VIRY.CZ

Zde je log

ComboFix 10-02-26.01 - Lukáš 27.02.2010 12:45:19.5.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1279.961 [GMT 1:00]
Spuštěný z: c:\documents and settings\Lukáš\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Lukáš\Plocha\CFScript.txt
AV: avast! Antivirus *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_NY
-------\Legacy_SDYDAL
-------\Service_NY
-------\Service_SDYDAL


((((((((((((((((((((((((( Soubory vytvořené od 2010-01-27 do 2010-02-27 )))))))))))))))))))))))))))))))
.

2010-02-26 19:51 . 2010-02-26 19:51 -------- d-----w- c:\program files\Sunbelt Software
2010-02-26 17:29 . 2010-02-26 17:29 -------- d-----w- c:\program files\Common Files\Skype
2010-02-24 20:47 . 2010-02-24 20:47 -------- d-----w- c:\program files\GIMP-2.0
2010-02-24 16:01 . 2010-02-24 16:04 -------- d-----w- c:\program files\ICQ7.0
2010-02-23 18:49 . 2010-02-26 17:47 -------- d-----w- c:\program files\Microsoft Bootvis
2010-02-23 12:27 . 2010-02-23 12:27 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-02-23 12:26 . 2010-02-23 12:27 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-02-21 18:33 . 2010-02-21 18:33 -------- d-----w- c:\program files\GRETECH
2010-02-21 18:30 . 2010-02-21 18:30 -------- d-----w- c:\program files\VideoLAN
2010-02-21 18:30 . 2010-02-21 18:30 -------- d-----w- c:\program files\Comodo
2010-02-21 18:13 . 2008-02-28 12:26 1414440 ----a-w- c:\windows\system32\ShellManager310E2D762.dll
2010-02-20 20:04 . 2010-02-20 20:04 -------- d-----w- c:\program files\ICQ6Toolbar
2010-02-20 19:19 . 2010-02-20 19:19 -------- d-----r- c:\documents and settings\LocalService\Dokumenty
2010-02-20 17:08 . 2010-02-20 17:08 -------- d-----w- c:\program files\Microsoft Silverlight
2010-02-20 16:50 . 2008-04-14 03:21 21504 -c--a-w- c:\windows\system32\dllcache\hidserv.dll
2010-02-20 16:50 . 2008-04-14 03:21 21504 ----a-w- c:\windows\system32\hidserv.dll
2010-02-20 16:49 . 2009-07-20 11:25 301656 ----a-w- c:\windows\system32\BtCoreIf.dll
2010-02-20 16:48 . 2010-02-20 16:52 -------- d-----w- c:\program files\Common Files\Logishrd
2010-02-19 14:42 . 2010-02-21 11:02 -------- d-----w- c:\program files\QIP
2010-02-19 13:27 . 2010-02-11 18:38 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-02-19 13:27 . 2010-02-11 18:42 162512 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-02-19 13:27 . 2010-02-11 18:39 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-02-19 13:27 . 2010-02-11 18:42 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-02-19 13:27 . 2010-02-11 18:38 100432 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-02-19 13:27 . 2010-02-11 18:38 94800 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-02-19 13:27 . 2010-02-11 18:38 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-02-19 13:26 . 2010-02-11 18:53 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-02-19 13:26 . 2010-02-11 18:53 153184 ----a-w- c:\windows\system32\aswBoot.exe
2010-02-19 12:35 . 2010-02-19 12:36 -------- d-----w- c:\program files\Common Files\Adobe
2010-02-19 11:26 . 2010-02-19 11:26 -------- d-----w- c:\program files\FileHippo.com
2010-02-19 11:21 . 2010-02-26 17:32 -------- d-----w- c:\program files\CCleaner
2010-02-19 11:13 . 2010-02-19 11:13 -------- d-----w- C:\rsit
2010-02-19 09:24 . 2010-02-19 09:24 -------- d--h--w- c:\windows\PIF
2010-02-19 00:33 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-02-19 00:32 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-02-19 00:32 . 2010-02-19 00:34 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-17 10:25 . 2008-04-13 18:41 8576 -c--a-w- c:\windows\system32\dllcache\i2omgmt.sys
2010-02-17 10:25 . 2008-04-13 18:41 8576 ----a-w- c:\windows\system32\drivers\i2omgmt.sys
2010-02-17 10:22 . 2001-08-17 19:13 27165 -c--a-w- c:\windows\system32\dllcache\fetnd5.sys
2010-02-17 10:22 . 2001-08-17 19:13 27165 ----a-w- c:\windows\system32\drivers\fetnd5.sys
2010-02-17 10:20 . 2008-04-13 18:45 52864 -c--a-w- c:\windows\system32\dllcache\dmusic.sys
2010-02-17 10:20 . 2008-04-13 18:45 52864 ----a-w- c:\windows\system32\drivers\dmusic.sys
2010-02-17 10:20 . 2008-04-13 18:40 8192 -c--a-w- c:\windows\system32\dllcache\changer.sys
2010-02-17 10:20 . 2008-04-13 18:40 8192 ----a-w- c:\windows\system32\drivers\changer.sys
2010-02-17 10:14 . 2009-08-06 18:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-02-17 10:14 . 2009-08-06 18:23 215920 ----a-w- c:\windows\system32\muweb.dll
2010-02-09 12:04 . 2010-02-09 12:04 -------- d-----w- c:\windows\nview
2010-02-09 12:04 . 2008-05-16 13:01 446464 ----a-w- c:\windows\system32\nvudisp.exe
2010-02-08 19:24 . 2010-02-08 19:24 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2010-02-07 19:59 . 2010-02-21 18:20 -------- d-----w- c:\program files\Common Files\Nero
2010-02-07 18:39 . 2010-02-07 18:39 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2010-02-06 20:14 . 2010-02-26 15:55 -------- d-----w- c:\program files\trend micro
2010-02-06 12:41 . 2010-02-06 12:41 -------- d-----w- c:\program files\OO Software
2010-02-05 14:46 . 2010-02-05 16:10 -------- d-----w- c:\windows\Globalization
2010-02-05 14:40 . 2008-04-13 18:45 26112 -c--a-w- c:\windows\system32\dllcache\usbser.sys
2010-02-05 14:40 . 2008-04-13 18:45 26112 ----a-w- c:\windows\system32\drivers\usbser.sys
2010-02-05 14:34 . 2008-03-21 12:57 14640 ------w- c:\windows\system32\spmsgXP_2k3.dll
2010-02-05 14:31 . 2010-02-26 17:50 -------- d-----w- c:\program files\Common Files\Nokia
2010-02-05 14:31 . 2010-02-05 14:31 -------- d-----w- c:\program files\DIFX
2010-02-05 14:31 . 2008-08-26 08:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2010-02-05 14:31 . 2010-02-05 14:31 -------- d-----w- c:\program files\PC Connectivity Solution
2010-02-05 14:30 . 2009-10-06 10:52 91136 ----a-w- c:\windows\system32\nmwcdcls.dll
