Neustále "hrabe" disk, prosím o kontrolu logu

[suchaf]

Dobrý den, prosím o kontrolu logu z RSIT, PC neustále pracuje disk a velmi ho zpomaluje. Ale dějě se to jen pod účtem jednoho uživatele. Děkuji za rady.

Logfile of random's system information tool 1.08 (written by random/random)
Run by struhova at 2010-08-06 13:35:49
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 25 GB (66%) free of 38 GB
Total RAM: 503 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:36:37, on 6.8.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\RealVNC\VNC4\winvnc4.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Java\jre6\bin\jucheck.exe
C:\Documents and Settings\struhova\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\struhova.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://r.office.microsoft.com/r/rlidOff ... ?clid=1029
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SetRefresh] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [SirScan] C:\Program Files\Free RW Soft\AW Caesar7\AWScanner\AWScanner.exe /AUTO
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\winvnc4.exe

--
End of file - 5823 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-12-11 1111320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SetRefresh"=C:\Program Files\Compaq\SetRefresh\SetRefresh.exe [2003-11-06 524800]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2010-07-12 2048352]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"SirScan"=C:\Program Files\Free RW Soft\AW Caesar7\AWScanner\AWScanner.exe [2007-02-27 960000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-05-13 26192168]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\srmclean]
C:\Cpqs\Scom\srmclean.exe [2001-07-24 36864]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^struhova^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2009-09-16 384512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [2009-09-04 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2009-07-31 11952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\RealVNC\VNC4\winvnc4.exe"="C:\Program Files\RealVNC\VNC4\winvnc4.exe:*:Enabled:winvnc4.exe"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG8\avgnsx.exe"="C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\Mozilla Thunderbird\thunderbird.exe"="C:\Program Files\Mozilla Thunderbird\thunderbird.exe:*:Enabled:Mozilla Thunderbird"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-08-06 13:18:56 ----D---- C:\WINDOWS\ie8updates
2010-08-06 13:16:25 ----A---- C:\WINDOWS\imsins.BAK
2010-08-06 13:16:05 ----D---- C:\WINDOWS\WBEM
2010-08-06 13:14:16 ----HDC---- C:\WINDOWS\ie8
2010-08-06 13:04:44 ----D---- C:\Program Files\trend micro
2010-08-06 13:04:36 ----D---- C:\rsit
2010-08-06 12:48:13 ----D---- C:\WINDOWS\pss
2010-08-06 12:38:44 ----D---- C:\Program Files\Defraggler
2010-08-06 12:31:42 ----SHD---- C:\RECYCLER
2010-08-06 12:19:30 ----A---- C:\ComboFix.txt
2010-08-06 12:09:21 ----A---- C:\Boot.bak
2010-08-06 12:09:15 ----RASHD---- C:\cmdcons
2010-08-06 12:06:09 ----A---- C:\WINDOWS\zip.exe
2010-08-06 12:06:09 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-08-06 12:06:09 ----A---- C:\WINDOWS\SWSC.exe
2010-08-06 12:06:09 ----A---- C:\WINDOWS\SWREG.exe
2010-08-06 12:06:09 ----A---- C:\WINDOWS\sed.exe
2010-08-06 12:06:09 ----A---- C:\WINDOWS\PEV.exe
2010-08-06 12:06:09 ----A---- C:\WINDOWS\NIRCMD.exe
2010-08-06 12:06:09 ----A---- C:\WINDOWS\MBR.exe
2010-08-06 12:06:09 ----A---- C:\WINDOWS\grep.exe
2010-08-06 12:06:01 ----D---- C:\WINDOWS\ERDNT
2010-08-06 12:04:58 ----D---- C:\Qoobox
2010-08-06 11:53:34 ----ASH---- C:\hiberfil.sys
2010-08-06 10:50:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2010-08-06 10:50:27 ----D---- C:\Program Files\SUPERAntiSpyware
2010-08-06 10:17:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-08-06 09:23:29 ----AD---- C:\WINDOWS\VDLL.DLL
2010-08-06 09:23:29 ----AD---- C:\WINDOWS\system32\runouce.exe
2010-08-06 09:23:29 ----AD---- C:\WINDOWS\rundll16.exe
2010-08-06 09:23:29 ----AD---- C:\WINDOWS\RUNDL132.EXE
2010-08-06 09:23:29 ----AD---- C:\WINDOWS\logo1_.exe
2010-08-06 09:23:29 ----AD---- C:\WINDOWS\logo_1.exe
2010-08-06 09:21:38 ----A---- C:\WINDOWS\system32\msvcr80.dll
2010-08-06 09:21:37 ----A---- C:\WINDOWS\system32\msvcp80.dll
2010-08-06 09:21:36 ----A---- C:\WINDOWS\system32\eEmpty.exe
2010-08-06 09:21:33 ----A---- C:\WINDOWS\system32\T.COM
2010-08-06 09:21:33 ----A---- C:\WINDOWS\R.COM
2010-08-06 09:21:31 ----D---- C:\Program Files\Common Files\MicroWorld
2010-08-06 09:21:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\MicroWorld
2010-08-06 09:16:33 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-08-06 09:12:18 ----D---- C:\Program Files\CCleaner
2010-08-06 08:14:44 ----D---- C:\Program Files\ESET
2010-08-06 08:12:09 ----SHD---- C:\WINDOWS\CSC
2010-08-03 08:31:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$
2010-07-14 08:24:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$

