problem s pripojenim

[eko]

zdravim nemohu se pripojit na net jen z nouzoveho rezimu plus se mi zacali instalovat sami odsebe ovladace na mys


Logfile of random's system information tool 1.08 (written by random/random)
Run by Eko at 2011-05-05 09:23:40
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 56 GB (37%) free of 153 GB
Total RAM: 3036 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:23:46, on 5.5.2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Safe mode with network support

Running processes:
C:\Windows\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Eko\Desktop\RSIT.exe
C:\Program Files\trend micro\Eko.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [Windows Defender] "%ProgramFiles%\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [AmIcoSinglun] "C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe"
O4 - HKLM\..\Run: [HControlUser] "C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe"
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [ATKMEDIA] "C:\Program Files\ASUS\ATK Media\DMedia.exe"
O4 - HKLM\..\Run: [Wireless Console 3] "C:\Program Files\ASUS\Wireless Console 3\wcourier.exe"
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] "C:\Windows\AsScrPro.exe"
O4 - HKLM\..\Run: [ETDWare] "C:\Program Files\Elantech\ETDCtrl.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [lxbkbmgr.exe] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [IgfxTray] "C:\Windows\system32\igfxtray.exe"
O4 - HKLM\..\Run: [HotKeysCmds] "C:\Windows\system32\hkcmd.exe"
O4 - HKLM\..\Run: [Persistence] "C:\Windows\system32\igfxpers.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [SRS Premium Sound] "C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe" /hideme
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
O9 - Extra button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.co ... 4.22.0.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CCS\Services\Tcpip\..\{2D785916-533E-45A6-8EB4-BF89569DAC8E}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CS1\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O17 - HKLM\System\CS2\Services\Tcpip\..\{2AB2B1E8-3755-4CF2-B1C3-CA23498F81B2}: NameServer = 195.146.100.100,195.146.100.5
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O20 - AppInit_DLLs: C:\Windows\system32\guard32.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: lxbk_device - - C:\Windows\system32\lxbkcoms.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: rpcnetp - Unknown owner - C:\Windows\System32\rpcnetp.exe

--
End of file - 6503 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2011-04-08 1236104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-03-07 298160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll [2011-03-07 848952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-03-08 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-03-07 298160]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2011-04-08 1236104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"AmIcoSinglun"=C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe [2008-10-01 237568]
"HControlUser"=C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [2008-08-18 98304]
"ATKOSD2"=C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [2009-03-04 8392704]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMedia.exe [2008-12-29 159744]
"Wireless Console 3"=C:\Program Files\ASUS\Wireless Console 3\wcourier.exe [2009-02-07 1593344]
"ASUS Screen Saver Protector"=C:\Windows\AsScrPro.exe [2009-07-27 3054136]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2009-03-06 424352]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"lxbkbmgr.exe"=C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe [2008-02-28 74408]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-02-11 137752]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-02-11 171032]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-02-11 172568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-07-27 39408]
"SRS Premium Sound"=C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe [2009-03-20 3261688]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\Windows\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-02-11 228864]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-05-05 09:23:40 ----D---- C:\rsit
2011-05-05 09:23:40 ----D---- C:\Program Files\trend micro
2011-05-05 08:44:47 ----A---- C:\Windows\ntbtlog.txt
2011-05-05 08:25:44 ----N---- C:\Windows\system32\MpSigStub.exe
2011-05-04 19:10:42 ----D---- C:\ProgramData\Comodo
2011-05-04 19:10:40 ----D---- C:\Program Files\COMODO
2011-05-04 19:10:40 ----A---- C:\Windows\system32\gdiplus.dll
2011-05-04 19:03:40 ----A---- C:\Windows\system32\rpcnetp.dll
2011-05-04 19:03:18 ----A---- C:\Windows\system32\rpcnetp.exe
2011-05-04 18:25:47 ----D---- C:\ProgramData\Zillya Internet Security
2011-05-04 18:24:49 ----D---- C:\Program Files\Common Files\Zillya Internet Security
2011-05-04 15:11:06 ----D---- C:\ProgramData\Zillya Antivirus
2011-05-04 15:11:04 ----D---- C:\Program Files\Common Files\Zillya Antivirus
2011-05-03 18:57:51 ----D---- C:\Program Files\Crawler
2011-04-27 06:48:47 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2011-04-27 06:48:47 ----A---- C:\Windows\system32\Apphlpdm.dll
2011-04-27 06:48:43 ----A---- C:\Windows\system32\XpsPrint.dll
2011-04-14 07:33:09 ----A---- C:\Windows\system32\inetcomm.dll
2011-04-14 07:33:08 ----A---- C:\Windows\system32\mfc42u.dll
2011-04-14 07:33:07 ----A---- C:\Windows\system32\mfc42.dll
2011-04-14 07:33:05 ----A---- C:\Windows\system32\atmlib.dll
2011-04-14 07:33:05 ----A---- C:\Windows\system32\atmfd.dll
2011-04-14 07:32:54 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-04-14 07:32:54 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-04-14 07:32:54 ----A---- C:\Windows\system32\drivers\srv.sys
2011-04-14 07:32:53 ----A---- C:\Windows\system32\win32k.sys
2011-04-14 07:32:52 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-04-14 07:32:52 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-04-14 07:32:52 ----A---- C:\Windows\system32\dnsapi.dll
2011-04-14 07:32:44 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-04-14 07:32:44 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-04-14 07:32:44 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-04-14 07:32:44 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-04-10 11:53:29 ----A---- C:\Windows\Lexstat.ini
2011-04-10 11:52:26 ----D---- C:\Program Files\Lexmark X1100 Series
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkutil.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkusb1.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkserv.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkprox.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkpplc.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkpmui.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbklmpm.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkjswr.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\LXBKinst.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkinsr.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkinsb.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkins.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkinpa.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkih.exe
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkiesc.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\LXBKhcp.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkhbn3.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkgf.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkcur.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkcu.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkcoms.exe
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkcomm.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkcomc.dll
2011-04-10 11:52:14 ----A---- C:\Windows\system32\lxbkcfg.exe
2011-04-10 11:52:14 ----A---- C:\Windows\system32\LXBKcfg.dll
2011-04-10 11:51:59 ----D---- C:\drivers

