Žádost o kontrolu LOGu.

Zpráva

iconek · #1 Příspěvek od **iconek** » 23 led 2011 23:50

Procesor ATHLON ll X2,RAM 2 Gb,prkno Asorck M3N 78D,grafika NV 9800 gt,OS WIN 7 Ultimate..Připojení 5Ghz klientem od poskytovatele nataženo do routru a z něj do 2 PC resp.1 PC a 1 notebook který je v provozu tak 5 hodin týdně.
Asi před dvěma dny se docela citelně spomalilo připojení.Myslel jsem že je problém u poskytovatele (tisice.net).U něj je vše v pořádku.Dneska po téměř marných pokusech jsem zjistil že mám problém se vůbec spojit s routerem, abych jej zkusil restartovat.Předpokládám proto že bude problém v mém počítači.
Mohli byste hodit očko na můj LOG?
Počítač před dvěma hodinama kontrolován SAS a antivirem AVAST bez nákazy.Jo jedna byla, Avast mi našel virózu v ovladači externí zvukové karty (Xfi audio).
Posílám ten LOG.Díky za pomoc.Přeji hezký večer.Tomáš

Logfile of random's system information tool 1.08 (written by random/random)
Run by Tomáš at 2011-01-23 23:30:51
Microsoft Windows 7 Ultimate
System drive C: has 9 GB (23%) free of 38 GB
Total RAM: 2047 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:31:04, on 23.1.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Creative\Sound Blaster X-Fi Surround 5.1\Volume Panel\VolPanlu.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Windows\V0470Mon.exe
C:\Program Files\NetWorx\networx.exe
C:\Program Files\Creative\ShareDLL\CADI\NotiMan.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\Real\RealPlayer\Update\realsched.exe
C:\Program Files\EXPERTool\TBPANEL.exe
C:\Program Files\WinFast\WFDTV\WFWIZ.exe
C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe
C:\Program Files\Common Files\Nokia\NoA\nokiaaserver.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\explorer.exe
C:\Users\Tomáš\Downloads\RSIT.exe
C:\Program Files\trend micro\Tomáš.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: &NetWorx Desk Band - {FEEA54B4-D80F-41C7-87B9-DC08E6D3255F} - C:\PROGRA~1\NetWorx\deskband.dll
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [P17RunE] RunDll32 P17RunE.dll,RunDLLEntry
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi Surround 5.1\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [Module Loader] C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe -StartUpRun
O4 - HKLM\..\Run: [Creative SB Monitoring Utility] RunDll32 sbavmon.dll,SBAVMonitor
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [V0470Mon.exe] C:\Windows\V0470Mon.exe
O4 - HKLM\..\Run: [NetWorx] "C:\Program Files\NetWorx\networx.exe" /auto
O4 - HKLM\..\Run: [XFMC] C:\Users\Tomáš\Downloads\xfi mode\XFiMode.exe /START_ENTERTAINMENT /START_SPEAKERS
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A
O4 - HKCU\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFDTV\WFWIZ.exe
O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\Microsoft Office\Office12\REFIEBAR.DLL
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - FirebirdSQL Project - C:\Program Files\Firebird\Firebird_2_0\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - FirebirdSQL Project - C:\Program Files\Firebird\Firebird_2_0\bin\fbserver.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InterBase Guardian (InterBaseGuardian) - Unknown owner - C:\Program Files\Borland\InterBase\bin\ibguard.exe (file missing)
O23 - Service: InterBase Server (InterBaseServer) - Unknown owner - C:\Program Files\Borland\InterBase\bin\ibserver.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 8107 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-11-22 1242504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-09-15 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{FEEA54B4-D80F-41C7-87B9-DC08E6D3255F} - &NetWorx Desk Band - C:\PROGRA~1\NetWorx\deskband.dll [2010-11-10 950784]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2011-01-13 3396624]
"P17RunE"=RunDll32 P17RunE.dll,RunDLLEntry []
"VolPanel"=C:\Program Files\Creative\Sound Blaster X-Fi Surround 5.1\Volume Panel\VolPanlu.exe [2008-11-24 237693]
"Module Loader"=C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe [2007-07-23 57344]
"Creative SB Monitoring Utility"=RunDll32 sbavmon.dll,SBAVMonitor []
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"WinFastDTV"=C:\Program Files\WinFast\WFDTV\DTVSchdl.exe [2010-06-09 101888]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27 207424]
"V0470Mon.exe"=C:\Windows\V0470Mon.exe [2007-06-04 32768]
"NetWorx"=C:\Program Files\NetWorx\networx.exe [2010-11-10 3042816]
"XFMC"=C:\Users\Tomáš\Downloads\xfi mode\XFiMode.exe /START_ENTERTAINMENT /START_SPEAKERS []
"NokiaMServer"=C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
"TkBellExe"=C:\Program Files\Real\RealPlayer\update\realsched.exe [2010-12-29 274608]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"GAINWARD"=C:\Program Files\EXPERTool\TBPanel.exe [2009-10-05 2174976]
""= []
"WinFast Schedule"=C:\Program Files\WinFast\WFDTV\WFWIZ.exe [2010-06-09 2920448]
"ASRockOCTuner"= []
"NokiaOviSuite2"=C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2010-09-02 672632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HTC Sync Loader]
C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2010-10-28 294912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2010-12-14 2424560]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Real\RealPlayer\update\realsched.exe [2010-12-29 274608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirtualCloneDrive]
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2005-04-12 45056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Tomáš^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
C:\PROGRA~1\OpenOffice.org 3\program\quickstart.exe [2010-06-07 1195520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-01-23 23:30:52 ----D---- C:\Program Files\trend micro
2011-01-23 23:30:51 ----D---- C:\rsit
2011-01-22 18:44:05 ----D---- C:\Program Files\rajce
2011-01-17 00:16:18 ----A---- C:\Windows\system32\XAudio2_5.dll
2011-01-17 00:16:18 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-01-17 00:16:18 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-01-17 00:16:16 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-01-17 00:16:16 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-01-17 00:16:16 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-01-17 00:16:15 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-01-17 00:16:14 ----A---- C:\Windows\system32\d3dx10_41.dll
2011-01-17 00:16:14 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2011-01-17 00:16:12 ----A---- C:\Windows\system32\XAudio2_4.dll
2011-01-17 00:16:12 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2011-01-17 00:16:12 ----A---- C:\Windows\system32\D3DX9_41.dll
2011-01-17 00:16:11 ----A---- C:\Windows\system32\xactengine3_4.dll
2011-01-17 00:16:11 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2011-01-17 00:16:10 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-01-17 00:16:10 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-01-17 00:16:09 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-01-17 00:16:09 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-01-17 00:16:09 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-01-17 00:16:09 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-01-17 00:16:09 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-01-17 00:16:09 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-01-17 00:16:09 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-01-17 00:16:08 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-01-17 00:16:08 ----A---- C:\Windows\system32\d3dx10_39.dll
2011-01-17 00:16:08 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2011-01-17 00:16:07 ----A---- C:\Windows\system32\XAudio2_1.dll
2011-01-17 00:16:07 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2011-01-17 00:16:07 ----A---- C:\Windows\system32\xactengine3_1.dll
2011-01-17 00:16:07 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2011-01-17 00:16:07 ----A---- C:\Windows\system32\D3DX9_39.dll
2011-01-17 00:16:06 ----A---- C:\Windows\system32\XAudio2_0.dll
2011-01-17 00:16:06 ----A---- C:\Windows\system32\D3DX9_38.dll
2011-01-17 00:16:06 ----A---- C:\Windows\system32\d3dx10_38.dll
2011-01-17 00:16:06 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2011-01-17 00:16:05 ----A---- C:\Windows\system32\xactengine3_0.dll
2011-01-17 00:16:05 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2011-01-17 00:16:05 ----A---- C:\Windows\system32\d3dx10_37.dll
2011-01-17 00:16:05 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2011-01-17 00:16:04 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-01-17 00:16:04 ----A---- C:\Windows\system32\D3DX9_37.dll
2011-01-17 00:16:03 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-01-17 00:16:03 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-01-17 00:16:02 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-01-17 00:16:02 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-01-17 00:16:01 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-01-17 00:16:01 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-01-17 00:16:01 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-01-17 00:16:00 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-01-17 00:16:00 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-01-17 00:16:00 ----A---- C:\Windows\system32\d3dx10_34.dll
2011-01-17 00:16:00 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2011-01-17 00:15:59 ----A---- C:\Windows\system32\xinput1_3.dll
2011-01-17 00:15:59 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-01-17 00:15:59 ----A---- C:\Windows\system32\d3dx9_34.dll
2011-01-17 00:15:58 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-01-17 00:15:58 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-01-17 00:15:58 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-01-17 00:15:57 ----A---- C:\Windows\system32\xactengine2_6.dll
2011-01-17 00:15:57 ----A---- C:\Windows\system32\xactengine2_5.dll
2011-01-17 00:15:57 ----A---- C:\Windows\system32\d3dx10.dll
2011-01-17 00:15:56 ----A---- C:\Windows\system32\xactengine2_4.dll
2011-01-17 00:15:56 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-01-17 00:15:56 ----A---- C:\Windows\system32\d3dx9_32.dll
2011-01-17 00:15:56 ----A---- C:\Windows\system32\d3dx9_31.dll
2011-01-17 00:15:55 ----A---- C:\Windows\system32\xinput1_2.dll
2011-01-17 00:15:55 ----A---- C:\Windows\system32\xinput1_1.dll
2011-01-17 00:15:55 ----A---- C:\Windows\system32\xactengine2_3.dll
2011-01-17 00:15:55 ----A---- C:\Windows\system32\xactengine2_2.dll
2011-01-17 00:15:55 ----A---- C:\Windows\system32\xactengine2_1.dll
2011-01-17 00:15:46 ----A---- C:\Windows\system32\d3dx9_30.dll
2011-01-17 00:15:45 ----A---- C:\Windows\system32\xactengine2_0.dll
2011-01-17 00:15:45 ----A---- C:\Windows\system32\x3daudio1_0.dll
2011-01-17 00:15:45 ----A---- C:\Windows\system32\d3dx9_29.dll
2011-01-17 00:15:44 ----A---- C:\Windows\system32\d3dx9_28.dll
2011-01-17 00:15:44 ----A---- C:\Windows\system32\d3dx9_27.dll
2011-01-17 00:15:43 ----A---- C:\Windows\system32\d3dx9_26.dll
2011-01-17 00:15:42 ----A---- C:\Windows\system32\d3dx9_25.dll
2011-01-17 00:15:42 ----A---- C:\Windows\system32\d3dx9_24.dll
2011-01-14 12:45:57 ----A---- C:\Windows\system32\drivers\PnkBstrK.sys
2011-01-14 12:45:49 ----A---- C:\Windows\system32\PnkBstrB.exe
2011-01-14 12:45:33 ----A---- C:\Windows\system32\PnkBstrA.exe
2011-01-14 12:14:16 ----D---- C:\Program Files\GamePark
2011-01-14 11:26:05 ----SD---- C:\Program Files\HLSW
2011-01-14 11:26:05 ----D---- C:\Users\Tomáš\AppData\Roaming\HLSW
2011-01-12 11:33:48 ----A---- C:\Windows\system32\nvconrm.dll
2011-01-12 11:33:48 ----A---- C:\Windows\system32\fdco2.dll
2011-01-12 11:33:48 ----A---- C:\Windows\system32\drivers\nvmf6232.sys
2011-01-12 11:33:48 ----A---- C:\Windows\system32\DPInst.exe
2011-01-12 10:58:28 ----D---- C:\Windows\pss
2011-01-12 10:53:44 ----D---- C:\Program Files\ASRock Utility
2011-01-11 11:26:02 ----D---- C:\Program Files\Sureshot
2011-01-11 11:25:53 ----A---- C:\Windows\IsUninst.exe
2011-01-05 10:20:58 ----D---- C:\Users\Tomáš\AppData\Roaming\SUPERAntiSpyware.com
2011-01-05 10:20:58 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2011-01-05 10:20:54 ----D---- C:\Program Files\SUPERAntiSpyware
2011-01-04 22:37:28 ----D---- C:\Program Files\AMD
2011-01-03 16:08:33 ----D---- C:\Windows\W7SBC
2011-01-03 16:08:33 ----A---- C:\Windows\explorer_edit_w7sbc.exe
2011-01-03 16:08:33 ----A---- C:\Windows\explorer_backup_w7sbc.exe
2011-01-01 16:22:04 ----A---- C:\Windows\game.ini
2011-01-01 15:51:01 ----SHD---- C:\Windows\ftpcache
2011-01-01 15:50:10 ----A---- C:\Windows\CoD.INI
2010-12-29 13:42:52 ----D---- C:\Program Files\Common Files\xing shared
2010-12-29 13:42:49 ----A---- C:\Windows\system32\rmoc3260.dll
2010-12-29 13:42:47 ----A---- C:\Windows\system32\pndx5032.dll
2010-12-29 13:42:47 ----A---- C:\Windows\system32\pndx5016.dll
2010-12-29 13:42:46 ----A---- C:\Windows\system32\pncrt.dll
2010-12-29 13:42:33 ----D---- C:\ProgramData\Real
2010-12-29 13:42:33 ----D---- C:\Program Files\Real
2010-12-29 13:42:32 ----D---- C:\Users\Tomáš\AppData\Roaming\Real
2010-12-29 12:31:52 ----D---- C:\ProgramData\Apple Computer
2010-12-29 12:31:52 ----D---- C:\Program Files\QuickTime
2010-12-29 12:31:22 ----D---- C:\Program Files\Common Files\Apple
2010-12-29 12:31:13 ----D---- C:\ProgramData\Apple
2010-12-29 12:31:13 ----D---- C:\Program Files\Apple Software Update
2010-12-28 15:08:24 ----D---- C:\Users\Tomáš\AppData\Roaming\NVIDIA