======List of files/folders modified in the last 1 months======

2010-08-06 13:36:13 ----D---- C:\Temp
2010-08-06 13:36:00 ----D---- C:\WINDOWS\Temp
2010-08-06 13:25:57 ----D---- C:\Documents and Settings\struhova\Data aplikací\Skype
2010-08-06 13:23:05 ----D---- C:\WINDOWS
2010-08-06 13:22:55 ----D---- C:\WINDOWS\system32
2010-08-06 13:22:25 ----D---- C:\WINDOWS\system32\cs-cz
2010-08-06 13:22:24 ----RSHD---- C:\WINDOWS\system32\dllcache
2010-08-06 13:22:24 ----HD---- C:\WINDOWS\inf
2010-08-06 13:22:24 ----D---- C:\WINDOWS\Help
2010-08-06 13:22:24 ----D---- C:\Program Files\Internet Explorer
2010-08-06 13:19:08 ----HD---- C:\WINDOWS\$hf_mig$
2010-08-06 13:16:11 ----D---- C:\WINDOWS\system32\config
2010-08-06 13:15:56 ----D---- C:\WINDOWS\Media
2010-08-06 13:15:44 ----D---- C:\WINDOWS\system32\CatRoot2
2010-08-06 13:09:45 ----D---- C:\WINDOWS\Debug
2010-08-06 13:04:44 ----RD---- C:\Program Files
2010-08-06 12:28:15 ----D---- C:\Documents and Settings\struhova\Data aplikací\skypePM
2010-08-06 12:16:11 ----A---- C:\WINDOWS\system.ini
2010-08-06 12:15:53 ----D---- C:\WINDOWS\system32\drivers\etc
2010-08-06 12:13:00 ----D---- C:\WINDOWS\system32\drivers
2010-08-06 12:13:00 ----D---- C:\WINDOWS\AppPatch
2010-08-06 12:12:50 ----D---- C:\Program Files\Common Files
2010-08-06 12:09:21 ----RASH---- C:\boot.ini
2010-08-06 12:06:08 ----SHD---- C:\System Volume Information
2010-08-06 12:06:08 ----D---- C:\WINDOWS\system32\Restore
2010-08-06 12:04:46 ----D---- C:\WINDOWS\Prefetch
2010-08-06 12:03:55 ----D---- C:\Program Files\Google
2010-08-06 12:03:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2010-08-06 12:03:53 ----SHD---- C:\WINDOWS\Installer
2010-08-06 12:00:01 ----D---- C:\WINDOWS\system32\drivers\Avg
2010-08-06 08:14:47 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-08-06 08:08:16 ----D---- C:\Program Files\Mozilla Thunderbird
2010-08-06 07:42:29 ----D---- C:\$AVG8.VAULT$
2010-08-06 07:12:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\avg8
2010-08-05 14:44:47 ----D---- C:\Program Files\Mozilla Firefox
2010-07-27 08:30:31 ----A---- C:\WINDOWS\system32\shell32.dll
2010-07-14 08:17:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AvgRkx86;avgrkx86.sys; C:\WINDOWS\System32\Drivers\avgrkx86.sys [2009-04-28 12552]
R1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-07-31 335240]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-07-31 27784]
R1 AvgTdiX;AVG8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2009-04-28 108552]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R3 {6080A529-897E-4629-A488-ABA0C29B635E};Intel(R) Graphics Platform (SoftBIOS) Driver; C:\WINDOWS\system32\drivers\ialmsbw.sys [2003-08-04 120094]
R3 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91};Intel(R) Graphics Chipset (KCH) Driver; C:\WINDOWS\system32\drivers\ialmkchw.sys [2003-08-04 96858]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 dot4;Ovladač MS IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2008-04-14 206976]
R3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys [2001-08-17 12928]
R3 dot4usb;Filtr Dot4USB Dot4USB Filter; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [2001-10-24 23808]
R3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2003-09-18 145408]
R3 HidBatt;Ovladač baterie zdroje UPS standardu HID; C:\WINDOWS\system32\DRIVERS\HidBatt.sys [2008-04-14 20352]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2003-08-04 91419]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-08-29 578304]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S1 P3;Ovladač procesoru Intel PentiumIII; C:\WINDOWS\system32\DRIVERS\p3.sys [2008-04-14 46592]
S3 catchme;catchme; \??\c:\Temp\catchme.sys []
S3 i81x;i81x; C:\WINDOWS\system32\DRIVERS\i81xnt5.sys [2004-08-03 161020]
S3 iAimFP0;iAimFP0; C:\WINDOWS\system32\DRIVERS\wADV01nt.sys [2004-08-03 12415]
S3 iAimFP1;iAimFP1; C:\WINDOWS\system32\DRIVERS\wADV02NT.sys [2004-08-03 12127]
S3 iAimFP2;iAimFP2; C:\WINDOWS\system32\DRIVERS\wADV05NT.sys [2004-08-03 11775]
S3 iAimFP3;iAimFP3; C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys [2004-08-03 12063]
S3 iAimFP4;iAimFP4; C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys [2004-08-03 19455]
S3 iAimFP5;iAimFP5; C:\WINDOWS\system32\DRIVERS\wADV07nt.sys [2004-08-03 11807]
S3 iAimFP6;iAimFP6; C:\WINDOWS\system32\DRIVERS\wADV08nt.sys [2004-08-03 11295]
S3 iAimFP7;iAimFP7; C:\WINDOWS\system32\DRIVERS\wADV09nt.sys [2004-08-03 11871]
S3 iAimTV0;iAimTV0; C:\WINDOWS\system32\DRIVERS\wATV01nt.sys [2004-08-03 29311]
S3 iAimTV1;iAimTV1; C:\WINDOWS\system32\DRIVERS\wATV02NT.sys [2004-08-03 19551]
S3 iAimTV3;iAimTV3; C:\WINDOWS\system32\DRIVERS\wATV04nt.sys [2004-08-03 33599]
S3 iAimTV4;iAimTV4; C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys [2004-08-03 23615]
S3 iAimTV5;iAimTV5; C:\WINDOWS\system32\DRIVERS\wATV10nt.sys [2004-08-03 25471]
S3 iAimTV6;iAimTV6; C:\WINDOWS\system32\DRIVERS\wATV06nt.sys [2004-08-03 22271]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 adpu320;adpu320; C:\WINDOWS\system32\DRIVERS\adpu320.sys [2002-05-08 105472]
S4 Symmpi;Symmpi; C:\WINDOWS\system32\DRIVERS\symmpi.sys [2002-04-04 28416]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avg8emc;AVG8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2009-07-31 908056]
R2 avg8wd;AVG8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-07-31 297752]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 WinVNC4;VNC Server Version 4; C:\Program Files\RealVNC\VNC4\winvnc4.exe [2005-03-11 455632]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-01 135664]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

[motji]

Hezké odpoledne
Poprosím o tento log
C:\ComboFix.txt

[suchaf]

Dobrý den, byl jsem teď mimo, přikládám log z combofixu, jinak před projetím combofixem nefungoval internet v prohlížečích, ale opět jen u tím samým uživatelem (jinak spojení bylo ok), po adminem také vše fungovalo, po scanu už je to ok.
Zdravím a děkuji.

ComboFix 10-08-10.04 - struhova 11.08.2010 10:03:47.2.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.503.146 [GMT 2:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
AV: AVG Anti-Virus Network Edition *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\struhova\Dokumenty\cc_20100806_125057.reg

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-07-11 do 2010-08-11 )))))))))))))))))))))))))))))))
.