======List of files/folders modified in the last 1 months======

2011-05-05 09:23:40 ----D---- C:\Program Files
2011-05-05 09:13:32 ----D---- C:\Windows\Temp
2011-05-05 08:59:38 ----D---- C:\Windows\Prefetch
2011-05-05 08:44:47 ----D---- C:\Windows
2011-05-05 08:41:00 ----D---- C:\Windows\Debug
2011-05-05 08:25:44 ----D---- C:\Windows\System32
2011-05-05 07:59:01 ----D---- C:\Users\Eko\AppData\Roaming\uTorrent
2011-05-05 07:50:39 ----D---- C:\Windows\system32\catroot2
2011-05-05 07:39:55 ----A---- C:\Windows\system32\guard32.dll
2011-05-05 07:38:56 ----SHD---- C:\Windows\Installer
2011-05-04 19:12:35 ----D---- C:\Windows\system32\drivers
2011-05-04 19:11:43 ----D---- C:\Windows\system32\catroot
2011-05-04 19:11:43 ----D---- C:\Windows\inf
2011-05-04 19:10:42 ----HD---- C:\ProgramData
2011-05-04 19:06:00 ----A---- C:\Windows\system32\agremove.exe
2011-05-04 18:31:40 ----D---- C:\Program Files\Google
2011-05-04 18:31:38 ----D---- C:\Program Files\Common Files\PX Storage Engine
2011-05-04 18:24:49 ----D---- C:\Program Files\Common Files
2011-05-04 17:55:47 ----D---- C:\Users\Eko\AppData\Roaming\ICQ
2011-05-03 07:59:38 ----D---- C:\Windows\system32\WDI
2011-05-02 16:41:53 ----SHD---- C:\System Volume Information
2011-05-02 15:01:01 ----A---- C:\Windows\win.ini
2011-05-02 11:28:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-05-02 09:31:15 ----D---- C:\Windows\system32\Tasks
2011-05-02 09:30:49 ----D---- C:\ProgramData\NortonInstaller
2011-04-27 07:20:20 ----D---- C:\Windows\winsxs
2011-04-27 07:20:19 ----D---- C:\Windows\AppPatch
2011-04-22 06:17:02 ----D---- C:\Program Files\Microsoft Silverlight
2011-04-18 15:46:44 ----A---- C:\Windows\system32\mrt.exe
2011-04-14 08:13:33 ----D---- C:\Windows\Microsoft.NET
2011-04-14 08:13:32 ----RSD---- C:\Windows\assembly
2011-04-14 07:33:24 ----D---- C:\Program Files\Windows Mail
2011-04-13 10:12:13 ----SD---- C:\Windows\Downloaded Program Files
2011-04-13 06:53:36 ----D---- C:\Windows\Web
2011-04-10 11:52:56 ----D---- C:\Windows\twain_32

