nejdou aktualizace

[lebka75]

ahoj,prosím o pomoc, nejdou mi zapnout windows update, mám origi XP profi sp3, když je zapnu pc zamrzne
Logfile of random's system information tool 1.08 (written by random/random)
Run by LEBKA75 at 2011-06-25 20:55:08
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 23 GB (57%) free of 40 GB
Total RAM: 2047 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:55:15, on 25.6.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17098)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\VIA\RAID\raid_tool.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\LEBKA75\Plocha\RSIT.exe
C:\Program Files\trend micro\LEBKA75.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: Smart PC Utilities Toolbar - {fd3d3852-dcda-468c-8995-8ced7333918a} - C:\Program Files\Smart_PC_Utilities\prxtbSma0.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Smart PC Utilities - {fd3d3852-dcda-468c-8995-8ced7333918a} - C:\Program Files\Smart_PC_Utilities\prxtbSma0.dll (file missing)
O3 - Toolbar: Smart PC Utilities Toolbar - {fd3d3852-dcda-468c-8995-8ced7333918a} - C:\Program Files\Smart_PC_Utilities\prxtbSma0.dll (file missing)
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [VIARaidUtl] C:\Program Files\VIA\RAID\raid_tool.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: hpdj - Unknown owner - C:\DOCUME~1\LEBKA75\LOCALS~1\Temp\hpdj.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O24 - Desktop Component 0: (no name) - http://spoluzaci.im.cz/picture/4807/139 ... 9xece33804

--
End of file - 6559 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\HP Usg Daily.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-06-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-06-18 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fd3d3852-dcda-468c-8995-8ced7333918a}]
Smart PC Utilities Toolbar - C:\Program Files\Smart_PC_Utilities\prxtbSma0.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{fd3d3852-dcda-468c-8995-8ced7333918a} - Smart PC Utilities Toolbar - C:\Program Files\Smart_PC_Utilities\prxtbSma0.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2011-02-23 3451496]
"ATICustomerCare"=C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [2010-03-04 311296]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe [2003-09-01 176128]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2007-04-16 577536]
"VIARaidUtl"=C:\Program Files\VIA\RAID\raid_tool.exe [2010-03-05 2375392]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2010-04-16 3872080]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDElbyCDFL]
C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe [2002-11-02 45056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager]
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility]
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe [2004-04-06 172032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPHmon06]
C:\WINDOWS\system32\hphmon06.exe [2004-07-13 659456]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPHUPD06]
c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-09-10 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [2009-09-04 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-09-11 159744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0x63010000
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Crawler Spyware Terminator"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"
"D:\Program Files\BITBOX Games\The Scourge Project - Episode 1 and 2\Binaries\Win32\ScourgeGame.exe"="D:\Program Files\BITBOX Games\The Scourge Project - Episode 1 and 2\Binaries\Win32\ScourgeGame.exe:*:Enabled:The Scourge Project: Ep 1 and 2"
"D:\Program Files\TmNationsForever\TmForever.exe"="D:\Program Files\TmNationsForever\TmForever.exe:*:Enabled:TmForever"
"D:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="D:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"D:\Program Files\Unreal Tournament 3\Binaries\UT3.exe"="D:\Program Files\Unreal Tournament 3\Binaries\UT3.exe:*:Enabled:UT3"
"C:\Program Files\Electronic Arts\EADM\Core.exe"="C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager"
"D:\Program Files\Techland\Call of Juarez\CoJ.exe"="D:\Program Files\Techland\Call of Juarez\CoJ.exe:*:Enabled:The Call of Juarez"
"C:\Documents and Settings\LEBKA75\Local Settings\temp\Rar$EX16.953\BlueSoleil 3.2.2.8 070421\Crack\BlueSoleil.exe"="C:\Documents and Settings\LEBKA75\Local Settings\temp\Rar$EX16.953\BlueSoleil 3.2.2.8 070421\Crack\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\Documents and Settings\LEBKA75\Local Settings\temp\Rar$EX03.187\BlueSoleil 3.2.2.8 070421\Crack\BlueSoleil.exe"="C:\Documents and Settings\LEBKA75\Local Settings\temp\Rar$EX03.187\BlueSoleil 3.2.2.8 070421\Crack\BlueSoleil.exe:*:Enabled:BlueSoleil"
"D:\Program Files\EA GAMES\MOHAA\MOHAA.exe"="D:\Program Files\EA GAMES\MOHAA\MOHAA.exe:*:Enabled:Medal of Honor Allied Assault(tm)"
"D:\Program Files\EA GAMES\MOHAA\moh_spearhead.exe"="D:\Program Files\EA GAMES\MOHAA\moh_spearhead.exe:*:Enabled:Medal of Honor Allied Assault(tm) Spearhead"
"D:\Program Files\EA GAMES\MOHAA\moh_Breakthrough.exe"="D:\Program Files\EA GAMES\MOHAA\moh_Breakthrough.exe:*:Enabled:Medal of Honor Allied Assault(tm) Breakthrough"
"D:\Program Files\Electronic Arts\Need for Speed(TM) Hot Pursuit\Launcher.exe"="D:\Program Files\Electronic Arts\Need for Speed(TM) Hot Pursuit\Launcher.exe:*:Enabled:Need for Speed(TM) Hot Pursuit"
"D:\Program Files\Electronic Arts\Need for Speed(TM) Hot Pursuit\NFS11.exe"="D:\Program Files\Electronic Arts\Need for Speed(TM) Hot Pursuit\NFS11.exe:*:Enabled:Need for Speed(TM) Hot Pursuit Application"
"C:\WINDOWS\system32\muzapp.exe"="C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
"D:\Program Files\Electronic Arts\Medal of Honor\MP\mohmpgame.exe"="D:\Program Files\Electronic Arts\Medal of Honor\MP\mohmpgame.exe:*:Enabled:Medal of Honor: Multiplayer"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======List of files/folders created in the last 1 months======

