VIRY.CZ

tak jsem tu zas po dlouhe dobe ..Nevim o co presne jde ale vypadne me nekolikrat internet pritom to nema s pripojenim nic spolecnyho ,uz tu 2x byl technik a ze je vse v poradku a jeste se me i vypne monitor a je taky uplne v poradku a pc jede dal a snad jeste icq ze se po zobrazeni zprav hodi hlasku chyba pritom jsem to snad 5x instaloval uz si nevim rady ...tady je log ..

Logfile of random's system information tool 1.07 (written by random/random)
Run by Tester at 2010-06-02 11:58:39
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 14 GB (19%) free of 76 GB
Total RAM: 1014 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:59:00, on 2.6.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Administrator\Dokumenty\Stažené soubory\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Tester.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = socks=
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: F-Secure BlackLight Sensor - Unknown owner - C:\WINDOWS\TEMP\F-Secure\Anti-Virus\fsblsrv.exe (file missing)
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - Unknown owner - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\F-Secure\ORSP Client\fsorsp.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Služba Google Update (gupdate1ca774322411e0c) (gupdate1ca774322411e0c) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: MySQL - Unknown owner - C:\xampp\mysql\bin\mysqld.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - Unknown owner - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 7744 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-515967899-1644491937-1177238915-1004.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-515967899-1644491937-1177238915-1004.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-05-18 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB}]
PCTools Site Guard - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll [2006-08-01 825528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B56A7D7D-6927-48C8-A975-17DF180C71AC}]
PCTools Browser Monitor - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll [2006-08-01 850104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-01-08 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-01-08 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-01-03 1019128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2008-03-21 141848]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2008-03-21 166424]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2008-03-21 137752]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2008-08-15 30003200]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2010-01-08 149280]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-05-18 202256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\F-Secure Manager]
C:\Program Files\F-Secure\Common\FSM32.EXE [2008-12-04 182936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\F-Secure TNB]
C:\Program Files\F-Secure\FSGUI\TNBUtil.exe [2008-12-04 957024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.1\ICQ.exe [2010-05-27 133368]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Octoshape Streaming Services]
C:\Documents and Settings\Tester\Data aplikací\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [2009-01-08 70936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QIP2005]
C:\Program Files\QIP\qip.exe [2009-02-06 3367424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Seznam Postak]
C:\Program Files\Seznam.cz\postak.exe -s []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe [2007-06-13 528384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Program Files\uTorrent\uTorrent.exe [2010-02-20 319280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-03-17 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Warcraft III\Warcraft III.exe"="C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Program Files\Valve\Steam\SteamApps\rullers\counter-strike\hl.exe"="C:\Program Files\Valve\Steam\SteamApps\rullers\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server"
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\ICQ7.1\ICQ.exe"="C:\Program Files\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1"
"C:\Program Files\ICQ7.1\aolload.exe"="C:\Program Files\ICQ7.1\aolload.exe:*:Enabled:aolload.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.1\ICQ.exe"="C:\Program Files\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1"
"C:\Program Files\ICQ7.1\aolload.exe"="C:\Program Files\ICQ7.1\aolload.exe:*:Enabled:aolload.exe"