2010-01-30 10:50 . 2010-01-30 10:50 -------- d-sh--w- c:\windows\ftpcache
2010-01-29 13:59 . 1998-11-13 11:58 307200 ----a-w- c:\windows\IsUn0405.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-26 21:32 . 2010-01-17 14:37 -------- d-----w- c:\program files\Skype
2010-02-26 17:53 . 2004-08-18 12:00 77872 ----a-w- c:\windows\system32\perfc005.dat
2010-02-26 17:53 . 2004-08-18 12:00 428750 ----a-w- c:\windows\system32\perfh005.dat
2010-02-24 16:03 . 2010-01-02 11:52 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-02-23 18:26 . 2010-01-05 19:43 -------- d-----w- c:\program files\Common Files\Ahead
2010-02-21 18:33 . 2010-01-14 19:00 -------- d-----w- c:\program files\Webteh
2010-02-21 18:19 . 2010-01-05 19:43 -------- d-----w- c:\program files\Nero
2010-02-21 17:55 . 2010-01-10 09:59 -------- d-----w- c:\program files\Ashampoo
2010-02-21 10:37 . 2010-01-05 19:18 -------- d-----w- c:\program files\Windows Media Connect 2
2010-02-20 16:49 . 2010-01-11 18:49 -------- d-----w- c:\program files\Common Files\Logitech
2010-02-19 13:50 . 2010-01-02 12:33 -------- d-----w- c:\program files\Alwil Software
2010-02-19 13:23 . 2010-01-23 21:23 -------- d-----w- c:\program files\DivX
2010-02-18 22:20 . 2010-01-17 18:55 -------- d-----w- c:\program files\Lavasoft
2010-02-07 09:35 . 2010-01-17 19:56 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-02-06 19:43 . 2010-01-15 20:57 -------- d-----w- c:\program files\TuneUp Utilities 2010
2010-02-05 19:09 . 2010-01-17 14:33 -------- d-----w- c:\program files\IrfanView
2010-02-05 14:42 . 2010-02-05 14:42 0 ---ha-w- c:\windows\system32\drivers\Msft_User_PCCSWpdDriver_01_07_00.Wdf
2010-02-05 14:42 . 2010-02-05 14:42 0 ---ha-w- c:\windows\system32\drivers\MsftWdf_user_01_07_00.Wdf
2010-02-05 14:34 . 2010-02-05 14:34 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
2010-02-05 14:34 . 2010-02-05 14:34 0 ---ha-w- c:\windows\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
2010-01-27 21:15 . 2010-01-27 21:15 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll
2010-01-25 17:21 . 2010-01-25 17:21 -------- d-----w- c:\program files\Archiving
2010-01-23 19:25 . 2010-01-02 11:43 -------- d-----w- c:\program files\Common Files\InstallShield
2010-01-18 19:39 . 2010-01-18 19:39 -------- d-----w- c:\program files\Common Files\ACTIV Software
2010-01-18 19:39 . 2010-01-18 19:39 -------- d-----w- c:\program files\ACTIV Software
2010-01-17 20:59 . 2010-01-17 20:59 -------- d-----w- c:\program files\Opera
2010-01-17 14:38 . 2010-01-17 14:38 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2010-01-14 18:28 . 2010-01-14 18:28 -------- d-----w- c:\program files\Codec Pack - All In 1
2010-01-14 18:27 . 2010-01-14 18:28 737280 ----a-w- c:\windows\iun6002.exe
2010-01-12 15:46 . 2010-01-12 15:46 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2010-01-11 22:46 . 2010-01-11 21:19 126984 ----a-w- c:\windows\hpoins11.dat
2010-01-11 22:45 . 2010-01-11 21:00 -------- d-----w- c:\program files\HP
2010-01-11 22:44 . 2010-01-11 22:43 -------- d-----w- c:\program files\Common Files\HP
2010-01-11 22:42 . 2010-01-11 22:41 -------- d-----w- c:\program files\Hewlett-Packard
2010-01-11 22:41 . 2010-01-11 22:41 -------- d-----w- c:\program files\Common Files\Hewlett-Packard
2010-01-11 18:54 . 2010-01-11 18:54 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_LHidFilt_01005.Wdf
2010-01-11 18:54 . 2010-01-11 18:54 0 ---ha-w- c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2010-01-11 18:51 . 2010-01-11 18:51 -------- d-----w- c:\program files\Common Files\LogiShared
2010-01-11 18:51 . 2010-01-11 18:51 127034 ------r- c:\windows\bwUnin-8.1.1.50-8876480SL.exe
2010-01-11 18:51 . 2010-01-11 18:49 -------- d-----w- c:\program files\Logitech
2010-01-10 11:21 . 2010-01-02 11:14 76487 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-01-10 11:21 . 2010-01-02 11:14 2684 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2010-01-10 11:15 . 2010-01-02 11:14 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2010-01-10 10:06 . 2010-01-10 10:06 -------- d-----w- c:\program files\MSBuild
2010-01-10 10:06 . 2010-01-10 10:06 -------- d-----w- c:\program files\Reference Assemblies
2010-01-10 09:59 . 2010-01-10 09:59 -------- d-----w- c:\program files\MSXML 6.0
2010-01-05 19:24 . 2010-01-05 19:24 0 ----a-w- c:\windows\nsreg.dat
2010-01-05 18:55 . 2010-01-05 18:55 0 ----a-w- c:\windows\ativpsrm.bin
2010-01-05 18:53 . 2010-01-02 12:43 -------- d-----w- c:\program files\ATI Technologies
2010-01-02 12:44 . 2010-01-02 12:44 -------- d-----w- c:\program files\Microsoft.NET
2010-01-02 11:52 . 2010-01-02 11:52 -------- d-----w- c:\program files\C-Media 3D Audio
2010-01-02 11:15 . 2010-01-02 11:15 -------- d-----w- c:\program files\microsoft frontpage
2010-01-02 11:11 . 2010-01-02 11:11 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2009-12-31 16:50 . 2004-08-18 12:00 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-21 19:08 . 2004-08-18 12:00 916480 ------w- c:\windows\system32\wininet.dll
2009-12-17 23:14 . 2010-01-15 20:58 30536 ----a-w- c:\windows\system32\TURegOpt.exe
2009-12-17 23:08 . 2010-01-15 20:58 30024 ----a-w- c:\windows\system32\uxtuneup.dll
2009-12-17 07:42 . 2010-01-02 11:10 343552 ----a-w- c:\windows\system32\mspaint.exe
2009-12-14 07:10 . 2004-08-18 12:00 33280 ----a-w- c:\windows\system32\csrsrv.dll
2009-12-09 10:11 . 2004-08-18 12:00 2191360 ------w- c:\windows\system32\ntoskrnl.exe
2009-12-09 10:11 . 2004-08-17 15:45 2068224 ------w- c:\windows\system32\ntkrnlpa.exe
2009-12-04 18:22 . 2004-08-18 12:00 455424 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}"= "c:\documents and settings\Lukáš\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll" [2010-02-18 149968]

