VIRY.CZ

Zkuste obnovu systému k datu, než jste to povypínal.

Co máte za typ monitoru?

prestigio LCD P372

Pomohla Vám ta obnova systému?

Zdravim, bol som dlho mimo...
no nepomohla, lebosom si pred casom, v ramci setrenia systemovych prostriedkov obnovu systemu vypol...
Takze teraz neviem.
Strat windows je nekonecne dlhy a aj ked mi nabehnu, firefox trva asi 4 minuty nez sa rozbehne. Windows stale nieco robi alwe podla swchost nezistim co...

Poprosím o nový log ze Rsitu.
Opravu přes winxp manager jste zkoušel?

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrator at 2010-02-15 21:05:41
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 92 GB (60%) free of 153 GB
Total RAM: 511 MB (30% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:05:44, on 15.2.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16981)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\365dnkNET\365dniNET.exe
C:\Documents and Settings\Administrator\My Documents\Downloads\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Web Entry - {B4E30F61-16D9-11D3-85D1-005004229569} - c:\lotus\organize\bandobjs.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AST Service (astcc) - Nalpeiron Ltd. - C:\WINDOWS\SYSTEM32\astsrv.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

--
End of file - 4028 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Advanced System Optimizer Scheduler.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1547161642-1563985344-725345543-500Core.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-04-09 2029640]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\365dni]
C:\Program Files\365dníNET\365dniNET.exe [2007-01-06 753664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\365dnk]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\High Definition Audio Property Page Shortcut]
C:\WINDOWS\system32\HDAShCut.exe [2005-01-07 61952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2009-09-23 1657448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP]
C:\Program Files\Analog Devices\Core\smax4pnp.exe [2006-06-23 847872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"WmdmPmSN"=3
"Themes"=3
"mnmsrvc"=3
"CiSvc"=3
"Adobe LM Service"=3
"TapiSrv"=3
"sp_rssrv"=2
"SENS"=2
"Schedule"=2
"ASTSRV"=2
"WMPNetworkSvc"=3
"ose"=3
"MDM"=2
"Kingsoft Antivirus WebShield Service"=3
"iPod Service"=3
"idsvc"=3
"IDriverT"=3
"FLEXnet Licensing Service"=3
"ASO3DiskOptimizer"=2
"Apple Mobile Device"=2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2009-09-03 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=0
"NoDrives"=0
"NoDriveTypeAutoRun"=145
"NoDesktopCleanupWizard"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Sierra\Empire Earth\Empire Earth.exe"="C:\Sierra\Empire Earth\Empire Earth.exe:*:Enabled:Empire Earth"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Crawler Spyware Terminator"
"C:\Program Files\NOVOMATIC Gaminator CF1 Final\game.exe"="C:\Program Files\NOVOMATIC Gaminator CF1 Final\game.exe:*:Enabled:game"
"C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\fgcn_548.exe"="C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\fgcn_548.exe:*:Enabled:fg_ol_silent"
"C:\Program Files\Participatory Culture Foundation\Miro\Miro_Downloader.exe"="C:\Program Files\Participatory Culture Foundation\Miro\Miro_Downloader.exe:*:Enabled:Miro_Downloader"
"$INSTDIR\FlvDetector.exe"="C:\Program Files\FlashGet Network\FlashGet 3\FlvDetector.exe:*:Enabled:FGFlvDetector"
"C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe"="C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"
"C:\Program Files\PPLive\PPLive.exe"="C:\Program Files\PPLive\PPLive.exe:*:Enabled:PPLive"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\ProgDVB\ProgDvbNet.exe"="C:\Program Files\ProgDVB\ProgDvbNet.exe:*:Enabled:ProgDvbNet"
"C:\Program Files\PPLiveVA\FlvPick.exe"="C:\Program Files\PPLiveVA\FlvPick.exe:*:Enabled:FlvPick"
"C:\Program Files\PPLiveVA\PPLiveVA.exe"="C:\Program Files\PPLiveVA\PPLiveVA.exe:*:Enabled:PPLiveVA"
"C:\Program Files\PPLiveVA\CrashUpload.exe"="C:\Program Files\PPLiveVA\CrashUpload.exe:*:Enabled:CrashUpload"
"C:\Program Files\PPLiveVA\Download.exe"="C:\Program Files\PPLiveVA\Download.exe:*:Enabled:Download"
"C:\Program Files\PPLiveVA\DownloadProgress.exe"="C:\Program Files\PPLiveVA\DownloadProgress.exe:*:Enabled:DownloadProgress"
"C:\Documents and Settings\All Users\Application Data\PPLiveVA\Application\PPAP.exe"="C:\Documents and Settings\All Users\Application Data\PPLiveVA\Application\PPAP.exe:*:Enabled:PPAP"
"C:\lotus\organize\org6.exe"="C:\lotus\organize\org6.exe:*:Enabled:Lotus Organizer"
"C:\Program Files\Smokin' Guns\smokinguns.exe"="C:\Program Files\Smokin' Guns\smokinguns.exe:*:Enabled:smokinguns"
"C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe"="C:\Program Files\Pinnacle\VideoSpin\Programs\VideoSpin.exe:*:Enabled:Pinnacle VideoSpin"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-02-15 15:24:41 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2010-02-15 13:20:47 ----D---- C:\Documents and Settings\Administrator\Application Data\ESET
2010-02-15 13:20:02 ----D---- C:\WINDOWS\LastGood
2010-02-15 13:19:37 ----D---- C:\Program Files\ESET
2010-02-14 01:46:37 ----D---- C:\WINDOWS\system32\Adobe
2010-02-13 16:47:09 ----D---- C:\Program Files\Elcom
2010-02-13 16:46:39 ----A---- C:\WINDOWS\system32\POS.dll
2010-02-13 16:46:36 ----A---- C:\WINDOWS\system32\ECR.dll
2010-02-13 16:46:36 ----A---- C:\WINDOWS\system32\CommTX.dll
2010-02-13 16:46:36 ----A---- C:\WINDOWS\system32\Comm32.dll
2010-02-13 16:41:46 ----D---- C:\Program Files\Common Files\BUSINESS OBJECTS
2010-02-13 16:41:42 ----D---- C:\Omega
2010-02-13 16:38:58 ----D---- C:\OmegaIns
2010-02-13 14:23:01 ----A---- C:\WINDOWS\system32\TubeFinder.exe
2010-02-13 14:22:45 ----A---- C:\WINDOWS\system32\VB6STKIT.DLL
2010-02-13 14:22:45 ----A---- C:\WINDOWS\system32\VB6FR.DLL
2010-02-13 14:22:44 ----A---- C:\WINDOWS\system32\PCCLPFR.DLL
2010-02-13 14:22:43 ----A---- C:\WINDOWS\system32\MSCMCFR.DLL
2010-02-13 14:22:40 ----A---- C:\WINDOWS\system32\CMDLGFR.DLL
2010-02-13 14:22:37 ----D---- C:\Program Files\Free FLV Converter
2010-02-13 14:22:37 ----D---- C:\Documents and Settings\Administrator\Application Data\FreeFLVConverter
2010-02-12 18:38:05 ----HD---- C:\WINDOWS\system32\GroupPolicy
2010-02-11 01:17:47 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$
2010-02-11 01:16:30 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-02-11 01:14:00 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-02-11 01:13:54 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-02-11 01:13:45 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$
2010-02-11 01:13:37 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-02-11 01:13:25 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-02-11 01:12:12 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-02-11 01:11:45 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$
2010-02-09 08:43:44 ----AD---- C:\WINDOWS\zts2.exe
2010-02-09 08:43:44 ----AD---- C:\WINDOWS\system32\vcmgcd32.dll
2010-02-09 08:43:44 ----AD---- C:\WINDOWS\system32\systems.txt
2010-02-09 08:43:44 ----AD---- C:\WINDOWS\system32\iifgfgf.dll
2010-02-09 08:43:44 ----AD---- C:\WINDOWS\rundl132.dll
2010-01-31 20:53:25 ----D---- C:\Program Files\PDF Editor 2
2010-01-31 20:53:25 ----A---- C:\WINDOWS\cadkasdeinst01e.exe
2010-01-30 12:57:23 ----A---- C:\WINDOWS\system32\defragboot.ini
2010-01-30 12:57:05 ----D---- C:\Documents and Settings\All Users\Application Data\Systweak
2010-01-30 12:51:30 ----D---- C:\Documents and Settings\Administrator\Application Data\Systweak
2010-01-30 12:51:10 ----D---- C:\Documents and Settings\All Users\Application Data\MyDefrag
2010-01-30 12:24:45 ----D---- C:\Program Files\DiskInternals
2010-01-28 12:21:54 ----D---- C:\Documents and Settings\Administrator\Application Data\ABBYY
2010-01-27 14:33:43 ----D---- C:\Program Files\ABBYY FineReader 10
2010-01-27 14:33:42 ----D---- C:\Documents and Settings\All Users\Application Data\ABBYY
2010-01-26 16:51:41 ----D---- C:\Program Files\LizardTech
2010-01-24 13:17:25 ----D---- C:\Documents and Settings\Administrator\Application Data\MyNotesKeeper
2010-01-20 11:16:19 ----D---- C:\Program Files\ConvertHelper