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-02-11 329752]
R0 lullaby;lullaby; C:\Windows\system32\DRIVERS\lullaby.sys [2008-05-29 15416]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2011-05-05 19088]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2011-05-05 36568]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2011-05-05 81888]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-09-05 1183744]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-03-15 218688]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2009-03-13 140800]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2010-08-21 26600]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2008-11-03 13880]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E60x86.sys [2009-08-05 48640]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2008-12-24 14392]
S1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2011-05-05 238960]
S2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
S3 CRFILTER;USB Mass Storage Filter; C:\Windows\system32\DRIVERS\CRFILTER.sys [2008-04-07 6656]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2011-02-11 9036800]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
S3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2008-08-11 1752704]
S3 SRS_PremiumSound_Service;SRS Labs Premium Sound; C:\Windows\system32\drivers\srs_PremiumSound_i386.sys [2009-01-14 230952]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys []
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 131000]
S3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-02 194048]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 ASLDRService;ASLDR Service; C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe [2008-08-14 100920]
S2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-03-07 135664]
S2 lxbk_device;lxbk_device; C:\Windows\system32\lxbkcoms.exe [2008-02-19 537256]
S2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-06-15 71096]
S2 rpcnetp;rpcnetp; C:\Windows\System32\rpcnetp.exe [2011-05-05 17408]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-03-07 182768]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

-----------------EOF-----------------

[JaRon]

otestuj v nudzovom rezime na www.virustotal.com subor C:\Windows\System32\rpcnetp.exe

[eko]

2011.05.05.00

2011.05.04

-



AntiVir

7.11.7.150

2011.05.04

-



Antiy-AVL

2.0.3.7

2011.05.05

-



Avast

4.8.1351.0

2011.05.04

-



Avast5

5.0.677.0

2011.05.04

-



AVG

10.0.0.1190

2011.05.04

-



BitDefender

7.2

2011.05.05

-



CAT-QuickHeal

11.00

2011.05.04

-



ClamAV

0.97.0.0

2011.05.05

-



Commtouch

5.3.2.6

2011.05.05

-



Comodo

8587

2011.05.05

-



DrWeb

5.0.2.03300

2011.05.05

-



Emsisoft

5.1.0.5

2011.05.05

-



eSafe

7.0.17.0

2011.05.04

-



eTrust-Vet

36.1.8308

2011.05.05

-



F-Prot

4.6.2.117

2011.05.04

-



F-Secure

9.0.16440.0

2011.05.04

-



Fortinet

4.2.257.0

2011.05.05

-



GData

22

2011.05.05

-



Ikarus

T3.1.1.103.0

2011.05.05

-



Jiangmin

13.0.900

2011.05.03

-



K7AntiVirus

9.100.4563

2011.05.04

-



Kaspersky

9.0.0.837

2011.05.05

-



McAfee

5.400.0.1158

2011.05.05

-



McAfee-GW-Edition

2010.1D

2011.05.05

-



Microsoft

1.6802

2011.05.05

-



NOD32

6095

2011.05.05

-



Norman

6.07.07

2011.05.05

-



Panda

10.0.3.5

2011.05.04

-



PCTools

7.0.3.5

2011.05.04

-



Prevx

3.0

2011.05.05

-



Rising

23.56.02.06

2011.05.04

-



Sophos

4.65.0

2011.05.05

-



SUPERAntiSpyware

4.40.0.1006

2011.05.05

-



Symantec

20101.3.2.89

2011.05.05

-



TheHacker

6.7.0.1.187

2011.05.05

-



TrendMicro

9.200.0.1012

2011.05.05

-



TrendMicro-HouseCall

9.200.0.1012

2011.05.05

-



VBA32

3.12.16.0

2011.05.05

-



VIPRE

9193

2011.05.04

-



ViRobot

2011.5.4.4446

2011.05.05

-



VirusBuster

13.6.336.0

2011.05.04

[eko]

trochu blbe jsem to obkopiroval ale nenaslo to nic v tom nouzovem rezimu se spatne pracuje

