Totalni zpomaleni netu

[memart]

Je tady:

Logfile of random's system information tool 1.08 (written by random/random)
Run by Ing. Markovic at 2010-12-02 00:30:12
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 72 GB (64%) free of 113 GB
Total RAM: 2046 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 0:30:22, on 2.12.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17091)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Tenda\Common\RaRegistry.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Acronis\OnlineBackupStandalone\TrueImageMonitor.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Tenda\Common\RaUI.exe
D:\Documents and Settings\Ing. Markovic\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\Ing. Markovic.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: (no name) - {942cd1d4-9cc1-4d31-876a-ea8f489f7a59} - (no file)
O3 - Toolbar: (no name) - {942cd1d4-9cc1-4d31-876a-ea8f489f7a59} - (no file)
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O4 - HKLM\..\Run: [SAOB Monitor] C:\Program Files\Acronis\OnlineBackupStandalone\TrueImageMonitor.exe
O4 - HKLM\..\Run: [TrueImageMonitor.exe] "C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe"
O4 - HKLM\..\Run: [Služba Acronis Scheduler2] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [igndlm.exe] C:\Program Files\IGN\Download Manager\DLM.exe /windowsstart /startifwork
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Tenda W311U.lnk = ?
O4 - Global Startup: Tenda Wireless Utility.lnk = C:\Program Files\Tenda\Common\RaUI.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O10 - Unknown file in Winsock LSP: c:\program files\iobit\advanced systemcare 3\spictrl.dll
O10 - Unknown file in Winsock LSP: c:\program files\iobit\advanced systemcare 3\spictrl.dll
O10 - Unknown file in Winsock LSP: c:\program files\iobit\advanced systemcare 3\spictrl.dll
O10 - Unknown file in Winsock LSP: c:\program files\iobit\advanced systemcare 3\spictrl.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Program Files\Tenda\Common\RaRegistry.exe

--
End of file - 5101 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-11-23 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-11-23 3908192]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SAOB Monitor"=C:\Program Files\Acronis\OnlineBackupStandalone\TrueImageMonitor.exe [2010-09-02 2536752]
"TrueImageMonitor.exe"=C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2010-09-23 5502312]
"Služba Acronis Scheduler2"=C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [2010-09-23 391144]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2010-09-08 421888]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-10-21 198160]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"igndlm.exe"=C:\Program Files\IGN\Download Manager\DLM.exe [2009-05-14 1103216]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
E:\Alcohol120\Alcohol 120\axcmd.exe [2009-04-24 203928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICustomerCare]
C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [2010-03-04 311296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-09-01 1164584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\Ing. Markovic\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2010-04-03 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2010-11-11 421160]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2006-09-29 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2]
C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2010-09-02 672632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe [2010-09-08 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-07-06 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-10-21 198160]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\tsnpstd3]
C:\WINDOWS\tsnpstd3.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^AutoUpdate Monitor.lnk]
D:\PROGRA~1\AUTOUP~1\ALMon.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [2006-02-19 288472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Rychlý začátek s aplikací HP Photosmart Premier.lnk]
C:\PROGRA~1\HP\DIGITA~1\bin\hpqthb08.exe [2006-02-10 73728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Ing. Markovic^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2009-05-15 384512]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"WMPNetworkSvc"=3
"STI Simulator"=2
"StarWindServiceAE"=2
"ose"=3
"odserv"=3
"npggsvc"=3
"LightScribeService"=2
"JavaQuickStarterService"=2
"idsvc"=3
"gupdate"=2
"DAUpdaterSvc"=3
"avg9wd"=2
"ATI Smart"=2
"Ati HotKey Poller"=2
"afcdpsrv"=2
"AcrSch2Svc"=2

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Tenda W311U.lnk - C:\Program Files\Tenda\W311U\UI.exe
Tenda Wireless Utility.lnk - C:\Program Files\Tenda\Common\RaUI.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-07-07 159744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoResolveTrack"=1
"HonorAutoRunSetting"=1
"NoDrives"=0
"NoResolveSearch"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Skype\Skype old\Skype.exe"="C:\Program Files\Skype\Skype old\Skype.exe:*:Enabled:Skype"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe"="C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe:*:Enabled:PowerDVD"
"C:\WINDOWS\System32\DPNSvr.exe"="C:\WINDOWS\System32\DPNSvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe"="C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe"="C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater"
"C:\Program Files\TeamViewer\Version4\TeamViewer.exe"="C:\Program Files\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application"
"C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
"C:\WINDOWS\System32\dpvsetup.exe"="C:\WINDOWS\System32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\System32\dxdiag.exe"="C:\WINDOWS\System32\dxdiag.exe:*:Enabled:Microsoft DirectX Diagnostic Tool"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
"E:\Dragon Age\bin_ship\daorigins.exe"="E:\Dragon Age\bin_ship\daorigins.exe:*:Enabled:Dragon Age Prameny Hra"
"E:\Dragon Age\DAOriginsLauncher.exe"="E:\Dragon Age\DAOriginsLauncher.exe:*:Enabled:Dragon Age Prameny Spustit"
"E:\Dragon Age\bin_ship\daupdatersvc.service.exe"="E:\Dragon Age\bin_ship\daupdatersvc.service.exe:*:Enabled:Dragon Age Prameny Aktualizovat"
"D:\Program Files\TelMe - DeskCall NG\DeskCallEvo.exe"="D:\Program Files\TelMe - DeskCall NG\DeskCallEvo.exe:*:Enabled:DeskCallEvo"
"D:\Program Files\PoivY\PoivY.exe"="D:\Program Files\PoivY\PoivY.exe:*:Enabled:PoivY"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\VoipGain.com\VoipGain\VoipGain.exe"="C:\Program Files\VoipGain.com\VoipGain\VoipGain.exe:*:Enabled:VoipGain"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"

