VIRY.CZ

Dobry den,stahl sem nejaky vir,naskakuji mi okna na stranky s antispymware programem,nemuzu spustit Hijackthis abych udelal scan,prosim poradte.dekuji

Zkuste RSIT: http://www.viry.cz/forum/viewtopic.php?f=13&t=82743 .

Zkousel sem ale taky nefunguje spustim a hned zmizi.

Co ted dal,poradte.

Logfile of random's system information tool 1.06 (written by random/random)
Run by David at 2010-05-01 13:14:21
Microsoft® Windows Vista™ Ultimate Service Pack 1
System drive C: has 96 GB (20%) free of 477 GB
Total RAM: 3070 MB (61% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-493184601-2494964019-3008129617-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-493184601-2494964019-3008129617-1000UA.job
C:\Windows\tasks\User_Feed_Synchronization-{AD178CE2-18A5-4B81-9E5B-050DC52D39CE}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
XTTBPos00 Class - C:\Program Files\ICQToolbar\toolbaru.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}]
4shared.com Toolbar - C:\Program Files\4shared.com\tb4sha.dll [2009-11-09 2331672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-11-18 333192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
Winamp Toolbar Loader - C:\Program Files\Winamp Toolbar\winamptb.dll [2008-07-16 1266992]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7c5c0f58-e061-457d-9033-77307f5ed00c}]
TorrentMan Toolbar - C:\Program Files\TorrentMan\tbTorr.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-22 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]
free-downloads.net Toolbar - C:\Program Files\free-downloads.net\tbfre0.dll [2008-09-15 1784856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2010-03-18 1361208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Winamp Toolbar - C:\Program Files\Winamp Toolbar\winamptb.dll [2008-07-16 1266992]
{ecdee021-0d17-467f-a1ff-c7a115230949} - free-downloads.net Toolbar - C:\Program Files\free-downloads.net\tbfre0.dll [2008-09-15 1784856]
{7c5c0f58-e061-457d-9033-77307f5ed00c} - TorrentMan Toolbar - C:\Program Files\TorrentMan\tbTorr.dll []
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2008-10-14 863688]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-11-18 333192]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll []
{09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - 4shared.com Toolbar - C:\Program Files\4shared.com\tb4sha.dll [2009-11-09 2331672]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2010-03-18 1361208]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-04-05 1008184]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-06-25 13535776]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-06-25 92704]
"WinSys2"=C:\Windows\system32\startup.exe [2008-07-09 57344]
"DelReg"=C:\Program Files\MSI\DualCoreCenter\DelReg.exe [2008-05-13 196608]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-02-13 4915200]
"Skytel"=C:\Windows\Skytel.exe [2007-11-20 1826816]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2007-03-20 36864]
"36X Raid Configurer"=C:\Windows\system32\xRaidSetup.exe [2007-11-19 1970176]
"FightBoard"=C:\Program Files\REVOLTEC\FightBoard Advanced 1.00\FightBoard.exe [2006-11-27 2441216]
"NeroCheck"=C:\Windows\system32\NeroCheck.exe [2001-07-09 155648]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-07-19 78008]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2008-08-04 36352]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-08-22 149280]
"LogitechCommunicationsManager"=C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe [2007-02-08 488984]
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam10\QuickCam10.exe [2007-02-08 774168]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2009-01-21 92168]
"SweetIM"=C:\Program Files\SweetIM\Messenger\SweetIM.exe [2010-03-17 106496]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-04-05 1233920]
"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-07-24 490952]
"RGSC"=C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe [2008-12-22 306088]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-04-05 125952]
"Google Update"=C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2009-12-19 135664]
"4shared Desktop"=C:\Program Files\4shared Desktop\desktop.exe [2009-12-07 3632640]
"ajpaggws"=C:\Users\David\AppData\Local\agedawdyq\peirfbltssd.exe [2010-05-01 270080]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
DualCoreCenter.lnk - C:\Program Files\MSI\DualCoreCenter\StartUpDualCoreCenter.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8082172b-bdeb-11dd-8947-0021855aba5b}]
shell\AutoRun\command - F:\autorun.exe