[JaRon]

start-spustit-services.msc <enter>
najdi a nastav typ spustenia na zakazane u sluzby:
rpcnetp
+
restart a kontrola s MBAM

[eko]

mbam nic nenasel rpcnetp tam nemuzu najit v tom servisu vse slape ale nejde pripojitnet vse mam vyplnene ip atd a nic

[JaRon]

skus obnovu systemu k datumu ked vsetko fungovalo

[eko]

ok jdu na to jak to bude ozvu se

[eko]

obnova se nezdarila tak jsem to projel combofixem po restartu to najelo do normalu naistaloval jsem novej eset smart 5 betu a slapeto dekuji za tvou pomoc

[JaRon]

nemas zac - som rad, ze si samostatny jedinec

[eko]

ahojj mohl bys sem mi kouknout na log od rana prej furt chodi odemne jeden a ten tyz mail dekuji

Logfile of random's system information tool 1.08 (written by random/random)
Run by Eko at 2011-05-10 13:58:02
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 86 GB (56%) free of 153 GB
Total RAM: 3036 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:58:07, on 10.5.2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\IObit\Advanced SystemCare 4\PMonitor.exe
C:\Program files\P4G\BatteryLife.exe
C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\AsScrPro.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe
C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10p_ActiveX.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Eko\Desktop\RSIT.exe
C:\Program Files\trend micro\Eko.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [AmIcoSinglun] "C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe"
O4 - HKLM\..\Run: [HControlUser] "C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe"
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [ATKMEDIA] "C:\Program Files\ASUS\ATK Media\DMedia.exe"
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] "C:\Windows\AsScrPro.exe"
O4 - HKLM\..\Run: [ETDWare] "C:\Program Files\Elantech\ETDCtrl.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [IgfxTray] "C:\Windows\system32\igfxtray.exe"
O4 - HKLM\..\Run: [HotKeysCmds] "C:\Windows\system32\hkcmd.exe"
O4 - HKLM\..\Run: [Persistence] "C:\Windows\system32\igfxpers.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [SRS Premium Sound] "C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe" /hideme
O4 - HKCU\..\Run: [Advanced SystemCare 4] "C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe"
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
O9 - Extra button: ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - (no file)
O9 - Extra 'Tools' menuitem: ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - (no file)
O9 - Extra button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.co ... 4.22.0.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2D785916-533E-45A6-8EB4-BF89569DAC8E}: NameServer = 156.154.70.25,156.154.71.25
O20 - AppInit_DLLs: C:\Windows\System32\guard32.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Advanced SystemCare Service (AdvancedSystemCareService) - IObit - C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe
O23 - Service: Avira FireWall (AntiVirFirewallService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: FortiClient SSL VPN (FortiSslvpnDaemon) - Fortinet Inc. - C:\Windows\system32\FortiSSLVPNdaemon.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: lxbk_device - - C:\Windows\system32\lxbkcoms.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe

--
End of file - 7057 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-03-07 298160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll [2011-03-07 848952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-03-08 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-03-07 298160]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun"=C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe [2008-10-01 237568]
"HControlUser"=C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [2008-08-18 98304]
"ATKOSD2"=C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [2009-03-04 8392704]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMedia.exe [2008-12-29 159744]
"ASUS Screen Saver Protector"=C:\Windows\AsScrPro.exe [2009-07-27 3054136]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2009-03-06 424352]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-02-11 137752]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-02-11 171032]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-02-11 172568]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2011-03-04 281768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-07-27 39408]
"SRS Premium Sound"=C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe [2009-03-20 3261688]
"Advanced SystemCare 4"=C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe [2011-04-22 402832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-02-11 228864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2011-05-10 13:58:02 ----D---- C:\rsit
2011-05-10 12:18:50 ----D---- C:\Users\Eko\AppData\Roaming\Avira
2011-05-10 12:12:38 ----A---- C:\Windows\system32\drivers\ssmdrv.sys
2011-05-10 12:12:36 ----A---- C:\Windows\system32\drivers\avipbb.sys
2011-05-10 12:12:36 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2011-05-10 12:12:36 ----A---- C:\Windows\system32\drivers\avfwot.sys
2011-05-10 12:12:36 ----A---- C:\Windows\system32\drivers\avfwim.sys
2011-05-10 12:12:35 ----D---- C:\Program Files\Avira
2011-05-10 12:10:58 ----D---- C:\Windows\Internet Logs
2011-05-10 07:00:31 ----D---- C:\ProgramData\Avira
2011-05-09 20:57:25 ----SHD---- C:\Config.Msi
2011-05-09 15:31:08 ----D---- C:\ProgramData\Applications
2011-05-09 12:13:51 ----D---- C:\$RECYCLE.BIN
2011-05-09 12:04:07 ----D---- C:\Windows\temp
2011-05-09 11:40:42 ----A---- C:\Windows\NIRCMD.exe
2011-05-09 10:21:31 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2011-05-09 10:21:30 ----D---- C:\ProgramData\Malwarebytes
2011-05-09 10:21:26 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-05-09 10:21:26 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-05-09 09:40:18 ----D---- C:\ProgramData\ESET
2011-05-09 09:37:22 ----ASH---- C:\hiberfil.sys
2011-05-09 09:18:07 ----A---- C:\Windows\system32\drivers\abndis.sys
2011-05-09 08:31:09 ----A---- C:\Windows\system32\ATSpy.sys
2011-05-09 08:20:36 ----D---- C:\Users\Eko\AppData\Roaming\KIS_Temp
2011-05-09 08:18:40 ----D---- C:\Users\Eko\AppData\Roaming\Kingsoft
2011-05-09 07:54:49 ----N---- C:\Windows\system32\drivers\klif.sys
2011-05-08 19:54:50 ----D---- C:\Windows\Minidump
2011-05-08 19:22:29 ----D---- C:\Users\Eko\AppData\Roaming\CheckPoint
2011-05-08 19:21:51 ----A---- C:\Windows\system32\drivers\netio.sys
2011-05-08 19:02:37 ----D---- C:\ProgramData\CheckPoint
2011-05-08 09:27:23 ----D---- C:\Users\Eko\AppData\Roaming\IObit
2011-05-08 09:27:20 ----D---- C:\Program Files\IObit
2011-05-07 17:08:22 ----D---- C:\Users\Eko\AppData\Roaming\Software Inspection Library
2011-05-07 16:53:41 ----D---- C:\Users\Eko\AppData\Roaming\BullGuard
2011-05-05 18:09:36 ----D---- C:\Users\Eko\AppData\Roaming\ESET
2011-05-05 17:52:55 ----A---- C:\Windows\system32\drivers\PktIcpt.sys
2011-05-05 16:32:23 ----A---- C:\Windows\system32\drivers\GRD.sys
2011-05-05 15:48:17 ----A---- C:\Windows\system32\drivers\MiniIcpt.sys
2011-05-05 15:48:16 ----A---- C:\Windows\system32\drivers\GDBehave.sys
2011-05-05 15:48:12 ----A---- C:\Windows\system32\drivers\gdwfpcd32.sys
2011-05-05 11:58:48 ----RD---- C:\RavBin
2011-05-05 11:53:42 ----A---- C:\Windows\system32\agremove.exe
2011-05-05 10:26:13 ----A---- C:\Windows\system32\CF21849.exe
2011-05-05 10:24:55 ----D---- C:\Windows\ERDNT
2011-05-05 09:23:40 ----D---- C:\Program Files\trend micro
2011-05-05 08:25:44 ----N---- C:\Windows\system32\MpSigStub.exe
2011-05-04 19:10:40 ----D---- C:\Program Files\COMODO
2011-05-04 19:10:40 ----A---- C:\Windows\system32\gdiplus.dll
2011-04-27 06:48:47 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2011-04-27 06:48:47 ----A---- C:\Windows\system32\Apphlpdm.dll
2011-04-27 06:48:43 ----A---- C:\Windows\system32\XpsPrint.dll
2011-04-20 09:47:28 ----A---- C:\Windows\system32\drivers\EpfwLWF.sys
2011-04-14 07:33:09 ----A---- C:\Windows\system32\inetcomm.dll
2011-04-14 07:33:08 ----A---- C:\Windows\system32\mfc42u.dll
2011-04-14 07:33:07 ----A---- C:\Windows\system32\mfc42.dll
2011-04-14 07:33:05 ----A---- C:\Windows\system32\atmlib.dll
2011-04-14 07:33:05 ----A---- C:\Windows\system32\atmfd.dll
2011-04-14 07:32:54 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-04-14 07:32:54 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-04-14 07:32:54 ----A---- C:\Windows\system32\drivers\srv.sys
2011-04-14 07:32:53 ----A---- C:\Windows\system32\win32k.sys
2011-04-14 07:32:52 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-04-14 07:32:52 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-04-14 07:32:52 ----A---- C:\Windows\system32\dnsapi.dll
2011-04-14 07:32:44 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-04-14 07:32:44 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-04-14 07:32:44 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-04-14 07:32:44 ----A---- C:\Windows\system32\drivers\bowser.sys

