VIRY.CZ

Logfile of random's system information tool 1.08 (written by random/random)
Run by user at 2010-09-28 19:35:45
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 14 GB (75%) free of 19 GB
Total RAM: 511 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:36:41, on 28.9.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20661)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\rmctrl.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\user\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\user.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] C:\WINDOWS\system32\rmctrl.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [MobileConnect] %programfiles%\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe /silent
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Vodafone Mobile Connect Service (VMCService) - Vodafone - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe

--
End of file - 4255 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"VTTimer"=C:\WINDOWS\system32\VTTimer.exe [2004-01-15 49152]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2006-11-17 577536]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"RemoteControl"=C:\WINDOWS\system32\rmctrl.exe [2002-07-15 33027]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-04-03 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-04-03 13670504]
"MobileConnect"=C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe [2009-09-18 2412032]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2006-06-01 94208]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=schannel.dll, digest.dll

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======File associations======

.js - edit -
.vbs - edit -

======List of files/folders created in the last 1 months======

2010-09-28 19:35:45 ----D---- C:\rsit
2010-09-28 19:35:45 ----D---- C:\Program Files\trend micro
2010-09-28 15:29:36 ----D---- C:\Documents and Settings\user\Data aplikací\XnView
2010-09-28 14:11:49 ----SHD---- C:\RECYCLER
2010-09-28 14:06:19 ----D---- C:\Program Files\XnView
2010-09-28 14:00:43 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2010-09-28 14:00:41 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2010-09-28 14:00:40 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2010-09-28 14:00:37 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2010-09-28 14:00:37 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2010-09-28 14:00:37 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2010-09-28 14:00:21 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-09-28 14:00:13 ----D---- C:\Program Files\Alwil Software
2010-09-28 14:00:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-09-28 13:54:20 ----D---- C:\Documents and Settings\user\Data aplikací\Media Player Classic
2010-09-28 13:53:49 ----A---- C:\WINDOWS\system32\unrar.dll
2010-09-28 13:53:49 ----A---- C:\WINDOWS\avisplitter.ini
2010-09-28 13:53:42 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2010-09-28 13:53:42 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-09-28 13:53:42 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-09-28 13:53:42 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2010-09-28 13:53:42 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2010-09-28 13:53:38 ----D---- C:\Program Files\K-Lite Codec Pack
2010-09-28 13:52:22 ----D---- C:\WINDOWS\temp
2010-09-28 13:52:21 ----A---- C:\ComboFix.txt
2010-09-28 13:47:53 ----A---- C:\Boot.bak
2010-09-28 13:47:49 ----RASHD---- C:\cmdcons
2010-09-28 13:47:17 ----A---- C:\WINDOWS\zip.exe
2010-09-28 13:47:17 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-09-28 13:47:17 ----A---- C:\WINDOWS\SWSC.exe
2010-09-28 13:47:17 ----A---- C:\WINDOWS\SWREG.exe
2010-09-28 13:47:17 ----A---- C:\WINDOWS\sed.exe
2010-09-28 13:47:17 ----A---- C:\WINDOWS\PEV.exe
2010-09-28 13:47:17 ----A---- C:\WINDOWS\NIRCMD.exe
2010-09-28 13:47:17 ----A---- C:\WINDOWS\MBR.exe
2010-09-28 13:47:17 ----A---- C:\WINDOWS\grep.exe
2010-09-28 13:47:11 ----D---- C:\WINDOWS\ERDNT
2010-09-28 13:45:56 ----AD---- C:\Qoobox
2010-09-28 13:40:27 ----A---- C:\WINDOWS\system32\drivers\ADM8511.SYS
2010-09-28 13:25:39 ----ASH---- C:\pagefile.sys
2010-09-28 11:18:26 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2010-09-25 02:30:52 ----RA---- C:\WINDOWS\system32\drivers\ewusbfake.sys
2010-09-25 02:28:57 ----D---- C:\Documents and Settings\user\Data aplikací\Vodafone
2010-09-25 02:28:36 ----RA---- C:\WINDOWS\system32\drivers\ewusbnet.sys
2010-09-25 02:28:31 ----RA---- C:\WINDOWS\system32\drivers\ewusbmdm.sys
2010-09-25 02:28:27 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2010-09-25 02:28:06 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-09-25 02:27:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Vodafone
2010-09-25 02:27:42 ----D---- C:\Program Files\Vodafone
2010-09-25 02:27:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\FLEXnet
2010-09-25 02:25:15 ----RSD---- C:\WINDOWS\assembly
2010-09-25 02:24:53 ----D---- C:\WINDOWS\Microsoft.NET
2010-09-24 20:49:26 ----D---- C:\Documents and Settings\user\Data aplikací\FLEXnet

