VIRY.CZ

Prosim o pomoc. Pc casto zamrza a nektere hry a programy se nepusti a vubec nereaguji.

RSIT:
Logfile of random's system information tool 1.08 (written by random/random)
Run by Marek at 2010-07-25 16:06:11
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (32%) free of 30 GB
Total RAM: 511 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:06:14, on 25.7.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20733)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\SpeedFan\speedfan.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I091.EXE
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Marek\Plocha\RSIT(2).exe
C:\Program Files\trend micro\Marek.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.bwin.com/cz/default.aspx?zoneid=19676
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [Speedfan] C:\Program Files\SpeedFan/speedfan.exe
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [EPSON Stylus C48 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I091.EXE /P23 "EPSON Stylus C48 Series" /O6 "USB001" /M "Stylus C48"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - D:\Icq 7.1\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - D:\Icq 7.1\ICQ7.1\ICQ.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Aloaha Card Service (AloahaCardSvc) - Wrocklage Intermedia GmbH - C:\Program Files\Wrocklage\ACardSVC.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: PDF Suite (pdfprint) - Wrocklage Intermedia GmbH - C:\Program Files\Wrocklage\pdfprint.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 5774 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-12-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-12-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-03-28 1017592]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Speedfan"=C:\Program Files\SpeedFan/speedfan.exe [2009-11-25 4009592]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2009-11-09 180224]
"EPSON Stylus C48 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I091.EXE [2005-05-17 99840]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-06-03 1144104]
"NokiaMServer"=C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-12-11 149280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^PDF Popup.lnk]
C:\PROGRA~1\WROCKL~1\creator.exe [2010-04-23 5260920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Marek^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.0.lnk]
C:\PROGRA~1\OPENOF~1.OR~\program\QUICKS~1.EXE [2008-10-04 393216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\QIP\qip.exe"="C:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\BitLord\BitLord.exe"="C:\Program Files\BitLord\BitLord.exe:*:Enabled:BitLord"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"D:\Bitlord\[PC Game] DOOM 3 (Extract and Play)\Doom 3\DOOM3DED.exe"="D:\Bitlord\[PC Game] DOOM 3 (Extract and Play)\Doom 3\DOOM3DED.exe:*:Enabled:DOOM 3"
"C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe"="C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe"="C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe:*:Enabled:Nokia Ovi Suite 2"
"C:\Program Files\Common Files\aloaha\CertInstaller.exe"="C:\Program Files\Common Files\aloaha\CertInstaller.exe:*:Enabled:CertInstaller"
"C:\Program Files\Wrocklage\AloahaEditor.exe"="C:\Program Files\Wrocklage\AloahaEditor.exe:*:Enabled:Aloaha PDF Editor"
"C:\Program Files\Wrocklage\creator.exe"="C:\Program Files\Wrocklage\creator.exe:*:Enabled:creator.exe"
"D:\CS 1.6\Counter-Strike 1.6\hl.exe"="D:\CS 1.6\Counter-Strike 1.6\hl.exe:*:Enabled:Half-Life Launcher"
"D:\Icq 7.1\ICQ7.1\ICQ.exe"="D:\Icq 7.1\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1"
"D:\Icq 7.1\ICQ7.1\aolload.exe"="D:\Icq 7.1\ICQ7.1\aolload.exe:*:Enabled:aolload.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Wrocklage\AloahaEditor.exe"="C:\Program Files\Wrocklage\AloahaEditor.exe:*:Enabled:Aloaha PDF Editor"
"C:\Program Files\Common Files\aloaha\CertInstaller.exe"="C:\Program Files\Common Files\aloaha\CertInstaller.exe:*:Enabled:CertInstaller"
"C:\Program Files\Wrocklage\creator.exe"="C:\Program Files\Wrocklage\creator.exe:*:Enabled:creator.exe"
"D:\Icq 7.1\ICQ7.1\ICQ.exe"="D:\Icq 7.1\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1"
"D:\Icq 7.1\ICQ7.1\aolload.exe"="D:\Icq 7.1\ICQ7.1\aolload.exe:*:Enabled:aolload.exe"