======List of files/folders modified in the last 1 months======

2011-05-10 13:46:19 ----D---- C:\Windows\System32
2011-05-10 13:42:33 ----D---- C:\Windows
2011-05-10 13:16:45 ----SHD---- C:\System Volume Information
2011-05-10 12:30:03 ----D---- C:\Users\Eko\AppData\Roaming\uTorrent
2011-05-10 12:14:35 ----D---- C:\Windows\system32\drivers
2011-05-10 12:13:23 ----D---- C:\Windows\system32\catroot
2011-05-10 12:13:23 ----D---- C:\Windows\inf
2011-05-10 12:12:35 ----D---- C:\Program Files
2011-05-10 12:11:24 ----D---- C:\ProgramData
2011-05-10 12:07:57 ----D---- C:\Windows\Prefetch
2011-05-10 09:40:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-05-09 21:04:30 ----D---- C:\Windows\system32\catroot2
2011-05-09 20:58:09 ----SHD---- C:\Windows\Installer
2011-05-09 20:57:59 ----D---- C:\Program Files\Common Files
2011-05-09 20:57:49 ----DC---- C:\Windows\system32\DRVSTORE
2011-05-09 15:33:39 ----SD---- C:\Users\Eko\AppData\Roaming\Microsoft
2011-05-09 14:51:03 ----D---- C:\Windows\system32\config
2011-05-09 14:49:10 ----D---- C:\ProgramData\Norton
2011-05-09 12:13:54 ----A---- C:\Windows\system.ini
2011-05-09 12:13:43 ----D---- C:\Windows\system32\drivers\etc
2011-05-09 11:58:00 ----D---- C:\Windows\AppPatch
2011-05-09 11:37:07 ----D---- C:\Windows\Provisioning
2011-05-09 11:23:28 ----D---- C:\Users\Eko\AppData\Roaming\ICQ
2011-05-09 11:22:02 ----D---- C:\Program Files\ICQ7.4
2011-05-09 10:41:31 ----D---- C:\Windows\system32\Tasks
2011-05-09 09:49:50 ----D---- C:\Windows\Tasks
2011-05-09 09:12:08 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-05-08 19:22:03 ----D---- C:\Windows\winsxs
2011-05-08 11:32:09 ----D---- C:\ProgramData\Atheros
2011-05-05 12:48:11 ----D---- C:\Windows\Debug
2011-05-05 10:26:13 ----D---- C:\Windows\system32\cs-CZ
2011-05-05 10:18:26 ----D---- C:\Windows\Globalization
2011-05-05 07:39:55 ----A---- C:\Windows\system32\guard32.dll
2011-05-04 18:31:40 ----D---- C:\Program Files\Google
2011-05-04 18:31:38 ----D---- C:\Program Files\Common Files\PX Storage Engine
2011-05-03 07:59:38 ----D---- C:\Windows\system32\WDI
2011-05-02 15:01:01 ----A---- C:\Windows\win.ini
2011-04-22 06:17:02 ----D---- C:\Program Files\Microsoft Silverlight
2011-04-18 15:46:44 ----A---- C:\Windows\system32\mrt.exe
2011-04-14 08:13:33 ----D---- C:\Windows\Microsoft.NET
2011-04-14 08:13:32 ----RSD---- C:\Windows\assembly
2011-04-14 07:33:24 ----D---- C:\Program Files\Windows Mail
2011-04-13 10:12:13 ----SD---- C:\Windows\Downloaded Program Files
2011-04-13 06:53:36 ----D---- C:\Windows\Web

