divné chování PC viz podrobnsti

[Yoshua]

tak zdá se že PC je opět bez problémů. Mockrát děkuji za pomoc. A víte teda čím to bylo? Nebo jak si to divné chování vysvětlit? A případně se tomu vyvarovat...

[motji]

Měl jste tam nějaké breberky, ale už to vypadá v pořádku .


arrow: Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


***********


Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir



***********


Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

záložka čistič
- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner

záložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy ok zavřít

Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.


***********



Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-vyčistí tempy a po použitých programech



***********

Vložte nový log ze RSIT a řekněte co počítač, jak se chová, už je vše v pořádku?

[Yoshua]

---omyl----

[Yoshua]

omyl.VÝPADEK INTERNETU

[Yoshua]

Logfile of random's system information tool 1.08 (written by random/random)
Run by Jan Holík at 2010-08-25 22:51:53
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (50%) free of 20 GB
Total RAM: 2558 MB (81% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:52:08, on 25. 8. 2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\OSD.exe
C:\Program Files\Launch Manager\WButton.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Gmail Notifier\Gmail Notifier.exe
C:\Program Files\Launch Manager\WisLMSvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox 4.0 Beta 2\firefox.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
D:\d\RSIT.exe
C:\Program Files\trend micro\Jan Holík.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LaunchAp] "C:\Program Files\Launch Manager\LaunchAp.exe"
O4 - HKLM\..\Run: [HotkeyApp] "C:\Program Files\Launch Manager\HotkeyApp.exe"
O4 - HKLM\..\Run: [LMgrVolOSD] "C:\Program Files\Launch Manager\OSD.exe"
O4 - HKLM\..\Run: [Wbutton] C:\Program Files\Launch Manager\WButton.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gmail Notifier.exe] C:\Program Files\Gmail Notifier\Gmail Notifier.exe /startup
O4 - Startup: _uninst_setup_9.0.0.722_23.08.2010_21-49.exe.lnk = ?
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 9788576000
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: WisLMSvc - Wistron Corp. - C:\Program Files\Launch Manager\WisLMSvc.exe

--
End of file - 5747 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-08-04 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-08-04 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"AzMixerSel"=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [2005-06-12 53248]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-11-16 8495104]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-11-16 81920]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-06-28 2837864]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-09-22 16236032]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2009-11-22 1037192]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-04-21 761946]
"LaunchAp"=C:\Program Files\Launch Manager\LaunchAp.exe [2005-07-25 32768]
"HotkeyApp"=C:\Program Files\Launch Manager\HotkeyApp.exe [2006-12-14 192512]
"LMgrVolOSD"=C:\Program Files\Launch Manager\OSD.exe [2006-12-26 180224]
"Wbutton"=C:\Program Files\Launch Manager\WButton.exe [2006-09-13 86016]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"CtrlVol"=C:\Program Files\Launch Manager\CtrlVol.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Gmail Notifier.exe"=C:\Program Files\Gmail Notifier\Gmail Notifier.exe [2010-06-13 2154496]

C:\Documents and Settings\Jan Holík.NOTES\Nabídka Start\Programy\Po spuštění
_uninst_setup_9.0.0.722_23.08.2010_21-49.exe.lnk - C:\Documents and Settings\Jan Holík.NOTES\Local Settings\temp\_uninst_setup_9.0.0.722_23.08.2010_21-49.exe.bat