======List of files/folders created in the last 1 months======

2010-11-30 10:46:17 ----D---- C:\Documents and Settings\Ing. Markovic\Data aplikací\VoipGain
2010-11-30 10:42:57 ----D---- C:\Program Files\VoipGain.com
2010-11-29 04:30:01 ----A---- C:\WINDOWS\system32\W32N55.INI
2010-11-29 04:30:01 ----A---- C:\WINDOWS\system32\W32N55.dll
2010-11-29 04:30:01 ----A---- C:\WINDOWS\system32\ssleay32.dll
2010-11-29 04:30:01 ----A---- C:\WINDOWS\system32\Scutum.dll
2010-11-29 04:30:01 ----A---- C:\WINDOWS\system32\RalinkGina.dll
2010-11-29 04:30:01 ----A---- C:\WINDOWS\system32\libeay32.dll
2010-11-29 04:30:01 ----A---- C:\WINDOWS\system32\drivers\Scutum50.sys
2010-11-29 04:30:01 ----A---- C:\WINDOWS\system32\DiagFunc.ini
2010-11-29 04:30:01 ----A---- C:\WINDOWS\system32\DiagFunc.dll
2010-11-29 04:29:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Tenda Driver
2010-11-28 22:33:26 ----SHD---- C:\FOUND.008
2010-11-27 22:27:11 ----D---- C:\Program Files\Gepard
2010-11-27 21:45:38 ----D---- C:\Documents and Settings\Ing. Markovic\Data aplikací\Lunascape
2010-11-27 21:30:38 ----D---- C:\Program Files\Lunascape
2010-11-27 19:19:19 ----D---- C:\Documents and Settings\Ing. Markovic\Data aplikací\Flock
2010-11-27 18:35:45 ----D---- C:\Documents and Settings\Ing. Markovic\Data aplikací\Netscape
2010-11-27 18:35:39 ----D---- C:\Program Files\Netscape
2010-11-27 18:15:14 ----A---- C:\WINDOWS\system32\lsdelete.exe
2010-11-27 16:30:08 ----A---- C:\WINDOWS\system32\drivers\Lbd.sys
2010-11-27 16:16:41 ----HD---- C:\Documents and Settings\All Users\Data aplikací\{437292BE-95BD-4B12-B699-6D217A03ACAF}
2010-11-27 12:01:26 ----SHD---- C:\Recycled
2010-11-27 11:57:01 ----A---- C:\ComboFix.txt
2010-11-27 11:51:31 ----D---- C:\ComboFix
2010-11-27 11:10:39 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2010-11-27 11:10:39 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2010-11-27 11:10:39 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2010-11-27 11:10:39 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2010-11-27 11:10:39 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2010-11-27 11:10:39 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2010-11-27 11:10:39 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2010-11-27 11:10:32 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-11-27 11:10:25 ----D---- C:\Program Files\Alwil Software
2010-11-27 11:10:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-11-27 10:53:12 ----D---- C:\Program Files\HD Tune
2010-11-27 01:01:04 ----D---- C:\WINDOWS\temp
2010-11-27 00:22:41 ----D---- C:\rsit
2010-11-27 00:22:41 ----D---- C:\Program Files\trend micro
2010-11-26 21:01:36 ----D---- C:\FOUND.007
2010-11-26 20:42:04 ----RASHD---- C:\cmdcons
2010-11-26 20:30:53 ----A---- C:\WINDOWS\zip.exe
2010-11-26 20:30:53 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-11-26 20:30:53 ----A---- C:\WINDOWS\SWSC.exe
2010-11-26 20:30:53 ----A---- C:\WINDOWS\SWREG.exe
2010-11-26 20:30:53 ----A---- C:\WINDOWS\sed.exe
2010-11-26 20:30:53 ----A---- C:\WINDOWS\PEV.exe
2010-11-26 20:30:53 ----A---- C:\WINDOWS\NIRCMD.exe
2010-11-26 20:30:53 ----A---- C:\WINDOWS\MBR.exe
2010-11-26 20:30:53 ----A---- C:\WINDOWS\grep.exe
2010-11-26 20:06:14 ----ASH---- C:\hiberfil.sys
2010-11-26 18:20:39 ----D---- C:\WINDOWS\CSC
2010-11-26 09:52:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\IObit
2010-11-26 00:04:52 ----A---- C:\WINDOWS\ndinst.exe
2010-11-25 10:05:52 ----D---- C:\Program Files\ConduitEngine
2010-11-25 10:05:40 ----D---- C:\Program Files\InnoGames_EN
2010-11-23 13:13:58 ----D---- C:\Program Files\ICQ6Toolbar
2010-11-23 13:13:31 ----D---- C:\Program Files\ICQ7.2
2010-11-20 20:37:46 ----A---- C:\WINDOWS\ntbtlog.txt
2010-11-20 20:37:42 ----D---- C:\FOUND.006
2010-11-19 16:03:56 ----A---- C:\WINDOWS\system32\RaCoInst.dll
2010-11-19 16:03:56 ----A---- C:\WINDOWS\system32\drivers\rt2870.sys
2010-11-19 16:03:56 ----A---- C:\WINDOWS\system32\drivers\AegisP.sys
2010-11-19 16:03:53 ----D---- C:\Program Files\Tenda
2010-11-17 22:42:28 ----A---- C:\WINDOWS\system32\drivers\afcdp.sys
2010-11-17 22:42:27 ----A---- C:\WINDOWS\system32\drivers\tdrpm273.sys
2010-11-17 22:42:24 ----A---- C:\WINDOWS\system32\drivers\timntr.sys
2010-11-17 22:42:20 ----A---- C:\WINDOWS\system32\drivers\snapman.sys
2010-11-17 22:42:11 ----D---- C:\Program Files\Acronis
2010-11-17 22:42:09 ----D---- C:\Program Files\Common Files\Acronis
2010-11-17 22:40:29 ----D---- C:\Documents and Settings\Ing. Markovic\Data aplikací\Acronis
2010-11-17 22:40:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Acronis
2010-11-13 14:58:40 ----D---- C:\Program Files\iPod
2010-11-13 10:12:15 ----D---- C:\Program Files\PC Connectivity Solution
2010-11-13 10:11:53 ----A---- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys
2010-11-13 10:11:52 ----A---- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys
2010-11-13 10:11:51 ----A---- C:\WINDOWS\system32\drivers\ccdcmbo.sys
2010-11-13 10:11:50 ----A---- C:\WINDOWS\system32\wdfcoinstaller01009.dll
2010-11-13 10:11:50 ----A---- C:\WINDOWS\system32\nmwcdcocls.dll
2010-11-13 10:11:50 ----A---- C:\WINDOWS\system32\drivers\ccdcmb.sys
2010-11-13 10:10:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\NokiaInstallerCache
2010-11-03 20:56:47 ----A---- C:\WINDOWS\system32\javaws.exe
2010-11-03 20:56:46 ----A---- C:\WINDOWS\system32\javaw.exe
2010-11-03 20:56:46 ----A---- C:\WINDOWS\system32\java.exe

