VIRY.CZ

Ze strany poskytovatele internetu je vše ok.Pouze tvrdí,že jsou z pc odesílána stále nějaká data.

Logfile of random's system information tool 1.07 (written by random/random)
Run by xxx at 2010-05-13 15:13:06
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 85 GB (56%) free of 153 GB
Total RAM: 511 MB (47% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-02-09 279664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-02-09 812528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-12-19 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-12-19 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-02-09 279664]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Control Center"=C:\Program Files\ASUS\WLAN Card Utilities\Center.exe [2004-11-01 1569280]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2007-12-21 1443072]
"ioCentre"=C:\Genius\ioCentre\gTaskBar.exe [2007-12-17 61440]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-12-19 149280]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2007-06-29 286720]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-12-19 39408]
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2009-09-06 4608]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Documents and Settings\xxx\Nabídka Start\Programy\Po spuštění
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-05-13 15:13:06 ----D---- C:\rsit
2010-05-13 15:09:15 ----SHD---- C:\RECYCLER
2010-05-13 13:30:32 ----A---- C:\WINDOWS\MBR.exe
2010-05-13 13:30:25 ----A---- C:\WINDOWS\PEV.exe
2010-05-13 13:30:24 ----A---- C:\WINDOWS\SWREG.exe
2010-05-13 13:30:23 ----A---- C:\WINDOWS\zip.exe
2010-05-13 13:30:23 ----A---- C:\WINDOWS\grep.exe
2010-05-13 13:30:22 ----A---- C:\WINDOWS\sed.exe
2010-05-13 13:30:21 ----A---- C:\WINDOWS\SWSC.exe
2010-05-13 13:30:20 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-05-13 13:30:05 ----D---- C:\WINDOWS\ERDNT
2010-05-13 13:26:04 ----D---- C:\Qoobox
2010-05-13 13:20:13 ----D---- C:\Program Files\Trend Micro
2010-05-13 13:07:27 ----D---- C:\Documents and Settings\xxx\Data aplikací\Malwarebytes
2010-05-13 13:06:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-05-13 13:06:44 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-05-03 16:14:19 ----D---- C:\Documents and Settings\xxx\Data aplikací\IObit
2010-05-03 16:14:05 ----D---- C:\Program Files\IObit
2010-05-03 15:06:14 ----D---- C:\Program Files\Scorpions WinCheater
2010-04-18 18:40:49 ----D---- C:\Program Files\EA GAMES
2010-04-18 18:40:48 ----RA---- C:\WINDOWS\system32\vp6vfw.dll
2010-04-17 17:54:00 ----D---- C:\Documents and Settings\xxx\Data aplikací\gtk-2.0
2010-04-17 17:32:35 ----D---- C:\Program Files\GIMP-2.0

