VIRY.CZ

konec ?

Kolega šel spát , budete pokračovat zítra

díky moc

Tak jsem zpět.


Pokud nemáte, přesuňte Combofix na plochu

• Otevřete si Poznámkový blok a zkopírujte do něj text z bílého okénka.

• Uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
• Po uložení uchopte vámi vytvořený skript levým myšítkem a přesuňte ho nad ikonu Combofixu, kde ho upustíte:
  
  
• Po aplikaci na Vás vypadne další log,vložte ho sem

Může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci




Složku I:\Qoobox zazipujte pod názvem "tmoravek" a uložte na http://www.james008.net/web/pluginy/havetosberna.php


Děkuji.

DOBRÝ DEN..díky za trpělivost

ComboFix 10-03-10.08 - Tom 12.03.2010 10:10:38.6.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.2046.1709 [GMT 1:00]
Spuštěný z: i:\documents and settings\Tom\Plocha\HRY TOMINO\ComboFix.exe
Použité ovládací přepínače :: i:\documents and settings\Tom\Plocha\CFScript.txt
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-02-12 do 2010-03-12 )))))))))))))))))))))))))))))))
.

2010-03-11 21:09 . 2010-03-11 21:09 -------- dc----w- I:\_OTL
2010-03-11 20:27 . 2010-03-11 20:27 9496575 -c--a-w- I:\Qoobox.zip
2010-03-11 20:26 . 2010-03-11 20:26 233759 -c--a-w- I:\_OTM.zip
2010-03-11 19:53 . 2010-03-11 19:53 724217 -c--a-w- I:\Soubory.zip
2010-03-11 18:26 . 2010-01-07 15:07 38224 -c--a-w- i:\c\system32\drivers\mbamswissarmy.sys
2010-03-11 18:26 . 2010-03-11 18:27 -------- d-----w- i:\program files\Malwarebytes' Anti-Malware
2010-03-11 18:26 . 2010-01-07 15:07 19160 -c--a-w- i:\c\system32\drivers\mbam.sys
2010-03-11 15:48 . 2010-03-11 15:48 -------- dc----w- I:\_OTM
2010-03-11 14:26 . 2010-03-11 17:48 -------- d-----w- i:\program files\Spyware Doctor
2010-03-11 14:18 . 2010-03-11 16:21 -------- d-----w- i:\program files\trend micro
2010-03-11 14:18 . 2010-03-11 14:18 -------- dc----w- I:\rsit
2010-03-11 12:39 . 2010-03-11 13:54 -------- d-----w- i:\program files\Enigma Software Group
2010-03-10 11:39 . 2010-03-10 11:39 -------- d-----w- i:\program files\Activision
2010-03-10 11:29 . 2010-03-10 11:29 -------- dcsh--w- i:\c\ftpcache
2010-03-10 11:28 . 2010-03-10 11:28 22328 -c--a-w- i:\c\system32\drivers\PnkBstrK.sys
2010-03-10 11:28 . 2010-03-10 11:28 103736 -c--a-w- i:\c\system32\PnkBstrB.exe
2010-03-10 11:28 . 2010-03-10 11:28 66872 -c--a-w- i:\c\system32\PnkBstrA.exe
2010-03-09 19:59 . 2010-03-09 19:59 -------- d-----w- i:\program files\Free Screen To Video
2010-03-04 20:38 . 2004-08-17 13:49 221184 -c--a-w- i:\c\system32\wmpns.dll
2010-03-04 20:37 . 2010-03-04 20:37 -------- dc----w- I:\10f2fcf118b3d0875d
2010-02-28 13:02 . 2010-03-10 18:04 30 -c--a-w- i:\c\popcinfot.dat
2010-02-28 13:02 . 2010-03-01 17:13 -------- d-----w- i:\program files\PopCap Games
2010-02-28 13:02 . 2010-02-28 13:02 0 -c--a-w- i:\c\popcreg.dat
2010-02-25 14:24 . 2010-02-25 14:24 -------- d-----w- i:\program files\Alcohol Soft
2010-02-25 14:12 . 2010-02-25 14:22 691696 -c--a-w- i:\c\system32\drivers\sptd.sys
2010-02-15 21:19 . 2010-02-15 21:57 737280 -c--a-w- i:\c\iun6002.exe
2010-02-15 21:19 . 2010-02-15 21:59 -------- d-----w- i:\program files\BlueVoda Website Builder
2010-02-14 20:45 . 2004-03-25 07:06 1802240 -c----w- i:\c\UNNMP.exe
2010-02-14 20:43 . 2004-04-19 03:37 1814528 -c----w- i:\c\UNNeroVision.exe
2010-02-14 20:43 . 2001-03-08 18:30 24064 -c--a-w- i:\c\system32\msxml3a.dll
2010-02-14 20:42 . 2001-07-06 17:24 283920 -c--a-w- i:\c\system32\ImagXpr5.dll
2010-02-14 20:42 . 2001-07-06 13:41 569344 -c--a-w- i:\c\system32\imagr5.dll
2010-02-14 20:42 . 2001-07-06 11:44 544768 -c--a-w- i:\c\system32\imagx5.dll
2010-02-14 20:42 . 2001-06-26 07:15 38912 -c--a-w- i:\c\system32\picn20.dll
2010-02-14 20:42 . 2000-06-26 10:45 106496 -c--a-w- i:\c\system32\TwnLib20.dll
2010-02-14 20:42 . 2010-02-14 20:43 -------- d-----w- i:\program files\Common Files\Ahead