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-08-25 22:51:53 ----D---- C:\rsit
2010-08-25 19:55:43 ----D---- C:\Program Files\NVIDIA Corporation
2010-08-25 19:47:45 ----D---- C:\Documents and Settings\Jan Holík.NOTES\Data aplikací\Google
2010-08-25 19:36:30 ----D---- C:\Program Files\Google
2010-08-25 18:59:09 ----SHD---- C:\RECYCLER
2010-08-23 17:48:57 ----A---- C:\Boot.bak
2010-08-23 17:48:52 ----RASHD---- C:\cmdcons
2010-08-17 17:02:48 ----D---- C:\Program Files\Shape Viewer
2010-08-15 20:12:28 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\MediaMonkey
2010-08-15 13:58:02 ----D---- C:\Program Files\Native Instruments
2010-08-13 17:24:59 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2010-08-13 17:24:59 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2010-08-13 17:24:58 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2010-08-13 17:24:58 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2010-08-13 17:24:58 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2010-08-13 17:24:58 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2010-08-13 17:24:57 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2010-08-13 17:24:57 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2010-08-13 17:24:57 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2010-08-13 17:24:56 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2010-08-13 17:24:56 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2010-08-13 17:24:56 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2010-08-13 17:24:56 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2010-08-13 17:24:55 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2010-08-13 17:24:55 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2010-08-13 17:24:52 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2010-08-13 17:24:52 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2010-08-13 17:24:51 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2010-08-13 17:24:51 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2010-08-13 17:24:51 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2010-08-13 17:24:51 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2010-08-13 17:24:50 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2010-08-13 17:24:50 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2010-08-13 17:24:50 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2010-08-13 17:24:50 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2010-08-13 17:24:49 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2010-08-13 17:24:49 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2010-08-13 17:24:49 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2010-08-13 17:24:49 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2010-08-13 17:24:48 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2010-08-13 17:24:48 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2010-08-13 17:24:48 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2010-08-13 17:24:48 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2010-08-13 17:24:47 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2010-08-13 17:24:47 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2010-08-13 17:24:47 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2010-08-13 17:24:47 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2010-08-13 17:24:47 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2010-08-13 17:24:46 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2010-08-13 17:24:46 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2010-08-13 17:24:46 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2010-08-13 17:24:46 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2010-08-13 17:24:45 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2010-08-13 17:24:45 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2010-08-13 17:24:45 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2010-08-13 17:24:45 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2010-08-13 17:24:44 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2010-08-13 17:24:44 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2010-08-13 17:24:44 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2010-08-13 17:24:43 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2010-08-13 17:24:43 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2010-08-13 17:24:43 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2010-08-13 17:24:42 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2010-08-13 17:24:42 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2010-08-13 17:24:42 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2010-08-13 17:24:42 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2010-08-13 17:24:41 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2010-08-13 17:24:41 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2010-08-13 17:24:41 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2010-08-13 17:24:40 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2010-08-13 17:24:40 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2010-08-13 17:24:40 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2010-08-13 17:24:40 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2010-08-13 17:24:39 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2010-08-13 17:24:39 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2010-08-13 17:24:39 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2010-08-13 17:24:39 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2010-08-13 17:24:38 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2010-08-13 17:24:38 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2010-08-13 17:24:37 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2010-08-13 17:24:37 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2010-08-13 17:24:36 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2010-08-13 17:24:36 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2010-08-13 17:24:36 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2010-08-13 17:24:36 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2010-08-13 17:24:36 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2010-08-13 17:24:35 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2010-08-13 17:24:35 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2010-08-13 17:24:35 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2010-08-13 17:24:35 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2010-08-13 17:24:35 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2010-08-13 17:24:32 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2010-08-13 17:24:31 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2010-08-13 17:24:31 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2010-08-13 17:24:31 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2010-08-13 17:24:31 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2010-08-13 17:24:30 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2010-08-13 17:24:30 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-08-13 17:24:30 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2010-08-13 17:24:29 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2010-08-13 17:24:28 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2010-08-13 17:21:54 ----D---- C:\WINDOWS\Logs
2010-08-12 14:14:48 ----D---- C:\Program Files\RegCleaner
2010-08-05 14:41:25 ----D---- C:\Program Files\Lame for Audacity
2010-08-05 14:41:19 ----D---- C:\Documents and Settings\Jan Holík.NOTES\Data aplikací\Audacity
2010-08-05 14:41:06 ----D---- C:\Program Files\Audacity 1.3 Beta (Unicode)
2010-08-05 11:42:37 ----D---- C:\WINDOWS\_maz
2010-08-05 11:36:19 ----A---- C:\WINDOWS\system32\MRT.exe
2010-08-05 11:21:25 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-08-05 11:07:54 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Windows Genuine Advantage
2010-07-31 18:44:15 ----A---- C:\WINDOWS\tosOBEX.INI
2010-07-31 18:41:52 ----D---- C:\Documents and Settings\Jan Holík.NOTES\Data aplikací\TOSHIBA
2010-07-31 18:37:54 ----A---- C:\WINDOWS\system32\drivers\TosRfSnd.sys
2010-07-31 18:37:54 ----A---- C:\WINDOWS\system32\drivers\tosrfnds.sys
2010-07-31 18:37:54 ----A---- C:\WINDOWS\system32\drivers\tosrfcom.sys
2010-07-31 18:37:54 ----A---- C:\WINDOWS\system32\drivers\tosrfbnp.sys
2010-07-31 18:37:53 ----A---- C:\WINDOWS\system32\drivers\tosporte.sys
2010-07-31 18:37:43 ----D---- C:\Program Files\Toshiba
2010-07-31 18:17:45 ----A---- C:\WINDOWS\system32\drivers\HOTKEY.sys
2010-07-31 18:17:41 ----D---- C:\Documents and Settings\Jan Holík.NOTES\Data aplikací\InstallShield
2010-07-28 10:30:31 ----D---- C:\Program Files\Mozilla Firefox 4.0 Beta 2