2010-08-11 08:11 . 2010-08-11 08:11 53248 ----a-w- c:\temp\catchme.dll
2010-08-11 08:04 . 2010-08-11 08:04 -------- d-----w- c:\temp\WPDNSE
2010-08-11 07:58 . 2010-08-11 07:58 16384 ----atw- c:\temp\Perflib_Perfdata_f14.dat
2010-08-11 07:51 . 2010-08-11 07:51 -------- d-sh--w- c:\documents and settings\Administrator\PrivacIE
2010-08-11 07:50 . 2010-08-11 07:50 -------- d-sh--w- c:\documents and settings\Administrator\IETldCache
2010-08-09 07:38 . 2010-08-09 07:38 -------- d-----w- c:\temp\hsperfdata_struhova
2010-08-06 11:43 . 2010-08-06 11:43 -------- d-sh--w- c:\documents and settings\struhova\IECompatCache
2010-08-06 11:42 . 2010-08-06 11:42 -------- d-sh--w- c:\documents and settings\struhova\PrivacIE
2010-08-06 11:23 . 2010-08-06 11:23 -------- d-sh--w- c:\documents and settings\struhova\IETldCache
2010-08-06 11:18 . 2010-08-09 05:31 -------- d-----w- c:\windows\ie8updates
2010-08-06 11:14 . 2010-08-06 11:15 -------- dc-h--w- c:\windows\ie8
2010-08-06 11:09 . 2010-05-06 10:35 599040 ------w- c:\windows\system32\dllcache\msfeeds.dll
2010-08-06 11:09 . 2010-05-06 10:35 55296 ------w- c:\windows\system32\dllcache\msfeedsbs.dll
2010-08-06 11:09 . 2010-05-06 10:35 12800 ------w- c:\windows\system32\dllcache\xpshims.dll
2010-08-06 11:09 . 2010-05-06 10:35 247808 ------w- c:\windows\system32\dllcache\ieproxy.dll
2010-08-06 11:09 . 2010-05-06 10:35 1985536 ------w- c:\windows\system32\dllcache\iertutil.dll
2010-08-06 11:09 . 2010-05-06 10:35 743424 ------w- c:\windows\system32\dllcache\iedvtool.dll
2010-08-06 11:09 . 2010-05-06 10:35 11076096 ------w- c:\windows\system32\dllcache\ieframe.dll
2010-08-06 11:08 . 2010-04-16 11:43 41984 ------w- c:\windows\system32\dllcache\iecompat.dll
2010-08-06 11:04 . 2010-08-06 11:36 -------- d-----w- c:\program files\trend micro
2010-08-06 11:04 . 2010-08-06 11:05 -------- d-----w- C:\rsit
2010-08-06 10:38 . 2010-08-06 10:39 -------- d-----w- c:\program files\Defraggler
2010-08-06 09:55 . 2010-08-11 08:09 -------- d-----w- c:\temp\XScanner
2010-08-06 08:50 . 2010-08-06 08:50 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-08-06 07:25 . 2010-08-06 07:26 4542988 ----a-w- c:\windows\REGBK00.ZIP
2010-08-06 07:23 . 2010-08-06 07:23 -------- d---a-w- c:\windows\VDLL.DLL
2010-08-06 07:23 . 2010-08-06 07:23 -------- d---a-w- c:\windows\system32\runouce.exe
2010-08-06 07:23 . 2010-08-06 07:23 -------- d---a-w- c:\windows\rundll16.exe
2010-08-06 07:23 . 2010-08-06 07:23 -------- d---a-w- c:\windows\RUNDL132.EXE
2010-08-06 07:23 . 2010-08-06 07:23 -------- d---a-w- c:\windows\logo1_.exe
2010-08-06 07:23 . 2010-08-06 07:23 -------- d---a-w- c:\windows\logo_1.exe
2010-08-06 07:21 . 2010-08-06 07:21 632064 ----a-w- c:\windows\system32\msvcr80.dll
2010-08-06 07:21 . 2010-08-06 07:21 554240 ----a-w- c:\windows\system32\msvcp80.dll
2010-08-06 07:21 . 2010-08-06 07:21 34048 ----a-w- c:\windows\system32\eEmpty.exe
2010-08-06 07:21 . 2008-04-14 06:52 137216 ----a-w- c:\windows\system32\T.COM
2010-08-06 07:21 . 2008-04-14 06:52 147968 ----a-w- c:\windows\R.COM
2010-08-06 07:21 . 2010-08-06 07:21 -------- d-----w- c:\program files\Common Files\MicroWorld
2010-08-06 07:12 . 2010-08-06 10:41 -------- d-----w- c:\program files\CCleaner
2010-08-06 07:11 . 2010-08-06 07:11 664 ----a-w- c:\windows\system32\d3d9caps.dat
2010-08-06 06:14 . 2010-08-06 06:14 -------- d-----w- c:\program files\ESET

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-11 06:51 . 2006-11-30 11:27 -------- d-----w- c:\program files\Mozilla Thunderbird
2010-08-06 10:03 . 2007-07-17 09:32 -------- d-----w- c:\program files\Google
2010-06-17 04:41 . 2010-06-17 04:41 -------- d-----w- c:\program files\Common Files\Skype
2010-06-17 04:41 . 2010-06-17 04:41 -------- d-----r- c:\program files\Skype
2010-06-16 10:35 . 2010-06-11 05:51 -------- d-----w- c:\program files\Microsoft Works
2010-06-14 14:31 . 2004-08-18 02:00 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
2010-06-11 09:28 . 2004-09-03 04:48 63148 ----a-w- c:\windows\system32\perfc005.dat
2010-06-11 09:28 . 2004-09-03 04:48 382548 ----a-w- c:\windows\system32\perfh005.dat
.