======List of files/folders modified in the last 1 months======

2011-01-23 23:30:59 ----D---- C:\Windows\Temp
2011-01-23 23:30:52 ----RD---- C:\Program Files
2011-01-23 13:22:51 ----A---- C:\Windows\system32\DTVWizard_LOG.txt
2011-01-23 13:06:20 ----A---- C:\Windows\Brownie.ini
2011-01-22 18:18:35 ----D---- C:\Windows\system32\NDF
2011-01-22 16:29:40 ----D---- C:\Users\Tomáš\AppData\Roaming\Skype
2011-01-22 16:06:50 ----D---- C:\Users\Tomáš\AppData\Roaming\skypePM
2011-01-22 11:46:52 ----D---- C:\Windows\System32
2011-01-22 11:46:52 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-01-21 09:49:04 ----D---- C:\Windows
2011-01-21 09:48:31 ----D---- C:\Windows\Minidump
2011-01-20 19:28:58 ----SHD---- C:\System Volume Information
2011-01-19 13:48:18 ----D---- C:\Windows\system32\Tasks
2011-01-18 15:16:35 ----SHD---- C:\Windows\Installer
2011-01-18 15:16:23 ----D---- C:\Program Files\Google
2011-01-17 00:15:55 ----RSD---- C:\Windows\assembly
2011-01-16 16:58:34 ----HD---- C:\Program Files\InstallShield Installation Information
2011-01-16 13:47:57 ----D---- C:\Windows\Prefetch
2011-01-14 19:23:52 ----A---- C:\Windows\ntbtlog.txt
2011-01-14 19:17:49 ----SD---- C:\ProgramData\Microsoft
2011-01-14 12:45:57 ----D---- C:\Windows\system32\drivers
2011-01-14 12:45:33 ----D---- C:\Windows\system32\LogFiles
2011-01-14 11:36:31 ----D---- C:\Windows\system32\config
2011-01-14 11:26:25 ----D---- C:\Windows\winsxs
2011-01-13 11:27:35 ----D---- C:\ProgramData\NVIDIA
2011-01-13 09:47:32 ----A---- C:\Windows\system32\aswBoot.exe
2011-01-12 11:40:39 ----D---- C:\Windows\inf
2011-01-12 11:40:38 ----D---- C:\Windows\system32\DriverStore
2011-01-12 11:40:38 ----D---- C:\Windows\system32\catroot
2011-01-12 11:34:51 ----D---- C:\Program Files\NVIDIA Corporation
2011-01-08 02:08:37 ----D---- C:\Windows\system32\catroot2
2011-01-07 09:51:00 ----D---- C:\Windows\Downloaded Program Files
2011-01-05 10:20:58 ----HD---- C:\ProgramData
2011-01-04 22:39:55 ----D---- C:\Windows\system32\appmgmt
2011-01-04 18:08:49 ----A---- C:\Windows\win.ini
2010-12-29 13:42:52 ----D---- C:\Program Files\Common Files
2010-12-29 13:42:45 ----A---- C:\Windows\system32\msvcr71.dll
2010-12-29 13:42:45 ----A---- C:\Windows\system32\msvcp71.dll
2010-12-29 12:32:09 ----D---- C:\Program Files\Internet Explorer
2010-12-28 17:12:23 ----D---- C:\Program Files\YouTube Video Downloader

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvstor32;nvstor32; C:\Windows\system32\DRIVERS\nvstor32.sys [2009-08-04 213024]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2004-12-13 22656]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-01-13 23632]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-01-13 294608]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-01-13 47440]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 PQNTDrv;PQNTDrv; C:\Windows\system32\drivers\PQNTDrv.sys [2002-09-16 4228]
R1 PSSDK42;PSSDK42; \??\C:\Windows\system32\Drivers\pssdk42.sys [2010-12-21 38976]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-01-13 17744]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-01-13 51280]
R2 cpuz134;cpuz134; \??\C:\Windows\system32\drivers\cpuz134_x32.sys [2010-07-09 20328]
R2 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2005-04-21 10624]
R2 TBPanel;TBPanel; C:\Windows\system32\drivers\TBPanel.sys [2007-03-16 12256]
R3 ElbyDelay;ElbyDelay; C:\Windows\System32\Drivers\ElbyDelay.sys [2005-04-12 4608]
R3 ksaud;Creative USB Audio Driver; C:\Windows\system32\drivers\ksaud.sys [2009-08-05 886912]
R3 NVNET;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmf6232.sys [2009-07-30 287392]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2009-06-28 17920]
R3 VF0470Vid;Live! Cam Notebook (VF0470); C:\Windows\system32\DRIVERS\V0470Vid.sys [2007-05-09 146720]
R3 WFLR6654;WinFast DTV1800 H (XC3028); C:\Windows\system32\drivers\wfeaglxt.sys [2009-10-21 433920]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 AsrCDDrv;AsrCDDrv; \??\C:\Windows\system32\Drivers\AsrCDDrv.sys []
S3 AsrOcDrv;AsrOcDrv; \??\C:\Windows\system32\Drivers\AsrOcDrv.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 Cardex;Cardex; \??\C:\Windows\system32\drivers\TBPANEL.SYS [2007-03-16 12256]
S3 HTCAND32;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2010-06-23 23040]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-13 347264]
S3 P17;SB Live! 24-bit; C:\Windows\system32\drivers\P17.sys [2009-04-21 1147392]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-14 15872]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-01-13 40384]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files\Firebird\Firebird_2_0\bin\fbguard.exe [2007-09-03 81920]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-07-09 129640]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [2010-09-16 80896]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2011-01-14 75064]
R2 PnkBstrB;PnkBstrB; C:\Windows\system32\PnkBstrB.exe [2011-01-14 214520]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2004-12-13 49152]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files\Firebird\Firebird_2_0\bin\fbserver.exe [2007-09-03 2002944]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-12-23 136176]
S2 InterBaseGuardian;InterBase Guardian; C:\Program Files\Borland\InterBase\bin\ibguard.exe []
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-09-25 79360]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-10-30 79360]
S3 InterBaseServer;InterBase Server; C:\Program Files\Borland\InterBase\bin\ibserver.exe []
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]

-----------------EOF-----------------

Ještě LOG z HJT:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:55:57, on 23.1.2011
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Creative\Sound Blaster X-Fi Surround 5.1\Volume Panel\VolPanlu.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Windows\V0470Mon.exe
C:\Program Files\NetWorx\networx.exe
C:\Program Files\Creative\ShareDLL\CADI\NotiMan.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\Real\RealPlayer\Update\realsched.exe
C:\Program Files\EXPERTool\TBPANEL.exe
C:\Program Files\WinFast\WFDTV\WFWIZ.exe
C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe
C:\Program Files\Common Files\Nokia\NoA\nokiaaserver.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Users\Tomáš\Downloads\hijackthis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: &NetWorx Desk Band - {FEEA54B4-D80F-41C7-87B9-DC08E6D3255F} - C:\PROGRA~1\NetWorx\deskband.dll
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [P17RunE] RunDll32 P17RunE.dll,RunDLLEntry
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi Surround 5.1\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [Module Loader] C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe -StartUpRun
O4 - HKLM\..\Run: [Creative SB Monitoring Utility] RunDll32 sbavmon.dll,SBAVMonitor
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [V0470Mon.exe] C:\Windows\V0470Mon.exe
O4 - HKLM\..\Run: [NetWorx] "C:\Program Files\NetWorx\networx.exe" /auto
O4 - HKLM\..\Run: [XFMC] C:\Users\Tomáš\Downloads\xfi mode\XFiMode.exe /START_ENTERTAINMENT /START_SPEAKERS
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A
O4 - HKCU\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFDTV\WFWIZ.exe
O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\Microsoft Office\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - FirebirdSQL Project - C:\Program Files\Firebird\Firebird_2_0\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - FirebirdSQL Project - C:\Program Files\Firebird\Firebird_2_0\bin\fbserver.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InterBase Guardian (InterBaseGuardian) - Unknown owner - C:\Program Files\Borland\InterBase\bin\ibguard.exe (file missing)
O23 - Service: InterBase Server (InterBaseServer) - Unknown owner - C:\Program Files\Borland\InterBase\bin\ibserver.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 8076 bytes

#2 Příspěvek od **Roli** » 24 led 2011 21:51

Zdravím, v první řadě restartuj modem (router), na minutku ho odpoj od elektřiny.

