Log od Petrasek1

[petrasek1]

Adobe Flash Player 10 ActiveX Adobe Systems Incorporated 10.2.152.26
Adobe Flash Player 10 Plugin Adobe Systems Incorporated 10.2.153.1
AIMP2 AIMP DevTeam
AIMP2: Audio Tools AIMP DevTeam
Any Video Converter 3.1.6 Any-Video-Converter.com
ATI AVIVO Codecs ATI Technologies Inc. 10.9.0.40813
ATI Catalyst Control Center 2.009.0813.2130
ATI Display Driver 8.65-090813a-087737C-ATI
CCleaner Piriform 2.34
eMule
FormatFactory 2.60 Free Time 2.60
Foxit PDF Creator Toolbar Ask.com 1.9.1.0
Foxit Reader Foxit Software Company 4.1.0.726
High Definition Audio Driver Package - KB888111 Microsoft Corporation 20040219.000000
ICQ7.4 ICQ 7.4
Java(TM) 6 Update 24 Sun Microsystems, Inc. 6.0.240
K-Lite Codec Pack 5.9.0 (Full) 5.9.0
Logitech Desktop Messenger Logitech, Inc. 2.52.18
Logitech QuickCam Logitech Inc. 11.10.2030
Logitech® Camera Driver
Marvell Miniport Driver Marvell 9.12.4.3
Medieval II Total War Sega 1.03.000
Medieval II Total War Kingdoms Sega 1.05.0000
Microsoft .NET Framework 2.0 Service Pack 2 Microsoft Corporation 2.2.30729
Microsoft .NET Framework 3.0 Service Pack 2 Microsoft Corporation 3.2.30729
Microsoft .NET Framework 3.5 SP1 Microsoft Corporation
Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Corporation 1
Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Corporation
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 9.0.30729.4148
Mozilla Firefox (3.6.15) Mozilla 3.6.15 (cs)
Nero 7 Demo Nero AG 7.00.1469
O&O Defrag Free Edition O&O Software GmbH 14.1.431
O2 Internet Konfigurator
OpenOffice.org 3.3 OpenOffice.org 3.3.9567
Opera 9.64 Opera Software ASA 9.64
rajče beta56 sestavení 134 rajče.net
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 5.10.0.5324
Scorpions WinCheater
Skype™ 5.1 Skype Technologies S.A. 5.1.112
Softarová utilita ATI - Odinstalovat 6.14.10.1022
Spybot - Search & Destroy Safer Networking Limited 1.6.2
Total Commander (Remove or Repair)
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3 Microsoft Corporation 20080414.031517
WinRAR
YouTube Downloader 2.6.5 BienneSoft
Zoner Photo Studio 7 Professional ZONER software 7.0.5000.5
2011/03/25 11:16:49.0453 2320 TDSS rootkit removing tool 2.4.21.0 Mar 10 2011 12:26:28
2011/03/25 11:16:49.0843 2320 ================================================================================
2011/03/25 11:16:49.0843 2320 SystemInfo:
2011/03/25 11:16:49.0843 2320
2011/03/25 11:16:49.0843 2320 OS Version: 5.1.2600 ServicePack: 3.0
2011/03/25 11:16:49.0843 2320 Product type: Workstation
2011/03/25 11:16:49.0843 2320 ComputerName: PETRAS
2011/03/25 11:16:49.0843 2320 UserName: Petr
2011/03/25 11:16:49.0843 2320 Windows directory: E:\WINDOWS
2011/03/25 11:16:49.0843 2320 System windows directory: E:\WINDOWS
2011/03/25 11:16:49.0843 2320 Processor architecture: Intel x86
2011/03/25 11:16:49.0843 2320 Number of processors: 2
2011/03/25 11:16:49.0843 2320 Page size: 0x1000
2011/03/25 11:16:49.0843 2320 Boot type: Normal boot
2011/03/25 11:16:49.0843 2320 ================================================================================
2011/03/25 11:16:50.0156 2320 Initialize success
2011/03/25 11:16:54.0984 2352 ================================================================================
2011/03/25 11:16:54.0984 2352 Scan started
2011/03/25 11:16:54.0984 2352 Mode: Manual;
2011/03/25 11:16:54.0984 2352 ================================================================================
2011/03/25 11:16:56.0609 2352 ACPI (4fe34f1f3126b61fcc6b2043aa8112c9) E:\WINDOWS\system32\DRIVERS\ACPI.sys
2011/03/25 11:16:56.0671 2352 ACPIEC (afdff022a01f0b11c776f0860c3b282f) E:\WINDOWS\system32\drivers\ACPIEC.sys
2011/03/25 11:16:56.0703 2352 aec (8bed39e3c35d6a489438b8141717a557) E:\WINDOWS\system32\drivers\aec.sys
2011/03/25 11:16:56.0734 2352 AFD (7e775010ef291da96ad17ca4b17137d7) E:\WINDOWS\System32\drivers\afd.sys
2011/03/25 11:16:56.0859 2352 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) E:\WINDOWS\system32\DRIVERS\asyncmac.sys
2011/03/25 11:16:56.0875 2352 atapi (9f3a2f5aa6875c72bf062c712cfa2674) E:\WINDOWS\system32\DRIVERS\atapi.sys
2011/03/25 11:16:57.0000 2352 ati2mtag (e69b295083419e13521f01df76f35db0) E:\WINDOWS\system32\DRIVERS\ati2mtag.sys
2011/03/25 11:16:57.0062 2352 AtiHdmiService (f661f01e990b84c58519c1ff43c2108f) E:\WINDOWS\system32\drivers\AtiHdmi.sys
2011/03/25 11:16:57.0093 2352 Atmarpc (9916c1225104ba14794209cfa8012159) E:\WINDOWS\system32\DRIVERS\atmarpc.sys
2011/03/25 11:16:57.0109 2352 audstub (d9f724aa26c010a217c97606b160ed68) E:\WINDOWS\system32\DRIVERS\audstub.sys
2011/03/25 11:16:57.0140 2352 Beep (da1f27d85e0d1525f6621372e7b685e9) E:\WINDOWS\system32\drivers\Beep.sys
2011/03/25 11:16:57.0171 2352 BthEnum (b279426e3c0c344893ed78a613a73bde) E:\WINDOWS\system32\DRIVERS\BthEnum.sys
2011/03/25 11:16:57.0171 2352 BthPan (80602b8746d3738f5886ce3d67ef06b6) E:\WINDOWS\system32\DRIVERS\bthpan.sys
2011/03/25 11:16:57.0203 2352 BTHPORT (f338662a6c1fc11dd9508f6dff2c06a2) E:\WINDOWS\system32\Drivers\BTHport.sys
2011/03/25 11:16:57.0218 2352 BTHUSB (61364cd71ef63b0f038b7e9df00f1efa) E:\WINDOWS\system32\Drivers\BTHUSB.sys
2011/03/25 11:16:57.0250 2352 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) E:\WINDOWS\system32\drivers\cbidf2k.sys
2011/03/25 11:16:57.0281 2352 CCDECODE (0be5aef125be881c4f854c554f2b025c) E:\WINDOWS\system32\DRIVERS\CCDECODE.sys
2011/03/25 11:16:57.0312 2352 Cdaudio (c1b486a7658353d33a10cc15211a873b) E:\WINDOWS\system32\drivers\Cdaudio.sys
2011/03/25 11:16:57.0328 2352 Cdfs (c885b02847f5d2fd45a24e219ed93b32) E:\WINDOWS\system32\drivers\Cdfs.sys
2011/03/25 11:16:57.0343 2352 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) E:\WINDOWS\system32\DRIVERS\cdrom.sys
2011/03/25 11:16:57.0437 2352 Disk (044452051f3e02e7963599fc8f4f3e25) E:\WINDOWS\system32\DRIVERS\disk.sys
2011/03/25 11:16:57.0468 2352 dmboot (db5fd2bf5b07dc54bfcb3664ff05bd7c) E:\WINDOWS\system32\drivers\dmboot.sys
2011/03/25 11:16:57.0515 2352 dmio (fff1720af51171f32f1ead5cf71f2810) E:\WINDOWS\system32\drivers\dmio.sys
2011/03/25 11:16:57.0562 2352 dmload (e9317282a63ca4d188c0df5e09c6ac5f) E:\WINDOWS\system32\drivers\dmload.sys
2011/03/25 11:16:57.0578 2352 DMusic (8a208dfcf89792a484e76c40e5f50b45) E:\WINDOWS\system32\drivers\DMusic.sys
2011/03/25 11:16:57.0609 2352 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) E:\WINDOWS\system32\drivers\drmkaud.sys
2011/03/25 11:16:57.0671 2352 Fastfat (38d332a6d56af32635675f132548343e) E:\WINDOWS\system32\drivers\Fastfat.sys
2011/03/25 11:16:57.0703 2352 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) E:\WINDOWS\system32\drivers\Fdc.sys
2011/03/25 11:16:57.0718 2352 Fips (ac366695a0796560aa37215ad5762aaf) E:\WINDOWS\system32\drivers\Fips.sys
2011/03/25 11:16:57.0734 2352 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) E:\WINDOWS\system32\drivers\Flpydisk.sys
2011/03/25 11:16:57.0765 2352 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) E:\WINDOWS\system32\drivers\fltmgr.sys
2011/03/25 11:16:57.0796 2352 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) E:\WINDOWS\system32\drivers\Fs_Rec.sys
2011/03/25 11:16:57.0812 2352 Ftdisk (4e664d8541db4a66b73a24257e322e1f) E:\WINDOWS\system32\DRIVERS\ftdisk.sys
2011/03/25 11:16:57.0828 2352 gdrv (ad6bd6bdc97bede8a5507ee01220c00f) E:\WINDOWS\gdrv.sys
2011/03/25 11:16:58.0140 2352 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) E:\WINDOWS\system32\DRIVERS\msgpc.sys
2011/03/25 11:16:58.0156 2352 HDAudBus (573c7d0a32852b48f3058cfd8026f511) E:\WINDOWS\system32\DRIVERS\HDAudBus.sys
2011/03/25 11:16:58.0187 2352 hidusb (ccf82c5ec8a7326c3066de870c06daf1) E:\WINDOWS\system32\DRIVERS\hidusb.sys
2011/03/25 11:16:58.0234 2352 HTTP (f80a415ef82cd06ffaf0d971528ead38) E:\WINDOWS\system32\Drivers\HTTP.sys
2011/03/25 11:16:58.0265 2352 i8042prt (c528e27945367191e7bae364930b6932) E:\WINDOWS\system32\DRIVERS\i8042prt.sys
2011/03/25 11:16:58.0281 2352 Imapi (083a052659f5310dd8b6a6cb05edcf8e) E:\WINDOWS\system32\DRIVERS\imapi.sys
2011/03/25 11:16:58.0421 2352 IntcAzAudAddService (60d7460b07012d364ced11dd9fd83e1f) E:\WINDOWS\system32\drivers\RtkHDAud.sys
2011/03/25 11:16:58.0515 2352 intelppm (27b290d632af2cf3cf40bfddb7370985) E:\WINDOWS\system32\DRIVERS\intelppm.sys
2011/03/25 11:16:58.0546 2352 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) E:\WINDOWS\system32\drivers\ip6fw.sys
2011/03/25 11:16:58.0562 2352 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) E:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
2011/03/25 11:16:58.0593 2352 IpInIp (b87ab476dcf76e72010632b5550955f5) E:\WINDOWS\system32\DRIVERS\ipinip.sys
2011/03/25 11:16:58.0609 2352 IpNat (cc748ea12c6effde940ee98098bf96bb) E:\WINDOWS\system32\DRIVERS\ipnat.sys
2011/03/25 11:16:58.0625 2352 IPSec (23c74d75e36e7158768dd63d92789a91) E:\WINDOWS\system32\DRIVERS\ipsec.sys
2011/03/25 11:16:58.0671 2352 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) E:\WINDOWS\system32\DRIVERS\irenum.sys
2011/03/25 11:16:58.0687 2352 isapnp (cc9f8a2d60aed1a51a3ac34c59b987ae) E:\WINDOWS\system32\DRIVERS\isapnp.sys
2011/03/25 11:16:58.0703 2352 Kbdclass (1b6162fe7f66b1a71a4b70f941c4aa9b) E:\WINDOWS\system32\DRIVERS\kbdclass.sys
2011/03/25 11:16:58.0718 2352 kmixer (692bcf44383d056aed41b045a323d378) E:\WINDOWS\system32\drivers\kmixer.sys
2011/03/25 11:16:58.0734 2352 KSecDD (b467646c54cc746128904e1654c750c1) E:\WINDOWS\system32\drivers\KSecDD.sys
2011/03/25 11:16:58.0828 2352 LVcKap (fb548ff809634bfa866312b37d8a18ae) E:\WINDOWS\system32\DRIVERS\LVcKap.sys
2011/03/25 11:16:58.0937 2352 LVMVDrv (fe3fb994f8702d9e37648927819b74b8) E:\WINDOWS\system32\DRIVERS\LVMVDrv.sys
2011/03/25 11:16:59.0031 2352 LVPr2Mon (c7ea51f1ab10b0b2b443f4d5589fc1a5) E:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys
2011/03/25 11:16:59.0062 2352 LVUSBSta (caef4c05ba2c1acad4ebcaa4261cd55d) E:\WINDOWS\system32\DRIVERS\LVUSBSta.sys
2011/03/25 11:16:59.0093 2352 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) E:\WINDOWS\system32\drivers\mnmdd.sys
2011/03/25 11:16:59.0109 2352 Modem (44032b0c6d9954d3fd26438330b99ee7) E:\WINDOWS\system32\drivers\Modem.sys
2011/03/25 11:16:59.0140 2352 Mouclass (4cb582831dbde63ce43b45d771218374) E:\WINDOWS\system32\DRIVERS\mouclass.sys
2011/03/25 11:16:59.0171 2352 mouhid (bb269eba740737ab749b214d568b6812) E:\WINDOWS\system32\DRIVERS\mouhid.sys
2011/03/25 11:16:59.0187 2352 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) E:\WINDOWS\system32\drivers\MountMgr.sys
2011/03/25 11:16:59.0250 2352 MREMP50 (9bd4dcb5412921864a7aacdedfbd1923) E:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS
2011/03/25 11:16:59.0281 2352 MRESP50 (07c02c892e8e1a72d6bf35004f0e9c5e) E:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS
2011/03/25 11:16:59.0296 2352 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) E:\WINDOWS\system32\DRIVERS\mrxdav.sys
2011/03/25 11:16:59.0343 2352 MRxSmb (f3aefb11abc521122b67095044169e98) E:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2011/03/25 11:16:59.0375 2352 Msfs (c941ea2454ba8350021d774daf0f1027) E:\WINDOWS\system32\drivers\Msfs.sys
2011/03/25 11:16:59.0406 2352 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) E:\WINDOWS\system32\drivers\MSKSSRV.sys
2011/03/25 11:16:59.0453 2352 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) E:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011/03/25 11:16:59.0468 2352 MSPQM (bad59648ba099da4a17680b39730cb3d) E:\WINDOWS\system32\drivers\MSPQM.sys
2011/03/25 11:16:59.0468 2352 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) E:\WINDOWS\system32\DRIVERS\mssmbios.sys
2011/03/25 11:16:59.0484 2352 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) E:\WINDOWS\system32\drivers\MSTEE.sys
2011/03/25 11:16:59.0500 2352 Mup (2f625d11385b1a94360bfc70aaefdee1) E:\WINDOWS\system32\drivers\Mup.sys
2011/03/25 11:16:59.0546 2352 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) E:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
2011/03/25 11:16:59.0578 2352 NDIS (1df7f42665c94b825322fae71721130d) E:\WINDOWS\system32\drivers\NDIS.sys
2011/03/25 11:16:59.0609 2352 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) E:\WINDOWS\system32\DRIVERS\NdisIP.sys
2011/03/25 11:16:59.0625 2352 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) E:\WINDOWS\system32\DRIVERS\ndistapi.sys
2011/03/25 11:16:59.0656 2352 Ndisuio (f927a4434c5028758a842943ef1a3849) E:\WINDOWS\system32\DRIVERS\ndisuio.sys
2011/03/25 11:16:59.0671 2352 NdisWan (edc1531a49c80614b2cfda43ca8659ab) E:\WINDOWS\system32\DRIVERS\ndiswan.sys
2011/03/25 11:16:59.0703 2352 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) E:\WINDOWS\system32\drivers\NDProxy.sys
2011/03/25 11:16:59.0718 2352 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) E:\WINDOWS\system32\DRIVERS\netbios.sys
2011/03/25 11:16:59.0765 2352 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) E:\WINDOWS\system32\DRIVERS\netbt.sys
2011/03/25 11:16:59.0781 2352 Npfs (3182d64ae053d6fb034f44b6def8034a) E:\WINDOWS\system32\drivers\Npfs.sys
2011/03/25 11:16:59.0796 2352 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) E:\WINDOWS\system32\drivers\Ntfs.sys
2011/03/25 11:16:59.0843 2352 Null (73c1e1f395918bc2c6dd67af7591a3ad) E:\WINDOWS\system32\drivers\Null.sys
2011/03/25 11:16:59.0875 2352 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) E:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
2011/03/25 11:16:59.0906 2352 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) E:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
2011/03/25 11:16:59.0921 2352 Parport (46f8db73b4a53e543f8e371dc7c75bae) E:\WINDOWS\system32\DRIVERS\parport.sys
2011/03/25 11:16:59.0937 2352 PartMgr (beb3ba25197665d82ec7065b724171c6) E:\WINDOWS\system32\drivers\PartMgr.sys
2011/03/25 11:16:59.0968 2352 ParVdm (1fae19d0457176318bba4a8795656ebc) E:\WINDOWS\system32\drivers\ParVdm.sys
2011/03/25 11:16:59.0984 2352 PCI (6ce351d149cb4befc702951e471e1730) E:\WINDOWS\system32\DRIVERS\pci.sys
2011/03/25 11:17:00.0015 2352 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) E:\WINDOWS\system32\DRIVERS\pciide.sys
2011/03/25 11:17:00.0046 2352 Pcmcia (4fc31e6c19a5ce5198b1abff94cae758) E:\WINDOWS\system32\drivers\Pcmcia.sys
2011/03/25 11:17:00.0171 2352 PID_0928 (eb0855d1c75940d4f992d02ffc522e81) E:\WINDOWS\system32\DRIVERS\LV561AV.SYS
2011/03/25 11:17:00.0187 2352 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) E:\WINDOWS\system32\DRIVERS\raspptp.sys
2011/03/25 11:17:00.0203 2352 PSched (09298ec810b07e5d582cb3a3f9255424) E:\WINDOWS\system32\DRIVERS\psched.sys
2011/03/25 11:17:00.0250 2352 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) E:\WINDOWS\system32\DRIVERS\ptilink.sys
2011/03/25 11:17:00.0296 2352 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) E:\WINDOWS\system32\DRIVERS\rasacd.sys
2011/03/25 11:17:00.0312 2352 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) E:\WINDOWS\system32\DRIVERS\rasl2tp.sys
2011/03/25 11:17:00.0328 2352 RasPppoe (5bc962f2654137c9909c3d4603587dee) E:\WINDOWS\system32\DRIVERS\raspppoe.sys
2011/03/25 11:17:00.0343 2352 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) E:\WINDOWS\system32\DRIVERS\raspti.sys
2011/03/25 11:17:00.0359 2352 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) E:\WINDOWS\system32\DRIVERS\rdbss.sys
2011/03/25 11:17:00.0359 2352 RDPCDD (4912d5b403614ce99c28420f75353332) E:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2011/03/25 11:17:00.0390 2352 RDPWD (6728e45b66f93c08f11de2e316fc70dd) E:\WINDOWS\system32\drivers\RDPWD.sys
2011/03/25 11:17:00.0421 2352 redbook (611bfd220305be3a85ae876ea47d4aa5) E:\WINDOWS\system32\DRIVERS\redbook.sys
2011/03/25 11:17:00.0484 2352 RFCOMM (851c30df2807fcfa21e4c681a7d6440e) E:\WINDOWS\system32\DRIVERS\rfcomm.sys
2011/03/25 11:17:00.0515 2352 Secdrv (90a3935d05b494a5a39d37e71f09a677) E:\WINDOWS\system32\DRIVERS\secdrv.sys
2011/03/25 11:17:00.0531 2352 serenum (0f29512ccd6bead730039fb4bd2c85ce) E:\WINDOWS\system32\DRIVERS\serenum.sys
2011/03/25 11:17:00.0546 2352 Serial (b842729337c9b921615c40d3c1a1af96) E:\WINDOWS\system32\DRIVERS\serial.sys
2011/03/25 11:17:00.0578 2352 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) E:\WINDOWS\system32\drivers\Sfloppy.sys
2011/03/25 11:17:00.0625 2352 SLIP (866d538ebe33709a5c9f5c62b73b7d14) E:\WINDOWS\system32\DRIVERS\SLIP.sys
2011/03/25 11:17:00.0671 2352 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) E:\WINDOWS\system32\drivers\splitter.sys
2011/03/25 11:17:00.0687 2352 sr (94610c8653635e4459316a0050d55ce7) E:\WINDOWS\system32\DRIVERS\sr.sys
2011/03/25 11:17:00.0718 2352 Srv (0f6aefad3641a657e18081f52d0c15af) E:\WINDOWS\system32\DRIVERS\srv.sys
2011/03/25 11:17:00.0750 2352 streamip (77813007ba6265c4b6098187e6ed79d2) E:\WINDOWS\system32\DRIVERS\StreamIP.sys
2011/03/25 11:17:00.0750 2352 swenum (3941d127aef12e93addf6fe6ee027e0f) E:\WINDOWS\system32\DRIVERS\swenum.sys
2011/03/25 11:17:00.0765 2352 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) E:\WINDOWS\system32\drivers\swmidi.sys
2011/03/25 11:17:00.0843 2352 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) E:\WINDOWS\system32\drivers\sysaudio.sys
2011/03/25 11:17:00.0875 2352 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) E:\WINDOWS\system32\DRIVERS\tcpip.sys
2011/03/25 11:17:00.0890 2352 TDPIPE (6471a66807f5e104e4885f5b67349397) E:\WINDOWS\system32\drivers\TDPIPE.sys
2011/03/25 11:17:00.0906 2352 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) E:\WINDOWS\system32\drivers\TDTCP.sys
2011/03/25 11:17:00.0921 2352 TermDD (88155247177638048422893737429d9e) E:\WINDOWS\system32\DRIVERS\termdd.sys
2011/03/25 11:17:00.0968 2352 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) E:\WINDOWS\system32\drivers\Udfs.sys
2011/03/25 11:17:01.0015 2352 Update (402ddc88356b1bac0ee3dd1580c76a31) E:\WINDOWS\system32\DRIVERS\update.sys
2011/03/25 11:17:01.0046 2352 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) E:\WINDOWS\system32\DRIVERS\usbehci.sys
2011/03/25 11:17:01.0062 2352 usbhub (1ab3cdde553b6e064d2e754efe20285c) E:\WINDOWS\system32\DRIVERS\usbhub.sys
2011/03/25 11:17:01.0125 2352 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) E:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2011/03/25 11:17:01.0156 2352 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) E:\WINDOWS\system32\DRIVERS\usbuhci.sys
2011/03/25 11:17:01.0156 2352 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) E:\WINDOWS\System32\drivers\vga.sys
2011/03/25 11:17:01.0187 2352 VolSnap (28a4b296b47782173c346e376cb374d1) E:\WINDOWS\system32\drivers\VolSnap.sys
2011/03/25 11:17:01.0218 2352 Wanarp (e20b95baedb550f32dd489265c1da1f6) E:\WINDOWS\system32\DRIVERS\wanarp.sys
2011/03/25 11:17:01.0234 2352 wdmaud (6768acf64b18196494413695f0c3a00f) E:\WINDOWS\system32\drivers\wdmaud.sys
2011/03/25 11:17:01.0296 2352 WSTCODEC (c98b39829c2bbd34e454150633c62c78) E:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
2011/03/25 11:17:01.0343 2352 WudfPf (f15feafffbb3644ccc80c5da584e6311) E:\WINDOWS\system32\DRIVERS\WudfPf.sys
2011/03/25 11:17:01.0375 2352 WudfRd (28b524262bce6de1f7ef9f510ba3985b) E:\WINDOWS\system32\DRIVERS\wudfrd.sys
2011/03/25 11:17:01.0406 2352 yukonwxp (a5d4eae27e68625296d685a786897491) E:\WINDOWS\system32\DRIVERS\yk51x86.sys
2011/03/25 11:17:01.0671 2352 ================================================================================
2011/03/25 11:17:01.0671 2352 Scan finished
2011/03/25 11:17:01.0671 2352 ================================================================================