======List of files/folders created in the last 1 months======

2010-06-02 07:56:03 ----A---- C:\WINDOWS\system32\pkcs11wrapper.dll
2010-05-27 23:37:22 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ICQ
2010-05-27 23:36:15 ----D---- C:\Program Files\ICQ7.1
2010-05-27 21:51:22 ----D---- C:\rsit
2010-05-21 22:14:06 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Adobe Systems
2010-05-21 22:13:57 ----D---- C:\Program Files\Common Files\Adobe Systems Shared
2010-05-21 22:04:10 ----A---- C:\WINDOWS\system32\psisdecd.dll
2010-05-21 22:03:48 ----A---- C:\WINDOWS\system32\dxdllreg.exe
2010-05-20 14:20:48 ----D---- C:\Documents and Settings\Tester\Data aplikací\ICQ
2010-05-18 22:09:27 ----D---- C:\Program Files\Warcraft III
2010-05-18 20:45:04 ----A---- C:\WINDOWS\cdplayer.ini
2010-05-18 20:42:23 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2010-05-18 20:42:07 ----A---- C:\WINDOWS\system32\pndx5032.dll
2010-05-18 20:42:07 ----A---- C:\WINDOWS\system32\pndx5016.dll
2010-05-18 20:41:38 ----D---- C:\Program Files\Common Files\xing shared
2010-05-18 20:40:24 ----A---- C:\WINDOWS\system32\pncrt.dll
2010-05-18 20:40:21 ----D---- C:\Program Files\Real
2010-05-18 20:40:16 ----D---- C:\Program Files\Common Files\Real
2010-05-18 20:40:16 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Real
2010-05-18 20:40:13 ----D---- C:\Documents and Settings\Tester\Data aplikací\Real
2010-05-18 12:36:48 ----D---- C:\Documents and Settings\Tester\Data aplikací\GHISLER
2010-05-18 11:42:35 ----D---- C:\Documents and Settings\Tester\Data aplikací\FileZilla
2010-05-17 14:37:12 ----D---- C:\Program Files\Mad Scientist Productions
2010-05-14 20:59:02 ----D---- C:\ProgramData
2010-05-14 20:59:02 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Electronic Arts
2010-05-14 20:55:12 ----A---- C:\WINDOWS\system32\vp6vfw.dll
2010-05-14 20:55:09 ----D---- C:\Program Files\Microsoft WSE
2010-05-14 18:56:34 ----D---- C:\Program Files\Electronic Arts
2010-05-14 09:36:11 ----D---- C:\WINDOWS\Eurobattle.net
2010-05-13 22:12:09 ----D---- C:\Documents and Settings\Tester\Data aplikací\Hide IP NG
2010-05-13 16:33:08 ----D---- C:\Documents and Settings\Tester\Data aplikací\uTorrent
2010-05-12 14:35:26 ----D---- C:\Documents and Settings\Tester\Data aplikací\Octoshape
2010-05-12 10:46:01 ----D---- C:\Program Files\XviD
2010-05-12 10:44:42 ----D---- C:\Program Files\Gabest
2010-05-12 10:43:59 ----D---- C:\Program Files\AutoGK
2010-05-12 10:29:38 ----D---- C:\Program Files\Witcobber
2010-05-12 10:08:30 ----D---- C:\Program Files\ShrinkTo5Basic
2010-05-10 14:42:21 ----D---- C:\Ostatni soubory
2010-05-09 15:47:23 ----D---- C:\Documents and Settings\Tester\Data aplikací\COWON
2010-05-09 14:39:40 ----D---- C:\Documents and Settings\Tester\Data aplikací\Motive
2010-05-09 14:25:00 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Motive
2010-05-07 12:51:00 ----A---- C:\WINDOWS\ModemLog_Sony Ericsson Bluetooth Modem 062.txt
2010-05-04 19:36:23 ----D---- C:\Program Files\Auran
2010-05-04 16:15:13 ----D---- C:\Documents and Settings\Tester\Data aplikací\Crayon Physics Deluxe
2010-05-04 16:13:47 ----D---- C:\Program Files\Crayon Physics Deluxe Demo
2010-05-04 16:03:25 ----D---- C:\Program Files\Vypínač na dobrou noc
2010-05-03 19:18:35 ----D---- C:\Program Files\Cenega Czech
2010-05-03 18:57:11 ----D---- C:\Documents and Settings\Tester\Data aplikací\Mozilla

