ComboFix log zde :
ComboFix 10-11-16.05 - Lifaen 17.11.2010 15:44:05.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.959.474 [GMT 1:00]
Spuštěný z: c:\documents and settings\Lifaen\Plocha\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\desktop.ini
c:\documents and settings\All Users\Data aplikací\TabDiscover
c:\documents and settings\All Users\Data aplikací\TabDiscover\tabdiscover151.exe
c:\program files\filesubmit
c:\program files\filesubmit\76378\76378.zip
c:\program files\filesubmit\76378\internal-flame-ws.zip
c:\program files\Mozilla Firefox\extensions\{F9E87066-236C-4067-A3C2-BDA51D6B6B03}
c:\program files\Mozilla Firefox\extensions\{F9E87066-236C-4067-A3C2-BDA51D6B6B03}\defaults\preferences\prefs.js
c:\program files\Mozilla Firefox\extensions\{F9E87066-236C-4067-A3C2-BDA51D6B6B03}\chrome.manifest
c:\program files\Mozilla Firefox\extensions\{F9E87066-236C-4067-A3C2-BDA51D6B6B03}\chrome\tabdiscover.jar
c:\program files\Mozilla Firefox\extensions\{F9E87066-236C-4067-A3C2-BDA51D6B6B03}\install.rdf
c:\program files\RelevantKnowledge
c:\program files\TabDiscover
c:\program files\TabDiscover\tabdiscover.dll
c:\program files\TabDiscover\tabdiscover.exe
C:\readme.txt
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_TABDISCOVER_SERVICE
-------\Service_TabDiscover Service
((((((((((((((((((((((((( Soubory vytvořené od 2010-10-17 do 2010-11-17 )))))))))))))))))))))))))))))))
.
2010-11-17 11:31 . 2010-11-17 11:31 -------- dc----w- c:\program files\Lavalys
2010-11-17 10:08 . 2010-11-17 10:08 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Malwarebytes
2010-11-17 10:08 . 2010-04-29 14:39 38224 -c--a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-11-17 10:08 . 2010-11-17 10:08 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2010-11-17 10:08 . 2010-04-29 14:39 20952 -c--a-w- c:\windows\system32\drivers\mbam.sys
2010-11-17 10:08 . 2010-11-17 10:08 -------- dc----w- c:\program files\Malwarebytes' Anti-Malware
2010-11-17 08:53 . 2010-11-17 10:00 -------- dc----w- c:\windows\NV32643800.TMP
2010-11-17 08:52 . 2010-11-17 09:15 -------- dc----w- C:\NVIDIA
2010-11-17 08:16 . 2010-11-17 08:16 -------- dc----w- C:\rsit
2010-11-17 08:16 . 2010-11-17 08:16 -------- dc----w- c:\program files\trend micro
2010-11-17 08:03 . 2010-11-17 08:03 -------- dc----w- c:\documents and settings\All Users\Data aplikací\McAfee
2010-11-16 22:00 . 2010-11-16 22:00 -------- dc----w- c:\windows\system32\XPSViewer
2010-11-16 21:59 . 2010-11-16 21:59 -------- dc----w- c:\program files\MSBuild
2010-11-16 21:59 . 2010-11-16 21:59 -------- dc----w- c:\program files\Reference Assemblies
2010-11-16 21:36 . 2010-11-16 21:36 -------- dc----w- c:\program files\MSXML 4.0
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\system32\cs-cz
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\system32\cs
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\system32\bits
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\l2schemas
2010-11-16 21:16 . 2010-11-16 21:16 -------- dc----w- c:\windows\EHome
2010-11-16 20:53 . 2008-04-13 18:56 12800 -c----w- c:\windows\system32\drivers\usb8023x.sys
2010-11-16 20:52 . 2008-04-14 03:22 33792 -c----w- c:\windows\system32\mmcperf.exe
2010-11-16 20:51 . 2008-04-13 18:51 101120 -c----w- c:\windows\system32\drivers\bthpan.sys
2010-11-16 20:48 . 2010-11-16 20:48 -------- dc----w- c:\documents and settings\All Users\Data aplikací\UAB
2010-11-16 20:48 . 2010-11-16 20:48 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\PC_Drivers_Headquarters
2010-11-16 20:47 . 2010-11-16 20:47 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Easy Driver Pro