V HJT fixni tyhle zbytečnosti :

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray

Fix znamená že spustíš HJT Obrázek

jako admin

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.

Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.

iconek · #3 Příspěvek od **iconek** » 25 led 2011 08:38

Tak jsem provedl co jsi mi poradil a hážu tady ten log.Akorát ten TKBel.exe jsem nenašel.Opingoval jsem router a O.K.4 pakety odeslány,4 přijaty,odezva 1ms.

Zde log:
ComboFix 11-01-24.02 - Tomáš 25.01.2011 8:27.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.2047.1275 [GMT 1:00]
Spuštěný z: c:\users\Tomáš\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\Data
c:\windows\system32\Dvbpws.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-12-25 do 2011-01-25 )))))))))))))))))))))))))))))))
.

2011-01-24 21:40 . 2011-01-24 21:40 -------- d-----w- c:\program files\Virus Removal Tool1
2011-01-24 21:40 . 2009-10-22 11:54 37392 ----a-w- c:\windows\system32\drivers\02781062.sys
2011-01-24 21:40 . 2009-10-09 21:31 311312 ----a-w- c:\windows\system32\drivers\0278106.sys
2011-01-24 21:40 . 2009-09-25 15:59 128016 ----a-w- c:\windows\system32\drivers\02781061.sys
2011-01-24 21:36 . 2011-01-25 07:20 -------- d-----w- c:\programdata\Kaspersky Lab
2011-01-24 21:35 . 2009-10-22 11:54 37392 ----a-w- c:\windows\system32\drivers\39484972.sys
2011-01-24 21:35 . 2009-10-09 21:31 311312 ----a-w- c:\windows\system32\drivers\3948497.sys
2011-01-24 21:35 . 2009-09-25 15:59 128016 ----a-w- c:\windows\system32\drivers\39484971.sys
2011-01-24 20:36 . 2011-01-24 20:36 -------- d-----w- c:\users\Tomáš\AppData\Roaming\Malwarebytes
2011-01-24 20:36 . 2011-01-24 20:36 -------- d-----w- c:\programdata\Malwarebytes
2011-01-24 20:36 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-24 20:36 . 2011-01-24 20:36 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-01-24 20:36 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-01-24 10:48 . 2011-01-24 10:49 -------- d-----w- c:\program files\CrystalDiskInfo
2011-01-23 22:30 . 2011-01-23 22:31 -------- d-----w- c:\program files\trend micro
2011-01-23 22:30 . 2011-01-23 22:31 -------- d-----w- C:\rsit
2011-01-22 17:44 . 2011-01-23 13:18 -------- d-----w- c:\program files\rajce
2011-01-16 23:15 . 2007-05-16 15:45 3497832 ----a-w- c:\windows\system32\d3dx9_34.dll
2011-01-14 11:45 . 2011-01-14 15:48 137464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-01-14 11:45 . 2011-01-14 15:48 214520 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-01-14 11:45 . 2011-01-14 15:48 214520 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-01-14 11:45 . 2011-01-14 11:45 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-01-14 11:45 . 2011-01-14 11:45 -------- d-----w- c:\users\Tomáš\AppData\Local\PunkBuster
2011-01-14 11:14 . 2011-01-14 11:14 -------- d-----w- c:\program files\GamePark
2011-01-14 10:26 . 2011-01-14 10:51 -------- d-----w- c:\users\Tomáš\AppData\Roaming\HLSW
2011-01-14 10:26 . 2011-01-14 10:26 -------- d-s---w- c:\program files\HLSW
2011-01-12 10:33 . 2009-07-30 16:12 287392 ----a-w- c:\windows\system32\drivers\nvmf6232.sys
2011-01-12 10:33 . 2009-07-30 15:48 898048 ----a-w- c:\windows\system32\fdco2.dll
2011-01-12 10:33 . 2009-07-30 09:29 521128 ----a-w- c:\windows\system32\DPInst.exe
2011-01-12 10:33 . 2009-07-29 23:28 155648 ----a-w- c:\windows\system32\nvconrm.dll
2011-01-12 09:53 . 2011-01-12 09:53 -------- d-----w- c:\program files\ASRock Utility
2011-01-11 10:26 . 2011-01-11 10:26 -------- d-----w- c:\program files\Sureshot
2011-01-11 10:26 . 2002-10-25 01:15 540672 ----a-w- c:\windows\Bluescreen.scr
2011-01-11 10:25 . 1997-11-19 15:49 303616 ----a-w- c:\windows\IsUninst.exe
2011-01-06 17:12 . 2011-01-06 17:12 -------- d-----w- c:\users\Klárka\AppData\Local\Nokia
2011-01-06 17:11 . 2011-01-06 17:11 -------- d-----w- c:\users\Klárka\AppData\Roaming\SUPERAntiSpyware.com
2011-01-05 09:20 . 2011-01-05 09:20 -------- d-----w- c:\users\Tomáš\AppData\Roaming\SUPERAntiSpyware.com
2011-01-05 09:20 . 2011-01-05 09:20 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2011-01-05 09:20 . 2011-01-05 09:21 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-01-04 21:37 . 2011-01-04 21:37 -------- d-----w- c:\program files\AMD
2011-01-04 17:11 . 2011-01-04 17:11 -------- d-----w- c:\users\Klárka\AppData\Roaming\OpenOffice.org
2011-01-04 17:10 . 2011-01-04 17:10 -------- d-----w- c:\users\Klárka\AppData\Roaming\Real
2011-01-03 15:08 . 2011-01-03 15:08 -------- d-----w- c:\windows\W7SBC
2011-01-03 15:08 . 2009-07-14 01:14 2613248 ----a-w- c:\windows\explorer_edit_w7sbc.exe
2011-01-03 15:08 . 2009-07-14 01:14 2613248 ----a-w- c:\windows\explorer_backup_w7sbc.exe
2011-01-01 14:51 . 2011-01-01 14:51 -------- d-sh--w- c:\windows\ftpcache
2010-12-29 12:43 . 2010-12-29 12:43 11776 ----a-w- c:\program files\Mozilla Firefox\plugins\nprjplug.dll
2010-12-29 12:42 . 2010-12-29 12:42 -------- d-----w- c:\program files\Common Files\xing shared
2010-12-29 12:42 . 2010-12-29 12:42 151776 ----a-w- c:\program files\Mozilla Firefox\plugins\nppl3260.dll
2010-12-29 12:42 . 2010-12-29 12:42 100352 ----a-w- c:\program files\Mozilla Firefox\plugins\nprpjplug.dll
2010-12-29 12:42 . 2010-12-29 12:42 -------- d-----w- c:\program files\Real
2010-12-29 12:42 . 2010-12-29 12:57 -------- d-----w- c:\users\Tomáš\AppData\Roaming\Real
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\programdata\Apple Computer
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\program files\Common Files\Apple
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\users\Tomáš\AppData\Local\Apple
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\program files\Apple Software Update
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\programdata\Apple
2010-12-28 14:08 . 2010-12-28 14:08 -------- d-----w- c:\users\Tomáš\AppData\Roaming\NVIDIA

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-13 08:47 . 2010-09-12 15:27 188216 ----a-w- c:\windows\system32\aswBoot.exe
2011-01-13 08:41 . 2010-09-12 15:27 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-01-13 08:40 . 2010-09-12 15:27 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-01-13 08:37 . 2010-09-12 15:27 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-01-13 08:37 . 2010-09-12 15:27 51280 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-01-13 08:37 . 2010-09-12 15:27 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-12-31 20:06 . 2010-09-12 15:27 38848 ----a-w- c:\windows\avastSS.scr
2010-12-29 12:42 . 2003-03-18 19:14 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-12-29 12:42 . 2003-02-21 03:42 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-12-21 09:57 . 2010-12-21 09:57 38976 ----a-w- c:\windows\system32\drivers\pssdk42.sys
2010-11-07 11:13 . 2010-11-07 11:13 5632 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B992.exe
2010-11-07 11:13 . 2010-11-07 11:13 5632 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B992.exe
2010-11-07 11:13 . 2010-11-07 11:13 4608 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B993.exe
2010-11-07 11:13 . 2010-11-07 11:13 4608 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B993.exe
2010-10-30 18:59 . 2010-10-30 18:57 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2010-10-30 18:59 . 2010-10-30 18:57 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2004-02-16 22:19 . 2010-10-02 11:08 32768 ----a-w- c:\program files\kXi.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GAINWARD"="c:\program files\EXPERTool\TBPanel.exe" [2009-10-05 2174976]
"WinFast Schedule"="c:\program files\WinFast\WFDTV\WFWIZ.exe" [2010-06-09 2920448]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-12-14 2424560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-01-13 3396624]
"P17RunE"="P17RunE.dll" [2008-03-28 14848]
"VolPanel"="c:\program files\Creative\Sound Blaster X-Fi Surround 5.1\Volume Panel\VolPanlu.exe" [2008-11-24 237693]
"Module Loader"="c:\program files\Creative\Shared Files\Module Loader\DLLML.exe" [2007-07-23 57344]
"Creative SB Monitoring Utility"="sbavmon.dll" [2008-12-01 94720]
"WinFastDTV"="c:\program files\WinFast\WFDTV\DTVSchdl.exe" [2010-06-09 101888]
"V0470Mon.exe"="c:\windows\V0470Mon.exe" [2007-06-04 32768]
"NetWorx"="c:\program files\NetWorx\networx.exe" [2010-11-10 3042816]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2005-04-12 45056]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-05 417792]
"HTC Sync Loader"="c:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2010-10-28 294912]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]

c:\users\Kl rka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-6-7 1195520]
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

c:\users\Tom ç\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-6-7 1195520]
setup_9.0.0.722_24.01.2011_22-46.lnk - c:\users\Tom ç\Desktop\Virus Removal Tool\setup_9.0.0.722_24.01.2011_22-46\startup.exe [2011-1-24 72208]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux3"=wdmaud.drv

R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-12-23 136176]
R3 AsrCDDrv;AsrCDDrv;c:\windows\system32\Drivers\AsrCDDrv.sys [x]
R3 AsrOcDrv;AsrOcDrv;c:\windows\system32\Drivers\AsrOcDrv.sys [x]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-09-25 79360]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-10-30 79360]
R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2010-06-23 23040]
S0 02781062;02781062 Boot Guard Driver;c:\windows\system32\DRIVERS\02781062.sys [2009-10-22 37392]
S0 39484972;39484972 Boot Guard Driver;c:\windows\system32\DRIVERS\39484972.sys [2009-10-22 37392]
S1 02781061;02781061;c:\windows\system32\DRIVERS\02781061.sys [2009-09-25 128016]
S1 39484971;39484971;c:\windows\system32\DRIVERS\39484971.sys [2009-09-25 128016]
S1 aswSP;aswSP; [x]
S1 PSSDK42;PSSDK42;c:\windows\system32\Drivers\pssdk42.sys [2010-12-21 38976]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656]
S1 setup_9.0.0.722_24.01.2011_22-46drv;setup_9.0.0.722_24.01.2011_22-46drv;c:\windows\system32\DRIVERS\0278106.sys [2009-10-09 311312]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-01-13 51280]
S2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [2010-07-09 20328]
S2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files\Firebird\Firebird_2_0\bin\fbguard.exe [2007-09-03 81920]
S2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [2010-09-16 80896]
S3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files\Firebird\Firebird_2_0\bin\fbserver.exe [2007-09-03 2002944]
S3 ksaud;Creative USB Audio Driver;c:\windows\system32\drivers\ksaud.sys [2009-08-05 886912]
S3 VF0470Vid;Live! Cam Notebook (VF0470);c:\windows\system32\DRIVERS\V0470Vid.sys [2007-05-09 146720]
S3 WFLR6654;WinFast DTV1800 H (XC3028);c:\windows\system32\drivers\wfeaglxt.sys [2009-10-21 433920]