======List of files/folders modified in the last 1 months======

2010-02-15 21:05:44 ----D---- C:\Program Files\trend micro
2010-02-15 21:05:20 ----D---- C:\Documents and Settings\Administrator\Application Data\LimeWire
2010-02-15 20:41:45 ----D---- C:\Documents and Settings\Administrator\Application Data\365dni
2010-02-15 17:47:46 ----D---- C:\Program Files\Mozilla Firefox
2010-02-15 13:20:29 ----SHD---- C:\WINDOWS\Installer
2010-02-15 13:20:27 ----D---- C:\Config.Msi
2010-02-15 13:20:18 ----D---- C:\WINDOWS\system32\drivers
2010-02-15 13:20:18 ----D---- C:\WINDOWS\inf
2010-02-15 13:20:02 ----AD---- C:\WINDOWS
2010-02-15 13:20:01 ----D---- C:\WINDOWS\system32\CatRoot2
2010-02-15 13:19:37 ----RD---- C:\Program Files
2010-02-14 01:50:12 ----D---- C:\WINDOWS\system32\Macromed
2010-02-14 01:46:37 ----D---- C:\WINDOWS\system32
2010-02-13 20:27:51 ----D---- C:\WINDOWS\WinSxS
2010-02-13 19:21:26 ----D---- C:\Program Files\Common Files\DESIGNER
2010-02-13 19:20:03 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2010-02-13 17:19:47 ----A---- C:\WINDOWS\ODBC.INI
2010-02-13 16:42:50 ----RSD---- C:\WINDOWS\Fonts
2010-02-13 16:41:46 ----D---- C:\Program Files\Common Files
2010-02-13 15:38:24 ----D---- C:\Program Files\Images Index Creator
2010-02-13 14:04:25 ----D---- C:\WINDOWS\temp
2010-02-13 13:34:03 ----D---- C:\Program Files\Windows Media Player
2010-02-13 13:28:58 ----D---- C:\Program Files\Pinnacle
2010-02-13 13:23:53 ----D---- C:\Program Files\Common Files\Nikon
2010-02-13 13:20:35 ----D---- C:\Program Files\Image Grabber II
2010-02-13 13:14:45 ----RASH---- C:\boot.ini
2010-02-13 13:14:45 ----A---- C:\WINDOWS\win.ini
2010-02-13 13:14:45 ----A---- C:\WINDOWS\system.ini
2010-02-13 11:45:15 ----D---- C:\Documents and Settings\All Users\Application Data\FLEXnet
2010-02-12 19:52:51 ----DC---- C:\WINDOWS\system32\dllcache
2010-02-11 13:33:38 ----D---- C:\Program Files\Spyware Terminator
2010-02-11 13:33:38 ----D---- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2010-02-11 13:29:23 ----D---- C:\Documents and Settings\Administrator\Application Data\Spyware Terminator
2010-02-11 01:17:47 ----D---- C:\WINDOWS\$hf_mig$
2010-02-10 12:22:33 ----D---- C:\Documents and Settings\Administrator\Application Data\Skype
2010-02-10 11:12:31 ----D---- C:\Documents and Settings\Administrator\Application Data\skypePM
2010-02-05 18:53:32 ----D---- C:\Documents and Settings\Administrator\Application Data\Adobe
2010-02-01 20:26:20 ----A---- C:\WINDOWS\system32\MRT.exe
2010-02-01 00:19:36 ----D---- C:\WINDOWS\Minidump
2010-01-31 20:39:11 ----D---- C:\Program Files\Foxit Software
2010-01-31 19:25:44 ----D---- C:\WINDOWS\system32\config
2010-01-31 16:21:57 ----D---- C:\Documents and Settings\Administrator\Application Data\uTorrent
2010-01-31 13:47:44 ----D---- C:\Documents and Settings\Administrator\Application Data\FlashgetSetup
2010-01-30 16:34:56 ----SD---- C:\Documents and Settings\Administrator\Application Data\Microsoft
2010-01-30 12:52:00 ----SD---- C:\WINDOWS\Tasks
2010-01-30 12:51:32 ----D---- C:\WINDOWS\repair
2010-01-28 13:22:52 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-01-28 13:17:29 ----D---- C:\Program Files\Common Files\Adobe
2010-01-28 13:16:57 ----D---- C:\Program Files\Adobe
2010-01-28 11:58:30 ----D---- C:\Program Files\Your Webcam Watcher Program
2010-01-27 14:29:23 ----D---- C:\Temp
2010-01-26 16:51:41 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-22 17:37:00 ----D---- C:\WINDOWS\system32\en-US
2010-01-22 17:37:00 ----D---- C:\Program Files\Internet Explorer
2010-01-22 17:36:44 ----D---- C:\WINDOWS\ie7updates
2010-01-20 18:39:48 ----D---- C:\Program Files\Microsoft Silverlight

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AsIO;AsIO; C:\WINDOWS\system32\drivers\AsIO.sys [2005-12-22 5685]
R1 asuskbnt;Enhanced Display Driver Helper Service; C:\WINDOWS\system32\drivers\atkkbnt.sys [2005-10-18 11008]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-04-09 107256]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2009-04-09 55768]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-04-09 113960]
R2 EIO;EIO; \??\C:\WINDOWS\system32\drivers\EIO.sys []
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2009-04-09 133000]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2006-06-27 245760]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2006-04-27 93824]
R3 Cap7134;Philips SAA7134 WDM Capture; C:\WINDOWS\system32\DRIVERS\Cap7134.sys [2004-11-05 334816]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2009-04-09 33096]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-07 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-09-27 7655872]
R3 PhTVTune;Philips FM1216 MK3 TV Tuner; C:\WINDOWS\system32\DRIVERS\phtvtune.sys [2004-11-05 19904]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2006-04-06 81664]
R3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2006-03-17 392960]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\WINDOWS\system32\DRIVERS\vcsvad.sys [2008-12-26 17792]
S2 713xTVCard;SAA7134 TV Card; C:\WINDOWS\system32\DRIVERS\SAA713x.sys [2005-03-15 277504]
S3 ADASPROT;SYSTWEAKASO; \??\C:\Program Files\Advanced System Optimizer 3\adasprot32.sys []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 FlyPCI;FlyPCI; \??\C:\WINDOWS\system32\drivers\FlyPCI.sys []
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-07 145920]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sr;System Restore Filter Driver; C:\WINDOWS\system32\DRIVERS\sr.sys [2008-04-13 73472]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ATKKeyboardService;ATK Keyboard Service; C:\WINDOWS\ATKKBService.exe [2005-10-18 241152]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-04-09 731840]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 astcc;AST Service; C:\WINDOWS\SYSTEM32\astsrv.exe [2008-05-19 57344]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-04-09 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2009-11-12 545568]
S3 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2009-10-26 72704]
S4 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]
S4 ASTSRV;Nalpeiron Licensing Service; C:\WINDOWS\system32\ASTSRV.EXE [2008-05-19 57344]
S4 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-10-03 655624]
S4 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S4 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 Kingsoft Antivirus WebShield Service;Kingsoft Antivirus WebShield Service; C:\Program Files\Maxthon2\Modules\MxKWS\KSWebShield.exe [2009-10-26 202136]
S4 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
S4 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-09-27 172100]
S4 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-11-11 487936]
S4 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]