======List of files/folders modified in the last 1 months======

2010-06-02 11:58:46 ----D---- C:\Program Files\trend micro
2010-06-02 11:23:26 ----D---- C:\Program Files\Common Files\Akamai
2010-06-02 10:25:16 ----SD---- C:\WINDOWS\Tasks
2010-06-02 10:24:11 ----D---- C:\WINDOWS\Prefetch
2010-06-02 09:41:42 ----D---- C:\WINDOWS
2010-06-02 09:41:41 ----D---- C:\WINDOWS\temp
2010-06-02 09:25:32 ----D---- C:\WINDOWS\system32\CatRoot2
2010-06-02 07:56:03 ----D---- C:\WINDOWS\system32
2010-06-02 00:25:25 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-05-27 23:37:36 ----HD---- C:\Program Files\InstallShield Installation Information
2010-05-27 23:37:29 ----D---- C:\Program Files\ICQ6Toolbar
2010-05-27 23:36:15 ----RD---- C:\Program Files
2010-05-22 08:43:34 ----HD---- C:\WINDOWS\inf
2010-05-21 22:13:57 ----D---- C:\Program Files\Common Files
2010-05-21 22:11:57 ----SHD---- C:\WINDOWS\Installer
2010-05-21 22:11:22 ----D---- C:\Program Files\Common Files\Adobe
2010-05-21 22:10:59 ----D---- C:\Program Files\Adobe
2010-05-21 22:07:44 ----D---- C:\WINDOWS\system32\DirectX
2010-05-21 22:07:18 ----D---- C:\WINDOWS\RegisteredPackages
2010-05-21 22:06:55 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-05-21 22:06:49 ----D---- C:\WINDOWS\system32\drivers
2010-05-21 21:43:00 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Adobe
2010-05-21 21:27:24 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2010-05-21 16:56:57 ----SD---- C:\Documents and Settings\Tester\Data aplikací\Microsoft
2010-05-21 15:20:23 ----A---- C:\WINDOWS\win.ini
2010-05-20 14:32:09 ----D---- C:\Program Files\QIP
2010-05-18 22:03:28 ----D---- C:\Program Files\Warthog
2010-05-18 20:38:26 ----D---- C:\Program Files\Internet Explorer
2010-05-17 17:37:58 ----D---- C:\Documents and Settings
2010-05-16 22:12:16 ----D---- C:\Documents and Settings\Tester\Data aplikací\Adobe
2010-05-14 20:55:11 ----RSD---- C:\WINDOWS\assembly
2010-05-14 17:05:17 ----D---- C:\Program Files\Firefly Studios
2010-05-14 16:56:20 ----D---- C:\Program Files\Hollywood Hack
2010-05-14 16:50:40 ----D---- C:\Program Files\Seznam.cz
2010-05-14 16:41:36 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Firefly Studios
2010-05-13 16:33:16 ----D---- C:\Program Files\uTorrent
2010-05-12 10:45:22 ----D---- C:\Program Files\AviSynth 2.5
2010-05-11 10:30:46 ----D---- C:\Program Files\StealthBot 2.7
2010-05-10 16:07:27 ----D---- C:\Program Files\phpEditorIDE
2010-05-09 22:12:28 ----D---- C:\Program Files\Pure Pinball
2010-05-09 21:19:08 ----SHD---- C:\RECYCLER
2010-05-09 16:24:53 ----D---- C:\Documents and Settings\Tester\Data aplikací\DivX
2010-05-07 07:47:24 ----D---- C:\Program Files\Full Tilt Poker.Net
2010-05-07 07:34:23 ----D---- C:\Program Files\Google
2010-05-07 07:29:54 ----D---- C:\Program Files\FooLOps Dev Team
2010-05-07 07:26:47 ----D---- C:\Program Files\Polda 5
2010-05-04 15:51:18 ----D---- C:\Program Files\Polda
2010-05-04 15:50:58 ----D---- C:\Program Files\Rockstar Games

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 F-Secure HIPS;F-Secure HIPS Driver; \??\C:\Program Files\F-Secure\HIPS\drivers\fshs.sys []
R1 ikhfile;File Security Kernel Anti-Spyware Driver; C:\WINDOWS\system32\drivers\ikhfile.sys [2006-07-10 30592]
R1 ikhlayer;Kernel Anti-Spyware Driver; C:\WINDOWS\system32\drivers\ikhlayer.sys [2006-08-24 51072]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SysTool;SysTool Overclocking Utility; C:\WINDOWS\system32\DRIVERS\SysTool.sys [2006-11-10 24064]
R2 acedrv11;acedrv11; \??\C:\WINDOWS\system32\drivers\acedrv11.sys []
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R3 F-Secure Gatekeeper;F-Secure Gatekeeper; \??\C:\Program Files\F-Secure\Anti-Virus\minifilter\fsgk.sys []
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-03-17 5955872]
R3 monfilt;monfilt; C:\WINDOWS\system32\drivers\monfilt.sys [2008-02-14 1389056]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-08-07 111360]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2008-07-25 845184]
S3 fsbl;F-Secure BlackLight Engine Driver; \??\C:\Program Files\F-Secure\Anti-Virus\fsbldrv.sys []
S3 GarenaPEngine;GarenaPEngine; \??\C:\DOCUME~1\Tester\LOCALS~1\Temp\GIO50.tmp []
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 nm;Ovladač programu Sledování sítě; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-14 40320]
S3 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2007-11-06 34064]
S3 npkcrypt;npkcrypt; \??\C:\Program Files\Lineage II\system\npkcrypt.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 s125bus;Sony Ericsson Device 125 driver (WDM); C:\WINDOWS\system32\DRIVERS\s125bus.sys [2007-04-24 83336]
S3 s125mdfl;Sony Ericsson Device 125 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s125mdfl.sys [2007-04-24 15112]
S3 s125mdm;Sony Ericsson Device 125 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s125mdm.sys [2007-04-24 108680]
S3 s125mgmt;Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s125mgmt.sys [2007-04-24 100488]
S3 s125obex;Sony Ericsson Device 125 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s125obex.sys [2007-04-24 98696]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\WINDOWS\system32\DRIVERS\ss_bbus.sys [2009-03-20 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys [2009-03-20 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys [2009-03-20 121856]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 w200bus;Sony Ericsson W200 driver (WDM); C:\WINDOWS\system32\DRIVERS\w200bus.sys [2006-11-07 61504]
S3 w200mdfl;Sony Ericsson W200 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\w200mdfl.sys [2006-11-07 9328]
S3 w200mdm;Sony Ericsson W200 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\w200mdm.sys [2006-11-07 97056]
S3 w200mgmt;Sony Ericsson W200 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\w200mgmt.sys [2006-11-07 88560]
S3 w200obex;Sony Ericsson W200 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\w200obex.sys [2006-11-07 86368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 F-Secure Filter;F-Secure File System Filter; \??\C:\Program Files\F-Secure\Anti-Virus\Win2K\FSfilter.sys []
S4 F-Secure Recognizer;F-Secure File System Recognizer; \??\C:\Program Files\F-Secure\Anti-Virus\Win2K\FSrec.sys []
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 mchInjDrv;mchInjDrv; \??\C:\WINDOWS\TEMP\mc24.tmp []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Akamai;Akamai NetSession Interface; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S2 F-Secure Gatekeeper Handler Starter;FSGKHS; C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe [2010-02-01 215648]
S2 FSMA;F-Secure Management Agent; C:\Program Files\F-Secure\Common\FSMA32.EXE [2008-12-04 117400]
S2 FsUsbExService;FsUsbExService; C:\WINDOWS\system32\FsUsbExService.Exe [2009-03-31 233472]
S2 gupdate1ca774322411e0c;Služba Google Update (gupdate1ca774322411e0c); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-01 133104]
S2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-01-08 153376]
S2 McciCMService;McciCMService; C:\Program Files\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
S2 MySQL;MySQL; C:\xampp\mysql\bin\mysqld.exe --defaults-file=C:\xampp\mysql\bin\my.ini MySQL []
S2 SDhelper;PC Tools Spyware Doctor; C:\Program Files\Spyware Doctor\sdhelp.exe [2006-07-14 895160]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2010-05-21 72704]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-01-15 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 FSAUA;F-Secure Automatic Update Agent; C:\Program Files\F-Secure\FSAUA\program\fsaua.exe [2008-12-04 490080]
S3 FSDFWD;F-Secure Anti-Virus Firewall Daemon; C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe [2008-12-04 510560]
S3 F-Secure BlackLight Sensor;F-Secure BlackLight Sensor; C:\WINDOWS\TEMP\F-Secure\Anti-Virus\fsblsrv.exe []
S3 FSORSPClient;F-Secure ORSP Client; C:\Program Files\F-Secure\ORSP Client\fsorsp.exe [2008-12-04 55904]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2007-11-06 92792]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

