming\Canon
2010-09-09 18:03 . 2010-09-09 18:03 -------- d-----w- c:\program files\Common Files\CANON
2010-09-09 17:58 . 2008-08-25 16:02 15872 ----a-w- c:\windows\system32\CNHMCA.dll
2010-09-09 17:57 . 2009-03-24 03:00 272384 ----a-w- c:\windows\system32\CNMLMA0.DLL
2010-09-09 17:57 . 2010-09-09 17:57 -------- d-----w- c:\windows\system32\STRING
2010-09-09 17:57 . 2009-04-03 16:51 137216 ----a-w- c:\windows\system32\CNMNPUI.DLL
2010-09-09 17:57 . 2009-04-03 16:51 353792 ----a-w- c:\windows\system32\CNMNPPM.DLL
2010-09-09 17:57 . 2010-09-09 17:57 -------- d-----w- c:\windows\system32\CHM
2010-09-09 17:56 . 2010-09-12 21:24 -------- d-----w- c:\program files\Canon
2010-09-09 17:07 . 2010-09-09 17:07 -------- d-----w- c:\program files\Mozilla Thunderbird
2010-08-31 22:58 . 2010-08-31 22:57 439632 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2010-08-25 06:44 . 2010-04-07 07:10 571904 ----a-w- c:\windows\system32\oleaut32.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-18 08:47 . 2010-03-07 09:59 -------- d-----w- c:\users\mirek\AppData\Roaming\ICQ
2010-09-17 14:19 . 2010-03-07 09:47 628886 ----a-w- c:\windows\system32\perfh005.dat
2010-09-17 14:19 . 2010-03-07 09:47 121940 ----a-w- c:\windows\system32\perfc005.dat
2010-09-17 10:28 . 2010-05-27 19:22 -------- d-----w- c:\programdata\Spyware Terminator
2010-09-15 08:07 . 2010-03-07 17:55 1 ----a-w- c:\users\mirek\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-09-14 18:33 . 2010-03-12 07:01 -------- d-----w- c:\program files\trademanager
2010-09-14 18:19 . 2010-05-27 19:22 -------- d-----w- c:\program files\Spyware Terminator
2010-09-14 18:17 . 2010-05-27 19:22 -------- d-----w- c:\users\mirek\AppData\Roaming\Spyware Terminator
2010-09-14 17:15 . 2010-03-07 10:07 -------- d-----w- c:\users\mirek\AppData\Roaming\Skype
2010-09-14 14:55 . 2010-03-07 10:08 -------- d-----w- c:\users\mirek\AppData\Roaming\skypePM
2010-09-12 21:35 . 2010-05-20 05:25 -------- d-----w- c:\program files\Google
2010-09-08 10:00 . 2010-03-11 07:17 72940376 ----a-w- c:\users\mirek\AppData\Roaming\Nokia\Ovi Suite\Software Updater\NokiaOviSuite2Installer.exe
2010-09-05 07:58 . 2010-03-07 10:57 -------- d-----w- c:\program files\Microsoft Silverlight
2010-08-25 18:35 . 2010-07-20 18:25 -------- d-----w- c:\program files\ICQ7.1
2010-08-23 16:35 . 2010-08-23 16:35 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2010-08-15 22:48 . 2010-08-15 18:31 2276 ----a-w- c:\users\mirek\AppData\Roaming\mdbu.bin
2010-08-15 21:02 . 2010-08-15 21:02 -------- d-----w- c:\users\mirek\AppData\Roaming\Happy Foto
2010-08-15 21:02 . 2010-08-15 21:02 -------- d-----w- c:\program files\HappyFoto
2010-08-15 20:06 . 2010-08-15 20:04 -------- d-----w- c:\program files\PDFCreator
2010-08-15 19:34 . 2010-08-15 19:34 -------- d-----w- c:\users\mirek\AppData\Roaming\ABBYY
2010-08-15 19:32 . 2010-08-15 19:19 -------- d-----w- c:\program files\ABBYY FineReader 10
2010-08-15 19:24 . 2010-08-15 19:24 -------- d-----w- c:\program files\Common Files\ABBYY
2010-08-15 19:19 . 2010-08-15 19:19 -------- d-----w- c:\programdata\ABBYY
2010-08-15 18:31 . 2010-08-15 18:30 -------- d-----w- c:\users\mirek\AppData\Roaming\GetRightToGo
2010-08-15 18:14 . 2010-08-15 18:09 -------- d-----w- c:\users\mirek\AppData\Roaming\gtk-2.0
2010-08-15 18:10 . 2010-04-25 15:14 -------- d-----w- c:\users\mirek\AppData\Roaming\VSO
2010-07-29 06:30 . 2010-08-11 12:44 197632 ----a-w- c:\windows\system32\ir32_32.dll
2010-07-29 06:30 . 2010-08-11 12:44 82944 ----a-w- c:\windows\system32\iccvid.dll
2010-07-27 17:46 . 2010-07-27 17:45 -------- d-----w- c:\program files\Microsoft Security Client
2010-07-20 18:27 . 2010-03-07 09:21 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-07-20 18:27 . 2010-03-07 10:01 -------- d-----w- c:\program files\ICQ6Toolbar
2010-07-20 18:26 . 2010-03-07 10:01 -------- d-----w- c:\programdata\ICQ
2010-07-16 10:55 . 2010-07-16 10:55 239104 ----a-w- c:\users\mirek\AppData\Roaming\Meriel\libtheora0.dll
2010-07-16 10:55 . 2010-07-16 10:55 170496 ----a-w- c:\users\mirek\AppData\Roaming\Meriel\libspeex0.dll
2010-07-16 10:55 . 2010-07-16 10:55 107008 ----a-w- c:\users\mirek\AppData\Roaming\Meriel\libspeexdsp0.dll
2010-06-30 06:25 . 2010-08-11 12:43 978432 ----a-w- c:\windows\system32\wininet.dll
2010-06-29 21:56 . 2010-06-29 21:56 54400 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2010-06-29 21:56 . 2010-06-29 21:56 43392 ----a-w- c:\windows\system32\drivers\MpNWMon.sys
2010-06-29 21:56 . 2010-06-29 21:56 165520 ----a-w- c:\windows\system32\drivers\MpFilter.sys
2010-06-28 20:57 . 2010-07-15 09:25 38848 ----a-w- c:\windows\avastSS.scr
2010-06-28 20:57 . 2010-03-07 09:56 165032 ----a-w- c:\windows\system32\aswBoot.exe
2010-06-28 20:37 . 2010-03-07 09:57 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-06-28 20:37 . 2010-03-07 09:57 165456 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-06-28 20:33 . 2010-03-07 09:57 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-06-28 20:32 . 2010-03-07 09:57 50256 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-06-28 20:32 . 2010-03-07 09:57 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-06-23 10:58 . 2010-06-21 16:26 12263 ----a-w- c:\programdata\BlazeVideo\BlazeDTV 6.0\blazedvd.dll
2010-06-22 02:47 . 2010-08-11 12:44 310784 ----a-w- c:\windows\system32\drivers\srv.sys
2010-06-22 02:47 . 2010-08-11 12:44 307200 ----a-w- c:\windows\system32\drivers\srv2.sys
2010-06-22 02:47 . 2010-08-11 12:44 113664 ----a-w- c:\windows\system32\drivers\srvnet.sys
2010-06-21 16:23 . 2010-06-21 16:23 28672 ----a-w- c:\windows\system32\AF15BDAEX.dll
2010-06-21 16:23 . 2010-06-21 16:23 140 ----a-w- c:\windows\system32\AF15IRTBL.bin
2010-06-21 16:23 . 2009-06-02 22:57 483200 ----a-w- c:\windows\system32\drivers\AF15BDA.sys
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{97055CD1-F6C4-40F8-AF50-932F1890E7F5}]
2010-06-26 21:03 88960 ----a-w- c:\program files\Microsoft Security Client\Antimalware\MpBHO.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\\Phone\Skype.exe" [2010-05-13 26192168]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2010-05-27 3037696]
"ICQ"="c:\program files\ICQ7.1\ICQ.exe" [2010-08-22 133432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-06-28 2837864]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-01-11 246504]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-23 173592]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2010-3-7 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"