======List of files/folders modified in the last 1 months======

2010-05-13 15:09:39 ----D---- C:\Program Files
2010-05-13 15:08:34 ----D---- C:\WINDOWS\Temp
2010-05-13 15:08:34 ----D---- C:\Program Files\Mozilla Firefox
2010-05-13 15:06:46 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-05-13 15:06:34 ----SH---- C:\boot.ini
2010-05-13 15:06:34 ----A---- C:\WINDOWS\win.ini
2010-05-13 15:06:34 ----A---- C:\WINDOWS\system.ini
2010-05-13 15:06:30 ----D---- C:\WINDOWS\pss
2010-05-13 14:02:00 ----D---- C:\WINDOWS
2010-05-13 13:50:21 ----D---- C:\WINDOWS\system32\CatRoot2
2010-05-13 13:35:39 ----D---- C:\WINDOWS\system32\drivers
2010-05-13 13:35:39 ----D---- C:\WINDOWS\system32
2010-05-13 13:35:39 ----D---- C:\WINDOWS\AppPatch
2010-05-13 13:35:33 ----D---- C:\Program Files\Common Files
2010-05-13 13:20:21 ----SHD---- C:\WINDOWS\Installer
2010-05-13 13:20:17 ----SD---- C:\Documents and Settings\xxx\Data aplikací\Microsoft
2010-05-13 13:17:57 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-05-12 17:57:58 ----D---- C:\Documents and Settings\xxx\Data aplikací\Skype
2010-05-12 17:47:11 ----D---- C:\Documents and Settings\xxx\Data aplikací\Spyware Terminator
2010-05-12 17:36:09 ----D---- C:\WINDOWS\system32\config
2010-05-12 17:36:00 ----D---- C:\WINDOWS\system32\wbem
2010-05-12 17:35:59 ----D---- C:\WINDOWS\Registration
2010-05-12 17:35:19 ----D---- C:\WINDOWS\system32\Restore
2010-05-11 16:00:01 ----AD---- C:\Program Files\Krtecek
2010-05-10 00:07:36 ----D---- C:\Documents and Settings\xxx\Data aplikací\vlc
2010-05-07 16:04:15 ----D---- C:\Documents and Settings\xxx\Data aplikací\skypePM
2010-05-03 17:16:50 ----SD---- C:\WINDOWS\Tasks
2010-05-03 16:08:00 ----D---- C:\WINDOWS\Minidump
2010-05-03 16:04:17 ----D---- C:\Program Files\CCleaner
2010-05-03 15:48:35 ----D---- C:\Program Files\Barbie(TM)
2010-05-03 15:44:29 ----D---- C:\Games
2010-05-03 15:41:59 ----HD---- C:\Program Files\InstallShield Installation Information
2010-05-03 15:41:58 ----A---- C:\WINDOWS\KA.ini
2010-05-03 15:40:54 ----D---- C:\Program Files\Axxin Wow Logo Creator
2010-05-03 15:39:45 ----D---- C:\Program Files\Moje zahrada - 3D
2010-05-03 15:39:01 ----D---- C:\Program Files\RedShift
2010-05-03 15:33:49 ----D---- C:\Program Files\Common Files\InstallShield
2010-05-03 15:33:42 ----D---- C:\Program Files\BSP Multimedia
2010-05-03 15:32:18 ----RSD---- C:\WINDOWS\Fonts
2010-05-03 15:28:22 ----D---- C:\Program Files\ICQ6Toolbar
2010-04-25 21:19:47 ----D---- C:\Program Files\Numericon
2010-04-25 21:19:46 ----D---- C:\Program Files\Messenger
2010-04-25 21:19:43 ----D---- C:\Program Files\Absolute Mastermind
2010-04-25 21:19:15 ----D---- C:\hry
2010-04-25 21:19:14 ----D---- C:\FIFA 09 Demo
2010-04-20 08:27:32 ----D---- C:\Documents and Settings\xxx\Data aplikací\XnView
2010-04-18 13:48:19 ----D---- C:\Program Files\Emilka Holubová - Montezumův poklad
2010-04-14 17:20:00 ----D---- C:\Nostale(CZ)

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 easdrv;easdrv; C:\WINDOWS\system32\DRIVERS\easdrv.sys [2007-12-21 30216]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2007-12-21 53768]
R1 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-04-14 1897408]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R2 eamon;EAMON; C:\WINDOWS\system32\DRIVERS\eamon.sys [2007-12-21 39944]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2007-12-21 71176]
R2 MDC8021X;AEGIS Protocol (IEEE 802.1x) v2.3.1.9; C:\WINDOWS\system32\DRIVERS\mdc8021x.sys [2002-01-01 15781]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 ASNDIS5;ASNDIS5 Protocol Driver; \??\C:\WINDOWS\system32\ASNDIS5.SYS []
R3 BTDriver;Ovladač virtuálních komunikací Bluetooth; C:\WINDOWS\system32\DRIVERS\btport.sys [2008-02-04 37160]
R3 BTKRNL;Enumenátor sběrnice Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2009-03-19 991136]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2007-12-21 30728]
R3 gHidPnp;USB Device Enhanced Function Driver; C:\WINDOWS\System32\Drivers\gHidPnp.Sys [2009-04-28 19456]
R3 gMouUsb16;USB 16-bit Mouse Device Drv; C:\WINDOWS\system32\DRIVERS\gMouUsb16.sys [2008-12-25 9216]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 rtl8139;Realtek RTL8139/810x Family Fast Ethernet NIC NT Driver; C:\WINDOWS\system32\DRIVERS\R8139n51.SYS [2003-07-31 46976]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-08-29 578304]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 btaudio;Zvukové zařízení Bluetooth; C:\WINDOWS\system32\drivers\btaudio.sys [2009-02-18 534312]
S3 BTWDNDIS;Server pro přístup k síti LAN Bluetooth; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2008-07-24 156816]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2008-10-30 47272]
S3 catchme;catchme; \??\C:\DOCUME~1\xxx\LOCALS~1\Temp\catchme.sys []
S3 gMouPS2;PS2 Scroll Mouse Device; C:\WINDOWS\system32\DRIVERS\gMouPS2.sys [2006-07-12 17408]
S3 RT2500USB;ASUS USB Wireless LAN Driver; C:\WINDOWS\system32\DRIVERS\rt2500usb.sys [2004-08-13 140544]
S3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2007-11-21 104320]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-09-06 716272]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2009-03-23 349528]
R2 ekrn;Eset Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2007-12-21 468224]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-12-19 153376]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-08-08 487424]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-09 135664]
S3 EhttpSrv;Eset HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2007-12-21 19200]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-12-19 182768]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]

