VIRY.CZ

mal som v jednom notebooku SMARTENGINE ktory som odstranil pomocou malwarebytes lenze mi nejde odvtedy nefunguju prehliadace nakolko sa firewall tvari ako stale zapnuty a neviem ho vypnut ani nastavit.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Ja at 2010-11-12 23:01:26
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 3 GB (23%) free of 15 GB
Total RAM: 1012 MB (52% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\User_Feed_Synchronization-{705AC178-A9D1-45C1-AADB-20CFAED3C986}.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3308722516-315636210-488748980-1006Core1cb721eec372194.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-05-15 16862720]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"AzMixerSel"=C:\Program Files\Realtek\Audio\InstallShield\AzMixerSel.exe [2006-07-17 53248]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-04-24 1044480]
"LManager"=C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE [2008-05-13 821768]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2008-04-14 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2008-04-14 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-14 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-14 455168]
"PLFSetL"=C:\WINDOWS\PLFSetL.exe [2007-07-05 94208]
"snp2uvc"=C:\WINDOWS\vsnp2uvc.exe []
"ProductReg"=C:\Program Files\Acer\WR_PopUp\ProductReg.exe [2008-09-23 6144]
"ToolBoxFX"=c:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe [2006-06-15 49152]
""= []
"HP Software Update"=c:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Google Update"=C:\Documents and Settings\Ja\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-06-07 133104]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe []
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
InterVideo WinCinema Manager.lnk - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe

C:\Documents and Settings\Ja\Nabídka Start\Programy\Po spuštění
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-02-14 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"DisallowRun"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-11-12 23:01:26 ----D---- C:\rsit
2010-11-12 23:01:26 ----D---- C:\Program Files\trend micro
2010-11-12 22:14:58 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2010-11-12 22:14:57 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2010-11-12 22:14:57 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2010-11-12 22:14:56 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2010-11-12 22:14:48 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2010-11-12 22:14:48 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2010-11-12 22:14:45 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2010-11-12 22:08:33 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-11-12 20:43:50 ----D---- C:\Documents and Settings\Ja\Data aplikací\Malwarebytes
2010-11-12 20:43:39 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-11-12 20:43:36 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-11-12 20:43:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-11-12 20:43:36 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2010-11-12 20:06:57 ----D---- C:\Program Files\Common Files\Adobe
2010-11-12 19:39:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-11-12 19:29:12 ----ASH---- C:\hiberfil.sys
2010-11-12 19:19:32 ----A---- C:\WINDOWS\ntbtlog.txt
2010-11-01 19:48:09 ----SHD---- C:\Documents and Settings\Ja\Data aplikací\Smart Engine
2010-11-01 19:48:08 ----SHD---- C:\Documents and Settings\All Users\Data aplikací\SMHSIFZKPE
2010-11-01 19:47:04 ----SHD---- C:\Documents and Settings\All Users\Data aplikací\ac6e9a
2010-11-01 16:22:53 ----A---- C:\WINDOWS\WORDPAD.INI
2010-10-15 18:09:08 ----HD---- C:\WINDOWS\$NtUninstallKB2387149$
2010-10-15 18:08:01 ----HD---- C:\WINDOWS\$NtUninstallKB2279986$
2010-10-15 18:06:12 ----HD---- C:\WINDOWS\$NtUninstallKB2345886$
2010-10-15 18:04:50 ----HD---- C:\WINDOWS\$NtUninstallKB2296011$
2010-10-15 18:02:37 ----HD---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2010-10-15 18:01:54 ----HD---- C:\WINDOWS\$NtUninstallKB982132$
2010-10-15 17:59:22 ----HD---- C:\WINDOWS\$NtUninstallKB979687$
2010-10-15 17:38:55 ----HD---- C:\WINDOWS\$NtUninstallKB981957$
2010-10-15 17:36:58 ----HD---- C:\WINDOWS\$NtUninstallKB2360937$
2010-10-15 17:30:46 ----SHD---- C:\FOUND.003

======List of files/folders modified in the last 1 months======

2010-11-12 19:10:56 ----A---- C:\WINDOWS\system32\MRT.exe
2010-10-15 18:08:50 ----A---- C:\WINDOWS\imsins.BAK

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Filtr Intel sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
R0 agpCPQ;Filtr Compaq sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-13 44928]
R0 alim1541;Filtr ALI sběrnice AGP; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-13 42752]
R0 amdagp;Ovladač filtru AMD portu AGP; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-13 43008]
R0 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2008-04-14 13952]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2006-09-27 36560]
R0 sisagp;Filtr SIS sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-13 40960]
R0 viaagp;Filtr VIA sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-01-18 77696]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2008-05-20 1312576]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2004-12-07 16896]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-02-14 5854752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-05-20 4800000]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-08-07 111360]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2007-10-01 1769984]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2008-04-24 225024]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 HPFXBULK;HPFXBULK; C:\WINDOWS\system32\drivers\hpfxbulk.sys [2007-04-12 16288]
S3 int15.sys;int15.sys; \??\c:\acernb\int15.sys []
S3 JMCR;JMCR; C:\WINDOWS\system32\DRIVERS\jmcr.sys [2008-07-07 96856]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2009-02-09 17664]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2009-02-09 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2009-02-09 7808]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbser;Nokia USB Serial Port; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2009-02-09 7808]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2008-03-27 503008]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-01-18 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268288]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-06-07 182768]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-06-02 637952]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Log vypadá čistý. Informace o nastavení firewallu najdete zde: http://www.viry.cz/forum/viewforum.php?f=41 .