======List of files/folders modified in the last 1 months======

2010-12-02 00:28:10 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-11-29 10:30:40 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-11-27 20:58:16 ----A---- C:\WINDOWS\win.ini
2010-11-27 12:37:56 ----A---- C:\WINDOWS\NeroDigital.ini
2010-11-27 11:55:54 ----A---- C:\WINDOWS\system.ini
2010-11-26 20:42:06 ----RASH---- C:\boot.ini
2010-11-26 19:45:16 ----A---- C:\Boot.bak
2010-11-10 23:56:38 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Lbd;Lbd; C:\WINDOWS\system32\DRIVERS\Lbd.sys [2010-09-08 64288]
R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2005-05-17 92800]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 prohlp02;StarForce Protection Helper Driver v2; C:\WINDOWS\System32\drivers\prohlp02.sys [2004-05-13 111808]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:\WINDOWS\System32\drivers\prosync1.sys [2003-09-06 6944]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-06-10 45648]
R0 sfhlp01;StarForce Protection Helper Driver; C:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2010-11-17 170464]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-09-30 721904]
R0 tdrpman273;Acronis Try&Decide and Restore Points filter (build 273); C:\WINDOWS\system32\DRIVERS\tdrpm273.sys [2010-11-17 752128]
R0 timounter;Acronis Backup Archive Explorer; C:\WINDOWS\system32\DRIVERS\timntr.sys [2010-11-17 600928]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43008]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys []
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-05-13 79488]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.5.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-11-19 21419]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R2 Scutum50;Scutum50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\Scutum50.sys [2009-12-10 19072]
R2 symlcbrd;symlcbrd; \??\C:\WINDOWS\system32\drivers\symlcbrd.sys []
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-07-07 5069312]
R3 cm102u32;C-Media CM6501 Like Sound Interface; C:\WINDOWS\system32\drivers\c6501.sys [2006-09-05 1419968]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600]
R3 HdAudAddService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2005-04-06 33536]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2005-04-06 12928]
R3 rt2870;Ralink 802.11n USB Wireless LAN Card Driver; C:\WINDOWS\system32\DRIVERS\rt2870.sys [2010-04-14 827488]
R3 Stmatm;ATM/ADSL miniport; C:\WINDOWS\system32\DRIVERS\stmatm.sys [2003-08-12 60255]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S1 AmdPPM;Ovladač procesoru HwPState AMD; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
S1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
S3 adhrnmsa;adhrnmsa; C:\WINDOWS\system32\drivers\adhrnmsa.sys []
S3 afcdp;afcdp; C:\WINDOWS\system32\DRIVERS\afcdp.sys [2010-11-17 163232]
S3 AmdLLD;AMD Low Level Device Driver; C:\WINDOWS\system32\DRIVERS\AmdLLD.sys []
S3 c65013264;C-Media CM6501 Like Sound UDAX Interface; C:\WINDOWS\system32\drivers\c6501.sys [2006-09-05 1419968]
S3 catchme;catchme; \??\C:\DOCUME~1\ING~1.MAR\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 CO_Mon;CO_Mon; \??\C:\WINDOWS\system32\Drivers\CO_Mon.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-07-05 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-07-05 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-07-05 21568]
S3 Lavasoft Kernexplorer;Lavasoft helper driver; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 npkcrypt;npkcrypt; \??\C:\Program Files\L2 - Hellbound\system1\npkcrypt.sys []
S3 npkcusb;npkcusb; \??\C:\Program Files\L2 - Hellbound\system1\npkcusb.sys []
S3 npkycryp;npkycryp; \??\C:\Program Files\L2 - Hellbound\system1\npkycryp.sys []
S3 PAC7311;Phenix-Q8; C:\WINDOWS\system32\DRIVERS\PA707UCM.SYS [2005-10-18 154752]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 SQ931;USB 2.0 Video Camera; C:\WINDOWS\System32\Drivers\Capt931a.sys []
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 TaurusUsb;ADSL Modem USB Service; C:\WINDOWS\system32\DRIVERS\torususb.sys [2003-12-23 549421]
S3 TKFsAc;TKFsAc; \??\C:\WINDOWS\system32\TKFsAc2k.sys []
S3 TKFsAv;TKFsAv; \??\C:\WINDOWS\system32\TKFsAv2k.sys []
S3 TKFsFt;TKFsFt; \??\C:\WINDOWS\system32\TKFsFt2k.sys []
S3 TKRgAc;TKRgAc; \??\C:\WINDOWS\system32\TKRgAc2k.sys []
S3 TKRgFt;TKRgFt; \??\C:\WINDOWS\system32\TKRgFtXp.sys []
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2010-11-27 1375992]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\Tenda\Common\RaRegistry.exe [2009-12-10 185632]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S4 AcrSch2Svc;Služba Acronis Scheduler2; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [2010-09-23 780368]
S4 afcdpsrv;Služba Acronis Nonstop Backup; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [2010-11-17 3975088]
S4 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-10-16 37664]
S4 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-07-07 602112]
S4 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-03-17 593920]
S4 Automatic LiveUpdate Scheduler;Automatic LiveUpdate Scheduler; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe []
S4 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-07-27 345376]
S4 DAUpdaterSvc;Dragon Age: Prameny - aktualizace obsahu; E:\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
S4 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-13 136176]
S4 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-11-11 820008]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-09-15 153376]
S4 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-05-15 79400]
S4 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE []
S4 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-04-13 792112]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-05-16 271920]
S4 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2009-04-15 2722845]
S4 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S4 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S4 StarWindServiceAE;StarWind AE Service; E:\Alcohol120\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
S4 STI Simulator;STI Simulator; C:\WINDOWS\System32\PAStiSvc.exe [2005-01-14 53248]
S4 Symantec Core LC;Symantec Core LC; C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe [2007-09-21 1247600]
S4 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]