======List of files/folders modified in the last 1 months======

2010-09-28 19:35:45 ----RD---- C:\Program Files
2010-09-28 19:19:45 ----A---- C:\WINDOWS\win.ini
2010-09-28 17:21:37 ----D---- C:\Program Files\WinRAR
2010-09-28 17:04:27 ----A---- C:\WINDOWS\NeroDigital.ini
2010-09-28 16:01:26 ----D---- C:\WINDOWS\system32\CatRoot2
2010-09-28 14:00:43 ----D---- C:\WINDOWS\system32\drivers
2010-09-28 14:00:32 ----SHD---- C:\WINDOWS\Installer
2010-09-28 14:00:31 ----D---- C:\WINDOWS\WinSxS
2010-09-28 14:00:30 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-09-28 13:53:49 ----D---- C:\WINDOWS\system32
2010-09-28 13:53:49 ----D---- C:\WINDOWS
2010-09-28 13:50:57 ----A---- C:\WINDOWS\system.ini
2010-09-28 13:50:48 ----D---- C:\WINDOWS\system32\drivers\etc
2010-09-28 13:49:33 ----D---- C:\WINDOWS\AppPatch
2010-09-28 13:49:32 ----D---- C:\Program Files\Common Files
2010-09-28 13:47:53 ----RASH---- C:\boot.ini
2010-09-28 13:35:01 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-28 13:35:01 ----D---- C:\Program Files\Kerio
2010-09-26 00:15:02 ----A---- C:\WINDOWS\Spidey.ini
2010-09-25 02:29:56 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-09-25 02:28:25 ----HD---- C:\WINDOWS\inf
2010-09-25 02:24:57 ----D---- C:\WINDOWS\system32\mui
2010-09-25 02:24:57 ----D---- C:\Program Files\Internet Explorer
2010-09-16 03:19:49 ----A---- C:\WINDOWS\PhotoSnapViewer.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 uagp35;Filtr Microsoft AGPv3.5; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2004-08-04 44672]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-03-08 4027840]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 ewusbnet;HUAWEI USB-NDIS miniport; C:\WINDOWS\system32\DRIVERS\ewusbnet.sys [2009-07-23 112640]
R3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
R3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2009-07-23 102528]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-04-04 10232128]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
S3 ADM8511;ADMtek ADM8511/AN986 USB To Fast Ethernet Converter; C:\WINDOWS\system32\DRIVERS\ADM8511.SYS [2001-08-17 20160]
S3 catchme;catchme; \??\C:\DOCUME~1\user\LOCALS~1\Temp\catchme.sys []
S3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2002-09-23 9600]
S3 hwusbfake;Huawei DataCard USB Fake; C:\WINDOWS\system32\DRIVERS\ewusbfake.sys [2009-07-23 100480]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2007-11-12 12160]
S3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2004-02-04 134144]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-04-03 154216]
R2 VMCService;Vodafone Mobile Connect Service; C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [2009-09-18 9216]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-06-08 208896]

-----------------EOF-----------------

Dnes jste prováděl sken ComboFix. Dejte z něj log.

tak asi někdo mimo mě,

budu ho mít asi až ke konci týdne, ale určitě ho sem dám.

OK.

Tak, tady je.

Přikládám scan z Combofixu.