2011-06-25 20:30:29 ----ASH---- C:\pagefile.sys
2011-06-21 20:14:28 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2011-06-19 17:57:02 ----D---- C:\Program Files\Microsoft
2011-06-19 17:56:26 ----D---- C:\Program Files\Windows Live SkyDrive
2011-06-19 17:55:57 ----D---- C:\Program Files\Windows Live
2011-06-19 17:53:20 ----D---- C:\Program Files\Common Files\Windows Live
2011-06-18 01:09:49 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2011-06-18 00:54:56 ----D---- C:\Program Files\Common Files\Java
2011-06-18 00:54:46 ----A---- C:\WINDOWS\system32\javaws.exe
2011-06-18 00:54:46 ----A---- C:\WINDOWS\system32\javaw.exe
2011-06-18 00:54:46 ----A---- C:\WINDOWS\system32\java.exe
2011-06-18 00:54:28 ----D---- C:\Program Files\Java
2011-06-18 00:53:34 ----D---- C:\Program Files\AMD APP
2011-06-18 00:49:08 ----D---- C:\Documents and Settings\LEBKA75\Data aplikací\SUPERAntiSpyware.com
2011-06-18 00:49:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-06-18 00:49:01 ----D---- C:\Program Files\SUPERAntiSpyware
2011-06-18 00:40:48 ----D---- C:\Program Files\FileHippo.com
2011-06-17 12:54:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2476490$
2011-06-17 12:54:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2503665$
2011-06-17 12:53:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2011-06-17 12:53:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276$
2011-06-17 12:53:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893$
2011-06-17 12:52:34 ----D---- C:\WINDOWS\SxsCaPendDel
2011-06-17 10:01:17 ----D---- C:\Program Files\trend micro
2011-06-17 10:01:15 ----D---- C:\rsit
2011-06-15 09:48:59 ----D---- C:\Documents and Settings\LEBKA75\Data aplikací\DivX
2011-06-15 09:48:23 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2011-06-15 09:46:29 ----D---- C:\Program Files\DivX
2011-06-15 09:46:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\DivX
2011-06-15 00:03:47 ----D---- C:\Program Files\SpeedFan
2011-06-10 20:31:28 ----A---- C:\WINDOWS\system32\drivers\isapnp.sys
2011-06-10 20:29:15 ----A---- C:\WINDOWS\system32\ChCfg.exe
2011-06-10 20:29:07 ----A---- C:\WINDOWS\system32\RTLCPAPI.dll
2011-06-10 20:29:07 ----A---- C:\WINDOWS\Alcrmv.exe
2011-06-10 20:29:06 ----A---- C:\WINDOWS\system32\RTLCPL.EXE
2011-06-10 20:29:03 ----A---- C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2011-06-10 20:29:02 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2011-06-10 20:29:01 ----A---- C:\WINDOWS\system32\ksuser.dll
2011-06-10 20:29:01 ----A---- C:\WINDOWS\system32\drivers\stream.sys
2011-06-10 20:29:01 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2011-06-10 20:28:53 ----D---- C:\Program Files\Realtek AC97
2011-06-10 20:28:50 ----A---- C:\WINDOWS\soundman.exe
2011-06-10 20:27:47 ----N---- C:\WINDOWS\system32\difxapi.dll
2011-06-10 20:21:57 ----A---- C:\WINDOWS\system32\LkmdfCoInst.dll
2011-06-10 20:21:57 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys
2011-06-10 20:21:56 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2011-06-10 20:21:45 ----A---- C:\WINDOWS\system32\drivers\LNonPnP.sys
2011-06-10 20:21:45 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2011-06-10 20:21:45 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys
2011-06-10 20:21:44 ----A---- C:\WINDOWS\system32\hid.dll
2011-06-10 20:21:41 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2011-06-10 20:21:22 ----A---- C:\WINDOWS\system32\drivers\LBeepKE.sys
2011-06-10 20:21:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\Logishrd
2011-06-10 20:20:46 ----D---- C:\Program Files\Common Files\LogiShrd
2011-06-10 20:20:36 ----D---- C:\Documents and Settings\LEBKA75\Data aplikací\Logitech
2011-06-10 20:20:36 ----D---- C:\Documents and Settings\LEBKA75\Data aplikací\Logishrd
2011-06-08 17:40:03 ----A---- C:\WINDOWS\system32\drivers\DrvAgent32.sys
2011-06-07 19:44:02 ----D---- C:\Program Files\CPUID
2011-05-27 10:07:44 ----D---- C:\Program Files\eMule

======List of files/folders modified in the last 1 months======

2011-06-25 20:52:30 ----D---- C:\WINDOWS\system32\CatRoot2
2011-06-25 20:52:10 ----D---- C:\WINDOWS\Temp
2011-06-25 20:32:29 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-06-25 20:31:50 ----D---- C:\WINDOWS\Prefetch
2011-06-25 15:08:16 ----D---- C:\WINDOWS
2011-06-25 14:47:31 ----D---- C:\Documents and Settings\LEBKA75\Data aplikací\Vso
2011-06-25 14:47:13 ----A---- C:\WINDOWS\NeroDigital.ini
2011-06-24 20:05:07 ----D---- C:\WINDOWS\Microsoft.NET
2011-06-23 20:04:06 ----RSD---- C:\WINDOWS\assembly
2011-06-23 19:42:13 ----SHD---- C:\WINDOWS\Installer
2011-06-23 19:42:12 ----HD---- C:\Config.Msi
2011-06-23 19:41:43 ----D---- C:\WINDOWS\system32
2011-06-23 19:41:43 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-06-23 19:41:21 ----D---- C:\WINDOWS\WinSxS
2011-06-23 19:27:02 ----RD---- C:\Program Files
2011-06-23 19:24:08 ----D---- C:\WINDOWS\system32\drivers
2011-06-22 21:13:53 ----HD---- C:\WINDOWS\inf
2011-06-22 21:13:53 ----HD---- C:\Program Files\InstallShield Installation Information
2011-06-21 20:14:30 ----RSHD---- C:\WINDOWS\system32\dllcache
2011-06-21 19:15:55 ----HD---- C:\WINDOWS\$hf_mig$
2011-06-21 18:59:33 ----D---- C:\Program Files\Mozilla Firefox
2011-06-20 16:14:05 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-06-20 16:10:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-06-19 17:57:52 ----SD---- C:\Documents and Settings\LEBKA75\Data aplikací\Microsoft
2011-06-19 17:56:32 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-06-19 17:56:32 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-06-19 17:53:20 ----D---- C:\Program Files\Common Files
2011-06-19 13:54:39 ----D---- C:\Documents and Settings\LEBKA75\Data aplikací\Adobe
2011-06-18 18:16:04 ----D---- C:\Program Files\WinRAR
2011-06-18 18:16:04 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-06-18 01:11:50 ----D---- C:\WINDOWS\Debug
2011-06-18 01:02:47 ----SD---- C:\WINDOWS\Tasks
2011-06-18 00:54:30 ----A---- C:\WINDOWS\system32\deployJava1.dll
2011-06-18 00:44:31 ----D---- C:\Program Files\Common Files\Adobe
2011-06-18 00:44:20 ----D---- C:\Program Files\Adobe
2011-06-17 12:58:54 ----D---- C:\WINDOWS\system32\cs-cz
2011-06-17 12:58:54 ----D---- C:\Program Files\Internet Explorer
2011-06-17 12:58:47 ----D---- C:\WINDOWS\ie7updates
2011-06-17 12:56:14 ----A---- C:\WINDOWS\system32\MRT.exe
2011-06-17 12:18:17 ----D---- C:\WINDOWS\Network Diagnostic
2011-06-17 12:17:50 ----D---- C:\Program Files\ConduitEngine
2011-06-17 12:17:49 ----A---- C:\WINDOWS\system32\ConduitEngine.tmp
2011-06-17 11:11:47 ----D---- C:\WINDOWS\system32\CatRoot
2011-06-15 23:47:59 ----D---- C:\Program Files\Driver Checker
2011-06-15 09:39:45 ----D---- C:\Documents and Settings\LEBKA75\Data aplikací\dvdcss
2011-06-15 09:34:42 ----RSH---- C:\boot.ini
2011-06-14 23:09:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-06-10 20:31:27 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-06-10 20:30:09 ----D---- C:\WINDOWS\system
2011-06-10 20:27:47 ----D---- C:\Program Files\VIA
2011-06-08 20:59:41 ----D---- C:\WINDOWS\Logs
2011-06-08 20:59:18 ----D---- C:\Program Files\CCleaner
2011-06-05 16:35:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\DVD Shrink
2011-06-01 17:56:26 ----D---- C:\WINDOWS\system32\DirectX
2011-05-28 17:56:32 ----D---- C:\Program Files\Defraggler