-----------------EOF-----------------

Dnes jste provedl sken ComboFix. Dejte z něj log.

Jedná se o pc přítelkyně.Dostanu se k němu zas až zítra.Budu rád,když mi pak poradíte.Děkuji

malej1 píše:Jedná se o pc přítelkyně.Dostanu se k němu zas až zítra.Budu rád,když mi pak poradíte.Děkuji

I zítra zde budu.

ComboFix 10-05-12.03 - xxx 14.05.2010 15:08:43.2.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.511.257 [GMT 2:00]
Spuštěný z: c:\documents and settings\xxx\Plocha\ComboFix.exe
AV: ESET Smart Security 3.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-04-14 do 2010-05-14 )))))))))))))))))))))))))))))))
.

2010-05-13 13:13 . 2010-05-13 13:13 -------- d-----w- C:\rsit
2010-05-13 11:20 . 2010-05-13 11:20 -------- d-----w- c:\program files\Trend Micro
2010-05-13 11:06 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-05-13 11:06 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-05-13 11:06 . 2010-05-13 11:07 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-05-12 15:35 . 2010-05-12 15:35 -------- d-----w- c:\windows\system32\wbem\Repository
2010-05-03 14:14 . 2010-05-03 14:14 -------- d-----w- c:\program files\IObit
2010-05-03 13:06 . 2010-05-03 13:13 -------- d-----w- c:\program files\Scorpions WinCheater
2010-04-18 16:40 . 2010-05-03 12:50 -------- d-----w- c:\program files\EA GAMES
2010-04-18 16:40 . 2005-02-26 05:34 442368 ----a-r- c:\windows\system32\vp6vfw.dll
2010-04-17 15:53 . 2010-04-17 15:53 -------- d-----w- c:\documents and settings\xxx\.thumbnails
2010-04-17 15:42 . 2010-04-25 18:25 -------- d-----w- c:\documents and settings\xxx\.gimp-2.6
2010-04-17 15:32 . 2010-04-17 15:37 -------- d-----w- c:\program files\GIMP-2.0

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-05-13 11:37 . 2009-11-08 18:35 -------- d-----r- c:\windows\Fonts\Photoshop CS2\Adobe(R) Photoshop(R) CS2
2010-05-11 14:00 . 2009-08-08 16:06 -------- d---a-w- c:\program files\Krtecek
2010-05-03 14:04 . 2010-01-13 07:55 -------- d-----w- c:\program files\CCleaner
2010-05-03 13:48 . 2010-03-28 18:24 -------- d-----w- c:\program files\Barbie(TM)
2010-05-03 13:41 . 2002-01-01 03:42 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-05-03 13:40 . 2009-09-29 17:09 -------- d-----w- c:\program files\Axxin Wow Logo Creator
2010-05-03 13:39 . 2009-09-16 09:08 -------- d-----w- c:\program files\Moje zahrada - 3D
2010-05-03 13:39 . 2009-09-03 18:02 -------- d-----w- c:\program files\RedShift
2010-05-03 13:33 . 2002-01-01 03:42 -------- d-----w- c:\program files\Common Files\InstallShield
2010-05-03 13:33 . 2009-08-12 09:12 -------- d-----w- c:\program files\BSP Multimedia
2010-05-03 13:28 . 2009-12-02 20:27 -------- d-----w- c:\program files\ICQ6Toolbar
2010-04-25 19:19 . 2010-04-09 19:24 -------- d-----w- c:\program files\Numericon
2010-04-25 19:19 . 2009-09-03 17:21 -------- d-----w- c:\program files\Absolute Mastermind
2010-04-18 11:48 . 2010-04-10 08:39 -------- d-----w- c:\program files\Emilka Holubová - Montezumův poklad
2010-03-28 16:43 . 2001-10-25 14:00 47206 ----a-w- c:\windows\system32\perfc005.dat
2010-03-28 16:43 . 2001-10-25 14:00 312970 ----a-w- c:\windows\system32\perfh005.dat
2009-08-16 15:06 . 2009-08-16 15:06 1123306 ----a-w- c:\program files\Cartoon_Recorder_setup.exe
.