ComboFix 10-10-09.03 - user 09.10.2010 22:58:24.2.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.511.251 [GMT 2:00]
Spuštěný z: c:\documents and settings\user\Dokumenty\Stažené soubory\ComboFix.exe
AV: avast! Antivirus *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-09-09 do 2010-10-09 )))))))))))))))))))))))))))))))
.

2010-10-09 20:47 . 2010-10-09 20:47 -------- d-----w- c:\windows\LastGood
2010-10-09 20:47 . 2010-10-09 20:47 -------- d-----w- c:\program files\Winamp
2010-10-09 20:32 . 2010-10-09 20:32 -------- d-----w- c:\program files\MP4 Player
2010-10-09 19:43 . 2010-10-09 20:44 -------- d-----w- c:\documents and settings\user\Data aplikací\vlc
2010-10-09 19:38 . 2010-10-09 19:38 -------- d-----w- c:\program files\VideoLAN
2010-10-09 19:33 . 2003-06-25 14:05 263288 ----a-w- c:\windows\system32\TweakUI.exe
2010-10-09 19:33 . 2009-02-27 19:31 -------- d---a-w- c:\program files\TweakUI
2010-10-09 19:27 . 2009-03-30 18:01 60273 ----a-w- c:\windows\system32\pthreadGC2.dll
2010-10-09 19:27 . 2010-10-09 19:27 -------- d-----w- c:\program files\AC3Filter
2010-10-09 19:27 . 2009-06-01 00:23 538624 ----a-w- c:\windows\system32\ac3filter.acm
2010-10-09 19:21 . 2010-10-09 19:22 -------- d-----w- c:\program files\QIP
2010-10-07 17:12 . 2010-10-07 20:16 -------- d-----w- c:\program files\ICQ6Toolbar
2010-10-07 17:12 . 2010-10-07 20:05 -------- d-----w- c:\documents and settings\All Users\Data aplikací\ICQ
2010-10-07 17:09 . 2010-10-07 17:09 -------- d-----w- c:\documents and settings\user\Local Settings\Data aplikací\AOL
2010-10-01 10:48 . 2010-10-01 10:48 14808 ----a-w- c:\program files\Mozilla Firefox\plugin-container.exe
2010-10-01 10:48 . 2010-10-01 10:48 718296 ----a-w- c:\program files\Mozilla Firefox\mozcpp19.dll
2010-09-28 20:12 . 2010-10-09 18:28 -------- d-----w- c:\documents and settings\user\Data aplikací\skypePM
2010-09-28 20:08 . 2010-10-09 21:02 -------- d-----w- c:\documents and settings\user\Data aplikací\Skype
2010-09-28 20:04 . 2010-09-28 20:04 -------- d-----w- c:\program files\Common Files\Skype
2010-09-28 20:04 . 2010-09-28 20:07 -------- d-----r- c:\program files\Skype
2010-09-28 20:04 . 2010-09-28 20:04 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Skype
2010-09-28 17:35 . 2010-09-28 17:36 -------- d-----w- C:\rsit
2010-09-28 17:35 . 2010-09-28 17:36 -------- d-----w- c:\program files\trend micro
2010-09-28 13:29 . 2010-09-28 13:29 -------- d-----w- c:\documents and settings\user\Data aplikací\XnView
2010-09-28 12:06 . 2010-09-28 12:06 -------- d-----w- c:\program files\XnView