2010-11-16 20:45 . 2010-11-16 20:45 -------- dc----w- c:\program files\Easy Driver Pro
2010-11-16 16:03 . 2010-11-16 16:03 219200 -c--a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2010-11-16 16:03 . 2010-11-16 16:03 -------- dc----w- c:\program files\DAEMON Tools Pro
2010-11-16 16:03 . 2010-11-16 16:04 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\DAEMON Tools Pro
2010-11-16 16:03 . 2010-11-16 16:03 -------- dc----w- c:\documents and settings\All Users\Data aplikací\DAEMON Tools Pro
2010-11-13 10:02 . 2010-11-13 10:02 -------- dc----w- c:\documents and settings\All Users\Data aplikací\DAEMON Tools Lite
2010-11-12 18:46 . 2010-11-12 18:49 -------- dc----w- c:\program files\CSConfigurator
2010-11-12 14:40 . 2010-11-16 20:52 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\searchqutb
2010-11-12 14:40 . 2010-11-12 14:40 -------- dc----w- c:\program files\Windows Searchqu Toolbar
2010-11-12 14:39 . 2010-11-12 14:40 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Bandoo
2010-11-12 14:38 . 2010-11-12 14:40 -------- dc----w- c:\program files\Bandoo
2010-11-12 14:27 . 2010-11-16 20:52 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\bearsharemediabartb
2010-11-12 14:27 . 2010-11-12 14:29 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\BearShare
2010-11-12 14:26 . 2010-11-12 14:27 -------- dc----w- c:\program files\BearShare Applications
2010-11-12 14:26 . 2010-11-12 14:26 -------- dc----w- c:\documents and settings\All Users\Data aplikací\BearShare
2010-11-12 14:24 . 2010-11-12 14:27 -------- dc-h--w- c:\documents and settings\All Users\Data aplikací\{A471C4AE-B27B-4761-9BCF-82FAAAAA2D01}
2010-11-12 14:23 . 2010-11-12 14:23 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\PackageAware
2010-11-09 20:34 . 2010-11-16 21:53 -------- dc----w- C:\videooutput
2010-11-09 20:34 . 2009-05-19 17:32 758018 -c--a-w- c:\windows\system32\xvidcore.dll
2010-11-09 20:34 . 2008-12-04 20:46 180224 -c--a-w- c:\windows\system32\xvidvfw.dll
2010-11-09 20:34 . 2008-10-08 09:16 139264 -c--a-w- c:\windows\system32\xvid.ax
2010-11-09 20:30 . 2010-11-10 05:59 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Eltima Software
2010-11-09 20:30 . 2010-11-09 20:30 -------- dc----w- c:\documents and settings\All Users\Data aplikací\TEMP
2010-11-09 20:15 . 2010-11-09 20:15 0 -c--a-w- c:\windows\system32\ConduitEngine.tmp
2010-11-09 20:14 . 2010-11-09 20:15 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Jookz Toolbar
2010-11-09 20:13 . 2010-11-14 18:57 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\IDM
2010-11-09 20:13 . 2010-11-17 14:39 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\DMCache
2010-11-09 20:12 . 2010-11-09 20:16 -------- dc----w- c:\program files\Internet Download Manager
2010-11-06 10:59 . 2010-11-06 10:59 -------- dc----w- C:\Broker_LunarSphere
2010-11-06 10:59 . 2010-11-06 10:59 -------- dc----w- C:\LunarSphere
2010-11-05 07:50 . 2010-11-05 07:50 -------- dc----r- C:\AHCache
2010-11-01 18:38 . 2010-11-01 18:38 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\AdobeUM
2010-11-01 18:37 . 2010-11-01 18:38 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\Adobe
2010-11-01 18:37 . 2010-11-01 18:37 -------- dc----w- c:\program files\Common Files\Adobe
2010-11-01 14:36 . 2010-11-01 14:36 -------- dc----w- c:\program files\Common Files\Skype
2010-10-29 14:48 . 2010-11-02 18:02 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\TS3Client
2010-10-29 14:45 . 2010-10-29 14:48 -------- dc----w- c:\program files\TeamSpeak 3 Client
2010-10-28 11:16 . 2010-10-28 16:19 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\Ahead