((((((((((((((((((((((((((((( SnapShot@2010-08-06_10.16.11 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-08-11 07:50 . 2010-08-11 07:50 16384 c:\windows\Temp\Perflib_Perfdata_698.dat
+ 2005-06-29 10:55 . 2009-01-07 16:20 26144 c:\windows\system32\spupdsvc.exe
+ 2007-05-18 09:33 . 2009-01-07 16:20 17952 c:\windows\system32\spmsg.dll
+ 2004-08-18 02:00 . 2009-03-08 02:31 46592 c:\windows\system32\pngfilt.dll
+ 2009-01-07 16:20 . 2009-01-07 16:20 23552 c:\windows\system32\normaliz.dll
+ 2009-01-07 16:20 . 2009-01-07 16:20 24576 c:\windows\system32\nlsdl.dll
+ 2004-08-18 02:00 . 2009-03-08 02:31 48128 c:\windows\system32\mshtmler.dll
+ 2004-08-18 02:00 . 2009-03-08 02:31 66560 c:\windows\system32\mshtmled.dll
+ 2004-08-18 02:00 . 2009-03-08 02:31 45568 c:\windows\system32\mshta.exe
+ 2009-03-08 02:31 . 2009-03-08 02:31 13312 c:\windows\system32\msfeedssync.exe
+ 2009-03-08 02:31 . 2010-05-06 10:35 55296 c:\windows\system32\msfeedsbs.dll
+ 2004-08-18 02:00 . 2009-03-08 02:34 43008 c:\windows\system32\licmgr10.dll
+ 2004-08-18 02:00 . 2010-05-06 10:35 25600 c:\windows\system32\jsproxy.dll
+ 2004-08-18 02:00 . 2009-03-08 02:32 94720 c:\windows\system32\inseng.dll
+ 2004-08-18 02:00 . 2009-03-08 02:31 34816 c:\windows\system32\imgutil.dll
+ 2009-03-08 02:32 . 2009-03-08 02:32 36864 c:\windows\system32\ieudinit.exe
+ 2004-08-18 02:00 . 2009-03-08 02:32 71680 c:\windows\system32\iesetup.dll
+ 2004-08-18 02:00 . 2009-03-08 02:32 55808 c:\windows\system32\iernonce.dll
+ 2009-01-07 16:20 . 2009-01-07 16:20 26112 c:\windows\system32\idndl.dll
+ 2009-03-08 02:31 . 2009-03-08 02:31 59904 c:\windows\system32\icardie.dll
+ 2009-03-08 02:31 . 2009-03-08 02:31 46592 c:\windows\system32\dllcache\pngfilt.dll
+ 2009-03-08 02:31 . 2009-03-08 02:31 48128 c:\windows\system32\dllcache\mshtmler.dll
+ 2009-03-08 02:31 . 2009-03-08 02:31 66560 c:\windows\system32\dllcache\mshtmled.dll
+ 2009-03-08 02:31 . 2009-03-08 02:31 45568 c:\windows\system32\dllcache\mshta.exe
+ 2009-03-08 02:34 . 2009-03-08 02:34 43008 c:\windows\system32\dllcache\licmgr10.dll
+ 2009-03-08 02:33 . 2010-05-06 10:35 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2009-03-08 02:32 . 2009-03-08 02:32 94720 c:\windows\system32\dllcache\inseng.dll
+ 2009-03-08 02:31 . 2009-03-08 02:31 34816 c:\windows\system32\dllcache\imgutil.dll
+ 2009-03-08 02:32 . 2009-03-08 02:32 71680 c:\windows\system32\dllcache\iesetup.dll
+ 2009-03-08 02:32 . 2009-03-08 02:32 55808 c:\windows\system32\dllcache\iernonce.dll
+ 2004-08-18 02:00 . 2009-03-08 02:24 68608 c:\windows\system32\dllcache\hmmapi.dll
+ 2009-03-08 02:33 . 2009-03-08 02:33 18944 c:\windows\system32\dllcache\corpol.dll
+ 2009-03-08 02:32 . 2009-03-08 02:32 72704 c:\windows\system32\dllcache\admparse.dll
+ 2004-08-18 02:00 . 2009-03-08 02:33 18944 c:\windows\system32\corpol.dll
+ 2004-08-18 02:00 . 2009-03-08 02:32 72704 c:\windows\system32\admparse.dll
+ 2010-08-06 11:19 . 2009-03-08 02:33 12288 c:\windows\ie8updates\KB982381-IE8\xpshims.dll
+ 2010-08-06 11:19 . 2009-03-08 02:31 55296 c:\windows\ie8updates\KB982381-IE8\msfeedsbs.dll
+ 2010-08-06 11:19 . 2009-03-08 02:33 25600 c:\windows\ie8updates\KB982381-IE8\jsproxy.dll
+ 2010-08-06 11:14 . 2008-04-14 06:52 37888 c:\windows\ie8\url.dll
+ 2010-08-06 11:15 . 2009-03-08 14:57 58448 c:\windows\ie8\spuninst\iecustom.dll
+ 2010-08-06 11:14 . 2008-04-14 06:51 39424 c:\windows\ie8\pngfilt.dll
+ 2010-08-06 11:14 . 2008-04-14 06:51 96768 c:\windows\ie8\occache.dll
+ 2010-08-06 11:14 . 2008-04-14 05:42 56832 c:\windows\ie8\mshtmler.dll
+ 2010-08-06 11:14 . 2008-04-14 06:52 29184 c:\windows\ie8\mshta.exe
+ 2010-08-06 11:14 . 2008-04-14 06:51 22016 c:\windows\ie8\licmgr10.dll
+ 2010-08-06 11:14 . 2008-04-14 06:51 15872 c:\windows\ie8\jsproxy.dll
+ 2010-08-06 11:14 . 2008-04-14 06:51 96768 c:\windows\ie8\inseng.dll
+ 2010-08-06 11:14 . 2008-04-14 06:51 35840 c:\windows\ie8\imgutil.dll
+ 2010-08-06 11:14 . 2008-04-14 06:52 93184 c:\windows\ie8\iexplore.exe
+ 2010-08-06 11:14 . 2008-04-14 06:51 62976 c:\windows\ie8\iesetup.dll
+ 2010-08-06 11:14 . 2008-04-14 06:51 48128 c:\windows\ie8\iernonce.dll
+ 2010-08-06 11:14 . 2010-04-16 16:08 81920 c:\windows\ie8\ieencode.dll
+ 2010-08-06 11:14 . 2008-04-14 06:52 34304 c:\windows\ie8\ie4uinit.exe
+ 2010-08-06 11:14 . 2008-04-14 06:51 38912 c:\windows\ie8\hmmapi.dll
+ 2010-08-06 11:14 . 2008-04-14 06:51 35328 c:\windows\ie8\corpol.dll
+ 2010-08-06 11:14 . 2008-04-14 06:51 61440 c:\windows\ie8\admparse.dll
+ 2010-08-06 11:18 . 2009-03-08 02:35 2048 c:\windows\ie8updates\KB982632-IE8\iecompat.dll
+ 2008-05-19 08:40 . 2009-01-07 16:21 121856 c:\windows\system32\xmllite.dll
- 2008-05-19 08:40 . 2008-04-14 06:52 121856 c:\windows\system32\xmllite.dll
+ 2004-08-18 02:00 . 2010-05-06 10:35 916480 c:\windows\system32\wininet.dll
+ 2009-03-08 02:34 . 2009-03-08 02:34 208384 c:\windows\system32\WinFXDocObj.exe
+ 2004-08-18 02:00 . 2009-03-08 02:34 236544 c:\windows\system32\webcheck.dll
+ 2004-08-18 02:00 . 2010-03-10 06:17 420352 c:\windows\system32\vbscript.dll
+ 2004-08-18 02:00 . 2009-03-08 02:34 105984 c:\windows\system32\url.dll
+ 2004-08-18 02:00 . 2010-05-06 10:35 206848 c:\windows\system32\occache.dll
+ 2004-08-18 02:00 . 2010-05-06 10:35 611840 c:\windows\system32\mstime.dll
+ 2004-08-18 02:00 . 2009-03-08 02:34 193536 c:\windows\system32\msrating.dll
+ 2004-08-18 02:00 . 2009-03-08 02:22 156160 c:\windows\system32\msls31.dll
+ 2009-03-08 02:32 . 2010-05-06 10:35 599040 c:\windows\system32\msfeeds.dll
+ 2009-01-07 16:20 . 2009-01-07 16:20 265720 c:\windows\system32\msdbg2.dll
+ 2004-08-18 02:00 . 2009-12-09 05:55 726528 c:\windows\system32\jscript.dll
+ 2009-03-08 02:22 . 2009-03-08 02:22 164352 c:\windows\system32\ieui.dll
+ 2004-08-18 02:00 . 2010-05-06 10:35 184320 c:\windows\system32\iepeers.dll
+ 2004-08-18 02:00 . 2010-05-06 10:35 387584 c:\windows\system32\iedkcs32.dll
+ 2009-03-08 02:11 . 2009-03-08 02:11 445952 c:\windows\system32\ieapfltr.dll
+ 2004-08-18 02:00 . 2009-03-08 02:32 163840 c:\windows\system32\ieakui.dll
+ 2004-08-18 02:00 . 2009-03-08 02:33 229376 c:\windows\system32\ieaksie.dll
+ 2004-08-18 02:00 . 2009-03-08 02:33 125952 c:\windows\system32\ieakeng.dll
+ 2004-08-18 02:00 . 2010-05-05 13:30 173056 c:\windows\system32\ie4uinit.exe
+ 2004-08-18 02:00 . 2009-03-08 02:31 216064 c:\windows\system32\dxtrans.dll
+ 2004-08-18 02:00 . 2009-03-08 02:31 348160 c:\windows\system32\dxtmsft.dll
+ 2008-04-21 06:45 . 2010-05-06 10:35 916480 c:\windows\system32\dllcache\wininet.dll
+ 2009-03-08 02:34 . 2009-03-08 02:34 236544 c:\windows\system32\dllcache\webcheck.dll
+ 2004-08-18 02:00 . 2009-03-08 02:33 759296 c:\windows\system32\dllcache\VGX.dll
+ 2008-05-09 10:56 . 2010-03-10 06:17 420352 c:\windows\system32\dllcache\vbscript.dll
