VIRY.CZ

Dobrý den, mám takovej problém už snad měsíc mám problém se stahováním nebo koukáním na internetová videa tady je popis mého problému.

Špatné stahování - Najednou se mi začalo stávát že kdykoliv když stahuju například z uložto tak mi to plynule stahuje a stahuje až se to uplně zastaví a už se to nerozjede stáhne se mi pak z fimu který má 700 třeba jen 30mb a vyskočí mikonec stahování, týká se to stahování odkudkoliv

Přehrávání flash videa - Když si chci pustit video z youtube nebo odjinud vždy se mi celé video načte ale přehraje se jen do první minuty a pak se to proste zastaví a dál nic..nereaguje to ani když to chci posunout vřed prostě mi to přehrává vždy jen kus videa. Já už nevím co s tim Projížděl jsem celej PC Avastem a Spyware Terminátorem ale můj problém to stále nevyřešilo.

Uměl by mi někdo poradit prosim?

Zdravim

Stiahnes>>RSIT >>log vloz sem,

To udělám jak? Jako hodit sem celý ten textový dokument co mi vyskočí?

no skopiruj obsah sem, vsak to mas v navode.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Doctor Rob at 2010-12-15 15:25:15
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 16 GB (8%) free of 191 GB
Total RAM: 1023 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:25:22, on 15.12.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\VMSnap3.EXE
C:\WINDOWS\Domino.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaDeviceMgmt.exe
C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaUpdateMgmt.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\ICQ7.0\ICQ.exe
C:\Documents and Settings\Doctor Rob\Plocha\RSIT.exe
C:\Program Files\trend micro\Doctor Rob.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://int.search-results.com?o=102368&l=dis
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\Doctor Rob\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\Doctor Rob\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Search-Results Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [VMSnap3] C:\WINDOWS\VMSnap3.EXE
O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [UVS11 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [Infium] "C:\QIP Infium JadrisPack\qip.exe" /isolated /autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Emma Device Management (EmmaDevMgmtSvc) - Sony Ericsson Mobile Communications - C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaDeviceMgmt.exe
O23 - Service: Emma Update Management (EmmaUpdMgmtSvc) - Sony Ericsson Mobile Communications - C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaUpdateMgmt.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 9772 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - C:\Documents and Settings\Doctor Rob\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll [2010-11-01 149968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-03-10 1397224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-09-15 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-09-15 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-03-10 1397224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-09-22 90112]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"CloneCDTray"=C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [2009-01-29 57344]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]
"NWEReboot"= []
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-09-07 2838912]
"VMSnap3"=C:\WINDOWS\VMSnap3.EXE [2006-08-30 49152]
"Domino"=C:\WINDOWS\Domino.EXE [2006-06-28 49152]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"P17Helper"=Rundll32 P17.dll,P17Helper []
"NokiaMServer"=C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
"UVS11 Preload"=C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe [2007-03-03 341488]
"CTSysVol"=C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe [2005-10-31 57344]
"UpdReg"=C:\WINDOWS\UpdReg.EXE [2000-05-11 90112]
"BigDog303"=C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH) []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2010-09-08 3037696]
"Infium"=C:\QIP Infium JadrisPack\qip.exe /isolated /autorun []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2007-06-27 118784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Crawler Spyware Terminator"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Sony Ericsson\SEMC OMSI Module\SEMC OMSI Module.exe"="C:\Program Files\Sony Ericsson\SEMC OMSI Module\SEMC OMSI Module.exe:*:Enabled:SEMC OMSI Module"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Sierra\FEAR\FEARMP.exe"="C:\Program Files\Sierra\FEAR\FEARMP.exe:*:Enabled:FEAR"
"C:\Documents and Settings\Doctor Rob\Plocha\Zástupci\uTorrent.exe"="C:\Documents and Settings\Doctor Rob\Plocha\Zástupci\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\QIP 2010 JadrisPack\qip.exe"="C:\QIP 2010 JadrisPack\qip.exe:*:Enabled:QIP 2010"
"C:\Program Files\Sony Ericsson\Update Service\Update Service.exe"="C:\Program Files\Sony Ericsson\Update Service\Update Service.exe:*:Enabled:Update Service"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Documents and Settings\Doctor Rob\Plocha\Left 4 Dead 2\left4dead2.exe"="C:\Documents and Settings\Doctor Rob\Plocha\Left 4 Dead 2\left4dead2.exe:*:Enabled:left4dead2"
"C:\Program Files\Left 4 Dead 2\left4dead2.exe"="C:\Program Files\Left 4 Dead 2\left4dead2.exe:*:Enabled:left4dead2"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\HYPERMAX\Painkiller\Bin\Painkiller.exe"="C:\Program Files\HYPERMAX\Painkiller\Bin\Painkiller.exe:*:Enabled:Painkiller"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-12-14 15:09:08 ----SHD---- C:\Config.Msi
2010-12-14 14:53:34 ----A---- C:\WINDOWS\system32\muweb.dll
2010-12-14 14:53:34 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2010-12-14 14:53:34 ----A---- C:\WINDOWS\system32\mucltui.dll
2010-12-13 20:42:24 ----D---- C:\Program Files\Microsoft Silverlight
2010-12-12 19:33:16 ----D---- C:\Documents and Settings\Doctor Rob\Data aplikací\Malwarebytes
2010-12-12 19:33:08 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-12-12 19:33:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-12-12 19:33:06 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-12-12 19:33:06 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2010-12-12 19:28:19 ----D---- C:\Program Files\trend micro
2010-12-12 19:28:18 ----D---- C:\rsit
2010-12-12 16:21:36 ----A---- C:\WINDOWS\unvise32.exe
2010-12-12 16:17:36 ----D---- C:\Program Files\DreamCatcher
2010-12-11 22:08:30 ----D---- C:\Program Files\HYPERMAX
2010-12-11 11:40:02 ----D---- C:\Program Files\Zrychleni Pocitace
2010-12-11 11:39:51 ----D---- C:\Documents and Settings\Doctor Rob\Data aplikací\OpenCandy
2010-12-11 11:39:46 ----D---- C:\Program Files\Ask.com
2010-12-11 11:39:26 ----D---- C:\Program Files\aTube Catcher
2010-12-05 14:38:58 ----D---- C:\Program Files\Common Files\Skype
2010-12-05 12:57:05 ----A---- C:\WINDOWS\system32\drivers\PnkBstrK.sys
2010-12-05 12:56:50 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-12-05 12:56:50 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2010-12-05 12:56:49 ----A---- C:\WINDOWS\system32\pbsvc.exe
2010-11-26 17:08:45 ----D---- C:\WINDOWS\Minidump
2010-11-26 16:09:06 ----N---- C:\WINDOWS\Updreg.EXE
2010-11-26 16:08:19 ----D---- C:\WINDOWS\system32\Data
2010-11-26 08:17:47 ----A---- C:\moduleName.txt
2010-11-26 08:03:04 ----D---- C:\Docs
2010-11-26 08:03:02 ----D---- C:\Program Files\id Software
2010-11-20 13:17:19 ----D---- C:\Program Files\Paint.NET