2010-10-28 11:15 . 2010-11-02 18:21 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Ahead
2010-10-28 11:12 . 2010-10-28 11:16 -------- dc----w- c:\program files\Common Files\Ahead
2010-10-28 11:12 . 2010-10-28 11:12 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Nero
2010-10-28 08:32 . 2010-10-28 08:32 -------- dc----w- c:\documents and settings\All Users\Data aplikací\nView_Profiles
2010-10-27 12:32 . 2002-12-05 12:10 155648 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2010-10-27 12:32 . 2002-12-02 13:22 5632 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2010-10-27 12:32 . 2002-12-02 11:33 57344 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2010-10-27 12:32 . 2002-12-02 11:33 237568 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2010-10-27 12:31 . 2002-12-05 12:12 692224 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2010-10-27 12:31 . 2010-10-27 12:31 282756 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2010-10-27 12:31 . 2010-10-27 12:31 163972 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2010-10-26 19:15 . 2010-10-26 19:15 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Blizzard
2010-10-26 15:19 . 2010-11-12 18:33 -------- dc----w- c:\program files\Valve
2010-10-26 15:18 . 2003-09-03 00:27 69715 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\ctor.dll
2010-10-26 15:18 . 2003-09-03 00:26 266240 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iscript.dll
2010-10-26 15:18 . 2003-09-03 00:26 192512 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iuser.dll
2010-10-26 15:18 . 2003-09-03 00:28 724992 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iKernel.dll
2010-10-26 15:18 . 2003-09-03 00:25 5632 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\DotNetInstaller.exe
2010-10-26 15:18 . 2010-10-26 15:18 311428 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\Setup.dll
2010-10-26 15:18 . 2010-10-26 15:18 184452 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iGdi.dll
2010-10-20 13:04 . 2010-10-20 13:04 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\Apple Computer
2010-10-19 14:07 . 2010-09-08 08:09 108032 -c--a-w- c:\windows\system32\ff_vfw.dll
2010-10-19 14:00 . 2010-10-19 14:00 -------- dc----w- c:\program files\Real Alternative
2010-10-19 13:59 . 2010-10-19 13:59 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Apple Computer
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin6.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin5.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin4.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin3.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin2.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin.dll
2010-10-19 13:59 . 2010-03-17 20:53 94208 -c--a-w- c:\windows\system32\QuickTimeVR.qtx
2010-10-19 13:59 . 2010-03-17 20:53 69632 -c--a-w- c:\windows\system32\QuickTime.qts
2010-10-19 13:59 . 2010-03-17 20:53 180224 -c--a-w- c:\windows\system32\QTCF.dll
2010-10-19 13:50 . 2010-11-16 21:53 -------- dc----w- C:\MTV_OUTPUT
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-07 18:39 . 2010-10-07 17:15 2829 -c--a-w- c:\windows\War3Unin.pif
2010-10-07 18:39 . 2010-10-07 17:15 139264 -c--a-w- c:\windows\War3Unin.exe
2010-09-29 18:31 . 2010-09-29 18:56 210272 -c--a-w- c:\windows\system32\idmmbc.dll
2010-09-07 15:12 . 2010-08-11 18:37 38848 -c--a-w- c:\windows\avastSS.scr
2010-09-07 15:11 . 2010-08-11 18:37 167592 -c--a-w- c:\windows\system32\aswBoot.exe
2010-09-07 14:52 . 2010-08-11 18:37 46672 -c--a-w- c:\windows\system32\drivers\aswTdi.sys