[HKEY_CLASSES_ROOT\clsid\{a55f9c95-2bb1-4ea2-bc77-dfaab78832ce}]
[HKEY_CLASSES_ROOT\qipbar.QIPBHO.1]
[HKEY_CLASSES_ROOT\qipbar.QIPBHO]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
2010-02-18 15:46 149968 ----a-w- c:\documents and settings\Lukáš\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-16 13529088]
"nwiz"="nwiz.exe" [2008-05-16 1630208]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-16 86016]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-02-11 2756488]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2009-07-20 11:28 72208 ----a-w- c:\program files\Common Files\Logitech\Bluetooth\LBTWLgn.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ICQ"="c:\progra~1\ICQ6.5\ICQ.exe" silent
"CTFMON.EXE"=c:\windows\system32\ctfmon.exe
"Skype"="c:\program files\Skype\Phone\Skype.exe" /nosplash /minimized
"SpybotSD TeaTimer"=c:\program files\Spybot - Search & Destroy\TeaTimer.exe
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"FileHippo.com"="c:\program files\FileHippo.com\UpdateChecker.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Cmaudio"=RunDll32 cmicnfg.cpl,CMICtrlWnd
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
"NokiaMServer"=c:\program files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\QIP\\qip.exe"=
"c:\\Program Files\\ICQ7.0\\ICQ.exe"=
"c:\\Program Files\\ICQ7.0\\aolload.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [23.2.2010 13:27 691696]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [19.2.2010 14:27 162512]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [19.2.2010 14:27 19024]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [18.12.2009 0:12 1044808]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [14.10.2009 7:24 10064]
S3 DfSdkS;Defragmentation-Service;c:\program files\Ashampoo\Ashampoo WinOptimizer 6\DfSdkS.exe [10.1.2010 10:59 410976]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'