------- Sigcheck -------

[-] 2008-10-03 . F587B0981034E79FF9C447C16CB66380 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((( SnapShot@2010-05-13_11.38.46 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-05-14 13:00 . 2010-05-14 13:00 16384 c:\windows\Temp\Perflib_Perfdata_c0.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-12-19 39408]
"AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 120\axcmd.exe" [2009-09-06 4608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Control Center"="c:\program files\ASUS\WLAN Card Utilities\Center.exe" [2004-11-01 1569280]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2007-12-21 1443072]
"ioCentre"="c:\genius\ioCentre\gTaskBar.exe" [2007-12-17 61440]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-12-19 149280]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2007-06-29 286720]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\xxx\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-3-23 603488]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [8.8.2009 15:56 142592]
R2 ekrn;Eset Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [21.12.2007 8:21 468224]
R3 gHidPnp;USB Device Enhanced Function Driver;c:\windows\system32\drivers\gHidPnp.sys [14.12.2009 18:46 19456]
R3 gMouUsb16;USB 16-bit Mouse Device Drv;c:\windows\system32\drivers\gMouUsb16.sys [14.12.2009 18:46 9216]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [9.2.2010 14:08 135664]
S3 gMouPS2;PS2 Scroll Mouse Device;c:\windows\system32\drivers\gMouPS2.sys [14.12.2009 18:46 17408]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [6.9.2009 19:05 716272]

--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - ASNDIS5
.
Obsah adresáře 'Naplánované úlohy'

2010-05-08 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-06-03 11:42]

2010-05-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-09 12:08]

2010-05-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-09 12:08]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/skins/
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Odeslat do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat do zařízení Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
FF - ProfilePath - c:\documents and settings\xxx\Data aplikací\Mozilla\Firefox\Profiles\pzkhxu4u.default\
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=skin&q=
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-05-14 15:15
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(3996)
c:\windows\system32\btmmhook.dll
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2010-05-14 15:19:15
ComboFix-quarantined-files.txt 2010-05-14 13:19
ComboFix2.txt 2010-05-13 11:41

Před spuštěním: Volných bajtů: 90 215 239 680
Po spuštění: Volných bajtů: 90 175 549 440

- - End Of File - - 6B7B94B35DEF94E812E4B9246713678A

Nic nebezpečného nevidím. Zkuste použít WinsockFix: http://www.spyware.cz/go.php?p=spyware&t=aplikace&id=22 . Utilita reinstaluje protokol TCP/IP. Pokud máte parametry sítě nastaveny ručně, budete je mujset po restartu znovu nastavit.

Zkusím to. Ale zas až zítra,to pc je odemne 40km daleko a kdybych ji ho sebral,tak mě ukamenuje.Nemohla by hrát hry. Zatím děkuji a ozvu se,jak to dopadlo.Hezký večer.

I vám hezký večer a ozvěte se.

Bůh žehnej Vám a celé Vaší rodině! Ten WinSockFix na to opravdu zabral.Ani jsem nemusel nic nastavovat. Moc tomu nerozumím,ale zřejmě tam měla nějakýho šmejda,který ji vymazal nějaký nastavení.V podrobnostech síťového nastavení má teď jiný hodnoty,než před tím.Nějaké tam před tím prý vůbec nebyly.Než jsem se obrátil na Vás,tak jsem to projížděl různýma programama.Nějaký viry tam byly,ale vše jsem smazal.Tak snad to bude o.k. a já budu mít konečně klid.Není nad to,když si ženská hraje s netem a chlapa nechá napokoji. Moc Vám děkuju a přeji hodně takových spokojených uživatelů tohoto fóra jako jsem já.Hezký den

Nemáte zač!