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-02-11 329752]
R0 lullaby;lullaby; C:\Windows\system32\DRIVERS\lullaby.sys [2008-05-29 15416]
R1 avfwot;avfwot; C:\Windows\system32\DRIVERS\avfwot.sys [2011-03-04 102856]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2011-03-04 137656]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2011-05-05 19088]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2011-05-05 238960]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2011-05-05 36568]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2011-03-04 61960]
R3 ABndisMP;ABndisMP; C:\Windows\system32\DRIVERS\abndis.sys [2011-02-21 37968]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-09-05 1183744]
R3 avfwim;AvFw Packet Filter Miniport; C:\Windows\system32\DRIVERS\avfwim.sys [2010-06-17 79432]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-03-15 218688]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2009-03-13 140800]
R3 GEARAspiWDM;GEARAspiWDM; C:\Windows\System32\drivers\GEARAspiWDM.sys [2010-08-21 26600]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2011-02-11 9036800]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2008-11-03 13880]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E60x86.sys [2009-08-05 48640]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2008-12-24 14392]
R3 pppop;PPPoP WAN Adapter; C:\Windows\system32\DRIVERS\pppop.sys [2009-07-21 36384]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2008-08-11 1752704]
R3 SRS_PremiumSound_Service;SRS Labs Premium Sound; C:\Windows\system32\drivers\srs_PremiumSound_i386.sys [2009-01-14 230952]
S1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2011-05-05 81888]
S3 ABndis;AbNDIS Service; C:\Windows\system32\DRIVERS\abndis.sys [2011-02-21 37968]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CRFILTER;USB Mass Storage Filter; C:\Windows\system32\DRIVERS\CRFILTER.sys [2008-04-07 6656]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys []
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 131000]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-02 194048]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdvancedSystemCareService;Advanced SystemCare Service; C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe [2011-04-22 352656]
R2 AntiVirFirewallService;Avira FireWall; C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe [2011-03-04 539304]
R2 AntiVirMailService;Avira AntiVir MailGuard; C:\Program Files\Avira\AntiVir Desktop\avmailc.exe [2011-03-04 339624]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2011-03-04 269480]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2011-03-04 135336]
R2 AntiVirWebService;Avira AntiVir WebGuard; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [2011-03-04 421032]
R2 ASLDRService;ASLDR Service; C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe [2008-08-14 100920]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 FortiSslvpnDaemon;FortiClient SSL VPN; C:\Windows\system32\FortiSSLVPNdaemon.exe [2010-03-22 703080]
R2 lxbk_device;lxbk_device; C:\Windows\system32\lxbkcoms.exe [2008-02-19 537256]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-06-15 71096]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-03-07 135664]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-03-07 182768]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

-----------------EOF-----------------

[JaRon]

toto C:\Program Files\IObit\Advanced SystemCare 4 odinstaluj
+
spust ComboFix - log vloz

[eko]

C:\Program Files\IObit\Advanced SystemCare 4 to pouzivam na cisteni pc je to free

[JaRon]

OKi - ak si spokojny, nechaj si ho

[eko]

log z malware bytes na combofix cekam jak bude hned vložim

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 6552

Windows 6.0.6002 Service Pack 2
Internet Explorer 9.0.8112.16421

11.5.2011 10:34:33
mbam-log-2011-05-11 (10-34-27).txt

Typ kontroly: Úplný test (C:\|D:\|)
Testované objekty: 278202
Uplynulý čas: 53 minut, 47 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 1
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 1

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
HKEY_CURRENT_USER\SOFTWARE\5GUTNY6MFK (Trojan.FakeAlert.SA) -> No action taken.

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\Users\Eko\documents\dragon.age.2-reloaded\rld-dag2\Crack\rld-da2k.exe (RiskWare.Tool.CK) -> No action taken.