Dobrý den zde je můj log. Mám problém a nevím si absolutně rady. Měl jsem na pc nainstalovonou plnou verzi AVG 2011 Chip edition. Když jsem se v podnělí přišel k zapnutémmu pc tak na mě svítila modrá obrazovka. Restartoval jsem proto pc a situace se neustále opakoval tak jsem vyjmul jednu paměť ram a pc naběhlo jakž takž. Toto se několikrát opakovalo. Tak jsem odpojil kameru a reproduktry a pak už pc naběhlo a samovlně nepadalo do modré obrazovky. Nicméně AVG bylo komletně mimo provoz. Provedl jsem obnovu systému. Nic se nezměnilo AVG jsem tedy odinstaloval což byla asi největší chyba. Stáhl jsem si z internetu Avast a z dvd aviru a ani jeden tento produkt mi nelze nainstalovat neustále mi to hlásí nějakou chybu. Dále mi na pc neustále samovolně padal Firefox až dopadal úplně a nelze spustit vyhodí mi to hlášku o chybě parsování. Tak používám Operu. Sice starší verzi,ale jakž takž funguje i když občas mi vyskočí hláška o vyskytnutí problému a,že je třeba program ukončit a toto se občas objeví i u jiných progamů mého pc. Předem děkuji za rady.[/quote]