-----------------EOF-----------------

Otestujte na http://www.virustotal.com
c:\lotus\organize\bandobjs.dll

-Na virustotalu dáte procházet, a do spodního okénka nakopírujete přímo cestu k souboru a dáte odeslat
-z prohlížeče zkopírujete adresu ke stránce s výsledky



Stáhněte na plochu, ukončete všechna aktivní okna a spusťte ComboFix - http://download.bleepingcomputer.com/sUBs/ComboFix.exe


- ComboFix je třeba spustit pod účtem s právy administrátora

- Před použitím vypněte všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary

- Po spuštění se zobrazí podmínky užití, potvrďte je stiskem tlačítka Ano

- Dále postupujte dle pokynů, během aplikování ComboFixu neklikejte do zobrazujícího se okna

- Po dokončení skenování, trvajícího maximálně 10 minut, by měl program vytvořit log - C:\ComboFix.txt, zkopírujte celý jeho obsah sem

C:\Combo-Fix
C:\Combo-Fix6792C
som nenasiel

smazani.reg som urobil
este spustim ten mwav

jesis, ja som to poplietol a urobil kroky z prvej strany...
takze znova...

vysledok z virustotal:
analisis/12216e24510c25a1d446770ae2cbe15f0d9062b70244552ae8c22c0f64d283ff-1262616480

ComboFix 10-02-12.01 - Administrator 16.02.2010 18:39:54.4.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.421.1033.18.511.290 [GMT 1:00]
Running from: c:\documents and settings\Administrator\Desktop\ComboFix.exe
AV: ESET Smart Security 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *disabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
* Resident AV is active

.
ADS - WINDOWS: deleted 0 bytes in 1 streams.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Administrator\Application Data\BITS
c:\documents and settings\Administrator\Application Data\BITS\BITS.ini
c:\documents and settings\Administrator\Application Data\BITS\DHTTable.dat
c:\documents and settings\Administrator\Application Data\BITS\ProxyList.ini
c:\documents and settings\Administrator\Application Data\BITS\UPnP.ini
c:\documents and settings\Administrator\Application Data\FlashGetBHO
c:\documents and settings\Administrator\Application Data\FlashGetBHO\FlashGetBHO3.dll
c:\documents and settings\Administrator\Application Data\FlashGetBHO\FlashGetHook.dll
c:\documents and settings\Administrator\Application Data\FlashGetBHO\GetAllUrl.htm
c:\documents and settings\Administrator\Application Data\FlashGetBHO\GetUrl.htm
C:\LOG.TXT
c:\program files\FlashGet Network
c:\windows\regedit.com
c:\windows\system32\_000012_.tmp.dll
c:\windows\system32\Ijl11.dll
c:\windows\system32\secustat.dat
c:\windows\system32\SIntf16.dll
c:\windows\system32\skinboxer43.dll
c:\windows\system32\taskmgr.com

.
((((((((((((((((((((((((( Files Created from 2010-01-16 to 2010-02-16 )))))))))))))))))))))))))))))))
.