======List of files/folders modified in the last 1 months======

2010-08-25 22:51:59 ----D---- C:\WINDOWS\system32\CatRoot2
2010-08-25 22:51:58 ----D---- C:\WINDOWS\Prefetch
2010-08-25 22:51:57 ----D---- C:\Program Files\trend micro
2010-08-25 22:51:47 ----D---- C:\WINDOWS\Temp
2010-08-25 22:50:38 ----D---- C:\Documents and Settings\Jan Holík.NOTES\Data aplikací\Gmail Notifier
2010-08-25 22:50:32 ----D---- C:\WINDOWS\Internet Logs
2010-08-25 22:50:25 ----D---- C:\WINDOWS
2010-08-25 22:50:10 ----D---- C:\WINDOWS\system32\Restore
2010-08-25 22:50:09 ----SHD---- C:\System Volume Information
2010-08-25 22:48:27 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-08-25 20:04:53 ----SHD---- C:\WINDOWS\Installer
2010-08-25 20:04:52 ----RD---- C:\Program Files
2010-08-25 19:55:36 ----D---- C:\WINDOWS\system32\DirectX
2010-08-25 19:55:34 ----HD---- C:\WINDOWS\inf
2010-08-25 19:55:17 ----D---- C:\WINDOWS\system32
2010-08-25 19:54:50 ----RSD---- C:\WINDOWS\assembly
2010-08-25 19:36:35 ----SD---- C:\WINDOWS\Tasks
2010-08-25 18:30:08 ----D---- C:\WINDOWS\system32\drivers
2010-08-24 22:44:03 ----A---- C:\WINDOWS\system.ini
2010-08-24 22:43:56 ----D---- C:\WINDOWS\system32\drivers\etc
2010-08-24 22:40:18 ----D---- C:\WINDOWS\AppPatch
2010-08-24 22:40:14 ----D---- C:\Program Files\Common Files
2010-08-23 17:48:57 ----RASH---- C:\boot.ini
2010-08-22 22:11:39 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-08-19 22:17:05 ----D---- C:\Program Files\SpeedFan
2010-08-19 11:45:29 ----D---- C:\Documents and Settings
2010-08-19 10:04:15 ----D---- C:\Program Files\Java
2010-08-19 10:04:05 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-08-17 16:45:41 ----D---- C:\Program Files\Mozilla Firefox
2010-08-15 12:43:40 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-08-05 16:07:28 ----D---- C:\WINDOWS\Debug
2010-08-05 14:26:19 ----D---- C:\WINDOWS\Microsoft.NET
2010-08-05 11:38:42 ----D---- C:\WINDOWS\system32\wbem
2010-08-05 11:38:42 ----D---- C:\Program Files\Internet Explorer
2010-08-05 11:35:45 ----D---- C:\WINDOWS\WinSxS
2010-08-05 11:33:58 ----D---- C:\WINDOWS\ie8updates
2010-08-05 11:33:15 ----D---- C:\Program Files\Outlook Express
2010-08-05 11:32:20 ----D---- C:\Program Files\Movie Maker
2010-08-05 11:24:10 ----D---- C:\Program Files\Messenger
2010-08-05 11:05:02 ----D---- C:\WINDOWS\SoftwareDistribution
2010-07-31 18:38:17 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-07-31 18:17:45 ----D---- C:\Program Files\Launch Manager
2010-07-27 08:30:31 ----A---- C:\WINDOWS\system32\shell32.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 iaStor;Intel AHCI Controller; C:\WINDOWS\system32\DRIVERS\iaStor.sys [2007-10-06 874240]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2006-09-24 5248]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-06-28 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-06-28 165456]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-06-28 46672]
R1 Hotkey;Hotkey; C:\WINDOWS\system32\drivers\Hotkey.sys [2003-04-28 9867]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 Tosrfcom;Bluetooth RFCOMM; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2007-05-24 64000]
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2009-11-22 486280]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-06-28 17744]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-06-28 100176]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-06-28 23376]
R3 EMSCR;EMSCR; C:\WINDOWS\system32\DRIVERS\EMS7SK.sys [2006-07-13 61568]
R3 ESDCR;ESDCR; C:\WINDOWS\system32\DRIVERS\ESD7SK.sys [2006-07-13 40064]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-09-22 4381696]
R3 NETw3x32;Ovladač adaptéru Intel(R) PRO/Wireless 3945ABG pro Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw3x32.sys [2006-09-27 1709696]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-11-16 6864064]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-14 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-04-21 193056]
R3 tosporte;Bluetooth COM Port; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2006-10-10 41600]
R3 tosrfbd;Bluetooth RFBUS; C:\WINDOWS\system32\DRIVERS\tosrfbd.sys [2007-04-24 113920]
R3 tosrfbnp;Bluetooth RFBNEP; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2006-11-20 36480]
R3 Tosrfhid;Bluetooth RFHID; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2007-03-01 73728]
R3 tosrfnds;Bluetooth Personal Area Network; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-07 18612]
R3 tosrfusb;Bluetooth USB Controller; C:\WINDOWS\system32\DRIVERS\tosrfusb.sys [2007-06-11 41856]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2006-08-07 248832]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S1 mailKmd;mailKmd; C:\WINDOWS\system32\drivers\mailKmd.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BTHMODEM;Ovladač komunikace modemu Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-14 37888]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12160]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 sffdisk;Ovladač třídy úložiště SFF; C:\WINDOWS\system32\DRIVERS\sffdisk.sys [2008-04-14 11904]
S3 sffp_sd;Ovladač protokolu úložiště SFF pro paměť sběrnici SDBus; C:\WINDOWS\system32\DRIVERS\sffp_sd.sys [2008-04-14 11008]
S3 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys []
S3 TosRfSnd;Bluetooth Audio; C:\WINDOWS\system32\drivers\tosrfsnd.sys [2007-01-22 53376]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys []
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-07-17 153376]
R2 NMSAccess;NMSAccess; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2010-03-04 71096]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-11-16 155716]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-02-25 125048]
R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2009-11-22 2384240]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R3 WisLMSvc;WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [2006-11-17 118784]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-25 136176]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Počítač funguje bez problému. To co se dělo předtím se za celý dnešek nevyskytlo. Ještě jednou děkuji za spolupráci. Moc jste mi pomohla.

[motji]

Ještě otevřete HJT a v něm fixněte tento řádek
O4 - Startup: _uninst_setup_9.0.0.722_23.08.2010_21-49.exe.lnk = ?

A pokud nejsou problémy, je to vše.
A není zač, ráda jsem Vám pomohla . Kdyby byli problémy, ozvěte se .

[Yoshua]

Tak vás zdravím. Opět se stejným problémem. Co jsme to vyřešili posledně, tak to bylo bez problémů. Po nějakém čase jsem prováděl format C: a s ním spojený reinstall Windows. Po cca 2 měsících to dělá zase. ynechávají písmena při psaní, nová okna se otevírají na pozadí, ve spuštěných aplikacích zůstávají "viset" klávesy, případně se chovají jako se stisknutým Ctrl...prostě stejné přínaky. Čistím Ccleanerem pravidelně, Spybot a Avast nic nenašli...