[Roli]

Zdravím, jak psal kolega jinde dej sem ještě log z Rsit.

[petrasek1]

Logfile of random's system information tool 1.08 (written by random/random)
Run by Petr at 2011-03-25 13:38:46
Microsoft Windows XP Home Edition Service Pack 3
System drive E: has 422 GB (89%) free of 477 GB
Total RAM: 1022 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:38:57, on 25. 3. 2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\spoolsv.exe
E:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
E:\WINDOWS\Explorer.EXE
E:\Program Files\OO Software\Defrag\oodtray.exe
E:\Program Files\Java\jre6\bin\jqs.exe
E:\Program Files\OO Software\Defrag\oodag.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\wscntfy.exe
E:\WINDOWS\system32\wbem\wmiapsrv.exe
E:\Program Files\Opera\opera.exe
E:\Program Files\ICQ7.4\ICQ.exe
E:\Program Files\eMule\emule.exe
E:\Program Files\software\RSIT.exe
E:\Program Files\trend micro\Petr.exe

O4 - HKLM\..\Run: [OODefragTray] E:\Program Files\OO Software\Defrag\oodtray.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - E:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: O&O Defrag Agent (OODefragAgent) - O&O Software GmbH - E:\Program Files\OO Software\Defrag\oodag.exe

--
End of file - 1589 bytes

======Scheduled tasks folder======

E:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"OODefragTray"=E:\Program Files\OO Software\Defrag\oodtray.exe [2011-01-25 2729800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
E:\WINDOWS\system32\Ati2evxx.dll [2009-08-14 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - E:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"E:\Program Files\AVG\AVG10\avgmfapx.exe"="E:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:Instalátor AVG"
"E:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="E:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"E:\Program Files\ICQ7.4\ICQ.exe"="E:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"
"E:\Program Files\Skype\Phone\Skype.exe"="E:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"E:\Program Files\Skype\Plugin Manager\skypePM.exe"="E:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"E:\Program Files\eMule\emule.exe"="E:\Program Files\eMule\emule.exe:*:Enabled:eMule"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"E:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="E:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"E:\Program Files\ICQ7.4\ICQ.exe"="E:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"

======List of files/folders created in the last 1 months======

2011-03-25 13:38:47 ----D---- E:\Program Files\trend micro
2011-03-25 13:38:46 ----D---- E:\rsit
2011-03-25 11:16:49 ----A---- E:\TDSSKiller.2.4.21.0_25.03.2011_11.16.49_log.txt
2011-03-24 01:40:17 ----HDC---- E:\WINDOWS\$NtUninstallKB2524375$
2011-03-22 10:10:36 ----SHD---- E:\found.000
2011-03-21 18:30:30 ----D---- E:\WINDOWS\Minidump
2011-03-20 23:25:46 ----D---- E:\Documents and Settings\Petr\Data aplikací\Leadertech
2011-03-20 23:21:43 ----SHD---- E:\Config.Msi
2011-03-14 22:22:34 ----D---- E:\Documents and Settings\Petr\Data aplikací\IObit
2011-03-14 22:22:09 ----D---- E:\Program Files\AIMP2 Tools
2011-03-10 00:22:03 ----D---- E:\Program Files\Spybot - Search & Destroy
2011-03-10 00:22:03 ----D---- E:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-03-09 14:26:29 ----HDC---- E:\WINDOWS\$NtUninstallKB2479943$
2011-03-09 14:25:15 ----HDC---- E:\WINDOWS\$NtUninstallKB2481109$
2011-03-08 13:37:59 ----D---- E:\Documents and Settings\Petr\Data aplikací\Foxit Software
2011-03-08 12:48:02 ----HD---- E:\$AVG
2011-03-07 12:50:36 ----D---- E:\WINDOWS\system32\oodag
2011-03-07 11:02:04 ----D---- E:\Program Files\OO Software
2011-03-03 23:31:04 ----HDC---- E:\WINDOWS\$NtUninstallKB971029$
2011-03-03 21:29:32 ----D---- E:\Program Files\YouTube Downloader
2011-03-03 00:44:58 ----D---- E:\Documents and Settings\Petr\Data aplikací\AnvSoft
2011-03-03 00:44:55 ----D---- E:\Program Files\AnvSoft
2011-03-03 00:42:17 ----A---- E:\WINDOWS\system32\pncrt.dll
2011-03-03 00:41:32 ----D---- E:\Program Files\FreeTime
2011-02-28 16:24:09 ----A---- E:\WINDOWS\system32\CmdLineExt.dll
2011-02-28 13:43:39 ----A---- E:\WINDOWS\system32\unrar.dll
2011-02-28 13:43:39 ----A---- E:\WINDOWS\avisplitter.ini
2011-02-28 13:43:38 ----A---- E:\WINDOWS\system32\yv12vfw.dll
2011-02-28 13:43:38 ----A---- E:\WINDOWS\system32\xvidvfw.dll
2011-02-28 13:43:38 ----A---- E:\WINDOWS\system32\xvidcore.dll
2011-02-28 13:43:36 ----A---- E:\WINDOWS\system32\ff_vfw.dll.manifest
2011-02-28 13:43:36 ----A---- E:\WINDOWS\system32\ff_vfw.dll