2010-02-15 12:20 . 2010-02-15 12:20 -------- d-----w- c:\documents and settings\Administrator\Application Data\ESET
2010-02-15 12:19 . 2010-02-15 12:19 -------- d-----w- c:\program files\ESET
2010-02-14 00:46 . 2010-02-14 00:46 -------- d-----w- c:\windows\system32\Adobe
2010-02-13 15:48 . 2010-02-13 15:48 81920 ----a-w- c:\windows\OLE2TASK.DAT
2010-02-13 15:47 . 2010-02-13 15:47 -------- d-----w- c:\program files\Elcom
2010-02-13 15:46 . 2009-09-25 11:51 101816 ----a-w- c:\windows\system32\POS.dll
2010-02-13 15:46 . 2009-11-13 10:46 524288 ----a-w- c:\windows\system32\ECR.dll
2010-02-13 15:46 . 2009-11-11 14:35 270336 ----a-w- c:\windows\system32\Comm32.dll
2010-02-13 15:46 . 2008-07-01 08:43 43152 ----a-w- c:\windows\system32\CommTX.dll
2010-02-13 15:41 . 2010-02-13 15:41 -------- d-----w- c:\program files\Common Files\BUSINESS OBJECTS
2010-02-13 15:41 . 2010-02-13 18:21 -------- d-----w- C:\Omega
2010-02-13 15:38 . 2010-02-13 15:39 -------- d-----w- C:\OmegaIns
2010-02-13 13:23 . 2009-11-11 13:50 311296 ----a-w- c:\windows\system32\TubeFinder.exe
2010-02-13 13:22 . 2009-06-19 17:51 119568 ----a-w- c:\windows\system32\VB6FR.DLL
2010-02-13 13:22 . 2009-06-19 17:51 101888 ----a-w- c:\windows\system32\VB6STKIT.DLL
2010-02-13 13:22 . 2009-06-19 17:51 9728 ----a-w- c:\windows\system32\PCCLPFR.DLL
2010-02-13 13:22 . 2009-06-19 17:51 141312 ----a-w- c:\windows\system32\MSCMCFR.DLL
2010-02-13 13:22 . 2009-06-19 17:51 32768 ----a-w- c:\windows\system32\CMDLGFR.DLL
2010-02-13 13:22 . 2010-02-13 19:29 -------- d-----w- c:\documents and settings\Administrator\Application Data\FreeFLVConverter
2010-02-13 13:22 . 2010-02-13 13:23 -------- d-----w- c:\program files\Free FLV Converter
2010-02-12 17:38 . 2010-02-12 17:38 -------- d--h--w- c:\windows\system32\GroupPolicy
2010-02-09 07:44 . 2010-02-09 07:46 6072853 ----a-w- c:\windows\REGBK04.ZIP
2010-02-09 07:43 . 2010-02-09 07:43 -------- d---a-w- c:\windows\zts2.exe
2010-02-09 07:43 . 2010-02-09 07:43 -------- d---a-w- c:\windows\system32\vcmgcd32.dll
2010-02-09 07:43 . 2010-02-09 07:43 -------- d---a-w- c:\windows\system32\systems.txt
2010-02-09 07:43 . 2010-02-09 07:43 -------- d---a-w- c:\windows\system32\iifgfgf.dll
2010-02-09 07:43 . 2010-02-09 07:43 -------- d---a-w- c:\windows\rundl132.dll
2010-01-31 19:53 . 2010-02-13 12:21 -------- d-----w- c:\program files\PDF Editor 2
2010-01-31 19:53 . 2010-01-31 19:53 74752 ----a-w- c:\windows\cadkasdeinst01e.exe
2010-01-30 11:57 . 2010-02-13 12:09 -------- d-----w- c:\documents and settings\All Users\Application Data\Systweak
2010-01-30 11:51 . 2010-02-13 12:09 -------- d-----w- c:\documents and settings\Administrator\Application Data\Systweak
2010-01-30 11:51 . 2010-01-30 11:51 -------- d-----w- c:\documents and settings\All Users\Application Data\MyDefrag
2010-01-30 11:24 . 2010-01-30 11:24 -------- d-----w- c:\program files\DiskInternals
2010-01-28 11:21 . 2010-01-28 11:21 -------- d-----w- c:\documents and settings\Administrator\Application Data\ABBYY
2010-01-28 11:03 . 2010-01-31 11:01 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\ABBYY
2010-01-27 13:33 . 2010-01-31 11:03 -------- d-----w- c:\program files\ABBYY FineReader 10
2010-01-27 13:33 . 2010-01-31 11:01 -------- d-----w- c:\documents and settings\All Users\Application Data\ABBYY
2010-01-27 13:29 . 2010-01-27 13:30 -------- d-----w- c:\temp\FR10PE
2010-01-26 15:51 . 2010-01-26 15:51 -------- d-----w- c:\program files\LizardTech
2010-01-24 12:17 . 2010-01-24 12:17 -------- d-----w- c:\documents and settings\Administrator\Application Data\MyNotesKeeper
2010-01-20 10:16 . 2010-01-20 10:16 -------- d-----w- c:\program files\ConvertHelper

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-15 20:05 . 2009-11-18 22:22 -------- d-----w- c:\program files\trend micro
2010-02-15 20:05 . 2009-12-21 16:40 -------- d-----w- c:\documents and settings\Administrator\Application Data\LimeWire
2010-02-15 19:41 . 2009-12-11 16:53 -------- d-----w- c:\documents and settings\Administrator\Application Data\365dni
2010-02-13 19:54 . 2009-10-03 09:06 12856 ----a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-02-13 18:20 . 2009-10-11 09:06 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2010-02-13 14:38 . 2010-01-03 13:33 -------- d-----w- c:\program files\Images Index Creator
2010-02-13 12:28 . 2010-01-03 11:39 -------- d-----w- c:\program files\Pinnacle
2010-02-13 12:23 . 2009-12-25 10:38 -------- d-----w- c:\program files\Common Files\Nikon
2010-02-13 12:20 . 2009-12-06 15:11 -------- d-----w- c:\program files\Image Grabber II
2010-02-13 10:45 . 2009-10-03 23:03 -------- d-----w- c:\documents and settings\All Users\Application Data\FLEXnet
2010-02-11 12:33 . 2009-11-11 14:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Spyware Terminator
2010-02-11 12:33 . 2009-11-11 14:28 -------- d-----w- c:\program files\Spyware Terminator
2010-02-11 12:29 . 2009-11-11 14:28 -------- d-----w- c:\documents and settings\Administrator\Application Data\Spyware Terminator
2010-02-10 11:22 . 2009-10-13 15:58 -------- d-----w- c:\documents and settings\Administrator\Application Data\Skype
2010-02-10 10:12 . 2009-10-13 16:05 -------- d-----w- c:\documents and settings\Administrator\Application Data\skypePM
2010-02-04 23:03 . 2010-02-04 23:03 52224 ----a-w- c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2010-02-04 23:02 . 2009-11-11 14:48 117760 ----a-w- c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2010-01-31 19:39 . 2009-10-18 13:38 -------- d-----w- c:\program files\Foxit Software
2010-01-31 15:21 . 2009-10-31 18:08 -------- d-----w- c:\documents and settings\Administrator\Application Data\uTorrent
2010-01-31 12:47 . 2009-11-29 15:36 -------- d-----w- c:\documents and settings\Administrator\Application Data\FlashgetSetup
2010-01-28 12:17 . 2009-10-03 22:34 -------- d-----w- c:\program files\Common Files\Adobe
2010-01-28 10:58 . 2010-01-11 18:05 -------- d-----w- c:\program files\Your Webcam Watcher Program
2010-01-26 15:51 . 2009-10-02 09:03 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-24 12:30 . 2009-12-03 14:55 588 ---ha-w- C:\os652192.bin
2010-01-20 17:39 . 2009-11-28 11:32 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-13 15:03 . 2010-01-13 15:03 -------- d-----w- c:\program files\Windows Media Connect 2
2010-01-13 09:25 . 2010-01-13 09:25 -------- d-----w- c:\program files\MSECache
2010-01-11 19:08 . 2010-01-11 19:08 -------- d-----w- c:\program files\Google
2010-01-06 10:11 . 2010-01-06 10:10 5823539 ----a-w- c:\windows\REGBK03.ZIP
2010-01-05 10:00 . 2004-08-04 04:56 832512 ----a-w- c:\windows\system32\wininet.dll
2010-01-05 10:00 . 2004-08-04 04:56 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-01-05 10:00 . 2004-08-04 04:56 17408 ------w- c:\windows\system32\corpol.dll
2010-01-03 16:04 . 2010-01-03 16:04 -------- d-----w- c:\program files\Haali
2010-01-03 14:41 . 2009-12-19 12:22 -------- d-----w- c:\documents and settings\Administrator\Application Data\Apple Computer
2010-01-03 14:35 . 2010-01-03 14:34 -------- d-----w- c:\program files\iTunes
2010-01-03 14:35 . 2010-01-03 14:34 -------- d-----w- c:\documents and settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2010-01-03 14:34 . 2010-01-03 14:34 -------- d-----w- c:\program files\iPod
2010-01-03 14:34 . 2009-12-18 22:59 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2010-01-03 14:34 . 2010-01-03 14:34 -------- d-----w- c:\program files\Bonjour
2010-01-03 11:44 . 2010-01-03 11:44 -------- d-----w- c:\documents and settings\Administrator\Application Data\DivX
2010-01-03 11:37 . 2010-01-03 11:37 -------- d-----w- c:\documents and settings\All Users\Application Data\Pinnacle
2010-01-02 00:33 . 2010-01-02 00:33 -------- d-----w- c:\documents and settings\All Users\Application Data\VideoMach
2010-01-01 23:07 . 2010-01-01 23:07 -------- d-----w- c:\program files\Smallvideosoft
2009-12-31 16:50 . 2004-08-04 03:14 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-31 12:13 . 2009-10-21 16:15 2004 ----a-w- c:\windows\Registration\e10f24f0-652e-11dd-ad8b-0800200c9a66.dll
2009-12-25 14:32 . 2009-12-25 11:50 -------- d-----w- c:\documents and settings\Administrator\Application Data\Nikon
2009-12-25 13:34 . 2009-12-25 11:49 0 ---h--w- c:\documents and settings\All Users\Application Data\PKP_DLbx.DAT
2009-12-25 11:50 . 2009-12-25 10:38 -------- d-----w- c:\program files\Nikon
2009-12-25 11:49 . 2009-12-25 10:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Ultima_T15
2009-12-25 11:49 . 2009-12-25 10:38 -------- d-----w- c:\documents and settings\All Users\Application Data\EnterNHelp
2009-12-25 11:05 . 2009-12-25 11:05 -------- d-----w- c:\program files\BreezeSys
2009-12-25 10:38 . 2009-12-25 10:38 0 ----a-w- c:\documents and settings\All Users\Application Data\PKP_DLdy.DAT
2009-12-24 20:02 . 2009-11-28 17:18 -------- d-----w- c:\program files\NOVOMATIC Gaminator CF1 Final
2009-12-23 13:15 . 2009-12-23 12:32 -------- d-----w- c:\program files\FLY2000TV
2009-12-22 21:35 . 2009-11-11 14:47 -------- d-----w- c:\program files\SUPERAntiSpyware
2009-12-22 20:43 . 2009-12-22 20:31 -------- d-----w- c:\documents and settings\Administrator\Application Data\DAEMON Tools Lite
2009-12-22 20:39 . 2009-12-22 20:31 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-12-22 20:39 . 2009-12-22 20:37 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Lite
2009-12-22 20:37 . 2009-12-22 20:37 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2009-12-21 17:00 . 2009-12-21 17:00 -------- d-----w- c:\program files\LimeWire
2009-12-20 11:44 . 2009-11-02 13:45 5430 ----a-r- c:\documents and settings\Administrator\Application Data\Microsoft\Installer\{846E11C7-4E39-469C-8469-569E7DE9C5CD}\_E9E3E8815ADBA390949375.exe
2009-12-20 11:44 . 2009-11-02 13:45 5430 ----a-r- c:\documents and settings\Administrator\Application Data\Microsoft\Installer\{846E11C7-4E39-469C-8469-569E7DE9C5CD}\_6FEFF9B68218417F98F549.exe
2009-12-20 11:44 . 2009-11-02 13:45 5430 ----a-r- c:\documents and settings\Administrator\Application Data\Microsoft\Installer\{846E11C7-4E39-469C-8469-569E7DE9C5CD}\_0276E7E570CBB4EA97FB0F.exe
2009-12-20 11:44 . 2009-11-02 13:05 -------- d-----w- c:\program files\Readon Technology
2009-12-18 23:01 . 2009-12-18 22:59 -------- d-----w- c:\program files\QuickTime
2009-12-16 18:43 . 2009-10-02 08:37 343040 ----a-w- c:\windows\system32\mspaint.exe
2009-12-14 07:08 . 2004-08-04 04:56 33280 ----a-w- c:\windows\system32\csrsrv.dll
2009-12-08 19:26 . 2004-08-04 03:18 2145280 ------w- c:\windows\system32\ntoskrnl.exe
2009-12-08 18:43 . 2004-08-03 22:59 2023936 ------w- c:\windows\system32\ntkrnlpa.exe
2009-12-04 18:22 . 2004-08-04 03:15 455424 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2009-12-03 18:52 . 2009-12-03 18:52 65536 ----a-r- c:\documents and settings\Administrator\Application Data\Microsoft\Installer\{CDEBE7FF-C832-4B91-9214-A4CA610D78C9}\ARPPRODUCTICON.exe
2009-11-29 16:16 . 2009-11-29 16:16 3349872 ----a-w- c:\documents and settings\Administrator\Application Data\PPLiveVA\PPVAUpdate\PPVAUpdate.exe
2009-11-29 15:37 . 2009-11-29 15:37 305 ----a-w- c:\windows\system32\secushr.dat
2009-11-27 17:11 . 2004-08-04 04:56 1291776 ----a-w- c:\windows\system32\quartz.dll
2009-11-27 17:11 . 2004-08-04 00:56 17920 ----a-w- c:\windows\system32\msyuv.dll
2009-11-27 16:07 . 2004-08-07 00:17 28672 ----a-w- c:\windows\system32\msvidc32.dll
2009-11-27 16:07 . 2001-08-17 22:36 8704 ----a-w- c:\windows\system32\tsbyuv.dll
2009-11-27 16:07 . 2004-08-04 04:56 11264 ----a-w- c:\windows\system32\msrle32.dll
2009-11-27 16:07 . 2004-08-04 04:56 84992 ----a-w- c:\windows\system32\avifil32.dll
2009-11-27 16:07 . 2004-08-04 00:56 48128 ----a-w- c:\windows\system32\iyuv_32.dll
2009-11-22 15:02 . 2009-11-22 15:02 34048 ----a-w- c:\windows\system32\eEmpty.exe
2009-11-22 10:52 . 2009-11-22 15:02 626688 ----a-w- c:\windows\system32\msvcr80.dll
2009-11-22 10:52 . 2009-11-22 15:02 548864 ----a-w- c:\windows\system32\msvcp80.dll
2009-11-21 15:51 . 2004-08-04 04:56 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2009-04-09 2029640]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 14:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0sasnative32

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\365dni]
2007-01-06 17:16 753664 ----a-w- c:\program files\365dníNET\365dniNET.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\High Definition Audio Property Page Shortcut]
2005-01-07 15:07 61952 ------w- c:\windows\system32\HdAShCut.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
2009-09-23 21:45 1657448 ----a-w- c:\program files\NVIDIA Corporation\nView\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-11-10 22:08 417792 ----a-w- c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP]
2006-06-23 09:21 847872 ----a-r- c:\program files\Analog Devices\Core\smax4pnp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"WmdmPmSN"=3 (0x3)
"Themes"=3 (0x3)
"mnmsrvc"=3 (0x3)
"CiSvc"=3 (0x3)
"Adobe LM Service"=3 (0x3)
"TapiSrv"=3 (0x3)
"sp_rssrv"=2 (0x2)
"SENS"=2 (0x2)
"Schedule"=2 (0x2)
"ASTSRV"=2 (0x2)
"WMPNetworkSvc"=3 (0x3)
"ose"=3 (0x3)
"MDM"=2 (0x2)
"Kingsoft Antivirus WebShield Service"=3 (0x3)
"iPod Service"=3 (0x3)
"idsvc"=3 (0x3)
"IDriverT"=3 (0x3)
"FLEXnet Licensing Service"=3 (0x3)
"ASO3DiskOptimizer"=2 (0x2)
"Apple Mobile Device"=2 (0x2)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Sierra\\Empire Earth\\Empire Earth.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=
"c:\\Program Files\\NOVOMATIC Gaminator CF1 Final\\game.exe"=
"$INSTDIR\\FlvDetector.exe"= c:\\Program Files\\FlashGet Network\\FlashGet 3\\FlvDetector.exe
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\lotus\\organize\\org6.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4