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-12 08:01 . 2008-10-13 14:39 -------- d-----w- i:\program files\AVG
2010-03-11 20:21 . 2010-01-08 09:49 -------- d-----w- i:\program files\Microsoft LifeCam
2010-03-11 20:21 . 2009-12-25 21:49 -------- d-----w- i:\program files\QuickTime
2010-03-11 20:21 . 2008-11-12 19:36 -------- d-----w- i:\program files\TO2SSM
2010-03-10 17:53 . 2009-12-25 21:56 -------- d-----w- i:\program files\AGEIA Technologies
2010-03-10 11:48 . 2008-10-10 22:13 -------- d--h--w- i:\program files\InstallShield Installation Information
2010-03-04 20:38 . 2009-12-25 21:48 -------- d-----w- i:\program files\Windows Media Connect 2
2010-03-02 20:33 . 2009-12-25 21:52 -------- d-----w- i:\program files\Google
2010-02-25 14:29 . 2009-05-29 13:39 -------- d-----w- i:\program files\Kalypso
2010-02-14 20:45 . 2009-12-25 21:56 -------- d-----w- i:\program files\Ahead
2010-02-10 15:23 . 2009-12-25 21:49 -------- d-----w- i:\program files\sixteen tons entertainment
2010-02-08 05:44 . 2010-02-08 05:43 -------- d-----w- i:\program files\Macromedia
2010-02-08 05:43 . 2010-02-08 05:43 -------- d-----w- i:\program files\Common Files\Macromedia
2010-02-04 06:43 . 2010-02-04 06:43 -------- d-----w- i:\program files\JPEG Imager
2010-02-01 13:05 . 2009-05-02 09:23 -------- d-----w- i:\program files\Common Files\Adobe
2010-02-01 12:50 . 2010-02-01 12:50 135168 -c--a-w- i:\c\system32\CAPI2_JNI.DLL
2010-02-01 12:32 . 2009-12-25 21:54 -------- d-----w- i:\program files\Common Files\Java
2010-02-01 12:31 . 2010-02-01 12:31 411368 -c--a-w- i:\c\system32\deploytk.dll
2010-01-27 16:35 . 2010-01-27 16:35 -------- d-----w- i:\program files\YouTube Downloader
2010-01-27 12:40 . 2009-12-25 21:52 -------- d-----w- i:\program files\FDRLab
2010-01-27 12:33 . 2010-01-27 12:29 -------- d-----w- i:\program files\Krtecek
2010-01-19 20:24 . 2009-03-21 07:26 -------- d-----w- i:\program files\NETGATE
2010-01-17 17:36 . 2010-01-17 17:36 -------- d-----w- i:\program files\Ladicka
2010-01-15 18:39 . 2010-01-15 12:37 40448 -c--a-w- i:\c\system32\ati2mdxx.exe
2010-01-15 12:43 . 2010-01-15 12:43 -------- d-----w- i:\program files\Driver-Soft
2010-01-15 12:38 . 2010-01-15 12:37 -------- d-----w- i:\program files\ATI
2010-01-15 12:38 . 2008-10-13 15:41 -------- d-----w- i:\program files\ATI Technologies
2010-01-15 12:37 . 2010-01-15 12:37 0 -c--a-w- i:\c\ativpsrm.bin
2010-01-15 12:10 . 2010-01-13 18:10 664 -c--a-w- i:\c\system32\d3d9caps.dat
2010-01-14 19:43 . 2010-01-14 19:41 43520 -c--a-w- i:\c\system32\CmdLineExt03.dll
2010-01-14 19:28 . 2010-01-14 19:28 552 -c--a-w- i:\c\system32\d3d8caps.dat
2010-01-14 18:53 . 2001-10-25 14:00 68916 ----a-w- i:\c\system32\perfc005.dat
2010-01-14 18:53 . 2001-10-25 14:00 389938 ----a-w- i:\c\system32\perfh005.dat
2010-01-14 17:37 . 2010-01-14 17:37 -------- d-----w- i:\program files\MSXML 4.0