======List of files/folders modified in the last 1 months======

2010-12-15 15:22:36 ----D---- C:\WINDOWS\Prefetch
2010-12-15 15:20:27 ----A---- C:\WINDOWS\NeroDigital.ini
2010-12-15 15:18:33 ----D---- C:\Documents and Settings\Doctor Rob\Data aplikací\ICQ
2010-12-15 15:07:14 ----D---- C:\WINDOWS\Temp
2010-12-15 15:06:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2010-12-15 09:33:30 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-12-14 22:01:09 ----SHD---- C:\WINDOWS\Installer
2010-12-14 21:11:31 ----D---- C:\Documents and Settings\Doctor Rob\Data aplikací\AIMP
2010-12-14 20:36:39 ----D---- C:\Documents and Settings\Doctor Rob\Data aplikací\uTorrent
2010-12-14 15:33:13 ----AD---- C:\WINDOWS
2010-12-14 15:30:57 ----D---- C:\WINDOWS\system32\CatRoot2
2010-12-14 15:24:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-12-14 15:21:25 ----RSD---- C:\WINDOWS\assembly
2010-12-14 15:16:24 ----RSD---- C:\WINDOWS\Fonts
2010-12-14 15:16:03 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-12-14 15:15:47 ----D---- C:\WINDOWS\system32
2010-12-14 15:14:42 ----D---- C:\Program Files\Microsoft Works
2010-12-14 15:08:32 ----A---- C:\WINDOWS\win.ini
2010-12-14 15:08:31 ----D---- C:\Program Files\Common Files\System
2010-12-14 14:53:30 ----HD---- C:\WINDOWS\inf
2010-12-13 20:56:08 ----D---- C:\Documents and Settings\Doctor Rob\Data aplikací\Skype
2010-12-13 20:42:37 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-12-13 20:42:24 ----RD---- C:\Program Files
2010-12-13 20:23:21 ----D---- C:\Documents and Settings\Doctor Rob\Data aplikací\skypePM
2010-12-12 20:50:03 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-12-12 20:44:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2010-12-12 20:44:48 ----D---- C:\WINDOWS\system32\drivers
2010-12-12 12:06:20 ----D---- C:\Program Files\Spyware Terminator
2010-12-11 11:48:22 ----D---- C:\Documents and Settings\Doctor Rob\Data aplikací\Spyware Terminator
2010-12-11 11:39:54 ----SD---- C:\WINDOWS\Tasks
2010-12-10 18:45:40 ----D---- C:\Program Files\Mozilla Firefox
2010-12-09 12:10:01 ----D---- C:\Program Files\AAA Dokument
2010-12-05 14:38:58 ----RD---- C:\Program Files\Skype
2010-12-05 14:38:58 ----D---- C:\Program Files\Common Files
2010-12-05 14:38:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2010-12-05 13:51:43 ----SD---- C:\Documents and Settings\Doctor Rob\Data aplikací\Microsoft
2010-12-05 12:56:45 ----D---- C:\WINDOWS\system32\DirectX
2010-11-26 16:18:28 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-11-26 16:11:38 ----HD---- C:\Program Files\InstallShield Installation Information
2010-11-26 16:09:07 ----D---- C:\Program Files\Creative
2010-11-26 16:08:46 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-11-26 16:08:30 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-11-20 13:21:42 ----D---- C:\WINDOWS\WinSxS
2010-11-19 14:29:03 ----D---- C:\Documents and Settings\Doctor Rob\Data aplikací\abgx360
2010-11-18 17:30:33 ----D---- C:\WINDOWS\Debug