======List of files/folders created in the last 1 months======

2010-05-01 13:14:21 ----D---- C:\rsit
2010-05-01 13:14:21 ----D---- C:\Program Files\trend micro
2010-04-28 04:35:12 ----D---- C:\audiograbber
2010-04-24 11:12:02 ----A---- C:\Windows\system32\AVERM.dll
2010-04-24 11:12:02 ----A---- C:\Windows\system32\AVEQT.dll
2010-04-24 11:12:01 ----D---- C:\Program Files\Ultra MKV Converter
2010-04-24 11:03:50 ----D---- C:\Program Files\mkvtoavi
2010-04-24 10:42:23 ----D---- C:\My video
2010-04-24 10:33:57 ----D---- C:\Program Files\RelevantKnowledge
2010-04-24 10:33:15 ----D---- C:\Program Files\A-one Video Convertor
2010-04-24 10:26:27 ----D---- C:\OutputFolder
2010-04-24 10:20:12 ----D---- C:\Users\David\AppData\Roaming\GetRightToGo
2010-04-24 09:44:47 ----D---- C:\Users\David\AppData\Roaming\Leawo
2010-04-24 09:44:37 ----D---- C:\Program Files\Leawo
2010-04-24 09:10:40 ----A---- C:\test.txt
2010-04-24 09:10:30 ----D---- C:\Users\David\AppData\Roaming\dvdcss
2010-04-24 09:06:51 ----A---- C:\Windows\system32\WNASPI32.DLL
2010-04-24 09:06:50 ----A---- C:\temp.txt
2010-04-24 09:06:49 ----D---- C:\Program Files\3herosoft
2010-04-24 09:04:01 ----D---- C:\Program Files\Convert DVD to AVI
2010-04-23 16:11:51 ----D---- C:\Program Files\Webteh
2010-04-23 16:01:00 ----D---- C:\ProgramData\AVS4YOU
2010-04-23 16:00:45 ----D---- C:\Program Files\Common Files\AVSMedia
2010-04-23 16:00:45 ----A---- C:\Windows\system32\msxml3a.dll
2010-04-23 16:00:45 ----A---- C:\Windows\system32\msvcr70.dll
2010-04-23 16:00:45 ----A---- C:\Windows\system32\msvcp70.dll
2010-04-23 16:00:45 ----A---- C:\Windows\system32\mpg4c32.dll
2010-04-23 16:00:45 ----A---- C:\Windows\system32\mfc70.dll
2010-04-23 16:00:45 ----A---- C:\Windows\system32\mcdvd_32.dll
2010-04-23 16:00:44 ----D---- C:\Program Files\AVS4YOU
2010-04-22 14:48:17 ----D---- C:\ZANETA
2010-04-20 20:11:32 ----D---- C:\ProgramData\SweetIM
2010-04-20 20:11:32 ----D---- C:\Program Files\SweetIM