-----------------EOF-----------------

[motji]

Ještě prosím otestujte na www.virustotal.com
C:\WINDOWS\system32\drivers\adhrnmsa.sys


Prohlížeče Mozilla, Opera, IE stále nejdou? Já se poradím s kolegy, už mě nic nenapadá

[memart]

Toto tam nemam:

adhrnmsa.sys

(Neni to nikde ve Windowsech!)
?????

[motji]

Jestli používáte daemon nebo alcohol, tak to bude od toho, takže tam už není. Jen jsem se chtěla ujistit

[memart]

Daemon, ci Alcochol pouziju kdyz mi nekdo poradi, sam to neznam kdy pouzivat

Ted ale nejde dokoncit instalaci FireFoxu (porad to aktualizuje a objevila se chyba po instalaci a restartu)...

[motji]

Mě to přijde, že máte nějak poškozený systém . Avptool jsme dělali?
Zkuste ten firefox doinstalovat v nouzovém režimu

[memart]

Zkusil jsem Operu, IE, Maxton a SeaMonkey (pod Mozillou) a zadny nejde, takze maji tam neco co jim chybi
Porad jdu jen ty 2

[motji]

Vy jste mi ale ořííšek. Než se mi ozve kolega, kterého jsme poprosila o konzultaci. tak jestli to dobře chápu, pod tou Tendou Vám nikdy ani Mozilla a Opera nešli,že?

[memart]

Sli 1-2 dny a pak stuchovali az do umlceni.
Jakoby jim neco pomalicku (behem 24-30h jim funkcnost opadavala az na 0!) dusicku pojidal
Ted nejdou vubec, ani stahovani pod nimi, mrtvy brouci.
Vsichni ktery pouzivaji stejne systemove prvky nejdou, Jdou jen:
- Netscape Navigator a
- Avant Brawser
(aspon ze tak, jinak by me kleplo)

PS: Jo, Mozilla po pul h naskocila, ale take nejde

[motji]

Ten Avptool sjme dělali? Pokud ne, mám odkaz v podpisu.

[memart]

Delali jsme, pan Kaspersky nenasel nic

[motji]

Po poradě s kolegou Stellem

Odinstalujte Adwanced system care

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

SecCenter::
{17DDD097-36FF-435F-9E1B-52D74245D6BF}
{11638345-E4FC-4BEE-BB73-EC754659C5F6}
{990F9400-4CEE-43EA-A83A-D013ADD8EA6E}

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

[memart]

Done!

Ale k nasim (asi ceskym) AV (nebo je to i u jinych):
- I po tolika deaktivacich ComboFix porad "vidi" AVG aktivitu -> neco po AVG porad funguje a je to desne houzevnate)
- AVAST mam instalovany, ale vubec nevidim moznost jak ho vypnut (pres TaskManagera to nejde, ani pres MSconfig)
ProPankaJanka, co jsou to za zpusoby??? Nekdy to ale slo jednoduche zastavit AV!
...Uz jsem nejak AVAST zastavil.
Antiviry maji byt pomocnici, nebo havet neodbouratelna?????????????????

ComboFix 10-12-01.01 - Ing. Markovic 02.12.2010 17:01:45.10.2 - FAT32x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2046.1450 [GMT 1:00]
Spuštěný z: c:\documents and settings\Ing. Markovic\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Ing. Markovic\Plocha\CFScript.txt
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: Lavasoft Ad-Watch Live! Anti-Virus *On-access scanning enabled* (Updated) {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-11-02 do 2010-12-02 )))))))))))))))))))))))))))))))
.