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 gagp30kx;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\WINDOWS\system32\DRIVERS\gagp30kx.sys [2008-04-13 46464]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-06-08 691696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-01-18 77696]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 AmdK8;AMD Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 36352]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2007-06-27 2303488]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
R3 BTHMODEM;Ovladač komunikace modemu Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-13 37888]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys [2005-01-10 138752]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2004-04-15 42496]
R3 LgBttPort;LGE Bluetooth TransPort; C:\WINDOWS\system32\DRIVERS\lgbtport.sys [2009-09-29 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\lgbtbus.sys [2009-09-29 10496]
R3 LGVMODEM;LGE Virtual Modem; C:\WINDOWS\system32\DRIVERS\lgvmodem.sys [2009-09-29 12928]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\DRIVERS\ctoss2k.sys [2005-01-10 106496]
R3 P17;Sound Blaster Audigy; C:\WINDOWS\system32\drivers\P17.sys [2005-07-07 1389056]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\WINDOWS\system32\DRIVERS\seehcri.sys [2010-07-27 27632]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 vmfilter303;vmfilter303; C:\WINDOWS\system32\drivers\vmfilter303.sys [2006-04-25 428160]
R3 ZSMC303;A4TECH PC Camera; C:\WINDOWS\System32\Drivers\usbVM303.sys [2006-12-01 392122]
S1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys []
S1 InCDRm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys []
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-09-22 3727680]
S3 aoi4vbyj;aoi4vbyj; C:\WINDOWS\system32\drivers\aoi4vbyj.sys []
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 ggflt;SEMC USB Flash Driver Filter; C:\WINDOWS\system32\DRIVERS\ggflt.sys [2009-04-06 13224]
S3 ggsemc;SEMC USB Flash Driver; C:\WINDOWS\system32\DRIVERS\ggsemc.sys [2009-04-06 25512]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys []
S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys [2010-04-13 13056]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys [2010-04-13 20864]
S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys [2010-04-13 24960]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2009-07-14 444136]
S3 WinUSB;Sony Ericsson USB Device sa0101 Driver; C:\WINDOWS\system32\DRIVERS\WinUSB.sys [2006-11-02 39368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-01-18 83328]
S4 InCDFs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2007-06-27 483328]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Capture Device Service;Capture Device Service; C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe [2007-03-06 198168]
R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.exe [1999-12-13 44032]
R2 EmmaDevMgmtSvc;Emma Device Management; C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaDeviceMgmt.exe [2010-07-01 306296]
R2 EmmaUpdMgmtSvc;Emma Update Management; C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaUpdateMgmt.exe [2010-07-01 162936]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-09-15 153376]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-12-05 66872]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2010-09-08 488960]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2007-03-03 67056]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-06-29 520192]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-06-02 637952]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

odinstaluj
C:\Program Files\Ask.com

Treba vypnut >>rezidentny stit.
v Spyware Terminator

Spust combofix
PROSIM CITAJTE POZORNE NAVOD!!!,

Použij ComboFix podle tohoto návodu: http://www.bleepingcomputer.com/combofi ... t-combofix
Log znej vloz sem.

Ok, tak jo sice jsem ten rezidentni stit nemel uaplej u spywara ale tak sem ho smazal a uvidime jesi to pue uz normalne za chvili

Tak mi to bohuzel porad nefunguje

stell píše:odinstaluj
C:\Program Files\Ask.com

Treba vypnut >>rezidentny stit.
v Spyware Terminator

Spust combofix
PROSIM CITAJTE POZORNE NAVOD!!!,

Použij ComboFix podle tohoto návodu: http://www.bleepingcomputer.com/combofi ... t-combofix
Log znej vloz sem.

A preco nerobis to co som tu napisal:
Spust combofix

Dobrý den zde jsou výsledky

ComboFix 10-12-25.01 - Doctor Rob 25.12.2010 20:56:45.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1023.509 [GMT 1:00]
Spuštěný z: c:\documents and settings\Doctor Rob\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
ADS - WINDOWS: deleted 24 bytes in 1 streams.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Doctor Rob\Plocha\Daisy Marie - Good Morning Woody
c:\windows\settings.reg
c:\windows\system32\Data

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-11-25 do 2010-12-25 )))))))))))))))))))))))))))))))
.