======List of files/folders modified in the last 1 months======

2010-05-01 13:14:21 ----RD---- C:\Program Files
2010-05-01 13:14:21 ----D---- C:\Windows\Temp
2010-05-01 13:14:21 ----D---- C:\Windows\Prefetch
2010-05-01 13:14:20 ----D---- C:\ProgramData\SKL
2010-05-01 13:14:19 ----D---- C:\Programme
2010-05-01 13:14:19 ----D---- C:\ProgramData\AL
2010-05-01 13:10:32 ----SHD---- C:\$Recycle.Bin
2010-05-01 13:10:15 ----RD---- C:\Users
2010-05-01 13:07:11 ----D---- C:\Windows\System32
2010-05-01 13:07:11 ----D---- C:\Windows\inf
2010-05-01 13:07:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-05-01 12:13:30 ----D---- C:\ProgramData\Spyware Terminator
2010-05-01 12:13:30 ----D---- C:\Program Files\Spyware Terminator
2010-05-01 05:34:20 ----D---- C:\Users\David\AppData\Roaming\4shared Desktop
2010-05-01 00:00:11 ----SHD---- C:\System Volume Information
2010-04-24 10:41:59 ----D---- C:\1
2010-04-24 10:39:01 ----D---- C:\Windows\system32\Tasks
2010-04-24 10:31:17 ----SHD---- C:\Windows\Installer
2010-04-24 09:44:44 ----D---- C:\Windows\winsxs
2010-04-24 09:10:35 ----D---- C:\6
2010-04-24 09:06:51 ----D---- C:\Windows\system32\drivers
2010-04-23 16:01:00 ----HD---- C:\ProgramData
2010-04-23 16:00:48 ----RSD---- C:\Windows\Fonts
2010-04-23 16:00:45 ----D---- C:\Windows
2010-04-23 16:00:45 ----D---- C:\Program Files\Common Files
2010-04-22 21:55:34 ----D---- C:\Users\David\AppData\Roaming\Skype
2010-04-09 19:14:38 ----D---- C:\Program Files\JDownloader
2010-04-03 21:09:26 ----D---- C:\Program Files\Mozilla Firefox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2008-07-19 23152]
R1 aswSP;avast! Self Protection; C:\Windows\system32\drivers\aswSP.sys [2008-07-19 78416]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2008-07-19 42912]
R1 CSC;Offline Files Driver; C:\Windows\system32\drivers\csc.sys [2008-04-05 350720]
R1 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys [2006-07-24 5632]
R2 Aspi32;Aspi32; C:\Windows\System32\drivers\aspi32.sys [2009-10-11 16512]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\DRIVERS\aswMonFlt.sys [2008-07-19 51280]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2009-10-12 281760]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2009-10-12 25888]
R2 Sentinel;Sentinel; C:\Windows\System32\Drivers\SENTINEL.SYS [2006-12-21 90688]
R2 SentinelFilter;SentinelFilter; \??\C:\Program Files\JDownloader\downloads\SURFCAM\SURFCAM\crack\SENTINELFILTER.SYS [2006-11-10 256256]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-02-14 2061528]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\Windows\system32\DRIVERS\LVPr2Mon.sys [2007-02-06 25632]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-06-25 7468544]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-02-14 118784]
R3 SAgentDriver;SAgent Driver; \??\C:\Program Files\SoftActivity\SKL\sagendrv.sys [2009-01-07 31088]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2009-01-13 19336]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2009-01-13 49160]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-04-05 83328]
S3 alc9husw;alc9husw; C:\Windows\system32\drivers\alc9husw.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-04-05 5632]
S3 DualCoreCenter;DualCoreCenter; \??\C:\Program Files\MSI\DualCoreCenter\NTGLM7X.sys [2008-02-27 28160]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 LVcKap;Logitech AEC Driver; C:\Windows\system32\DRIVERS\LVcKap.sys [2007-02-06 1691808]
S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\Windows\system32\DRIVERS\LVMVDrv.sys [2007-02-06 1964064]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBSta.sys [2007-02-03 41504]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-04-05 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-04-05 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-04-05 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-04-05 6016]
S3 PID_0928;Logitech QuickCam Express(PID_0928); C:\Windows\system32\DRIVERS\LV561AV.SYS [2007-02-03 490784]
S3 RushTopDevice2;RushTopDevice2; \??\C:\Program Files\MSI\DualCoreCenter\RushTop.sys [2008-05-15 56320]
S3 SANDRA;SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP1\WNt500x86\Sandra.sys [2008-10-31 22432]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\Windows\system32\DRIVERS\ss_bus.sys [2005-08-30 58320]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\Windows\system32\DRIVERS\ss_mdfl.sys [2005-08-30 8304]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\Windows\system32\DRIVERS\ss_mdm.sys [2005-08-30 94000]
S3 systormflb;REVOLTEC FightBoard Advanced; C:\Windows\system32\DRIVERS\systormflb.sys []
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2009-01-13 29192]
S3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [2009-01-13 31240]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2009-01-13 14728]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-04-05 39936]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-04-05 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-04-05 386616]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2008-04-05 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2008-07-19 16056]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2008-07-19 147640]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2008-04-05 21504]
R2 LVPrcSrv;Process Monitor; c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe [2007-02-06 109344]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-06-25 118784]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2008-12-06 66872]
R2 RelevantKnowledge;RelevantKnowledge; C:\Program Files\RelevantKnowledge\rlservice.exe [2009-12-22 49792]
R2 Salsvc;Salsvc; C:\Program Files\SoftActivity\SKL\alsvc.exe [2009-02-17 38768]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2008-07-19 250040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2008-07-23 348344]
S2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe []
S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [2007-02-06 105248]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2008-04-05 21504]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-04-05 33800]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2008-04-05 523776]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 SandraAgentSrv;SiSoftware Deployment Agent Service; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP1\RpcAgentSrv.exe [2008-11-03 98488]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2008-04-05 21504]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2008-04-05 917504]

-----------------EOF-----------------

Rudy, problém se řeší zde http://www.viry.cz/forum/viewtopic.php?f=13&t=100634
Prosím zde lock .