2010-12-02 15:50 . 2010-12-02 15:50 -------- d-----w- c:\windows\system32\wbem\Repository
2010-12-02 09:48 . 2010-12-02 09:48 -------- d-----w- c:\program files\SeaMonkey
2010-12-02 09:43 . 2010-12-02 09:43 -------- d-----w- c:\program files\Opera
2010-12-02 09:41 . 2010-12-02 09:41 -------- d-----w- c:\documents and settings\Ing. Markovic\Data aplikací\Maxthon3
2010-11-30 09:46 . 2010-11-30 09:46 -------- d-----w- c:\documents and settings\Ing. Markovic\Data aplikací\VoipGain
2010-11-30 09:42 . 2010-11-30 09:42 -------- d-----w- c:\program files\VoipGain.com
2010-11-29 03:30 . 2009-12-10 10:16 796032 ----a-w- c:\windows\system32\Scutum.dll
2010-11-29 03:30 . 2009-12-10 10:16 200704 ----a-w- c:\windows\system32\ssleay32.dll
2010-11-29 03:30 . 2009-12-10 10:16 19072 ----a-w- c:\windows\system32\drivers\Scutum50.sys
2010-11-29 03:30 . 2009-12-10 10:16 180224 ----a-w- c:\windows\system32\W32N55.dll
2010-11-29 03:30 . 2009-12-10 10:16 147456 ----a-w- c:\windows\system32\DiagFunc.dll
2010-11-29 03:30 . 2009-12-10 10:16 1085440 ----a-w- c:\windows\system32\libeay32.dll
2010-11-29 03:30 . 2009-12-10 10:15 152968 ----a-w- c:\windows\system32\RalinkGina.dll
2010-11-29 03:29 . 2010-11-29 03:29 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Tenda Driver
2010-11-28 21:33 . 2010-11-28 21:33 -------- d-----w- C:\FOUND.008
2010-11-27 21:27 . 2010-11-27 21:27 -------- d-----w- c:\program files\Gepard
2010-11-27 21:25 . 2010-11-27 21:25 -------- d-----w- c:\documents and settings\Ing. Markovic\Local Settings\Data aplikací\Chromium
2010-11-27 20:45 . 2010-11-27 20:45 -------- d-----w- c:\documents and settings\Ing. Markovic\Data aplikací\Lunascape
2010-11-27 20:30 . 2010-11-27 20:30 -------- d-----w- c:\program files\Lunascape
2010-11-27 18:19 . 2010-11-27 18:19 -------- d-----w- c:\documents and settings\Ing. Markovic\Local Settings\Data aplikací\Flock
2010-11-27 18:19 . 2010-11-27 18:19 -------- d-----w- c:\documents and settings\Ing. Markovic\Data aplikací\Flock
2010-11-27 17:35 . 2010-11-27 17:35 -------- d-----w- c:\documents and settings\Ing. Markovic\Local Settings\Data aplikací\Netscape
2010-11-27 17:35 . 2010-11-27 17:35 -------- d-----w- c:\documents and settings\Ing. Markovic\Data aplikací\Netscape
2010-11-27 17:35 . 2010-11-27 17:35 -------- d-----w- c:\program files\Netscape
2010-11-27 17:15 . 2010-09-08 12:59 15880 ----a-w- c:\windows\system32\lsdelete.exe
2010-11-27 15:30 . 2010-09-08 12:59 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-11-27 15:16 . 2010-11-27 15:16 -------- d--h--w- c:\documents and settings\All Users\Data aplikací\{437292BE-95BD-4B12-B699-6D217A03ACAF}
2010-11-27 14:48 . 2010-11-27 14:48 -------- d-----w- c:\documents and settings\Ing. Markovic\Local Settings\Data aplikací\Opera
2010-11-27 13:53 . 2010-11-27 13:53 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Data aplikací\InnoGames_EN
2010-11-27 10:10 . 2010-09-07 15:52 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-11-27 10:10 . 2010-09-07 15:52 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-11-27 10:10 . 2010-09-07 15:47 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-11-27 10:10 . 2010-09-07 15:47 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-11-27 10:10 . 2010-09-07 15:47 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-11-27 10:10 . 2010-09-07 15:47 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-11-27 10:10 . 2010-09-07 15:46 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-11-27 10:10 . 2010-09-07 16:12 38848 ----a-w- c:\windows\avastSS.scr
2010-11-27 10:10 . 2010-09-07 16:11 167592 ----a-w- c:\windows\system32\aswBoot.exe
2010-11-27 10:10 . 2010-11-27 10:10 -------- d-----w- c:\program files\Alwil Software
2010-11-27 10:10 . 2010-11-27 10:10 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Alwil Software
2010-11-27 09:53 . 2010-11-27 09:53 -------- d-----w- c:\program files\HD Tune
2010-11-26 23:22 . 2010-11-26 23:22 -------- d-----w- C:\rsit
2010-11-26 23:22 . 2010-11-26 23:22 -------- d-----w- c:\program files\trend micro
2010-11-26 20:01 . 2010-11-26 20:01 -------- d-----w- C:\FOUND.007
2010-11-26 08:52 . 2010-11-26 08:53 -------- d-----w- c:\documents and settings\All Users\Data aplikací\IObit
2010-11-25 23:04 . 2010-11-27 11:10 17534 ----a-w- c:\windows\system32\mdc8021x.vxd