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BtHidBus;Bluetooth HID Bus Service; C:\WINDOWS\System32\Drivers\BtHidBus.sys [2010-04-06 20104]
R0 BTHidMgr;Bluetooth HID Manager Service; C:\WINDOWS\System32\Drivers\BTHidMgr.sys [2005-04-30 28271]
R0 ElbyVCD;ElbyVCD; C:\WINDOWS\system32\DRIVERS\ElbyVCD.sys [2002-11-28 22016]
R0 gagp30kx;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\WINDOWS\system32\DRIVERS\gagp30kx.sys [2008-04-14 46464]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-06-16 691696]
R0 viaagp1;VIA AGP Filter; C:\WINDOWS\system32\DRIVERS\viaagp1.sys [2003-07-01 27904]
R0 viasraid;viasraid; C:\WINDOWS\system32\DRIVERS\viasraid.sys [2003-06-12 75904]
R0 vIdeBus;vIdeBus; C:\WINDOWS\system32\DRIVERS\vIdeBus.sys [2010-04-13 15232]
R0 vIdePort;VIA IDE Controller PORT Driver; C:\WINDOWS\system32\DRIVERS\vIdePort.sys [2010-04-13 40192]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-02-23 30680]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43008]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-02-23 25432]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-02-23 371544]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-02-23 301528]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-02-23 49240]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-02-23 19544]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-02-23 102232]
R2 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2002-11-29 16320]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2008-04-14 11868]
R3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS [2003-12-11 391424]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-01-09 601100]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-09-11 5417472]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2002-11-28 15360]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSFDPSP2.sys [2008-04-14 1041536]
R3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFBS2S2.sys [2008-04-14 220032]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 Pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\Pcouffin.sys [2010-09-21 47360]
R3 Ps2;PS2; C:\WINDOWS\system32\DRIVERS\PS2.sys [2010-04-13 19072]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2010-04-13 130432]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 vulfnths;VIA USB Host Controller Lower Filter; C:\WINDOWS\System32\Drivers\vulfnth.sys [2010-04-13 6912]
R3 vulfntrs;VIA USB Roothub Lower Filter; C:\WINDOWS\System32\Drivers\vulfntr.sys [2010-04-13 11392]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSFCXTS2.sys [2008-04-14 685056]
S3 AmdLLD;AMD Low Level Device Driver; C:\WINDOWS\system32\DRIVERS\AmdLLD.sys []
S3 AsAudioDevice_351;AsAudioDevice_351; C:\WINDOWS\system32\drivers\AsAudioDevice_351.sys [2009-01-08 16640]
S3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2005-05-31 20480]
S3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys []
S3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2005-04-30 10804]
S3 BTCOM;Bluetooth Serial port driver; C:\WINDOWS\system32\DRIVERS\btcomport.sys []
S3 BTCOMBUS;Bluetooth Serial Port Bus Service; C:\WINDOWS\System32\Drivers\btcombus.sys []
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2005-05-31 23000]
S3 BTHidEnum;Bluetooth HID Enumerator; C:\WINDOWS\System32\Drivers\vbtenum.sys [2005-04-30 11860]
S3 btnetBUs;Bluetooth PAN Bus Service; C:\WINDOWS\System32\Drivers\btnetBus.sys [2010-04-06 25864]
S3 catchme;catchme; \??\C:\DOCUME~1\LEBKA75\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-07-09 16384]
S3 DrvAgent32;DrvAgent32; \??\C:\WINDOWS\system32\Drivers\DrvAgent32.sys []
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2004-03-18 51088]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2004-03-18 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2004-03-18 21744]
S3 IvtBtBUs;IVT Bluetooth Bus Service; C:\WINDOWS\System32\Drivers\IvtBtBus.sys [2010-04-06 23048]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2002-12-12 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-07-09 83968]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-07-09 10112]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2010-07-30 18048]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2010-07-30 23040]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2008-04-14 5888]
S3 RTL8023;Realtek RTL8139/810x/8169/8110 all in one NDIS NT Driver; C:\WINDOWS\system32\DRIVERS\Rtlnic51.sys [2003-08-13 65280]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-14 20992]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-07-09 10880]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2005-08-30 58320]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2005-08-30 8304]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2005-08-30 94000]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-07-09 14976]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2010-07-30 8192]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2010-07-30 8192]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2004-10-19 61312]
S3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2005-03-25 82148]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-07-09 18688]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-09-11 606208]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-02-23 42184]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-06-18 153376]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2007-02-21 73728]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-11-17 66872]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-11-17 103736]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-05-05 593920]
S2 hpdj;hpdj; C:\DOCUME~1\LEBKA75\LOCALS~1\Temp\hpdj.exe -servicerunning=true -uninstall=hp deskjet 3600 series -product= []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 628736]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[lebka75]

našel jsem něco zde http://support.microsoft.com/kb/943144/cs, zřejmě může být chyba u microsoftu

[Roli]

Zdravím, nejdříve kouknem zda to nedělá nějaký šmejd.

Tohle fixni v HJT :

R3 - URLSearchHook: Smart PC Utilities Toolbar - {fd3d3852-dcda-468c-8995-8ced7333918a} - C:\Program Files\Smart_PC_Utilities\prxtbSma0.dll (file missing)
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Smart PC Utilities - {fd3d3852-dcda-468c-8995-8ced7333918a} - C:\Program Files\Smart_PC_Utilities\prxtbSma0.dll (file missing)
O3 - Toolbar: Smart PC Utilities Toolbar - {fd3d3852-dcda-468c-8995-8ced7333918a} - C:\Program Files\Smart_PC_Utilities\prxtbSma0.dll (file missing)
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O23 - Service: hpdj - Unknown owner - C:\DOCUME~1\LEBKA75\LOCALS~1\Temp\hpdj.exe (file missing)

HJT najdeš zde :