2010-01-14 13:50 . 2009-12-25 21:51 -------- d-----w- i:\program files\MediaCoder
2010-01-14 09:20 . 2010-01-14 09:20 -------- d-----w- i:\program files\Kaspersky Lab
2010-01-14 09:19 . 2010-01-13 17:41 16608 -c--a-w- i:\c\gdrv.sys
2010-01-14 06:38 . 2008-11-05 18:07 -------- d-----w- i:\program files\Common Files\Apple
2010-01-14 06:04 . 2009-08-19 16:19 -------- d-----w- i:\program files\Windows Messaging
2010-01-14 05:34 . 2010-01-14 05:34 -------- d-----w- i:\program files\Common Files\PCSuite
2010-01-14 05:34 . 2009-02-21 06:36 -------- d-----w- i:\program files\Nokia
2010-01-14 05:34 . 2010-01-13 20:10 -------- d-----w- i:\program files\Common Files\Nokia
2010-01-14 05:34 . 2009-07-14 10:26 -------- d-----w- i:\program files\PC Connectivity Solution
2010-01-13 20:26 . 2010-01-13 20:26 -------- d-----w- i:\program files\MSXML 6.0
2010-01-13 20:11 . 2010-01-13 20:11 0 -c-ha-w- i:\c\system32\drivers\Msft_User_PCCSWpdDriver_01_07_00.Wdf
2010-01-13 20:11 . 2010-01-13 20:11 0 -c-ha-w- i:\c\system32\drivers\MsftWdf_user_01_07_00.Wdf
2010-01-13 20:10 . 2010-01-13 20:10 0 -c-ha-w- i:\c\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
2010-01-13 20:10 . 2010-01-13 20:10 0 -c-ha-w- i:\c\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
2010-01-13 19:36 . 2010-01-13 19:36 -------- d-----w- i:\program files\EA GAMES
2010-01-13 19:22 . 2009-12-25 21:55 -------- d-----w- i:\program files\Audacity
2010-01-13 18:45 . 2010-01-13 18:45 56 -c-ha-w- i:\c\system32\ezsidmv.dat
2010-01-13 18:30 . 2010-01-13 18:30 0 -c--a-w- i:\c\nsreg.dat
2010-01-13 17:44 . 2010-01-13 17:44 315392 -c--a-w- i:\c\HideWin.exe
2010-01-13 17:09 . 2010-01-13 16:21 86291 -c--a-w- i:\c\pchealth\helpctr\OfflineCache\index.dat
2010-01-13 17:09 . 2010-01-13 16:21 2354 -c--a-w- i:\c\pchealth\helpctr\PackageStore\SkuStore.bin
2010-01-13 17:09 . 2010-01-13 16:21 8972 -c--a-w- i:\c\pchealth\helpctr\Config\Cntstore.bin
2010-01-13 16:18 . 2010-01-13 16:18 21812 -c--a-w- i:\c\system32\emptyregdb.dat
2010-01-12 17:26 . 2010-01-12 17:26 -------- d-----w- i:\program files\IObit
2010-01-12 17:23 . 2009-12-25 21:53 -------- d-----w- i:\program files\Common Files\Wise Installation Wizard
2009-08-12 10:38 . 2000-09-26 14:12 1715 -c--a-w- i:\program files\RA2.INI
2009-08-06 12:53 . 2009-08-06 12:42 1112250 -c--a-w- i:\program files\autosave.sav
2008-10-18 20:53 . 2008-10-18 20:56 1851544 ----a-w- i:\program files\install_flash_player.exe
2000-10-01 18:31 . 2000-10-01 18:31 18768 -c--a-w- i:\program files\SECDRV.SYS
2000-09-28 12:02 . 2000-09-28 12:02 73728 -c--a-w- i:\program files\MPH.EXE
2000-07-27 14:22 . 2000-07-27 14:22 286208 ----a-w- i:\program files\BINKW32.DLL
2000-07-17 08:45 . 2000-07-17 08:45 171520 -c--a-w- i:\program files\PATCHW32.DLL
2000-06-27 17:00 . 2000-06-27 17:00 766 -c--a-w- i:\program files\NOTES.ICO
2000-03-10 12:20 . 2000-03-10 12:20 2348 -c--a-w- i:\program files\Blowfish.tlb
.

(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of i:\documents and settings\Tom\Plocha\s\ ----

2010-03-11 17:42 . 2009-08-21 11:04 13312 -c--a-w- i:\documents and settings\Tom\Plocha\s\\lsass.exe
2010-03-11 17:42 . 2009-08-21 11:05 57856 -c--a-w- i:\documents and settings\Tom\Plocha\s\\spoolsv.exe
2010-03-11 17:42 . 2009-08-21 11:05 14336 -c--a-w- i:\documents and settings\Tom\Plocha\s\\svchost.exe
2010-03-11 17:42 . 2009-08-21 11:05 502272 -c--a-w- i:\documents and settings\Tom\Plocha\s\\winlogon.exe
2010-03-11 17:42 . 2010-03-11 17:42 724217 -c--a-w- i:\documents and settings\Tom\Plocha\s\\Soubory.zip


((((((((((((((((((((((((((((( SnapShot@2010-03-11_17.15.56 )))))))))))))))))))))))))))))))))))))))))
.
+ 2004-08-17 13:49 . 2009-08-21 11:05 14336 i:\c\system32\svchost.exe
+ 2004-08-17 13:49 . 2009-08-21 11:05 57856 i:\c\system32\spoolsv.exe
+ 2004-08-17 13:49 . 2009-08-21 11:04 13312 i:\c\system32\lsass.exe
+ 2004-08-17 13:49 . 2009-08-21 11:05 14336 i:\c\system32\dllcache\svchost.exe
+ 2004-08-17 13:49 . 2009-08-21 11:05 57856 i:\c\system32\dllcache\spoolsv.exe
+ 2004-08-17 13:49 . 2009-08-21 11:04 13312 i:\c\system32\dllcache\lsass.exe
+ 2004-08-17 13:49 . 2009-08-21 11:05 502272 i:\c\system32\winlogon.exe
+ 2004-08-17 13:49 . 2009-08-21 11:05 502272 i:\c\system32\dllcache\winlogon.exe
+ 2004-08-17 13:49 . 2009-08-21 11:04 1032704 i:\c\system32\dllcache\explorer.exe
+ 2004-08-17 13:49 . 2009-08-21 11:04 1032704 i:\c\explorer.exe
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"="i:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2009-11-11 1451520]
"AlcoholAutomount"="i:\program files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" [2009-11-15 33120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="i:\program files\quicktime\qttask .exe -atboottime" [X]
"RTHDCPL"="RTHDCPL.EXE" [2008-02-13 16857600]
"LifeCam"="i:\program files\Microsoft LifeCam\LifeExp.exe" [2007-05-17 279912]
"TO2SSM_McciTrayApp"="i:\program files\TO2SSM\McciTrayApp.exe" [2008-08-15 1473536]
"SunJavaUpdateSched"="i:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="i:\c\system32\CTFMON.EXE" [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"i:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=
"i:\\C\\system32\\dpvsetup.exe"=
"i:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"i:\\Program Files\\EA GAMES\\The Battle for Middle-earth (tm)\\game.dat"=
"i:\\Program Files\\EA GAMES\\The Battle for Middle-earth (tm)\\patchget.dat"=
"i:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"i:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"i:\\Program Files\\Nokia\\Nokia PC Suite 7\\VideoManager.exe"=
"i:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=
"i:\\Documents and Settings\\Tom\\Data aplikací\\uTorrent\\utorrent.exe"=
"i:\\C\\system32\\PnkBstrA.exe"=
"i:\\C\\system32\\PnkBstrB.exe"=
"i:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"i:\\Program Files\\Skype\\Phone\\Skype.exe"=

S0 sptd;sptd;i:\c\system32\drivers\sptd.sys [25.2.2010 15:12 691696]
S2 gupdate;Google Update Service (gupdate);i:\program files\Google\Update\GoogleUpdate.exe [4.2.2009 23:03 133104]
.
Obsah adresáře 'Naplánované úlohy'

2010-02-27 i:\c\Tasks\AppleSoftwareUpdate.job
- i:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2010-03-12 i:\c\Tasks\GoogleUpdateTaskMachineCore.job
- i:\program files\Google\Update\GoogleUpdate.exe [2009-02-04 22:03]

2010-03-12 i:\c\Tasks\GoogleUpdateTaskMachineUA.job
- i:\program files\Google\Update\GoogleUpdate.exe [2009-02-04 22:03]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://radiobeat.cz/admin/
IE: E&xportovat do aplikace Microsoft Office Excel - i:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - i:\documents and settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\ehwr9ox5.default\
FF - prefs.js: browser.startup.homepage - hxxp://mail.radiobeat.cz/webmail/index.php|http://www.google.cz/
FF - component: i:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - plugin: i:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: i:\program files\Google\Update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: i:\program files\Mozilla Firefox\plugins\np-mswmp.dll

---- NASTAVENÍ FIREFOXU ----
i:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
i:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
i:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
i:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
i:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
i:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
i:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-12 10:15
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(692)
i:\c\system32\Ati2evxx.dll
.
Celkový čas: 2010-03-12 10:16:47
ComboFix-quarantined-files.txt 2010-03-12 09:16
ComboFix2.txt 2010-03-11 21:21
ComboFix3.txt 2010-03-11 20:23
ComboFix4.txt 2010-03-11 20:04
ComboFix5.txt 2010-03-12 09:09

Před spuštěním: Volných bajtů: 18 922 725 376
Po spuštění: Volných bajtů: 19 226 030 080

- - End Of File - - EE514F1D05AF994F03593B911576EFDB

Než přijde kolega
jak to vypadá s počítačem? Já bych řekla, že je čisto

Tuto složku smažte
i:\documents and settings\Tom\Plocha\s\



Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


***********


Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir



***********


Vložte nový log ze RSIT a řekněte co počítač, jak se chová, už je vše v pořádku?

Logfile of random's system information tool 1.06 (written by random/random)
Run by Tom at 2010-03-12 14:00:35
Systém Microsoft Windows XP Professional Service Pack 2
System drive I: has 19 GB (8%) free of 238 GB
Total RAM: 2046 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:00:39, on 12.3.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
I:\C\System32\smss.exe
I:\C\system32\winlogon.exe
I:\C\system32\services.exe
I:\C\system32\lsass.exe
I:\C\system32\Ati2evxx.exe
I:\C\system32\svchost.exe
I:\C\System32\svchost.exe
I:\C\system32\svchost.exe
I:\C\system32\Ati2evxx.exe
I:\C\system32\spoolsv.exe
I:\C\Explorer.EXE
I:\Program Files\Common Files\Motive\McciCMService.exe
I:\Program Files\Microsoft LifeCam\MSCamS32.exe
I:\C\system32\PnkBstrA.exe
I:\C\system32\PnkBstrB.exe
I:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
I:\C\system32\svchost.exe
I:\C\system32\wscntfy.exe
I:\C\RTHDCPL.EXE
I:\Program Files\TO2SSM\McciTrayApp.exe
I:\Program Files\Java\jre6\bin\jusched.exe
I:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
I:\Program Files\PC Connectivity Solution\ServiceLayer.exe
I:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
I:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
I:\Program Files\Mozilla Firefox\firefox.exe
I:\Documents and Settings\Tom\Plocha\HRY TOMINO\RSIT.exe
I:\Program Files\trend micro\Tom.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://radiobeat.cz/admin/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - I:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - I:\Program Files\AVG\AVG9\avgssie.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - I:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [QuickTime Task] "i:\program files\quicktime\qttask .exe" -atboottime
O4 - HKLM\..\Run: [LifeCam] "I:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [TO2SSM_McciTrayApp] I:\Program Files\TO2SSM\McciTrayApp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "I:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [combofix] "I:\ComboFix\CF170.cfxxe" /c "I:\ComboFix\C.bat"
O4 - HKCU\..\Run: [PC Suite Tray] "I:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [AlcoholAutomount] "I:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] I:\C\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] I:\C\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://I:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - I:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: I:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - I:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - I:\C\system32\Ati2evxx.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - I:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: McciCMService - Motive Communications, Inc. - I:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: PnkBstrA - Unknown owner - I:\C\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - I:\C\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia - I:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - I:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 4577 bytes

======Scheduled tasks folder======

I:\C\tasks\AppleSoftwareUpdate.job
I:\C\tasks\GoogleUpdateTaskMachineCore.job
I:\C\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - I:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16 37808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - I:\Program Files\AVG\AVG9\avgssie.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - I:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-02-01 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=I:\C\RTHDCPL.EXE [2008-02-13 16857600]
"QuickTime Task"=i:\program files\quicktime\qttask .exe -atboottime []
"LifeCam"=I:\Program Files\Microsoft LifeCam\LifeExp.exe [2007-05-17 279912]
"TO2SSM_McciTrayApp"=I:\Program Files\TO2SSM\McciTrayApp.exe [2008-08-15 1473536]
"SunJavaUpdateSched"=I:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"combofix"=I:\ComboFix\CF170.cfxxe /c I:\ComboFix\C.bat []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"=I:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-11-11 1451520]
"AlcoholAutomount"=I:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2009-11-15 33120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
I:\C\system32\Ati2evxx.dll [2009-11-25 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
I:\C\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - I:\C\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"I:\Program Files\Microsoft LifeCam\LifeExp.exe"="I:\Program Files\Microsoft LifeCam\LifeExp.exe:*:Enabled:LifeExp.exe"
"I:\C\system32\dpvsetup.exe"="I:\C\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"I:\Program Files\Skype\Plugin Manager\skypePM.exe"="I:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"I:\Program Files\EA GAMES\The Battle for Middle-earth (tm)\game.dat"="I:\Program Files\EA GAMES\The Battle for Middle-earth (tm)\game.dat:*:Enabled:The Battle for Middle-earth (tm)"
"I:\Program Files\EA GAMES\The Battle for Middle-earth (tm)\patchget.dat"="I:\Program Files\EA GAMES\The Battle for Middle-earth (tm)\patchget.dat:*:Enabled:patchgrabber"
"I:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe"="I:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater"
"I:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe"="I:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"I:\Program Files\Nokia\Nokia PC Suite 7\VideoManager.exe"="I:\Program Files\Nokia\Nokia PC Suite 7\VideoManager.exe:*:Enabled:Nokia Video Manager"
"I:\Program Files\Microsoft LifeCam\LifeCam.exe"="I:\Program Files\Microsoft LifeCam\LifeCam.exe:*:Enabled:LifeCam.exe"
"I:\Documents and Settings\Tom\Data aplikací\uTorrent\utorrent.exe"="I:\Documents and Settings\Tom\Data aplikací\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"I:\C\system32\PnkBstrA.exe"="I:\C\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"I:\C\system32\PnkBstrB.exe"="I:\C\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"I:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="I:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM)"
"I:\Program Files\Skype\Phone\Skype.exe"="I:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======File associations======

.js - edit - "I:\Program Files\Macromedia\Dreamweaver 8\dreamweaver.exe" "%1"

======List of files/folders created in the last 1 months======

2010-03-12 14:00:36 ----D---- I:\Program Files\trend micro
2010-03-12 14:00:35 ----DC---- I:\rsit
2010-03-12 12:38:16 ----SHDC---- I:\RECYCLER
2010-03-12 10:16:49 ----DC---- I:\C\temp
2010-03-11 19:26:52 ----D---- I:\Program Files\Malwarebytes' Anti-Malware
2010-03-11 17:55:55 ----AC---- I:\Boot.bak
2010-03-11 17:55:50 ----RASHDC---- I:\cmdcons
2010-03-11 17:54:47 ----DC---- I:\C\ERDNT
2010-03-11 15:26:03 ----D---- I:\Program Files\Spyware Doctor
2010-03-11 13:41:55 ----DC---- I:\C\pss
2010-03-11 13:39:12 ----D---- I:\Program Files\Enigma Software Group
2010-03-11 12:42:13 ----DC---- I:\Documents and Settings\Tom\Data aplikací\Malwarebytes
2010-03-11 12:42:09 ----DC---- I:\Documents and Settings\All Users.C\Data aplikací\Malwarebytes
2010-03-10 12:39:20 ----D---- I:\Program Files\Activision
2010-03-10 12:29:48 ----SHDC---- I:\C\ftpcache
2010-03-10 12:28:31 ----AC---- I:\C\system32\PnkBstrB.exe
2010-03-10 12:28:30 ----AC---- I:\C\system32\PnkBstrA.exe
2010-03-10 12:28:28 ----AC---- I:\C\game.ini
2010-03-09 20:59:57 ----DC---- I:\Documents and Settings\Tom\Data aplikací\FreeScreenToVideo
2010-03-09 20:59:57 ----D---- I:\Program Files\Free Screen To Video
2010-03-04 21:38:48 ----HDC---- I:\C\$NtUninstallKB926239$
2010-03-04 21:38:31 ----C---- I:\C\system32\spmsg.dll
2010-03-04 21:38:30 ----HDC---- I:\C\$NtUninstallMSCompPackV1$
2010-03-04 21:38:24 ----AC---- I:\C\system32\wmpns.dll
2010-03-04 21:38:12 ----HDC---- I:\C\$NtUninstallwmp11$
2010-03-04 21:37:22 ----DC---- I:\10f2fcf118b3d0875d
2010-03-02 21:42:24 ----DC---- I:\Documents and Settings\Tom\Data aplikací\FileZilla
2010-03-01 23:37:13 ----DC---- I:\Documents and Settings\Tom\Data aplikací\Ahead
2010-02-28 14:02:40 ----D---- I:\Program Files\PopCap Games
2010-02-25 15:24:45 ----D---- I:\Program Files\Alcohol Soft
2010-02-23 17:08:05 ----DC---- I:\Documents and Settings\Tom\Data aplikací\uTorrent
2010-02-23 15:22:05 ----AC---- I:\C\system32\javaws.exe
2010-02-23 15:22:05 ----AC---- I:\C\system32\javaw.exe
2010-02-23 15:22:05 ----AC---- I:\C\system32\java.exe
2010-02-15 22:19:30 ----AC---- I:\C\iun6002.exe
2010-02-15 22:19:01 ----D---- I:\Program Files\BlueVoda Website Builder
2010-02-15 10:23:48 ----AC---- I:\C\NeroDigital.ini
2010-02-14 21:45:45 ----C---- I:\C\UNNMP.exe
2010-02-14 21:44:19 ----AC---- I:\C\system32\nerocheck.exe.delme49
2010-02-14 21:43:16 ----C---- I:\C\UNNeroVision.exe
2010-02-14 21:43:16 ----AC---- I:\C\system32\msxml3a.dll
2010-02-14 21:43:00 ----DC---- I:\Documents and Settings\All Users.C\Data aplikací\Ahead
2010-02-14 21:42:59 ----AC---- I:\C\system32\TwnLib20.dll
2010-02-14 21:42:59 ----AC---- I:\C\system32\picn20.dll
2010-02-14 21:42:59 ----AC---- I:\C\system32\ImagXpr5.dll
2010-02-14 21:42:59 ----AC---- I:\C\system32\imagx5.dll
2010-02-14 21:42:59 ----AC---- I:\C\system32\imagr5.dll
2010-02-14 21:42:58 ----D---- I:\Program Files\Common Files\Ahead