2010-09-28 12:00 . 2010-09-07 14:52 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-09-28 12:00 . 2010-09-07 14:47 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-09-28 12:00 . 2010-09-07 14:52 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-09-28 12:00 . 2010-09-07 14:47 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-09-28 12:00 . 2010-09-07 14:47 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-09-28 12:00 . 2010-09-07 14:46 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-09-28 12:00 . 2010-09-07 15:12 38848 ----a-w- c:\windows\avastSS.scr
2010-09-28 12:00 . 2010-09-07 15:11 167592 ----a-w- c:\windows\system32\aswBoot.exe
2010-09-28 12:00 . 2010-09-28 12:00 -------- d-----w- c:\program files\Alwil Software
2010-09-28 12:00 . 2010-09-28 12:00 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Alwil Software
2010-09-28 11:54 . 2010-09-28 11:54 -------- d-----w- c:\documents and settings\user\Data aplikací\Media Player Classic
2010-09-28 11:53 . 2010-03-15 09:31 165376 ----a-w- c:\windows\system32\unrar.dll
2010-09-28 11:53 . 2010-01-17 15:18 151552 ----a-w- c:\windows\system32\ac3acm.acm
2010-09-28 11:53 . 2006-10-18 18:05 232448 ----a-w- c:\windows\system32\mp3fhg.acm
2010-09-28 11:53 . 2010-06-08 16:10 790528 ----a-w- c:\windows\system32\xvidcore.dll
2010-09-28 11:53 . 2010-06-08 16:10 134144 ----a-w- c:\windows\system32\xvidvfw.dll
2010-09-28 11:53 . 2009-03-30 18:01 84480 ----a-w- c:\windows\system32\ff_vfw.dll
2010-09-28 11:53 . 2004-01-25 16:18 217088 ----a-w- c:\windows\system32\yv12vfw.dll
2010-09-28 11:53 . 2010-09-28 11:54 -------- d-----w- c:\program files\K-Lite Codec Pack
2010-09-28 11:40 . 2001-08-17 18:11 20160 ----a-w- c:\windows\system32\drivers\ADM8511.SYS
2010-09-28 09:18 . 2004-08-17 13:45 14848 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2010-09-25 00:30 . 2009-07-23 09:57 100480 ----a-r- c:\windows\system32\drivers\ewusbfake.sys
2010-09-25 00:28 . 2010-09-25 00:28 -------- d-----w- c:\documents and settings\user\Data aplikací\Vodafone
2010-09-25 00:28 . 2009-07-23 09:57 112640 ----a-r- c:\windows\system32\drivers\ewusbnet.sys
2010-09-25 00:28 . 2009-07-23 09:57 102528 ----a-r- c:\windows\system32\drivers\ewusbmdm.sys
2010-09-25 00:28 . 2004-08-03 21:08 31616 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2010-09-25 00:28 . 2010-09-25 00:28 -------- dc----w- c:\windows\system32\DRVSTORE
2010-09-25 00:27 . 2010-09-25 00:27 -------- d-----w- c:\documents and settings\LocalService\Data aplikací\Vodafone
2010-09-25 00:27 . 2010-09-25 00:27 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Vodafone
2010-09-25 00:27 . 2010-09-25 00:27 -------- d-----w- c:\program files\Vodafone
2010-09-25 00:27 . 2010-09-25 00:27 -------- d-----w- c:\documents and settings\All Users\Data aplikací\FLEXnet
2010-09-25 00:27 . 2010-09-25 00:27 -------- d-----w- c:\documents and settings\user\Local Settings\Data aplikací\{01A9A77D-6AAA-4910-89DD-AA1CF94D5618}
2010-09-24 18:49 . 2010-09-24 18:49 -------- d-----w- c:\documents and settings\user\Data aplikací\FLEXnet