firewall sa mi neda nastavit, tvari sa akoby tam bol stale ten "SMART ENGINE"

OK, dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

pomohlo, dakujem

ComboFix 10-11-12.06 - Ja . 11. 2010 20:08:20.1.2 - FAT32x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1012.606 [GMT 1:00]
Spuštěný z: c:\documents and settings\Ja\Plocha\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\All Users\Data aplikací\ac6e9a
c:\documents and settings\All Users\Data aplikací\ac6e9a\3843.mof
c:\documents and settings\All Users\Data aplikací\ac6e9a\ac6e9a36f9fe465d64ece9eded4ed334.ocx
c:\documents and settings\All Users\Data aplikací\ac6e9a\BackUp\InterVideo WinCinema Manager.lnk
c:\documents and settings\All Users\Data aplikací\ac6e9a\BackUp\OpenOffice.org 3.2.lnk
c:\documents and settings\All Users\Data aplikací\ac6e9a\SME.ico
c:\documents and settings\All Users\Data aplikací\ac6e9a\xfgly2p45e7tm9q01u8nz6awcm9q01ugn6cdng.dll
c:\documents and settings\Ja\Data aplikací\Smart Engine
c:\documents and settings\Ja\Data aplikací\Smart Engine\Instructions.ini
c:\documents and settings\Ja\Recent\ANTIGEN.dll
c:\documents and settings\Ja\Recent\ANTIGEN.drv
c:\documents and settings\Ja\Recent\ANTIGEN.exe
c:\documents and settings\Ja\Recent\CLSV.dll
c:\documents and settings\Ja\Recent\CLSV.drv
c:\documents and settings\Ja\Recent\CLSV.tmp
c:\documents and settings\Ja\Recent\DBOLE.sys
c:\documents and settings\Ja\Recent\ddv.dll
c:\documents and settings\Ja\Recent\dudl.dll
c:\documents and settings\Ja\Recent\dudl.exe
c:\documents and settings\Ja\Recent\dudl.sys
c:\documents and settings\Ja\Recent\eb.sys
c:\documents and settings\Ja\Recent\energy.drv
c:\documents and settings\Ja\Recent\energy.sys
c:\documents and settings\Ja\Recent\energy.tmp
c:\documents and settings\Ja\Recent\exec.dll
c:\documents and settings\Ja\Recent\exec.drv
c:\documents and settings\Ja\Recent\exec.tmp
c:\documents and settings\Ja\Recent\fan.drv
c:\documents and settings\Ja\Recent\fan.sys
c:\documents and settings\Ja\Recent\fix.exe
c:\documents and settings\Ja\Recent\fix.sys
c:\documents and settings\Ja\Recent\FS.drv
c:\documents and settings\Ja\Recent\FW.dll
c:\documents and settings\Ja\Recent\gid.dll
c:\documents and settings\Ja\Recent\gid.drv
c:\documents and settings\Ja\Recent\gid.sys
c:\documents and settings\Ja\Recent\grid.dll
c:\documents and settings\Ja\Recent\hymt.dll
c:\documents and settings\Ja\Recent\hymt.exe
c:\documents and settings\Ja\Recent\hymt.tmp
c:\documents and settings\Ja\Recent\kernel32.drv
c:\documents and settings\Ja\Recent\pal.dll
c:\documents and settings\Ja\Recent\pal.exe
c:\documents and settings\Ja\Recent\pal.tmp
c:\documents and settings\Ja\Recent\PE.dll
c:\documents and settings\Ja\Recent\PE.drv
c:\documents and settings\Ja\Recent\PE.sys
c:\documents and settings\Ja\Recent\PE.tmp
c:\documents and settings\Ja\Recent\runddl.drv
c:\documents and settings\Ja\Recent\SICKBOY.dll
c:\documents and settings\Ja\Recent\sld.exe
c:\documents and settings\Ja\Recent\sld.tmp
c:\documents and settings\Ja\Recent\std.sys
c:\documents and settings\Ja\Recent\tempdoc.tmp
c:\documents and settings\Ja\Recent\tjd.sys
c:\documents and settings\Ja\Recent\tjd.tmp

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-10-13 do 2010-11-13 )))))))))))))))))))))))))))))))
.