2010-09-07 14:52 . 2010-08-11 18:37 165584 -c--a-w- c:\windows\system32\drivers\aswSP.sys
2010-09-07 14:47 . 2010-08-11 18:37 23376 -c--a-w- c:\windows\system32\drivers\aswRdr.sys
2010-09-07 14:47 . 2010-08-11 18:37 100176 -c--a-w- c:\windows\system32\drivers\aswmon2.sys
2010-09-07 14:47 . 2010-08-11 18:37 94544 -c--a-w- c:\windows\system32\drivers\aswmon.sys
2010-09-07 14:47 . 2010-08-11 18:37 17744 -c--a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-09-07 14:46 . 2010-08-11 18:37 28880 -c--a-w- c:\windows\system32\drivers\aavmker4.sys
2009-12-17 05:11 . 2009-11-01 07:50 10802648 -c--a-w- c:\program files\xul.dll
2009-12-17 05:11 . 2009-11-01 07:50 98304 -c--a-w- c:\program files\nssdbm3.dll
2009-12-17 05:11 . 2009-11-01 07:50 917464 -c--a-w- c:\program files\js3250.dll
2009-12-17 05:11 . 2009-11-01 07:50 87512 -c--a-w- c:\program files\nssutil3.dll
2009-12-17 05:11 . 2009-11-01 07:50 722392 -c--a-w- c:\program files\mozcrt19.dll
2009-12-17 05:11 . 2009-11-01 07:50 636376 -c--a-w- c:\program files\nss3.dll
2009-12-17 05:11 . 2009-11-01 07:50 457688 -c--a-w- c:\program files\sqlite3.dll
2009-12-17 05:11 . 2009-11-01 07:50 316888 -c--a-w- c:\program files\nssckbi.dll
2009-12-17 05:11 . 2009-11-01 07:50 244696 -c--a-w- c:\program files\updater.exe
2009-12-17 05:11 . 2009-11-01 07:50 20440 -c--a-w- c:\program files\plc4.dll
2009-12-17 05:11 . 2009-11-01 07:50 17880 -c--a-w- c:\program files\xpcom.dll
2009-12-17 05:11 . 2009-11-01 07:50 17368 -c--a-w- c:\program files\plds4.dll
2009-12-17 05:11 . 2009-11-01 07:50 169432 -c--a-w- c:\program files\nspr4.dll
2009-12-17 05:11 . 2009-11-01 07:50 155648 -c--a-w- c:\program files\softokn3.dll
2009-12-17 05:11 . 2009-11-01 07:50 136664 -c--a-w- c:\program files\ssl3.dll
2009-12-17 05:11 . 2009-11-01 07:50 103896 -c--a-w- c:\program files\smime3.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{038cb5c7-48ea-4af9-94e0-a1646542e62b}"= "c:\program files\ToggleEN\tbTog0.dll" [2010-10-18 3908192]
"{9CB65206-89C4-402c-BA80-02D8C59F9B1D}"= "c:\program files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL" [2010-10-07 57344]
[HKEY_CLASSES_ROOT\clsid\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
[HKEY_CLASSES_ROOT\clsid\{9cb65206-89c4-402c-ba80-02d8c59f9b1d}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
2010-10-18 10:26 3908192 -c--a-w- c:\program files\ToggleEN\tbTog0.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0974BA1E-64EC-11DE-B2A5-E43756D89593}]
2009-12-20 09:51 87480 -c--a-w- c:\progra~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-10-18 10:26 3908192 -c--a-w- c:\program files\ConduitEngine\ConduitEngin0.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}]
2010-10-19 12:53 585136 -c--a-w- c:\progra~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}]
2010-09-20 13:05 2194944 -c--a-w- c:\program files\Bandoo\Plugins\IE\ieplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{4C350B19-6CA1-4569-B14C-296D8D6535B2}"= "c:\program files\Jookz Toolbar\jookztoolbar.dll" [2010-05-03 1043624]
"{038cb5c7-48ea-4af9-94e0-a1646542e62b}"= "c:\program files\ToggleEN\tbTog0.dll" [2010-10-18 3908192]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngin0.dll" [2010-10-18 3908192]
"{0974BA1E-64EC-11DE-B2A5-E43756D89593}"= "c:\progra~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll" [2009-12-20 87480]
[HKEY_CLASSES_ROOT\clsid\{4c350b19-6ca1-4569-b14c-296d8d6535b2}]
[HKEY_CLASSES_ROOT\clsid\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
[HKEY_CLASSES_ROOT\clsid\{0974ba1e-64ec-11de-b2a5-e43756d89593}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{4C350B19-6CA1-4569-B14C-296D8D6535B2}"= "c:\program files\Jookz Toolbar\jookztoolbar.dll" [2010-05-03 1043624]