.
Obsah adresáře 'Naplánované úlohy'

2011-01-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-12-23 08:49]

2011-01-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-12-23 08:49]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\Microsoft Office\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\yc5n0r24.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: PC Sync 2 Synchronisation Extension: bkmrksync@nokia.com - c:\program files\Nokia\Nokia PC Suite 7\bkmrksync
FF - Ext: Firefox Synchronisation Extension: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70} - c:\program files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-ASRockOCTuner - (no file)
HKLM-Run-XFMC - c:\users\Tomáš\Downloads\xfi mode\XFiMode.exe

.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-01-25 08:34:19
ComboFix-quarantined-files.txt 2011-01-25 07:34

Před spuštěním: 8 134 217 728
Po spuštění: Volných bajtů: 10 272 313 344

- - End Of File - - 9480E3262E6A86A6253623EC99B5F94E

#4 Příspěvek od **Roli** » 25 led 2011 17:59

Pokud jsi tak ještě neučinil, přesuň Combofix na plochu

otevři si Poznámkový blok

do něj zkopíruj skript z následujícího okna:

Kód: Vybrat vše

RegLock:: 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:

Obrázek

Po aplikaci na Tebe vypadne další log, zkopíruj ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,

v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci

iconek · #5 Příspěvek od **iconek** » 27 led 2011 01:34

ComboFix 11-01-24.02 - Tomáš 27.01.2011 1:26.2.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.2047.1252 [GMT 1:00]
Spuštěný z: c:\users\Tomáš\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Tomáš\Desktop\CFScript.txt.txt
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-12-27 do 2011-01-27 )))))))))))))))))))))))))))))))
.

2011-01-27 00:31 . 2011-01-27 00:31 -------- d-----w- c:\users\Klárka\AppData\Local\temp
2011-01-27 00:31 . 2011-01-27 00:31 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-24 21:40 . 2011-01-24 21:40 -------- d-----w- c:\program files\Virus Removal Tool1
2011-01-24 21:40 . 2009-10-22 11:54 37392 ----a-w- c:\windows\system32\drivers\02781062.sys
2011-01-24 21:40 . 2009-10-09 21:31 311312 ----a-w- c:\windows\system32\drivers\0278106.sys
2011-01-24 21:40 . 2009-09-25 15:59 128016 ----a-w- c:\windows\system32\drivers\02781061.sys
2011-01-24 21:36 . 2011-01-26 15:28 -------- d-----w- c:\programdata\Kaspersky Lab
2011-01-24 21:35 . 2009-10-22 11:54 37392 ----a-w- c:\windows\system32\drivers\39484972.sys
2011-01-24 21:35 . 2009-10-09 21:31 311312 ----a-w- c:\windows\system32\drivers\3948497.sys
2011-01-24 21:35 . 2009-09-25 15:59 128016 ----a-w- c:\windows\system32\drivers\39484971.sys
2011-01-24 20:36 . 2011-01-24 20:36 -------- d-----w- c:\users\Tomáš\AppData\Roaming\Malwarebytes
2011-01-24 20:36 . 2011-01-24 20:36 -------- d-----w- c:\programdata\Malwarebytes
2011-01-24 20:36 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-24 20:36 . 2011-01-24 20:36 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-01-24 20:36 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-01-24 10:48 . 2011-01-24 10:49 -------- d-----w- c:\program files\CrystalDiskInfo
2011-01-23 22:30 . 2011-01-23 22:31 -------- d-----w- c:\program files\trend micro
2011-01-23 22:30 . 2011-01-23 22:31 -------- d-----w- C:\rsit
2011-01-22 17:44 . 2011-01-23 13:18 -------- d-----w- c:\program files\rajce
2011-01-16 23:15 . 2007-05-16 15:45 3497832 ----a-w- c:\windows\system32\d3dx9_34.dll
2011-01-14 11:45 . 2011-01-14 15:48 137464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-01-14 11:45 . 2011-01-14 15:48 214520 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-01-14 11:45 . 2011-01-14 15:48 214520 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-01-14 11:45 . 2011-01-14 11:45 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-01-14 11:45 . 2011-01-14 11:45 -------- d-----w- c:\users\Tomáš\AppData\Local\PunkBuster
2011-01-14 11:14 . 2011-01-14 11:14 -------- d-----w- c:\program files\GamePark
2011-01-14 10:26 . 2011-01-14 10:51 -------- d-----w- c:\users\Tomáš\AppData\Roaming\HLSW
2011-01-14 10:26 . 2011-01-14 10:26 -------- d-s---w- c:\program files\HLSW
2011-01-12 10:33 . 2009-07-30 16:12 287392 ----a-w- c:\windows\system32\drivers\nvmf6232.sys
2011-01-12 10:33 . 2009-07-30 15:48 898048 ----a-w- c:\windows\system32\fdco2.dll
2011-01-12 10:33 . 2009-07-30 09:29 521128 ----a-w- c:\windows\system32\DPInst.exe
2011-01-12 10:33 . 2009-07-29 23:28 155648 ----a-w- c:\windows\system32\nvconrm.dll
2011-01-12 09:53 . 2011-01-12 09:53 -------- d-----w- c:\program files\ASRock Utility
2011-01-11 10:26 . 2011-01-11 10:26 -------- d-----w- c:\program files\Sureshot
2011-01-11 10:26 . 2002-10-25 01:15 540672 ----a-w- c:\windows\Bluescreen.scr
2011-01-11 10:25 . 1997-11-19 15:49 303616 ----a-w- c:\windows\IsUninst.exe
2011-01-06 17:12 . 2011-01-06 17:12 -------- d-----w- c:\users\Klárka\AppData\Local\Nokia
2011-01-06 17:11 . 2011-01-06 17:11 -------- d-----w- c:\users\Klárka\AppData\Roaming\SUPERAntiSpyware.com
2011-01-05 09:20 . 2011-01-05 09:20 -------- d-----w- c:\users\Tomáš\AppData\Roaming\SUPERAntiSpyware.com
2011-01-05 09:20 . 2011-01-05 09:20 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2011-01-05 09:20 . 2011-01-05 09:21 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-01-04 21:37 . 2011-01-04 21:37 -------- d-----w- c:\program files\AMD
2011-01-04 17:11 . 2011-01-04 17:11 -------- d-----w- c:\users\Klárka\AppData\Roaming\OpenOffice.org
2011-01-04 17:10 . 2011-01-04 17:10 -------- d-----w- c:\users\Klárka\AppData\Roaming\Real
2011-01-03 15:08 . 2011-01-03 15:08 -------- d-----w- c:\windows\W7SBC
2011-01-03 15:08 . 2009-07-14 01:14 2613248 ----a-w- c:\windows\explorer_edit_w7sbc.exe
2011-01-03 15:08 . 2009-07-14 01:14 2613248 ----a-w- c:\windows\explorer_backup_w7sbc.exe
2011-01-01 14:51 . 2011-01-01 14:51 -------- d-sh--w- c:\windows\ftpcache
2010-12-29 12:43 . 2010-12-29 12:43 11776 ----a-w- c:\program files\Mozilla Firefox\plugins\nprjplug.dll
2010-12-29 12:42 . 2010-12-29 12:42 -------- d-----w- c:\program files\Common Files\xing shared
2010-12-29 12:42 . 2010-12-29 12:42 151776 ----a-w- c:\program files\Mozilla Firefox\plugins\nppl3260.dll
2010-12-29 12:42 . 2010-12-29 12:42 100352 ----a-w- c:\program files\Mozilla Firefox\plugins\nprpjplug.dll
2010-12-29 12:42 . 2010-12-29 12:42 -------- d-----w- c:\program files\Real
2010-12-29 12:42 . 2010-12-29 12:57 -------- d-----w- c:\users\Tomáš\AppData\Roaming\Real
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\programdata\Apple Computer
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\program files\Common Files\Apple
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\users\Tomáš\AppData\Local\Apple
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\program files\Apple Software Update
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\programdata\Apple
2010-12-28 14:08 . 2010-12-28 14:08 -------- d-----w- c:\users\Tomáš\AppData\Roaming\NVIDIA

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-13 08:47 . 2010-09-12 15:27 188216 ----a-w- c:\windows\system32\aswBoot.exe
2011-01-13 08:41 . 2010-09-12 15:27 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-01-13 08:40 . 2010-09-12 15:27 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-01-13 08:37 . 2010-09-12 15:27 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-01-13 08:37 . 2010-09-12 15:27 51280 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-01-13 08:37 . 2010-09-12 15:27 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-12-31 20:06 . 2010-09-12 15:27 38848 ----a-w- c:\windows\avastSS.scr
2010-12-29 12:42 . 2003-03-18 19:14 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-12-29 12:42 . 2003-02-21 03:42 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-12-21 09:57 . 2010-12-21 09:57 38976 ----a-w- c:\windows\system32\drivers\pssdk42.sys
2010-11-07 11:13 . 2010-11-07 11:13 5632 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B992.exe
2010-11-07 11:13 . 2010-11-07 11:13 5632 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B992.exe
2010-11-07 11:13 . 2010-11-07 11:13 4608 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B993.exe
2010-11-07 11:13 . 2010-11-07 11:13 4608 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B993.exe
2010-10-30 18:59 . 2010-10-30 18:57 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2010-10-30 18:59 . 2010-10-30 18:57 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2004-02-16 22:19 . 2010-10-02 11:08 32768 ----a-w- c:\program files\kXi.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GAINWARD"="c:\program files\EXPERTool\TBPanel.exe" [2009-10-05 2174976]
"WinFast Schedule"="c:\program files\WinFast\WFDTV\WFWIZ.exe" [2010-06-09 2920448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-01-13 3396624]
"P17RunE"="P17RunE.dll" [2008-03-28 14848]
"VolPanel"="c:\program files\Creative\Sound Blaster X-Fi Surround 5.1\Volume Panel\VolPanlu.exe" [2008-11-24 237693]
"Module Loader"="c:\program files\Creative\Shared Files\Module Loader\DLLML.exe" [2007-07-23 57344]
"Creative SB Monitoring Utility"="sbavmon.dll" [2008-12-01 94720]
"WinFastDTV"="c:\program files\WinFast\WFDTV\DTVSchdl.exe" [2010-06-09 101888]
"V0470Mon.exe"="c:\windows\V0470Mon.exe" [2007-06-04 32768]
"NetWorx"="c:\program files\NetWorx\networx.exe" [2010-11-10 3042816]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2005-04-12 45056]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-05 417792]
"HTC Sync Loader"="c:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2010-10-28 294912]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]

c:\users\Kl rka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-6-7 1195520]
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

c:\users\Tom ç\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-6-7 1195520]
setup_9.0.0.722_24.01.2011_22-46.lnk - c:\users\Tom ç\Desktop\Virus Removal Tool\setup_9.0.0.722_24.01.2011_22-46\startup.exe [2011-1-24 72208]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux3"=wdmaud.drv