Fix znamená že spustíš HJT

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

[lebka75]

tak poté co jsem to fixnul v HJT, tak mi začal blbnout obraz ( grafika ? ) a při skenování Combofixem to psalo, že chybí konzola pro zotavení ?
ComboFix 11-06-25.05 - LEBKA75 26.06.2011 13:18:53.2.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2047.1489 [GMT 2:00]
Spuštěný z: c:\documents and settings\LEBKA75\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\IsUn0405.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-05-26 do 2011-06-26 )))))))))))))))))))))))))))))))
.
.
2011-06-21 16:31 . 2010-01-01 08:00 2106216 ----a-w- c:\program files\Mozilla Firefox\D3DCompiler_43.dll
2011-06-21 16:31 . 2010-01-01 08:00 1998168 ----a-w- c:\program files\Mozilla Firefox\d3dx9_43.dll
2011-06-19 15:57 . 2011-06-26 10:56 -------- d-----w- c:\documents and settings\LEBKA75\Tracing
2011-06-19 15:57 . 2011-06-19 15:57 -------- d-----w- c:\program files\Microsoft
2011-06-19 15:56 . 2011-06-19 15:56 -------- d-----w- c:\program files\Windows Live SkyDrive
2011-06-19 15:55 . 2011-06-19 15:56 -------- d-----w- c:\program files\Windows Live
2011-06-19 15:53 . 2011-06-19 15:53 -------- d-----w- c:\program files\Common Files\Windows Live
2011-06-17 23:09 . 2011-02-23 13:56 371544 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-06-17 22:54 . 2011-06-17 22:54 -------- d-----w- c:\program files\Common Files\Java
2011-06-17 22:54 . 2011-06-17 22:54 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-06-17 22:54 . 2011-06-17 22:54 -------- d-----w- c:\program files\Java
2011-06-17 22:53 . 2011-06-17 22:53 -------- d-----w- c:\program files\AMD APP
2011-06-17 22:49 . 2011-06-17 22:49 -------- d-----w- c:\documents and settings\LEBKA75\Data aplikací\SUPERAntiSpyware.com
2011-06-17 22:49 . 2011-06-17 22:49 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-06-17 22:49 . 2011-06-17 22:49 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-06-17 22:40 . 2011-06-17 22:40 -------- d-----w- c:\program files\FileHippo.com
2011-06-17 10:52 . 2011-06-17 20:31 -------- d-----w- c:\windows\SxsCaPendDel
2011-06-17 08:01 . 2011-06-25 18:55 -------- d-----w- c:\program files\trend micro
2011-06-17 08:01 . 2011-06-17 08:02 -------- d-----w- C:\rsit
2011-06-15 07:48 . 2011-06-15 07:50 -------- d-----w- c:\documents and settings\LEBKA75\Data aplikací\DivX
2011-06-15 07:46 . 2011-06-15 21:11 -------- d-----w- c:\program files\DivX
2011-06-15 07:46 . 2011-06-15 07:55 -------- d-----w- c:\documents and settings\All Users\Data aplikací\DivX
2011-06-14 22:03 . 2011-06-25 19:00 -------- d-----w- c:\program files\SpeedFan
2011-06-10 18:31 . 2008-04-14 05:57 37248 ----a-w- c:\windows\system32\drivers\isapnp.sys
2011-06-10 18:30 . 2008-05-11 23:08 32768 ----a-w- c:\windows\system\VRAIDlog.dll
2011-06-10 18:29 . 2006-08-01 13:02 49152 ----a-w- c:\windows\system32\ChCfg.exe
2011-06-10 18:29 . 2006-07-31 09:27 217088 ----a-w- c:\windows\Alcrmv.exe
2011-06-10 18:29 . 2003-12-17 18:05 155648 ----a-w- c:\windows\system32\RTLCPAPI.dll
2011-06-10 18:29 . 2004-01-08 18:53 5672960 ----a-w- c:\windows\system32\RTLCPL.EXE
2011-06-10 18:29 . 2004-01-09 15:17 601100 ----a-w- c:\windows\system32\drivers\ALCXWDM.SYS
2011-06-10 18:29 . 2004-01-08 18:53 14204416 ----a-w- c:\windows\system32\ALSNDMGR.CPL
2011-06-10 18:29 . 2008-04-14 06:53 23552 ----a-w- c:\windows\system32\wdmaud.drv
2011-06-10 18:29 . 2008-04-13 23:49 146048 ----a-w- c:\windows\system32\drivers\portcls.sys
2011-06-10 18:29 . 2008-04-13 23:15 60160 ----a-w- c:\windows\system32\drivers\drmk.sys
2011-06-10 18:29 . 2004-07-09 03:27 48512 ----a-w- c:\windows\system32\drivers\stream.sys
2011-06-10 18:29 . 2002-12-11 23:14 4096 ----a-w- c:\windows\system32\ksuser.dll
2011-06-10 18:28 . 2011-06-10 18:28 -------- d-----w- c:\program files\Realtek AC97
2011-06-10 18:28 . 2007-04-16 13:28 577536 ----a-w- c:\windows\soundman.exe
2011-06-10 18:27 . 2007-09-20 08:43 331184 ------w- c:\windows\system32\difxapi.dll
2011-06-10 18:27 . 2011-06-10 18:27 53248 ----a-r- c:\documents and settings\LEBKA75\Data aplikací\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2011-06-10 18:24 . 2011-06-10 18:24 -------- d-----w- c:\documents and settings\LEBKA75\Local Settings\Data aplikací\Logishrd
2011-06-10 18:21 . 2010-08-24 17:31 1581136 ----a-w- c:\windows\system32\LkmdfCoInst.dll
2011-06-10 18:21 . 2008-04-14 12:00 23040 ----a-w- c:\windows\system32\drivers\mouclass.sys
2011-06-10 18:21 . 2008-04-14 12:00 12160 ----a-w- c:\windows\system32\drivers\mouhid.sys
2011-06-10 18:21 . 2011-06-10 18:21 16400 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2011-06-10 18:21 . 2008-04-14 12:00 24960 ----a-w- c:\windows\system32\drivers\hidparse.sys
2011-06-10 18:21 . 2008-04-14 12:00 10368 ----a-w- c:\windows\system32\drivers\hidusb.sys
2011-06-10 18:21 . 2008-04-14 12:00 20992 ----a-w- c:\windows\system32\hid.dll
2011-06-10 18:21 . 2008-04-14 12:00 36864 ----a-w- c:\windows\system32\drivers\hidclass.sys
2011-06-10 18:21 . 2010-08-24 17:30 10448 ----a-w- c:\windows\system32\drivers\LBeepKE.sys
2011-06-10 18:21 . 2011-06-23 17:27 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Logishrd
2011-06-10 18:20 . 2011-06-25 19:24 -------- d-----w- c:\program files\Common Files\LogiShrd
2011-06-10 18:20 . 2011-06-10 18:22 -------- d-----w- c:\documents and settings\LEBKA75\Data aplikací\Logitech
2011-06-10 18:20 . 2011-06-10 18:20 -------- d-----w- c:\documents and settings\LEBKA75\Data aplikací\Logishrd
2011-06-08 15:40 . 2011-06-08 15:40 -------- d-----w- c:\documents and settings\LEBKA75\Local Settings\Data aplikací\eSupport.com
2011-06-08 15:40 . 2011-06-08 15:40 23456 ----a-w- c:\windows\system32\drivers\DrvAgent32.sys
2011-06-07 17:44 . 2011-06-07 17:44 -------- d-----w- c:\program files\CPUID
2011-06-06 10:55 . 2011-06-06 10:55 183696 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-19 15:52 . 2011-05-23 20:49 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-17 22:54 . 2010-06-19 19:36 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-06-17 10:17 . 2010-12-16 05:56 0 ----a-w- c:\windows\system32\ConduitEngine.tmp