"{038CB5C7-48EA-4AF9-94E0-A1646542E62B}"= "c:\program files\ToggleEN\tbTog0.dll" [2010-10-18 3908192]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngin0.dll" [2010-10-18 3908192]
[HKEY_CLASSES_ROOT\clsid\{4c350b19-6ca1-4569-b14c-296d8d6535b2}]
[HKEY_CLASSES_ROOT\clsid\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"scheduler_monitor"="c:\program files\ReaConverter 5.5 Pro\init_scheduler.exe" [2007-06-15 27136]
"STYLEXP"="c:\program files\TGTSoft\StyleXP\StyleXP.exe" [2006-05-24 1372160]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 139264]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2010-09-29 3245408]
"DAEMON Tools Pro Agent"="c:\program files\DAEMON Tools Pro\DTAgent.exe" [2010-11-11 570688]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVCLOCK"="nvclock.dll" [2003-04-14 81920]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-05 8523776]
"nwiz"="nwiz.exe" [2007-12-05 1626112]
"RTHDCPL"="RTHDCPL.EXE" [2007-07-05 16380416]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-09-07 2838912]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-12-05 81920]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
3D!Turbo Experience.lnk - c:\program files\MSI\3D!Turbo Experience\3D!Turbo.exe [2010-8-11 94208]
Adobe Reader Speed Launch.lnk - d:\reader\reader_sl.exe [2004-12-14 29696]
gwum.lnk - c:\program files\Gigabyte\Gigabyte Windows Utility Manager\gwum.exe [2010-8-11 471040]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\program files\TGTSoft\StyleXP\Logon\CurrentLogon.EXE"
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MCPClient]
2005-01-31 13:13 49152 -c--a-w- c:\progra~1\COMMON~1\stardock\MCPStub.dll
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\MSN Gaming Zone\\Windows\\shvlzm.exe"=
"c:\\Program Files\\World of Warcraft\\Wow.exe"=
"c:\\Program Files\\D-Link\\AirPlus for DWL-900AP+\\AirPlus_Manager.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Gigabyte\\Gigabyte Windows Utility Manager\\bios\\Gwflash.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"d:\\Warcraft III\\Warcraft III.exe"=
"c:\\Program Files\\COMODO\\EasyVPN\\EasyVPN.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"d:\\Warcraft III\\War3.exe"=
"c:\\Program Files\\Valve\\hl.exe"=
"c:\\Program Files\\BearShare Applications\\BearShare\\BearShare.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [11.8.2010 19:37 165584]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [16.11.2010 17:03 219200]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [11.8.2010 19:37 17744]
R2 CrdphService;COMODO EasyVPN VNC Service;c:\program files\COMODO\EasyVPN\crdphService.exe [11.8.2009 17:47 491768]
R2 EasyVpnAdpt;COMODO EasyVPN Service;c:\program files\COMODO\EasyVPN\Vpnservice.exe [12.1.2010 8:37 34552]
R2 ETDrv;ETDrv;c:\windows\system32\drivers\ETDrv.sys [11.8.2010 14:44 170128]
R2 Jookz Toolbar Helper;Jookz Toolbar Helper;c:\program files\Jookz Toolbar\tbsvc.exe [26.7.2010 22:37 237224]
R3 MarkFun_NT;MarkFun_NT;c:\program files\Gigabyte\Gigabyte Windows Utility Manager\MARKFUN.W32 [11.8.2010 14:45 8236]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [7.10.2010 15:46 136176]
S3 ATP;Comodo EasyVPN Miniport Driver;c:\windows\system32\drivers\cmdatp.sys [26.8.2010 19:40 17424]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Home Edition\kerneld.wnt [18.8.2005 7168]
S3 huadio;huadio;\??\c:\huadio.tmp --> c:\huadio.tmp [?]
S3 rcp_service;ReaConverter scheduler service;c:\program files\ReaConverter 5.5 Pro\rcp_scheduler.exe [30.11.2007 10:27 558592]
.