[HKLM\~\startupfolder\C:^Users^mirek^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
path=c:\users\mirek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
backup=c:\windows\pss\OpenOffice.org 3.2.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\aliim]
2009-12-22 04:29 222552 ----a-w- c:\program files\trademanager\AliIM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlazeServoTool]
2009-07-07 14:29 282624 ----a-w- c:\program files\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bonus.SSR.FR10]
2009-12-24 06:57 941320 ----a-w- c:\program files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
2009-09-23 17:30 141848 ----a-w- c:\windows\System32\igfxtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]
2010-07-14 13:26 957776 ----a-w- c:\program files\Microsoft Security Client\msseces.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
2009-07-26 15:45 3883840 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2]
2010-02-05 12:45 385856 ----a-w- c:\program files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
2009-09-23 17:30 150552 ----a-w- c:\windows\System32\igfxpers.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
2009-07-14 01:14 1173504 ----a-w- c:\program files\Windows Sidebar\sidebar.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]
2009-10-26 12:46 1458176 ----a-w- c:\program files\Motorola\SMSERIAL\sm56hlpr.exe

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 ser2at;ATEN USB to Serial port driver;c:\windows\system32\DRIVERS\ser2at.sys [2009-10-15 80896]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-19 1343400]
S1 aswSP;aswSP; [x]
S1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [2010-05-27 142592]
S2 ABBYY.Licensing.FineReader.Professional.10.0;ABBYY FineReader 10 PE Licensing Service;c:\program files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe [2009-12-21 814344]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-06-28 50256]
S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-06-29 43392]
S3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2010-06-29 54400]
S3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-06-26 261992]
S3 SIS163u;SiS163 USB Wireless LAN Adapter Driver;c:\windows\system32\DRIVERS\sis163u.sys [2007-05-07 218624]

.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - c:\program files\ICQ7.1\ICQ.exe
Trusted Zone: alipay.com
Trusted Zone: alisoft.com
Trusted Zone: taobao.com
TCP: {078E2232-B641-4B50-8845-BFDE625BEE55} = 192.168.42.1,81.19.33.2
FF - ProfilePath - c:\users\mirek\AppData\Roaming\Mozilla\Firefox\Profiles\xafodm85.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - component: c:\program files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\components\FirefoxExtension.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npww.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: c:\windows\system32\Wat\npWatWeb.dll
.
.
Celkový čas: 2010-09-18 19:56:48
ComboFix-quarantined-files.txt 2010-09-18 17:56
ComboFix2.txt 2010-09-16 21:36

Před spuštěním: Volných bajtů: 50 324 451 328
Po spuštění: Volných bajtů: 50 066 804 736

- - End Of File - - 7242304698C3A5FDF281DAA610466814

[motji]

Fajn, co počítač?

Ještě otestujte na www.virustotal.com
c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D926AD6A-571D-4866-A605-E20346A58CDF}\gapaengine.dll

-Do okénka zkopírujte cestu k souboru , pokud napíše, že soubor byl už testován, dejte otestovat znovu.
-Sem vložte link s výsledky.