======List of files/folders modified in the last 1 months======

2010-03-12 14:00:36 ----RD---- I:\Program Files
2010-03-12 14:00:19 ----DC---- I:\C\Prefetch
2010-03-12 13:59:49 ----SHD---- I:\System Volume Information
2010-03-12 13:59:49 ----DC---- I:\C\system32\Restore
2010-03-12 13:56:01 ----DC---- I:\C
2010-03-12 13:53:50 ----AC---- I:\C\SchedLgU.Txt
2010-03-12 12:41:32 ----DC---- I:\C\system32\CatRoot2
2010-03-12 10:15:57 ----AC---- I:\C\system.ini
2010-03-12 10:14:44 ----DC---- I:\C\system32
2010-03-12 10:14:43 ----DC---- I:\C\system32\drivers
2010-03-12 10:14:43 ----DC---- I:\C\AppPatch
2010-03-12 10:14:40 ----D---- I:\Program Files\Common Files
2010-03-12 10:03:40 ----D---- I:\Program Files\Mozilla Firefox
2010-03-12 09:35:35 ----SDC---- I:\Documents and Settings\Tom\Data aplikací\Microsoft
2010-03-12 09:01:36 ----D---- I:\Program Files\AVG
2010-03-12 09:01:30 ----SHDC---- I:\C\Installer
2010-03-12 09:01:24 ----DC---- I:\Config.Msi
2010-03-12 08:40:44 ----DC---- I:\Documents and Settings\Tom\Data aplikací\vlc
2010-03-11 21:21:09 ----D---- I:\Program Files\TO2SSM
2010-03-11 21:21:09 ----D---- I:\Program Files\QuickTime
2010-03-11 21:21:09 ----D---- I:\Program Files\Microsoft LifeCam
2010-03-11 21:03:28 ----D---- I:\Program Files\Internet Explorer
2010-03-11 20:58:47 ----DC---- I:\C\system32\dllcache
2010-03-11 20:50:02 ----DC---- I:\C\Resources
2010-03-11 18:20:27 ----SDC---- I:\C\Tasks
2010-03-11 18:14:24 ----DC---- I:\C\system32\config
2010-03-11 17:55:55 ----RASHC---- I:\boot.ini
2010-03-11 15:06:16 ----AC---- I:\C\win.ini
2010-03-11 08:02:31 ----HDC---- I:\C\inf
2010-03-10 18:53:04 ----D---- I:\Program Files\AGEIA Technologies
2010-03-10 17:34:13 ----DC---- I:\Documents and Settings\Tom\Data aplikací\Skype
2010-03-10 16:47:42 ----DC---- I:\Documents and Settings\Tom\Data aplikací\skypePM
2010-03-10 12:48:50 ----DC---- I:\C\system32\DirectX
2010-03-10 12:48:42 ----RSDC---- I:\C\assembly
2010-03-10 12:48:21 ----HD---- I:\Program Files\InstallShield Installation Information
2010-03-10 12:28:30 ----DC---- I:\C\system32\LogFiles
2010-03-08 19:42:00 ----DC---- I:\Documents and Settings\Tom\Data aplikací\dvdcss
2010-03-04 23:24:37 ----D---- I:\Program Files\Windows Media Player
2010-03-04 21:38:20 ----D---- I:\Program Files\Windows Media Connect 2
2010-03-04 21:38:18 ----DC---- I:\C\Help
2010-03-04 21:37:48 ----DC---- I:\C\system32\CatRoot
2010-03-02 21:33:32 ----D---- I:\Program Files\Google
2010-02-28 14:02:41 ----SDC---- I:\Documents and Settings\All Users.C\Data aplikací\Microsoft
2010-02-25 15:29:49 ----D---- I:\Program Files\Kalypso
2010-02-14 21:45:38 ----D---- I:\Program Files\Ahead