[Yoshua]

Logfile of random's system information tool 1.08 (written by random/random)
Run by Jan Holík at 2010-11-14 12:36:35
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 6 GB (31%) free of 20 GB
Total RAM: 2558 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:36:51, on 14.11.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avast5\AvastSvc.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avast5\avastUI.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\OSD.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Gmail Notifier\Gmail Notifier.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Launch Manager\WisLMSvc.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Mozilla Firefox 4.0 Beta 6\firefox.exe
C:\Program Files\Mozilla Firefox 4.0 Beta 6\plugin-container.exe
D:\d\RSIT.exe
C:\Program Files\trend micro\Jan Holík.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.mojebanka.cz/InternetBanking/?L=CS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {ED0E8CA5-42FB-4B18-997B-769E0408E79D} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [LaunchAp] "C:\Program Files\Launch Manager\LaunchAp.exe"
O4 - HKLM\..\Run: [HotkeyApp] "C:\Program Files\Launch Manager\HotkeyApp.exe"
O4 - HKLM\..\Run: [LMgrVolOSD] "C:\Program Files\Launch Manager\OSD.exe"
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
O4 - HKLM\..\Run: [Wbutton] C:\Program Files\Launch Manager\WButton.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gmail Notifier.exe] C:\Program Files\Gmail Notifier\Gmail Notifier.exe /startup
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O9 - Extra button: FreshDownload - {67F44070-BF30-43D7-BD5B-71237E821170} - C:\Program Files\FreshDevices\FreshDownload\fd.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 4811261875
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: WisLMSvc - Wistron Corp. - C:\Program Files\Launch Manager\WisLMSvc.exe
O24 - Desktop Component 1: (no name) - http://www.seznam.cz/