======List of files/folders modified in the last 1 months======

2011-03-25 13:38:53 ----D---- E:\WINDOWS\Prefetch
2011-03-25 13:38:47 ----RD---- E:\Program Files
2011-03-25 13:38:43 ----D---- E:\Documents and Settings\Petr\Data aplikací\AIMP
2011-03-25 13:37:27 ----D---- E:\Program Files\software
2011-03-25 12:31:43 ----D---- E:\Documents and Settings\Petr\Data aplikací\Skype
2011-03-25 12:31:19 ----D---- E:\Documents and Settings\Petr\Data aplikací\skypePM
2011-03-25 11:35:48 ----D---- E:\Documents and Settings\Petr\Data aplikací\ICQ
2011-03-25 11:16:49 ----D---- E:\WINDOWS\system32\drivers
2011-03-25 10:34:43 ----D---- E:\WINDOWS\Temp
2011-03-25 02:33:35 ----A---- E:\WINDOWS\SchedLgU.Txt
2011-03-24 01:49:18 ----D---- E:\WINDOWS
2011-03-24 01:40:21 ----HD---- E:\WINDOWS\inf
2011-03-24 01:40:19 ----D---- E:\WINDOWS\system32
2011-03-24 01:39:52 ----HD---- E:\WINDOWS\$hf_mig$
2011-03-24 01:39:51 ----D---- E:\WINDOWS\system32\CatRoot2
2011-03-22 23:26:00 ----D---- E:\WINDOWS\system32\drivers\etc
2011-03-22 23:22:13 ----A---- E:\WINDOWS\NeroDigital.ini
2011-03-22 12:37:34 ----A---- E:\WINDOWS\system32\PerfStringBackup.INI
2011-03-22 12:36:00 ----D---- E:\WINDOWS\security
2011-03-22 10:18:31 ----D---- E:\Program Files\ICQ7.4
2011-03-22 10:12:16 ----SHD---- E:\WINDOWS\Installer
2011-03-22 01:12:17 ----D---- E:\Documents and Settings\Petr\Data aplikací\Media Player Classic
2011-03-22 00:17:22 ----D---- E:\Documents and Settings\All Users\Data aplikací\MFAData
2011-03-22 00:00:57 ----SD---- E:\WINDOWS\Downloaded Program Files
2011-03-21 21:31:12 ----D---- E:\Documents and Settings\All Users\Data aplikací\AVG10
2011-03-21 21:31:05 ----D---- E:\WINDOWS\system32\drivers\AVG
2011-03-21 21:30:24 ----RSHDC---- E:\WINDOWS\system32\dllcache
2011-03-21 21:30:23 ----D---- E:\WINDOWS\system32\CatRoot
2011-03-21 20:56:19 ----D---- E:\WINDOWS\system32\config
2011-03-21 20:56:12 ----D---- E:\WINDOWS\system32\wbem
2011-03-21 20:56:11 ----D---- E:\WINDOWS\Registration
2011-03-21 20:55:34 ----D---- E:\Documents and Settings\All Users\Data aplikací\LogiShrd
2011-03-21 20:55:32 ----D---- E:\Program Files\Common Files\LogiShrd
2011-03-21 20:55:18 ----D---- E:\WINDOWS\system32\ReinstallBackups
2011-03-21 20:55:05 ----D---- E:\Program Files\Logitech
2011-03-21 20:54:18 ----D---- E:\WINDOWS\system32\Restore
2011-03-21 19:20:55 ----A---- E:\WINDOWS\DUMP4c1c.tmp
2011-03-21 11:14:08 ----D---- E:\WINDOWS\Debug
2011-03-20 23:22:28 ----D---- E:\WINDOWS\WinSxS
2011-03-20 23:20:38 ----SD---- E:\Documents and Settings\Petr\Data aplikací\Microsoft
2011-03-15 12:43:49 ----D---- E:\Program Files\rajce
2011-03-13 17:38:42 ----D---- E:\WINDOWS\system32\DirectX
2011-03-13 17:38:11 ----RSD---- E:\WINDOWS\assembly
2011-03-13 17:29:31 ----HD---- E:\Program Files\InstallShield Installation Information
2011-03-09 14:25:26 ----A---- E:\WINDOWS\system32\MRT.exe
2011-03-05 20:29:51 ----D---- E:\Program Files\Mozilla Firefox
2011-02-28 13:43:37 ----D---- E:\Program Files\K-Lite Codec Pack

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Řadič procesoru Intel; E:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R3 ati2mtag;ati2mtag; E:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-08-14 4485632]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; E:\WINDOWS\system32\drivers\AtiHdmi.sys [2009-06-02 99856]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; E:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; E:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); E:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-11-15 4225920]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; E:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2007-07-18 25624]
R3 mouhid;Ovladač myši standardu HID; E:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12160]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; E:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; E:\WINDOWS\system32\DRIVERS\yk51x86.sys [2006-11-22 250496]
S1 InCDPass;InCDPass; E:\WINDOWS\system32\drivers\InCDPass.sys []
S1 InCDRm;InCD Reader; E:\WINDOWS\system32\drivers\InCDRm.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; E:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); E:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Ovladač portu Bluetooth; E:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; E:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 CCDECODE;Dekodér Closed Caption; E:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 gdrv;gdrv; \??\E:\WINDOWS\gdrv.sys []
S3 LVcKap;Logitech AEC Driver; E:\WINDOWS\system32\DRIVERS\LVcKap.sys [2007-07-20 2109592]
S3 LVMVDrv;Logitech Machine Vision Engine Loader; E:\WINDOWS\system32\DRIVERS\LVMVDrv.sys [2007-07-20 2142488]
S3 LVUSBSta;Logitech USB Monitor Filter; E:\WINDOWS\system32\DRIVERS\LVUSBSta.sys [2007-07-19 41752]
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\E:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\E:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\E:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\E:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\E:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\E:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; E:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; E:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; E:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 PID_0928;Logitech QuickCam Express(PID_0928); E:\WINDOWS\system32\DRIVERS\LV561AV.SYS [2007-07-19 490776]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); E:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 SLIP;BDA Slip De-Framer; E:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; E:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; E:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; E:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; E:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; E:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 InCDFs;InCD File System; E:\WINDOWS\system32\drivers\InCDFs.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; E:\WINDOWS\system32\Ati2evxx.exe [2009-08-14 602112]
R2 BthServ;Bluetooth Support Service; E:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; E:\Program Files\Java\jre6\bin\jqs.exe [2011-02-02 153376]
R2 LVPrcSrv;Process Monitor; E:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2007-07-20 137752]
R2 OODefragAgent;O&O Defrag Agent; E:\Program Files\OO Software\Defrag\oodag.exe [2011-01-25 2336072]
S3 aspnet_state;ASP.NET State Service; E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; e:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; e:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; E:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; E:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 ATI Smart;ATI Smart; E:\WINDOWS\system32\ati2sgag.exe [2009-08-13 593920]
S4 LVCOMSer;LVCOMSer; E:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe [2007-07-20 186904]
S4 LVSrvLauncher;LVSrvLauncher; E:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [2007-07-20 141848]
S4 McciCMService;McciCMService; E:\Program Files\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; e:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Roli]

Nic špatného nevidím tak že bych to tipoval na problém s hardware a nebo něco upadlo ze sytému.

Nejdříve zkus opravit OS, pak se v rámci možností podíváne na ten hardware.

V Bios Setup do kterého se dostaneš při restartu mačkáním klávesy :

* DEL
* F2
* F1
* F10

záleží na PC, ale vždy je to na monitoru napsáno,

otevři nabídku ADVANCED BIOS FEATURES a vyhledej Boot Devices 0 až 4 nebo Boot Sequence.

Na první místo nastav CD-ROM,

na druhé pevný disk HDD, u obou položek bývá napsán i výrobce.

Stisknutím Save většinou je to F10 a potvrzením Entrem uložíš nastavení,

pak ještě stisknutím Save and Exit se dostaneš z Biosu a můžeš začít s opravou.

Vlož instalační CD do mechaniky, nech nabootovat,

chvíli počkej zobrazí se první obrazovka kde klávesou Enter potvrdíš spuštění instalace Windows,

v další obrazovce klávesou F8 potvrdíš licenční ujednání,

v další obrazovce pak klávesou R zvol Opravit stávající instalaci Windows

podrobný postup ZDE


Pak dej vědět jaký je stav.

[petrasek1]

Toto nechám na někom zkušenějším(dohodnu se známým a on se mi na to podívá). Mě je jen divné,že mi nelze nainstalovat vůbec žádný antivirový program. A potom když jsem poprvé projížděl systém pomocí S&D tak mi to v průběhu skenu nahlásilo 2x eror a trojan a nějaké povídání k tomu. To je mi divné. Kdyby byl problém v hardwaru(vyloučit se to každopádně nedá) tak by myslím nebyl problém s instalací antiviru. A je mi též divné to co mi provádí Firefox viz můj první příspěvek. Děkuji za rady.

[Roli]

Ještě tam můžeme nejdříve pustit větší kalibr tak že pozorně čti, protože tenhle softík netoleruje chyby.

Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na E:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

[petrasek1]

ComboFix 11-03-26.01 - Petr . 03. 2011 3:06.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.1.1029.18.1022.718 [GMT 2:00]
Spuštěný z: e:\documents and settings\Petr\Plocha\ComboFix.exe
FW: AVG Firewall *Disabled* {8decf618-9569-4340-b34a-d78d28969b66}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-02-27 do 2011-03-27 )))))))))))))))))))))))))))))))
.
.
2011-03-26 16:28 . 2009-08-06 18:23 274288 ----a-w- e:\windows\system32\mucltui.dll
2011-03-26 16:28 . 2009-08-06 18:23 215920 ----a-w- e:\windows\system32\muweb.dll
2011-03-26 07:53 . 2011-03-26 07:53 -------- d-----w- e:\program files\Microsoft Silverlight
2011-03-25 12:38 . 2011-03-25 12:38 -------- d-----w- e:\program files\trend micro
2011-03-25 12:38 . 2011-03-25 12:38 -------- d-----w- E:\rsit
2011-03-22 09:10 . 2011-03-22 09:10 -------- d-----w- E:\found.000
2011-03-21 19:56 . 2011-03-21 19:56 -------- d-----w- e:\windows\system32\wbem\Repository
2011-03-20 22:25 . 2011-03-20 22:25 -------- d-----w- e:\documents and settings\Petr\Data aplikací\Leadertech
2011-03-14 21:22 . 2011-03-14 21:22 -------- d-----w- e:\documents and settings\Petr\Data aplikací\IObit
2011-03-14 21:22 . 2011-03-14 21:22 -------- d-----w- e:\program files\AIMP2 Tools
2011-03-09 23:22 . 2011-03-22 22:22 -------- d-----w- e:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-03-09 23:22 . 2011-03-09 23:24 -------- d-----w- e:\program files\Spybot - Search & Destroy
2011-03-08 12:37 . 2011-03-08 12:37 -------- d-----w- e:\documents and settings\Petr\Data aplikací\Foxit Software
2011-03-08 11:48 . 2011-03-08 11:48 -------- d-----w- E:\$AVG
2011-03-07 11:50 . 2011-03-07 13:49 -------- d-----w- e:\windows\system32\oodag
2011-03-07 10:02 . 2011-03-07 10:02 -------- d-----w- e:\documents and settings\Petr\Local Settings\Data aplikací\AskToolbar
2011-03-07 10:02 . 2011-03-07 10:02 -------- d-----w- e:\documents and settings\Petr\Local Settings\Data aplikací\O&O
2011-03-07 10:02 . 2011-03-07 10:02 -------- d-----w- e:\program files\OO Software
2011-03-07 10:01 . 2011-03-07 10:01 -------- d-----w- e:\documents and settings\Petr\Local Settings\Data aplikací\Downloaded Installations
2011-03-03 20:29 . 2011-03-03 20:29 -------- d-----w- e:\program files\YouTube Downloader
2011-03-02 23:44 . 2011-03-02 23:44 -------- d-----w- e:\documents and settings\Petr\Data aplikací\AnvSoft
2011-03-02 23:44 . 2011-03-02 23:44 -------- d-----w- e:\program files\AnvSoft
2011-03-02 23:41 . 2011-03-02 23:41 -------- d-----w- e:\program files\FreeTime
2011-03-02 23:23 . 2011-03-02 23:23 -------- d-----w- e:\documents and settings\Petr\Local Settings\Data aplikací\Identities
2011-02-28 15:24 . 2011-02-28 15:24 107888 ----a-w- e:\windows\system32\CmdLineExt.dll
2011-02-28 12:43 . 2010-03-15 09:31 165376 ----a-w- e:\windows\system32\unrar.dll
2011-02-28 12:43 . 2010-01-17 15:18 151552 ----a-w- e:\windows\system32\ac3acm.acm
2011-02-28 12:43 . 2009-05-29 21:37 205824 ----a-w- e:\windows\system32\xvidvfw.dll
2011-02-28 12:43 . 2009-05-29 21:31 881664 ----a-w- e:\windows\system32\xvidcore.dll
2011-02-28 12:43 . 2004-01-25 16:18 217088 ----a-w- e:\windows\system32\yv12vfw.dll
2011-02-28 12:43 . 2010-04-16 18:00 85504 ----a-w- e:\windows\system32\ff_vfw.dll
2011-02-25 16:20 . 2011-02-25 16:22 -------- d-----w- e:\program files\Scorpions WinCheater
2011-02-25 15:19 . 2008-07-30 05:20 68616 ----a-w- e:\windows\system32\XAPOFX1_1.dll
2011-02-25 15:04 . 2011-02-25 15:04 -------- d-----w- e:\program files\Sega
2011-02-25 15:03 . 2011-02-25 15:03 -------- d-----w- e:\documents and settings\Petr\Data aplikací\InstallShield
2011-02-25 12:14 . 2011-02-25 12:25 -------- d-----w- e:\documents and settings\Petr\Local Settings\Data aplikací\Ahead
2011-02-25 12:09 . 2011-02-25 12:49 -------- d-----w- e:\documents and settings\Petr\Data aplikací\Ahead
2011-02-25 12:08 . 2011-02-25 12:13 -------- d-----w- e:\program files\Common Files\Ahead
2011-02-25 12:08 . 2011-02-25 12:08 -------- d-----w- e:\program files\Nero
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-21 18:20 . 2011-02-17 16:19 94208 ----a-w- e:\windows\DUMP4c1c.tmp
2011-02-17 17:32 . 2011-02-17 17:32 127034 ------r- e:\windows\bwUnin-8.1.1.50-8876480SL.exe
2011-02-17 15:48 . 2011-02-17 15:48 14656 ----a-w- e:\windows\gdrv.sys
2011-02-09 13:53 . 2006-03-02 12:00 270848 ----a-w- e:\windows\system32\sbe.dll
2011-02-09 13:53 . 2006-03-02 12:00 186880 ----a-w- e:\windows\system32\encdec.dll
2011-02-02 20:40 . 2011-02-17 17:49 472808 ----a-w- e:\windows\system32\deployJava1.dll
2011-02-02 18:19 . 2011-02-17 17:47 73728 ----a-w- e:\windows\system32\javacpl.cpl
2011-02-02 07:58 . 2011-02-17 15:32 2067456 ----a-w- e:\windows\system32\mstscax.dll
2011-01-27 11:57 . 2011-02-17 15:32 677888 ----a-w- e:\windows\system32\mstsc.exe
2011-01-21 14:44 . 2006-03-02 12:00 440320 ----a-w- e:\windows\system32\shimgvw.dll
2011-01-07 14:09 . 2006-03-02 12:00 290048 ----a-w- e:\windows\system32\atmfd.dll
2010-12-31 14:04 . 2006-03-02 12:00 1854976 ----a-w- e:\windows\system32\win32k.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OODefragTray"="e:\program files\OO Software\Defrag\oodtray.exe" [2011-01-25 2729800]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"e:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"e:\\Program Files\\ICQ7.4\\ICQ.exe"=
"e:\\Program Files\\Skype\\Phone\\Skype.exe"=
"e:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"e:\\Program Files\\eMule\\emule.exe"=
.
R2 OODefragAgent;O&O Defrag Agent;e:\program files\OO Software\Defrag\oodag.exe [25. 1. 2011 12:41 2336072]
.
Obsah adresáře 'Naplánované úlohy'
.
2011-03-27 e:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- e:\program files\Ask.com\UpdateTask.exe [2010-09-28 21:44]
.
.
------- Doplňkový sken -------
.
FF - ProfilePath - e:\documents and settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\t0cypn82.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - e:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - e:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - e:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - e:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Java Quick Starter: jqs@sun.com - e:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - e:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Foxit PDF Creator Toolbar: toolbar@ask.com - %profile%\extensions\toolbar@ask.com
FF - Ext: Tab Scope: tabscope@xuldev.org - %profile%\extensions\tabscope@xuldev.org
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: Personas: personas@christopher.beard - %profile%\extensions\personas@christopher.beard
FF - Ext: IE Tab 2 (FF 3.6+): {1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} - %profile%\extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}
FF - Ext: FastestFox: smarterwiki@wikiatic.com - %profile%\extensions\smarterwiki@wikiatic.com
FF - Ext: Flashblock: {3d7eb24f-2740-49df-8937-200b1cc08f8a} - %profile%\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
FF - Ext: FoxLingo: {ef62e1ce-d2a4-4cdd-b7ec-92b120366b66} - %profile%\extensions\{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}
FF - Ext: Forecastfox Weather: {0538E3E3-7E9B-4d49-8831-A227C80A7AD3} - %profile%\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
FF - Ext: Image Toolbar: {A4732521-77D9-447E-A557-B279AC923F06} - %profile%\extensions\{A4732521-77D9-447E-A557-B279AC923F06}
FF - Ext: FoxClocks: {d37dc5d0-431d-44e5-8c91-49419370caa1} - %profile%\extensions\{d37dc5d0-431d-44e5-8c91-49419370caa1}
FF - Ext: České slovníky pro kontrolu pravopisu: cs@dictionaries.addons.mozilla.org - %profile%\extensions\cs@dictionaries.addons.mozilla.org
FF - Ext: Back to Top: {3C9A65A6-9563-4485-BA4A-4BCD698BCFB4} - %profile%\extensions\{3C9A65A6-9563-4485-BA4A-4BCD698BCFB4}
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-27 03:11
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@e:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10m_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="e:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10m_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(696)
e:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2011-03-27 03:13:01
ComboFix-quarantined-files.txt 2011-03-27 01:12
.
Před spuštěním: Volných bajtů: 442 193 649 664
Po spuštění: Volných bajtů: 442 242 842 624
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(1)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(1)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
multi(0)disk(0)rdisk(0)partition(1)\WINDOWSA="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
.
- - End Of File - - 5A295401722A78C6497EC38202D4DBA3