R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-12-23 136176]
R3 AsrCDDrv;AsrCDDrv;c:\windows\system32\Drivers\AsrCDDrv.sys [x]
R3 AsrOcDrv;AsrOcDrv;c:\windows\system32\Drivers\AsrOcDrv.sys [x]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-09-25 79360]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-10-30 79360]
R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2010-06-23 23040]
S0 02781062;02781062 Boot Guard Driver;c:\windows\system32\DRIVERS\02781062.sys [2009-10-22 37392]
S0 39484972;39484972 Boot Guard Driver;c:\windows\system32\DRIVERS\39484972.sys [2009-10-22 37392]
S1 02781061;02781061;c:\windows\system32\DRIVERS\02781061.sys [2009-09-25 128016]
S1 39484971;39484971;c:\windows\system32\DRIVERS\39484971.sys [2009-09-25 128016]
S1 aswSP;aswSP; [x]
S1 PSSDK42;PSSDK42;c:\windows\system32\Drivers\pssdk42.sys [2010-12-21 38976]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656]
S1 setup_9.0.0.722_24.01.2011_22-46drv;setup_9.0.0.722_24.01.2011_22-46drv;c:\windows\system32\DRIVERS\0278106.sys [2009-10-09 311312]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-01-13 51280]
S2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [2010-07-09 20328]
S2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files\Firebird\Firebird_2_0\bin\fbguard.exe [2007-09-03 81920]
S2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [2010-09-16 80896]
S3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files\Firebird\Firebird_2_0\bin\fbserver.exe [2007-09-03 2002944]
S3 ksaud;Creative USB Audio Driver;c:\windows\system32\drivers\ksaud.sys [2009-08-05 886912]
S3 VF0470Vid;Live! Cam Notebook (VF0470);c:\windows\system32\DRIVERS\V0470Vid.sys [2007-05-09 146720]
S3 WFLR6654;WinFast DTV1800 H (XC3028);c:\windows\system32\drivers\wfeaglxt.sys [2009-10-21 433920]

.
Obsah adresáře 'Naplánované úlohy'

2011-01-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-12-23 08:49]

2011-01-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-12-23 08:49]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\Microsoft Office\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\yc5n0r24.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: PC Sync 2 Synchronisation Extension: bkmrksync@nokia.com - c:\program files\Nokia\Nokia PC Suite 7\bkmrksync
FF - Ext: Firefox Synchronisation Extension: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70} - c:\program files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Celkový čas: 2011-01-27 01:32:56
ComboFix-quarantined-files.txt 2011-01-27 00:32
ComboFix2.txt 2011-01-25 07:34

Před spuštěním: Volných bajtů: 10 471 915 520
Po spuštění: Volných bajtů: 10 420 813 824

- - End Of File - - 561BCC4B5EC5F496BFC91ED4AC92E203

iconek · #6 Příspěvek od **iconek** » 27 led 2011 01:36

ComboFix 11-01-24.02 - Tomáš 27.01.2011 1:26.2.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.2047.1252 [GMT 1:00]
Spuštěný z: c:\users\Tomáš\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Tomáš\Desktop\CFScript.txt.txt
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-12-27 do 2011-01-27 )))))))))))))))))))))))))))))))
.

2011-01-27 00:31 . 2011-01-27 00:31 -------- d-----w- c:\users\Klárka\AppData\Local\temp
2011-01-27 00:31 . 2011-01-27 00:31 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-24 21:40 . 2011-01-24 21:40 -------- d-----w- c:\program files\Virus Removal Tool1
2011-01-24 21:40 . 2009-10-22 11:54 37392 ----a-w- c:\windows\system32\drivers\02781062.sys
2011-01-24 21:40 . 2009-10-09 21:31 311312 ----a-w- c:\windows\system32\drivers\0278106.sys
2011-01-24 21:40 . 2009-09-25 15:59 128016 ----a-w- c:\windows\system32\drivers\02781061.sys
2011-01-24 21:36 . 2011-01-26 15:28 -------- d-----w- c:\programdata\Kaspersky Lab
2011-01-24 21:35 . 2009-10-22 11:54 37392 ----a-w- c:\windows\system32\drivers\39484972.sys
2011-01-24 21:35 . 2009-10-09 21:31 311312 ----a-w- c:\windows\system32\drivers\3948497.sys
2011-01-24 21:35 . 2009-09-25 15:59 128016 ----a-w- c:\windows\system32\drivers\39484971.sys
2011-01-24 20:36 . 2011-01-24 20:36 -------- d-----w- c:\users\Tomáš\AppData\Roaming\Malwarebytes
2011-01-24 20:36 . 2011-01-24 20:36 -------- d-----w- c:\programdata\Malwarebytes
2011-01-24 20:36 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-24 20:36 . 2011-01-24 20:36 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-01-24 20:36 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-01-24 10:48 . 2011-01-24 10:49 -------- d-----w- c:\program files\CrystalDiskInfo
2011-01-23 22:30 . 2011-01-23 22:31 -------- d-----w- c:\program files\trend micro
2011-01-23 22:30 . 2011-01-23 22:31 -------- d-----w- C:\rsit
2011-01-22 17:44 . 2011-01-23 13:18 -------- d-----w- c:\program files\rajce
2011-01-16 23:15 . 2007-05-16 15:45 3497832 ----a-w- c:\windows\system32\d3dx9_34.dll
2011-01-14 11:45 . 2011-01-14 15:48 137464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-01-14 11:45 . 2011-01-14 15:48 214520 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-01-14 11:45 . 2011-01-14 15:48 214520 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-01-14 11:45 . 2011-01-14 11:45 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-01-14 11:45 . 2011-01-14 11:45 -------- d-----w- c:\users\Tomáš\AppData\Local\PunkBuster
2011-01-14 11:14 . 2011-01-14 11:14 -------- d-----w- c:\program files\GamePark
2011-01-14 10:26 . 2011-01-14 10:51 -------- d-----w- c:\users\Tomáš\AppData\Roaming\HLSW
2011-01-14 10:26 . 2011-01-14 10:26 -------- d-s---w- c:\program files\HLSW
2011-01-12 10:33 . 2009-07-30 16:12 287392 ----a-w- c:\windows\system32\drivers\nvmf6232.sys
2011-01-12 10:33 . 2009-07-30 15:48 898048 ----a-w- c:\windows\system32\fdco2.dll
2011-01-12 10:33 . 2009-07-30 09:29 521128 ----a-w- c:\windows\system32\DPInst.exe
2011-01-12 10:33 . 2009-07-29 23:28 155648 ----a-w- c:\windows\system32\nvconrm.dll
2011-01-12 09:53 . 2011-01-12 09:53 -------- d-----w- c:\program files\ASRock Utility
2011-01-11 10:26 . 2011-01-11 10:26 -------- d-----w- c:\program files\Sureshot
2011-01-11 10:26 . 2002-10-25 01:15 540672 ----a-w- c:\windows\Bluescreen.scr
2011-01-11 10:25 . 1997-11-19 15:49 303616 ----a-w- c:\windows\IsUninst.exe
2011-01-06 17:12 . 2011-01-06 17:12 -------- d-----w- c:\users\Klárka\AppData\Local\Nokia
2011-01-06 17:11 . 2011-01-06 17:11 -------- d-----w- c:\users\Klárka\AppData\Roaming\SUPERAntiSpyware.com
2011-01-05 09:20 . 2011-01-05 09:20 -------- d-----w- c:\users\Tomáš\AppData\Roaming\SUPERAntiSpyware.com
2011-01-05 09:20 . 2011-01-05 09:20 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2011-01-05 09:20 . 2011-01-05 09:21 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-01-04 21:37 . 2011-01-04 21:37 -------- d-----w- c:\program files\AMD
2011-01-04 17:11 . 2011-01-04 17:11 -------- d-----w- c:\users\Klárka\AppData\Roaming\OpenOffice.org
2011-01-04 17:10 . 2011-01-04 17:10 -------- d-----w- c:\users\Klárka\AppData\Roaming\Real
2011-01-03 15:08 . 2011-01-03 15:08 -------- d-----w- c:\windows\W7SBC
2011-01-03 15:08 . 2009-07-14 01:14 2613248 ----a-w- c:\windows\explorer_edit_w7sbc.exe
2011-01-03 15:08 . 2009-07-14 01:14 2613248 ----a-w- c:\windows\explorer_backup_w7sbc.exe
2011-01-01 14:51 . 2011-01-01 14:51 -------- d-sh--w- c:\windows\ftpcache
2010-12-29 12:43 . 2010-12-29 12:43 11776 ----a-w- c:\program files\Mozilla Firefox\plugins\nprjplug.dll
2010-12-29 12:42 . 2010-12-29 12:42 -------- d-----w- c:\program files\Common Files\xing shared
2010-12-29 12:42 . 2010-12-29 12:42 151776 ----a-w- c:\program files\Mozilla Firefox\plugins\nppl3260.dll
2010-12-29 12:42 . 2010-12-29 12:42 100352 ----a-w- c:\program files\Mozilla Firefox\plugins\nprpjplug.dll
2010-12-29 12:42 . 2010-12-29 12:42 -------- d-----w- c:\program files\Real
2010-12-29 12:42 . 2010-12-29 12:57 -------- d-----w- c:\users\Tomáš\AppData\Roaming\Real
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\programdata\Apple Computer
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\program files\Common Files\Apple
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\users\Tomáš\AppData\Local\Apple
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\program files\Apple Software Update
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\programdata\Apple
2010-12-28 14:08 . 2010-12-28 14:08 -------- d-----w- c:\users\Tomáš\AppData\Roaming\NVIDIA