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.

------- Sigcheck -------

[-] 2007-11-12 . 32870B6F41858B75B2358F143DA9C794 . 1548288 . . [5.1.2600.2180] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((( SnapShot@2010-09-28_11.50.57 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-11 22:02 . 2009-07-11 22:02 51008 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa\vcomp90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90rus.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90kor.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90jpn.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90ita.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90cht.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 35648 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90chs.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90fra.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61760 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esp.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esn.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 53568 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90enu.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 63296 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90deu.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90u.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90.dll
+ 1999-08-09 12:39 . 1999-08-09 12:39 14832 c:\windows\system32\asfsipc.dll
+ 2010-10-09 20:47 . 2004-08-17 13:49 87040 c:\windows\LastGood\system32\drmstor.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 653120 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 569664 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll
+ 1999-08-09 12:40 . 1999-08-09 12:40 163600 c:\windows\system32\wmaudsdk.dll
+ 2010-10-09 20:47 . 2004-08-17 13:49 246302 c:\windows\LastGood\system32\strmdll.dll
+ 2010-10-09 20:47 . 2004-08-17 13:49 343040 c:\windows\LastGood\system32\msvcrt.dll
+ 2010-10-09 20:47 . 2004-08-17 13:49 299520 c:\windows\LastGood\system32\drmclien.dll
+ 2010-09-28 20:07 . 2010-09-28 20:07 700416 c:\windows\Installer\4d647d.msi
+ 2010-09-28 12:00 . 2010-09-28 12:00 219648 c:\windows\Installer\111ee5.msi
+ 2010-09-28 20:04 . 2010-09-28 20:04 371272 c:\windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe
+ 2009-07-11 22:02 . 2009-07-11 22:02 3780424 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90u.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 3765048 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90.dll
+ 2010-09-28 20:04 . 2010-09-28 20:04 1575936 c:\windows\Installer\4d6476.msi
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-06-01 94208]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-09-02 13351304]
"MP4 Player"="c:\program files\MP4 Player\mp4Player.exe" [2008-11-06 772096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VTTimer"="VTTimer.exe" [2004-01-15 49152]
"SoundMan"="SOUNDMAN.EXE" [2006-11-17 577536]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"RemoteControl"="c:\windows\system32\rmctrl.exe" [2002-07-15 33027]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-04-03 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-04-03 13670504]
"MobileConnect"="c:\program files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe" [2009-09-18 2412032]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-09-07 2838912]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]
"nltide_3"="advpack.dll" [2007-11-12 124928]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders schannel.dll, digest.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [28.9.2010 14:00 165584]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [7.10.2010 19:12 246520]
R2 VMCService;Vodafone Mobile Connect Service;c:\program files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [18.9.2009 17:48 9216]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [25.9.2010 2:28 112640]
S3 ADM8511;ADMtek ADM8511/AN986 USB To Fast Ethernet Converter;c:\windows\system32\drivers\ADM8511.SYS [28.9.2010 13:40 20160]
S3 hwusbfake;Huawei DataCard USB Fake;c:\windows\system32\drivers\ewusbfake.sys [25.9.2010 2:30 100480]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/
FF - ProfilePath - c:\documents and settings\user\Data aplikací\Mozilla\Firefox\Profiles\fu8zrvph.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.4&q=
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(652)
c:\windows\system32\vorbis.dll
c:\windows\system32\ogg.dll

- - - - - - - > 'lsass.exe'(708)
c:\windows\system32\vorbis.dll
c:\windows\system32\ogg.dll

- - - - - - - > 'explorer.exe'(1476)
c:\windows\system32\vorbis.dll
c:\windows\system32\ogg.dll
c:\windows\system32\browselc.dll
.
Celkový čas: 2010-10-09 23:04:16
ComboFix-quarantined-files.txt 2010-10-09 21:04
ComboFix2.txt 2010-09-28 11:52

Před spuštěním: Volných bajtů: 10 648 551 424
Po spuštění: Volných bajtů: 10 706 481 152

- - End Of File - - D9D276C0B4E48A77E0C2F7AC44529325

Log vypadá čistý. Jaké chyby se konkrétně vyskytují?

Např....nedetekuje se některé zařízeni (flash disk, usb klíčenka) , která jinde funguje.

Nefunguje automaticke spouštění po vložení.

Zkuste reinstalovat ovladače k zákl. desce.

Tak to je budu muset nejdříve najít někde na internetu, sestava je poměrně stará.

Ale díky za rady.

CZDaywalker píše:Tak to je budu muset nejdříve najít někde na internetu, sestava je poměrně stará.

Ale díky za rady.

Stačí znát typ desky, popř. si ho zjistit programem Everest: http://www.stahuj.centrum.cz/utility_a_ ... y/everest/ . Ovladače pak najdete na webu výrobce. Nelze ovšem vyloučit hardwarou chybu.