--
End of file - 6744 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
FDMIECookiesBHO Class - C:\Program Files\Free Download Manager\iefdm2.dll [2008-12-30 98304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-09-18 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-09-18 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{ED0E8CA5-42FB-4B18-997B-769E0408E79D}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-11-16 8495104]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-11-16 81920]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-09-22 16236032]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"avast5"=C:\Program Files\Avast5\avastUI.exe [2010-09-07 2838912]
"LaunchAp"=C:\Program Files\Launch Manager\LaunchAp.exe [2005-07-25 32768]
"HotkeyApp"=C:\Program Files\Launch Manager\HotkeyApp.exe [2006-12-14 192512]
"LMgrVolOSD"=C:\Program Files\Launch Manager\OSD.exe [2006-12-26 180224]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-08-28 1557800]
"CtrlVol"=C:\Program Files\Launch Manager\CtrlVol.exe []
"Wbutton"=C:\Program Files\Launch Manager\WButton.exe []
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
""= []
"Gmail Notifier.exe"=C:\Program Files\Gmail Notifier\Gmail Notifier.exe [2010-10-03 2155520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KONICA MINOLTA PagePro 1350WStatusDisplay]
C:\WINDOWS\system32\MSTMON_Q.EXE [2004-11-26 167936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Jan Holík^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.2.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-06-07 1195520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Miranda IM\miranda32.exe"="C:\Miranda IM\miranda32.exe:*:Enabled:Miranda IM"
"C:\Program Files\Age of Empires II\empires2.exe"="C:\Program Files\Age of Empires II\empires2.exe:*:Disabled:Age of Empires II"
"C:\Program Files\Age of Empires II\age2_x1.exe"="C:\Program Files\Age of Empires II\age2_x1.exe:*:Disabled:Age of Empires II Expansion"
"C:\Program Files\Google\Google Earth\plugin\geplugin.exe"="C:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth"
"C:\Program Files\Mozilla Firefox 4.0 Beta 6\plugin-container.exe"="C:\Program Files\Mozilla Firefox 4.0 Beta 6\plugin-container.exe:*:Enabled:Plugin Container for Firefox"
"D:\hry\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe"="D:\hry\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (CLI)"
"D:\hry\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe"="D:\hry\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (SRV)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-11-14 12:36:36 ----D---- C:\Program Files\trend micro
2010-11-14 12:36:35 ----D---- C:\rsit
2010-11-13 22:46:12 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-11-13 22:46:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-11-08 18:43:08 ----ASH---- C:\hiberfil.sys
2010-11-08 18:41:45 ----D---- C:\WINDOWS\CSC
2010-11-08 18:41:38 ----A---- C:\WINDOWS\ntbtlog.txt
2010-11-03 17:43:55 ----RA---- C:\WINDOWS\system32\drivers\wdcsam.sys
2010-11-01 21:06:46 ----D---- C:\Program Files\ConBuilder
2010-10-28 13:01:06 ----D---- C:\WINDOWS\system32\XPSViewer
2010-10-28 13:01:02 ----D---- C:\Program Files\MSBuild
2010-10-28 13:00:59 ----D---- C:\WINDOWS\system32\en-US
2010-10-28 13:00:51 ----D---- C:\Program Files\Reference Assemblies
2010-10-28 13:00:30 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-10-28 13:00:30 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-10-28 13:00:29 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-10-28 12:58:59 ----SHD---- C:\Config.Msi
2010-10-28 12:47:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\Canneverbe Limited
2010-10-28 12:46:42 ----D---- C:\cdBurnerXp
2010-10-28 12:13:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
2010-10-28 12:13:55 ----A---- C:\WINDOWS\system32\QTCF.dll
2010-10-28 12:13:52 ----D---- C:\Program Files\QuickTime Alternative
2010-10-26 18:46:32 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2010-10-26 18:46:32 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2010-10-26 18:46:32 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2010-10-26 18:46:32 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2010-10-26 18:46:32 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2010-10-26 18:46:31 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2010-10-26 18:46:31 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2010-10-26 18:46:31 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2010-10-26 18:46:31 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2010-10-26 18:46:30 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2010-10-26 18:46:30 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2010-10-26 18:46:21 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2010-10-26 18:46:20 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2010-10-26 18:46:20 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2010-10-26 18:46:20 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2010-10-26 18:46:20 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2010-10-26 18:46:19 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2010-10-26 18:46:19 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-10-26 18:46:19 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2010-10-26 18:46:19 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2010-10-26 18:46:17 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2010-10-25 19:07:34 ----D---- C:\Documents and Settings\Jan Holík\Data aplikací\Sync App Settings
2010-10-25 19:07:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sync App Settings
2010-10-25 19:07:01 ----D---- C:\Program Files\Allway Sync
2010-10-25 18:52:09 ----D---- C:\Documents and Settings\Jan Holík\Data aplikací\Western Digital
2010-10-25 18:52:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\Western Digital
2010-10-25 18:49:31 ----RSD---- C:\WINDOWS\assembly
2010-10-25 18:48:43 ----D---- C:\WINDOWS\Microsoft.NET
2010-10-21 17:06:18 ----A---- C:\WINDOWS\system32\unrar.dll
2010-10-21 17:06:17 ----A---- C:\WINDOWS\avisplitter.ini
2010-10-21 17:06:11 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2010-10-21 17:06:11 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-10-21 17:06:11 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-10-21 17:06:11 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2010-10-21 17:06:11 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2010-10-19 21:06:00 ----D---- C:\Program Files\Kodek CZ
2010-10-19 20:30:52 ----A---- C:\WINDOWS\tosOBEX.INI
2010-10-19 20:13:11 ----A---- C:\WINDOWS\system32\drivers\tosrfusb.sys
2010-10-19 20:13:11 ----A---- C:\WINDOWS\system32\drivers\Tosrfhid.sys
2010-10-19 20:13:11 ----A---- C:\WINDOWS\system32\drivers\tosrfbd.sys
2010-10-19 20:13:10 ----A---- C:\WINDOWS\system32\drivers\TosRfSnd.sys
2010-10-19 20:13:10 ----A---- C:\WINDOWS\system32\drivers\tosrfnds.sys
2010-10-19 20:13:10 ----A---- C:\WINDOWS\system32\drivers\tosrfbnp.sys
2010-10-19 20:13:09 ----A---- C:\WINDOWS\system32\drivers\tosrfcom.sys
2010-10-19 20:13:09 ----A---- C:\WINDOWS\system32\drivers\tosporte.sys
2010-10-19 20:12:58 ----D---- C:\Program Files\Toshiba
2010-10-19 20:03:30 ----D---- C:\Documents and Settings\Jan Holík\Data aplikací\TOSHIBA
2010-10-19 19:59:42 ----A---- C:\WINDOWS\system32\wshirda.dll
2010-10-19 19:59:42 ----A---- C:\WINDOWS\system32\irmon.dll
2010-10-19 19:59:42 ----A---- C:\WINDOWS\system32\irftp.exe
2010-10-17 13:29:38 ----D---- C:\Program Files\IrfanView
2010-10-15 16:51:34 ----D---- C:\WINDOWS\pss