[petrasek1]

No tak log je tu. Při spuštění to našlo nějaký rootkit. Včera večer mi opera padala tak často,že jsem myslel,že vycáknu. Opravdu netuším co by mohlo být příčinou těchto problémů. Jak jsem psal v prvním příspěvku tohoto topicu tak antivir jsem blbec odinstaloval a jiný nový nelze nainstalovat neustále to hlásí chybu. V přípříapě zájmu a rady jak sem skopírovat tyto chyby tak je sem umístím. Firefox nelze spustit vůbec. Před tím padal též velmi intenzivně a posílalo to hlášení o pádu. Teď už ho nespustím vůbec. Vyhodí mi to okno s chybou parsování a šlus. A instalaci windowsu mám poměrně čerstvou. Ještě mě napadla jedna možná příčina a to grafika(na tomto pc už jednou problém byl a byla vyměněna za jinou značku a výkonnější),ale v případě problému s grafikou by neměl být problém s instalací antiviru. Tak nevím. A znovu opakuji děkuji za vaše rady a váš čas a pomoc.

[Roli]

Pokud jsi tak ještě neučinil, přesuň Combofix na plochu

otevři si Poznámkový blok

do něj zkopíruj skript z následujícího okna:

Kód: Vybrat vše

File:: 
e:\windows\DUMP4c1c.tmp 

Folder::
E:\found.000
E:\$AVG
e:\documents and settings\Petr\Local Settings\Data aplikací\AskToolbar
e:\program files\Ask.com

AtJob::

ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:



Po aplikaci na Tebe vypadne další log, zkopíruj ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,

v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci


P.S. při problému s grafikou by opravdu neměl být problém s instalací antiviru, zkus až provedeš tu aksi s tím ComboFixem

přejít do Nouzového režimu co bude tam OS vyvádět.

[petrasek1]

Zkoušel jsem to 2x a pokaždé se mi objevila modrá obrazovka s nějakou hláškou o ukončení Windows. Nejprve napsal,že detekoval rootkit a restart a pak to pokračovalo a bylo tam něco jako fáze 1-4 a pak prolítla modrá obrazovka. A log se nevytvořil.

[Roli]

Zkus tu akci s tím skriptem provést v Nouzovém režimu.

[petrasek1]