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Řadič procesoru Intel; I:\C\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
R1 kbdhid;Ovladač klávesnice standardu HID; I:\C\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R3 ati2mtag;ati2mtag; I:\C\system32\DRIVERS\ati2mtag.sys [2009-11-25 4463104]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; I:\C\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Ovladač třídy standardu HID; I:\C\system32\DRIVERS\hidusb.sys [2001-10-25 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); I:\C\system32\drivers\RtkHDAud.sys [2008-02-14 4676096]
R3 mouhid;Ovladač myši standardu HID; I:\C\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; I:\C\system32\DRIVERS\Rtenicxp.sys [2008-01-03 105856]
R3 usbaudio;Ovladač zvukové karty USB (WDM); I:\C\system32\drivers\usbaudio.sys [2004-08-04 59264]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; I:\C\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; I:\C\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Rozbočovač umožnující USB2; I:\C\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; I:\C\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; I:\C\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S3 CCDECODE;Dekodér Closed Caption; I:\C\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 CrystalSysInfo;CrystalSysInfo; \??\I:\Program Files\MediaCoder\SysInfo.sys []
S3 gdrv;gdrv; \??\I:\C\gdrv.sys []
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\I:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\I:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\I:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\I:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\I:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\I:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; I:\C\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; I:\C\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; I:\C\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 nmwcd;Nokia USB Phone Parent; I:\C\system32\drivers\ccdcmb.sys [2009-10-06 17664]
S3 nmwcdc;Nokia USB Generic; I:\C\system32\drivers\ccdcmbo.sys [2009-10-06 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; I:\C\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; I:\C\System32\Drivers\RootMdm.sys [2001-10-25 5888]
S3 SLIP;BDA Slip De-Framer; I:\C\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; I:\C\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 upperdev;upperdev; I:\C\system32\DRIVERS\usbser_lowerflt.sys [2009-10-06 7936]
S3 usbser;USB Modem Driver; I:\C\system32\drivers\usbser.sys [2004-08-03 25600]
S3 UsbserFilt;UsbserFilt; I:\C\system32\DRIVERS\usbser_lowerfltj.sys [2009-10-06 7936]
S3 VX3000;VX-3000; I:\C\system32\DRIVERS\VX3000.sys [2007-04-10 1966696]
S3 Wdf01000;Kernel Mode Driver Frameworks service; I:\C\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WSTCODEC;Dálnopisný kodek světového standardu; I:\C\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; I:\C\system32\DRIVERS\wudfrd.sys [2008-01-18 83328]
S4 IntelIde;IntelIde; I:\C\system32\drivers\IntelIde.sys []
S4 sptd;sptd; I:\C\System32\Drivers\sptd.sys [2010-02-25 691696]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; I:\C\system32\Ati2evxx.exe [2009-11-25 602112]
R2 McciCMService;McciCMService; I:\Program Files\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
R2 MSCamSvc;MSCamSvc; I:\Program Files\Microsoft LifeCam\MSCamS32.exe [2007-05-17 271720]
R2 PnkBstrA;PnkBstrA; I:\C\system32\PnkBstrA.exe [2010-03-10 66872]
R2 PnkBstrB;PnkBstrB; I:\C\system32\PnkBstrB.exe [2010-03-10 103736]
R2 StarWindServiceAE;StarWind AE Service; I:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; I:\C\system32\svchost.exe [2009-08-21 14336]
R3 ServiceLayer;ServiceLayer; I:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-10-27 657408]
S2 gupdate;Google Update Service (gupdate); I:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-04 133104]
S3 aspnet_state;ASP.NET State Service; I:\C\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; I:\C\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; I:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]

-----------------EOF-----------------


zatím šlape jako hodinky

Vydržte, podívám se na log.

Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe

• Spusťte.
• Klikněte na "CleanUp!". Potvrďte hlášky stiskem "Yes" (Bude následovat restart)

Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478

• Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.
  
  Záložka Čistič
• Dejte analyzovat, po dokončení dejte Spustit Ccleaner.
  
  Záložka Registry
• Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
  OK Zavřít

V logu nevidím antivir a firewall, doinstalujte http://www.viry.cz/forum/viewtopic.php?f=29&t=6152 + http://www.viry.cz/forum/viewtopic.php?f=41&t=6523

Tak jsem to nějak zakřiknul...najednou mi nejde otevřít firemní mejl..

Zkuste vypnout firewal, pokud nepůjde, tak mi přesněji popište problém.

máme firemní mejl..KERIO CONNECT...ještě dnes ráno fungoval normálně..dnes jde pouze v jakési záložní mini verzi...ta normální se sice otevře, přihlásím se, ale nenačte se..jak bych Vám mohl poslat obrázky ..??

tak vyřešeno..nevím čím to bylo..ale CTRL+SHIFT+DEL...a je to OK..

Takže s PC žádné problémy