======List of files/folders modified in the last 1 months======

2010-11-14 12:36:43 ----D---- C:\WINDOWS\Prefetch
2010-11-14 12:36:36 ----RD---- C:\Program Files
2010-11-14 09:31:51 ----D---- C:\Documents and Settings\Jan Holík\Data aplikací\Mozilla
2010-11-14 09:24:28 ----D---- C:\WINDOWS\Temp
2010-11-14 09:24:18 ----D---- C:\Documents and Settings\Jan Holík\Data aplikací\Gmail Notifier
2010-11-14 09:24:06 ----SHD---- C:\System Volume Information
2010-11-14 09:24:06 ----D---- C:\WINDOWS\system32\Restore
2010-11-14 00:17:05 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-11-13 18:27:45 ----D---- C:\Program Files\Mozilla Firefox 4.0 Beta 6
2010-11-10 00:20:47 ----D---- C:\Documents and Settings\Jan Holík\Data aplikací\Free Download Manager
2010-11-08 19:00:28 ----D---- C:\WINDOWS
2010-11-08 18:59:07 ----D---- C:\WINDOWS\system32\CatRoot2
2010-11-08 18:56:32 ----D---- C:\WINDOWS\system32
2010-11-08 18:56:29 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-11-08 18:56:24 ----D---- C:\WINDOWS\system32\drivers
2010-11-08 18:56:20 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-11-03 17:43:55 ----HD---- C:\WINDOWS\inf
2010-10-28 13:04:23 ----SHD---- C:\WINDOWS\Installer
2010-10-28 13:03:40 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-10-28 13:03:27 ----D---- C:\WINDOWS\WinSxS
2010-10-28 13:00:57 ----RSD---- C:\WINDOWS\Fonts
2010-10-28 13:00:40 ----D---- C:\WINDOWS\system32\spool
2010-10-28 12:59:14 ----D---- C:\WINDOWS\system32\mui
2010-10-28 12:59:13 ----D---- C:\Program Files\Internet Explorer
2010-10-28 12:47:27 ----SD---- C:\Documents and Settings\Jan Holík\Data aplikací\Microsoft
2010-10-26 18:46:33 ----D---- C:\WINDOWS\system32\DirectX
2010-10-25 19:05:59 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-10-25 18:49:07 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-10-25 18:48:43 ----D---- C:\WINDOWS\pchealth
2010-10-21 17:06:35 ----D---- C:\Program Files\K-Lite Codec Pack
2010-10-19 20:14:41 ----D---- C:\WINDOWS\security
2010-10-19 20:06:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\TOSHIBA
2010-10-18 17:43:25 ----HD---- C:\Program Files\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\WINDOWS\system32\DRIVERS\iaStor.sys [2007-10-06 874240]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-09-18 691696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 Hotkey;Hotkey; C:\WINDOWS\system32\drivers\Hotkey.sys [2003-04-28 9867]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 Tosrfcom;Bluetooth RFCOMM; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2007-05-24 64000]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 EMSCR;EMSCR; C:\WINDOWS\system32\DRIVERS\EMS7SK.sys [2006-07-13 61568]
R3 ESDCR;ESDCR; C:\WINDOWS\system32\DRIVERS\ESD7SK.sys [2006-07-13 40064]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-09-22 4381696]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12160]
R3 NETw3x32;Ovladač adaptéru Intel(R) PRO/Wireless 3945ABG pro Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw3x32.sys [2006-09-26 1709696]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-11-16 6864064]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2009-08-28 228784]
R3 tosporte;Bluetooth COM Port; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2006-10-10 41600]
R3 tosrfbd;Bluetooth RFBUS; C:\WINDOWS\system32\DRIVERS\tosrfbd.sys [2007-04-24 113920]
R3 tosrfbnp;Bluetooth RFBNEP; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2006-11-20 36480]
R3 Tosrfhid;Bluetooth RFHID; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2007-03-01 73728]
R3 tosrfnds;Bluetooth Personal Area Network; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-07 18612]
R3 Tosrfusb;Bluetooth USB Controller; C:\WINDOWS\system32\DRIVERS\tosrfusb.sys [2007-06-11 41856]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2006-08-07 248832]
S1 mailKmd;mailKmd; C:\WINDOWS\system32\drivers\mailKmd.sys []
S2 MLPTDR_Q;MLPTDR_Q; \??\C:\WINDOWS\system32\MLPTDR_Q.SYS []
S3 abcmw0ej;abcmw0ej; C:\WINDOWS\system32\drivers\abcmw0ej.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BTHMODEM;Ovladač komunikace modemu Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-13 37888]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 flash;flash; \??\C:\WINDOWS\system32\drivers\flash.sys []
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 sffdisk;Ovladač třídy úložiště SFF; C:\WINDOWS\system32\DRIVERS\sffdisk.sys [2008-04-13 11904]
S3 sffp_sd;Ovladač protokolu úložiště SFF pro paměť sběrnici SDBus; C:\WINDOWS\system32\DRIVERS\sffp_sd.sys [2008-04-13 11008]
S3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys []
S3 TosRfSnd;Bluetooth Audio; C:\WINDOWS\system32\drivers\tosrfsnd.sys [2007-01-22 53376]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-09-18 153376]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-11-16 155716]
R2 SimpTcp;Jednoduché služby TCP/IP; C:\WINDOWS\system32\tcpsvcs.exe [2006-03-02 19456]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-02-25 125048]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 WisLMSvc;WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [2006-11-17 118784]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-09-21 136176]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[motji]

Hezké odpoledne

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix

[Yoshua]

ComboFix 10-11-13.01 - Jan Holík 14.11.2010 16:29:33.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2558.2229 [GMT 1:00]
Spuštěný z: c:\documents and settings\Jan Holík\Plocha\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-10-14 do 2010-11-14 )))))))))))))))))))))))))))))))
.