2011-05-29 07:11 . 2010-04-13 18:11 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-05-29 07:11 . 2010-04-13 18:11 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-05-24 21:44 . 2011-05-24 21:44 59904 ----a-w- c:\windows\system32\OVDecode.dll
2011-05-24 21:44 . 2011-05-24 21:44 51712 ----a-w- c:\windows\system32\OpenCL.dll
2011-05-24 21:43 . 2011-05-24 21:43 12798976 ----a-w- c:\windows\system32\amdocl.dll
2011-05-02 15:32 . 2010-04-12 17:08 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-29 16:19 . 2008-04-14 12:00 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-25 15:45 . 2008-04-14 12:00 832512 ----a-w- c:\windows\system32\wininet.dll
2011-04-25 15:45 . 2008-04-14 12:00 1830912 ------w- c:\windows\system32\inetcpl.cpl
2011-04-25 15:45 . 2008-04-14 12:00 78336 ----a-w- c:\windows\system32\ieencode.dll
2011-04-25 15:45 . 2008-04-14 12:00 17408 ----a-w- c:\windows\system32\corpol.dll
2011-04-25 12:01 . 2008-04-14 12:00 389120 ----a-w- c:\windows\system32\html.iec
2011-04-21 13:37 . 2008-04-14 12:00 105472 ----a-w- c:\windows\system32\drivers\mup.sys
2011-06-16 04:30 . 2011-03-22 22:20 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-02-23 14:04 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2011-02-23 3451496]
"ATICustomerCare"="c:\program files\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-03-04 311296]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb09.exe" [2003-09-01 176128]
"SoundMan"="SOUNDMAN.EXE" [2007-04-16 577536]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
c:\windows\system32\dumprep 0 -k [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2011-06-06 10:55 937920 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDElbyCDFL]
2002-11-02 06:33 45056 ----a-w- c:\program files\Elaborate Bytes\CloneCD\ElbyCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-14 12:00 15360 ----a-w- c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility]
2004-04-06 10:28 172032 ----a-w- c:\windows\system32\spool\drivers\w32x86\3\hpztsb11.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPHmon06]
2004-07-13 21:09 659456 ----a-w- c:\windows\system32\hphmon06.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2001-07-09 08:50 155648 ----a-w- c:\windows\system32\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2010-09-10 20:14 98304 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2011-04-08 10:59 254696 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"d:\\Program Files\\Electronic Arts\\Medal of Honor\\MP\\mohmpgame.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
.
R0 BtHidBus;Bluetooth HID Bus Service;c:\windows\system32\drivers\BtHidBus.sys [6.4.2010 19:32 20104]
R0 ElbyVCD;ElbyVCD;c:\windows\system32\drivers\ElbyVCD.sys [28.11.2002 12:43 22016]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [14.4.2010 19:23 691696]
R0 viasraid;viasraid;c:\windows\system32\drivers\viasraid.sys [12.4.2010 19:33 75904]
R0 vIdeBus;vIdeBus;c:\windows\system32\drivers\vIdeBus.sys [13.4.2010 18:57 15232]
R0 vIdePort;VIA IDE Controller PORT Driver;c:\windows\system32\drivers\vIdePort.sys [13.4.2010 18:57 40192]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [18.6.2011 1:09 371544]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [12.4.2010 20:14 301528]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [17.2.2010 20:25 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [10.5.2010 20:41 67656]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [12.4.2010 20:14 19544]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 14:16 130384]
S3 AsAudioDevice_351;AsAudioDevice_351;c:\windows\system32\drivers\AsAudioDevice_351.sys [11.2.2011 21:19 16640]
S3 BTCOM;Bluetooth Serial port driver;c:\windows\system32\DRIVERS\btcomport.sys --> c:\windows\system32\DRIVERS\btcomport.sys [?]
S3 BTCOMBUS;Bluetooth Serial Port Bus Service;c:\windows\system32\Drivers\btcombus.sys --> c:\windows\system32\Drivers\btcombus.sys [?]
S3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\drivers\btnetBus.sys [6.4.2010 19:33 25864]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [8.6.2011 17:40 23456]
S3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\drivers\IvtBtBus.sys [6.4.2010 19:32 23048]
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
Trusted Zone: mojebanka.cz
Trusted Zone: mojebanka.cz
TCP: DhcpNameServer = 10.0.0.138 10.0.0.138
FF - ProfilePath - c:\documents and settings\LEBKA75\Data aplikací\Mozilla\Firefox\Profiles\k9h56ier.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{FD3D3852-DCDA-468C-8995-8CED7333918A} - (no file)
SafeBoot-WudfPf
SafeBoot-WudfRd
MSConfigStartUp-Adobe Reader Speed Launcher - c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe
MSConfigStartUp-GrooveMonitor - c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
MSConfigStartUp-HP Component Manager - c:\program files\HP\hpcoretech\hpcmpmgr.exe
MSConfigStartUp-HP Software Update - c:\program files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
MSConfigStartUp-HPHUPD06 - c:\program files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
MSConfigStartUp-SpybotSD TeaTimer - c:\program files\Spybot - Search & Destroy\TeaTimer.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-06-26 13:26
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
.
C:\## aswSnx private storage
.
sken byl úspešně dokončen
skryté soubory: 1
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-583907252-362288127-1801674531-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"??"=hex:75,12,81,fe,3f,a6,88,dd,a5,2a,e0,1d,fb,23,f3,50,df,79,32,f8,90,03,ca,
f5,17,57,4d,52,43,d7,00,02,18,92,9e,96,ab,4c,d3,57,6c,80,5d,09,6e,76,fc,d7,\
"??"=hex:2f,b6,6f,45,ee,e2,ec,0a,29,d5,69,d3,55,fd,2c,18
.
[HKEY_USERS\S-1-5-21-583907252-362288127-1801674531-1003\Software\SecuROM\License information*]
"datasecu"=hex:e0,71,1b,23,a8,bb,67,42,44,98,9b,6c,88,91,82,39,4a,7b,9c,fc,5f,
65,92,3e,71,09,02,4a,c9,b1,51,91,6f,48,46,5d,e5,6b,82,05,36,29,e6,93,5d,86,\
"rkeysecu"=hex:ef,32,f5,3d,22,ec,0f,4f,02,43,64,7f,23,0c,c5,6b
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(792)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
Celkový čas: 2011-06-26 13:30:15
ComboFix-quarantined-files.txt 2011-06-26 11:30
.
Před spuštěním: Volných bajtů: 23 919 742 976
Po spuštění: Volných bajtů: 23 994 580 992
.
- - End Of File - - 32F48E614A63D2EBD1B754F6EB4C1B5A