2010-11-25 23:04 . 2010-11-27 11:10 1726 ----a-w- c:\windows\ndinst.exe
2010-11-25 22:10 . 2010-11-25 22:10 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\IObit
2010-11-25 09:05 . 2010-11-25 09:05 -------- d-----w- c:\documents and settings\Ing. Markovic\Local Settings\Data aplikací\InnoGames_EN
2010-11-25 09:05 . 2010-11-25 09:05 -------- d-----w- c:\documents and settings\Ing. Markovic\Local Settings\Data aplikací\ConduitEngine
2010-11-25 09:05 . 2010-11-25 09:05 -------- d-----w- c:\program files\ConduitEngine
2010-11-25 09:05 . 2010-11-25 09:05 -------- d-----w- c:\program files\InnoGames_EN
2010-11-23 12:13 . 2010-11-23 12:14 -------- d-----w- c:\program files\ICQ6Toolbar
2010-11-23 12:13 . 2010-11-23 12:13 -------- d-----w- c:\documents and settings\Ing. Markovic\Local Settings\Data aplikací\AOL
2010-11-23 12:13 . 2010-11-23 12:13 -------- d-----w- c:\program files\ICQ7.2
2010-11-20 19:37 . 2010-11-20 19:37 -------- d-----w- C:\FOUND.006
2010-11-19 15:03 . 2010-11-19 15:03 21419 ----a-w- c:\windows\system32\drivers\AegisP.sys
2010-11-19 15:03 . 2010-04-14 18:31 238944 ----a-w- c:\windows\system32\RaCoInst.dll
2010-11-19 15:03 . 2010-04-14 17:39 827488 ----a-w- c:\windows\system32\drivers\rt2870.sys
2010-11-19 15:03 . 2010-11-19 15:03 -------- d-----w- c:\program files\Tenda
2010-11-17 21:42 . 2010-11-17 21:42 163232 ----a-w- c:\windows\system32\drivers\afcdp.sys
2010-11-17 21:42 . 2010-11-17 21:42 752128 ----a-w- c:\windows\system32\drivers\tdrpm273.sys
2010-11-17 21:42 . 2010-11-17 21:42 600928 ----a-w- c:\windows\system32\drivers\timntr.sys
2010-11-17 21:42 . 2010-11-17 21:42 170464 ----a-w- c:\windows\system32\drivers\snapman.sys
2010-11-17 21:42 . 2010-11-17 21:42 -------- d-----w- c:\program files\Acronis
2010-11-17 21:42 . 2010-11-17 21:42 -------- d-----w- c:\program files\Common Files\Acronis
2010-11-13 13:58 . 2010-11-13 13:58 -------- d-----w- c:\program files\iPod
2010-11-13 09:14 . 2010-11-13 09:14 -------- d-----w- c:\documents and settings\Ing. Markovic\Local Settings\Data aplikací\Nokia
2010-11-13 09:12 . 2010-11-13 09:12 -------- d-----w- c:\program files\PC Connectivity Solution
2010-11-13 09:11 . 2010-02-26 13:32 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys
2010-11-13 09:11 . 2010-02-26 13:32 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys
2010-11-13 09:11 . 2010-02-26 13:32 22528 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys
2010-11-13 09:11 . 2010-02-26 13:32 662016 ----a-w- c:\windows\system32\nmwcdcocls.dll
2010-11-13 09:11 . 2010-02-26 13:32 18176 ----a-w- c:\windows\system32\drivers\ccdcmb.sys
2010-11-13 09:11 . 2010-02-26 13:19 1461992 ----a-w- c:\windows\system32\wdfcoinstaller01009.dll
2010-11-13 09:10 . 2010-11-13 09:10 -------- d-----w- c:\documents and settings\All Users\Data aplikací\NokiaInstallerCache
2010-11-06 10:37 . 2010-11-06 10:37 103864 ----a-w- c:\program files\Internet Explorer\Plugins\nppdf32.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-11-09 15:14 . 2010-08-06 13:17 98392 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-09-18 11:23 . 1979-12-31 23:00 974848 ----a-w- c:\windows\system32\mfc42u.dll
2010-09-18 07:53 . 1979-12-31 23:00 974848 ----a-w- c:\windows\system32\mfc42.dll
2010-09-18 07:53 . 1979-12-31 23:00 954368 ----a-w- c:\windows\system32\mfc40.dll
2010-09-18 07:53 . 1979-12-31 23:00 953856 ----a-w- c:\windows\system32\mfc40u.dll
2010-09-15 03:50 . 2010-08-08 00:56 472808 ----a-w- c:\windows\system32\deployJava1.dll
2010-09-15 01:29 . 2007-10-15 15:56 73728 ----a-w- c:\windows\system32\javacpl.cpl
2010-09-09 14:34 . 1979-12-31 23:00 832512 ----a-w- c:\windows\system32\wininet.dll
2010-09-09 14:34 . 1979-12-31 23:00 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-09-09 14:34 . 1979-12-31 23:00 1830912 ----a-w- c:\windows\system32\inetcpl.cpl
2010-09-09 14:34 . 1979-12-31 23:00 17408 ------w- c:\windows\system32\corpol.dll
2010-09-08 16:57 . 1979-12-31 23:00 389120 ----a-w- c:\windows\system32\html.iec
2010-09-08 10:17 . 2010-09-08 10:17 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-09-08 10:17 . 2010-09-08 10:17 69632 ----a-w- c:\windows\system32\QuickTime.qts
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-11-23 17:55 3908192 ----a-w- c:\program files\ConduitEngine\ConduitEngine.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-11-23 3908192]