docasne vypni F-Secure Anti-Virus Firewall a sleduj vypadky
+
prescanuj s MBAM

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4162

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

2.6.2010 14:14:41
mbam-log-2010-06-02 (14-14-41).txt

Scan type: Quick scan
Objects scanned: 201163
Time elapsed: 15 minute(s), 18 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

vycisti PC s CCleanerom a sleduj vypadky s vypnutym FW

tk jsem to vycistil nejake naznaky vypnuti monitoru apod se zatim neukazali

Opet se me monitor vypl a hned na to pc ,po zapnuti se ukazal dialog ze po zavazne chybe byl system obnoven a vytvoren protokol. uz nevim co mam delat ,prosim o jakoukoliv pomoc ...dekuji



Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4162

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

4.6.2010 14:56:08
mbam-log-2010-06-04 (14-56-08).txt

Scan type: Quick scan
Objects scanned: 201005
Time elapsed: 21 minute(s), 31 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Dobrý večer, záskok za kolegu
Monitor se Vám vypíná scela náhodně a po restartu je vše ok?
Kablíky od monitoru máte dobře zastrčené?

Stáhněte na plochu, ukončete všechna aktivní okna a spusťte ComboFix - http://download.bleepingcomputer.com/sUBs/ComboFix.exe

-souhlaste s instalací konzole pro zotavení

- ComboFix je třeba spustit pod účtem s právy administrátora

- Před použitím vypněte všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary

- Po spuštění se zobrazí podmínky užití, potvrďte je stiskem tlačítka Ano

- Dále postupujte dle pokynů, během aplikování ComboFixu neklikejte do zobrazujícího se okna

- Po dokončení skenování, trvajícího maximálně 10 minut, by měl program vytvořit log - C:\ComboFix.txt, zkopírujte celý jeho obsah sem

Zdravim ,
prominte to zdrzeni ale byl jsem odjety tak jsem nemohl driv odpovedet ...
Behem prohlizeni na internetu se me vypne monitor a hned na to za chvili se vypne pc i kvuli tomu byl problem s pripojenim k internetu a mozna to souvisi nejak s icq ale nebudu predbihat ,icq je zmetek tak nebo tak jdu na combofix a hned sem hodim log a jinak monitor je dobre zapojeny i to jsem kontroloval ze zacatku kdyz se me to jeste nestavalo tak casto