2010-11-14 11:36 . 2010-11-14 11:36 -------- d-----w- c:\program files\trend micro
2010-11-14 11:36 . 2010-11-14 11:36 -------- d-----w- C:\rsit
2010-11-13 21:46 . 2010-11-13 22:37 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-11-13 21:46 . 2010-11-13 22:37 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-11-03 16:43 . 2009-02-13 19:02 11520 ----a-r- c:\windows\system32\drivers\wdcsam.sys
2010-11-01 20:06 . 2010-11-01 20:08 -------- d-----w- c:\program files\ConBuilder
2010-10-28 12:01 . 2010-10-28 12:01 -------- d-----w- c:\windows\system32\XPSViewer
2010-10-28 12:01 . 2010-10-28 12:01 -------- d-----w- c:\program files\MSBuild
2010-10-28 12:00 . 2010-10-28 12:00 -------- d-----w- c:\program files\Reference Assemblies
2010-10-28 12:00 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2010-10-28 12:00 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2010-10-28 12:00 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2010-10-28 12:00 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2010-10-28 12:00 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2010-10-28 12:00 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2010-10-28 12:00 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2010-10-28 12:00 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2010-10-28 12:00 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2010-10-28 11:47 . 2010-10-28 11:47 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Canneverbe Limited
2010-10-28 11:46 . 2010-10-28 11:47 -------- d-----w- C:\cdBurnerXp
2010-10-28 11:13 . 2010-10-28 11:13 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Apple Computer
2010-10-28 11:13 . 2010-03-17 20:53 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-10-28 11:13 . 2010-03-17 20:53 69632 ----a-w- c:\windows\system32\QuickTime.qts
2010-10-28 11:13 . 2010-03-17 20:53 180224 ----a-w- c:\windows\system32\QTCF.dll
2010-10-28 11:13 . 2010-10-28 11:14 -------- d-----w- c:\program files\QuickTime Alternative
2010-10-25 18:07 . 2010-10-25 18:07 -------- d-----w- c:\documents and settings\Jan Holík\Data aplikací\Sync App Settings
2010-10-25 18:07 . 2010-10-25 18:07 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Sync App Settings
2010-10-25 18:07 . 2010-10-25 18:07 -------- d-----w- c:\program files\Allway Sync
2010-10-25 17:52 . 2010-10-25 18:05 -------- d-----w- c:\documents and settings\Jan Holík\Data aplikací\Western Digital
2010-10-25 17:52 . 2010-10-25 17:52 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Western Digital
2010-10-25 17:52 . 2010-10-25 17:52 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\ServiceTest
2010-10-21 16:06 . 2010-03-15 09:31 165376 ----a-w- c:\windows\system32\unrar.dll
2010-10-21 16:06 . 2010-01-17 15:18 151552 ----a-w- c:\windows\system32\ac3acm.acm
2010-10-21 16:06 . 2006-10-18 18:05 232448 ----a-w- c:\windows\system32\mp3fhg.acm
2010-10-21 16:06 . 2010-10-18 08:00 108032 ----a-w- c:\windows\system32\ff_vfw.dll
2010-10-21 16:06 . 2010-06-08 16:10 790528 ----a-w- c:\windows\system32\xvidcore.dll
2010-10-21 16:06 . 2010-06-08 16:10 134144 ----a-w- c:\windows\system32\xvidvfw.dll
2010-10-21 16:06 . 2004-01-25 16:18 217088 ----a-w- c:\windows\system32\yv12vfw.dll
2010-10-19 20:06 . 2010-10-19 20:06 -------- d-----w- c:\program files\Kodek CZ
2010-10-19 19:13 . 2007-06-11 12:25 41856 ----a-w- c:\windows\system32\drivers\tosrfusb.sys
2010-10-19 19:13 . 2007-04-24 11:20 113920 ----a-w- c:\windows\system32\drivers\tosrfbd.sys
2010-10-19 19:13 . 2007-03-01 14:53 73728 ----a-w- c:\windows\system32\drivers\Tosrfhid.sys
2010-10-19 19:13 . 2007-01-22 08:43 53376 ----a-w- c:\windows\system32\drivers\TosRfSnd.sys
2010-10-19 19:13 . 2006-11-20 15:55 36480 ----a-w- c:\windows\system32\drivers\tosrfbnp.sys
2010-10-19 19:13 . 2005-01-07 03:42 18612 ----a-w- c:\windows\system32\drivers\tosrfnds.sys
2010-10-19 19:13 . 2007-05-24 12:27 64000 ----a-w- c:\windows\system32\drivers\tosrfcom.sys
2010-10-19 19:13 . 2006-10-10 17:33 41600 ----a-w- c:\windows\system32\drivers\tosporte.sys
2010-10-19 19:12 . 2010-10-19 19:12 -------- d-----w- c:\program files\Toshiba
2010-10-19 19:03 . 2010-10-19 19:03 -------- d-----w- c:\documents and settings\Jan Holík\Data aplikací\TOSHIBA
2010-10-19 18:59 . 2008-04-14 06:52 152064 -c--a-w- c:\windows\system32\dllcache\irftp.exe
2010-10-19 18:59 . 2008-04-14 06:52 152064 ----a-w- c:\windows\system32\irftp.exe
2010-10-19 18:59 . 2008-04-14 06:52 8192 -c--a-w- c:\windows\system32\dllcache\wshirda.dll
2010-10-19 18:59 . 2008-04-14 06:52 8192 ----a-w- c:\windows\system32\wshirda.dll
2010-10-19 18:59 . 2008-04-14 06:51 27648 -c--a-w- c:\windows\system32\dllcache\irmon.dll
2010-10-19 18:59 . 2008-04-14 06:51 27648 ----a-w- c:\windows\system32\irmon.dll
2010-10-17 12:29 . 2010-10-17 12:29 -------- d-----w- c:\program files\IrfanView