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-13 08:47 . 2010-09-12 15:27 188216 ----a-w- c:\windows\system32\aswBoot.exe
2011-01-13 08:41 . 2010-09-12 15:27 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-01-13 08:40 . 2010-09-12 15:27 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-01-13 08:37 . 2010-09-12 15:27 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-01-13 08:37 . 2010-09-12 15:27 51280 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-01-13 08:37 . 2010-09-12 15:27 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-12-31 20:06 . 2010-09-12 15:27 38848 ----a-w- c:\windows\avastSS.scr
2010-12-29 12:42 . 2003-03-18 19:14 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-12-29 12:42 . 2003-02-21 03:42 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-12-21 09:57 . 2010-12-21 09:57 38976 ----a-w- c:\windows\system32\drivers\pssdk42.sys
2010-11-07 11:13 . 2010-11-07 11:13 5632 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B992.exe
2010-11-07 11:13 . 2010-11-07 11:13 5632 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B992.exe
2010-11-07 11:13 . 2010-11-07 11:13 4608 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B993.exe
2010-11-07 11:13 . 2010-11-07 11:13 4608 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B993.exe
2010-10-30 18:59 . 2010-10-30 18:57 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2010-10-30 18:59 . 2010-10-30 18:57 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2004-02-16 22:19 . 2010-10-02 11:08 32768 ----a-w- c:\program files\kXi.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GAINWARD"="c:\program files\EXPERTool\TBPanel.exe" [2009-10-05 2174976]
"WinFast Schedule"="c:\program files\WinFast\WFDTV\WFWIZ.exe" [2010-06-09 2920448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-01-13 3396624]
"P17RunE"="P17RunE.dll" [2008-03-28 14848]
"VolPanel"="c:\program files\Creative\Sound Blaster X-Fi Surround 5.1\Volume Panel\VolPanlu.exe" [2008-11-24 237693]
"Module Loader"="c:\program files\Creative\Shared Files\Module Loader\DLLML.exe" [2007-07-23 57344]
"Creative SB Monitoring Utility"="sbavmon.dll" [2008-12-01 94720]
"WinFastDTV"="c:\program files\WinFast\WFDTV\DTVSchdl.exe" [2010-06-09 101888]
"V0470Mon.exe"="c:\windows\V0470Mon.exe" [2007-06-04 32768]
"NetWorx"="c:\program files\NetWorx\networx.exe" [2010-11-10 3042816]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2005-04-12 45056]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-05 417792]
"HTC Sync Loader"="c:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2010-10-28 294912]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]

c:\users\Kl rka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-6-7 1195520]
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

c:\users\Tom ç\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-6-7 1195520]
setup_9.0.0.722_24.01.2011_22-46.lnk - c:\users\Tom ç\Desktop\Virus Removal Tool\setup_9.0.0.722_24.01.2011_22-46\startup.exe [2011-1-24 72208]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux3"=wdmaud.drv

R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-12-23 136176]
R3 AsrCDDrv;AsrCDDrv;c:\windows\system32\Drivers\AsrCDDrv.sys [x]
R3 AsrOcDrv;AsrOcDrv;c:\windows\system32\Drivers\AsrOcDrv.sys [x]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-09-25 79360]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-10-30 79360]
R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2010-06-23 23040]
S0 02781062;02781062 Boot Guard Driver;c:\windows\system32\DRIVERS\02781062.sys [2009-10-22 37392]
S0 39484972;39484972 Boot Guard Driver;c:\windows\system32\DRIVERS\39484972.sys [2009-10-22 37392]
S1 02781061;02781061;c:\windows\system32\DRIVERS\02781061.sys [2009-09-25 128016]
S1 39484971;39484971;c:\windows\system32\DRIVERS\39484971.sys [2009-09-25 128016]
S1 aswSP;aswSP; [x]
S1 PSSDK42;PSSDK42;c:\windows\system32\Drivers\pssdk42.sys [2010-12-21 38976]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656]
S1 setup_9.0.0.722_24.01.2011_22-46drv;setup_9.0.0.722_24.01.2011_22-46drv;c:\windows\system32\DRIVERS\0278106.sys [2009-10-09 311312]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-01-13 51280]
S2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [2010-07-09 20328]
S2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files\Firebird\Firebird_2_0\bin\fbguard.exe [2007-09-03 81920]
S2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [2010-09-16 80896]
S3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files\Firebird\Firebird_2_0\bin\fbserver.exe [2007-09-03 2002944]
S3 ksaud;Creative USB Audio Driver;c:\windows\system32\drivers\ksaud.sys [2009-08-05 886912]
S3 VF0470Vid;Live! Cam Notebook (VF0470);c:\windows\system32\DRIVERS\V0470Vid.sys [2007-05-09 146720]
S3 WFLR6654;WinFast DTV1800 H (XC3028);c:\windows\system32\drivers\wfeaglxt.sys [2009-10-21 433920]

.
Obsah adresáře 'Naplánované úlohy'

2011-01-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-12-23 08:49]

2011-01-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-12-23 08:49]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\Microsoft Office\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\yc5n0r24.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: PC Sync 2 Synchronisation Extension: bkmrksync@nokia.com - c:\program files\Nokia\Nokia PC Suite 7\bkmrksync
FF - Ext: Firefox Synchronisation Extension: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70} - c:\program files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Celkový čas: 2011-01-27 01:32:56
ComboFix-quarantined-files.txt 2011-01-27 00:32
ComboFix2.txt 2011-01-25 07:34

Před spuštěním: Volných bajtů: 10 471 915 520
Po spuštění: Volných bajtů: 10 420 813 824

- - End Of File - - 561BCC4B5EC5F496BFC91ED4AC92E203

iconek · #7 Příspěvek od **iconek** » 27 led 2011 01:38

ComboFix 11-01-24.02 - Tomáš 27.01.2011 1:26.2.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.2047.1252 [GMT 1:00]
Spuštěný z: c:\users\Tomáš\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Tomáš\Desktop\CFScript.txt.txt
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-12-27 do 2011-01-27 )))))))))))))))))))))))))))))))
.

2011-01-27 00:31 . 2011-01-27 00:31 -------- d-----w- c:\users\Klárka\AppData\Local\temp
2011-01-27 00:31 . 2011-01-27 00:31 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-24 21:40 . 2011-01-24 21:40 -------- d-----w- c:\program files\Virus Removal Tool1
2011-01-24 21:40 . 2009-10-22 11:54 37392 ----a-w- c:\windows\system32\drivers\02781062.sys
2011-01-24 21:40 . 2009-10-09 21:31 311312 ----a-w- c:\windows\system32\drivers\0278106.sys
2011-01-24 21:40 . 2009-09-25 15:59 128016 ----a-w- c:\windows\system32\drivers\02781061.sys
2011-01-24 21:36 . 2011-01-26 15:28 -------- d-----w- c:\programdata\Kaspersky Lab
2011-01-24 21:35 . 2009-10-22 11:54 37392 ----a-w- c:\windows\system32\drivers\39484972.sys
2011-01-24 21:35 . 2009-10-09 21:31 311312 ----a-w- c:\windows\system32\drivers\3948497.sys
2011-01-24 21:35 . 2009-09-25 15:59 128016 ----a-w- c:\windows\system32\drivers\39484971.sys
2011-01-24 20:36 . 2011-01-24 20:36 -------- d-----w- c:\users\Tomáš\AppData\Roaming\Malwarebytes
2011-01-24 20:36 . 2011-01-24 20:36 -------- d-----w- c:\programdata\Malwarebytes
2011-01-24 20:36 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-24 20:36 . 2011-01-24 20:36 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-01-24 20:36 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-01-24 10:48 . 2011-01-24 10:49 -------- d-----w- c:\program files\CrystalDiskInfo
2011-01-23 22:30 . 2011-01-23 22:31 -------- d-----w- c:\program files\trend micro
2011-01-23 22:30 . 2011-01-23 22:31 -------- d-----w- C:\rsit
2011-01-22 17:44 . 2011-01-23 13:18 -------- d-----w- c:\program files\rajce
2011-01-16 23:15 . 2007-05-16 15:45 3497832 ----a-w- c:\windows\system32\d3dx9_34.dll
2011-01-14 11:45 . 2011-01-14 15:48 137464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-01-14 11:45 . 2011-01-14 15:48 214520 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-01-14 11:45 . 2011-01-14 15:48 214520 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-01-14 11:45 . 2011-01-14 11:45 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-01-14 11:45 . 2011-01-14 11:45 -------- d-----w- c:\users\Tomáš\AppData\Local\PunkBuster
2011-01-14 11:14 . 2011-01-14 11:14 -------- d-----w- c:\program files\GamePark
2011-01-14 10:26 . 2011-01-14 10:51 -------- d-----w- c:\users\Tomáš\AppData\Roaming\HLSW
2011-01-14 10:26 . 2011-01-14 10:26 -------- d-s---w- c:\program files\HLSW
2011-01-12 10:33 . 2009-07-30 16:12 287392 ----a-w- c:\windows\system32\drivers\nvmf6232.sys
2011-01-12 10:33 . 2009-07-30 15:48 898048 ----a-w- c:\windows\system32\fdco2.dll
2011-01-12 10:33 . 2009-07-30 09:29 521128 ----a-w- c:\windows\system32\DPInst.exe
2011-01-12 10:33 . 2009-07-29 23:28 155648 ----a-w- c:\windows\system32\nvconrm.dll
2011-01-12 09:53 . 2011-01-12 09:53 -------- d-----w- c:\program files\ASRock Utility
2011-01-11 10:26 . 2011-01-11 10:26 -------- d-----w- c:\program files\Sureshot
2011-01-11 10:26 . 2002-10-25 01:15 540672 ----a-w- c:\windows\Bluescreen.scr
2011-01-11 10:25 . 1997-11-19 15:49 303616 ----a-w- c:\windows\IsUninst.exe
2011-01-06 17:12 . 2011-01-06 17:12 -------- d-----w- c:\users\Klárka\AppData\Local\Nokia
2011-01-06 17:11 . 2011-01-06 17:11 -------- d-----w- c:\users\Klárka\AppData\Roaming\SUPERAntiSpyware.com
2011-01-05 09:20 . 2011-01-05 09:20 -------- d-----w- c:\users\Tomáš\AppData\Roaming\SUPERAntiSpyware.com
2011-01-05 09:20 . 2011-01-05 09:20 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2011-01-05 09:20 . 2011-01-05 09:21 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-01-04 21:37 . 2011-01-04 21:37 -------- d-----w- c:\program files\AMD
2011-01-04 17:11 . 2011-01-04 17:11 -------- d-----w- c:\users\Klárka\AppData\Roaming\OpenOffice.org
2011-01-04 17:10 . 2011-01-04 17:10 -------- d-----w- c:\users\Klárka\AppData\Roaming\Real
2011-01-03 15:08 . 2011-01-03 15:08 -------- d-----w- c:\windows\W7SBC
2011-01-03 15:08 . 2009-07-14 01:14 2613248 ----a-w- c:\windows\explorer_edit_w7sbc.exe
2011-01-03 15:08 . 2009-07-14 01:14 2613248 ----a-w- c:\windows\explorer_backup_w7sbc.exe
2011-01-01 14:51 . 2011-01-01 14:51 -------- d-sh--w- c:\windows\ftpcache
2010-12-29 12:43 . 2010-12-29 12:43 11776 ----a-w- c:\program files\Mozilla Firefox\plugins\nprjplug.dll
2010-12-29 12:42 . 2010-12-29 12:42 -------- d-----w- c:\program files\Common Files\xing shared
2010-12-29 12:42 . 2010-12-29 12:42 151776 ----a-w- c:\program files\Mozilla Firefox\plugins\nppl3260.dll
2010-12-29 12:42 . 2010-12-29 12:42 100352 ----a-w- c:\program files\Mozilla Firefox\plugins\nprpjplug.dll
2010-12-29 12:42 . 2010-12-29 12:42 -------- d-----w- c:\program files\Real
2010-12-29 12:42 . 2010-12-29 12:57 -------- d-----w- c:\users\Tomáš\AppData\Roaming\Real
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\programdata\Apple Computer
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\program files\Common Files\Apple
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\users\Tomáš\AppData\Local\Apple
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\program files\Apple Software Update
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\programdata\Apple
2010-12-28 14:08 . 2010-12-28 14:08 -------- d-----w- c:\users\Tomáš\AppData\Roaming\NVIDIA