ComboFix 10-06-10.03 - Tester 11.06.2010 10:23:10.6.1 - x86 MINIMAL
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1014.819 [GMT 2:00]
Spuštěný z: c:\documents and settings\Tester\Plocha\ComboFix.exe
AV: F-Secure Profi Antivirus 8.01 *On-access scanning disabled* (Updated) {E7512ED5-4245-4B4D-AF3A-382D3F313F15}
FW: F-Secure Profi Antivirus 8.01 *disabled* {D4747503-0346-49EB-9262-997542F79BF4}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Anti Hack\Bendik's antidetection.exe
c:\documents and settings\Anti Hack\DropBnet2.exe
c:\documents and settings\hack\FileZilla_3.3.1_win32-setup.exe
c:\documents and settings\War3ModelEditor\War3ModelEditor.exe

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-05-11 do 2010-06-11 )))))))))))))))))))))))))))))))
.

2010-06-09 05:48 . 2010-06-09 06:00 -------- d-----w- c:\program files\PhotoFiltre
2010-06-05 08:30 . 2010-06-08 22:20 -------- d-----w- c:\program files\Full Tilt Poker
2010-06-05 08:11 . 2010-06-05 08:11 -------- d-----w- c:\windows\system32\drivers\NSS
2010-06-05 08:11 . 2010-06-05 08:11 -------- d-----w- c:\program files\Norton Security Scan
2010-06-05 08:11 . 2010-06-05 08:11 -------- d-----w- c:\program files\NortonInstaller
2010-06-02 05:56 . 2010-06-02 05:56 94208 ----a-w- c:\windows\system32\pkcs11wrapper.dll
2010-06-02 05:55 . 2010-06-02 05:56 -------- d-----w- c:\documents and settings\Tester\PKI
2010-05-27 21:36 . 2010-06-10 12:24 -------- d-----w- c:\program files\ICQ7.1
2010-05-27 19:51 . 2010-05-27 19:51 -------- d-----w- C:\rsit
2010-05-21 20:13 . 2010-05-21 20:13 -------- d-----w- c:\program files\Common Files\Adobe Systems Shared
2010-05-21 20:03 . 2002-12-11 22:14 46592 ----a-w- c:\windows\system32\dxdllreg.exe
2010-05-21 20:03 . 2002-08-29 01:41 31744 -c--a-w- c:\windows\system32\dllcache\pid.dll
2010-05-18 20:09 . 2010-05-21 19:26 -------- d-----w- c:\program files\Warcraft III
2010-05-18 18:41 . 2010-05-18 18:41 -------- d-----w- c:\program files\Common Files\xing shared
2010-05-18 18:40 . 2010-05-18 18:42 -------- d-----w- c:\program files\Real
2010-05-18 18:40 . 2010-05-18 18:42 -------- d-----w- c:\program files\Common Files\Real
2010-05-17 15:37 . 2009-04-22 20:53 17339664 ----a-w- c:\documents and settings\TS3.exe
2010-05-17 12:37 . 2010-05-21 19:19 -------- d-----w- c:\program files\Mad Scientist Productions
2010-05-14 18:59 . 2010-05-14 18:59 -------- d-----w- C:\ProgramData
2010-05-14 18:55 . 2008-09-05 00:22 447752 ----a-w- c:\windows\system32\vp6vfw.dll
2010-05-14 18:55 . 2010-05-14 18:55 -------- d-----w- c:\program files\Microsoft WSE
2010-05-14 16:56 . 2010-05-14 18:57 -------- d-----w- c:\program files\Electronic Arts
2010-05-14 07:36 . 2010-05-14 07:36 -------- d-----w- c:\windows\Eurobattle.net
2010-05-13 22:06 . 2010-05-13 22:06 664 ----a-w- c:\windows\system32\d3d9caps.dat
2010-05-12 08:46 . 2010-05-12 08:46 -------- d-----w- c:\program files\XviD
2010-05-12 08:44 . 2010-05-12 08:44 -------- d-----w- c:\program files\Gabest
2010-05-12 08:43 . 2010-05-12 08:46 -------- d-----w- c:\program files\AutoGK