[Roli]

S grafikou jsme nic nedělali a tu konzolu jsi měl podle návodu nechat nainstalit.

Pokud jsi tak ještě neučinil, přesuň Combofix na plochu

otevři si Poznámkový blok

do něj zkopíruj skript z následujícího okna:

Kód: Vybrat vše

File::  
c:\windows\system32\ConduitEngine.tmp

ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:



Po aplikaci na Tebe vypadne další log, zkopíruj ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,

v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci

[lebka75]

vložil jsem origo CD a nechal opravit XP, vše bylo OK až dodnes, kdy se mi nainstalovala nějaká nová aktualizace a po zapnutí pc zase zlobil obraz, dal jsem restart a naskočilo to normálně, tak už fakt nevím
ComboFix 11-06-27.04 - LEBKA75 28.06.2011 18:57:13.3.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2047.1618 [GMT 2:00]
Spuštěný z: c:\documents and settings\LEBKA75\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-05-28 do 2011-06-28 )))))))))))))))))))))))))))))))
.
.
2011-06-27 18:06 . 2011-06-28 15:17 -------- d-----w- c:\program files\Microsoft Silverlight
2011-06-21 16:31 . 2010-01-01 08:00 2106216 ----a-w- c:\program files\Mozilla Firefox\D3DCompiler_43.dll
2011-06-21 16:31 . 2010-01-01 08:00 1998168 ----a-w- c:\program files\Mozilla Firefox\d3dx9_43.dll
2011-06-19 15:57 . 2011-06-26 10:56 -------- d-----w- c:\documents and settings\LEBKA75\Tracing
2011-06-19 15:57 . 2011-06-19 15:57 -------- d-----w- c:\program files\Microsoft
2011-06-19 15:56 . 2011-06-19 15:56 -------- d-----w- c:\program files\Windows Live SkyDrive
2011-06-19 15:55 . 2011-06-19 15:56 -------- d-----w- c:\program files\Windows Live
2011-06-19 15:53 . 2011-06-19 15:53 -------- d-----w- c:\program files\Common Files\Windows Live
2011-06-17 23:09 . 2011-02-23 13:56 371544 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-06-17 22:54 . 2011-06-17 22:54 -------- d-----w- c:\program files\Common Files\Java
2011-06-17 22:54 . 2011-06-17 22:54 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-06-17 22:54 . 2011-06-17 22:54 -------- d-----w- c:\program files\Java
2011-06-17 22:53 . 2011-06-17 22:53 -------- d-----w- c:\program files\AMD APP
2011-06-17 22:49 . 2011-06-17 22:49 -------- d-----w- c:\documents and settings\LEBKA75\Data aplikací\SUPERAntiSpyware.com
2011-06-17 22:49 . 2011-06-17 22:49 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-06-17 22:49 . 2011-06-17 22:49 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-06-17 22:40 . 2011-06-17 22:40 -------- d-----w- c:\program files\FileHippo.com
2011-06-17 10:52 . 2011-06-17 20:31 -------- d-----w- c:\windows\SxsCaPendDel
2011-06-17 08:01 . 2011-06-25 18:55 -------- d-----w- c:\program files\trend micro
2011-06-17 08:01 . 2011-06-17 08:02 -------- d-----w- C:\rsit
2011-06-15 07:48 . 2011-06-15 07:50 -------- d-----w- c:\documents and settings\LEBKA75\Data aplikací\DivX
2011-06-15 07:46 . 2011-06-15 21:11 -------- d-----w- c:\program files\DivX
2011-06-15 07:46 . 2011-06-15 07:55 -------- d-----w- c:\documents and settings\All Users\Data aplikací\DivX
2011-06-14 22:03 . 2011-06-26 12:18 -------- d-----w- c:\program files\SpeedFan
2011-06-10 18:31 . 2008-04-14 05:57 37248 ----a-w- c:\windows\system32\drivers\isapnp.sys
2011-06-10 18:30 . 2008-05-11 23:08 32768 ----a-w- c:\windows\system\VRAIDlog.dll
2011-06-10 18:29 . 2006-08-01 13:02 49152 ----a-w- c:\windows\system32\ChCfg.exe
2011-06-10 18:29 . 2006-07-31 09:27 217088 ----a-w- c:\windows\Alcrmv.exe
2011-06-10 18:29 . 2003-12-17 18:05 155648 ----a-w- c:\windows\system32\RTLCPAPI.dll
2011-06-10 18:29 . 2004-01-08 18:53 5672960 ----a-w- c:\windows\system32\RTLCPL.EXE
2011-06-10 18:29 . 2004-01-09 15:17 601100 ----a-w- c:\windows\system32\drivers\ALCXWDM.SYS
2011-06-10 18:29 . 2004-01-08 18:53 14204416 ----a-w- c:\windows\system32\ALSNDMGR.CPL
2011-06-10 18:29 . 2008-04-14 06:53 23552 ----a-w- c:\windows\system32\wdmaud.drv
2011-06-10 18:29 . 2008-04-13 23:49 146048 ----a-w- c:\windows\system32\drivers\portcls.sys
2011-06-10 18:29 . 2008-04-13 23:15 60160 ----a-w- c:\windows\system32\drivers\drmk.sys
2011-06-10 18:29 . 2004-07-09 03:27 48512 ----a-w- c:\windows\system32\drivers\stream.sys
2011-06-10 18:29 . 2002-12-11 23:14 4096 ----a-w- c:\windows\system32\ksuser.dll
2011-06-10 18:28 . 2011-06-10 18:28 -------- d-----w- c:\program files\Realtek AC97
2011-06-10 18:28 . 2007-04-16 13:28 577536 ----a-w- c:\windows\soundman.exe
2011-06-10 18:27 . 2007-09-20 08:43 331184 ------w- c:\windows\system32\difxapi.dll
2011-06-10 18:27 . 2011-06-10 18:27 53248 ----a-r- c:\documents and settings\LEBKA75\Data aplikací\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2011-06-10 18:24 . 2011-06-10 18:24 -------- d-----w- c:\documents and settings\LEBKA75\Local Settings\Data aplikací\Logishrd
2011-06-10 18:21 . 2010-08-24 17:31 1581136 ----a-w- c:\windows\system32\LkmdfCoInst.dll
2011-06-10 18:21 . 2008-04-14 12:00 23040 ----a-w- c:\windows\system32\drivers\mouclass.sys
2011-06-10 18:21 . 2008-04-14 12:00 12160 ----a-w- c:\windows\system32\drivers\mouhid.sys
2011-06-10 18:21 . 2011-06-10 18:21 16400 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2011-06-10 18:21 . 2008-04-14 12:00 24960 ----a-w- c:\windows\system32\drivers\hidparse.sys
2011-06-10 18:21 . 2008-04-14 12:00 10368 ----a-w- c:\windows\system32\drivers\hidusb.sys
2011-06-10 18:21 . 2008-04-14 12:00 20992 ----a-w- c:\windows\system32\hid.dll
2011-06-10 18:21 . 2008-04-14 12:00 36864 ----a-w- c:\windows\system32\drivers\hidclass.sys
2011-06-10 18:21 . 2010-08-24 17:30 10448 ----a-w- c:\windows\system32\drivers\LBeepKE.sys
2011-06-10 18:21 . 2011-06-23 17:27 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Logishrd
2011-06-10 18:20 . 2011-06-25 19:24 -------- d-----w- c:\program files\Common Files\LogiShrd
2011-06-10 18:20 . 2011-06-10 18:22 -------- d-----w- c:\documents and settings\LEBKA75\Data aplikací\Logitech
2011-06-10 18:20 . 2011-06-10 18:20 -------- d-----w- c:\documents and settings\LEBKA75\Data aplikací\Logishrd
2011-06-08 15:40 . 2011-06-08 15:40 -------- d-----w- c:\documents and settings\LEBKA75\Local Settings\Data aplikací\eSupport.com
2011-06-08 15:40 . 2011-06-08 15:40 23456 ----a-w- c:\windows\system32\drivers\DrvAgent32.sys
2011-06-07 17:44 . 2011-06-07 17:44 -------- d-----w- c:\program files\CPUID
2011-06-06 10:55 . 2011-06-06 10:55 183696 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-19 15:52 . 2011-05-23 20:49 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-17 22:54 . 2010-06-19 19:36 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-06-17 10:17 . 2010-12-16 05:56 0 ----a-w- c:\windows\system32\ConduitEngine.tmp
2011-05-29 07:11 . 2010-04-13 18:11 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-05-29 07:11 . 2010-04-13 18:11 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-05-24 21:44 . 2011-05-24 21:44 59904 ----a-w- c:\windows\system32\OVDecode.dll
2011-05-24 21:44 . 2011-05-24 21:44 51712 ----a-w- c:\windows\system32\OpenCL.dll
2011-05-24 21:43 . 2011-05-24 21:43 12798976 ----a-w- c:\windows\system32\amdocl.dll
2011-05-02 15:32 . 2010-04-12 17:08 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-29 16:19 . 2008-04-14 12:00 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-25 15:45 . 2008-04-14 12:00 832512 ----a-w- c:\windows\system32\wininet.dll
2011-04-25 15:45 . 2008-04-14 12:00 1830912 ------w- c:\windows\system32\inetcpl.cpl
2011-04-25 15:45 . 2008-04-14 12:00 78336 ----a-w- c:\windows\system32\ieencode.dll
2011-04-25 15:45 . 2008-04-14 12:00 17408 ----a-w- c:\windows\system32\corpol.dll
2011-04-25 12:01 . 2008-04-14 12:00 389120 ----a-w- c:\windows\system32\html.iec
2011-04-21 13:37 . 2008-04-14 12:00 105472 ----a-w- c:\windows\system32\drivers\mup.sys
2011-06-16 04:30 . 2011-03-22 22:20 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-06-26_11.26.54 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-06-28 16:47 . 2011-06-28 16:47 16384 c:\windows\Temp\Perflib_Perfdata_20c.dat
+ 2011-06-27 18:06 . 2011-06-27 18:06 49664 c:\windows\Installer\f811d1.msi
+ 2011-06-28 13:59 . 2011-06-28 13:59 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2011-06-26 13:53 . 2011-06-26 13:53 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\3261cf5aa8c44f49ea44e995bb1c798c\System.Windows.Presentation.ni.dll
+ 2011-06-26 13:52 . 2011-06-26 13:52 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\8f37e1ebcb6a993092f8701f4f0bff4e\System.Web.ApplicationServices.ni.dll
+ 2011-06-26 13:52 . 2011-06-26 13:52 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\f43eab6f117c2733cc296f11e8ebe9ed\System.ServiceModel.Channels.ni.dll