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-13 08:47 . 2010-09-12 15:27 188216 ----a-w- c:\windows\system32\aswBoot.exe
2011-01-13 08:41 . 2010-09-12 15:27 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-01-13 08:40 . 2010-09-12 15:27 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-01-13 08:37 . 2010-09-12 15:27 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-01-13 08:37 . 2010-09-12 15:27 51280 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-01-13 08:37 . 2010-09-12 15:27 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-12-31 20:06 . 2010-09-12 15:27 38848 ----a-w- c:\windows\avastSS.scr
2010-12-29 12:42 . 2003-03-18 19:14 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-12-29 12:42 . 2003-02-21 03:42 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-12-21 09:57 . 2010-12-21 09:57 38976 ----a-w- c:\windows\system32\drivers\pssdk42.sys
2010-11-07 11:13 . 2010-11-07 11:13 5632 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B992.exe
2010-11-07 11:13 . 2010-11-07 11:13 5632 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B992.exe
2010-11-07 11:13 . 2010-11-07 11:13 4608 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B993.exe
2010-11-07 11:13 . 2010-11-07 11:13 4608 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B993.exe
2010-10-30 18:59 . 2010-10-30 18:57 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2010-10-30 18:59 . 2010-10-30 18:57 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2004-02-16 22:19 . 2010-10-02 11:08 32768 ----a-w- c:\program files\kXi.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GAINWARD"="c:\program files\EXPERTool\TBPanel.exe" [2009-10-05 2174976]
"WinFast Schedule"="c:\program files\WinFast\WFDTV\WFWIZ.exe" [2010-06-09 2920448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-01-13 3396624]
"P17RunE"="P17RunE.dll" [2008-03-28 14848]
"VolPanel"="c:\program files\Creative\Sound Blaster X-Fi Surround 5.1\Volume Panel\VolPanlu.exe" [2008-11-24 237693]
"Module Loader"="c:\program files\Creative\Shared Files\Module Loader\DLLML.exe" [2007-07-23 57344]
"Creative SB Monitoring Utility"="sbavmon.dll" [2008-12-01 94720]
"WinFastDTV"="c:\program files\WinFast\WFDTV\DTVSchdl.exe" [2010-06-09 101888]
"V0470Mon.exe"="c:\windows\V0470Mon.exe" [2007-06-04 32768]
"NetWorx"="c:\program files\NetWorx\networx.exe" [2010-11-10 3042816]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2005-04-12 45056]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-05 417792]
"HTC Sync Loader"="c:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2010-10-28 294912]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]

c:\users\Kl rka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-6-7 1195520]
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

c:\users\Tom ç\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-6-7 1195520]
setup_9.0.0.722_24.01.2011_22-46.lnk - c:\users\Tom ç\Desktop\Virus Removal Tool\setup_9.0.0.722_24.01.2011_22-46\startup.exe [2011-1-24 72208]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux3"=wdmaud.drv

R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-12-23 136176]
R3 AsrCDDrv;AsrCDDrv;c:\windows\system32\Drivers\AsrCDDrv.sys [x]
R3 AsrOcDrv;AsrOcDrv;c:\windows\system32\Drivers\AsrOcDrv.sys [x]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-09-25 79360]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-10-30 79360]
R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2010-06-23 23040]
S0 02781062;02781062 Boot Guard Driver;c:\windows\system32\DRIVERS\02781062.sys [2009-10-22 37392]
S0 39484972;39484972 Boot Guard Driver;c:\windows\system32\DRIVERS\39484972.sys [2009-10-22 37392]
S1 02781061;02781061;c:\windows\system32\DRIVERS\02781061.sys [2009-09-25 128016]
S1 39484971;39484971;c:\windows\system32\DRIVERS\39484971.sys [2009-09-25 128016]
S1 aswSP;aswSP; [x]
S1 PSSDK42;PSSDK42;c:\windows\system32\Drivers\pssdk42.sys [2010-12-21 38976]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656]
S1 setup_9.0.0.722_24.01.2011_22-46drv;setup_9.0.0.722_24.01.2011_22-46drv;c:\windows\system32\DRIVERS\0278106.sys [2009-10-09 311312]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-01-13 51280]
S2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [2010-07-09 20328]
S2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files\Firebird\Firebird_2_0\bin\fbguard.exe [2007-09-03 81920]
S2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [2010-09-16 80896]
S3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files\Firebird\Firebird_2_0\bin\fbserver.exe [2007-09-03 2002944]
S3 ksaud;Creative USB Audio Driver;c:\windows\system32\drivers\ksaud.sys [2009-08-05 886912]
S3 VF0470Vid;Live! Cam Notebook (VF0470);c:\windows\system32\DRIVERS\V0470Vid.sys [2007-05-09 146720]
S3 WFLR6654;WinFast DTV1800 H (XC3028);c:\windows\system32\drivers\wfeaglxt.sys [2009-10-21 433920]

.
Obsah adresáře 'Naplánované úlohy'

2011-01-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-12-23 08:49]

2011-01-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-12-23 08:49]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\Microsoft Office\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\yc5n0r24.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: PC Sync 2 Synchronisation Extension: bkmrksync@nokia.com - c:\program files\Nokia\Nokia PC Suite 7\bkmrksync
FF - Ext: Firefox Synchronisation Extension: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70} - c:\program files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Celkový čas: 2011-01-27 01:32:56
ComboFix-quarantined-files.txt 2011-01-27 00:32
ComboFix2.txt 2011-01-25 07:34

Před spuštěním: Volných bajtů: 10 471 915 520
Po spuštění: Volných bajtů: 10 420 813 824

- - End Of File - - 561BCC4B5EC5F496BFC91ED4AC92E203

iconek · #8 Příspěvek od **iconek** » 27 led 2011 01:40

ComboFix 11-01-24.02 - Tomáš 27.01.2011 1:26.2.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.2047.1252 [GMT 1:00]
Spuštěný z: c:\users\Tomáš\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Tomáš\Desktop\CFScript.txt.txt
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-12-27 do 2011-01-27 )))))))))))))))))))))))))))))))
.

2011-01-27 00:31 . 2011-01-27 00:31 -------- d-----w- c:\users\Klárka\AppData\Local\temp
2011-01-27 00:31 . 2011-01-27 00:31 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-24 21:40 . 2011-01-24 21:40 -------- d-----w- c:\program files\Virus Removal Tool1
2011-01-24 21:40 . 2009-10-22 11:54 37392 ----a-w- c:\windows\system32\drivers\02781062.sys
2011-01-24 21:40 . 2009-10-09 21:31 311312 ----a-w- c:\windows\system32\drivers\0278106.sys
2011-01-24 21:40 . 2009-09-25 15:59 128016 ----a-w- c:\windows\system32\drivers\02781061.sys
2011-01-24 21:36 . 2011-01-26 15:28 -------- d-----w- c:\programdata\Kaspersky Lab
2011-01-24 21:35 . 2009-10-22 11:54 37392 ----a-w- c:\windows\system32\drivers\39484972.sys
2011-01-24 21:35 . 2009-10-09 21:31 311312 ----a-w- c:\windows\system32\drivers\3948497.sys
2011-01-24 21:35 . 2009-09-25 15:59 128016 ----a-w- c:\windows\system32\drivers\39484971.sys
2011-01-24 20:36 . 2011-01-24 20:36 -------- d-----w- c:\users\Tomáš\AppData\Roaming\Malwarebytes
2011-01-24 20:36 . 2011-01-24 20:36 -------- d-----w- c:\programdata\Malwarebytes
2011-01-24 20:36 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-24 20:36 . 2011-01-24 20:36 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-01-24 20:36 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-01-24 10:48 . 2011-01-24 10:49 -------- d-----w- c:\program files\CrystalDiskInfo
2011-01-23 22:30 . 2011-01-23 22:31 -------- d-----w- c:\program files\trend micro
2011-01-23 22:30 . 2011-01-23 22:31 -------- d-----w- C:\rsit
2011-01-22 17:44 . 2011-01-23 13:18 -------- d-----w- c:\program files\rajce
2011-01-16 23:15 . 2007-05-16 15:45 3497832 ----a-w- c:\windows\system32\d3dx9_34.dll
2011-01-14 11:45 . 2011-01-14 15:48 137464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-01-14 11:45 . 2011-01-14 15:48 214520 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-01-14 11:45 . 2011-01-14 15:48 214520 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-01-14 11:45 . 2011-01-14 11:45 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-01-14 11:45 . 2011-01-14 11:45 -------- d-----w- c:\users\Tomáš\AppData\Local\PunkBuster
2011-01-14 11:14 . 2011-01-14 11:14 -------- d-----w- c:\program files\GamePark
2011-01-14 10:26 . 2011-01-14 10:51 -------- d-----w- c:\users\Tomáš\AppData\Roaming\HLSW
2011-01-14 10:26 . 2011-01-14 10:26 -------- d-s---w- c:\program files\HLSW
2011-01-12 10:33 . 2009-07-30 16:12 287392 ----a-w- c:\windows\system32\drivers\nvmf6232.sys
2011-01-12 10:33 . 2009-07-30 15:48 898048 ----a-w- c:\windows\system32\fdco2.dll
2011-01-12 10:33 . 2009-07-30 09:29 521128 ----a-w- c:\windows\system32\DPInst.exe
2011-01-12 10:33 . 2009-07-29 23:28 155648 ----a-w- c:\windows\system32\nvconrm.dll
2011-01-12 09:53 . 2011-01-12 09:53 -------- d-----w- c:\program files\ASRock Utility
2011-01-11 10:26 . 2011-01-11 10:26 -------- d-----w- c:\program files\Sureshot
2011-01-11 10:26 . 2002-10-25 01:15 540672 ----a-w- c:\windows\Bluescreen.scr
2011-01-11 10:25 . 1997-11-19 15:49 303616 ----a-w- c:\windows\IsUninst.exe
2011-01-06 17:12 . 2011-01-06 17:12 -------- d-----w- c:\users\Klárka\AppData\Local\Nokia
2011-01-06 17:11 . 2011-01-06 17:11 -------- d-----w- c:\users\Klárka\AppData\Roaming\SUPERAntiSpyware.com
2011-01-05 09:20 . 2011-01-05 09:20 -------- d-----w- c:\users\Tomáš\AppData\Roaming\SUPERAntiSpyware.com
2011-01-05 09:20 . 2011-01-05 09:20 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2011-01-05 09:20 . 2011-01-05 09:21 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-01-04 21:37 . 2011-01-04 21:37 -------- d-----w- c:\program files\AMD
2011-01-04 17:11 . 2011-01-04 17:11 -------- d-----w- c:\users\Klárka\AppData\Roaming\OpenOffice.org
2011-01-04 17:10 . 2011-01-04 17:10 -------- d-----w- c:\users\Klárka\AppData\Roaming\Real
2011-01-03 15:08 . 2011-01-03 15:08 -------- d-----w- c:\windows\W7SBC
2011-01-03 15:08 . 2009-07-14 01:14 2613248 ----a-w- c:\windows\explorer_edit_w7sbc.exe
2011-01-03 15:08 . 2009-07-14 01:14 2613248 ----a-w- c:\windows\explorer_backup_w7sbc.exe
2011-01-01 14:51 . 2011-01-01 14:51 -------- d-sh--w- c:\windows\ftpcache
2010-12-29 12:43 . 2010-12-29 12:43 11776 ----a-w- c:\program files\Mozilla Firefox\plugins\nprjplug.dll
2010-12-29 12:42 . 2010-12-29 12:42 -------- d-----w- c:\program files\Common Files\xing shared
2010-12-29 12:42 . 2010-12-29 12:42 151776 ----a-w- c:\program files\Mozilla Firefox\plugins\nppl3260.dll
2010-12-29 12:42 . 2010-12-29 12:42 100352 ----a-w- c:\program files\Mozilla Firefox\plugins\nprpjplug.dll
2010-12-29 12:42 . 2010-12-29 12:42 -------- d-----w- c:\program files\Real
2010-12-29 12:42 . 2010-12-29 12:57 -------- d-----w- c:\users\Tomáš\AppData\Roaming\Real
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\programdata\Apple Computer
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\program files\Common Files\Apple
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\users\Tomáš\AppData\Local\Apple
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\program files\Apple Software Update
2010-12-29 11:31 . 2010-12-29 11:31 -------- d-----w- c:\programdata\Apple
2010-12-28 14:08 . 2010-12-28 14:08 -------- d-----w- c:\users\Tomáš\AppData\Roaming\NVIDIA

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-13 08:47 . 2010-09-12 15:27 188216 ----a-w- c:\windows\system32\aswBoot.exe
2011-01-13 08:41 . 2010-09-12 15:27 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-01-13 08:40 . 2010-09-12 15:27 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-01-13 08:37 . 2010-09-12 15:27 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-01-13 08:37 . 2010-09-12 15:27 51280 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-01-13 08:37 . 2010-09-12 15:27 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-12-31 20:06 . 2010-09-12 15:27 38848 ----a-w- c:\windows\avastSS.scr
2010-12-29 12:42 . 2003-03-18 19:14 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-12-29 12:42 . 2003-02-21 03:42 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-12-21 09:57 . 2010-12-21 09:57 38976 ----a-w- c:\windows\system32\drivers\pssdk42.sys
2010-11-07 11:13 . 2010-11-07 11:13 5632 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B992.exe
2010-11-07 11:13 . 2010-11-07 11:13 5632 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B992.exe
2010-11-07 11:13 . 2010-11-07 11:13 4608 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B993.exe
2010-11-07 11:13 . 2010-11-07 11:13 4608 ----a-r- c:\users\Tomáš\AppData\Roaming\Microsoft\Installer\{051E7B99-6D35-4905-BAF3-740893EF657A}\Icon051E7B993.exe
2010-10-30 18:59 . 2010-10-30 18:57 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2010-10-30 18:59 . 2010-10-30 18:57 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2004-02-16 22:19 . 2010-10-02 11:08 32768 ----a-w- c:\program files\kXi.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GAINWARD"="c:\program files\EXPERTool\TBPanel.exe" [2009-10-05 2174976]
"WinFast Schedule"="c:\program files\WinFast\WFDTV\WFWIZ.exe" [2010-06-09 2920448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-01-13 3396624]
"P17RunE"="P17RunE.dll" [2008-03-28 14848]
"VolPanel"="c:\program files\Creative\Sound Blaster X-Fi Surround 5.1\Volume Panel\VolPanlu.exe" [2008-11-24 237693]
"Module Loader"="c:\program files\Creative\Shared Files\Module Loader\DLLML.exe" [2007-07-23 57344]
"Creative SB Monitoring Utility"="sbavmon.dll" [2008-12-01 94720]
"WinFastDTV"="c:\program files\WinFast\WFDTV\DTVSchdl.exe" [2010-06-09 101888]
"V0470Mon.exe"="c:\windows\V0470Mon.exe" [2007-06-04 32768]
"NetWorx"="c:\program files\NetWorx\networx.exe" [2010-11-10 3042816]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2005-04-12 45056]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-05 417792]
"HTC Sync Loader"="c:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2010-10-28 294912]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]

c:\users\Kl rka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-6-7 1195520]
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

c:\users\Tom ç\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-6-7 1195520]
setup_9.0.0.722_24.01.2011_22-46.lnk - c:\users\Tom ç\Desktop\Virus Removal Tool\setup_9.0.0.722_24.01.2011_22-46\startup.exe [2011-1-24 72208]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux3"=wdmaud.drv

R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-12-23 136176]
R3 AsrCDDrv;AsrCDDrv;c:\windows\system32\Drivers\AsrCDDrv.sys [x]
R3 AsrOcDrv;AsrOcDrv;c:\windows\system32\Drivers\AsrOcDrv.sys [x]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-09-25 79360]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-10-30 79360]
R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2010-06-23 23040]
S0 02781062;02781062 Boot Guard Driver;c:\windows\system32\DRIVERS\02781062.sys [2009-10-22 37392]
S0 39484972;39484972 Boot Guard Driver;c:\windows\system32\DRIVERS\39484972.sys [2009-10-22 37392]
S1 02781061;02781061;c:\windows\system32\DRIVERS\02781061.sys [2009-09-25 128016]
S1 39484971;39484971;c:\windows\system32\DRIVERS\39484971.sys [2009-09-25 128016]
S1 aswSP;aswSP; [x]
S1 PSSDK42;PSSDK42;c:\windows\system32\Drivers\pssdk42.sys [2010-12-21 38976]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656]
S1 setup_9.0.0.722_24.01.2011_22-46drv;setup_9.0.0.722_24.01.2011_22-46drv;c:\windows\system32\DRIVERS\0278106.sys [2009-10-09 311312]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-01-13 51280]
S2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [2010-07-09 20328]
S2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files\Firebird\Firebird_2_0\bin\fbguard.exe [2007-09-03 81920]
S2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [2010-09-16 80896]
S3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files\Firebird\Firebird_2_0\bin\fbserver.exe [2007-09-03 2002944]
S3 ksaud;Creative USB Audio Driver;c:\windows\system32\drivers\ksaud.sys [2009-08-05 886912]
S3 VF0470Vid;Live! Cam Notebook (VF0470);c:\windows\system32\DRIVERS\V0470Vid.sys [2007-05-09 146720]
S3 WFLR6654;WinFast DTV1800 H (XC3028);c:\windows\system32\drivers\wfeaglxt.sys [2009-10-21 433920]

.
Obsah adresáře 'Naplánované úlohy'

2011-01-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-12-23 08:49]

2011-01-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-12-23 08:49]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\Microsoft Office\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\yc5n0r24.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: PC Sync 2 Synchronisation Extension: bkmrksync@nokia.com - c:\program files\Nokia\Nokia PC Suite 7\bkmrksync
FF - Ext: Firefox Synchronisation Extension: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70} - c:\program files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Celkový čas: 2011-01-27 01:32:56
ComboFix-quarantined-files.txt 2011-01-27 00:32
ComboFix2.txt 2011-01-25 07:34

Před spuštěním: Volných bajtů: 10 471 915 520
Po spuštění: Volných bajtů: 10 420 813 824

- - End Of File - - 561BCC4B5EC5F496BFC91ED4AC92E203

iconek · #9 Příspěvek od **iconek** » 27 led 2011 01:43

Omlouvám se za několik odeslání této zpávy.Stále to píše že čeká na www.viry.cz. Zkusím obnovit a nic.Kliknu na odeslat a nic.Nakonec je to tady asi čtyřikrát.Jsem z toho internetu zoufalej.

#10 Příspěvek od **Roli** » 27 led 2011 21:44

Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.

Na tom druhém PC jde net normálně ?

iconek · #11 Příspěvek od **iconek** » 27 led 2011 22:54

Prosímte, nejde.To jsem zjistil včera.Prostě je to zabržděný.Stále to načítá stránku a nebo čeká.Jako prohlížeč používám FF.Zkusil jsem to i s explorerem ale taky to prostě nejde.Opingoval jsem router abych vyloučil chybu ve vadné kabeláži, je to v pořádku.Odezva 1 ms,pakety ok.Opingoval jsem i AP providera a taky dobrý.I on mi psal že z jeho strany je vše v pořádku.Tak nevím.Antivir nic nenašel,SAS taky ne, jednorázovka od Kasperského mi našla zavirovaný archiv ovladače od zvukovky.Router jsem vyměnil za jiný.Připojil jsem se přímo za AP providera,zkusil stránky jako "rychlost.cz , dsl.cz , speedtest.net ".Odezva v pohodě,stabilita dobrá.Ještě zkusím přeladit na jiný vysílač po domluvě s prividerem.Jinak moc díky za tvoje rady.Dám tady vědět co a jak se dějě.Dobrou noc.Tomáš

#12 Příspěvek od **Roli** » 28 led 2011 17:44

To znamená že chyba opravdu nebude v PC když nejede ani jedno.

Ono je možné že na vysílač tvého providera je napojeno více uživatelů a síť nestíhá.

Jinak není zač a měj se.

iconek · #13 Příspěvek od **iconek** » 29 led 2011 17:41

Takže dnes jsem volal přímo poskytovateli internetu respektive majiteli a ne línýmu technikovi, vše jsem mu popsal a ani ne za 5 minut mi volal že zjistil že se nějaký pakety odešlou normálně a některý se mu ztrácejí.Omluvil se s tím že nechce teď hrabat do sítě ve špičce a koukne se na to v noci, něco poladí a zejtra dopoledne bude volat.Tak dám vědet zejtra.Díky moc za pomoc a rady.Přeji hezký zbytek dne.Tomáš

#14 Příspěvek od **Roli** » 30 led 2011 00:03

Nemáš zač a určitě dej vědět jak jsi dopadl.

VIRY.CZ

Žádost o kontrolu LOGu.

Žádost o kontrolu LOGu.

Re: Žádost o kontrolu LOGu.

Re: Žádost o kontrolu LOGu.

Re: Žádost o kontrolu LOGu.

Re: Žádost o kontrolu LOGu.

Re: Žádost o kontrolu LOGu.

Re: Žádost o kontrolu LOGu.

Re: Žádost o kontrolu LOGu.

Re: Žádost o kontrolu LOGu.

Re: Žádost o kontrolu LOGu.

Re: Žádost o kontrolu LOGu.

Re: Žádost o kontrolu LOGu.

Re: Žádost o kontrolu LOGu.

Re: Žádost o kontrolu LOGu.