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-11 08:10 . 2010-01-12 11:26 -------- d-----w- c:\program files\Common Files\Akamai
2010-06-02 11:17 . 2010-04-02 11:27 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-06-02 09:58 . 2010-04-02 21:09 -------- d-----w- c:\program files\trend micro
2010-05-27 21:37 . 2006-03-06 16:23 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-05-27 21:37 . 2005-06-23 16:23 -------- d-----w- c:\program files\ICQ6Toolbar
2010-05-21 20:11 . 2006-03-06 16:32 -------- d-----w- c:\program files\Common Files\Adobe
2010-05-20 12:32 . 2009-05-07 16:42 -------- d-----w- c:\program files\QIP
2010-05-18 20:03 . 2008-12-27 08:57 -------- d-----w- c:\program files\Warthog
2010-05-14 15:05 . 2010-01-28 22:28 -------- d-----w- c:\program files\Firefly Studios
2010-05-14 14:56 . 2010-03-05 10:43 -------- d-----w- c:\program files\Hollywood Hack
2010-05-14 14:50 . 2010-03-18 13:19 -------- d-----w- c:\program files\Seznam.cz
2010-05-13 14:33 . 2009-05-08 12:07 -------- d-----w- c:\program files\uTorrent
2010-05-12 08:45 . 2009-12-08 23:37 -------- d-----w- c:\program files\AviSynth 2.5
2010-05-12 08:29 . 2010-05-12 08:29 -------- d-----w- c:\program files\Witcobber
2010-05-12 08:08 . 2010-05-12 08:08 -------- d-----w- c:\program files\ShrinkTo5Basic
2010-05-11 08:30 . 2009-12-08 09:46 -------- d-----w- c:\program files\StealthBot 2.7
2010-05-10 14:07 . 2010-01-19 09:29 -------- d-----w- c:\program files\phpEditorIDE
2010-05-09 20:12 . 2010-04-27 12:16 -------- d-----w- c:\program files\Pure Pinball
2010-05-07 05:47 . 2009-11-16 10:27 -------- d-----w- c:\program files\Full Tilt Poker.Net
2010-05-07 05:34 . 2008-04-27 12:19 -------- d-----w- c:\program files\Google
2010-05-07 05:29 . 2010-02-21 09:07 -------- d-----w- c:\program files\FooLOps Dev Team
2010-05-07 05:26 . 2009-12-09 14:54 -------- d-----w- c:\program files\Polda 5
2010-05-04 17:36 . 2010-05-04 17:36 -------- d-----w- c:\program files\Auran
2010-05-04 17:15 . 2010-05-04 14:13 -------- d-----w- c:\program files\Crayon Physics Deluxe Demo
2010-05-04 14:03 . 2010-05-04 14:03 -------- d-----w- c:\program files\Vypínač na dobrou noc
2010-05-04 13:51 . 2010-05-02 13:17 -------- d-----w- c:\program files\Polda
2010-05-04 13:50 . 2008-09-30 17:13 -------- d-----w- c:\program files\Rockstar Games
2010-05-03 17:18 . 2010-05-03 17:18 -------- d-----w- c:\program files\Cenega Czech
2010-05-02 19:08 . 2010-01-27 17:00 -------- d-----w- c:\program files\CS
2010-05-02 19:07 . 2009-03-28 23:06 -------- d-----w- c:\program files\Valve
2010-05-02 17:11 . 2010-05-02 17:11 -------- d-----w- c:\program files\ProtectDisc Driver Installer
2010-05-02 10:53 . 2010-05-02 10:53 -------- d-----w- c:\program files\Eidos
2010-04-29 13:39 . 2010-04-02 11:27 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-29 13:39 . 2010-04-02 11:27 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-04-28 11:41 . 2010-04-28 11:39 -------- d-----w- c:\program files\IrfanView
2010-04-27 12:01 . 2010-04-27 12:01 -------- d-----w- c:\program files\AMX Mod X
2010-04-24 15:59 . 2010-04-24 15:59 -------- d-----w- c:\program files\ABCgames Cheater
2010-04-22 04:41 . 2010-04-22 04:41 -------- d-----w- c:\program files\3DO
2010-04-21 16:12 . 2010-04-21 16:12 -------- d-----w- c:\program files\Codemasters
2010-04-20 20:11 . 2010-01-28 23:07 108144 ----a-w- c:\windows\system32\CmdLineExt.dll
2010-04-19 08:58 . 2010-04-19 08:41 -------- d-----w- c:\program files\Scorpions WinCheater
2010-04-05 20:17 . 2001-10-25 14:00 447940 ----a-w- c:\windows\system32\perfh005.dat
2010-04-05 20:17 . 2001-10-25 14:00 86806 ----a-w- c:\windows\system32\perfc005.dat
2008-08-27 06:14 . 2008-08-27 06:25 3713720 ----a-w- c:\program files\amxmodx-1.8.1-base.zip
2006-05-29 03:27 . 2006-07-28 08:47 26723353 ----a-w- c:\program files\kiltron1plus.pk4
2006-05-29 02:20 . 2006-07-28 08:47 4420 ----a-w- c:\program files\kiltron1plus.txt
2005-12-05 16:28 . 2005-12-05 16:28 3673932 ------w- c:\program files\Dec2005_MDX1_x86_Archive.cab
2005-12-05 16:28 . 2005-12-05 16:28 1358864 ------w- c:\program files\Dec2005_d3dx9_28_x64.cab
2005-12-05 16:28 . 2005-12-05 16:28 86925 ------w- c:\program files\Oct2005_xinput_x64.cab
2005-12-05 16:28 . 2005-12-05 16:28 46247 ------w- c:\program files\Oct2005_xinput_x86.cab
2005-12-05 16:28 . 2005-12-05 16:28 41888 ------w- c:\program files\dxdllreg_x86.cab
2005-12-05 16:28 . 2005-12-05 16:28 916806 ------w- c:\program files\Dec2005_MDX1_x86.cab
2005-12-05 16:27 . 2005-12-05 16:27 1080344 ------w- c:\program files\Dec2005_d3dx9_28_x86.cab
2002-09-30 12:37 . 2007-05-27 20:53 2298711 ----a-w- c:\program files\manual_uk.pdf
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
2006-05-03 09:06 . 2009-12-08 23:36 163328 --sh--r- c:\windows\system32\flvDX.dll
2007-02-21 10:47 . 2009-12-08 23:36 31232 --sh--r- c:\windows\system32\msfDX.dll
.