+ 2011-06-26 13:53 . 2011-06-26 13:53 252416 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\97a1f8a5a83114e0cea11549602e8e72\WindowsFormsIntegration.ni.dll
+ 2011-06-26 13:53 . 2011-06-26 13:53 482816 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\acc81364b5b1d54918a55f0ae0fbc043\UIAutomationClient.ni.dll
+ 2011-06-26 13:52 . 2011-06-26 13:52 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\840f9b4d51622f9f29888aae168a196c\System.ServiceProcess.ni.dll
+ 2011-06-26 13:52 . 2011-06-26 13:52 365056 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\8e99e3e3b47a1b63e678271947a72e22\System.ServiceModel.Routing.ni.dll
+ 2011-06-26 13:52 . 2011-06-26 13:52 653312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\ce945fe046c7c152d4785fe24c22eee9\System.Net.ni.dll
+ 2011-06-26 13:51 . 2011-06-26 13:52 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\f07d8a06ff89e9c2db9f2ad73e88d421\System.Messaging.ni.dll
+ 2011-06-26 13:51 . 2011-06-26 13:51 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\ec65b7f29e6d9c27cad0bb4f6199701f\System.Management.Instrumentation.ni.dll
+ 2011-06-26 13:51 . 2011-06-26 13:51 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\5e1621afee65228e6dc7fbc9fb35f091\System.IO.Log.ni.dll
+ 2011-06-26 13:51 . 2011-06-26 13:51 229376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\1f10456671d393187b6e2511155b8cd6\System.IdentityModel.Selectors.ni.dll
+ 2011-06-26 13:51 . 2011-06-26 13:51 468992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\f75ffd1a51b56e5171335277ca7d2ead\System.DirectoryServices.Protocols.ni.dll
+ 2011-06-26 13:51 . 2011-06-26 13:51 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\448b1912c09fe3be836533e1c04332ce\System.DirectoryServices.AccountManagement.ni.dll
+ 2011-06-26 13:51 . 2011-06-26 13:51 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\a8f34f6b7fc87869ea63c0a5a45e4106\System.Device.ni.dll
+ 2011-06-26 13:53 . 2011-06-26 13:53 1057792 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\2b22ef03091f893f5b381514149a472b\UIAutomationClientsideProviders.ni.dll
+ 2011-06-26 13:52 . 2011-06-26 13:52 4545024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\de9ec945d6cdd90010c824320e8bc332\System.Windows.Forms.DataVisualization.ni.dll
+ 2011-06-26 13:52 . 2011-06-26 13:52 1859584 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\3e5c07211446b947b1ecb6963946320a\System.Web.Services.ni.dll
+ 2011-06-26 13:52 . 2011-06-26 13:52 2011136 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\11a89b103320d603c0bfa48179c3fe1d\System.Speech.ni.dll
+ 2011-06-26 13:52 . 2011-06-26 13:52 1387520 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\e492bb75168cc53d57c2dd5e32e9911c\System.ServiceModel.Activities.ni.dll
+ 2011-06-26 13:52 . 2011-06-26 13:52 1128960 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\b66a8b2c0b8c12540831b41c92bede12\System.ServiceModel.Discovery.ni.dll
+ 2011-06-26 13:51 . 2011-06-26 13:51 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\76d7e84f5dca7908b45edba58bd12f48\System.Management.ni.dll
+ 2011-06-26 13:51 . 2011-06-26 13:51 1072128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\02c1363d5beb2ae5c5722bc8f6c5b77a\System.IdentityModel.ni.dll
+ 2011-06-26 13:51 . 2011-06-26 13:51 1338880 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\0e629bbc4ccd76e072189ccbc9d7903f\System.Data.Services.Client.ni.dll
+ 2011-06-26 13:51 . 2011-06-26 13:51 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\2f83c7b63b1443a26f40b9f66bec3e2a\Microsoft.JScript.ni.dll
+ 2011-06-27 18:06 . 2011-06-27 18:06 15710720 c:\windows\Installer\f811d8.msp
+ 2011-06-28 13:58 . 2011-06-28 13:58 20333056 c:\windows\Installer\20537a.msp
+ 2011-06-26 13:52 . 2011-06-26 13:52 17996800 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\dc31b22f78cb510bf470f0ab5ef65816\System.ServiceModel.ni.dll
+ 2011-06-26 13:51 . 2011-06-26 13:51 13325312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\978e8514751373383f79c3fdd667aa2b\System.Data.Entity.ni.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-02-23 14:04 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2011-02-23 3451496]
"ATICustomerCare"="c:\program files\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-03-04 311296]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb09.exe" [2003-09-01 176128]
"SoundMan"="SOUNDMAN.EXE" [2007-04-16 577536]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
c:\windows\system32\dumprep 0 -k [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2011-06-06 10:55 937920 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDElbyCDFL]
2002-11-02 06:33 45056 ----a-w- c:\program files\Elaborate Bytes\CloneCD\ElbyCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-14 12:00 15360 ----a-w- c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility]
2004-04-06 10:28 172032 ----a-w- c:\windows\system32\spool\drivers\w32x86\3\hpztsb11.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPHmon06]
2004-07-13 21:09 659456 ----a-w- c:\windows\system32\hphmon06.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2001-07-09 08:50 155648 ----a-w- c:\windows\system32\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2010-09-10 20:14 98304 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2011-04-08 10:59 254696 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"d:\\Program Files\\Electronic Arts\\Medal of Honor\\MP\\mohmpgame.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
.
R0 BtHidBus;Bluetooth HID Bus Service;c:\windows\system32\drivers\BtHidBus.sys [6.4.2010 19:32 20104]
R0 ElbyVCD;ElbyVCD;c:\windows\system32\drivers\ElbyVCD.sys [28.11.2002 12:43 22016]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [14.4.2010 19:23 691696]
R0 viasraid;viasraid;c:\windows\system32\drivers\viasraid.sys [12.4.2010 19:33 75904]
R0 vIdeBus;vIdeBus;c:\windows\system32\drivers\vIdeBus.sys [13.4.2010 18:57 15232]
R0 vIdePort;VIA IDE Controller PORT Driver;c:\windows\system32\drivers\vIdePort.sys [13.4.2010 18:57 40192]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [18.6.2011 1:09 371544]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [12.4.2010 20:14 301528]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [17.2.2010 20:25 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [10.5.2010 20:41 67656]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [12.4.2010 20:14 19544]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 14:16 130384]
S3 AsAudioDevice_351;AsAudioDevice_351;c:\windows\system32\drivers\AsAudioDevice_351.sys [11.2.2011 21:19 16640]
S3 BTCOM;Bluetooth Serial port driver;c:\windows\system32\DRIVERS\btcomport.sys --> c:\windows\system32\DRIVERS\btcomport.sys [?]
S3 BTCOMBUS;Bluetooth Serial Port Bus Service;c:\windows\system32\Drivers\btcombus.sys --> c:\windows\system32\Drivers\btcombus.sys [?]
S3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\drivers\btnetBus.sys [6.4.2010 19:33 25864]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [8.6.2011 17:40 23456]
S3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\drivers\IvtBtBus.sys [6.4.2010 19:32 23048]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
Trusted Zone: mojebanka.cz
Trusted Zone: mojebanka.cz
TCP: DhcpNameServer = 10.0.0.138 10.0.0.138
FF - ProfilePath - c:\documents and settings\LEBKA75\Data aplikací\Mozilla\Firefox\Profiles\k9h56ier.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-06-28 19:05
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
.
C:\## aswSnx private storage
.
sken byl úspešně dokončen
skryté soubory: 1
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-583907252-362288127-1801674531-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"??"=hex:75,12,81,fe,3f,a6,88,dd,a5,2a,e0,1d,fb,23,f3,50,df,79,32,f8,90,03,ca,
f5,17,57,4d,52,43,d7,00,02,18,92,9e,96,ab,4c,d3,57,6c,80,5d,09,6e,76,fc,d7,\
"??"=hex:2f,b6,6f,45,ee,e2,ec,0a,29,d5,69,d3,55,fd,2c,18
.
[HKEY_USERS\S-1-5-21-583907252-362288127-1801674531-1003\Software\SecuROM\License information*]
"datasecu"=hex:e0,71,1b,23,a8,bb,67,42,44,98,9b,6c,88,91,82,39,4a,7b,9c,fc,5f,
65,92,3e,71,09,02,4a,c9,b1,51,91,6f,48,46,5d,e5,6b,82,05,36,29,e6,93,5d,86,\
"rkeysecu"=hex:ef,32,f5,3d,22,ec,0f,4f,02,43,64,7f,23,0c,c5,6b
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(792)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
- - - - - - - > 'explorer.exe'(2184)
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2011-06-28 19:09:00
ComboFix-quarantined-files.txt 2011-06-28 17:08
.
Před spuštěním: Volných bajtů: 23 876 698 112
Po spuštění: Volných bajtů: 23 868 809 216
.
- - End Of File - - BD35D406A33843FAB3438F3A9D6DF3D9