2010-12-25 09:20 . 2010-12-25 09:20 -------- d-----w- c:\windows\EffectResources
2010-12-25 09:20 . 2006-02-23 12:39 40960 ----a-r- c:\windows\system32\setupfilter.exe
2010-12-25 09:20 . 2006-04-25 02:57 428160 ----a-r- c:\windows\system32\drivers\vmfilter303.sys
2010-12-25 09:20 . 2005-04-30 10:46 102400 ----a-r- c:\windows\VM303Cap.exe
2010-12-25 09:20 . 2006-06-28 09:54 49152 ----a-r- c:\windows\Domino.exe
2010-12-25 09:20 . 2006-08-30 02:58 49152 ----a-r- c:\windows\VMSnap3.exe
2010-12-25 09:20 . 2006-04-11 05:25 176128 ----a-r- c:\windows\amcap.exe
2010-12-25 09:20 . 2005-04-30 10:46 81920 ----a-r- c:\windows\system32\VM303STI.dll
2010-12-25 09:20 . 2006-08-31 02:30 392058 ----a-r- c:\windows\system32\drivers\usbVM303.sys
2010-12-25 09:20 . 2006-03-28 08:53 208986 ----a-r- c:\windows\system32\VM303Prp.Ax
2010-12-25 09:20 . 2010-12-25 09:20 -------- d-----w- c:\windows\LastGood.Tmp
2010-12-16 06:13 . 2010-11-02 15:17 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
2010-12-16 06:11 . 2010-10-11 14:59 45568 -c----w- c:\windows\system32\dllcache\wab.exe
2010-12-14 13:53 . 2009-08-06 18:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-12-14 13:53 . 2009-08-06 18:23 215920 ----a-w- c:\windows\system32\muweb.dll
2010-12-12 18:33 . 2010-12-12 18:33 -------- d-----w- c:\documents and settings\Doctor Rob\Data aplikací\Malwarebytes
2010-12-12 18:33 . 2010-04-29 14:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-12 18:33 . 2010-12-12 18:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2010-12-12 18:33 . 2010-12-12 18:33 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-12-12 18:33 . 2010-04-29 14:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-12 18:28 . 2010-12-15 14:25 -------- d-----w- c:\program files\trend micro
2010-12-12 15:21 . 2003-03-15 22:15 90112 ----a-w- c:\windows\unvise32.exe
2010-12-12 15:17 . 2010-12-12 15:17 -------- d-----w- c:\program files\DreamCatcher
2010-12-11 21:08 . 2010-12-11 21:08 -------- d-----w- c:\program files\HYPERMAX
2010-12-11 10:40 . 2010-12-11 10:43 -------- d-----w- c:\program files\Zrychleni Pocitace
2010-12-11 10:39 . 2010-12-11 10:39 -------- d-----w- c:\documents and settings\Doctor Rob\Local Settings\Data aplikací\QuickStores
2010-12-11 10:39 . 2010-12-11 10:40 -------- d-----w- c:\documents and settings\Doctor Rob\Local Settings\Data aplikací\OpenCandy
2010-12-11 10:39 . 2010-12-11 10:39 -------- d-----w- c:\documents and settings\Doctor Rob\Data aplikací\OpenCandy
2010-12-11 10:39 . 2010-12-11 10:40 -------- d-----w- c:\program files\aTube Catcher
2010-12-05 13:38 . 2010-12-05 13:38 -------- d-----w- c:\program files\Common Files\Skype
2010-12-05 11:57 . 2010-12-05 11:57 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-12-05 11:56 . 2010-12-05 11:56 103736 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-12-05 11:56 . 2010-12-05 11:56 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-12-05 11:56 . 2010-12-05 11:56 669184 ----a-w- c:\windows\system32\pbsvc.exe
2010-11-26 15:09 . 2000-05-11 00:00 90112 ------w- c:\windows\Updreg.EXE
2010-11-26 07:03 . 2010-12-15 19:26 -------- d-----w- C:\Docs
2010-11-26 07:03 . 2010-11-26 07:03 -------- d-----w- c:\program files\id Software