------- Sigcheck -------

[-] 2008-06-12 . C71BB4782833750BF4C02AC30ED670B7 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-03-21 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-03-21 166424]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-03-21 137752]
"HDAudDeck"="c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe" [2008-08-15 30003200]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-01-08 149280]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-05-18 202256]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"Spyware Doctor"="c:\program files\Spyware Doctor\swdoctor.exe" [2006-09-06 2128016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-10-03 03:08 35696 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
2008-08-14 06:58 611712 ----a-w- c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\F-Secure Manager]
2008-12-04 14:02 182936 ----a-w- c:\program files\F-Secure\Common\FSM32.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\F-Secure TNB]
2008-12-04 13:59 957024 ----a-w- c:\program files\F-Secure\FSGUI\tnbutil.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2010-06-08 11:39 133368 ----a-w- c:\program files\ICQ7.1\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Octoshape Streaming Services]
2009-01-08 13:44 70936 ----a-w- c:\documents and settings\Tester\Data aplikací\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QIP2005]
2009-02-05 23:04 3367424 ----a-w- c:\program files\QIP\qip.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2009-10-09 12:11 25623336 ----a-r- c:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
2007-06-13 06:16 528384 ----a-r- c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
2010-02-20 16:04 319280 ----a-w- c:\program files\uTorrent\uTorrent.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Valve\\Steam\\SteamApps\\rullers\\counter-strike\\hl.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Samsung\\Samsung New PC Studio\\npsasvr.exe"=
"c:\\Program Files\\Samsung\\Samsung New PC Studio\\npsvsvr.exe"=
"c:\\Program Files\\ICQ7.1\\ICQ.exe"=
"c:\\Program Files\\ICQ7.1\\aolload.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4
"1032:TCP"= 1032:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface

R0 FSFW;F-Secure Firewall Driver;c:\windows\system32\drivers\fsdfw.sys [1.2.2010 11:19 79872]
S0 fsbts;fsbts;c:\windows\system32\drivers\fsbts.sys [1.2.2010 11:19 33920]
S1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files\F-Secure\HIPS\drivers\fshs.sys [1.2.2010 11:17 67808]
S1 SysTool;SysTool Overclocking Utility;c:\windows\system32\drivers\SysTool.sys [10.11.2006 15:08 24064]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [30.7.2008 7:51 277736]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe -k Akamai [14.4.2008 8:52 14336]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [7.2.2010 20:10 233472]
S2 gupdate1ca774322411e0c;Služba Google Update (gupdate1ca774322411e0c);c:\program files\Google\Update\GoogleUpdate.exe [1.7.2009 11:28 133104]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [23.6.2005 18:23 246520]
S3 F-Secure BlackLight Sensor;F-Secure BlackLight Sensor;c:\windows\TEMP\F-Secure\Anti-Virus\fsblsrv.exe --> c:\windows\TEMP\F-Secure\Anti-Virus\fsblsrv.exe [?]
S3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files\F-Secure\Anti-Virus\minifilter\fsgk.sys [1.2.2010 11:16 111296]
S3 fsbl;F-Secure BlackLight Engine Driver;\??\c:\program files\F-Secure\Anti-Virus\fsbldrv.sys --> c:\program files\F-Secure\Anti-Virus\fsbldrv.sys [?]
S3 FSORSPClient;F-Secure ORSP Client;c:\program files\F-Secure\ORSP Client\fsorsp.exe [1.2.2010 11:17 55904]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [7.2.2010 20:10 36608]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\Tester\LOCALS~1\Temp\GIO50.tmp --> c:\docume~1\Tester\LOCALS~1\Temp\GIO50.tmp [?]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [6.11.2007 22:22 34064]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [7.2.2010 20:11 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [7.2.2010 20:11 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [7.2.2010 20:11 121856]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [6.11.2009 12:10 845184]
S4 F-Secure Filter;F-Secure File System Filter;c:\program files\F-Secure\Anti-Virus\win2k\fsfilter.sys [1.2.2010 11:16 39776]
S4 F-Secure Recognizer;F-Secure File System Recognizer;c:\program files\F-Secure\Anti-Virus\win2k\fsrec.sys [1.2.2010 11:16 25184]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
Obsah adresáře 'Naplánované úlohy'