+ 2009-03-08 02:34 . 2009-03-08 02:34 105984 c:\windows\system32\dllcache\url.dll
+ 2009-01-07 16:20 . 2009-01-07 16:20 134144 c:\windows\system32\dllcache\sqmapi.dll
+ 2009-03-08 02:34 . 2010-05-06 10:35 206848 c:\windows\system32\dllcache\occache.dll
+ 2009-03-08 02:32 . 2010-05-06 10:35 611840 c:\windows\system32\dllcache\mstime.dll
+ 2009-03-08 02:34 . 2009-03-08 02:34 193536 c:\windows\system32\dllcache\msrating.dll
+ 2009-03-08 02:22 . 2009-03-08 02:22 156160 c:\windows\system32\dllcache\msls31.dll
+ 2008-05-09 10:56 . 2009-12-09 05:55 726528 c:\windows\system32\dllcache\jscript.dll
+ 2004-08-18 02:00 . 2009-03-08 12:09 638816 c:\windows\system32\dllcache\iexplore.exe
+ 2010-02-26 05:43 . 2010-05-06 10:35 184320 c:\windows\system32\dllcache\iepeers.dll
+ 2009-03-08 12:09 . 2010-05-06 10:35 387584 c:\windows\system32\dllcache\iedkcs32.dll
+ 2009-03-08 02:32 . 2009-03-08 02:32 163840 c:\windows\system32\dllcache\ieakui.dll
+ 2009-03-08 02:33 . 2009-03-08 02:33 229376 c:\windows\system32\dllcache\ieaksie.dll
+ 2009-03-08 02:33 . 2009-03-08 02:33 125952 c:\windows\system32\dllcache\ieakeng.dll
+ 2009-03-08 02:32 . 2010-05-05 13:30 173056 c:\windows\system32\dllcache\ie4uinit.exe
+ 2009-03-08 02:31 . 2009-03-08 02:31 216064 c:\windows\system32\dllcache\dxtrans.dll
+ 2009-03-08 02:31 . 2009-03-08 02:31 348160 c:\windows\system32\dllcache\dxtmsft.dll
+ 2009-03-08 02:32 . 2009-03-08 02:32 128512 c:\windows\system32\dllcache\advpack.dll
+ 2004-08-18 02:00 . 2009-03-08 02:32 128512 c:\windows\system32\advpack.dll
+ 2010-08-06 11:18 . 2009-05-26 09:01 391032 c:\windows\ie8updates\KB982632-IE8\spuninst\updspapi.dll
+ 2010-08-06 11:18 . 2009-05-26 09:01 233848 c:\windows\ie8updates\KB982632-IE8\spuninst\spuninst.exe
+ 2010-08-06 11:19 . 2009-03-08 02:34 914944 c:\windows\ie8updates\KB982381-IE8\wininet.dll
+ 2010-08-06 11:19 . 2010-02-22 14:21 391032 c:\windows\ie8updates\KB982381-IE8\spuninst\updspapi.dll
+ 2010-08-06 11:19 . 2008-07-08 12:59 233848 c:\windows\ie8updates\KB982381-IE8\spuninst\spuninst.exe
+ 2010-08-06 11:19 . 2009-03-08 02:34 109568 c:\windows\ie8updates\KB982381-IE8\occache.dll
+ 2010-08-06 11:19 . 2009-03-08 02:32 611840 c:\windows\ie8updates\KB982381-IE8\mstime.dll
+ 2010-08-06 11:19 . 2009-03-08 02:32 594432 c:\windows\ie8updates\KB982381-IE8\msfeeds.dll
+ 2010-08-06 11:19 . 2009-03-08 02:33 246784 c:\windows\ie8updates\KB982381-IE8\ieproxy.dll
+ 2010-08-06 11:19 . 2009-03-08 02:31 183808 c:\windows\ie8updates\KB982381-IE8\iepeers.dll
+ 2010-08-06 11:19 . 2009-03-08 02:35 742912 c:\windows\ie8updates\KB982381-IE8\iedvtool.dll
+ 2010-08-06 11:19 . 2009-03-08 12:09 391536 c:\windows\ie8updates\KB982381-IE8\iedkcs32.dll
+ 2010-08-06 11:19 . 2009-03-08 02:32 173056 c:\windows\ie8updates\KB982381-IE8\ie4uinit.exe
+ 2010-08-09 05:31 . 2009-03-08 02:33 420352 c:\windows\ie8updates\KB981332-IE8\vbscript.dll
+ 2010-08-09 05:31 . 2009-05-26 11:40 391032 c:\windows\ie8updates\KB981332-IE8\spuninst\updspapi.dll
+ 2010-08-09 05:31 . 2009-05-26 11:40 233848 c:\windows\ie8updates\KB981332-IE8\spuninst\spuninst.exe
+ 2010-08-09 05:31 . 2008-07-08 12:59 391032 c:\windows\ie8updates\KB976662-IE8\spuninst\updspapi.dll
+ 2010-08-09 05:31 . 2008-07-08 12:59 233848 c:\windows\ie8updates\KB976662-IE8\spuninst\spuninst.exe
+ 2010-08-09 05:31 . 2009-06-22 06:48 726528 c:\windows\ie8updates\KB976662-IE8\jscript.dll
+ 2010-08-09 05:29 . 2008-07-08 12:59 391032 c:\windows\ie8updates\KB971961-IE8\spuninst\updspapi.dll
+ 2010-08-09 05:29 . 2008-07-08 12:59 233848 c:\windows\ie8updates\KB971961-IE8\spuninst\spuninst.exe
+ 2010-08-09 05:29 . 2009-03-08 02:33 726528 c:\windows\ie8updates\KB971961-IE8\jscript.dll
+ 2010-08-06 11:14 . 2010-04-16 16:08 668160 c:\windows\ie8\wininet.dll
+ 2010-08-06 11:14 . 2008-04-14 06:52 278528 c:\windows\ie8\webcheck.dll
+ 2010-08-06 11:14 . 2008-04-14 06:52 851968 c:\windows\ie8\vgx.dll
+ 2010-08-06 11:14 . 2010-03-09 11:11 430080 c:\windows\ie8\vbscript.dll
+ 2010-08-06 11:14 . 2010-04-16 16:08 627200 c:\windows\ie8\urlmon.dll
+ 2010-08-06 11:15 . 2009-01-07 16:20 390688 c:\windows\ie8\spuninst\updspapi.dll
+ 2010-08-06 11:15 . 2009-01-07 16:20 234016 c:\windows\ie8\spuninst\spuninst.exe
+ 2010-08-06 11:14 . 2008-04-14 06:51 532480 c:\windows\ie8\mstime.dll
+ 2010-08-06 11:14 . 2008-04-14 06:51 146432 c:\windows\ie8\msrating.dll
+ 2010-08-06 11:14 . 2004-08-18 02:00 146432 c:\windows\ie8\msls31.dll
+ 2010-08-06 11:14 . 2008-04-14 06:51 449024 c:\windows\ie8\mshtmled.dll
+ 2010-08-06 11:14 . 2009-08-13 15:24 512000 c:\windows\ie8\jscript.dll
+ 2010-08-06 11:14 . 2010-04-16 16:08 251904 c:\windows\ie8\iepeers.dll
+ 2010-08-06 11:14 . 2008-04-14 06:51 323584 c:\windows\ie8\iedkcs32.dll
+ 2010-08-06 11:14 . 2004-08-18 02:00 225280 c:\windows\ie8\ieakui.dll
+ 2010-08-06 11:14 . 2008-04-14 06:51 219136 c:\windows\ie8\ieaksie.dll
+ 2010-08-06 11:14 . 2008-04-14 06:51 143360 c:\windows\ie8\ieakeng.dll
+ 2010-08-06 11:14 . 2008-04-14 06:51 205312 c:\windows\ie8\dxtrans.dll
+ 2010-08-06 11:14 . 2008-04-14 06:51 357888 c:\windows\ie8\dxtmsft.dll
+ 2010-08-06 11:14 . 2008-04-14 06:51 100352 c:\windows\ie8\advpack.dll
+ 2004-08-18 02:00 . 2010-05-06 10:35 1209344 c:\windows\system32\urlmon.dll
+ 2004-08-18 02:00 . 2010-05-06 10:35 5950976 c:\windows\system32\mshtml.dll
+ 2009-03-08 02:32 . 2010-05-06 10:35 1985536 c:\windows\system32\iertutil.dll
+ 2009-02-06 19:07 . 2009-02-06 19:07 3698584 c:\windows\system32\ieapfltr.dat
+ 2008-06-26 08:14 . 2010-05-06 10:35 1209344 c:\windows\system32\dllcache\urlmon.dll
+ 2008-04-21 06:45 . 2010-05-06 10:35 5950976 c:\windows\system32\dllcache\mshtml.dll
+ 2010-08-06 11:19 . 2009-03-08 02:34 1206784 c:\windows\ie8updates\KB982381-IE8\urlmon.dll
+ 2010-08-06 11:19 . 2009-03-08 02:41 5937152 c:\windows\ie8updates\KB982381-IE8\mshtml.dll
+ 2010-08-06 11:19 . 2009-03-08 02:32 1985024 c:\windows\ie8updates\KB982381-IE8\iertutil.dll
+ 2010-08-06 11:14 . 2010-04-16 16:08 3094016 c:\windows\ie8\mshtml.dll
+ 2009-03-08 02:39 . 2010-05-06 10:35 11076096 c:\windows\system32\ieframe.dll
+ 2010-08-06 11:19 . 2009-03-08 02:39 11063808 c:\windows\ie8updates\KB982381-IE8\ieframe.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-05-13 26192168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SetRefresh"="c:\program files\Compaq\SetRefresh\SetRefresh.exe" [2003-11-06 524800]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2010-07-12 2048352]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"SirScan"="c:\program files\Free RW Soft\AW Caesar7\AWScanner\AWScanner.exe" [2007-02-27 960000]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-07-31 06:45 11952 ----a-w- c:\windows\system32\avgrsstx.dll