[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SAOB Monitor"="c:\program files\Acronis\OnlineBackupStandalone\TrueImageMonitor.exe" [2010-09-02 2536752]
"TrueImageMonitor.exe"="c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe" [2010-09-23 5502312]
"Služba Acronis Scheduler2"="c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe" [2010-09-23 391144]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-09-07 2838912]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-09-08 421888]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Tenda Wireless Utility.lnk - c:\program files\Tenda\Common\RaUI.exe [2010-11-29 379392]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLinkedConnections"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^AutoUpdate Monitor.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\AutoUpdate Monitor.lnk
backup=c:\windows\pss\AutoUpdate Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Rychlý začátek s aplikací HP Photosmart Premier.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Rychlý začátek s aplikací HP Photosmart Premier.lnk
backup=c:\windows\pss\Rychlý začátek s aplikací HP Photosmart Premier.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Tenda W311U.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Tenda W311U.lnk
backup=c:\windows\pss\Tenda W311U.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Ing. Markovic^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
path=c:\documents and settings\Ing. Markovic\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.1.lnk
backup=c:\windows\pss\OpenOffice.org 3.1.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
c:\windows\system32\dumprep 0 -k [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
c:\program files\Common Files\Nokia\MPlatform\NokiaMServer [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-20 22:07 932288 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-09-23 03:47 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
2009-04-24 03:21 203928 ----a-w- e:\alcohol120\Alcohol 120\AxCmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICustomerCare]
2010-03-04 13:31 311296 ----a-w- c:\program files\ATI\ATICustomerCare\ATICustomerCare.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2008-04-14 04:22 15360 ----a-w- c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2010-09-01 07:39 1164584 ----a-w- c:\program files\DivX\DivX Update\DivXUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2010-04-03 17:43 136176 ----a-w- c:\documents and settings\Ing. Markovic\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igndlm.exe]
2009-05-14 18:03 1103216 ----a-w- c:\program files\IGN\Download Manager\DLM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2010-11-10 23:40 421160 ----a-w- c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
2006-09-29 20:58 49152 ----a-w- c:\program files\CyberLink\PowerDVD\Language\Language.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2]
2010-09-02 09:26 672632 ----a-w- c:\program files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-09-08 10:17 421888 ----a-w- c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2010-07-06 20:19 98304 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-05-14 10:44 248552 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2009-10-21 07:28 198160 ----a-w- c:\program files\Common Files\Real\Update_OB\realsched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"WMPNetworkSvc"=3 (0x3)
"STI Simulator"=2 (0x2)
"StarWindServiceAE"=2 (0x2)
"ose"=3 (0x3)
"odserv"=3 (0x3)
"npggsvc"=3 (0x3)
"LightScribeService"=2 (0x2)
"JavaQuickStarterService"=2 (0x2)
"idsvc"=3 (0x3)
"gupdate"=2 (0x2)
"DAUpdaterSvc"=3 (0x3)
"avg9wd"=2 (0x2)
"ATI Smart"=2 (0x2)
"Ati HotKey Poller"=2 (0x2)
"afcdpsrv"=2 (0x2)
"avast! Web Scanner"=3 (0x3)
"avast! Mail Scanner"=3 (0x3)
"avast! Antivirus"=2 (0x2)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Skype\\Skype old\\Skype.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD\\PowerDVD.exe"=
"c:\\WINDOWS\\System32\\DPNSvr.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"c:\\Program Files\\TeamViewer\\Version4\\TeamViewer.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\WINDOWS\\System32\\dpvsetup.exe"=
"c:\\WINDOWS\\System32\\dxdiag.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"e:\\Dragon Age\\bin_ship\\daorigins.exe"=
"e:\\Dragon Age\\DAOriginsLauncher.exe"=
"e:\\Dragon Age\\bin_ship\\daupdatersvc.service.exe"=
"d:\\Program Files\\TelMe - DeskCall NG\\DeskCallEvo.exe"=
"d:\\Program Files\\PoivY\\PoivY.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\ICQ7.2\\ICQ.exe"=
"c:\\Program Files\\ICQ7.2\\aolload.exe"=
"c:\\Program Files\\VoipGain.com\\VoipGain\\VoipGain.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Opera\\opera.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [27.11.2010 16:30 64288]
R0 sptd;sptd;c:\windows\system32\drivers\SPTD.sys [30.9.2009 22:40 721904]
R0 tdrpman273;Acronis Try&Decide and Restore Points filter (build 273);c:\windows\system32\drivers\tdrpm273.sys [17.11.2010 22:42 752128]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [27.11.2010 11:10 165584]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [24.8.2009 13:21 142592]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [27.11.2010 11:10 17744]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [8.9.2010 13:59 1375992]
R2 Scutum50;Scutum50 NDIS Protocol Driver;c:\windows\system32\drivers\Scutum50.sys [29.11.2010 4:30 19072]
R3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\kernexplorer.sys [8.9.2010 13:59 15264]
R3 Stmatm;ATM/ADSL miniport;c:\windows\system32\drivers\stmatm.sys [20.8.2007 23:29 60255]
S1 SASKUTIL;SASKUTIL;\??\c:\program files\SUPERAntiSpyware\SASKUTIL.sys --> c:\program files\SUPERAntiSpyware\SASKUTIL.sys [?]
S3 afcdp;afcdp;c:\windows\system32\drivers\afcdp.sys [17.11.2010 22:42 163232]
S3 c65013264;C-Media CM6501 Like Sound UDAX Interface;c:\windows\system32\drivers\c6501.sys [27.3.2009 21:02 1419968]
S3 npkycryp;npkycryp;\??\c:\program files\L2 - Hellbound\system1\npkycryp.sys --> c:\program files\L2 - Hellbound\system1\npkycryp.sys [?]
S3 PAC7311;Phenix-Q8;c:\windows\system32\drivers\PA707UCM.SYS [18.10.2005 11:48 154752]
S3 SQ931;USB 2.0 Video Camera;c:\windows\system32\Drivers\Capt931a.sys --> c:\windows\system32\Drivers\Capt931a.sys [?]
S3 TaurusUsb;ADSL Modem USB Service;c:\windows\system32\drivers\torususb.sys [20.8.2007 23:29 549421]
S3 TKFsAc;TKFsAc;c:\windows\system32\TKFsAc2k.sys [3.8.2009 11:03 88864]
S3 TKFsAv;TKFsAv;c:\windows\system32\TKFsAv2k.sys [8.4.2010 21:51 31488]
S3 TKFsFt;TKFsFt;c:\windows\system32\TKFsFt2k.sys [3.8.2009 11:03 79584]
S3 TKRgAc;TKRgAc;c:\windows\system32\TKRgAc2k.sys [3.8.2009 11:03 41984]
S3 TKRgFt;TKRgFt;c:\windows\system32\TKRgFtXp.sys [3.8.2009 11:03 24704]
S4 afcdpsrv;Služba Acronis Nonstop Backup;c:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [17.11.2010 22:42 3975088]
S4 DAUpdaterSvc;Dragon Age: Prameny - aktualizace obsahu;e:\dragon age\bin_ship\daupdatersvc.service.exe [24.12.2009 20:16 25832]
S4 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [13.6.2010 11:54 136176]
S4 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2007-05-15 16:08 452136 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'