2010-06-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-01 09:26]

2010-06-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-01 09:26]

2010-06-10 c:\windows\Tasks\Norton Security Scan for Tester.job
- c:\program files\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-06-05 10:50]

2010-06-11 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-515967899-1644491937-1177238915-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 20:09]

2010-06-11 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-515967899-1644491937-1177238915-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 20:09]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/
uInternet Settings,ProxyServer = socks=
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - c:\program files\ICQ7.1\ICQ.exe
LSP: c:\program files\F-Secure\FSPS\program\FSLSP.DLL
FF - ProfilePath - c:\documents and settings\Tester\Data aplikací\Mozilla\Firefox\Profiles\hbt66v3v.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.2&q=
FF - component: c:\documents and settings\All Users.WINDOWS\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
FF - user.js: network.proxy.type - 0
FF - user.js: network.proxy.http -
FF - user.js: network.proxy.http_port - 0
FF - user.js: network.proxy.ssl -
FF - user.js: network.proxy.ssl_port - 0
FF - user.js: network.proxy.ftp -
FF - user.js: network.proxy.ftp_port - 0
FF - user.js: network.proxy.gopher -
FF - user.js: network.proxy.gopher_port - 0
FF - user.js: network.proxy.socks_version - 5
FF - user.js: network.proxy.socks -
FF - user.js: network.proxy.socks_port - 0
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

MSConfigStartUp-Seznam Postak - c:\program files\Seznam.cz\postak.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-06-11 10:34
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HDAudDeck = c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe 1????????????????????????????????????????????????

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine]
"ImagePath"="\??\c:\docume~1\Tester\LOCALS~1\Temp\GIO50.tmp"
.
Celkový čas: 2010-06-11 10:37:29
ComboFix-quarantined-files.txt 2010-06-11 08:37

Před spuštěním: Volných bajtů: 13 869 031 424
Po spuštění: Volných bajtů: 13 978 054 656

- - End Of File - - F1B86E99FE2A299AF6C6E6216C9D92DB

po AV stranke to vypada OK
S1 SysTool;SysTool Overclocking Utility nepouzil si nejaku podobnu ptakovinu na zvysenie vykonu
pouzi nejaky SW na sledovanie teploty napr, everest a uvidime

nn naposled to bylo kvuli vymene zakladni desce v servisu jinak zadne zmeny a pocitac kdome predesleho backdooru co me hlasil F-Secure a co se tady minule resilo s kolegyni motji nic nestalo az na tohle posledni dobou coz si nevim rady
vzal jsem to s tim everestem tady je zaklad logu ..

Vlastnosti procesoru:
Výrobce Intel
Verze Intel(R) Celeron(R) CPU 2.66GHz
Sériové číslo To Be Filled By O.E.M.
Nálepka To Be Filled By O.E.M.
Číslo dílu To Be Filled By O.E.M.
Externí takt 133 MHz
Maximální takt 3800 MHz
Aktuelní takt 2666 MHz
Typ Central Processor
Napětí 1.4 V
Status Aktivováno
Označení patice Socket 775



Vlastnosti senzorů:
Typ senzoru HDD (ISA 290h)

Teploty:
Základní deska 43 °C (109 °F)
Seagate ST380011A 43 °C (109 °F)

Ventilátory:
Skříň 3924 RPM
Napájení 3729 RPM

Napájecí napětí:
Jádro CPU 2.69 V
Aux 3.62 V
+3.3 V 3.34 V
+5 V 5.62 V
+12 V 9.12 V
-12 V -10.96 V
-5 V -3.13 V
Debug Info F FF AC B5
Debug Info T 43 00 00
Debug Info V A8 E2 D1 D1 96 C5 82 (03)

no neviem, tie napatia su dost rozlietane, ak mas moznost skus vymenit zdroj
doporucujem zalozit novu temu v sekcii operacne systemy s linkom na tuto temu, pretoze toto nebude AV problem