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-05 11:57 . 2010-07-01 14:41 22328 ----a-w- c:\documents and settings\Doctor Rob\Data aplikací\PnkBstrK.sys
2010-12-05 11:57 . 2010-07-01 14:41 22328 ----a-w- c:\documents and settings\Doctor Rob\Data aplikací\PnkBstrK.sys
2010-12-05 11:57 . 2010-07-01 14:41 22328 ----a-w- c:\documents and settings\Doctor Rob\Data aplikací\PnkBstrK.sys
2010-12-05 11:57 . 2010-07-01 14:41 22328 ----a-w- c:\documents and settings\Doctor Rob\Data aplikací\PnkBstrK.sys
2010-11-18 18:15 . 2010-06-08 14:36 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-11 21:15 . 2010-11-11 21:15 770048 ----a-w- c:\windows\TMUninst.exe
2010-11-05 05:02 . 2006-03-02 12:00 668160 ----a-w- c:\windows\system32\wininet.dll
2010-11-05 05:02 . 2006-03-02 12:00 81920 ----a-w- c:\windows\system32\ieencode.dll
2010-11-05 05:02 . 2006-03-02 12:00 61952 ----a-w- c:\windows\system32\tdc.ocx
2010-11-05 04:59 . 2006-03-02 12:00 370176 ----a-w- c:\windows\system32\html.iec
2010-11-02 15:17 . 2006-03-02 12:00 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
2010-11-01 10:40 . 2010-11-05 14:44 149968 ----a-w- c:\documents and settings\Doctor Rob\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
2010-11-01 10:40 . 2010-11-05 14:44 149968 ----a-w- c:\documents and settings\Doctor Rob\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
2010-11-01 10:40 . 2010-11-05 14:44 149968 ----a-w- c:\documents and settings\Doctor Rob\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
2010-11-01 10:40 . 2010-11-05 14:44 149968 ----a-w- c:\documents and settings\Doctor Rob\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
2010-10-28 13:09 . 2006-03-02 12:00 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:58 . 2006-03-02 12:00 1853312 ----a-w- c:\windows\system32\win32k.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"SoundMan"="SOUNDMAN.EXE" [2005-09-22 90112]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"CloneCDTray"="c:\program files\SlySoft\CloneCD\CloneCDTray.exe" [2009-01-29 57344]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-09-07 2838912]
"VMSnap3"="c:\windows\VMSnap3.exe" [2006-08-30 49152]
"Domino"="c:\windows\Domino.exe" [2006-06-28 49152]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"P17Helper"="P17.dll" [2005-05-03 64512]
"UVS11 Preload"="c:\program files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe" [2007-03-03 341488]
"CTSysVol"="c:\program files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe" [2005-10-31 57344]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\ICQ7.0\\ICQ.exe"=
"c:\\Program Files\\ICQ7.0\\aolload.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Sony Ericsson\\SEMC OMSI Module\\SEMC OMSI Module.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Documents and Settings\\Doctor Rob\\Plocha\\Zástupci\\uTorrent.exe"=
"c:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\HYPERMAX\\Painkiller\\Bin\\Painkiller.exe"=
"c:\\Program Files\\aTube Catcher\\yct.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"24475:TCP"= 24475:TCP:BitComet 24475 TCP
"24475:UDP"= 24475:UDP:BitComet 24475 UDP

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [8.6.2010 16:35 691696]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [23.6.2010 9:14 165584]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [23.6.2010 9:14 17744]
R2 EmmaDevMgmtSvc;Emma Device Management;c:\program files\Common Files\Sony Ericsson\Emma Core\Services\EmmaDeviceMgmt.exe [1.7.2010 16:43 306296]
R2 EmmaUpdMgmtSvc;Emma Update Management;c:\program files\Common Files\Sony Ericsson\Emma Core\Services\EmmaUpdateMgmt.exe [1.7.2010 16:43 162936]
R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\drivers\lgbtport.sys [29.9.2009 7:11 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\drivers\lgbtbus.sys [29.9.2009 7:11 10496]
R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\drivers\lgvmodem.sys [29.9.2009 7:11 12928]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [27.7.2010 7:54 27632]
R3 vmfilter303;vmfilter303;c:\windows\system32\drivers\vmfilter303.sys [25.12.2010 10:20 428160]
S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\drivers\ggflt.sys [24.7.2010 9:44 13224]
.
Obsah adresáře 'Naplánované úlohy'

2010-12-14 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://int.search-results.com?o=102368&l=dis
uDefault_Search_URL = hxxp://search.qip.ru
uSearchAssistant = hxxp://search.qip.ru/ie
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} - hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
FF - ProfilePath - c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\
FF - prefs.js: browser.search.selectedEngine - Search-Results
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://websearch.search-results.com/redirect?client=ff&src=kw&tb=ATU-SRS&o=102365&locale=en_ZZ&apn_uid=298D53C4-6CC9-4EAC-A8B6-459E8FFB5215&apn_ptnrs=Q8&apn_sauid=0777ECBB-ABE9-4F29-8E51-B581A7296FFC&apn_dtid=YYYYYYYYCZ&q=
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Battlefield Heroes Updater: battlefieldheroespatcher@ea.com - %profile%\extensions\battlefieldheroespatcher@ea.com
FF - Ext: QipAuthorizer: {32a1fd71-835e-4b11-8e54-886fda0b4c89} - %profile%\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}
FF - Ext: aTube Toolbar: toolbar@ask.com - %profile%\extensions\toolbar@ask.com
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

URLSearchHooks-{00000000-6E41-4FD3-8538-502F5495E5FC} - c:\program files\Ask.com\GenericAskToolbar.dll
BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files\Ask.com\GenericAskToolbar.dll
Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files\Ask.com\GenericAskToolbar.dll
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files\Ask.com\GenericAskToolbar.dll
HKCU-Run-Infium - c:\qip infium jadrispack\qip.exe
HKLM-Run-NWEReboot - (no file)
HKLM-Run-BigDog303 - c:\windows\VM303_STI.EXE



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-25 21:04
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
BigDog303 = c:\windows\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)????????????????0?????????@??????????????

skenování skrytých souborů ...


c:\windows\TEMP\_asw_aisI.tm~a02900

sken byl úspešně dokončen
skryté soubory: 1

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-823518204-1708537768-725345543-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:d7,48,ea,9e,c5,c2,c1,f5,45,c3,1a,c0,4d,78,59,8b,40,4f,25,ae,db,7d,47,
d0,0e,84,80,63,f8,f6,93,dd,66,9b,56,15,3b,28,2f,ce,dc,f2,12,35,a5,b0,13,24,\
"??"=hex:58,56,be,4d,79,d5,d4,91,5a,72,85,27,e1,43,1e,74
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(712)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(2912)
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Common Files\InterVideo\DeviceService\DevSvc.exe
c:\windows\system32\CTsvcCDA.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\SOUNDMAN.EXE
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
c:\windows\system32\rundll32.exe
c:\windows\system32\Rundll32.exe
c:\program files\Common Files\Nokia\MPlatform\NokiaMServer.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Celkový čas: 2010-12-25 21:09:04 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-12-25 20:09

Před spuštěním: Volných bajtů: 15 627 051 008
Po spuštění: Volných bajtů: 19 104 915 456

WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

Current=3 Default=3 Failed=1 LastKnownGood=4 Sets=1,2,3,4
- - End Of File - - 0ACE566F16DF9E5D5BD9DFC7CCDF111F

Když stahuju tak se mi to pochvili zastavi a...nic dal..tak dam pauzu a pokracovat a vyskoci mi toto

C:\Documents and Settings\Rob\Plocha\22.Bullets.2010.DVDRip.XviD.AC3-ViSiON.czsub.part1.rar.part nemohl být uložen, protože nemohl být přečten zdrojový soubor.

Zkuste to prosím za chvíli znovu nebo kontaktujte administrátora serveru.

Tohle se mi stává ale na všech stránkách odkud stahuju..

Tak ako kokos napisal

1. pokud je film(jaky koliv soubor) znamy a hodne lidi stahuje muzou to omezit schvalne z duvodu ze za financni poplatek zprovozni plnou rychlost stahovani.
2. pokud je to neznamy nebo novy film tak ho nestahne nikdo az par za real penize koupi a stahnou pak muzou stahnout ostatni.
3. funguje to na principu cim vic stahuje lidi tym vetsi rychlost.

k tomu ze mu tam vyskakuje zdrojovy kod nenalezen je to celkem logicke pred stahovanim zadava captcha kod a pak to zastavi je logicke ze mu to omezi musi zacit stahovat od znova protoze ten kod po zastaveni uz neplati. to je k tematu a mimo nej mam pocit ze jde o warez stranky.

Pri tejto akcii je nutné mať ComboFix na ploche.

Vypni>FIREWALL>Antivir>Antispyware>vsetko rezidentne.

Otvor Notepad (Poznámkový blok) a zkopíruj do neho celý zeleny tex: Potom klik na Subor -> Uložiť ako.. .. -> Ako je Názov souboru tak do toho riadku napiš:CFScript.txt
Typ súboru tak tam vyberies *všetky súbory
A ulož ho na plochu.> Pozor CFScript.txt>Neotvarat a nemoze byt ani>CFScript.txt.txt A Urobis Toto :


Po skonceni skenu vlož log čo ComboFix vytvorí

Tak toto je výsledek

ComboFix 10-12-25.03 - Doctor Rob 26.12.2010 17:13:46.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1023.635 [GMT 1:00]
Spuštěný z: c:\documents and settings\Doctor Rob\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Doctor Rob\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\datastore\cache.sqlite
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\defaults.js.bak
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\defaults\preferences\defaults.js
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\chrome.manifest
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\chrome\temp\askToolbar.exe
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Sat-11-Dec-2010-15-54-14-GMT\ff-config.zip
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\install.rdf
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\logs\asktb-log-1292220692476.html
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\logs\asktb-log-1292244169058.html
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\logs\asktb-log-1292246488282.html
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\logs\asktb-log-1292250354227.html
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\logs\asktb-log-1292258777958.html
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\logs\asktb-log-1292306940658.html
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\logs\asktb-log-1292307128379.html
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\logs\asktb-log-1292307779731.html
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\logs\asktb-log-1292310021411.html
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\logs\asktb-log-1292310312135.html
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\logs\asktb-log-1292311257669.html
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\logs\asktb-log-1292334823767.html
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\logs\asktb-log-1292334824564.html
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\logs\asktb-log-1292337281266.html
c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\extensions\toolbar@ask.com\searchplugins\search-results.xml

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-11-26 do 2010-12-26 )))))))))))))))))))))))))))))))
.

2010-12-25 09:20 . 2010-12-25 09:20 -------- d-----w- c:\windows\EffectResources
2010-12-25 09:20 . 2006-02-23 12:39 40960 ----a-r- c:\windows\system32\setupfilter.exe
2010-12-25 09:20 . 2006-04-25 02:57 428160 ----a-r- c:\windows\system32\drivers\vmfilter303.sys
2010-12-25 09:20 . 2005-04-30 10:46 102400 ----a-r- c:\windows\VM303Cap.exe
2010-12-25 09:20 . 2006-06-28 09:54 49152 ----a-r- c:\windows\Domino.exe
2010-12-25 09:20 . 2006-08-30 02:58 49152 ----a-r- c:\windows\VMSnap3.exe
2010-12-25 09:20 . 2006-04-11 05:25 176128 ----a-r- c:\windows\amcap.exe
2010-12-25 09:20 . 2005-04-30 10:46 81920 ----a-r- c:\windows\system32\VM303STI.dll
2010-12-25 09:20 . 2006-08-31 02:30 392058 ----a-r- c:\windows\system32\drivers\usbVM303.sys
2010-12-25 09:20 . 2006-03-28 08:53 208986 ----a-r- c:\windows\system32\VM303Prp.Ax
2010-12-16 06:13 . 2010-11-02 15:17 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
2010-12-16 06:11 . 2010-10-11 14:59 45568 -c----w- c:\windows\system32\dllcache\wab.exe
2010-12-14 13:53 . 2009-08-06 18:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-12-14 13:53 . 2009-08-06 18:23 215920 ----a-w- c:\windows\system32\muweb.dll
2010-12-12 18:33 . 2010-12-12 18:33 -------- d-----w- c:\documents and settings\Doctor Rob\Data aplikací\Malwarebytes
2010-12-12 18:33 . 2010-04-29 14:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-12 18:33 . 2010-12-12 18:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2010-12-12 18:33 . 2010-12-12 18:33 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-12-12 18:33 . 2010-04-29 14:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-12 18:28 . 2010-12-15 14:25 -------- d-----w- c:\program files\trend micro
2010-12-12 15:21 . 2003-03-15 22:15 90112 ----a-w- c:\windows\unvise32.exe
2010-12-12 15:17 . 2010-12-12 15:17 -------- d-----w- c:\program files\DreamCatcher
2010-12-11 21:08 . 2010-12-11 21:08 -------- d-----w- c:\program files\HYPERMAX
2010-12-11 10:40 . 2010-12-11 10:43 -------- d-----w- c:\program files\Zrychleni Pocitace
2010-12-11 10:39 . 2010-12-11 10:39 -------- d-----w- c:\documents and settings\Doctor Rob\Local Settings\Data aplikací\QuickStores
2010-12-11 10:39 . 2010-12-11 10:40 -------- d-----w- c:\documents and settings\Doctor Rob\Local Settings\Data aplikací\OpenCandy
2010-12-11 10:39 . 2010-12-11 10:39 -------- d-----w- c:\documents and settings\Doctor Rob\Data aplikací\OpenCandy
2010-12-11 10:39 . 2010-12-11 10:40 -------- d-----w- c:\program files\aTube Catcher
2010-12-05 13:38 . 2010-12-05 13:38 -------- d-----w- c:\program files\Common Files\Skype
2010-12-05 11:57 . 2010-12-05 11:57 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-12-05 11:56 . 2010-12-05 11:56 103736 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-12-05 11:56 . 2010-12-05 11:56 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-12-05 11:56 . 2010-12-05 11:56 669184 ----a-w- c:\windows\system32\pbsvc.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-05 11:57 . 2010-07-01 14:41 22328 ----a-w- c:\documents and settings\Doctor Rob\Data aplikací\PnkBstrK.sys
2010-12-05 11:57 . 2010-07-01 14:41 22328 ----a-w- c:\documents and settings\Doctor Rob\Data aplikací\PnkBstrK.sys
2010-12-05 11:57 . 2010-07-01 14:41 22328 ----a-w- c:\documents and settings\Doctor Rob\Data aplikací\PnkBstrK.sys
2010-12-05 11:57 . 2010-07-01 14:41 22328 ----a-w- c:\documents and settings\Doctor Rob\Data aplikací\PnkBstrK.sys
2010-11-18 18:15 . 2010-06-08 14:36 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-11 21:15 . 2010-11-11 21:15 770048 ----a-w- c:\windows\TMUninst.exe
2010-11-05 05:02 . 2006-03-02 12:00 668160 ----a-w- c:\windows\system32\wininet.dll
2010-11-05 05:02 . 2006-03-02 12:00 81920 ----a-w- c:\windows\system32\ieencode.dll
2010-11-05 05:02 . 2006-03-02 12:00 61952 ----a-w- c:\windows\system32\tdc.ocx
2010-11-05 04:59 . 2006-03-02 12:00 370176 ----a-w- c:\windows\system32\html.iec
2010-11-02 15:17 . 2006-03-02 12:00 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
2010-11-01 10:40 . 2010-11-05 14:44 149968 ----a-w- c:\documents and settings\Doctor Rob\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
2010-11-01 10:40 . 2010-11-05 14:44 149968 ----a-w- c:\documents and settings\Doctor Rob\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
2010-11-01 10:40 . 2010-11-05 14:44 149968 ----a-w- c:\documents and settings\Doctor Rob\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
2010-11-01 10:40 . 2010-11-05 14:44 149968 ----a-w- c:\documents and settings\Doctor Rob\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
2010-10-28 13:09 . 2006-03-02 12:00 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:58 . 2006-03-02 12:00 1853312 ----a-w- c:\windows\system32\win32k.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"SoundMan"="SOUNDMAN.EXE" [2005-09-22 90112]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"CloneCDTray"="c:\program files\SlySoft\CloneCD\CloneCDTray.exe" [2009-01-29 57344]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-09-07 2838912]
"VMSnap3"="c:\windows\VMSnap3.exe" [2006-08-30 49152]
"Domino"="c:\windows\Domino.exe" [2006-06-28 49152]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"P17Helper"="P17.dll" [2005-05-03 64512]
"UVS11 Preload"="c:\program files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe" [2007-03-03 341488]
"CTSysVol"="c:\program files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe" [2005-10-31 57344]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"BigDog303"="c:\windows\VM303_STI.EXE" [BU]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\ICQ7.0\\ICQ.exe"=
"c:\\Program Files\\ICQ7.0\\aolload.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Sony Ericsson\\SEMC OMSI Module\\SEMC OMSI Module.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Documents and Settings\\Doctor Rob\\Plocha\\Zástupci\\uTorrent.exe"=
"c:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\HYPERMAX\\Painkiller\\Bin\\Painkiller.exe"=
"c:\\Program Files\\aTube Catcher\\yct.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"24475:TCP"= 24475:TCP:BitComet 24475 TCP
"24475:UDP"= 24475:UDP:BitComet 24475 UDP

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [8.6.2010 16:35 691696]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [23.6.2010 9:14 165584]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [23.6.2010 9:14 17744]
R2 EmmaDevMgmtSvc;Emma Device Management;c:\program files\Common Files\Sony Ericsson\Emma Core\Services\EmmaDeviceMgmt.exe [1.7.2010 16:43 306296]
R2 EmmaUpdMgmtSvc;Emma Update Management;c:\program files\Common Files\Sony Ericsson\Emma Core\Services\EmmaUpdateMgmt.exe [1.7.2010 16:43 162936]
R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\drivers\lgbtport.sys [29.9.2009 7:11 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\drivers\lgbtbus.sys [29.9.2009 7:11 10496]
R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\drivers\lgvmodem.sys [29.9.2009 7:11 12928]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [27.7.2010 7:54 27632]
R3 vmfilter303;vmfilter303;c:\windows\system32\drivers\vmfilter303.sys [25.12.2010 10:20 428160]
S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\drivers\ggflt.sys [24.7.2010 9:44 13224]
.
Obsah adresáře 'Naplánované úlohy'

2010-12-14 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
.
------- Doplňkový sken -------
.
uSearchAssistant = hxxp://search.qip.ru/ie
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} - hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
FF - ProfilePath - c:\documents and settings\Doctor Rob\Data aplikací\Mozilla\Firefox\Profiles\23vdwov0.default\
FF - prefs.js: browser.search.selectedEngine - Search-Results
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Battlefield Heroes Updater: battlefieldheroespatcher@ea.com - %profile%\extensions\battlefieldheroespatcher@ea.com
FF - Ext: QipAuthorizer: {32a1fd71-835e-4b11-8e54-886fda0b4c89} - %profile%\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-26 17:20
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
BigDog303 = c:\windows\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)????????????????0?????????@??????????????

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-823518204-1708537768-725345543-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:d7,48,ea,9e,c5,c2,c1,f5,45,c3,1a,c0,4d,78,59,8b,40,4f,25,ae,db,7d,47,
d0,0e,84,80,63,f8,f6,93,dd,66,9b,56,15,3b,28,2f,ce,dc,f2,12,35,a5,b0,13,24,\
"??"=hex:58,56,be,4d,79,d5,d4,91,5a,72,85,27,e1,43,1e,74
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(704)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(3756)
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Common Files\InterVideo\DeviceService\DevSvc.exe
c:\windows\system32\CTsvcCDA.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\windows\SOUNDMAN.EXE
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
c:\windows\system32\rundll32.exe
c:\windows\system32\Rundll32.exe
c:\program files\Common Files\Nokia\MPlatform\NokiaMServer.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
.
**************************************************************************
.
Celkový čas: 2010-12-26 17:26:09 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-12-26 16:26
ComboFix2.txt 2010-12-25 20:09

Před spuštěním: Volných bajtů: 19 311 644 672
Po spuštění: Volných bajtů: 19 305 226 240

- - End Of File - - 1656736E0F295C39728B7761A42901ED

Ako sa chova pc??

No problém stále přetrvává. Stále se mi přerušuje stahování a obcas mi hned po otevreni aložky ukaže stranka nenalezena az kdyz to zkusim znovu