[HKLM\~\startupfolder\C:^Documents and Settings^struhova^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
path=c:\documents and settings\struhova\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.1.lnk
backup=c:\windows\pss\OpenOffice.org 3.1.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-06-09 08:06 976832 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 06:52 1695232 ----a-w- c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\srmclean]
2001-07-24 21:34 36864 ----a-w- c:\cpqs\scom\srmclean.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\RealVNC\\VNC4\\winvnc4.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"c:\\Program Files\\Mozilla Thunderbird\\thunderbird.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [22.9.2008 13:44 12552]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [22.9.2008 13:44 335240]
R1 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [22.9.2008 13:44 108552]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [17.2.2010 20:25 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [10.5.2010 20:41 67656]
R2 avg8emc;AVG8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [9.1.2009 7:18 908056]
R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [9.1.2009 7:18 297752]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [1.2.2010 8:22 135664]
.
Obsah adresáře 'Naplánované úlohy'

2010-08-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-01 06:22]

2010-08-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-01 06:22]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
mSearch Bar = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
FF - ProfilePath - c:\documents and settings\struhova\Data aplikací\Mozilla\Firefox\Profiles\j5c71jpx.default\
FF - prefs.js: browser.search.selectedEngine - Seznam
FF - prefs.js: browser.startup.homepage - hxxps://77.104.250.203:8443/wispi-post/
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.count", 24);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.size", 4096);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

MSConfigStartUp-swg - c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-11 10:11
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(656)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
Celkový čas: 2010-08-11 10:16:42
ComboFix-quarantined-files.txt 2010-08-11 08:16
ComboFix2.txt 2010-08-06 10:19

Před spuštěním: Volných bajtů: 26 260 459 520
Po spuštění: Volných bajtů: 26 288 865 280

- - End Of File - - 6A4C0F118A87166D50B3DB2AEA9A8563

[motji]

Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


***********


Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir



***********


Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

záložka čistič
- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner

záložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy ok zavřít

Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.


***********



Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-vyčistí tempy a po použitých programech



***********

Vložte nový log ze RSIT a řekněte co počítač, jak se chová, už je vše v pořádku?



Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.

[suchaf]

opět dobrý den,
mbam nic nenalezl a vše funguje, ale počítač je pořád hrozně zabržděný tím, že neustále pracuje disk

přikládám log z RSIT a MBAM a děkuji za rady.

Logfile of random's system information tool 1.08 (written by random/random)
Run by struhova at 2010-08-12 08:24:37
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 26 GB (67%) free of 38 GB
Total RAM: 503 MB (16% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:25:24, on 12.8.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\RealVNC\VNC4\winvnc4.exe
C:\Program Files\AVG\AVG9\avgam.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Documents and Settings\struhova\Dokumenty\Stažené soubory\RSIT(2).exe
C:\Program Files\Java\jre6\bin\jucheck.exe
C:\Program Files\trend micro\struhova.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://r.office.microsoft.com/r/rlidOff ... ?clid=1029
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SetRefresh] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [SirScan] C:\Program Files\Free RW Soft\AW Caesar7\AWScanner\AWScanner.exe /AUTO
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\winvnc4.exe

--
End of file - 5820 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2010-08-11 1619296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SetRefresh"=C:\Program Files\Compaq\SetRefresh\SetRefresh.exe [2003-11-06 524800]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"SirScan"=C:\Program Files\Free RW Soft\AW Caesar7\AWScanner\AWScanner.exe [2007-02-27 960000]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2010-08-11 2065760]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-05-13 26192168]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\srmclean]
C:\Cpqs\Scom\srmclean.exe [2001-07-24 36864]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^struhova^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2009-09-16 384512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [2009-09-04 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2010-08-11 12536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
"RestrictRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
"RestrictRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\RealVNC\VNC4\winvnc4.exe"="C:\Program Files\RealVNC\VNC4\winvnc4.exe:*:Enabled:winvnc4.exe"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Mozilla Thunderbird\thunderbird.exe"="C:\Program Files\Mozilla Thunderbird\thunderbird.exe:*:Enabled:Mozilla Thunderbird"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\AVG\AVG9\avgam.exe"="C:\Program Files\AVG\AVG9\avgam.exe:*:Enabled:avgam.exe"
"C:\Program Files\AVG\AVG9\avgdiagex.exe"="C:\Program Files\AVG\AVG9\avgdiagex.exe:*:Enabled:avgdiagex.exe"
"C:\Program Files\AVG\AVG9\avgupd.exe"="C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG9\avgnsx.exe"="C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-08-12 08:24:37 ----D---- C:\rsit
2010-08-12 08:12:30 ----SHD---- C:\RECYCLER
2010-08-11 10:39:22 ----HD---- C:\$AVG
2010-08-11 10:37:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\avg9
2010-08-06 13:18:56 ----D---- C:\WINDOWS\ie8updates
2010-08-06 13:16:05 ----D---- C:\WINDOWS\WBEM
2010-08-06 13:14:16 ----HDC---- C:\WINDOWS\ie8
2010-08-06 13:04:44 ----D---- C:\Program Files\trend micro
2010-08-06 12:48:13 ----D---- C:\WINDOWS\pss
2010-08-06 12:38:44 ----D---- C:\Program Files\Defraggler
2010-08-06 12:09:21 ----A---- C:\Boot.bak
2010-08-06 12:09:15 ----RASHD---- C:\cmdcons
2010-08-06 11:53:34 ----ASH---- C:\hiberfil.sys
2010-08-06 10:50:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2010-08-06 10:50:27 ----D---- C:\Program Files\SUPERAntiSpyware
2010-08-06 10:17:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-08-06 09:16:33 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-08-06 09:12:18 ----D---- C:\Program Files\CCleaner
2010-08-06 08:14:44 ----D---- C:\Program Files\ESET
2010-08-06 08:12:09 ----SHD---- C:\WINDOWS\CSC
2010-08-03 08:31:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$
2010-07-14 08:24:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$