ComboFix 11-03-26.02 - Petr . 03. 2011 21:09:26.4.2 - x86 NETWORK
Microsoft Windows XP Home Edition 5.1.2600.3.1250.1.1029.18.1022.804 [GMT 2:00]
Spuštěný z: e:\documents and settings\Petr\Plocha\ComboFix.exe
Použité ovládací přepínače :: e:\documents and settings\Petr\Plocha\CFScript.txt
FW: AVG Firewall *Disabled* {8decf618-9569-4340-b34a-d78d28969b66}
.
FILE ::
"e:\windows\DUMP4c1c.tmp"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
E:\$AVG
e:\$avg\$VAULT\V_00000001.fil
e:\$avg\$VAULT\V_00000002.fil
e:\$avg\$VAULT\V_00000003.fil
e:\$avg\$VAULT\vvfolder.idx
e:\documents and settings\Petr\Local Settings\Data aplikací\AskToolbar
e:\documents and settings\Petr\Local Settings\Data aplikací\AskToolbar\cache.dat
e:\documents and settings\Petr\Local Settings\Data aplikací\AskToolbar\config.xml
E:\found.000
e:\found.000\file0000.chk
e:\program files\Ask.com
e:\program files\Ask.com\assets\oobe\b.png
e:\program files\Ask.com\assets\oobe\bl.png
e:\program files\Ask.com\assets\oobe\br.png
e:\program files\Ask.com\assets\oobe\l.png
e:\program files\Ask.com\assets\oobe\pointer.png
e:\program files\Ask.com\assets\oobe\r.png
e:\program files\Ask.com\assets\oobe\t.png
e:\program files\Ask.com\assets\oobe\tl.png
e:\program files\Ask.com\assets\oobe\tr.png
e:\program files\Ask.com\cb_245.ico
e:\program files\Ask.com\cobrand.ico
e:\program files\Ask.com\config.xml
e:\program files\Ask.com\favicon.ico
e:\program files\Ask.com\fv_244.ico
e:\program files\Ask.com\GenericAskToolbar.dll
e:\program files\Ask.com\mupcfg.xml
e:\program files\Ask.com\SaUpdate.exe
e:\program files\Ask.com\UpdateTask.exe
e:\windows\DUMP4c1c.tmp
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-02-27 do 2011-03-27 )))))))))))))))))))))))))))))))
.
.
2011-03-27 19:02 . 2011-03-27 19:02 -------- d-----w- e:\documents and settings\Administrator
2011-03-27 16:02 . 2011-03-27 16:02 -------- d-----w- e:\program files\Common Files\Skype
2011-03-27 16:02 . 2011-03-27 16:02 -------- d-----r- e:\program files\Skype
2011-03-27 10:24 . 2011-03-18 17:55 781272 ----a-w- e:\program files\Mozilla Firefox\mozsqlite3.dll
2011-03-27 10:24 . 2011-03-18 17:55 728024 ----a-w- e:\program files\Mozilla Firefox\libGLESv2.dll
2011-03-27 10:24 . 2011-03-18 17:55 1893336 ----a-w- e:\program files\Mozilla Firefox\d3dx9_42.dll
2011-03-27 10:24 . 2011-03-18 17:55 1874904 ----a-w- e:\program files\Mozilla Firefox\mozjs.dll
2011-03-27 10:24 . 2011-03-18 17:55 15832 ----a-w- e:\program files\Mozilla Firefox\mozalloc.dll
2011-03-27 10:24 . 2011-03-18 17:55 142296 ----a-w- e:\program files\Mozilla Firefox\libEGL.dll
2011-03-27 10:24 . 2011-03-18 17:55 142296 ----a-w- e:\program files\Mozilla Firefox\components\browsercomps.dll
2011-03-27 10:24 . 2011-03-18 17:55 1975768 ----a-w- e:\program files\Mozilla Firefox\D3DCompiler_42.dll
2011-03-27 01:48 . 2011-03-27 01:48 -------- d-----w- e:\program files\Microsoft CAPICOM 2.1.0.2
2011-03-26 16:28 . 2009-08-06 18:23 274288 ----a-w- e:\windows\system32\mucltui.dll
2011-03-26 16:28 . 2009-08-06 18:23 215920 ----a-w- e:\windows\system32\muweb.dll
2011-03-26 07:53 . 2011-03-26 07:53 -------- d-----w- e:\program files\Microsoft Silverlight
2011-03-25 12:38 . 2011-03-25 12:38 -------- d-----w- e:\program files\trend micro
2011-03-25 12:38 . 2011-03-25 12:38 -------- d-----w- E:\rsit
2011-03-21 19:56 . 2011-03-21 19:56 -------- d-----w- e:\windows\system32\wbem\Repository
2011-03-20 22:25 . 2011-03-20 22:25 -------- d-----w- e:\documents and settings\Petr\Data aplikací\Leadertech
2011-03-14 21:22 . 2011-03-14 21:22 -------- d-----w- e:\documents and settings\Petr\Data aplikací\IObit
2011-03-14 21:22 . 2011-03-14 21:22 -------- d-----w- e:\program files\AIMP2 Tools
2011-03-09 23:22 . 2011-03-22 22:22 -------- d-----w- e:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-03-09 23:22 . 2011-03-09 23:24 -------- d-----w- e:\program files\Spybot - Search & Destroy
2011-03-08 12:37 . 2011-03-08 12:37 -------- d-----w- e:\documents and settings\Petr\Data aplikací\Foxit Software
2011-03-07 11:50 . 2011-03-07 13:49 -------- d-----w- e:\windows\system32\oodag
2011-03-07 10:02 . 2011-03-07 10:02 -------- d-----w- e:\documents and settings\Petr\Local Settings\Data aplikací\O&O
2011-03-07 10:02 . 2011-03-07 10:02 -------- d-----w- e:\program files\OO Software
2011-03-07 10:01 . 2011-03-07 10:01 -------- d-----w- e:\documents and settings\Petr\Local Settings\Data aplikací\Downloaded Installations
2011-03-03 20:29 . 2011-03-03 20:29 -------- d-----w- e:\program files\YouTube Downloader
2011-03-02 23:44 . 2011-03-02 23:44 -------- d-----w- e:\documents and settings\Petr\Data aplikací\AnvSoft
2011-03-02 23:44 . 2011-03-02 23:44 -------- d-----w- e:\program files\AnvSoft
2011-03-02 23:41 . 2011-03-02 23:41 -------- d-----w- e:\program files\FreeTime
2011-03-02 23:23 . 2011-03-02 23:23 -------- d-----w- e:\documents and settings\Petr\Local Settings\Data aplikací\Identities
2011-02-28 15:24 . 2011-02-28 15:24 107888 ----a-w- e:\windows\system32\CmdLineExt.dll
2011-02-28 12:43 . 2010-03-15 09:31 165376 ----a-w- e:\windows\system32\unrar.dll
2011-02-28 12:43 . 2010-01-17 15:18 151552 ----a-w- e:\windows\system32\ac3acm.acm
2011-02-28 12:43 . 2009-05-29 21:37 205824 ----a-w- e:\windows\system32\xvidvfw.dll
2011-02-28 12:43 . 2009-05-29 21:31 881664 ----a-w- e:\windows\system32\xvidcore.dll
2011-02-28 12:43 . 2004-01-25 16:18 217088 ----a-w- e:\windows\system32\yv12vfw.dll
2011-02-28 12:43 . 2010-04-16 18:00 85504 ----a-w- e:\windows\system32\ff_vfw.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-17 17:32 . 2011-02-17 17:32 127034 ------r- e:\windows\bwUnin-8.1.1.50-8876480SL.exe
2011-02-17 15:48 . 2011-02-17 15:48 14656 ----a-w- e:\windows\gdrv.sys
2011-02-09 13:53 . 2006-03-02 12:00 270848 ----a-w- e:\windows\system32\sbe.dll
2011-02-09 13:53 . 2006-03-02 12:00 186880 ----a-w- e:\windows\system32\encdec.dll
2011-02-02 20:40 . 2011-02-17 17:49 472808 ----a-w- e:\windows\system32\deployJava1.dll
2011-02-02 18:19 . 2011-02-17 17:47 73728 ----a-w- e:\windows\system32\javacpl.cpl
2011-02-02 07:58 . 2011-02-17 15:32 2067456 ----a-w- e:\windows\system32\mstscax.dll
2011-01-27 11:57 . 2011-02-17 15:32 677888 ----a-w- e:\windows\system32\mstsc.exe
2011-01-21 14:44 . 2006-03-02 12:00 440320 ----a-w- e:\windows\system32\shimgvw.dll
2011-01-07 14:09 . 2006-03-02 12:00 290048 ----a-w- e:\windows\system32\atmfd.dll
2010-12-31 14:04 . 2006-03-02 12:00 1854976 ----a-w- e:\windows\system32\win32k.sys
2011-03-18 17:55 . 2011-03-27 10:24 142296 ----a-w- e:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-03-27_01.11.40 )))))))))))))))))))))))))))))))))))))))))
.
+ 2006-03-02 12:00 . 2011-03-27 19:08 67312 e:\windows\system32\perfc009.dat
+ 2006-03-02 12:00 . 2011-03-27 19:08 77872 e:\windows\system32\perfc005.dat
+ 2006-03-02 12:00 . 2011-03-27 19:08 432356 e:\windows\system32\perfh009.dat
+ 2006-03-02 12:00 . 2011-03-27 19:08 428750 e:\windows\system32\perfh005.dat
+ 2011-03-27 01:48 . 2011-03-27 01:48 470528 e:\windows\Installer\98e00.msi
+ 2011-02-17 18:15 . 2011-03-27 12:01 102400 e:\windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\ARPPRODUCTICON.exe
- 2011-02-17 18:15 . 2011-02-23 19:01 102400 e:\windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\ARPPRODUCTICON.exe
+ 2011-03-27 16:02 . 2011-03-27 16:02 371272 e:\windows\Installer\{5335DADB-34BA-4AE8-A519-648D78498846}\SkypeIcon.exe
+ 2011-03-27 12:01 . 2011-03-27 12:01 2230272 e:\windows\Installer\a6d42f.msi
+ 2011-03-27 16:02 . 2011-03-27 16:02 1574912 e:\windows\Installer\11906.msi
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="e:\program files\Skype\Phone\Skype.exe" [2011-03-08 17037704]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OODefragTray"="e:\program files\OO Software\Defrag\oodtray.exe" [2011-01-25 2729800]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"e:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"e:\\Program Files\\ICQ7.4\\ICQ.exe"=
"e:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"e:\\Program Files\\eMule\\emule.exe"=
"e:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
S2 OODefragAgent;O&O Defrag Agent;e:\program files\OO Software\Defrag\oodag.exe [25. 1. 2011 12:41 2336072]
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
FF - ProfilePath - e:\documents and settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\t0cypn82.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - e:\program files\Ask.com\GenericAskToolbar.dll
Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - e:\program files\Ask.com\GenericAskToolbar.dll
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-27 21:14
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@e:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10m_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="e:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10m_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(584)
e:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2011-03-27 21:15:17
ComboFix-quarantined-files.txt 2011-03-27 19:15
ComboFix2.txt 2011-03-27 01:13
.
Před spuštěním: Volných bajtů: 441 948 196 864
Po spuštění: Volných bajtů: 441 935 917 056
.
- - End Of File - - 91030E3EADECF4C52F0FC197A5CA9C77

[Roli]

Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.


Použij T-Cleaner, který smaže případné zbytky po aplikacích které jsme použili.

Jen před jeho stažením a při použití stopni antivir, protože ho muže detekovat jako vir ale není tomu tak.


Také použij AVG Remover, protože tam pořád z AVG něco zůstává.


Pak dej vědět jaký je stav PC.

[petrasek1]

Vše provedeno dle návodu. Vyskočil mi log z toho AVG mám ho sem vložit? Zkusím restart a uvidím co to provede. Start nebyl moc dobrý. Spustil jsem Firefox a ihned mi vyskočila hláška o pádu. Mám teď novou verzi a tu se mi podařilo rozchodit. Ještě dotaz budu si moc pak nainstalovat zpět to AVG od Chipu?
23:38 vyskytl se problém v aplikaci icq tak mi jí to schodilo.

[Roli]

Řekl bych že systém je docela slušně nakopnutý a asi by stálo za to disk naformátovat.

AVG už do PC nedávej nikdy !!!

Jak se PC chová v Nouzovém režimu ?