2010-11-12 22:01 . 2010-11-12 22:01 -------- d-----w- C:\rsit
2010-11-12 22:01 . 2010-11-12 22:01 -------- d-----w- c:\program files\trend micro
2010-11-12 21:14 . 2010-09-07 15:47 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-11-12 21:14 . 2010-09-07 15:52 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-11-12 21:14 . 2010-09-07 15:47 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-11-12 21:14 . 2010-09-07 15:52 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-11-12 21:14 . 2010-09-07 15:47 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-11-12 21:14 . 2010-09-07 15:47 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-11-12 21:14 . 2010-09-07 15:46 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-11-12 21:08 . 2010-09-07 16:12 38848 ----a-w- c:\windows\avastSS.scr
2010-11-12 21:08 . 2010-09-07 16:11 167592 ----a-w- c:\windows\system32\aswBoot.exe
2010-11-12 19:43 . 2010-11-12 19:43 -------- d-----w- c:\documents and settings\Ja\Data aplikací\Malwarebytes
2010-11-12 19:43 . 2010-04-29 14:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-11-12 19:43 . 2010-11-12 19:43 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-11-12 19:43 . 2010-11-12 19:43 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2010-11-12 19:43 . 2010-04-29 14:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-11-12 19:06 . 2010-11-12 19:06 -------- d-----w- c:\program files\Common Files\Adobe
2010-11-12 18:39 . 2010-11-12 18:39 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Alwil Software
2010-11-12 18:20 . 2010-11-12 18:20 -------- d-----w- c:\documents and settings\Administrator
2010-11-01 18:48 . 2010-11-01 18:48 -------- d-sh--w- c:\documents and settings\All Users\Data aplikací\SMHSIFZKPE
2010-10-15 16:30 . 2010-10-15 16:30 -------- d-----w- C:\FOUND.003

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-18 11:23 . 2008-11-29 23:32 974848 ----a-w- c:\windows\system32\mfc42u.dll
2010-09-18 07:53 . 2008-11-29 23:32 974848 ----a-w- c:\windows\system32\mfc42.dll
2010-09-18 07:53 . 2008-11-29 23:32 954368 ----a-w- c:\windows\system32\mfc40.dll
2010-09-18 07:53 . 2008-11-29 23:32 953856 ----a-w- c:\windows\system32\mfc40u.dll
2010-09-10 06:52 . 2008-11-29 23:32 916480 ----a-w- c:\windows\system32\wininet.dll
2010-09-10 06:52 . 2008-11-29 23:32 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-09-10 06:52 . 2008-11-29 23:32 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-09-01 12:52 . 2008-11-29 23:32 285824 ----a-w- c:\windows\system32\atmfd.dll
2010-09-01 08:57 . 2008-11-29 23:32 1852800 ----a-w- c:\windows\system32\win32k.sys
2010-08-27 09:03 . 2008-11-29 23:32 119808 ----a-w- c:\windows\system32\t2embed.dll
2010-08-27 06:54 . 2008-11-29 23:32 99840 ----a-w- c:\windows\system32\srvsvc.dll
2010-08-27 02:43 . 2008-05-05 06:25 5632 ----a-w- c:\windows\system32\xpsp4res.dll
2010-08-26 14:39 . 2008-11-29 23:32 357248 ----a-w- c:\windows\system32\drivers\srv.sys
2010-08-23 17:12 . 2008-11-29 23:32 617472 ----a-w- c:\windows\system32\comctl32.dll
2010-08-17 14:17 . 2008-11-29 23:32 58880 ----a-w- c:\windows\system32\spoolsv.exe
2010-08-16 09:45 . 2008-11-29 23:32 590848 ----a-w- c:\windows\system32\rpcrt4.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update"="c:\documents and settings\Ja\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" [2009-06-07 133104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2008-05-15 16862720]
"AzMixerSel"="c:\program files\Realtek\Audio\InstallShield\AzMixerSel.exe" [2006-07-17 53248]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-24 1044480]
"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2008-05-13 821768]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2008-04-14 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2008-04-14 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"PLFSetL"="c:\windows\PLFSetL.exe" [2007-07-05 94208]
"ProductReg"="c:\program files\Acer\WR_PopUp\ProductReg.exe" [2008-09-23 6144]
"ToolBoxFX"="c:\program files\HP\ToolBoxFX\bin\HPTLBXFX.exe" [2006-06-15 49152]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2005-02-16 49152]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-09-07 2838912]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Ja\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-2-16 384512]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
InterVideo WinCinema Manager.lnk - c:\program files\InterVideo\Common\Bin\WinCinemaMgr.exe [2008-11-30 114688]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [12. 11. 2010 22:14 165584]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [12. 11. 2010 22:14 17744]
S3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [30. 11. 2008 1:09 96856]
.
Obsah adresáře 'Naplánované úlohy'

2009-12-15 c:\windows\Tasks\User_Feed_Synchronization-{705AC178-A9D1-45C1-AADB-20CFAED3C986}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 03:31]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.sk/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyServer = http=127.0.0.1:25383
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKCU-Run-swg - c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
HKLM-Run-snp2uvc - c:\windows\vsnp2uvc.exe
SafeBoot-mcmscsvc
SafeBoot-MCODS



**************************************************************************
skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory:

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(728)
c:\windows\system32\igfxdev.dll
.
Celkový čas: 2010-11-13 20:18:38
ComboFix-quarantined-files.txt 2010-11-13 19:18

Před spuštěním: 3 815 841 792
Po spuštění: 4 441 563 136

WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

- - End Of File - - 84D11843C76D0667C83D75EE10647BC3

Log již vypadá čistý. Nemáte zač!