Obsah adresáře 'Naplánované úlohy'
2010-11-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-07 14:46]
2010-11-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-07 14:46]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.bearshare.com/
mStart Page = hxxp://
www.yahoo.com
uSearchAssistant = hxxp://search.bearshare.com/sidebar.html?src=ssb&sysid=2
IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
LSP: c:\windows\system32\idmmbc.dll
FF - ProfilePath - c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\
FF - prefs.js: browser.search.selectedEngine - BearShare Web Search
FF - prefs.js: browser.startup.homepage - hxxp://search.bearshare.com/
FF - prefs.js: keyword.URL - hxxp://search.bearshare.com/web?src=ffb&systemid=2&q=
FF - component: c:\documents and settings\Lifaen\Data aplikací\IDM\idmmzcc3\components\idmmzcc.dll
FF - component: c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\extensions\{038cb5c7-48ea-4af9-94e0-a1646542e62b}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\extensions\{038cb5c7-48ea-4af9-94e0-a1646542e62b}\components\RadioWMPCore.dll
FF - component: c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\extensions\
firefox@bandoo.com\components\FFPlugin.dll
FF - component: c:\program files\BearShare Applications\MediaBar\Datamngr\FirefoxExtension\components\DataMngrHlp.dll
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - component: e:\program files\Search Settings\FF\components\SearchSettingsFF.dll
FF - plugin: c:\program files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npWebLaunch.dll
FF - plugin: d:\reader\browser\nppdf32.dll
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
AddRemove-QuicktimeAlt_is1 - c:\program files\QuickTime Alternative\unins000.exe
AddRemove-REAPER - c:\program files\REAPER\Uninstall.exe
AddRemove-TabDiscover - c:\program files\TabDiscover\uninstall.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2010-11-17 15:51
Windows 5.1.2600 Service Pack 3 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Home Edition\kerneld.wnt"
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\huadio]
"ImagePath"="\??\c:\huadio.tmp"
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MarkFun_NT]
"ImagePath"="\??\c:\program files\Gigabyte\Gigabyte Windows Utility Manager\markfun.w32"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_USERS\S-1-5-21-1123561945-838170752-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{E04EAD46-BD5D-34AF-C919-E3B555200846}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"ealnhgdhbc"=hex:66,61,62,6e,67,62,6c,61,65,65,67,63,00,31
"dacnchkm"=hex:64,62,70,67,6d,69,65,64,64,6f,6c,61,70,6b,6e,69,67,63,68,64,69,
6c,6b,70,64,6a,68,62,6f,6e,69,65,6f,6a,6f,68,65,67,65,6b,00,00
"iadmkldjpjmahhghfg"=hex:6a,61,69,61,6a,6f,67,68,6c,67,63,67,67,6d,67,69,6f,6d,
68,6d,00,00
"hajhagkijdgcfnie"=hex:6a,61,69,61,6e,6a,64,66,61,6c,62,63,68,65,6c,68,64,6c,
6c,66,00,00
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{4868e9d3-c938-4cea-aa69-f3862541577a}]
@Denied: (Full) (Everyone)
"Model"=dword:00000140
"Therad"=dword:00000009
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):0a,b7,40,ac,96,f0,c9,4a,cc,70,8f,06,85,31,80,57,ac,a8,e7,37,a1,
4c,f1,6c,ec,bd,da,d9,ac,79,e5,23,72,19,ba,57,ff,25,27,13,00,00,00,00,00,00,\
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(668)
c:\progra~1\COMMON~1\Stardock\mcpstub.dll
- - - - - - - > 'lsass.exe'(724)
c:\windows\system32\idmmbc.dll
- - - - - - - > 'explorer.exe'(2352)
c:\windows\system32\nview.dll
c:\progra~1\WINDOW~2\wmpband.dll
c:\program files\Internet Download Manager\idmmkb.dll
c:\windows\system32\nvwddi.dll
c:\progra~1\COMMON~1\stardock\MCPCore.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\TGTSoft\StyleXP\StyleXPService.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\progra~1\COMMON~1\Stardock\SDMCP.exe
c:\windows\system32\nvsvc32.exe
c:\progra~1\Bandoo\Bandoo.exe
c:\windows\system32\wscntfy.exe
c:\windows\RTHDCPL.EXE
c:\progra~1\BEARSH~1\MediaBar\Datamngr\DATAMN~1.EXE
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\rundll32.exe
c:\program files\MSI\3D!Turbo Experience\zoo.exe
c:\program files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
c:\windows\system32\dwwin.exe
c:\program files\Internet Download Manager\IEMonitor.exe
.
**************************************************************************
.
Celkový čas: 2010-11-17 15:54:58 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-11-17 14:54
Před spuštěním: 3 844 194 304
Po spuštění: 6 575 636 480
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect /usepmtimer
multi(0)disk(0)rdisk(0)partition(3)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /noexecute=optin /usepmtimer
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /fastdetect
- - End Of File - - B0AC3C68CED95994928A2AAC8DBFD279
to tam máš současně 3 operační systémy?
teď se pokusím odstranit ti některé zbytečnosti a zdržovadla (google toho ví nejvíc)
myslite ze je to vse? ale jooo st nejlepsi na sveteeeeeeeeeeeeeeeeee 
Do své odpovědi vlož obsah zeleného okna
to byl script do ComboFixu - návod tam máš, už jsi používal