2010-02-27 c:\windows\Tasks\Automatic troubleshooting.job
- c:\program files\TuneUp Utilities 2010\TuneUpSystemStatusCheck.exe [2009-12-17 23:18]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://qip.ru
uDefault_Search_URL = hxxp://search.qip.ru
uSearchAssistant = hxxp://search.qip.ru/ie
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: {{88EB38EF-4D2C-436D-ABD3-56B232674062} - c:\program files\ICQ7.0\ICQ.exe
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
FF - ProfilePath - c:\documents and settings\Lukáš\Data aplikací\Mozilla\Firefox\Profiles\3xjtvnaf.default\
FF - prefs.js: browser.search.selectedEngine - QIP Search
FF - prefs.js: browser.startup.homepage - seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.qip.ru/search?from=FF&query=
FF - component: c:\documents and settings\Lukáš\Data aplikací\Mozilla\Firefox\Profiles\3xjtvnaf.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\components\qippipe.dll
FF - component: c:\documents and settings\Lukáš\Data aplikací\Mozilla\Firefox\Profiles\3xjtvnaf.default\extensions\DTToolbar@toolbarnet.com\components\DTToolbarFF.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
FF - user.js: network.http.max-connections-per-server - 6
FF - user.js: network.http.max-persistent-connections-per-server - 3
FF - user.js: nglayout.initialpaint.delay - 750
FF - user.js: content.notify.interval - 750000
FF - user.js: content.max.tokenizing.time - 2250000
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-27 12:52
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys sppb.sys >>UNKNOWN [0x8974D938]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xf764bf28
\Driver\ACPI -> ACPI.sys @ 0xf74a3cb8
\Driver\atapi -> atapi.sys @ 0xf7849b40
IoDeviceObjectType -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0598
ParseProcedure -> ntoskrnl.exe @ 0x8056ea15
\Device\Harddisk0\DR0 -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0598
ParseProcedure -> ntoskrnl.exe @ 0x8056ea15
NDIS: VIA Rhine II Fast Ethernet Adapter -> SendCompleteHandler -> NDIS.sys @ 0xf7a24bb0
PacketIndicateHandler -> NDIS.sys @ 0xf7a31a21
SendHandler -> NDIS.sys @ 0xf7a0f87b
user & kernel MBR OK

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
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
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(724)
c:\windows\system32\Ati2evxx.dll
c:\program files\common files\logitech\bluetooth\LBTWlgn.dll
c:\program files\common files\logitech\bluetooth\LBTServ.dll

- - - - - - - > 'explorer.exe'(1140)
c:\windows\system32\webcheck.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\HPZipm12.exe
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\wscntfy.exe
c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
.
**************************************************************************
.
Celkový čas: 2010-02-27 12:55:46 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-02-27 11:55
ComboFix2.txt 2010-02-26 22:43

Před spuštěním: Volných bajtů: 23 327 768 576
Po spuštění: Volných bajtů: 23 198 126 080

- - End Of File - - D4C01720FB4C2772D4C11BF1DC611D30

Smazáno. Ještě poprosím o prověření MBR: http://www2.gmer.net/mbr/mbr.exe . Dejte log.

a

2maco111: Založte si, prosím, vlastní topic. Děkujeme.