problem s netom

[sparcosk]

Zdravim , mam problem s netom . Stranky nacitava strasne dlho , napr take skype ide normalne. Problem bude urcite v PC , cez wifi na ntbooku mi net ide normalne . tu je log :

Logfile of random's system information tool 1.08 (written by random/random)
Run by sparcosk at 2010-12-14 21:31:11
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 28 GB (6%) free of 430 GB
Total RAM: 3325 MB (81% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:31, on 2010-12-14
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Razer\Lycosa\razerhid.exe
C:\Program Files\Razer\Diamondback 3G\razerhid.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\program files\steam\steam.exe
C:\Program Files\Olympus\ib\olycamdetect.exe
C:\Program Files\Panasonic\MotionSD STUDIO\SD_Browser\AutoLauncher.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\CPUCooL\CooLSrv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Razer\Lycosa\razertra.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TVersity\Media Server\MediaServer.exe
C:\Program Files\Razer\Diamondback 3G\razertra.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Razer\Diamondback 3G\razerofa.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\sparcosk\Desktop\RSIT.exe
C:\Program Files\trend micro\sparcosk.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Lycosa] "C:\Program Files\Razer\Lycosa\razerhid.exe"
O4 - HKLM\..\Run: [Diamondback] C:\Program Files\Razer\Diamondback 3G\razerhid.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files\Olympus\ib\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Olympus\ib" UpdateWithCreateOnce "Software\OLYMPUS\ib\1.0"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Olympus ib] "C:\Program Files\Olympus\ib\olycamdetect.exe" /Startup
O4 - HKCU\..\Run: [scheduler_monitor] C:\Program Files\ReaConverter 5.5 Pro\init_scheduler.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: MotionSD STUDIO - SD Browser auto start -.lnk = C:\Program Files\Panasonic\MotionSD STUDIO\SD_Browser\AutoLauncher.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CPUCooLServer Service (CPUCooLServer) - Unknown owner - C:\Program Files\CPUCooL\CooLSrv.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ReaConverter scheduler service (rcp_service) - ReaSoft - C:\Program Files\ReaConverter 5.5 Pro\rcp_scheduler.exe
O23 - Service: TVersityMediaServer - Unknown owner - C:\Program Files\TVersity\Media Server\MediaServer.exe

--
End of file - 9307 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-11-20 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-11-20 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-01-13 18084864]
"JMB36X IDE Setup"=C:\WINDOWS\RaidTool\xInsIDE.exe [2007-03-20 36864]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-07-09 13533184]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-07-09 86016]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2010-06-29 74752]
"Lycosa"=C:\Program Files\Razer\Lycosa\razerhid.exe [2007-11-20 147456]
"Diamondback"=C:\Program Files\Razer\Diamondback 3G\razerhid.exe [2007-08-01 147456]
"VirtualCloneDrive"=C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-05-26 85160]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe [2007-09-04 54576]
"amd_dc_opt"=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"MDS_Menu"=C:\Program Files\Olympus\ib\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-09-08 421888]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-09-24 421160]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-11-16 2054360]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [2007-09-04 95536]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-11-30 328056]
"Steam"=c:\program files\steam\steam.exe [2010-11-17 1242448]
"Olympus ib"=C:\Program Files\Olympus\ib\olycamdetect.exe [2009-10-30 93376]
"scheduler_monitor"=C:\Program Files\ReaConverter 5.5 Pro\init_scheduler.exe [2007-06-15 27136]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
MotionSD STUDIO - SD Browser auto start -.lnk - C:\Program Files\Panasonic\MotionSD STUDIO\SD_Browser\AutoLauncher.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSEXESVC]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PSEXESVC]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDrives"=0
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\Program Files\VideoLAN\VLC\vlc.exe"="C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"E:\HRY\Counter-Strike Source\hl2.exe"="E:\HRY\Counter-Strike Source\hl2.exe:*:Disabled:hl2"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Disabled:Java(TM) Platform SE binary"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"E:\HRY\Guitar.Hero.3-Legends.of.Rock\GH3.exe"="E:\HRY\Guitar.Hero.3-Legends.of.Rock\GH3.exe:*:Disabled:Guitar Hero III"
"E:\HRY\GTA IV PC Version\Grand Theft Auto IV\GTAIV.exe"="E:\HRY\GTA IV PC Version\Grand Theft Auto IV\GTAIV.exe:*:Enabled:Grand Theft Auto IV"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"E:\HRY\moh\MoHMPUpdater.exe"="E:\HRY\moh\MoHMPUpdater.exe:*:Enabled:Medal of Honor™ MP Beta"
"E:\HRY\moh\MoHMPGame.exe"="E:\HRY\moh\MoHMPGame.exe:*:Enabled:Medal of Honor: Multiplayer"
"C:\Documents and Settings\sparcosk\Local Settings\Application Data\AntikVirtualSTB\AntikVirtualSTB.exe"="C:\Documents and Settings\sparcosk\Local Settings\Application Data\AntikVirtualSTB\AntikVirtualSTB.exe:*:Enabled:AntikVirtualSTB"
"C:\Program Files\PS3 Media Server\PMS.exe"="C:\Program Files\PS3 Media Server\PMS.exe:*:Enabled:PS3 Media Server"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\mIRC\mirc.exe"="C:\Program Files\mIRC\mirc.exe:*:Enabled:mIRC"
"C:\Documents and Settings\sparcosk\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\octoshape.exe"="C:\Documents and Settings\sparcosk\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\octoshape.exe:*:Enabled:Octoshape add-in for Adobe Flash Player"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"
"E:\Games\F1_2010_game.exe"="E:\Games\F1_2010_game.exe:*:Enabled:F1 2010"
"C:\Program Files\Mass Effect 2\Binaries\MassEffect2.exe"="C:\Program Files\Mass Effect 2\Binaries\MassEffect2.exe:*:Enabled:Mass Effect 2"
"E:\HRY\Fifa 11\Game\fifa.exe"="E:\HRY\Fifa 11\Game\fifa.exe:*:Enabled:FIFA 11"
"E:\HRY\PES 2011\pes2011.exe"="E:\HRY\PES 2011\pes2011.exe:*:Enabled:Pro Evolution Soccer 2011"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Electronic Arts\Medal of Honor MP Open Beta\MoHMPUpdater.exe"="C:\Program Files\Electronic Arts\Medal of Honor MP Open Beta\MoHMPUpdater.exe:*:Enabled:Medal of Honor™ MP Open Beta"
"C:\Program Files\Electronic Arts\Medal of Honor MP Open Beta\MoHMPGame.exe"="C:\Program Files\Electronic Arts\Medal of Honor MP Open Beta\MoHMPGame.exe:*:Enabled:Medal of Honor: Multiplayer"
"C:\Program Files\Electronic Arts\Medal of Honor\MP\mohmpgame.exe"="C:\Program Files\Electronic Arts\Medal of Honor\MP\mohmpgame.exe:*:Enabled:Medal of Honor: Multiplayer"
"C:\Program Files\Electronic Arts\Medal of Honor\Binaries\moh.exe"="C:\Program Files\Electronic Arts\Medal of Honor\Binaries\moh.exe:*:Enabled:Medal of Honor™"
"C:\Program Files\Steam\steamapps\common\mafia ii\pc\mafia2.exe"="C:\Program Files\Steam\steamapps\common\mafia ii\pc\mafia2.exe:*:Enabled:Mafia II"
"C:\StrongDC\StrongDC.exe"="C:\StrongDC\StrongDC.exe:*:Enabled:StrongDC++"
"E:\nfshp\Launcher.exe"="E:\nfshp\Launcher.exe:*:Enabled:Need for Speed(TM) Hot Pursuit"
"E:\nfshp\NFS11.exe"="E:\nfshp\NFS11.exe:*:Enabled:Need for Speed(TM) Hot Pursuit Application"
"C:\Program Files\PFPortChecker\PFPortChecker.exe"="C:\Program Files\PFPortChecker\PFPortChecker.exe:*:Enabled:PFPortchecker by portforward.com helps check if your ports are properly forwarded."
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"E:\Docasne\CryptLoad_1.1.8\RouterClient.exe"="E:\Docasne\CryptLoad_1.1.8\RouterClient.exe:*:Disabled:RouterClient"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======File associations======

.scr - open - C:\WINDOWS\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-12-14 20:42:40 ----SD---- C:\ComboFix
2010-12-14 07:41:19 ----D---- C:\rsit
2010-12-13 21:07:25 ----D---- C:\Documents and Settings\sparcosk\Application Data\Malwarebytes
2010-12-13 21:07:19 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-12-13 21:07:19 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-12-13 21:07:16 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-12-13 21:07:16 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2010-12-13 20:35:28 ----A---- C:\WINDOWS\PEV.exe
2010-12-13 20:35:28 ----A---- C:\WINDOWS\MBR.exe
2010-12-13 20:27:21 ----A---- C:\WINDOWS\system32\CF10892.exe
2010-12-13 20:26:03 ----A---- C:\WINDOWS\system32\CF10637.exe
2010-12-13 20:18:25 ----A---- C:\WINDOWS\zip.exe
2010-12-13 20:18:25 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-12-13 20:18:25 ----A---- C:\WINDOWS\SWSC.exe
2010-12-13 20:18:25 ----A---- C:\WINDOWS\SWREG.exe
2010-12-13 20:18:25 ----A---- C:\WINDOWS\sed.exe
2010-12-13 20:18:25 ----A---- C:\WINDOWS\NIRCMD.exe
2010-12-13 20:18:25 ----A---- C:\WINDOWS\grep.exe
2010-12-13 20:18:12 ----A---- C:\WINDOWS\system32\CF9083.exe
2010-12-13 07:09:04 ----A---- C:\WINDOWS\system32\drivers\SBREDrv.sys
2010-12-13 00:14:48 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-12-13 00:14:48 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2010-12-13 00:13:43 ----A---- C:\WINDOWS\system32\CF2429.exe
2010-12-13 00:13:07 ----D---- C:\WINDOWS\ERDNT
2010-12-13 00:13:06 ----A---- C:\WINDOWS\system32\CF2335.exe
2010-12-13 00:12:58 ----D---- C:\Qoobox
2010-12-12 08:31:49 ----A---- C:\WINDOWS\imsins.BAK
2010-12-11 20:40:59 ----D---- C:\Program Files\Trend Micro
2010-12-11 20:35:31 ----ASH---- C:\pagefile.sys
2010-12-11 19:38:32 ----D---- C:\Program Files\Lavalys
2010-12-11 00:19:42 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2010-12-10 21:02:30 ----D---- C:\Program Files\RegCleaner
2010-12-02 09:14:58 ----D---- C:\Program Files\ESET
2010-11-27 11:44:51 ----D---- C:\Program Files\Common Files\Java
2010-11-27 11:44:51 ----D---- C:\Documents and Settings\All Users\Application Data\Sun
2010-11-27 11:40:16 ----A---- C:\WINDOWS\system32\javaws.exe
2010-11-27 11:40:16 ----A---- C:\WINDOWS\system32\javaw.exe
2010-11-27 11:40:16 ----A---- C:\WINDOWS\system32\java.exe
2010-11-27 11:40:16 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-11-25 16:28:19 ----D---- C:\Documents and Settings\sparcosk\Application Data\com.jamlegend.JamBox
2010-11-25 16:28:14 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-11-18 09:26:21 ----D---- C:\Incomplete
2010-11-16 20:24:13 ----D---- C:\Documents and Settings\All Users\Application Data\Electronic Arts
2010-11-16 20:24:13 ----D---- C:\Documents and Settings\All Users\Application Data\EA Core
2010-11-16 20:01:05 ----D---- C:\Documents and Settings\All Users\Application Data\Solidshield
2010-11-16 18:57:27 ----D---- C:\StrongDC

======List of files/folders modified in the last 1 months======

2010-12-14 21:31:36 ----D---- C:\WINDOWS\Temp
2010-12-14 21:31:08 ----D---- C:\Documents and Settings\sparcosk\Application Data\uTorrent
2010-12-14 21:14:59 ----SHD---- C:\Config.Msi
2010-12-14 21:13:33 ----SHD---- C:\WINDOWS\Installer
2010-12-14 21:12:15 ----D---- C:\WINDOWS\Prefetch
2010-12-14 20:54:27 ----D---- C:\WINDOWS\system32\CatRoot2
2010-12-14 20:53:58 ----D---- C:\Program Files\Steam
2010-12-14 20:43:20 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-12-14 20:39:24 ----RD---- C:\Program Files
2010-12-14 20:39:14 ----D---- C:\WINDOWS\system32
2010-12-14 20:08:29 ----D---- C:\Documents and Settings\sparcosk\Application Data\Skype
2010-12-14 19:36:41 ----D---- C:\Documents and Settings\sparcosk\Application Data\Adobe
2010-12-14 19:02:22 ----D---- C:\Documents and Settings\sparcosk\Application Data\skypePM
2010-12-14 17:36:24 ----D---- C:\Documents and Settings\sparcosk\Application Data\vlc
2010-12-13 23:54:52 ----D---- C:\WINDOWS
2010-12-13 22:36:03 ----D---- C:\WINDOWS\system32\drivers
2010-12-13 20:31:35 ----D---- C:\Documents and Settings\sparcosk\Application Data\U3
2010-12-13 20:05:01 ----SD---- C:\WINDOWS\Tasks
2010-12-13 12:18:17 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-12-13 07:31:32 ----SHD---- C:\System Volume Information
2010-12-13 07:30:24 ----HD---- C:\WINDOWS\inf
2010-12-13 00:18:56 ----D---- C:\WINDOWS\system32\drivers\etc
2010-12-13 00:10:52 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-12-12 20:24:01 ----D---- C:\WINDOWS\WinSxS
2010-12-12 09:18:24 ----D---- C:\WINDOWS\security
2010-12-12 08:38:19 ----D---- C:\Program Files\Mozilla Firefox
2010-12-12 08:32:09 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-12-11 21:19:58 ----D---- C:\WINDOWS\system32\config
2010-12-11 21:19:26 ----D---- C:\WINDOWS\system32\wbem
2010-12-11 21:19:26 ----D---- C:\WINDOWS\Registration
2010-12-11 21:16:06 ----D---- C:\Program Files\SpeedFan
2010-12-11 07:41:58 ----D---- C:\Program Files\7-Zip
2010-12-10 23:08:40 ----D---- C:\Documents and Settings\sparcosk\Application Data\Winamp
2010-12-10 23:08:39 ----D---- C:\WINDOWS\system32\Restore
2010-12-10 17:57:19 ----D---- C:\Documents and Settings\sparcosk\Application Data\Media Player Classic
2010-12-10 17:56:01 ----D---- C:\WINDOWS\Minidump
2010-12-10 17:56:01 ----D---- C:\WINDOWS\Debug
2010-12-09 22:41:45 ----D---- C:\Temp
2010-12-01 06:27:05 ----D---- C:\Program Files\uTorrent
2010-11-27 11:44:51 ----D---- C:\Program Files\Common Files
2010-11-27 11:39:59 ----D---- C:\Program Files\Java
2010-11-25 16:28:18 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-11-25 16:28:15 ----D---- C:\Program Files\Adobe
2010-11-16 20:07:57 ----D---- C:\WINDOWS\system32\DirectX
2010-11-16 20:07:32 ----RSD---- C:\WINDOWS\assembly

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 JRAID;JRAID; C:\WINDOWS\system32\DRIVERS\jraid.sys [2008-11-04 83296]
R0 ohci1394;Texas Instruments OHCI Compliant IEEE 1394 Host Controller; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2006-09-24 5248]
R1 AmdPPM;AMD HwPState Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 cdrbsdrv;cdrbsdrv; C:\WINDOWS\system32\drivers\cdrbsdrv.sys [2006-02-20 33408]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-11-16 96408]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
R1 ntiomin;ntiomin; C:\WINDOWS\system32\drivers\ntiomin.sys [2010-01-03 11392]
R1 ntiopnp;ntiopnp; C:\WINDOWS\system32\drivers\ntiopnp.sys [2010-01-03 12800]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-11-16 116520]
R3 AmdLLD;AMD Low Level Device Driver; C:\WINDOWS\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
R3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-01-20 5027840]
R3 LycoFltr;Lycosa Keyboard; C:\WINDOWS\System32\Drivers\Lycosa.sys [2008-01-18 16128]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-07-09 6011808]
R3 Razerlow;Diamondback 3G USB Filter Driver; C:\WINDOWS\System32\Drivers\DB3G.sys [2005-04-24 13225]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-10-30 117888]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2009-05-23 29696]
S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2004-06-22 51088]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2004-06-22 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2004-06-22 21744]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\sisnic.sys [2004-08-03 32768]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2010-04-19 41984]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-08-13 144672]
R2 bgsvcgen;B's Recorder GOLD Library General Service; C:\WINDOWS\system32\bgsvcgen.exe [2006-12-28 122512]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-07-27 345376]
R2 CPUCooLServer;CPUCooLServer Service; C:\Program Files\CPUCooL\CooLSrv.exe [2010-01-03 118784]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
R2 ES lite Service;ES lite Service for program management.; C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [2009-02-05 68136]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-09-15 153376]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2008-09-29 935208]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-07-09 159812]
R2 TVersityMediaServer;TVersityMediaServer; C:\Program Files\TVersity\Media Server\MediaServer.exe [2010-01-19 884736]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-09-24 820008]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-05-12 136176]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-11-16 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-06-27 1045256]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 rcp_service;ReaConverter scheduler service; C:\Program Files\ReaConverter 5.5 Pro\rcp_scheduler.exe [2007-11-30 558592]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 ASKUpgrade;ASKUpgrade; C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe [2009-04-02 234888]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-02-03 75064]
S4 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-02-07 215128]

-----------------EOF-----------------

[JaRon]

odinstaluj Ad-aware + vycisti PC s CCleanerom a nainstaluj novsiu verziu MSIE 7 alebo 8 (bez ohladu na to ci ho pouzivas)

[sparcosk]

Ad-Aware by mal byt vymazany , precistil som to ccleanerom , nainstaloval MSIE 8 ale ziadna zmena

[JaRon]

pouzival si CF - bez doporucenia - vies napisat, co zmazal ?

[sparcosk]

neviem ci vobec nieco zmazal , nejako mi nefungoval

[JaRon]

tak ho teda stiahni - premenuj na cofo.exe spust a jeho log vloz
ak by bol problem v normal, tak to vykonaj v nudzovom rezime

[sparcosk]

tak , kedze nesiel , dal som to do nudzoveho , premenoval na cofo.exe , vypisalo ze nevie najst check_hal , tak som tam hodil normal combofix a tu je log :

ComboFix 10-12-15.06 - Administrator 2010-12-16 10:26:21.6.4 - x86 MINIMAL
Systém Microsoft Windows XP Home Edition 5.1.2600.3.1250.1.1033.18.3325.2877 [GMT 1:00]
Running from: c:\documents and settings\Administrator\Desktop\ComboFix.exe

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\cofo.exe
c:\cofo.exe\023.dat
c:\cofo.exe\023v.dat
c:\cofo.exe\appdata.folder.dat
c:\cofo.exe\appinit.bad
c:\cofo.exe\Assoc.cmd
c:\cofo.exe\Attrib.cfexe
c:\cofo.exe\autorun_inf.dat
c:\cofo.exe\av.cmd
c:\cofo.exe\av.vbs
c:\cofo.exe\AWF.cmd
c:\cofo.exe\BON.cfexe
c:\cofo.exe\Boot-Rk.cmd
c:\cofo.exe\Boot.bat
c:\cofo.exe\BootSect
c:\cofo.exe\c.bat
c:\cofo.exe\cache.folder.dat
c:\cofo.exe\Catch-sub.cmd
c:\cofo.exe\catchme.cfexe
c:\cofo.exe\CCS.bat
c:\cofo.exe\cfrun
c:\cofo.exe\CFVersionOld
c:\cofo.exe\clsid.dat
c:\cofo.exe\Combobatch.bat
c:\cofo.exe\ComboFix-Download.cfexe
c:\cofo.exe\ComboFix.txt
c:\cofo.exe\Cookies.folder.dat
c:\cofo.exe\Create.cmd
c:\cofo.exe\Creg.dat
c:\cofo.exe\CregC.cmd
c:\cofo.exe\CregC.dat
c:\cofo.exe\CSet.cmd
c:\cofo.exe\dd.cfexe
c:\cofo.exe\ddsDo.sed
c:\cofo.exe\del00
c:\cofo.exe\DelClsid.bat
c:\cofo.exe\desktop.folder.dat
c:\cofo.exe\dll_whitelist.dat
c:\cofo.exe\dnd.dat
c:\cofo.exe\DPF.str
c:\cofo.exe\Drives.dat
c:\cofo.exe\Drives00
c:\cofo.exe\dumphive.cfexe
c:\cofo.exe\embedded.sed
c:\cofo.exe\Env.sed
c:\cofo.exe\ERDNT.e_e
c:\cofo.exe\ERDNTDOS.LOC
c:\cofo.exe\ERDNTWIN.LOC
c:\cofo.exe\ErrTrap1
c:\cofo.exe\ERUNT.cfexe
c:\cofo.exe\erunt.dat
c:\cofo.exe\ERUNT.LOC
c:\cofo.exe\Exe.reg
c:\cofo.exe\extract.cfexe
c:\cofo.exe\f_system
c:\cofo.exe\favorites.folder.dat
c:\cofo.exe\FD-SV.cmd
c:\cofo.exe\fdsv.cfexe
c:\cofo.exe\FdsvOK
c:\cofo.exe\ffdefstr.dll
c:\cofo.exe\fi.cfexe
c:\cofo.exe\Fin.dat
c:\cofo.exe\FIND3M.bat
c:\cofo.exe\FINDSTR.cfexe
c:\cofo.exe\FIXLSP.bat
c:\cofo.exe\FKMGen.cmd
c:\cofo.exe\ForeignWht
c:\cofo.exe\FProps.vbs
c:\cofo.exe\Gateway
c:\cofo.exe\GetHive.cmd
c:\cofo.exe\GOLDUN.DAT
c:\cofo.exe\grep.cfexe
c:\cofo.exe\gsar.cfexe
c:\cofo.exe\handle.cfexe
c:\cofo.exe\hidec.exe
c:\cofo.exe\history.bat
c:\cofo.exe\CHCP.bat
c:\cofo.exe\image001.gif
c:\cofo.exe\katch.cmd
c:\cofo.exe\KillProcessHog00
c:\cofo.exe\kmd.dat
c:\cofo.exe\Lang.bat
c:\cofo.exe\List-B.bat
c:\cofo.exe\lnkread.vbs
c:\cofo.exe\localappdata.folder.dat
c:\cofo.exe\LocalService.dat
c:\cofo.exe\LocalServiceNetworkRestricted.dat
c:\cofo.exe\localsettings.folder.dat
c:\cofo.exe\LocalSystemNetworkRestricted.dat
c:\cofo.exe\LSPDone
c:\cofo.exe\LspFixed.reg
c:\cofo.exe\md5deep.cfexe
c:\cofo.exe\moveex.cfexe
c:\cofo.exe\MoveIt.bat
c:\cofo.exe\mtee.cfexe
c:\cofo.exe\MWindows.dat
c:\cofo.exe\mynul
c:\cofo.exe\mypictures.folder.dat
c:\cofo.exe\n.com
c:\cofo.exe\N_\12819
c:\cofo.exe\N_\13194
c:\cofo.exe\N_\1394
c:\cofo.exe\N_\14587
c:\cofo.exe\N_\14629
c:\cofo.exe\N_\14974
c:\cofo.exe\N_\15596
c:\cofo.exe\N_\15668
c:\cofo.exe\N_\15945
c:\cofo.exe\N_\16242
c:\cofo.exe\N_\18207
c:\cofo.exe\N_\22801
c:\cofo.exe\N_\2556
c:\cofo.exe\N_\25870
c:\cofo.exe\N_\26455
c:\cofo.exe\N_\275
c:\cofo.exe\N_\27676
c:\cofo.exe\N_\29730
c:\cofo.exe\N_\29967
c:\cofo.exe\N_\30206
c:\cofo.exe\N_\30288
c:\cofo.exe\N_\31176
c:\cofo.exe\N_\31443
c:\cofo.exe\N_\31470
c:\cofo.exe\N_\3217
c:\cofo.exe\N_\4653
c:\cofo.exe\N_\4818
c:\cofo.exe\N_\7027
c:\cofo.exe\N_\7117
c:\cofo.exe\N_\7224
c:\cofo.exe\N_\9395
c:\cofo.exe\ND_.bat
c:\cofo.exe\ndis_combofix.dat
c:\cofo.exe\netsvc.bad.dat
c:\cofo.exe\netsvc.dat
c:\cofo.exe\NetworkService.dat
c:\cofo.exe\NirCmd.cfexe
c:\cofo.exe\Nircmd.com
c:\cofo.exe\NirCmd.inf
c:\cofo.exe\NirCmdC.cfexe
c:\cofo.exe\NlsLanguageDefault
c:\cofo.exe\notifykeys.dat
c:\cofo.exe\NT-OS.cmd
c:\cofo.exe\NULL
c:\cofo.exe\OsId.txt
c:\cofo.exe\OSid.vbs
c:\cofo.exe\OsVer
c:\cofo.exe\pend.txt
c:\cofo.exe\personal.folder.dat
c:\cofo.exe\Policies.dat
c:\cofo.exe\PreDIR
c:\cofo.exe\Profiles.Folder.dat
c:\cofo.exe\progfile.dat
c:\cofo.exe\programs.folder.dat
c:\cofo.exe\psexec.cfexe
c:\cofo.exe\Purity.dat
c:\cofo.exe\pv.cfexe
c:\cofo.exe\RCLink
c:\cofo.exe\RcVer00
c:\cofo.exe\REGDACL.sed
c:\cofo.exe\RegDo.sed
c:\cofo.exe\region.dat
c:\cofo.exe\RegScan.cmd
c:\cofo.exe\regt.cfexe
c:\cofo.exe\Resident.txt
c:\cofo.exe\RestoreO4.bat
c:\cofo.exe\Rkey.cmd
c:\cofo.exe\rogues.dat
c:\cofo.exe\run.sed
c:\cofo.exe\run2.sed
c:\cofo.exe\safeboot.dat
c:\cofo.exe\safeboot.def.dat
c:\cofo.exe\safeboot.def.vista.dat
c:\cofo.exe\SafeBootRepair.bat
c:\cofo.exe\sed.cfexe
c:\cofo.exe\setcsum.cfexe
c:\cofo.exe\SetEnvmt.bat
c:\cofo.exe\SetPath.bat
c:\cofo.exe\setpath.cfexe
c:\cofo.exe\SF.cfexe
c:\cofo.exe\sfx.cmd
c:\cofo.exe\SnapShot.cmd
c:\cofo.exe\SRestore.cmd
c:\cofo.exe\srizbi.md5
c:\cofo.exe\startmenu.folder.dat
c:\cofo.exe\startup.folder.dat
c:\cofo.exe\Sum01
c:\cofo.exe\SuppScan.cmd
c:\cofo.exe\svc_wht.dat
c:\cofo.exe\SvcDrv.vbs
c:\cofo.exe\SvcTarget.dat
c:\cofo.exe\svchost.dat
c:\cofo.exe\SWREG.cfexe
c:\cofo.exe\swreg.exe
c:\cofo.exe\swsc.cfexe
c:\cofo.exe\swxcacls.cfexe
c:\cofo.exe\SysPath.dat
c:\cofo.exe\system_ini.dat
c:\cofo.exe\tail.cfexe
c:\cofo.exe\templates.folder.dat
c:\cofo.exe\toolbar.sed
c:\cofo.exe\unhand.dat
c:\cofo.exe\unzip.cfexe
c:\cofo.exe\v_wht.dat
c:\cofo.exe\vFind.cfexe
c:\cofo.exe\vistareg.dat
c:\cofo.exe\vRun_DLL
c:\cofo.exe\vundonames.dat
c:\cofo.exe\w2kreg.dat
c:\cofo.exe\whitedir.dat
c:\cofo.exe\whitedirCreated.dat
c:\cofo.exe\Windir.dat
c:\cofo.exe\WRP.cfexe
c:\cofo.exe\XP.mac
c:\cofo.exe\XPRD.NFO
c:\cofo.exe\xpreg.dat
c:\cofo.exe\zDomain.dat
c:\cofo.exe\zip.cfexe
c:\documents and settings\sparcosk\AUTORUN.INF
c:\documents and settings\sparcosk\My Documents\cc_20101210_175124.reg
c:\documents and settings\sparcosk\My Documents\cc_20101210_235812.reg
c:\documents and settings\sparcosk\My Documents\cc_20101215_163824.reg
E:\install.exe

.
((((((((((((((((((((((((( Files Created from 2010-11-16 to 2010-12-16 )))))))))))))))))))))))))))))))
.

2010-12-16 09:18 . 2010-12-16 09:18 389120 ----a-w- c:\windows\system32\CF17172.exe
2010-12-16 09:16 . 2010-12-16 09:15 389120 ----a-w- c:\windows\system32\CF16656.exe
2010-12-16 09:15 . 2010-12-16 09:15 -------- d-----w- c:\windows\LastGood
2010-12-16 09:09 . 2010-12-16 09:09 389120 ----a-w- c:\windows\system32\CF15372.exe
2010-12-16 09:05 . 2010-12-16 09:06 -------- d-----w- c:\documents and settings\Administrator
2010-12-15 19:23 . 2010-12-15 19:23 -------- d-sh--w- c:\documents and settings\sparcosk\IECompatCache
2010-12-15 18:57 . 2010-12-15 18:57 -------- d-sh--w- c:\documents and settings\sparcosk\PrivacIE
2010-12-15 15:54 . 2010-12-15 15:54 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2010-12-15 15:53 . 2010-12-15 15:53 -------- d-sh--w- c:\documents and settings\sparcosk\IETldCache
2010-12-15 15:49 . 2010-12-15 15:50 -------- d-----w- c:\windows\system32\sk-SK
2010-12-15 15:49 . 2010-12-15 15:50 -------- dc-h--w- c:\windows\ie8
2010-12-15 15:46 . 2010-10-18 11:10 7680 -c----w- c:\windows\system32\dllcache\iecompat.dll
2010-12-15 15:46 . 2010-11-06 00:26 602112 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2010-12-15 15:46 . 2010-11-06 00:26 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2010-12-15 15:46 . 2010-11-06 00:26 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2010-12-15 15:46 . 2010-11-06 00:26 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2010-12-15 15:46 . 2010-11-06 00:26 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2010-12-15 15:46 . 2010-11-06 00:26 1991680 -c----w- c:\windows\system32\dllcache\iertutil.dll
2010-12-15 15:46 . 2010-11-06 00:26 11080704 -c----w- c:\windows\system32\dllcache\ieframe.dll
2010-12-15 15:35 . 2010-12-15 15:36 -------- d-----w- c:\program files\CCleaner
2010-12-15 14:42 . 2010-11-02 15:17 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
2010-12-15 14:41 . 2010-10-11 14:59 45568 -c----w- c:\windows\system32\dllcache\wab.exe
2010-12-14 06:41 . 2010-12-14 06:41 -------- d-----w- C:\rsit
2010-12-13 20:07 . 2010-12-13 20:07 -------- d-----w- c:\documents and settings\sparcosk\Application Data\Malwarebytes
2010-12-13 20:07 . 2010-12-13 20:07 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-12-13 20:07 . 2010-11-29 16:42 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-13 20:07 . 2010-12-13 20:07 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-12-13 20:07 . 2010-11-29 16:42 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-13 19:27 . 2010-12-13 19:27 389120 ----a-w- c:\windows\system32\CF10892.exe
2010-12-13 19:26 . 2010-12-13 19:25 389120 ----a-w- c:\windows\system32\CF10637.exe
2010-12-13 19:18 . 2010-12-13 19:18 389120 ----a-w- c:\windows\system32\CF9083.exe
2010-12-13 06:09 . 2010-12-13 06:09 98392 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-12-12 23:14 . 2010-12-13 19:03 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-12-12 23:14 . 2010-12-13 19:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-12-12 23:13 . 2010-12-12 23:13 389120 ----a-w- c:\windows\system32\CF2429.exe
2010-12-12 23:13 . 2010-12-12 23:12 389120 ----a-w- c:\windows\system32\CF2335.exe
2010-12-12 19:30 . 2010-12-12 19:30 -------- d-----w- c:\documents and settings\sparcosk\Local Settings\Application Data\Sunbelt Software
2010-12-12 07:44 . 2010-12-12 07:44 388096 ----a-r- c:\documents and settings\sparcosk\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-12-11 20:19 . 2010-12-11 20:19 -------- d-----w- c:\windows\system32\wbem\Repository
2010-12-11 20:07 . 2010-12-11 20:13 -------- d-----w- c:\documents and settings\sparcosk\UserData
2010-12-11 19:40 . 2010-12-15 17:26 -------- d-----w- c:\program files\Trend Micro
2010-12-11 18:38 . 2010-12-11 18:38 -------- d-----w- c:\program files\Lavalys
2010-12-11 17:35 . 2010-12-11 17:35 -------- d-----w- c:\documents and settings\sparcosk\Local Settings\Application Data\ESET
2010-12-10 23:19 . 2010-12-14 19:39 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2010-12-10 20:02 . 2010-12-11 20:15 -------- d-----w- c:\program files\RegCleaner
2010-11-27 10:44 . 2010-11-27 10:44 -------- d-----w- c:\program files\Common Files\Java
2010-11-27 10:40 . 2010-09-15 03:50 472808 ----a-w- c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
2010-11-27 10:40 . 2010-09-15 03:50 472808 ----a-w- c:\windows\system32\deployJava1.dll
2010-11-25 15:28 . 2010-11-25 15:28 -------- d-----w- c:\documents and settings\sparcosk\Application Data\com.jamlegend.JamBox
2010-11-25 15:28 . 2010-11-25 15:28 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-11-18 18:12 . 2010-11-18 18:12 81920 -c----w- c:\windows\system32\dllcache\isign32.dll
2010-11-18 08:26 . 2010-11-18 14:46 -------- d-----w- C:\Incomplete
2010-11-16 19:24 . 2010-11-16 19:24 -------- d-----w- c:\documents and settings\All Users\Application Data\Electronic Arts
2010-11-16 19:24 . 2010-11-16 19:24 -------- d-----w- c:\documents and settings\All Users\Application Data\EA Core
2010-11-16 19:01 . 2010-11-16 19:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Solidshield
2010-11-16 17:57 . 2010-11-16 17:57 -------- d-----w- C:\StrongDC

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-16 08:55 . 2009-08-19 22:56 16608 ----a-w- c:\windows\gdrv.sys
2010-11-18 18:12 . 2009-08-19 22:46 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-06 00:26 . 2006-02-28 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:26 . 2006-02-28 12:00 43520 ------w- c:\windows\system32\licmgr10.dll
2010-11-06 00:26 . 2006-02-28 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-11-03 12:25 . 2006-02-28 12:00 385024 ------w- c:\windows\system32\html.iec
2010-11-02 15:17 . 2006-02-28 12:00 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
2010-10-28 13:13 . 2006-02-28 12:00 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:25 . 2006-02-28 12:00 1853312 ----a-w- c:\windows\system32\win32k.sys
2010-09-28 10:59 . 2010-09-28 10:59 775 ----a-w- C:\cleanup.bat
2010-09-22 20:22 . 2009-08-20 09:26 445016 ----a-w- c:\windows\system32\wrap_oal.dll
2010-09-22 20:22 . 2009-08-20 09:26 109144 ----a-w- c:\windows\system32\OpenAL32.dll
2010-09-18 10:23 . 2006-02-28 12:00 974848 ----a-w- c:\windows\system32\mfc42u.dll
2010-09-18 06:53 . 2006-02-28 12:00 974848 ----a-w- c:\windows\system32\mfc42.dll
2010-09-18 06:53 . 2006-02-28 12:00 954368 ----a-w- c:\windows\system32\mfc40.dll
2010-09-18 06:53 . 2006-02-28 12:00 953856 ----a-w- c:\windows\system32\mfc40u.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2009-01-13 18084864]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-07-09 13533184]
"nwiz"="nwiz.exe" [2008-07-09 1657376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-07-09 86016]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2010-06-29 74752]
"Lycosa"="c:\program files\Razer\Lycosa\razerhid.exe" [2007-11-20 147456]
"Diamondback"="c:\program files\Razer\Diamondback 3G\razerhid.exe" [2007-08-01 147456]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-05-26 85160]
"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" [2007-09-04 54576]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"MDS_Menu"="c:\program files\Olympus\ib\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-09-08 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-09-24 421160]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
MotionSD STUDIO - SD Browser auto start -.lnk - c:\program files\Panasonic\MotionSD STUDIO\SD_Browser\AutoLauncher.exe [2009-12-26 66952]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"e:\\HRY\\Guitar.Hero.3-Legends.of.Rock\\GH3.exe"=
"e:\\HRY\\GTA IV PC Version\\Grand Theft Auto IV\\GTAIV.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Documents and Settings\\sparcosk\\Local Settings\\Application Data\\AntikVirtualSTB\\AntikVirtualSTB.exe"=
"c:\\Program Files\\PS3 Media Server\\PMS.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\mIRC\\mirc.exe"=
"c:\\Documents and Settings\\sparcosk\\Application Data\\Macromedia\\Flash Player\\www.macromedia.com\\bin\\octoshape\\octoshape.exe"=
"c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"c:\\Program Files\\Mass Effect 2\\Binaries\\MassEffect2.exe"=
"e:\\HRY\\PES 2011\\pes2011.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\mafia ii\\pc\\mafia2.exe"=
"c:\\StrongDC\\StrongDC.exe"=
"c:\\Program Files\\PFPortChecker\\PFPortChecker.exe"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"e:\\Docasne\\CryptLoad_1.1.8\\RouterClient.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R3 LycoFltr;Lycosa Keyboard;c:\windows\system32\drivers\Lycosa.sys [2009-08-19 16128]
R3 Razerlow;Diamondback 3G USB Filter Driver;c:\windows\system32\drivers\DB3G.sys [2009-08-19 13225]
S1 ntiomin;ntiomin;c:\windows\system32\drivers\ntiomin.sys [2010-01-03 11392]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 ES lite Service;ES lite Service for program management.;c:\program files\Gigabyte\EasySaver\essvr.exe [2009-08-19 68136]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-05-12 136176]
S3 rcp_service;ReaConverter scheduler service;c:\program files\ReaConverter 5.5 Pro\rcp_scheduler.exe [2007-11-30 558592]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 ASKUpgrade;ASKUpgrade;c:\program files\AskBarDis\bar\bin\ASKUpgrade.exe [2009-08-24 234888]
.
Contents of the 'Scheduled Tasks' folder

2010-12-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-12 18:42]

2010-12-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-12 18:42]
.
.
------- Supplementary Scan -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\sd420dn3.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Skype extension for Firefox: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-16 10:32
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):90,1c,f6,6e,bb,d2,d0,f3,60,02,8b,74,69,ea,e8,d2,04,fb,a0,35,e0,
2e,76,94,d4,56,e5,2b,57,46,59,93,c3,24,28,e6,36,08,bf,e9,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{8863f5e4-29fe-4b47-a992-a71823ac35c1}]
@Denied: (Full) (Everyone)
"Model"=dword:0000011a
"Therad"=dword:0000000e
.
Completion time: 2010-12-16 10:35:57
ComboFix-quarantined-files.txt 2010-12-16 09:35

Pre-Run: 28,209,885,184 bytes free
Post-Run: 20 adresárov, 28,164,857,856 voľných bajtov

- - End Of File - - AF442E7BA6C7799D53626480A4A789CF

[JaRon]

no aspon sme sa pohli vpred
Presun ComboFix
na plochu (ak tam este nie je)

otvor si Poznamkovy blok - notepad

do neho zkopiruj skript z nasledujiceho okna:

Kód: Vybrat vše

Driver::
ASKUpgrade

Folder::
c:\program files\AskBarDis

File::
c:\windows\system32\CF17172.exe
c:\windows\system32\CF16656.exe
c:\windows\system32\CF15372.exe
c:\windows\system32\CF10892.exe
c:\windows\system32\CF10637.exe
c:\windows\system32\CF9083.exe
c:\windows\system32\CF2429.exe
c:\windows\system32\CF2335.exe

uloz vytvoreny textovy soubor ako CFScript.txt na plochu

po ulozeni uchop vytvoreny skript lavym tlacitkom mysi a presun ho nad ikonu Combofixu, nad nim skript upust:



po aplikacii by mal vzniknut dalsi log, ten vloz sem

[sparcosk]

ComboFix 10-12-15.06 - sparcosk 16.12.2010 11:43:19.7.4 - x86
Systém Microsoft Windows XP Home Edition 5.1.2600.3.1250.421.1033.18.3325.2787 [GMT 1:00]
Running from: c:\documents and settings\sparcosk\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\sparcosk\Desktop\CFScript.txt

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE ::
"c:\windows\system32\CF10637.exe"
"c:\windows\system32\CF10892.exe"
"c:\windows\system32\CF15372.exe"
"c:\windows\system32\CF16656.exe"
"c:\windows\system32\CF17172.exe"
"c:\windows\system32\CF2335.exe"
"c:\windows\system32\CF2429.exe"
"c:\windows\system32\CF9083.exe"
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\AskBarDis
c:\program files\AskBarDis\bar\bin\askPopStp.dll
c:\program files\AskBarDis\bar\bin\AskSplash.exe
c:\program files\AskBarDis\bar\bin\AskTBApp.exe
c:\program files\AskBarDis\bar\bin\ASKUpgrade.exe
c:\program files\AskBarDis\bar\bin\psvince.dll
c:\program files\AskBarDis\bar\Cache\022DA35F.bin
c:\program files\AskBarDis\bar\Cache\022DA718.bin
c:\program files\AskBarDis\bar\Cache\022DA821.bin
c:\program files\AskBarDis\bar\Cache\022DA94A.bin
c:\program files\AskBarDis\bar\Cache\022DAA54.bin
c:\program files\AskBarDis\bar\Cache\022DAB6D.bin
c:\program files\AskBarDis\bar\Cache\files.ini
c:\program files\AskBarDis\bar\History\search
c:\program files\AskBarDis\bar\Settings\AskLogo.ico
c:\program files\AskBarDis\bar\Settings\config.dat
c:\program files\AskBarDis\bar\Settings\config.dat.bak
c:\program files\AskBarDis\bar\Settings\prevcfg.htm
c:\program files\AskBarDis\bar\Settings\prevCfg2.htm
c:\program files\AskBarDis\unins000.dat
c:\program files\AskBarDis\unins000.exe
c:\windows\system32\CF10637.exe
c:\windows\system32\CF10892.exe
c:\windows\system32\CF15372.exe
c:\windows\system32\CF16656.exe
c:\windows\system32\CF17172.exe
c:\windows\system32\CF2335.exe
c:\windows\system32\CF2429.exe
c:\windows\system32\CF9083.exe

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_ASKUPGRADE
-------\Service_ASKUpgrade


((((((((((((((((((((((((( Files Created from 2010-11-16 to 2010-12-16 )))))))))))))))))))))))))))))))
.

2010-12-15 19:23 . 2010-12-15 19:23 -------- d-sh--w- c:\documents and settings\sparcosk\IECompatCache
2010-12-15 18:57 . 2010-12-15 18:57 -------- d-sh--w- c:\documents and settings\sparcosk\PrivacIE
2010-12-15 15:54 . 2010-12-15 15:54 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2010-12-15 15:53 . 2010-12-15 15:53 -------- d-sh--w- c:\documents and settings\sparcosk\IETldCache
2010-12-15 15:49 . 2010-12-15 15:50 -------- d-----w- c:\windows\system32\sk-SK
2010-12-15 15:49 . 2010-12-15 15:50 -------- dc-h--w- c:\windows\ie8
2010-12-15 15:46 . 2010-10-18 11:10 7680 -c----w- c:\windows\system32\dllcache\iecompat.dll
2010-12-15 15:46 . 2010-11-06 00:26 602112 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2010-12-15 15:46 . 2010-11-06 00:26 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2010-12-15 15:46 . 2010-11-06 00:26 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2010-12-15 15:46 . 2010-11-06 00:26 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2010-12-15 15:46 . 2010-11-06 00:26 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2010-12-15 15:46 . 2010-11-06 00:26 1991680 -c----w- c:\windows\system32\dllcache\iertutil.dll
2010-12-15 15:46 . 2010-11-06 00:26 11080704 -c----w- c:\windows\system32\dllcache\ieframe.dll
2010-12-15 15:35 . 2010-12-15 15:36 -------- d-----w- c:\program files\CCleaner
2010-12-15 14:42 . 2010-11-02 15:17 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
2010-12-15 14:41 . 2010-10-11 14:59 45568 -c----w- c:\windows\system32\dllcache\wab.exe
2010-12-14 06:41 . 2010-12-14 06:41 -------- d-----w- C:\rsit
2010-12-13 20:07 . 2010-12-13 20:07 -------- d-----w- c:\documents and settings\sparcosk\Application Data\Malwarebytes
2010-12-13 20:07 . 2010-12-13 20:07 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-12-13 20:07 . 2010-11-29 16:42 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-13 20:07 . 2010-12-13 20:07 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-12-13 20:07 . 2010-11-29 16:42 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-13 06:09 . 2010-12-13 06:09 98392 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-12-12 23:14 . 2010-12-13 19:03 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-12-12 23:14 . 2010-12-13 19:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-12-12 19:30 . 2010-12-12 19:30 -------- d-----w- c:\documents and settings\sparcosk\Local Settings\Application Data\Sunbelt Software
2010-12-12 07:44 . 2010-12-12 07:44 388096 ----a-r- c:\documents and settings\sparcosk\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-12-11 20:19 . 2010-12-11 20:19 -------- d-----w- c:\windows\system32\wbem\Repository
2010-12-11 20:07 . 2010-12-11 20:13 -------- d-----w- c:\documents and settings\sparcosk\UserData
2010-12-11 19:40 . 2010-12-15 17:26 -------- d-----w- c:\program files\Trend Micro
2010-12-11 18:38 . 2010-12-11 18:38 -------- d-----w- c:\program files\Lavalys
2010-12-11 17:35 . 2010-12-11 17:35 -------- d-----w- c:\documents and settings\sparcosk\Local Settings\Application Data\ESET
2010-12-10 23:19 . 2010-12-14 19:39 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2010-12-10 20:02 . 2010-12-11 20:15 -------- d-----w- c:\program files\RegCleaner
2010-11-27 10:44 . 2010-11-27 10:44 -------- d-----w- c:\program files\Common Files\Java
2010-11-27 10:40 . 2010-09-15 03:50 472808 ----a-w- c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
2010-11-27 10:40 . 2010-09-15 03:50 472808 ----a-w- c:\windows\system32\deployJava1.dll
2010-11-25 15:28 . 2010-11-25 15:28 -------- d-----w- c:\documents and settings\sparcosk\Application Data\com.jamlegend.JamBox
2010-11-25 15:28 . 2010-11-25 15:28 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-11-18 18:12 . 2010-11-18 18:12 81920 -c----w- c:\windows\system32\dllcache\isign32.dll
2010-11-18 08:26 . 2010-11-18 14:46 -------- d-----w- C:\Incomplete
2010-11-16 19:24 . 2010-11-16 19:24 -------- d-----w- c:\documents and settings\All Users\Application Data\Electronic Arts
2010-11-16 19:24 . 2010-11-16 19:24 -------- d-----w- c:\documents and settings\All Users\Application Data\EA Core
2010-11-16 19:01 . 2010-11-16 19:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Solidshield
2010-11-16 17:57 . 2010-11-16 17:57 -------- d-----w- C:\StrongDC

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-16 10:49 . 2009-08-19 22:56 16608 ----a-w- c:\windows\gdrv.sys
2010-11-18 18:12 . 2009-08-19 22:46 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-06 00:26 . 2006-02-28 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:26 . 2006-02-28 12:00 43520 ------w- c:\windows\system32\licmgr10.dll
2010-11-06 00:26 . 2006-02-28 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-11-03 12:25 . 2006-02-28 12:00 385024 ------w- c:\windows\system32\html.iec
2010-11-02 15:17 . 2006-02-28 12:00 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
2010-10-28 13:13 . 2006-02-28 12:00 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:25 . 2006-02-28 12:00 1853312 ----a-w- c:\windows\system32\win32k.sys
2010-09-28 10:59 . 2010-09-28 10:59 775 ----a-w- C:\cleanup.bat
2010-09-22 20:22 . 2009-08-20 09:26 445016 ----a-w- c:\windows\system32\wrap_oal.dll
2010-09-22 20:22 . 2009-08-20 09:26 109144 ----a-w- c:\windows\system32\OpenAL32.dll
2010-09-18 10:23 . 2006-02-28 12:00 974848 ----a-w- c:\windows\system32\mfc42u.dll
2010-09-18 06:53 . 2006-02-28 12:00 974848 ----a-w- c:\windows\system32\mfc42.dll
2010-09-18 06:53 . 2006-02-28 12:00 954368 ----a-w- c:\windows\system32\mfc40.dll
2010-09-18 06:53 . 2006-02-28 12:00 953856 ----a-w- c:\windows\system32\mfc40u.dll
.

((((((((((((((((((((((((((((( SnapShot@2010-12-16_09.32.50 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-12-16 10:49 . 2010-12-16 10:49 16384 c:\windows\temp\Perflib_Perfdata_790.dat
+ 2010-12-16 10:49 . 2010-12-16 10:49 16384 c:\windows\temp\Perflib_Perfdata_704.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" [2007-09-04 95536]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2010-11-30 328056]
"Steam"="c:\program files\steam\steam.exe" [2010-11-17 1242448]
"Olympus ib"="c:\program files\Olympus\ib\olycamdetect.exe" [2009-10-30 93376]
"scheduler_monitor"="c:\program files\ReaConverter 5.5 Pro\init_scheduler.exe" [2007-06-15 27136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2009-01-13 18084864]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-07-09 13533184]
"nwiz"="nwiz.exe" [2008-07-09 1657376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-07-09 86016]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2010-06-29 74752]
"Lycosa"="c:\program files\Razer\Lycosa\razerhid.exe" [2007-11-20 147456]
"Diamondback"="c:\program files\Razer\Diamondback 3G\razerhid.exe" [2007-08-01 147456]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-05-26 85160]
"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" [2007-09-04 54576]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"MDS_Menu"="c:\program files\Olympus\ib\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-09-08 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-09-24 421160]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
MotionSD STUDIO - SD Browser auto start -.lnk - c:\program files\Panasonic\MotionSD STUDIO\SD_Browser\AutoLauncher.exe [2009-12-26 66952]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"e:\\HRY\\Guitar.Hero.3-Legends.of.Rock\\GH3.exe"=
"e:\\HRY\\GTA IV PC Version\\Grand Theft Auto IV\\GTAIV.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Documents and Settings\\sparcosk\\Local Settings\\Application Data\\AntikVirtualSTB\\AntikVirtualSTB.exe"=
"c:\\Program Files\\PS3 Media Server\\PMS.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\mIRC\\mirc.exe"=
"c:\\Documents and Settings\\sparcosk\\Application Data\\Macromedia\\Flash Player\\www.macromedia.com\\bin\\octoshape\\octoshape.exe"=
"c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"c:\\Program Files\\Mass Effect 2\\Binaries\\MassEffect2.exe"=
"e:\\HRY\\PES 2011\\pes2011.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\mafia ii\\pc\\mafia2.exe"=
"c:\\StrongDC\\StrongDC.exe"=
"c:\\Program Files\\PFPortChecker\\PFPortChecker.exe"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"e:\\Docasne\\CryptLoad_1.1.8\\RouterClient.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R1 ntiomin;ntiomin;c:\windows\system32\drivers\ntiomin.sys [3.1.2010 19:28 11392]
R2 ES lite Service;ES lite Service for program management.;c:\program files\Gigabyte\EasySaver\essvr.exe [19.8.2009 23:57 68136]
R3 LycoFltr;Lycosa Keyboard;c:\windows\system32\drivers\Lycosa.sys [19.8.2009 20:11 16128]
R3 Razerlow;Diamondback 3G USB Filter Driver;c:\windows\system32\drivers\DB3G.sys [19.8.2009 20:15 13225]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 12:16 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [12.5.2010 19:42 136176]
S3 rcp_service;ReaConverter scheduler service;c:\program files\ReaConverter 5.5 Pro\rcp_scheduler.exe [30.11.2007 11:27 558592]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 12:16 753504]
.
Contents of the 'Scheduled Tasks' folder

2010-12-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-12 18:42]

2010-12-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-12 18:42]
.
.
------- Supplementary Scan -------
.
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\sparcosk\Application Data\Mozilla\Firefox\Profiles\rw0bgmlh.default\
FF - prefs.js: browser.startup.homepage - hxxp://sk.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:sk:official
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Skype extension for Firefox: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Ask Toolbar for Firefox: {E9A1DEE0-C623-4439-8932-001E7D17607D} - %profile%\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
.
- - - - ORPHANS REMOVED - - - -

WebBrowser-{3041D03E-FD4B-44E0-B742-2D9B88305F98} - (no file)
AddRemove-Ask Toolbar_is1 - c:\program files\AskBarDis\unins000.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-16 11:49
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-1220945662-1004336348-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{D38EF829-AB91-E3E6-965D-925A65760D79}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"eaejgppjik"=hex:66,61,63,6a,6c,62,6e,6f,69,62,61,64,00,31
"daljjooh"=hex:64,62,69,64,63,6a,61,6f,6b,6b,66,64,70,61,62,6d,61,6f,6e,6a,67,
6b,69,70,6b,6c,70,66,6d,62,6a,61,68,67,64,6c,6d,61,63,63,00,00
"iamjiiafjgoipjgamn"=hex:6a,61,6d,6d,68,6a,6a,6f,68,63,6d,6b,62,69,70,61,6e,63,
69,66,00,00
"hakdccikofnpngpg"=hex:6a,61,6d,6d,68,6a,6a,6f,68,63,6d,6b,62,69,70,61,6e,63,
69,66,00,00

[HKEY_USERS\S-1-5-21-1220945662-1004336348-725345543-1004\Software\SecuROM\License information*]
"datasecu"=hex:66,38,e3,73,18,86,9c,c8,e2,5e,49,71,82,52,5a,bb,de,69,77,97,e1,
36,95,6d,b7,6c,5d,9f,d6,32,d3,30,b7,ea,b8,80,b3,f0,3d,ac,a7,19,bf,68,c3,93,\
"rkeysecu"=hex:f4,02,ee,17,44,72,b6,af,e3,9b,65,63,c9,27,4e,44

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):90,1c,f6,6e,bb,d2,d0,f3,60,02,8b,74,69,ea,e8,d2,04,fb,a0,35,e0,
2e,76,94,d4,56,e5,2b,57,46,59,93,c3,24,28,e6,36,08,bf,e9,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{8863f5e4-29fe-4b47-a992-a71823ac35c1}]
@Denied: (Full) (Everyone)
"Model"=dword:0000011a
"Therad"=dword:0000000e
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(3840)
c:\windows\system32\WININET.dll
c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll
c:\windows\system32\AcSignIcon.dll
c:\program files\Common Files\Autodesk Shared\AcSignCore16.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\windows\system32\bgsvcgen.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\CPUCooL\CooLSrv.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\windows\system32\nvsvc32.exe
c:\program files\TVersity\Media Server\MediaServer.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RUNDLL32.EXE
c:\program files\iPod\bin\iPodService.exe
c:\program files\Razer\Lycosa\razertra.exe
c:\program files\Razer\Diamondback 3G\razertra.exe
c:\program files\Razer\Diamondback 3G\razerofa.exe
.
**************************************************************************
.
Completion time: 2010-12-16 11:53:30 - machine was rebooted
ComboFix-quarantined-files.txt 2010-12-16 10:53
ComboFix2.txt 2010-12-16 09:35

Pre-Run: 28 007 284 736 bytes free
Post-Run: 20 adresárov, 27 852 541 952 voľných bajtov

- - End Of File - - 0F9A46F38503C0C91BC326B2DDFE25A6

[JaRon]

je to lepsie, alebo rovnake

[sparcosk]

jj , uz to ide , diki moc

[JaRon]

rado sa stalo