[Roli]

Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.


Použij T-Cleaner, který smaže případné zbytky po aplikacích které jsme použili.

Jen před jeho stažením a při použití stopni antivir, protože ho muže detekovat jako vir ale není tomu tak.


Najdi a smaž :

c:\windows\system32\ConduitEngine.tmp


Doporučil bych ještě odinstalit NET Framework 4.0, protože na některých PC zlobí.


Pak dej vědět jaký je stav PC.


P.S. jakou máš verzi DirectX ?

[lebka75]

asi

[Roli]

Aktualizujeme ovladače od grafiky, pokud nevíš co tam máš použij AIDU

Sice se jedná o trial ale náš účel splní.

Nainstaluj ji >> spusť >> klik na Počítač >> dále Přehled,

nahoře v aplikaci klikni na Zpráva vyber Rychlá zpráva >> Prostý text

a vše mi sem zkopíruj, koukneme se co se s tím dá dělat.


V mezičase písni jaký je stav PC.

[lebka75]

zpráva zde http://www.uloz.to/9534457/report-txt

používám program FILEHIPPO, ten by měl aktualizace snad najít, nebo nee

[Roli]

No měl by, ale nic není dokonalé


Ze stránek ATI si stáhni nové ovladače pro grafiku.

Jen se tam budeš muset proklikat sám, protože ti sem nedokážu dát přímo odkaz na stažení.

Po pravé straně okna pod Download Drivers postupně vyber :

Component Category >> Desktop grafik

Product Line >> Radeon HD series

Product Model >> Radeon HD 4xxx series PCIe

Operating System >> Windows XP 32bit

a klik na View results.

Otevře se nová stránka kde vedle Catalyst Software Suite klikneš na Download.

Nainstaluj je a pak mi dej vědět jaký je stav.

[lebka75]

tak jsem to stahnul a nainstaloval, filehippo mi to nabízí ke stažení taky, když to nainstaluju a spustim znovu filehippo, tak mi to opět nabídne , proč

[Roli]

Proto je lepší si vše potřebné aktualizovat sám a ručně.

Jak sis mohl přečíst ovladače jsou už více jak 14 dní na světě a ten automat mlčel.

Písni mi spíše jaký je stav PC.