======File associations======

.scr - open - C:\WINDOWS\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-07-25 16:06:11 ----D---- C:\rsit
2010-07-25 16:06:04 ----SHD---- C:\RECYCLER
2010-07-25 16:03:39 ----A---- C:\ComboFix.txt
2010-07-25 15:46:03 ----D---- C:\Qoobox
2010-07-20 13:48:30 ----D---- C:\Program Files\MOJOSOFT
2010-07-20 13:48:30 ----D---- C:\Documents and Settings\Marek\Data aplikací\mojosoft
2010-07-19 12:42:48 ----D---- C:\Documents and Settings\Marek\Data aplikací\Nokia Ovi Suite
2010-07-19 11:13:06 ----HDC---- C:\WINDOWS\$NtUninstallWdf01009$
2010-07-19 11:01:54 ----D---- C:\Program Files\DIFX
2010-07-19 11:01:53 ----A---- C:\WINDOWS\system32\drivers\pccsmcfd.sys
2010-07-19 11:01:33 ----D---- C:\Program Files\PC Connectivity Solution
2010-07-19 11:01:02 ----A---- C:\WINDOWS\system32\drivers\nmwcdnsuc.sys
2010-07-19 11:01:02 ----A---- C:\WINDOWS\system32\drivers\nmwcdnsu.sys
2010-07-19 11:01:01 ----A---- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys
2010-07-19 11:01:00 ----A---- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys
2010-07-19 11:00:59 ----A---- C:\WINDOWS\system32\drivers\ccdcmbo.sys
2010-07-19 11:00:58 ----A---- C:\WINDOWS\system32\wdfcoinstaller01009.dll
2010-07-19 11:00:58 ----A---- C:\WINDOWS\system32\nmwcdcocls.dll
2010-07-19 11:00:58 ----A---- C:\WINDOWS\system32\drivers\ccdcmb.sys
2010-07-19 10:58:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\NokiaInstallerCache
2010-06-26 18:33:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\DivX

======List of files/folders modified in the last 1 months======

2010-07-25 16:06:12 ----D---- C:\Program Files\trend micro
2010-07-25 16:03:42 ----D---- C:\WINDOWS\system32\drivers
2010-07-25 16:03:17 ----D---- C:\WINDOWS\temp
2010-07-25 16:02:27 ----D---- C:\WINDOWS\system32\CatRoot2
2010-07-25 16:00:47 ----D---- C:\WINDOWS\Prefetch
2010-07-25 16:00:28 ----D---- C:\WINDOWS
2010-07-25 15:59:55 ----A---- C:\WINDOWS\system.ini
2010-07-25 15:59:02 ----D---- C:\Program Files\SpeedFan
2010-07-25 15:58:55 ----D---- C:\WINDOWS\system32\drivers\etc
2010-07-25 15:52:59 ----D---- C:\WINDOWS\system32
2010-07-25 15:52:59 ----D---- C:\WINDOWS\AppPatch
2010-07-25 15:52:55 ----D---- C:\Program Files\Common Files
2010-07-25 15:46:40 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-07-25 15:42:19 ----D---- C:\Documents and Settings\Marek\Data aplikací\ICQ
2010-07-24 13:36:40 ----D---- C:\Program Files\Mozilla Firefox
2010-07-20 13:48:30 ----RD---- C:\Program Files
2010-07-19 12:42:45 ----D---- C:\Documents and Settings\Marek\Data aplikací\Nokia
2010-07-19 11:13:22 ----HD---- C:\WINDOWS\inf
2010-07-19 11:07:51 ----SHD---- C:\WINDOWS\Installer
2010-07-19 11:07:00 ----D---- C:\Program Files\Nokia
2010-07-19 11:03:21 ----D---- C:\Program Files\Common Files\Nokia
2010-07-19 11:01:53 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-07-10 21:17:12 ----D---- C:\Program Files\PokerStars
2010-07-03 23:34:16 ----D---- C:\Program Files\CCleaner
2010-06-26 18:35:19 ----D---- C:\Program Files\DivX
2010-06-26 18:35:19 ----D---- C:\Program Files\Common Files\DivX Shared

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-11-14 43528]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2006-09-24 5248]
R0 uagp35;Filtr Microsoft AGPv3.5; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2008-04-14 44672]
R0 viaagp1;VIA AGP Filter; C:\WINDOWS\system32\DRIVERS\viaagp1.sys [2003-07-02 27904]
R0 viamraid;viamraid; C:\WINDOWS\system32\DRIVERS\viamraid.sys [2004-03-29 73600]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2009-11-09 59388]
R3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
R3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2004-08-23 821760]
R3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-03-29 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2009-05-23 29696]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys []
S3 mbr;mbr; \??\C:\DOCUME~1\Marek\LOCALS~1\Temp\mbr.sys []
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\WINDOWS\system32\drivers\nmwcdnsu.sys [2010-02-26 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\WINDOWS\system32\drivers\nmwcdnsuc.sys [2010-02-26 8320]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-03-28 246520]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-12-11 153376]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AloahaCardSvc;Aloaha Card Service; C:\Program Files\Wrocklage\ACardSVC.exe [2010-04-23 50808]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2010-04-22 85096]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 getPlusHelper;getPlus(R) Helper; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 pdfprint;PDF Suite; C:\Program Files\Wrocklage\pdfprint.exe [2010-04-23 50808]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

A log z combofixu:
ComboFix 10-07-24.03 - Marek 25.07.2010 15:48:54.8.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.511.267 [GMT 2:00]
Spuštěný z: c:\documents and settings\Marek\Plocha\ComboFix.exe
* Vytvořen nový Bod Obnovení

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\docume~1\Marek\LOCALS~1\Temp\sfamcc00001.dll
c:\docume~1\Marek\LOCALS~1\Temp\sfareca00001.dll
c:\documents and settings\Marek\Local Settings\temp\sfamcc00001.dll
c:\documents and settings\Marek\Local Settings\temp\sfareca00001.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-06-25 do 2010-07-25 )))))))))))))))))))))))))))))))
.

2010-07-20 11:48 . 2010-07-20 11:48 -------- d-----w- c:\program files\MOJOSOFT
2010-07-19 09:16 . 2010-07-19 09:16 -------- d-----w- c:\documents and settings\Marek\Data aplikac?
2010-07-19 09:01 . 2010-07-19 09:01 -------- d-----w- c:\program files\DIFX
2010-07-19 09:01 . 2008-08-26 08:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2010-07-19 09:01 . 2010-07-19 09:01 -------- d-----w- c:\program files\PC Connectivity Solution
2010-07-19 09:01 . 2010-02-26 12:21 8320 ----a-w- c:\windows\system32\drivers\nmwcdnsuc.sys
2010-07-19 09:01 . 2010-02-26 12:21 137344 ----a-w- c:\windows\system32\drivers\nmwcdnsu.sys
2010-07-19 09:01 . 2010-02-26 12:32 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys
2010-07-19 09:01 . 2010-02-26 12:32 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys
2010-07-19 09:00 . 2010-02-26 12:32 22528 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys
2010-07-19 09:00 . 2010-02-26 12:32 662016 ----a-w- c:\windows\system32\nmwcdcocls.dll
2010-07-19 09:00 . 2010-02-26 12:32 18176 ----a-w- c:\windows\system32\drivers\ccdcmb.sys
2010-07-19 09:00 . 2010-02-26 12:19 1461992 ----a-w- c:\windows\system32\wdfcoinstaller01009.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-25 13:59 . 2009-12-10 11:15 -------- d-----w- c:\program files\SpeedFan
2010-07-19 09:13 . 2010-07-19 09:13 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
2010-07-19 09:13 . 2010-07-19 09:13 0 ---ha-w- c:\windows\system32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
2010-07-19 09:07 . 2010-02-13 11:11 -------- d-----w- c:\program files\Nokia
2010-07-19 09:03 . 2010-02-13 11:16 -------- d-----w- c:\program files\Common Files\Nokia
2010-07-10 19:17 . 2010-01-10 19:10 -------- d-----w- c:\program files\PokerStars
2010-07-03 21:34 . 2009-12-10 10:52 -------- d-----w- c:\program files\CCleaner
2010-06-26 16:35 . 2009-12-24 18:36 -------- d-----w- c:\program files\Common Files\DivX Shared
2010-06-26 16:35 . 2009-12-24 18:32 -------- d-----w- c:\program files\DivX
2010-06-23 21:42 . 2010-06-23 21:42 -------- d-----w- c:\program files\NOS
2010-06-21 20:16 . 2010-04-19 19:13 -------- d-----w- c:\program files\Microsoft.NET
2010-05-11 07:42 . 2001-10-25 11:00 91846 ----a-w- c:\windows\system32\perfc005.dat
2010-05-11 07:42 . 2001-10-25 11:00 479240 ----a-w- c:\windows\system32\perfh005.dat
2009-08-31 13:25 . 2005-08-09 00:18 118000 ----a-w- c:\program files\mozilla firefox\components\qippipe.dll
.

------- Sigcheck -------

[-] 2009-10-29 . EC37726162FF477D0E38111CD11C3000 . 3598336 . . [7.00.6000.16945] . . c:\windows\SoftwareDistribution\Download\2d21da1b434f63ab8c96a1d526689a8b\sp3gdr\mshtml.dll
[-] 2009-10-29 . C4C38495BA7AFC2C1752501A6875B323 . 3602432 . . [7.00.6000.21148] . . c:\windows\SoftwareDistribution\Download\2d21da1b434f63ab8c96a1d526689a8b\sp3qfe\mshtml.dll
[7] 2008-04-14 . DAF9947DE2A6EA20AE524B7C50487E57 . 3066880 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\mshtml.dll
[-] 2008-03-29 . DBDDA1D78F879B4562DF99805490FC97 . 3593216 . . [7.00.6000.20733] . . c:\windows\ERDNT\cache\mshtml.dll
[-] 2008-03-29 . DBDDA1D78F879B4562DF99805490FC97 . 3593216 . . [7.00.6000.20733] . . c:\windows\system32\mshtml.dll
[-] 2008-03-29 . DBDDA1D78F879B4562DF99805490FC97 . 3593216 . . [7.00.6000.20733] . . c:\windows\system32\dllcache\mshtml.dll

[-] 2009-10-29 . 33D6B94981C3FB88F27CFBBE72B59122 . 832512 . . [7.00.6000.16945] . . c:\windows\SoftwareDistribution\Download\2d21da1b434f63ab8c96a1d526689a8b\sp3gdr\wininet.dll
[-] 2009-10-29 . 7CD98B487F578D12281B163E2FEF7487 . 841216 . . [7.00.6000.21148] . . c:\windows\SoftwareDistribution\Download\2d21da1b434f63ab8c96a1d526689a8b\sp3qfe\wininet.dll
[7] 2008-04-14 . 3FE5E65A7ED9EC98AEE9167CA07812D3 . 667136 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\wininet.dll
[-] 2008-03-29 . 32CC73F851F377B035A5B8216CAC63CE . 825344 . . [7.00.6000.20733] . . c:\windows\ERDNT\cache\wininet.dll
[-] 2008-03-29 . 32CC73F851F377B035A5B8216CAC63CE . 825344 . . [7.00.6000.20733] . . c:\windows\system32\wininet.dll
[-] 2008-03-29 . 32CC73F851F377B035A5B8216CAC63CE . 825344 . . [7.00.6000.20733] . . c:\windows\system32\dllcache\wininet.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Speedfan"="c:\program files\SpeedFan" [X]
"NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2009-11-09 180224]
"EPSON Stylus C48 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_S4I091.EXE" [2005-05-17 99840]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-06-03 1144104]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]
"nltide_3"="advpack.dll" [2008-03-29 124928]

c:\documents and settings\uzivatel\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-10-4 393216]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^PDF Popup.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\PDF Popup.lnk
backup=c:\windows\pss\PDF Popup.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Marek^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.0.lnk]
path=c:\documents and settings\Marek\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.0.lnk
backup=c:\windows\pss\OpenOffice.org 3.0.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-06-09 08:06 976832 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-04-04 05:42 36272 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2009-12-11 09:42 149280 ----a-w- c:\program files\Java\jre6\bin\jusched.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\QIP\\qip.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\BitLord\\BitLord.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"d:\\Bitlord\\[PC Game] DOOM 3 (Extract and Play)\\Doom 3\\DOOM3DED.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\Nokia\\Nokia Ovi Suite\\NokiaOviSuite.exe"=
"c:\\Program Files\\Common Files\\aloaha\\CertInstaller.exe"=
"c:\\Program Files\\Wrocklage\\AloahaEditor.exe"=
"c:\\Program Files\\Wrocklage\\creator.exe"=
"d:\\CS 1.6\\Counter-Strike 1.6\\hl.exe"=
"d:\\Icq 7.1\\ICQ7.1\\ICQ.exe"=
"d:\\Icq 7.1\\ICQ7.1\\aolload.exe"=

R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [19.4.2010 23:31 246520]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 AloahaCardSvc;Aloaha Card Service;c:\program files\Wrocklage\ACardSVC.exe [23.4.2010 23:46 50808]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [19.7.2010 11:01 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [19.7.2010 11:01 8320]
S3 pdfprint;PDF Suite;c:\program files\Wrocklage\pdfprint.exe [23.4.2010 23:50 50808]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
.
.
------- Doplňkový sken -------
.
uStart Page = https://www.bwin.com/cz/default.aspx?zoneid=19676
uSearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - d:\icq 7.1\ICQ7.1\ICQ.exe
FF - ProfilePath - c:\documents and settings\Marek\Data aplikací\Mozilla\Firefox\Profiles\spoohsnp.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - component: c:\program files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\components\FirefoxExtension.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.count", 24);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.size", 4096);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-25 16:00
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG10.00.00.01WORKSTATION"="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"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(2144)
c:\windows\system32\MSVCP71.dll
c:\program files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\SpeedFan\speedfan.exe
c:\program files\Common Files\Nokia\MPlatform\NokiaMServer.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Celkový čas: 2010-07-25 16:03:38 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-07-25 14:03

Před spuštěním: 9 928 904 704
Po spuštění: Volných bajtů: 10 008 322 048

- - End Of File - - A73713479A30F7C050B551786E5F5489
Kdo mi pomuze?

1. V PC chybí antivir.
2. CF smazal 4 položky, zbytek logu vypadá čistý. Nastala po skenu CF nějaká změna?

Rudy píše:1. V PC chybí antivir.
2. CF smazal 4 položky, zbytek logu vypadá čistý. Nastala po skenu CF nějaká změna?

antivir jsem musel smazat pc byl jeste nestabilnejsi. Zmena po CF nenastala a CF delam vzdycky jednou za 14dni a ty polozky co to smazalo se mi zda se tam objevujou znova a znova.

CF několik položek smazal. Nastala nějaká změna?

Novy CF
ComboFix 10-07-24.03 - Marek 25.07.2010 17:54:31.9.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.511.331 [GMT 2:00]
Spuštěný z: c:\documents and settings\Marek\Plocha\ComboFix.exe

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-06-25 do 2010-07-25 )))))))))))))))))))))))))))))))
.

2010-07-25 15:11 . 2010-07-25 15:11 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-07-25 14:56 . 2010-07-25 14:56 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2010-07-20 11:48 . 2010-07-20 11:48 -------- d-----w- c:\program files\MOJOSOFT
2010-07-19 09:16 . 2010-07-19 09:16 -------- d-----w- c:\documents and settings\Marek\Data aplikac?
2010-07-19 09:01 . 2010-07-19 09:01 -------- d-----w- c:\program files\DIFX
2010-07-19 09:01 . 2008-08-26 08:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2010-07-19 09:01 . 2010-07-19 09:01 -------- d-----w- c:\program files\PC Connectivity Solution
2010-07-19 09:01 . 2010-02-26 12:21 8320 ----a-w- c:\windows\system32\drivers\nmwcdnsuc.sys
2010-07-19 09:01 . 2010-02-26 12:21 137344 ----a-w- c:\windows\system32\drivers\nmwcdnsu.sys
2010-07-19 09:01 . 2010-02-26 12:32 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys
2010-07-19 09:01 . 2010-02-26 12:32 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys
2010-07-19 09:00 . 2010-02-26 12:32 22528 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys
2010-07-19 09:00 . 2010-02-26 12:32 662016 ----a-w- c:\windows\system32\nmwcdcocls.dll
2010-07-19 09:00 . 2010-02-26 12:32 18176 ----a-w- c:\windows\system32\drivers\ccdcmb.sys
2010-07-19 09:00 . 2010-02-26 12:19 1461992 ----a-w- c:\windows\system32\wdfcoinstaller01009.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-25 15:13 . 2009-12-10 11:15 -------- d-----w- c:\program files\SpeedFan
2010-07-25 15:09 . 2010-05-06 23:53 -------- d-----w- c:\program files\Wrocklage
2010-07-25 14:41 . 2005-08-06 10:26 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-07-25 14:06 . 2009-12-10 18:27 -------- d-----w- c:\program files\trend micro
2010-07-19 09:13 . 2010-07-19 09:13 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
2010-07-19 09:13 . 2010-07-19 09:13 0 ---ha-w- c:\windows\system32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
2010-07-19 09:07 . 2010-02-13 11:11 -------- d-----w- c:\program files\Nokia
2010-07-19 09:03 . 2010-02-13 11:16 -------- d-----w- c:\program files\Common Files\Nokia
2010-07-10 19:17 . 2010-01-10 19:10 -------- d-----w- c:\program files\PokerStars
2010-07-03 21:34 . 2009-12-10 10:52 -------- d-----w- c:\program files\CCleaner
2010-06-26 16:35 . 2009-12-24 18:36 -------- d-----w- c:\program files\Common Files\DivX Shared
2010-06-26 16:35 . 2009-12-24 18:32 -------- d-----w- c:\program files\DivX
2010-06-23 21:42 . 2010-06-23 21:42 -------- d-----w- c:\program files\NOS
2010-06-21 20:16 . 2010-04-19 19:13 -------- d-----w- c:\program files\Microsoft.NET
2010-05-11 07:42 . 2001-10-25 11:00 91846 ----a-w- c:\windows\system32\perfc005.dat
2010-05-11 07:42 . 2001-10-25 11:00 479240 ----a-w- c:\windows\system32\perfh005.dat
2009-08-31 13:25 . 2005-08-09 00:18 118000 ----a-w- c:\program files\mozilla firefox\components\qippipe.dll
.

------- Sigcheck -------

[-] 2009-10-29 . EC37726162FF477D0E38111CD11C3000 . 3598336 . . [7.00.6000.16945] . . c:\windows\SoftwareDistribution\Download\2d21da1b434f63ab8c96a1d526689a8b\sp3gdr\mshtml.dll
[-] 2009-10-29 . C4C38495BA7AFC2C1752501A6875B323 . 3602432 . . [7.00.6000.21148] . . c:\windows\SoftwareDistribution\Download\2d21da1b434f63ab8c96a1d526689a8b\sp3qfe\mshtml.dll
[7] 2008-04-14 . DAF9947DE2A6EA20AE524B7C50487E57 . 3066880 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\mshtml.dll
[-] 2008-03-29 . DBDDA1D78F879B4562DF99805490FC97 . 3593216 . . [7.00.6000.20733] . . c:\windows\ERDNT\cache\mshtml.dll
[-] 2008-03-29 . DBDDA1D78F879B4562DF99805490FC97 . 3593216 . . [7.00.6000.20733] . . c:\windows\system32\mshtml.dll
[-] 2008-03-29 . DBDDA1D78F879B4562DF99805490FC97 . 3593216 . . [7.00.6000.20733] . . c:\windows\system32\dllcache\mshtml.dll

[-] 2009-10-29 . 33D6B94981C3FB88F27CFBBE72B59122 . 832512 . . [7.00.6000.16945] . . c:\windows\SoftwareDistribution\Download\2d21da1b434f63ab8c96a1d526689a8b\sp3gdr\wininet.dll
[-] 2009-10-29 . 7CD98B487F578D12281B163E2FEF7487 . 841216 . . [7.00.6000.21148] . . c:\windows\SoftwareDistribution\Download\2d21da1b434f63ab8c96a1d526689a8b\sp3qfe\wininet.dll
[7] 2008-04-14 . 3FE5E65A7ED9EC98AEE9167CA07812D3 . 667136 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\wininet.dll
[-] 2008-03-29 . 32CC73F851F377B035A5B8216CAC63CE . 825344 . . [7.00.6000.20733] . . c:\windows\ERDNT\cache\wininet.dll
[-] 2008-03-29 . 32CC73F851F377B035A5B8216CAC63CE . 825344 . . [7.00.6000.20733] . . c:\windows\system32\wininet.dll
[-] 2008-03-29 . 32CC73F851F377B035A5B8216CAC63CE . 825344 . . [7.00.6000.20733] . . c:\windows\system32\dllcache\wininet.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Speedfan"="c:\program files\SpeedFan" [X]
"NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2009-11-09 180224]
"EPSON Stylus C48 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_S4I091.EXE" [2005-05-17 99840]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-06-03 1144104]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]
"nltide_3"="advpack.dll" [2008-03-29 124928]

c:\documents and settings\uzivatel\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-10-4 393216]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^PDF Popup.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\PDF Popup.lnk
backup=c:\windows\pss\PDF Popup.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Marek^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.0.lnk]
path=c:\documents and settings\Marek\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.0.lnk
backup=c:\windows\pss\OpenOffice.org 3.0.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-06-09 08:06 976832 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-04-04 05:42 36272 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2009-12-11 09:42 149280 ----a-w- c:\program files\Java\jre6\bin\jusched.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\QIP\\qip.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\BitLord\\BitLord.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"d:\\Bitlord\\[PC Game] DOOM 3 (Extract and Play)\\Doom 3\\DOOM3DED.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\Nokia\\Nokia Ovi Suite\\NokiaOviSuite.exe"=
"c:\\Program Files\\Common Files\\aloaha\\CertInstaller.exe"=
"c:\\Program Files\\Wrocklage\\AloahaEditor.exe"=
"c:\\Program Files\\Wrocklage\\creator.exe"=
"d:\\CS 1.6\\Counter-Strike 1.6\\hl.exe"=
"d:\\Icq 7.1\\ICQ7.1\\ICQ.exe"=
"d:\\Icq 7.1\\ICQ7.1\\aolload.exe"=

R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [19.4.2010 23:31 246520]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 AloahaCardSvc;Aloaha Card Service;c:\program files\Wrocklage\ACardSVC.exe [23.4.2010 23:46 50808]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [19.7.2010 11:01 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [19.7.2010 11:01 8320]
S3 pdfprint;PDF Suite;c:\program files\Wrocklage\pdfprint.exe [23.4.2010 23:50 50808]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [25.7.2010 17:11 691696]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
.
.
------- Doplňkový sken -------
.
uStart Page = https://www.bwin.com/cz/default.aspx?zoneid=19676
uSearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - d:\icq 7.1\ICQ7.1\ICQ.exe
FF - ProfilePath - c:\documents and settings\Marek\Data aplikací\Mozilla\Firefox\Profiles\spoohsnp.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - component: c:\program files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\components\FirefoxExtension.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.count", 24);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.size", 4096);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-25 18:01
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG10.00.00.01WORKSTATION"="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"
.
Celkový čas: 2010-07-25 18:03:48
ComboFix-quarantined-files.txt 2010-07-25 16:03

Před spuštěním: Volných bajtů: 10 235 387 904
Po spuštění: Volných bajtů: 10 228 490 240

- - End Of File - - 2DBD1CC46C9A32E8DBE64C08984F5D09

Ale spis mi vic starosti dela ze nemuzu spustit nektere aplikace a hry. Nekdy nenajede ani windows media player nebo mozilla. Nevim cim to muze byt.

Otevřte poznámkový blok a zkopírujte do něj:

FCopy::
c:\windows\system32\dllcache\mshtml.dll | c:\windows\system32\mshtml.dll
c:\windows\system32\dllcache\wininet.dll | c:\windows\system32\wininet.dll

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Tady je log:

ComboFix 10-07-24.03 - Marek 25.07.2010 19:14:51.10.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.511.233 [GMT 2:00]
Spuštěný z: c:\documents and settings\Marek\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Marek\Plocha\CFScript.txt

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\regedit.com
c:\windows\system32\taskmgr.com

.
--------------- FCopy ---------------

c:\windows\system32\dllcache\mshtml.dll --> c:\windows\system32\mshtml.dll
c:\windows\system32\dllcache\wininet.dll --> c:\windows\system32\wininet.dll
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-06-25 do 2010-07-25 )))))))))))))))))))))))))))))))
.

2010-07-25 17:14 . 2010-07-25 17:14 -------- d-----w- c:\windows\LastGood
2010-07-25 16:35 . 2010-07-25 16:35 -------- d---a-w- c:\windows\rundll16.exe
2010-07-25 16:35 . 2010-07-25 16:35 -------- d---a-w- c:\windows\logo1_.exe
2010-07-25 16:17 . 2010-07-25 16:17 -------- d---a-w- c:\windows\VDLL.DLL
2010-07-25 16:17 . 2010-07-25 16:17 -------- d---a-w- c:\windows\system32\runouce.exe
2010-07-25 16:17 . 2010-07-25 16:17 -------- d---a-w- c:\windows\RUNDL132.EXE
2010-07-25 16:17 . 2010-07-25 16:17 -------- d---a-w- c:\windows\logo_1.exe
2010-07-25 16:13 . 2010-07-25 16:13 632064 ----a-w- c:\windows\system32\msvcr80.dll
2010-07-25 16:13 . 2010-07-25 16:13 554240 ----a-w- c:\windows\system32\msvcp80.dll
2010-07-25 16:13 . 2010-07-25 16:13 34048 ----a-w- c:\windows\system32\eEmpty.exe
2010-07-25 16:13 . 2008-04-14 07:52 137216 ----a-w- c:\windows\system32\T.COM
2010-07-25 16:13 . 2008-04-14 07:52 147968 ----a-w- c:\windows\R.COM
2010-07-25 16:13 . 2010-07-25 16:13 -------- d-----w- c:\program files\Common Files\MicroWorld
2010-07-25 15:11 . 2010-07-25 15:11 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-07-25 14:56 . 2010-07-25 14:56 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2010-07-20 11:48 . 2010-07-20 11:48 -------- d-----w- c:\program files\MOJOSOFT
2010-07-19 09:16 . 2010-07-19 09:16 -------- d-----w- c:\documents and settings\Marek\Data aplikac?
2010-07-19 09:01 . 2010-07-19 09:01 -------- d-----w- c:\program files\DIFX
2010-07-19 09:01 . 2008-08-26 08:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2010-07-19 09:01 . 2010-07-19 09:01 -------- d-----w- c:\program files\PC Connectivity Solution
2010-07-19 09:01 . 2010-02-26 12:21 8320 ----a-w- c:\windows\system32\drivers\nmwcdnsuc.sys
2010-07-19 09:01 . 2010-02-26 12:21 137344 ----a-w- c:\windows\system32\drivers\nmwcdnsu.sys
2010-07-19 09:01 . 2010-02-26 12:32 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys
2010-07-19 09:01 . 2010-02-26 12:32 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys
2010-07-19 09:00 . 2010-02-26 12:32 22528 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys
2010-07-19 09:00 . 2010-02-26 12:32 662016 ----a-w- c:\windows\system32\nmwcdcocls.dll
2010-07-19 09:00 . 2010-02-26 12:32 18176 ----a-w- c:\windows\system32\drivers\ccdcmb.sys
2010-07-19 09:00 . 2010-02-26 12:19 1461992 ----a-w- c:\windows\system32\wdfcoinstaller01009.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-25 15:13 . 2009-12-10 11:15 -------- d-----w- c:\program files\SpeedFan
2010-07-25 15:09 . 2010-05-06 23:53 -------- d-----w- c:\program files\Wrocklage
2010-07-25 14:41 . 2005-08-06 10:26 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-07-25 14:06 . 2009-12-10 18:27 -------- d-----w- c:\program files\trend micro
2010-07-19 09:13 . 2010-07-19 09:13 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
2010-07-19 09:13 . 2010-07-19 09:13 0 ---ha-w- c:\windows\system32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
2010-07-19 09:07 . 2010-02-13 11:11 -------- d-----w- c:\program files\Nokia
2010-07-19 09:03 . 2010-02-13 11:16 -------- d-----w- c:\program files\Common Files\Nokia
2010-07-10 19:17 . 2010-01-10 19:10 -------- d-----w- c:\program files\PokerStars
2010-07-03 21:34 . 2009-12-10 10:52 -------- d-----w- c:\program files\CCleaner
2010-06-26 16:35 . 2009-12-24 18:36 -------- d-----w- c:\program files\Common Files\DivX Shared
2010-06-26 16:35 . 2009-12-24 18:32 -------- d-----w- c:\program files\DivX
2010-06-23 21:42 . 2010-06-23 21:42 -------- d-----w- c:\program files\NOS
2010-06-21 20:16 . 2010-04-19 19:13 -------- d-----w- c:\program files\Microsoft.NET
2010-05-11 07:42 . 2001-10-25 11:00 91846 ----a-w- c:\windows\system32\perfc005.dat
2010-05-11 07:42 . 2001-10-25 11:00 479240 ----a-w- c:\windows\system32\perfh005.dat
2009-08-31 13:25 . 2005-08-09 00:18 118000 ----a-w- c:\program files\mozilla firefox\components\qippipe.dll
.

((((((((((((((((((((((((((((( SnapShot@2010-07-25_16.01.14 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-03-29 15:06 . 2008-04-14 07:52 667136 c:\windows\system32\dllcache\wininet.dll
+ 2010-07-25 17:14 . 2008-03-29 15:06 825344 c:\windows\LastGood\system32\wininet.dll
+ 2008-03-29 15:06 . 2008-04-14 07:51 3066880 c:\windows\system32\dllcache\mshtml.dll
+ 2010-07-25 17:14 . 2008-03-29 15:06 3593216 c:\windows\LastGood\system32\mshtml.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Speedfan"="c:\program files\SpeedFan" [X]
"NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2009-11-09 180224]
"EPSON Stylus C48 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_S4I091.EXE" [2005-05-17 99840]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-06-03 1144104]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]
"nltide_3"="advpack.dll" [2008-03-29 124928]

c:\documents and settings\uzivatel\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-10-4 393216]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^PDF Popup.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\PDF Popup.lnk
backup=c:\windows\pss\PDF Popup.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Marek^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.0.lnk]
path=c:\documents and settings\Marek\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.0.lnk
backup=c:\windows\pss\OpenOffice.org 3.0.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-06-09 08:06 976832 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-04-04 05:42 36272 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2009-12-11 09:42 149280 ----a-w- c:\program files\Java\jre6\bin\jusched.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\QIP\\qip.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\BitLord\\BitLord.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"d:\\Bitlord\\[PC Game] DOOM 3 (Extract and Play)\\Doom 3\\DOOM3DED.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\Nokia\\Nokia Ovi Suite\\NokiaOviSuite.exe"=
"c:\\Program Files\\Common Files\\aloaha\\CertInstaller.exe"=
"c:\\Program Files\\Wrocklage\\AloahaEditor.exe"=
"c:\\Program Files\\Wrocklage\\creator.exe"=
"d:\\CS 1.6\\Counter-Strike 1.6\\hl.exe"=
"d:\\Icq 7.1\\ICQ7.1\\ICQ.exe"=
"d:\\Icq 7.1\\ICQ7.1\\aolload.exe"=

R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [19.4.2010 23:31 246520]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [25.7.2010 17:11 691696]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 AloahaCardSvc;Aloaha Card Service;c:\program files\Wrocklage\ACardSVC.exe [23.4.2010 23:46 50808]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [19.7.2010 11:01 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [19.7.2010 11:01 8320]
S3 pdfprint;PDF Suite;c:\program files\Wrocklage\pdfprint.exe [23.4.2010 23:50 50808]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
.
.
------- Doplňkový sken -------
.
uStart Page = https://www.bwin.com/cz/default.aspx?zoneid=19676
uSearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - d:\icq 7.1\ICQ7.1\ICQ.exe
FF - ProfilePath - c:\documents and settings\Marek\Data aplikací\Mozilla\Firefox\Profiles\spoohsnp.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - component: c:\program files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\components\FirefoxExtension.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.count", 24);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.size", 4096);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-25 19:22
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG10.00.00.01WORKSTATION"="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"
.
Celkový čas: 2010-07-25 19:24:06
ComboFix-quarantined-files.txt 2010-07-25 17:24
ComboFix2.txt 2010-07-25 16:03

Před spuštěním: Volných bajtů: 10 913 992 704
Po spuštění: Volných bajtů: 11 229 904 896

- - End Of File - - 17D155CBBFF109F5CEA397E70D280C49

Log již vypadá čistý. Nastala nějaká změna?

Rudy píše:Log již vypadá čistý. Nastala nějaká změna?

Noo zatim jsem nezaregistroval zadne zamrznuti takze v tomto ohledu asi jo. Ale porad nemuzu spustit nektere aplikace.

Zkuste je reinstalovat.

Rudy píše:Zkuste je reinstalovat.

Reinstalovat aplikace jsem zkousel, nepomohl ani reinstal celeho windowsu.. takze nevim. Ze by graficka karta?

Pokud nejdou spustit ani po reinstalu win, určitě to není virový problém. Zkuste reinstalovat ovladače zákl. desky a gr. karty. Pokud by to nepomohlo, znamená to hardwarovou chybu.

Rudy píše:Pokud nejdou spustit ani po reinstalu win, určitě to není virový problém. Zkuste reinstalovat ovladače zákl. desky a gr. karty. Pokud by to nepomohlo, znamená to hardwarovou chybu.

podle me to bude gr. karta .Ale takovy odbornik nejsem nevis kde bych prosimte mohl najit ty ovladace zaklad. desky a gr.karty?

Měl byste je mít na přiložených CD k hardwaru, případně je lze stáhnout z webu výrobce.