======List of files/folders modified in the last 1 months======

2010-08-12 08:25:04 ----D---- C:\Temp
2010-08-12 08:24:45 ----D---- C:\WINDOWS\Temp
2010-08-12 08:24:41 ----D---- C:\WINDOWS\Prefetch
2010-08-12 08:22:00 ----D---- C:\Documents and Settings\struhova\Data aplikací\Skype
2010-08-12 08:20:15 ----D---- C:\Documents and Settings\struhova\Data aplikací\skypePM
2010-08-12 08:18:40 ----D---- C:\WINDOWS
2010-08-12 08:18:00 ----SHD---- C:\System Volume Information
2010-08-12 08:18:00 ----D---- C:\WINDOWS\system32\Restore
2010-08-12 08:13:15 ----D---- C:\WINDOWS\Debug
2010-08-12 08:08:28 ----D---- C:\WINDOWS\system32
2010-08-12 08:08:28 ----D---- C:\Program Files\Common Files
2010-08-12 06:45:49 ----HD---- C:\WINDOWS\inf
2010-08-12 06:44:31 ----D---- C:\WINDOWS\system32\drivers\Avg
2010-08-12 06:41:40 ----HD---- C:\WINDOWS\$hf_mig$
2010-08-12 06:37:41 ----D---- C:\WINDOWS\system32\CatRoot2
2010-08-11 14:25:24 ----D---- C:\Program Files\Mozilla Thunderbird
2010-08-11 10:39:18 ----D---- C:\WINDOWS\system32\drivers
2010-08-11 10:38:23 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2010-08-11 10:38:00 ----D---- C:\Program Files\AVG
2010-08-11 10:37:20 ----SHD---- C:\WINDOWS\Installer
2010-08-11 10:37:18 ----D---- C:\WINDOWS\WinSxS
2010-08-11 10:35:31 ----D---- C:\Documents and Settings\struhova\Data aplikací\Microsoft
2010-08-11 10:11:39 ----A---- C:\WINDOWS\system.ini
2010-08-11 10:11:10 ----D---- C:\WINDOWS\system32\drivers\etc
2010-08-11 10:08:17 ----D---- C:\WINDOWS\AppPatch
2010-08-10 11:28:51 ----D---- C:\WINDOWS\network diagnostic
2010-08-09 07:31:57 ----RSHD---- C:\WINDOWS\system32\dllcache
2010-08-06 13:22:25 ----D---- C:\WINDOWS\system32\cs-cz
2010-08-06 13:22:24 ----D---- C:\WINDOWS\Help
2010-08-06 13:22:24 ----D---- C:\Program Files\Internet Explorer
2010-08-06 13:16:11 ----D---- C:\WINDOWS\system32\config
2010-08-06 13:15:56 ----D---- C:\WINDOWS\Media
2010-08-06 13:04:44 ----RD---- C:\Program Files
2010-08-06 12:09:21 ----RASH---- C:\boot.ini
2010-08-06 12:03:55 ----D---- C:\Program Files\Google
2010-08-06 12:03:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2010-08-06 08:14:47 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-08-05 14:44:47 ----D---- C:\Program Files\Mozilla Firefox
2010-07-27 08:30:31 ----A---- C:\WINDOWS\system32\shell32.dll
2010-07-14 08:17:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AvgRkx86;avgrkx86.sys; C:\WINDOWS\System32\Drivers\avgrkx86.sys [2010-08-11 52872]
R1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2010-08-11 216400]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2010-08-11 29584]
R1 AvgTdiX;AVG Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2010-08-11 243024]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R3 {6080A529-897E-4629-A488-ABA0C29B635E};Intel(R) Graphics Platform (SoftBIOS) Driver; C:\WINDOWS\system32\drivers\ialmsbw.sys [2003-08-04 120094]
R3 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91};Intel(R) Graphics Chipset (KCH) Driver; C:\WINDOWS\system32\drivers\ialmkchw.sys [2003-08-04 96858]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 dot4;Ovladač MS IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2008-04-14 206976]
R3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys [2001-08-17 12928]
R3 dot4usb;Filtr Dot4USB Dot4USB Filter; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [2001-10-24 23808]
R3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2003-09-18 145408]
R3 HidBatt;Ovladač baterie zdroje UPS standardu HID; C:\WINDOWS\system32\DRIVERS\HidBatt.sys [2008-04-14 20352]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2003-08-04 91419]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-08-29 578304]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S1 P3;Ovladač procesoru Intel PentiumIII; C:\WINDOWS\system32\DRIVERS\p3.sys [2008-04-14 46592]
S3 i81x;i81x; C:\WINDOWS\system32\DRIVERS\i81xnt5.sys [2004-08-03 161020]
S3 iAimFP0;iAimFP0; C:\WINDOWS\system32\DRIVERS\wADV01nt.sys [2004-08-03 12415]
S3 iAimFP1;iAimFP1; C:\WINDOWS\system32\DRIVERS\wADV02NT.sys [2004-08-03 12127]
S3 iAimFP2;iAimFP2; C:\WINDOWS\system32\DRIVERS\wADV05NT.sys [2004-08-03 11775]
S3 iAimFP3;iAimFP3; C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys [2004-08-03 12063]
S3 iAimFP4;iAimFP4; C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys [2004-08-03 19455]
S3 iAimFP5;iAimFP5; C:\WINDOWS\system32\DRIVERS\wADV07nt.sys [2004-08-03 11807]
S3 iAimFP6;iAimFP6; C:\WINDOWS\system32\DRIVERS\wADV08nt.sys [2004-08-03 11295]
S3 iAimFP7;iAimFP7; C:\WINDOWS\system32\DRIVERS\wADV09nt.sys [2004-08-03 11871]
S3 iAimTV0;iAimTV0; C:\WINDOWS\system32\DRIVERS\wATV01nt.sys [2004-08-03 29311]
S3 iAimTV1;iAimTV1; C:\WINDOWS\system32\DRIVERS\wATV02NT.sys [2004-08-03 19551]
S3 iAimTV3;iAimTV3; C:\WINDOWS\system32\DRIVERS\wATV04nt.sys [2004-08-03 33599]
S3 iAimTV4;iAimTV4; C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys [2004-08-03 23615]
S3 iAimTV5;iAimTV5; C:\WINDOWS\system32\DRIVERS\wATV10nt.sys [2004-08-03 25471]
S3 iAimTV6;iAimTV6; C:\WINDOWS\system32\DRIVERS\wATV06nt.sys [2004-08-03 22271]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 adpu320;adpu320; C:\WINDOWS\system32\DRIVERS\adpu320.sys [2002-05-08 105472]
S4 Symmpi;Symmpi; C:\WINDOWS\system32\DRIVERS\symmpi.sys [2002-04-04 28416]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avg9wd;AVG WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-08-11 308136]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 WinVNC4;VNC Server Version 4; C:\Program Files\RealVNC\VNC4\winvnc4.exe [2005-03-11 455632]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-01 135664]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------


Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4420

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

12.8.2010 10:01:45
mbam-log-2010-08-12 (10-01-45).txt

Typ skenu: Úplný sken (C:\|)
Skenované objekty: 193813
Uplynulý čas: 1 hodina(y), 28 minuta(y), 58 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

[motji]

Vzdálenou správu máte schválně?

tyto dva programy znáte?
C:\Cpqs\Scom\srmclean.exe
C:\Program Files\Free RW Soft\AW Caesar7\AWScanner\


start-spustit - napište chkdsk /f/r
-[enter]
souhlas - restartuje se pc a nechá se disk zkontrolovat

[suchaf]

Vzdálená správa je schválně (RealVNC), AWCaesar mám taky schválně, ale srmclean netuším co je, ale na webu píšou že je to SoundMaxu.

"srmclean.exe is installed alongside SoundMax Integrated Digital Audio, and gives access to additional audio related features for this product. "This program is a non-essential system process, but should not be terminated unless suspected to be causing problems.\r""

jinak chkdisk udělám zítra a dám vědět

Přeji Vám pěkný den
Filip Šucha

[motji]

Pro jistotu ho otestujte na www.virustotal.com
C:\Cpqs\Scom\srmclean.exe

[suchaf]

Dobrý den,
checkdisk proběhl ok, jinak posílám výpis z virustotalu, jediný pozitivní výsledek je toto
eSafe 7.0.17.0 2010.08.12 Win32.LooksLike.tage

mám ten soubor smazat?
Zdravím a děkuji


0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is goodware. 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is malware.
File name:
srmclean.exe
Submission date:
2010-08-13 07:42:13 (UTC)
Current status:
queued queued (#1) analysing finished
Result:
1/ 42 (2.4%)

VT Community

not reviewed
Safety score: -
Compact
Print results
Antivirus Version Last Update Result
AhnLab-V3 2010.08.13.00 2010.08.12 -
AntiVir 8.2.4.34 2010.08.12 -
Antiy-AVL 2.0.3.7 2010.08.11 -
Authentium 5.2.0.5 2010.08.12 -
Avast 4.8.1351.0 2010.08.12 -
Avast5 5.0.332.0 2010.08.12 -
AVG 9.0.0.851 2010.08.12 -
BitDefender 7.2 2010.08.13 -
CAT-QuickHeal 11.00 2010.08.13 -
ClamAV 0.96.0.3-git 2010.08.13 -
Comodo 5721 2010.08.13 -
DrWeb 5.0.2.03300 2010.08.13 -
Emsisoft 5.0.0.37 2010.08.13 -
eSafe 7.0.17.0 2010.08.12 Win32.LooksLike.tage
eTrust-Vet 36.1.7785 2010.08.12 -
F-Prot 4.6.1.107 2010.08.12 -
F-Secure 9.0.15370.0 2010.08.13 -
Fortinet 4.1.143.0 2010.08.12 -
GData 21 2010.08.13 -
Ikarus T3.1.1.88.0 2010.08.13 -
Jiangmin 13.0.900 2010.08.13 -
Kaspersky 7.0.0.125 2010.08.13 -
McAfee 5.400.0.1158 2010.08.13 -
McAfee-GW-Edition 2010.1 2010.08.13 -
Microsoft 1.6004 2010.08.13 -
NOD32 5362 2010.08.13 -
Norman 6.05.11 2010.08.12 -
nProtect 2010-08-13.01 2010.08.13 -
Panda 10.0.2.7 2010.08.12 -
PCTools 7.0.3.5 2010.08.13 -
Prevx 3.0 2010.08.13 -
Rising 22.60.04.01 2010.08.13 -
Sophos 4.56.0 2010.08.13 -
Sunbelt 6727 2010.08.13 -
SUPERAntiSpyware 4.40.0.1006 2010.08.13 -
Symantec 20101.1.1.7 2010.08.13 -
TheHacker 6.5.2.1.346 2010.08.13 -
TrendMicro 9.120.0.1004 2010.08.13 -
TrendMicro-HouseCall 9.120.0.1004 2010.08.13 -
VBA32 3.12.14.0 2010.08.11 -
ViRobot 2010.8.9.3978 2010.08.13 -
VirusBuster 5.0.27.0 2010.08.12 -
Additional information
Show all
MD5 : 787b8ad5fef1a68d3ed00e4e393b9d18
SHA1 : 3a1287bd91d72798bede92d7f9062e7a982578a5
SHA256: 9914f333685a74a45dfd6b26bb8f81c0ed62200f0c623e7f030230c4124bb046
ssdeep: 384:kH33pql7CCd7PJrjzqbW9VSHNyo/1KAxKZO:kH35qnXxgHN1NRxK
File size : 36864 bytes
First seen: 2009-02-02 17:04:31
Last seen : 2010-08-13 07:42:13
TrID:
Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)
sigcheck:
publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
PEiD: Armadillo v1.71
PEInfo: PE structure information

[[ basic data ]]
entrypointaddress: 0x1020
timedatestamp....: 0x3B5DE9E1 (Tue Jul 24 21:34:25 2001)
machinetype......: 0x14c (I386)

[[ 3 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
.text, 0x1000, 0x35CE, 0x4000, 5.96, a340e038fc4ec926ae9d5a067be0669c
.rdata, 0x5000, 0x7E0, 0x1000, 3.22, e37cc8b9570edc9ed1558d63e57ebc66
.data, 0x6000, 0x2A1C, 0x3000, 0.41, 2ca2770889d849fd9f5b26122f0b52f2

[[ 2 import(s) ]]
SHLWAPI.dll: SHDeleteKeyA
KERNEL32.dll: HeapDestroy, GetVersionExA, GetModuleHandleA, GetStartupInfoA, GetCommandLineA, GetVersion, ExitProcess, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, SetHandleCount, GetStdHandle, GetFileType, GetEnvironmentVariableA, GetStringTypeW, HeapCreate, VirtualFree, HeapFree, RtlUnwind, WriteFile, GetCPInfo, GetACP, GetOEMCP, HeapAlloc, VirtualAlloc, HeapReAlloc, GetProcAddress, LoadLibraryA, MultiByteToWideChar, LCMapStringA, LCMapStringW, GetStringTypeA

VT Community

0

This file has never been reviewed by any VT Community member. Be the first one to comment on it!

VirusTotal Team

[JaRon]

jedorazovo vstupim - skus vypnut indexovanie http://www.viry.cz/forum/viewtopic.php? ... ie#p807899