R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [9.4.2009 15:18 107256]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [12.10.2009 21:24 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [12.10.2009 21:24 74480]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [11.11.2009 15:28 142592]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [9.4.2009 15:19 731840]
R3 PhTVTune;Philips FM1216 MK3 TV Tuner;c:\windows\system32\drivers\phtvtune.sys [5.11.2004 0:45 19904]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM);c:\windows\system32\drivers\vcsvad.sys [24.12.2009 16:42 17792]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [22.12.2009 21:31 691696]
S2 713xTVCard;SAA7134 TV Card;c:\windows\system32\drivers\SAA713x.sys [15.3.2005 11:00 277504]
S3 ADASPROT;SYSTWEAKASO;\??\c:\program files\Advanced System Optimizer 3\adasprot32.sys --> c:\program files\Advanced System Optimizer 3\adasprot32.sys [?]
S3 FlyPCI;FlyPCI;c:\windows\system32\drivers\FlyPCI.sys [23.12.2009 13:33 4134]
S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [12.10.2009 21:24 7408]
S4 ASTSRV;Nalpeiron Licensing Service;c:\windows\system32\ASTSRV.EXE [21.10.2009 17:18 57344]
S4 Kingsoft Antivirus WebShield Service;Kingsoft Antivirus WebShield Service;c:\program files\Maxthon2\Modules\MxKWS\KSWebShield.exe [26.10.2009 3:53 202136]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9C450606-ED24-4958-92BA-B8940C99D441}]
2009-03-04 14:32 8192 ----a-w- c:\program files\PixiePack Codec Pack\InstallerHelper.exe
.
Contents of the 'Scheduled Tasks' folder

2009-12-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1547161642-1563985344-725345543-500Core.job
- c:\documents and settings\Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-12-06 12:35]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://google.com
mStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: {{B4E30F61-16D9-11D3-85D1-005004229569} - {85E0B172-04FA-11D1-B7DA-00A0C90348D6} - c:\lotus\organize\bandobjs.dll
FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\1v0u31ok.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz
FF - component: c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\1v0u31ok.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}\platform\WINNT_x86-msvc\components\SSSLauncher.dll
FF - component: c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\1v0u31ok.default\extensions\{DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}\components\FlashgetXpi.dll
FF - plugin: c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\1v0u31ok.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\plugins\np_gp.dll
FF - plugin: c:\documents and settings\Administrator\Local Settings\Application Data\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdjvu.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHANS REMOVED - - - -

AddRemove-365dnk6.0.7 - c:\windows\365dnk\uninstall.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-16 18:46
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-1547161642-1563985344-725345543-500\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{14AC7FF2-6A27-A8E7-E230-8304256ADFF2}*]
"hahapbkdlidgpecg"=hex:69,61,6b,65,69,69,6b,6f,69,69,6b,66,6c,69,6e,62,6c,6a,
00,00
"ianajcemfgbklhpflc"=hex:69,61,6d,65,6b,6b,6f,67,69,62,69,6c,70,6d,64,6f,6a,6f,
00,00

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€–€|˙˙˙˙Ŕ•€|ů•A~*]
"AB141C35E9F4BF344B9FC010BB17F68A"=""
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(908)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\windows\system32\WININET.dll
.
Completion time: 2010-02-16 18:51:02
ComboFix-quarantined-files.txt 2010-02-16 17:50

Pre-Run: 100 731 346 944 bytes free
Post-Run: Volných bajtů: 100 973 101 056

- - End Of File - - 7D6F6B5A6A1EE9926FEB66608699B77E

Prosím Vám otestujte ten soubor znovu, at je to ten Vás soubor.
Ještě otestujte na www.virustotal.com
c:\program files\365dníNET\365dniNET.exe

Jak to vypadá s počítačem?

vysledok z virustotal 365dni.exe
analisis/d0c739af3661aae0519f0d7ae1c884b16de070ccca1667ab3422ecb92a7dcf7a-1246969906

pocitac - mam pocit, ze na pozadi bezi privela procesov, obcas mu trva pridlho nez vobec reaguje. Asi bude najlepsie, ak to cele znova sformatujem...

Prosím Vás pošlete mi celý odkaz na stránku virustotalu.
Díky

Budeme dělat další testy nebo to zformátujete?

http://www.virustotal.com/cs/analisis/d ... 1246969906

skusme este testovat ak mame sancu, ze to opravime