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-06 16:58 . 2010-10-06 16:58 737280 ----a-w- c:\windows\iun6002.exe
2010-09-18 14:25 . 2010-09-18 14:25 73728 ----a-w- c:\windows\system32\javacpl.cpl
2010-09-18 14:25 . 2010-09-18 14:25 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-09-18 14:05 . 2010-09-18 14:05 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-09-07 15:12 . 2010-09-18 13:56 38848 ----a-w- c:\windows\avastSS.scr
2010-09-07 15:11 . 2010-09-18 13:56 167592 ----a-w- c:\windows\system32\aswBoot.exe
2010-09-07 14:52 . 2010-09-18 13:56 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-09-07 14:52 . 2010-09-18 13:56 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-09-07 14:47 . 2010-09-18 13:56 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-09-07 14:47 . 2010-09-18 13:56 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-09-07 14:47 . 2010-09-18 13:56 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-09-07 14:47 . 2010-09-18 13:56 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-09-07 14:46 . 2010-09-18 13:56 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-08-17 13:17 . 2006-03-02 12:00 58880 ----a-w- c:\windows\system32\spoolsv.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Gmail Notifier.exe"="c:\program files\Gmail Notifier\Gmail Notifier.exe" [2010-10-03 2155520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-16 8495104]
"nwiz"="nwiz.exe" [2007-11-16 1626112]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-11-16 81920]
"RTHDCPL"="RTHDCPL.EXE" [2006-09-22 16236032]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"avast5"="c:\program files\Avast5\avastUI.exe" [2010-09-07 2838912]
"LaunchAp"="c:\program files\Launch Manager\LaunchAp.exe" [2005-07-25 32768]
"HotkeyApp"="c:\program files\Launch Manager\HotkeyApp.exe" [2006-12-14 192512]
"LMgrVolOSD"="c:\program files\Launch Manager\OSD.exe" [2006-12-26 180224]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-08-28 1557800]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^Jan Holík^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.2.lnk]
path=c:\documents and settings\Jan Holík\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.2.lnk
backup=c:\windows\pss\OpenOffice.org 3.2.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KONICA MINOLTA PagePro 1350WStatusDisplay]
2004-11-26 16:21 167936 ----a-w- c:\windows\system32\MSTMON_Q.EXE

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Miranda IM\\miranda32.exe"=
"c:\\Program Files\\Age of Empires II\\empires2.exe"=
"c:\\Program Files\\Age of Empires II\\age2_x1.exe"=
"c:\\Program Files\\Google\\Google Earth\\plugin\\geplugin.exe"=
"c:\\Program Files\\Mozilla Firefox 4.0 Beta 6\\plugin-container.exe"=
"d:\\hry\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\XR_3DA.exe"=
"d:\\hry\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\dedicated\\XR_3DA.exe"=

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [18.9.2010 15:05 691696]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [18.9.2010 14:56 165584]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [18.9.2010 14:56 17744]
S1 mailKmd;mailKmd; [x]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [21.9.2010 16:23 136176]
S2 MLPTDR_Q;MLPTDR_Q;c:\windows\system32\MLPTDR_Q.SYS [22.7.2003 15:44 18848]
S3 flash;flash;c:\windows\system32\drivers\flash.sys [18.9.2010 15:26 8064]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [3.11.2010 17:43 11520]
S3 WisLMSvc;WisLMSvc;c:\program files\Launch Manager\WisLMSvc.exe [18.9.2010 15:12 118784]
.
Obsah adresáře 'Naplánované úlohy'

2010-11-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-21 15:23]

2010-11-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-21 15:23]
.
.
------- Doplňkový sken -------
.
uStart Page = https://www.mojebanka.cz/InternetBanking/?L=CS
IE: Download all with Free Download Manager - file://c:\program files\Free Download Manager\dlall.htm
IE: Download selected with Free Download Manager - file://c:\program files\Free Download Manager\dlselected.htm
IE: Download video with Free Download Manager - file://c:\program files\Free Download Manager\dlfvideo.htm
IE: Download with Free Download Manager - file://c:\program files\Free Download Manager\dllink.htm
IE: {{67F44070-BF30-43D7-BD5B-71237E821170} - c:\program files\FreshDevices\FreshDownload\fd.exe
FF - ProfilePath - c:\documents and settings\Jan Holík\Data aplikací\Mozilla\Firefox\Profiles\bgyd3rvu.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKLM-Run-CtrlVol - c:\program files\Launch Manager\CtrlVol.exe
HKLM-Run-Wbutton - c:\program files\Launch Manager\WButton.exe
SafeBoot-WudfPf
SafeBoot-WudfRd



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-14 16:33
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
CtrlVol = c:\program files\Launch Manager\CtrlVol.exe?x???0???\???????0??????????? ??|???|???????|????????L???????PK????F?????????????h?????????????B????? ??|`??|????]??|[?A?????????z?A???u???7~??????F?4^@???????????????A???%?????z?A???@?@K??6u@?@K????u???@?PK?????
Wbutton = c:\program files\Launch Manager\WButton.exe?x???0???\???????0??????????? ??|???|???????|????????L???????PK????F?????????????h?????????????B????? ??|`??|????]??|[?A?????????z?A???u???7~??????F?4^@???????????????A???%?????z?A???@?@K??6u@?@K????u???@?PK?????

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
Celkový čas: 2010-11-14 16:34:57
ComboFix-quarantined-files.txt 2010-11-14 15:34

Před spuštěním: 6 470 115 328
Po spuštění: 6 440 816 640

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - EDDA762126B1E7FAEF870EA7F855296A

[motji]

Změnilo se něco?

[Yoshua]

bohužel...pořád stejné.

[motji]

Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.

[Yoshua]

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 5114

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

14.11.2010 20:09:31
mbam-log-2010-11-14 (20-09-31).txt

Typ skenu: Úplný sken (C:\|D:\|)
Skenované objekty: 248087
Uplynulý čas: 1 hodina(y), 18 minuta(y), 28 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 3
Infikované složky: 0
Infikované soubory: 1

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
D:\System Volume Information\_restore{77D344CD-18E2-43DC-A2A1-8F021438E1E4}\RP1\A0001130.exe (Backdoor.Bot) -> No action taken.

[motji]

Co našel mbam, smažte

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

Driver::
mailKmd

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci