Windows XP padá a nemůže najít boot disk

[Dagan]

Ahoj

prosím o pomoc - pokud je PC bez pripojeni k internetu neni problem, pokud se pripoji po nejake dobe spadne a pri bootovani se objevi hlaska ze nenalezl bootovaci disk pritom v BIOSU je disk videt. Po odpojeni od internetu a cca 30 minutach PC bez problemu nabehne. Po pripojeni k internetu se vse opakuje.

log z RSIT:

Logfile of random's system information tool 1.08 (written by random/random)
Run by Eva at 2011-01-05 10:43:55
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 28 GB (73%) free of 38 GB
Total RAM: 447 MB (47% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\$~$Sys0$.job
C:\WINDOWS\tasks\$~$Sys1$.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1cb743f88a1b4c0.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-03-14 501400]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Cmaudio"=RunDll32 cmicnfg.cpl,CMICtrlWnd []
"VTTimer"=C:\WINDOWS\system32\VTTimer.exe [2004-01-15 49152]
"VTTrayp"=C:\WINDOWS\system32\VTtrayp.exe [2004-01-30 135168]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe [2007-03-14 83608]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-09-07 2838912]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
scecli
scecli
scecli

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe"="C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe:*:Enabled:Kerio Personal Firewall 4 - GUI"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-01-05 10:42:59 ----D---- C:\Program Files\trend micro
2011-01-05 10:42:58 ----D---- C:\rsit
2011-01-03 22:09:41 ----D---- C:\Program Files\PC Tools Security
2011-01-03 22:08:06 ----D---- C:\totalcmd
2011-01-03 22:08:06 ----D---- C:\Documents and Settings\Eva\Data aplikací\GHISLER
2011-01-03 22:08:06 ----A---- C:\WINDOWS\UC.PIF
2011-01-03 22:08:06 ----A---- C:\WINDOWS\RAR.PIF
2011-01-03 22:08:06 ----A---- C:\WINDOWS\PKZIP.PIF
2011-01-03 22:08:06 ----A---- C:\WINDOWS\PKUNZIP.PIF
2011-01-03 22:08:06 ----A---- C:\WINDOWS\NOCLOSE.PIF
2011-01-03 22:08:06 ----A---- C:\WINDOWS\LHA.PIF
2011-01-03 22:08:06 ----A---- C:\WINDOWS\ARJ.PIF
2011-01-03 21:55:49 ----D---- C:\Documents and Settings\Eva\Data aplikací\Registry Mechanic
2011-01-03 21:51:40 ----D---- C:\Program Files\PC Tools Utilities
2011-01-03 21:51:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Tools
2011-01-03 21:50:52 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2011-01-03 21:03:17 ----D---- C:\WINDOWS\WBEM
2011-01-03 21:03:17 ----D---- C:\WINDOWS\system32\drivers\UMDF
2011-01-03 20:53:57 ----D---- C:\WINDOWS\system32\LogFiles
2011-01-03 20:22:20 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2011-01-03 20:21:38 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2011-01-03 20:18:54 ----D---- C:\Program Files\Windows Media Connect 2
2011-01-03 20:18:05 ----A---- C:\WINDOWS\system32\tsgqec.dll
2011-01-03 20:18:05 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2011-01-03 20:18:04 ----A---- C:\WINDOWS\system32\aaclient.dll
2011-01-03 20:11:16 ----A---- C:\WINDOWS\system32\irclass.dll
2011-01-03 20:11:15 ----A---- C:\WINDOWS\system32\spxcoins.dll
2011-01-03 20:10:47 ----RA---- C:\WINDOWS\SET47.tmp
2011-01-03 20:10:44 ----RA---- C:\WINDOWS\SET3B.tmp
2011-01-03 20:10:42 ----RA---- C:\WINDOWS\SET3A.tmp
2011-01-03 20:09:47 ----A---- C:\WINDOWS\setuplog.txt
2011-01-03 20:00:23 ----A---- C:\WINDOWS\UPGRADE.TXT
2010-12-19 15:28:27 ----D---- C:\P
2010-12-19 13:12:33 ----A---- C:\WINDOWS\002750_.tmp
2010-12-19 13:10:35 ----A---- C:\WINDOWS\system32\drivers\uagp35.sys
2010-12-19 13:10:35 ----A---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2010-12-19 13:10:24 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-12-19 13:10:24 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2010-12-19 13:08:44 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-12-19 13:08:41 ----A---- C:\WINDOWS\system32\drivers\dot4.sys
2010-12-19 13:08:41 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2010-12-19 13:08:40 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2010-12-19 13:08:38 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2010-12-19 13:08:38 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2010-12-19 13:08:38 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2010-12-19 13:08:37 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2010-12-19 13:08:37 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2010-12-19 13:08:37 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2010-12-19 13:08:37 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2010-12-19 13:08:37 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2010-12-19 13:08:36 ----A---- C:\WINDOWS\system32\drivers\usbscan.sys
2010-12-19 13:08:36 ----A---- C:\WINDOWS\system32\drivers\usbprint.sys
2010-12-19 13:00:01 ----D---- C:\2f7c204f00c302a11fe3f7ebb96256d5
2010-12-19 12:59:11 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-12-19 12:41:11 ----A---- C:\kvu9dj82.exe
2010-12-19 12:40:02 ----A---- C:\Microsoft-Windows-XP-SP3-CZ.exe
2010-12-19 12:36:08 ----D---- C:\WINDOWS\system32\cs-cz
2010-12-19 12:36:07 ----D---- C:\WINDOWS\l2schemas
2010-12-19 12:36:06 ----D---- C:\WINDOWS\system32\cs
2010-12-19 12:36:06 ----D---- C:\WINDOWS\system32\bits
2010-12-19 12:31:01 ----D---- C:\WINDOWS\network diagnostic
2010-12-19 12:28:40 ----A---- C:\WINDOWS\002743_.tmp
2010-12-19 12:28:13 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-12-19 12:24:28 ----N---- C:\WINDOWS\system32\_004451_.tmp.dll
2010-12-19 12:22:46 ----A---- C:\WINDOWS\system32\_004449_.tmp.dll
2010-12-19 12:22:46 ----A---- C:\WINDOWS\system32\_004444_.tmp.dll
2010-12-19 12:22:46 ----A---- C:\WINDOWS\system32\_004443_.tmp.dll
2010-12-19 12:22:45 ----A---- C:\WINDOWS\system32\_004442_.tmp.dll
2010-12-19 12:22:45 ----A---- C:\WINDOWS\system32\_004441_.tmp.dll
2010-12-19 12:22:45 ----A---- C:\WINDOWS\system32\_004440_.tmp.dll
2010-12-19 12:22:45 ----A---- C:\WINDOWS\system32\_004437_.tmp.dll
2010-12-19 12:22:45 ----A---- C:\WINDOWS\system32\_004436_.tmp.dll
2010-12-19 12:22:45 ----A---- C:\WINDOWS\system32\_004435_.tmp.dll
2010-12-19 12:22:45 ----A---- C:\WINDOWS\system32\_004434_.tmp.dll
2010-12-19 12:22:45 ----A---- C:\WINDOWS\system32\_004432_.tmp.dll
2010-12-19 12:22:44 ----A---- C:\WINDOWS\system32\_004429_.tmp.dll
2010-12-19 12:22:44 ----A---- C:\WINDOWS\system32\_004427_.tmp.dll
2010-12-19 12:22:44 ----A---- C:\WINDOWS\system32\_004422_.tmp.dll
2010-12-19 12:22:44 ----A---- C:\WINDOWS\system32\_004421_.tmp.dll
2010-12-19 12:22:43 ----A---- C:\WINDOWS\system32\_004418_.tmp.dll
2010-12-19 12:22:43 ----A---- C:\WINDOWS\system32\_004414_.tmp.dll
2010-12-19 12:22:43 ----A---- C:\WINDOWS\system32\_004413_.tmp.dll
2010-12-19 12:22:43 ----A---- C:\WINDOWS\system32\_004405_.tmp.dll
2010-12-19 12:22:43 ----A---- C:\WINDOWS\system32\_004404_.tmp.dll
2010-12-19 12:22:42 ----A---- C:\WINDOWS\system32\_004395_.tmp.dll
2010-12-19 12:22:42 ----A---- C:\WINDOWS\system32\_004393_.tmp.dll
2010-12-19 12:22:42 ----A---- C:\WINDOWS\system32\_004390_.tmp.dll
2010-12-19 12:22:42 ----A---- C:\WINDOWS\system32\_004389_.tmp.dll
2010-12-19 12:22:42 ----A---- C:\WINDOWS\system32\_004388_.tmp.dll
2010-12-19 12:22:41 ----A---- C:\WINDOWS\system32\_004374_.tmp.dll
2010-12-19 12:22:41 ----A---- C:\WINDOWS\system32\_004371_.tmp.dll
2010-12-19 12:22:41 ----A---- C:\WINDOWS\system32\_004366_.tmp.dll
2010-12-19 12:22:41 ----A---- C:\WINDOWS\system32\_004365_.tmp.dll
2010-12-19 12:22:40 ----N---- C:\WINDOWS\system32\drivers\_004342_.tmp.dll
2010-12-19 12:17:25 ----D---- C:\WINDOWS\system32\CatRoot_bak
2010-12-19 12:16:10 ----D---- C:\cda753943f4dc610438b7909734f

======List of files/folders modified in the last 1 months======

2011-01-05 10:42:59 ----RD---- C:\Program Files
2011-01-05 10:40:03 ----A---- C:\WINDOWS\dirsaver.ini
2011-01-05 09:58:07 ----D---- C:\WINDOWS\system32\CatRoot2
2011-01-05 09:58:01 ----D---- C:\WINDOWS\Temp
2011-01-05 08:27:44 ----D---- C:\Program Files\Mozilla Firefox
2011-01-03 23:31:41 ----SHD---- C:\System Volume Information
2011-01-03 23:31:41 ----D---- C:\Program Files\Common Files
2011-01-03 23:30:49 ----D---- C:\WINDOWS\system32\drivers
2011-01-03 23:30:48 ----D---- C:\WINDOWS
2011-01-03 22:10:07 ----SHD---- C:\WINDOWS\Installer
2011-01-03 22:10:07 ----SHD---- C:\Config.Msi
2011-01-03 22:10:06 ----D---- C:\WINDOWS\WinSxS
2011-01-03 22:08:45 ----D---- C:\Install
2011-01-03 22:02:55 ----RD---- C:\Dokumenty
2011-01-03 22:02:55 ----D---- C:\WINDOWS\system32
2011-01-03 22:02:24 ----SD---- C:\WINDOWS\Tasks
2011-01-03 21:08:18 ----D---- C:\WINDOWS\system32\usmt
2011-01-03 21:08:04 ----D---- C:\WINDOWS\Media
2011-01-03 21:07:35 ----D---- C:\WINDOWS\PeerNet
2011-01-03 21:07:35 ----D---- C:\WINDOWS\ime
2011-01-03 21:07:09 ----D---- C:\WINDOWS\system32\npp
2011-01-03 21:06:57 ----D---- C:\WINDOWS\msagent
2011-01-03 21:06:14 ----D---- C:\WINDOWS\ehome
2011-01-03 21:05:47 ----RD---- C:\WINDOWS\Offline Web Pages
2011-01-03 21:05:32 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-01-03 21:05:17 ----D---- C:\WINDOWS\twain_32
2011-01-03 21:04:58 ----D---- C:\WINDOWS\system32\icsxml
2011-01-03 21:04:18 ----D---- C:\WINDOWS\system32\1033
2011-01-03 21:04:18 ----D---- C:\WINDOWS\system32\1029
2011-01-03 21:03:17 ----D---- C:\WINDOWS\Driver Cache
2011-01-03 20:31:52 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-01-03 20:31:48 ----D---- C:\WINDOWS\Registration
2011-01-03 20:31:10 ----HD---- C:\WINDOWS\inf
2011-01-03 20:28:23 ----D---- C:\WINDOWS\system32\config
2011-01-03 20:27:00 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-01-03 20:23:37 ----D---- C:\WINDOWS\security
2011-01-03 20:23:32 ----D---- C:\WINDOWS\system32\wbem
2011-01-03 20:23:32 ----D---- C:\WINDOWS\system32\Setup
2011-01-03 20:23:30 ----RSD---- C:\WINDOWS\Fonts
2011-01-03 20:23:30 ----D---- C:\WINDOWS\AppPatch
2011-01-03 20:23:01 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2011-01-03 20:22:58 ----D---- C:\WINDOWS\system32\ias
2011-01-03 20:22:24 ----A---- C:\WINDOWS\ODBCINST.INI
2011-01-03 20:22:23 ----RD---- C:\WINDOWS\Web
2011-01-03 20:22:15 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2011-01-03 20:21:58 ----D---- C:\WINDOWS\system32\Restore
2011-01-03 20:21:58 ----D---- C:\WINDOWS\Help
2011-01-03 20:21:58 ----D---- C:\Program Files\Windows Media Player
2011-01-03 20:21:57 ----D---- C:\Program Files\NetMeeting
2011-01-03 20:21:56 ----D---- C:\Program Files\Common Files\Services
2011-01-03 20:21:51 ----D---- C:\Program Files\Outlook Express
2011-01-03 20:21:47 ----D---- C:\Program Files\Internet Explorer
2011-01-03 20:21:45 ----D---- C:\WINDOWS\srchasst
2011-01-03 20:21:36 ----D---- C:\Program Files\Movie Maker
2011-01-03 20:21:12 ----D---- C:\WINDOWS\system32\oobe
2011-01-03 20:20:53 ----D---- C:\Program Files\Common Files\System
2011-01-03 20:19:43 ----D---- C:\WINDOWS\system32\Com
2011-01-03 20:18:43 ----D---- C:\WINDOWS\Cursors
2011-01-03 20:18:34 ----D---- C:\Program Files\Windows NT
2011-01-03 20:17:06 ----SH---- C:\boot.ini
2011-01-03 20:12:17 ----D---- C:\WINDOWS\system32\CatRoot
2011-01-03 20:11:49 ----D---- C:\WINDOWS\system
2011-01-03 20:11:49 ----A---- C:\WINDOWS\system32\OEMINFO.INI
2011-01-03 20:11:43 ----A---- C:\WINDOWS\system.ini
2011-01-03 20:10:58 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2011-01-03 15:28:58 ----D---- C:\UCTO2010
2010-12-19 13:25:58 ----D---- C:\Program Files\Messenger
2010-12-19 13:25:27 ----D---- C:\WINDOWS\system32\inetsrv
2010-12-19 13:12:33 ----A---- C:\WINDOWS\imsins.BAK
2010-12-19 13:12:25 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-12-19 12:17:23 ----D---- C:\WINDOWS\Debug
2010-12-15 15:41:45 ----D---- C:\STEREO14
2010-12-15 09:55:09 ----D---- C:\UCTO2008

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 gagp30kx;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\WINDOWS\system32\DRIVERS\gagp30kx.sys [2008-04-14 46464]
R0 uagp35;Filtr Microsoft AGPv3.5; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2008-04-14 44672]
R0 viaagp1;VIA AGP Filter; C:\WINDOWS\system32\DRIVERS\viaagp1.sys [2003-07-02 27904]
R0 viamraid;viamraid; C:\WINDOWS\system32\DRIVERS\viamraid.sys [2005-04-26 60928]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 Cdr4_xp;Cdr4_xp; C:\WINDOWS\system32\drivers\Cdr4_xp.sys [2007-07-17 61424]
R1 Cdralw2k;Cdralw2k; C:\WINDOWS\system32\drivers\Cdralw2k.sys [2007-07-17 23436]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2004-04-23 818496]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2004-04-15 42496]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2004-02-27 137728]
S0 TfFsMon;TfFsMon; C:\WINDOWS\system32\drivers\TfFsMon.sys []
S0 TFSysMon;TfSysMon; C:\WINDOWS\system32\drivers\TfSysMon.sys []
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 Dot4;Ovladač MS IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2008-04-14 206976]
S3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys [2001-08-17 12928]
S3 Dot4Scan;Ovladač třídy skeneru standardu IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4Scan.sys [2001-08-17 8704]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys []
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS []
S3 TfNetMon;TfNetMon; \??\C:\WINDOWS\system32\drivers\TfNetMon.sys []
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [2010-04-14 73728]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-07 133104]

-----------------EOF-----------------

[motji]

Hezké poledne .
Něco tam vidím a nelíbí se mi to, proto bych chtěla použít combofix. Pokud máte ještě jiný pc, tak stahněte si program přes flešku na něj a tento vůbec nepřipojujte na net.
Chtěla bych použít combofix, ale máte program Učto2010, který combofix stále maže. On Vám ho smaže, ale já Vám ho pak obnovím z karantény, pokud souhlasíte .
Jinak bych musela použít jiný program, ale combofix je nejlepší

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix
-přejmenujte combofix na infekce.com

[Dagan]

ucetnictci jsem si zazalohoval na flasku - neni potreba obnovovat - zkratil jsem i UCTO2010 z logu vymazanych souboru kvuli maximalnimu poctu znaku na prispevek

log z combofixu :


ComboFix 11-01-04.01 - Eva 05.01.2011 14:58:59.2.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.447.254 [GMT 1:00]
Spuštěný z: c:\documents and settings\Eva\Plocha\infekce.exe
Použité ovládací přepínače :: E:\WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.


c:\ucto2010\VANA\PAR06A4.006
c:\ucto2010\VANA\PAR08A4.008
c:\ucto2010\VANA\PAR09A2.009
c:\ucto2010\VANA\PAR09A2.T09
c:\ucto2010\VANA\PAR09A4.009
c:\ucto2010\VANA\PAR97A2.097
c:\ucto2010\VANA\PARAM2.000
c:\ucto2010\VANA\PARAM2.T00
c:\ucto2010\VANA\PARAM4.000
c:\ucto2010\VANA\PARAM4.T00
c:\ucto2010\VANA\PARZAS.001
c:\ucto2010\VANA\POCZAM.097
c:\ucto2010\VANA\POJIST.004
c:\ucto2010\VANA\POJIST.X04
c:\ucto2010\VANA\PRACOV.004
c:\ucto2010\VANA\PRACOV.T04
c:\ucto2010\VANA\PRACOV.X04
c:\ucto2010\VANA\PRACSML.004
c:\ucto2010\VANA\PRACSML.T04
c:\ucto2010\VANA\PRIHL.097
c:\ucto2010\VANA\TRIDY.004
c:\ucto2010\VANA\TRIDY.X04
c:\ucto2010\VANA\TYPDOKL.001
c:\ucto2010\VANA\TYPDOKL.X01
c:\ucto2010\VANA\UKOLY.000
c:\ucto2010\VANA\UKOLY.T00
c:\ucto2010\VANA\UZAV.001
c:\ucto2010\VANA\VYUCZAL.097
c:\ucto2010\VANA\ZAOKFA.006
c:\ucto2010\VANA\ZAOKFA.X06
c:\ucto2010\VEDLCIN.UUU
c:\ucto2010\VELAKOM\ABSENCE.004
c:\ucto2010\VELAKOM\ABSENCE.X04
c:\ucto2010\VELAKOM\ADRESY.000
c:\ucto2010\VELAKOM\ADRESY.T00
c:\ucto2010\VELAKOM\ADRESY.X00
c:\ucto2010\VELAKOM\ARCHIVM.004
c:\ucto2010\VELAKOM\ARCHIVM.T04
c:\ucto2010\VELAKOM\BANKA1.008
c:\ucto2010\VELAKOM\CISABS.004
c:\ucto2010\VELAKOM\CISABS.X04
c:\ucto2010\VELAKOM\CISDOKL.001
c:\ucto2010\VELAKOM\CISDRUH.001
c:\ucto2010\VELAKOM\CISDRUH.X01
c:\ucto2010\VELAKOM\CISPOH.001
c:\ucto2010\VELAKOM\CISPOH.X01
c:\ucto2010\VELAKOM\CISPOZN.000
c:\ucto2010\VELAKOM\CISPOZN.T00
c:\ucto2010\VELAKOM\CIST.000
c:\ucto2010\VELAKOM\CIST.X00
c:\ucto2010\VELAKOM\CISTXT.006
c:\ucto2010\VELAKOM\CISTXT.X06
c:\ucto2010\VELAKOM\CISVYKON.001
c:\ucto2010\VELAKOM\CISVYKON.X01
c:\ucto2010\VELAKOM\DOVROK.004
c:\ucto2010\VELAKOM\EDIT.000
c:\ucto2010\VELAKOM\EDIT.X00
c:\ucto2010\VELAKOM\EDITPAR.000
c:\ucto2010\VELAKOM\EDITPAR.X00
c:\ucto2010\VELAKOM\EDITTAB.000
c:\ucto2010\VELAKOM\EDITTAB.T00
c:\ucto2010\VELAKOM\EDITTAB.X00
c:\ucto2010\VELAKOM\FINANCE.001
c:\ucto2010\VELAKOM\FINANCE.T01
c:\ucto2010\VELAKOM\KATEG.004
c:\ucto2010\VELAKOM\KATEG.X04
c:\ucto2010\VELAKOM\OZNPOJ.004
c:\ucto2010\VELAKOM\PAR01A2.001
c:\ucto2010\VELAKOM\PAR01A4.001
c:\ucto2010\VELAKOM\PAR04A2.004
c:\ucto2010\VELAKOM\PAR06A4.006
c:\ucto2010\VELAKOM\PAR08A4.008
c:\ucto2010\VELAKOM\PAR09A2.009
c:\ucto2010\VELAKOM\PAR09A2.T09
c:\ucto2010\VELAKOM\PAR09A4.009
c:\ucto2010\VELAKOM\PARAM2.000
c:\ucto2010\VELAKOM\PARAM2.T00
c:\ucto2010\VELAKOM\PARAM4.000
c:\ucto2010\VELAKOM\PARAM4.T00
c:\ucto2010\VELAKOM\PARZAS.001
c:\ucto2010\VELAKOM\POCZAM.097
c:\ucto2010\VELAKOM\POJIST.004
c:\ucto2010\VELAKOM\POJIST.X04
c:\ucto2010\VELAKOM\PRACOV.004
c:\ucto2010\VELAKOM\PRACOV.T04
c:\ucto2010\VELAKOM\PRACOV.X04
c:\ucto2010\VELAKOM\PRACSML.004
c:\ucto2010\VELAKOM\PRACSML.T04
c:\ucto2010\VELAKOM\TRIDY.004
c:\ucto2010\VELAKOM\TRIDY.X04
c:\ucto2010\VELAKOM\TYPDOKL.001
c:\ucto2010\VELAKOM\TYPDOKL.X01
c:\ucto2010\VELAKOM\UKOLY.000
c:\ucto2010\VELAKOM\UKOLY.T00
c:\ucto2010\VELAKOM\UZAV.001
c:\ucto2010\VELAKOM\VYUCZAL.097
c:\ucto2010\VELAKOM\ZAOKFA.006
c:\ucto2010\VELAKOM\ZAOKFA.X06
c:\ucto2010\VERZE.UUU
c:\ucto2010\VESELY\ABSENCE.004
c:\ucto2010\VESELY\ABSENCE.X04
c:\ucto2010\VESELY\ADRESY.000
c:\ucto2010\VESELY\ADRESY.T00
c:\ucto2010\VESELY\ADRESY.X00
c:\ucto2010\VESELY\ARCHIVD.001
c:\ucto2010\VESELY\ARCHIVD.T01
c:\ucto2010\VESELY\ARCHIVM.004
c:\ucto2010\VESELY\ARCHIVM.T04
c:\ucto2010\VESELY\BANKA1.008
c:\ucto2010\VESELY\BANKA2.008
c:\ucto2010\VESELY\CISABS.004
c:\ucto2010\VESELY\CISABS.X04
c:\ucto2010\VESELY\CISDOKL.001
c:\ucto2010\VESELY\CISDRUH.001
c:\ucto2010\VESELY\CISDRUH.X01
c:\ucto2010\VESELY\CISPOH.001
c:\ucto2010\VESELY\CISPOH.X01
c:\ucto2010\VESELY\CISPOZN.000
c:\ucto2010\VESELY\CISPOZN.T00
c:\ucto2010\VESELY\CIST.000
c:\ucto2010\VESELY\CIST.X00
c:\ucto2010\VESELY\CISTEXT.001
c:\ucto2010\VESELY\CISTXT.006
c:\ucto2010\VESELY\CISTXT.X06
c:\ucto2010\VESELY\CISVYKON.001
c:\ucto2010\VESELY\CISVYKON.X01
c:\ucto2010\VESELY\DAP15.003
c:\ucto2010\VESELY\DAP15.T03
c:\ucto2010\VESELY\DAP16.003
c:\ucto2010\VESELY\DAP16.T03
c:\ucto2010\VESELY\DENIK.001
c:\ucto2010\VESELY\DENIK.T01
c:\ucto2010\VESELY\DOVROK.004
c:\ucto2010\VESELY\DOVROK.X04
c:\ucto2010\VESELY\DROBMAJ.009
c:\ucto2010\VESELY\DROBMAJ.T09
c:\ucto2010\VESELY\EDIT.000
c:\ucto2010\VESELY\EDIT.X00
c:\ucto2010\VESELY\EDITPAR.000
c:\ucto2010\VESELY\EDITPAR.X00
c:\ucto2010\VESELY\ELDP.097
c:\ucto2010\VESELY\ELDP.T97
c:\ucto2010\VESELY\FINANCE.001
c:\ucto2010\VESELY\FINANCE.T01
c:\ucto2010\VESELY\KATEG.004
c:\ucto2010\VESELY\KATEG.X04
c:\ucto2010\VESELY\ODVODYM.004
c:\ucto2010\VESELY\OSSZ08.003
c:\ucto2010\VESELY\OSSZ09.003
c:\ucto2010\VESELY\OZNPOJ.004
c:\ucto2010\VESELY\PAR01A2.001
c:\ucto2010\VESELY\PAR01A4.001
c:\ucto2010\VESELY\PAR02A2.002
c:\ucto2010\VESELY\PAR02A4.002
c:\ucto2010\VESELY\PAR03A4.003
c:\ucto2010\VESELY\PAR04A2.004
c:\ucto2010\VESELY\PAR08A4.008
c:\ucto2010\VESELY\PAR09A2.009
c:\ucto2010\VESELY\PAR09A2.T09
c:\ucto2010\VESELY\PAR09A4.009
c:\ucto2010\VESELY\PAR97A2.097
c:\ucto2010\VESELY\PARAM2.000
c:\ucto2010\VESELY\PARAM2.T00
c:\ucto2010\VESELY\PARAM4.000
c:\ucto2010\VESELY\PARAM4.T00
c:\ucto2010\VESELY\PARZAS.001
c:\ucto2010\VESELY\PLATBY.001
c:\ucto2010\VESELY\PLATBY.T01
c:\ucto2010\VESELY\POCZAM.097
c:\ucto2010\VESELY\POHLZAV.001
c:\ucto2010\VESELY\POHLZAV.T01
c:\ucto2010\VESELY\POJIST.004
c:\ucto2010\VESELY\POJIST.X04
c:\ucto2010\VESELY\PRACOV.004
c:\ucto2010\VESELY\PRACOV.T04
c:\ucto2010\VESELY\PRACOV.X04
c:\ucto2010\VESELY\PRACSML.004
c:\ucto2010\VESELY\PRACSML.T04
c:\ucto2010\VESELY\PRIHL.097
c:\ucto2010\VESELY\SHIFTF3.000
c:\ucto2010\VESELY\SHIFTF3.X00
c:\ucto2010\VESELY\TRIDY.004
c:\ucto2010\VESELY\TRIDY.X04
c:\ucto2010\VESELY\TYPDOKL.001
c:\ucto2010\VESELY\TYPDOKL.X01
c:\ucto2010\VESELY\UCTY.000
c:\ucto2010\VESELY\UKOLY.000
c:\ucto2010\VESELY\UKOLY.T00
c:\ucto2010\VESELY\UZAV.001
c:\ucto2010\VESELY\VRACBON.097
c:\ucto2010\VESELY\VYKMAZA.UUU
c:\ucto2010\VESELY\VYUCSRAZ.097
c:\ucto2010\VESELY\VYUCZAL.097
c:\ucto2010\VESELY\VZP08.003
c:\ucto2010\VESELY\VZP09.003
c:\ucto2010\VESELY\ZAOKFA.006
c:\ucto2010\VESELY\ZAOKFA.X06
c:\ucto2010\VESELY\ZURNALD.001
c:\ucto2010\VRCHSTAV\ABSENCE.004
c:\ucto2010\VRCHSTAV\ABSENCE.X04
c:\ucto2010\VRCHSTAV\ADRESY.000
c:\ucto2010\VRCHSTAV\ADRESY.T00
c:\ucto2010\VRCHSTAV\ADRESY.X00
c:\ucto2010\VRCHSTAV\ARCHIVM.004
c:\ucto2010\VRCHSTAV\ARCHIVM.T04
c:\ucto2010\VRCHSTAV\BANKA1.008
c:\ucto2010\VRCHSTAV\BANKA2.008
c:\ucto2010\VRCHSTAV\CISABS.004
c:\ucto2010\VRCHSTAV\CISABS.X04
c:\ucto2010\VRCHSTAV\CISDOKL.001
c:\ucto2010\VRCHSTAV\CISDRUH.001
c:\ucto2010\VRCHSTAV\CISDRUH.X01
c:\ucto2010\VRCHSTAV\CISPOH.001
c:\ucto2010\VRCHSTAV\CISPOH.X01
c:\ucto2010\VRCHSTAV\CISPOZN.000
c:\ucto2010\VRCHSTAV\CISPOZN.T00
c:\ucto2010\VRCHSTAV\CIST.000
c:\ucto2010\VRCHSTAV\CIST.X00
c:\ucto2010\VRCHSTAV\CISTXT.006
c:\ucto2010\VRCHSTAV\CISTXT.X06
c:\ucto2010\VRCHSTAV\CISVYKON.001
c:\ucto2010\VRCHSTAV\CISVYKON.X01
c:\ucto2010\VRCHSTAV\DAP15.003
c:\ucto2010\VRCHSTAV\DAP15.T03
c:\ucto2010\VRCHSTAV\DAP16.003
c:\ucto2010\VRCHSTAV\DAP16.T03
c:\ucto2010\VRCHSTAV\DETI16.003
c:\ucto2010\VRCHSTAV\DETI16.X03
c:\ucto2010\VRCHSTAV\DOVROK.004
c:\ucto2010\VRCHSTAV\EDIT.000
c:\ucto2010\VRCHSTAV\EDIT.X00
c:\ucto2010\VRCHSTAV\EDITPAR.000
c:\ucto2010\VRCHSTAV\EDITPAR.X00
c:\ucto2010\VRCHSTAV\ELDP.097
c:\ucto2010\VRCHSTAV\ELDP.T97
c:\ucto2010\VRCHSTAV\FINANCE.001
c:\ucto2010\VRCHSTAV\FINANCE.T01
c:\ucto2010\VRCHSTAV\KATEG.004
c:\ucto2010\VRCHSTAV\KATEG.X04
c:\ucto2010\VRCHSTAV\MZDY.004
c:\ucto2010\VRCHSTAV\MZDY.T04
c:\ucto2010\VRCHSTAV\ODVODYM.004
c:\ucto2010\VRCHSTAV\ODVODYMX.004
c:\ucto2010\VRCHSTAV\OSSZ08.003
c:\ucto2010\VRCHSTAV\OSSZ09.003
c:\ucto2010\VRCHSTAV\OZNPOJ.004
c:\ucto2010\VRCHSTAV\PAR01A2.001
c:\ucto2010\VRCHSTAV\PAR01A4.001
c:\ucto2010\VRCHSTAV\PAR02A2.002
c:\ucto2010\VRCHSTAV\PAR02A4.002
c:\ucto2010\VRCHSTAV\PAR03A4.003
c:\ucto2010\VRCHSTAV\PAR04A2.004
c:\ucto2010\VRCHSTAV\PAR04A2X.004
c:\ucto2010\VRCHSTAV\PAR08A4.008
c:\ucto2010\VRCHSTAV\PAR09A2.009
c:\ucto2010\VRCHSTAV\PAR09A2.T09
c:\ucto2010\VRCHSTAV\PAR09A4.009
c:\ucto2010\VRCHSTAV\PAR97A2.097
c:\ucto2010\VRCHSTAV\PARAM2.000
c:\ucto2010\VRCHSTAV\PARAM2.T00
c:\ucto2010\VRCHSTAV\PARAM4.000
c:\ucto2010\VRCHSTAV\PARAM4.T00
c:\ucto2010\VRCHSTAV\PARZAS.001
c:\ucto2010\VRCHSTAV\POCZAM.097
c:\ucto2010\VRCHSTAV\POJIST.004
c:\ucto2010\VRCHSTAV\POJIST.X04
c:\ucto2010\VRCHSTAV\PRACOV.004
c:\ucto2010\VRCHSTAV\PRACOV.T04
c:\ucto2010\VRCHSTAV\PRACSML.004
c:\ucto2010\VRCHSTAV\PRACSML.T04
c:\ucto2010\VRCHSTAV\PRIHL.097
c:\ucto2010\VRCHSTAV\TRIDY.004
c:\ucto2010\VRCHSTAV\TRIDY.X04
c:\ucto2010\VRCHSTAV\TYPDOKL.001
c:\ucto2010\VRCHSTAV\TYPDOKL.X01
c:\ucto2010\VRCHSTAV\UCTY.000
c:\ucto2010\VRCHSTAV\UKOLY.000
c:\ucto2010\VRCHSTAV\UKOLY.T00
c:\ucto2010\VRCHSTAV\UZAV.001
c:\ucto2010\VRCHSTAV\VYUCZAL.097
c:\ucto2010\VRCHSTAV\ZAOKFA.006
c:\ucto2010\VRCHSTAV\ZAOKFA.X06
c:\ucto2010\VYBERTXT.EXE
c:\ucto2010\VZORTISK.000
c:\ucto2010\YURIY\ADRESY.000
c:\ucto2010\YURIY\ADRESY.T00
c:\ucto2010\YURIY\ADRESY.X00
c:\ucto2010\YURIY\BANKA1.008
c:\ucto2010\YURIY\CISABS.004
c:\ucto2010\YURIY\CISABS.X04
c:\ucto2010\YURIY\CISDOKL.001
c:\ucto2010\YURIY\CISDRUH.001
c:\ucto2010\YURIY\CISDRUH.X01
c:\ucto2010\YURIY\CISPOH.001
c:\ucto2010\YURIY\CISPOZN.000
c:\ucto2010\YURIY\CISPOZN.T00
c:\ucto2010\YURIY\CIST.000
c:\ucto2010\YURIY\CISTXT.006
c:\ucto2010\YURIY\CISVYKON.001
c:\ucto2010\YURIY\DAP15.003
c:\ucto2010\YURIY\DAP15.T03
c:\ucto2010\YURIY\DENIK.001
c:\ucto2010\YURIY\DENIK.T01
c:\ucto2010\YURIY\DETI15.003
c:\ucto2010\YURIY\DETI15.X03
c:\ucto2010\YURIY\EDIT.000
c:\ucto2010\YURIY\KATEG.004
c:\ucto2010\YURIY\PAR01A2.001
c:\ucto2010\YURIY\PAR01A4.001
c:\ucto2010\YURIY\PAR03A4.003
c:\ucto2010\YURIY\PAR09A2.009
c:\ucto2010\YURIY\PAR09A2.T09
c:\ucto2010\YURIY\PAR09A4.009
c:\ucto2010\YURIY\PARAM2.000
c:\ucto2010\YURIY\PARAM2.T00
c:\ucto2010\YURIY\PARAM4.000
c:\ucto2010\YURIY\PARAM4.T00
c:\ucto2010\YURIY\PARZAS.001
c:\ucto2010\YURIY\PRACSML.004
c:\ucto2010\YURIY\PRACSML.T04
c:\ucto2010\YURIY\TRIDY.004
c:\ucto2010\YURIY\TYPDOKL.001
c:\ucto2010\YURIY\UKOLY.000
c:\ucto2010\YURIY\UKOLY.T00
c:\ucto2010\YURIY\UZAV.001
c:\ucto2010\YURIY\ZAOKFA.006
c:\ucto2010\ZAJICEK\ADRESY.000
c:\ucto2010\ZAJICEK\ADRESY.T00
c:\ucto2010\ZAJICEK\ADRESY.X00
c:\ucto2010\ZAJICEK\ARCHIVD.001
c:\ucto2010\ZAJICEK\ARCHIVD.T01
c:\ucto2010\ZAJICEK\BANKA1.008
c:\ucto2010\ZAJICEK\CISABS.004
c:\ucto2010\ZAJICEK\CISDOKL.001
c:\ucto2010\ZAJICEK\CISDRUH.001
c:\ucto2010\ZAJICEK\CISDRUH.X01
c:\ucto2010\ZAJICEK\CISPOH.001
c:\ucto2010\ZAJICEK\CISPOH.X01
c:\ucto2010\ZAJICEK\CISPOZN.000
c:\ucto2010\ZAJICEK\CISPOZN.T00
c:\ucto2010\ZAJICEK\CIST.000
c:\ucto2010\ZAJICEK\CISTEXT.001
c:\ucto2010\ZAJICEK\CISTXT.006
c:\ucto2010\ZAJICEK\CISVYKON.001
c:\ucto2010\ZAJICEK\CISVYKON.X01
c:\ucto2010\ZAJICEK\DAP15.003
c:\ucto2010\ZAJICEK\DAP15.T03
c:\ucto2010\ZAJICEK\DAP16.003
c:\ucto2010\ZAJICEK\DAP16.T03
c:\ucto2010\ZAJICEK\DAP16.X03
c:\ucto2010\ZAJICEK\DENIK.001
c:\ucto2010\ZAJICEK\DENIK.T01
c:\ucto2010\ZAJICEK\EDIT.000
c:\ucto2010\ZAJICEK\EDIT.X00
c:\ucto2010\ZAJICEK\EDITPAR.000
c:\ucto2010\ZAJICEK\EDITPAR.X00
c:\ucto2010\ZAJICEK\FINANCE.001
c:\ucto2010\ZAJICEK\FINANCE.T01
c:\ucto2010\ZAJICEK\KATEG.004
c:\ucto2010\ZAJICEK\OSSZ08.003
c:\ucto2010\ZAJICEK\OSSZ09.003
c:\ucto2010\ZAJICEK\PAR01A2.001
c:\ucto2010\ZAJICEK\PAR01A4.001
c:\ucto2010\ZAJICEK\PAR03A4.003
c:\ucto2010\ZAJICEK\PAR09A2.009
c:\ucto2010\ZAJICEK\PAR09A2.T09
c:\ucto2010\ZAJICEK\PAR09A4.009
c:\ucto2010\ZAJICEK\PARAM2.000
c:\ucto2010\ZAJICEK\PARAM2.T00
c:\ucto2010\ZAJICEK\PARAM4.000
c:\ucto2010\ZAJICEK\PARAM4.T00
c:\ucto2010\ZAJICEK\PARZAS.001
c:\ucto2010\ZAJICEK\PRACSML.004
c:\ucto2010\ZAJICEK\PRACSML.T04
c:\ucto2010\ZAJICEK\TRIDY.004
c:\ucto2010\ZAJICEK\TYPDOKL.001
c:\ucto2010\ZAJICEK\UKOLY.000
c:\ucto2010\ZAJICEK\UKOLY.T00
c:\ucto2010\ZAJICEK\UZAV.001
c:\ucto2010\ZAJICEK\VZP08.003
c:\ucto2010\ZAJICEK\VZP09.003
c:\ucto2010\ZAJICEK\ZAOKFA.006
c:\ucto2010\ZAJICEK\ZURNALD.001
c:\ucto2010\ZASTUPCE.CAT
c:\ucto2010\ZASTUPCE.INI
c:\ucto2010\ZASTUPCE.RDB
c:\ucto2010\ZASTUPCE.TTT
c:\ucto2010\ZAVREL\ADRESY.000
c:\ucto2010\ZAVREL\ADRESY.T00
c:\ucto2010\ZAVREL\ADRESY.X00
c:\ucto2010\ZAVREL\BANKA1.008
c:\ucto2010\ZAVREL\CISABS.004
c:\ucto2010\ZAVREL\CISABS.X04
c:\ucto2010\ZAVREL\CISDOKL.001
c:\ucto2010\ZAVREL\CISDRUH.001
c:\ucto2010\ZAVREL\CISDRUH.X01
c:\ucto2010\ZAVREL\CISPOH.001
c:\ucto2010\ZAVREL\CISPOH.X01
c:\ucto2010\ZAVREL\CISPOZN.000
c:\ucto2010\ZAVREL\CISPOZN.T00
c:\ucto2010\ZAVREL\CIST.000
c:\ucto2010\ZAVREL\CIST.X00
c:\ucto2010\ZAVREL\CISTEXT.001
c:\ucto2010\ZAVREL\CISTXT.006
c:\ucto2010\ZAVREL\CISTXT.X06
c:\ucto2010\ZAVREL\CISVYKON.001
c:\ucto2010\ZAVREL\CISVYKON.X01
c:\ucto2010\ZAVREL\DENIK.001
c:\ucto2010\ZAVREL\DENIK.T01
c:\ucto2010\ZAVREL\EDIT.000
c:\ucto2010\ZAVREL\EDIT.X00
c:\ucto2010\ZAVREL\EDITPAR.000
c:\ucto2010\ZAVREL\EDITPAR.X00
c:\ucto2010\ZAVREL\FAKT_FH.006
c:\ucto2010\ZAVREL\FAKT_FH.T06
c:\ucto2010\ZAVREL\FAKT_FP.006
c:\ucto2010\ZAVREL\FAKT_FS.006
c:\ucto2010\ZAVREL\FAKT_VH.006
c:\ucto2010\ZAVREL\FAKT_VH.T06
c:\ucto2010\ZAVREL\FAKT_VP.006
c:\ucto2010\ZAVREL\FAKT_VS.006
c:\ucto2010\ZAVREL\FINANCE.001
c:\ucto2010\ZAVREL\FINANCE.T01
c:\ucto2010\ZAVREL\KATEG.004
c:\ucto2010\ZAVREL\KATEG.X04
c:\ucto2010\ZAVREL\PAR01A2.001
c:\ucto2010\ZAVREL\PAR01A4.001
c:\ucto2010\ZAVREL\PAR06A4.006
c:\ucto2010\ZAVREL\PARAM2.000
c:\ucto2010\ZAVREL\PARAM2.T00
c:\ucto2010\ZAVREL\PARAM4.000
c:\ucto2010\ZAVREL\PARAM4.T00
c:\ucto2010\ZAVREL\PARZAS.001
c:\ucto2010\ZAVREL\PRACSML.004
c:\ucto2010\ZAVREL\PRACSML.T04
c:\ucto2010\ZAVREL\TRIDY.004
c:\ucto2010\ZAVREL\TRIDY.X04
c:\ucto2010\ZAVREL\TYPDOKL.001
c:\ucto2010\ZAVREL\TYPDOKL.X01
c:\ucto2010\ZAVREL\UKOLY.000
c:\ucto2010\ZAVREL\UKOLY.T00
c:\ucto2010\ZAVREL\UZAV.001
c:\ucto2010\ZAVREL\ZAOKFA.006
c:\ucto2010\ZAVREL\ZAOKFA.X06
c:\ucto2010\ZETROZET.PAL
c:\ucto2010\ZZZ.BAT
c:\windows\system32\_004357_.tmp.dll
c:\windows\system32\_004358_.tmp.dll
c:\windows\system32\_004359_.tmp.dll
c:\windows\system32\_004360_.tmp.dll
c:\windows\system32\_004365_.tmp.dll
c:\windows\system32\_004366_.tmp.dll
c:\windows\system32\_004367_.tmp.dll
c:\windows\system32\_004368_.tmp.dll
c:\windows\system32\_004369_.tmp.dll
c:\windows\system32\_004370_.tmp.dll
c:\windows\system32\_004371_.tmp.dll
c:\windows\system32\_004372_.tmp.dll
c:\windows\system32\_004373_.tmp.dll
c:\windows\system32\_004374_.tmp.dll
c:\windows\system32\_004376_.tmp.dll
c:\windows\system32\_004377_.tmp.dll
c:\windows\system32\_004380_.tmp.dll
c:\windows\system32\_004381_.tmp.dll
c:\windows\system32\_004383_.tmp.dll
c:\windows\system32\_004386_.tmp.dll
c:\windows\system32\_004387_.tmp.dll
c:\windows\system32\_004388_.tmp.dll
c:\windows\system32\_004389_.tmp.dll
c:\windows\system32\_004390_.tmp.dll
c:\windows\system32\_004392_.tmp.dll
c:\windows\system32\_004393_.tmp.dll
c:\windows\system32\_004394_.tmp.dll
c:\windows\system32\_004395_.tmp.dll
c:\windows\system32\_004397_.tmp.dll
c:\windows\system32\_004399_.tmp.dll
c:\windows\system32\_004400_.tmp.dll
c:\windows\system32\_004401_.tmp.dll
c:\windows\system32\_004402_.tmp.dll
c:\windows\system32\_004403_.tmp.dll
c:\windows\system32\_004404_.tmp.dll
c:\windows\system32\_004405_.tmp.dll
c:\windows\system32\_004406_.tmp.dll
c:\windows\system32\_004407_.tmp.dll
c:\windows\system32\_004408_.tmp.dll
c:\windows\system32\_004409_.tmp.dll
c:\windows\system32\_004410_.tmp.dll
c:\windows\system32\_004413_.tmp.dll
c:\windows\system32\_004414_.tmp.dll
c:\windows\system32\_004415_.tmp.dll
c:\windows\system32\_004417_.tmp.dll
c:\windows\system32\_004418_.tmp.dll
c:\windows\system32\_004421_.tmp.dll
c:\windows\system32\_004422_.tmp.dll
c:\windows\system32\_004427_.tmp.dll
c:\windows\system32\_004429_.tmp.dll
c:\windows\system32\_004432_.tmp.dll
c:\windows\system32\_004434_.tmp.dll
c:\windows\system32\_004435_.tmp.dll
c:\windows\system32\_004436_.tmp.dll
c:\windows\system32\_004437_.tmp.dll
c:\windows\system32\_004440_.tmp.dll
c:\windows\system32\_004441_.tmp.dll
c:\windows\system32\_004442_.tmp.dll
c:\windows\system32\_004443_.tmp.dll
c:\windows\system32\_004444_.tmp.dll
c:\windows\system32\_004449_.tmp.dll
c:\windows\system32\_004451_.tmp.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-12-05 do 2011-01-05 )))))))))))))))))))))))))))))))
.

2011-01-05 11:41 . 2011-01-05 11:41 -------- d-----w- c:\documents and settings\Eva\Local Settings\Data aplikací\GHISLER
2011-01-05 09:42 . 2011-01-05 09:43 -------- d-----w- C:\rsit
2011-01-03 22:11 . 2011-01-03 22:11 -------- d-----w- c:\documents and settings\NetworkService\Nabídka Start
2011-01-03 21:23 . 2011-01-03 21:23 -------- d-----w- c:\documents and settings\LocalService\Nabídka Start
2011-01-03 21:08 . 2011-01-03 21:08 -------- d-----w- C:\totalcmd
2011-01-03 21:08 . 2011-01-03 21:08 -------- d-----w- c:\documents and settings\Eva\Data aplikací\GHISLER
2011-01-03 21:08 . 2010-07-07 06:55 545 ----a-w- c:\windows\UC.PIF
2011-01-03 21:08 . 2010-07-07 06:55 545 ----a-w- c:\windows\RAR.PIF
2011-01-03 21:08 . 2010-07-07 06:55 545 ----a-w- c:\windows\PKZIP.PIF
2011-01-03 21:08 . 2010-07-07 06:55 545 ----a-w- c:\windows\PKUNZIP.PIF
2011-01-03 21:08 . 2010-07-07 06:55 545 ----a-w- c:\windows\NOCLOSE.PIF
2011-01-03 21:08 . 2010-07-07 06:55 545 ----a-w- c:\windows\LHA.PIF
2011-01-03 21:08 . 2010-07-07 06:55 545 ----a-w- c:\windows\ARJ.PIF
2011-01-03 20:55 . 2011-01-03 20:55 -------- d-----w- c:\documents and settings\Eva\Data aplikací\Registry Mechanic
2011-01-03 20:51 . 2011-01-03 22:30 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PC Tools
2011-01-03 20:50 . 2011-01-03 22:30 -------- d---a-w- c:\documents and settings\All Users\Data aplikací\TEMP
2011-01-03 20:03 . 2011-01-03 20:07 -------- d-----w- c:\windows\system32\drivers\UMDF
2011-01-03 19:53 . 2011-01-03 19:53 -------- d-----w- c:\windows\system32\LogFiles
2011-01-03 19:25 . 2001-10-24 11:24 38912 -c--a-w- c:\windows\system32\dllcache\EXCH_ntfsdrv.dll
2011-01-03 19:24 . 2008-04-14 06:52 268288 -c--a-w- c:\windows\system32\dllcache\fxssvc.exe
2011-01-03 19:23 . 2008-04-14 06:51 68608 -c--a-w- c:\windows\system32\dllcache\isatq.dll
2011-01-03 19:21 . 2001-10-25 12:00 16384 -c--a-w- c:\windows\system32\dllcache\isignup.exe
2011-01-03 19:21 . 2008-04-14 06:51 7168 -c--a-w- c:\windows\system32\dllcache\bitsprx4.dll
2011-01-03 19:18 . 2008-04-14 06:52 53248 -c--a-w- c:\windows\system32\dllcache\tsgqec.dll
2011-01-03 19:18 . 2008-04-14 06:52 53248 ----a-w- c:\windows\system32\tsgqec.dll
2011-01-03 19:18 . 2008-04-14 06:51 290304 -c--a-w- c:\windows\system32\dllcache\rhttpaa.dll
2011-01-03 19:18 . 2008-04-14 06:51 290304 ----a-w- c:\windows\system32\rhttpaa.dll
2011-01-03 19:18 . 2008-04-14 06:51 136192 -c--a-w- c:\windows\system32\dllcache\aaclient.dll
2011-01-03 19:18 . 2008-04-14 06:51 136192 ----a-w- c:\windows\system32\aaclient.dll
2011-01-03 19:11 . 2001-10-25 12:00 13312 -c--a-w- c:\windows\system32\dllcache\irclass.dll
2011-01-03 19:11 . 2001-10-25 12:00 13312 ----a-w- c:\windows\system32\irclass.dll
2011-01-03 19:11 . 2001-10-25 12:00 24661 -c--a-w- c:\windows\system32\dllcache\spxcoins.dll
2011-01-03 19:11 . 2001-10-25 12:00 24661 ----a-w- c:\windows\system32\spxcoins.dll
2011-01-03 19:10 . 2008-04-14 08:52 16825 ----a-r- c:\windows\SET47.tmp
2011-01-03 19:10 . 2008-04-14 08:52 1088840 ----a-r- c:\windows\SET3B.tmp
2011-01-03 19:10 . 2008-04-14 08:59 1246067 ----a-r- c:\windows\SET3A.tmp
2010-12-19 14:28 . 2010-12-19 14:29 -------- d-----w- C:\P
2010-12-19 12:32 . 2010-12-19 12:32 -------- d-----w- c:\documents and settings\Eva\DoctorWeb
2010-12-19 12:12 . 2006-12-28 23:31 19569 ----a-w- c:\windows\002750_.tmp
2010-12-19 12:10 . 2008-04-13 23:06 46464 ----a-w- c:\windows\system32\drivers\gagp30kx.sys
2010-12-19 12:10 . 2008-04-13 23:06 44672 ----a-w- c:\windows\system32\drivers\uagp35.sys
2010-12-19 12:10 . 2008-04-14 06:51 409088 -c--a-w- c:\windows\system32\dllcache\qmgr.dll
2010-12-19 12:10 . 2008-04-14 06:51 409088 ----a-w- c:\windows\system32\qmgr.dll
2010-12-19 12:10 . 2008-04-13 22:03 129792 -c--a-w- c:\windows\system32\dllcache\fltmgr.sys
2010-12-19 12:10 . 2008-04-13 22:03 129792 ----a-w- c:\windows\system32\drivers\fltMgr.sys
2010-12-19 12:00 . 2010-12-19 12:01 -------- d-----w- C:\2f7c204f00c302a11fe3f7ebb96256d5
2010-12-19 11:59 . 2004-08-18 14:00 221184 ----a-w- c:\windows\system32\wmpns.dll
2010-12-19 11:41 . 2010-12-19 11:11 53504664 ----a-w- C:\kvu9dj82.exe
2010-12-19 11:40 . 2010-12-19 10:48 322523176 ----a-w- C:\Microsoft-Windows-XP-SP3-CZ.exe
2010-12-19 11:36 . 2011-01-03 19:18 -------- d-----w- c:\windows\system32\cs-cz
2010-12-19 11:36 . 2011-01-03 20:08 -------- d-----w- c:\windows\l2schemas
2010-12-19 11:36 . 2011-01-03 20:06 -------- d-----w- c:\windows\system32\cs
2010-12-19 11:36 . 2010-12-19 12:25 -------- d-----w- c:\windows\system32\bits
2010-12-19 11:28 . 2006-12-28 23:31 19569 ----a-w- c:\windows\002743_.tmp
2010-12-19 11:28 . 2007-08-10 19:43 26488 ----a-w- c:\windows\system32\spupdsvc.exe
2010-12-19 11:22 . 2004-08-18 12:00 71040 ------w- c:\windows\system32\drivers\_004342_.tmp.dll
2010-12-19 11:17 . 2010-12-19 12:01 -------- d-----w- c:\windows\system32\CatRoot_bak
2010-12-19 11:16 . 2010-12-19 11:17 -------- d-----w- C:\cda753943f4dc610438b7909734f
2010-12-19 11:15 . 2010-12-19 11:15 -------- d-----w- c:\documents and settings\Eva\Local Settings\Data aplikací\Western Digital

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.

------- Sigcheck -------

[-] 2008-08-08 . 1E603EA2A3FDBAE9E5B88A8CB3C03124 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VTTimer"="VTTimer.exe" [2004-01-15 49152]
"VTTrayp"="VTtrayp.exe" [2004-01-30 135168]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 83608]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-09-07 2838912]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-21 35760]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-2-17 65588]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [7.4.2010 8:33 165584]
R2 602XML Updater;602Updater;c:\program files\Common Files\soft602\602updsvc\602updsvc.exe [14.4.2010 10:28 73728]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [7.4.2010 8:33 17744]
S0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys --> c:\windows\system32\drivers\TfFsMon.sys [?]
S0 TFSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys --> c:\windows\system32\drivers\TfSysMon.sys [?]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [7.4.2010 8:33 133104]
S3 TfNetMon;TfNetMon;\??\c:\windows\system32\drivers\TfNetMon.sys --> c:\windows\system32\drivers\TfNetMon.sys [?]
.
Obsah adresáře 'Naplánované úlohy'

2010-12-19 c:\windows\Tasks\$~$Sys0$.job
- c:\windows\System32\SchedSvc.dll [2005-06-01 06:51]

2010-12-19 c:\windows\Tasks\$~$Sys1$.job
- c:\windows\System32\SchedSvc.dll [2005-06-01 06:51]

2010-10-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cb743f88a1b4c0.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-07 07:33]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.mojebanka.cz/
FF - ProfilePath - c:\documents and settings\Eva\Data aplikací\Mozilla\Firefox\Profiles\438vmrlf.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
FF - Ext: 602XML Filler: xmlfiller@software602.cz - c:\program files\Mozilla Firefox\extensions\xmlfiller@software602.cz
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - %profile%\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKLM-Run-Cmaudio - cmicnfg.cpl
AddRemove-PREMIER system 12.3 (661) - c:\premier\SETUP\setup.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-05 15:12
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
Celkový čas: 2011-01-05 15:14:27
ComboFix-quarantined-files.txt 2011-01-05 14:14

Před spuštěním: Volných bajtů: 30 266 953 728
Po spuštění: Volných bajtů: 30 198 423 552

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

Current=1 Default=1 Failed=0 LastKnownGood=5 Sets=1,2,3,4,5
- - End Of File - - 0BDB25381EDAC5732D689E6EE6965BCF

[motji]

Změnilo se něco?

Otestujte na www.virustotal.com
C:\kvu9dj82.exe


tuto složku nzáte?
C:\P