2010-12-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-13 10:54]

2010-12-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-13 10:54]

2010-11-27 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2010-12-02 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-09-08 15:29]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
mLocal Page =
mStart Page = hxxp://www.microsoft.com
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
LSP: c:\program files\IObit\Advanced SystemCare 3\SPICtrl.dll
FF - ProfilePath - c:\documents and settings\Ing. Markovic\Data aplikací\Mozilla\Firefox\Profiles\7cq9bdj7.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - About:Blank
FF - prefs.js: network.proxy.type - 0
FF - component: c:\documents and settings\Ing. Markovic\Data aplikací\Mozilla\Firefox\Profiles\7cq9bdj7.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}\components\RadioWMPCoreGecko19.dll
FF - component: c:\documents and settings\Ing. Markovic\Data aplikací\Mozilla\Firefox\Profiles\7cq9bdj7.default\extensions\engine@conduit.com\components\RadioWMPCoreGecko19.dll
FF - component: c:\program files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\components\FirefoxExtension.dll
FF - component: c:\program files\Nokia\Nokia PC Suite 7\bkmrksync\components\BkMrkExt.dll
FF - component: c:\program files\real\realplayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF - Extension: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Extension: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\program files\real\realplayer\browserrecord\firefox\ext
FF - Extension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Extension: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Extension: PC Sync 2 Synchronisation Extension: bkmrksync@nokia.com - c:\program files\Nokia\Nokia PC Suite 7\bkmrksync
FF - Extension: Firefox Synchronisation Extension: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70} - c:\program files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension
FF - Extension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\documents and settings\Ing. Markovic\Data aplikací\Mozilla\Firefox\Profiles\7cq9bdj7.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Extension: Flagfox: {1018e4d6-728f-4b20-ad56-37578a4de76b} - c:\documents and settings\Ing. Markovic\Data aplikací\Mozilla\Firefox\Profiles\7cq9bdj7.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
FF - Extension: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - c:\documents and settings\Ing. Markovic\Data aplikací\Mozilla\Firefox\Profiles\7cq9bdj7.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Extension: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - c:\documents and settings\Ing. Markovic\Data aplikací\Mozilla\Firefox\Profiles\7cq9bdj7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Extension: Conduit Engine : engine@conduit.com - c:\documents and settings\Ing. Markovic\Data aplikací\Mozilla\Firefox\Profiles\7cq9bdj7.default\extensions\engine@conduit.com
FF - Extension: InnoGames EN Community Toolbar: {942cd1d4-9cc1-4d31-876a-ea8f489f7a59} - c:\documents and settings\Ing. Markovic\Data aplikací\Mozilla\Firefox\Profiles\7cq9bdj7.default\extensions\{942cd1d4-9cc1-4d31-876a-ea8f489f7a59}

---- NASTAVENÍ FIREFOXU ----
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 750000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 750000
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 0
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-02 17:05
Windows 5.1.2600 Service Pack 3 FAT NTAPI

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet008\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-3292285946-3697291689-1907411925-1005\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-3292285946-3697291689-1907411925-1005\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:46,9f,bb,30,7e,f7,a9,92,55,cb,88,ad,83,9d,1e,ee,17,b3,9e,22,7f,7e,f5,
3f,41,90,a6,03,3a,6e,e4,5a,db,9d,cd,96,77,24,6a,3a,b6,c9,f9,79,7e,6b,63,af,\
"??"=hex:92,6e,ef,e1,98,fd,a0,f3,32,fd,76,2b,9c,ca,30,de
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1112)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll

- - - - - - - > 'lsass.exe'(1172)
c:\program files\IObit\Advanced SystemCare 3\SPICtrl.dll

- - - - - - - > 'explorer.exe'(3176)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2010-12-02 17:07:11
ComboFix-quarantined-files.txt 2010-12-02 16:07
ComboFix2.txt 2010-12-02 15:16
ComboFix3.txt 2010-11-27 10:57
ComboFix4.txt 2010-11-27 00:01
ComboFix5.txt 2010-12-02 16:01

Před spuštěním: Volných bajtů: 75 628 478 464
Po spuštění: Volných bajtů: 75 609 636 864

- - End Of File - - E539F99A43919E8C3A72B950BB8E3AE2

[motji]

To je fajn, že jste nebojsa , to ještě nevíte, co budeme provádět s tím spropadeným AVG .
Mě jde Avast vypnout normálně - pravým myšítkem klik na ikonku Avast - ovládání štítů programu Avast - tam sivyberete, na jak dlouho chcete Avast vypnout.

U AVG s tím byl dost problém, combofix se s ním prával, Nikde už pozůstatky po AVG nevidím, combofix Vám ho detekoval?
Prohlížeče stále nejdou?

[memart]

Ano, jmeno me je Nebojša
Tady je to "vesele" jmeno, hlavne na SK

No, nekoukal jsem se na Logy, ale naposledi ComboFix take upozornil na pritomnost AVG!
AdAware a AVAST jsem vypl (ano, nasel jsem to u AVASTu), pres AVG preskocil.

Nooo, veskera elita mlci, dedek (Netscape) a 2 uplne zvlastni hosi (Avant a Gepard) pracuji, na moji radost.
Zajimava tema na dumani, aspon ja myslim.

Asi je neco co je spolecne pro tyto moderny prohlizeci a jsou bezradny (nenavazu spojeni, zustavaji blank obrazovky).
Myslel jsem ze to vyresime, strasne se obavam ted cely pocitac preinstalovat.
Nevim jestli najdu jak to vse ulozit, preinstalovat

Co rikate, je nejaka nadej?