VIRY.CZ

Dobrý den strašně pomalu se mi načítají stránky. Když už se mi stránky otevřou na při otvíraní témat to tyké dlouho trvá. Při testu rychlosti internetu odezva 91%,Download 25Mb,Upload 1.5Mb. Také Avira se mi nerozjede neotevře se deštník ani když dám v nastavení spustit tak mne to odkáže ne help. Už jsem projel PC CcCleanrem

Logfile of random's system information tool 1.09 (written by random/random)
Run by Tatik at 2011-07-26 12:23:40
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 27 GB (36%) free of 76 GB
Total RAM: 1023 MB (55% free)


======Scheduled tasks folder======

C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Tatik\Data aplikací\Mozilla\Firefox\Profiles\53jjrjh8.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{9AA46F4F-4DC7-4c06-97AF-5035170634FE}:4.0, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, jqs@sun.com:1.0, {20a82645-c095-46ed-80e3-08825760534b}:0.0.0, {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.18"
prefs.js - "keyword.URL" - "http://websearch.ask.com/redirect?clien ... YYYYYCZ&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi]
"Description"=ZoneAlarm Toolbar Api
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@virtools.com/3DviaPlayer]
"Description"=3Dvia Player For Mozilla Based Broswer
"Path"=C:\Program Files\Virtools\3D Life Player\npvirtools.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsILegitCheckPlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
npLegitCheckPlugin.dll
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Tatik\Data aplikací\Mozilla\Firefox\Profiles\53jjrjh8.default\extensions\
toolbar@ask.com

C:\Documents and Settings\Tatik\Data aplikací\Mozilla\Firefox\Profiles\53jjrjh8.default\searchplugins\
askcom.xml
daemon-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2011-06-06 64928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-05-17 1490312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-04 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-05-04 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-01-03 1019128]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-05-17 1490312]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-07-08 1753192]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-07-09 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-07-09 13923432]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2010-11-30 281768]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2010-05-05 153672]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-03-11 49152]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2008-11-02 167936]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]
"ApnUpdater"=C:\Program Files\Ask.com\Updater\Updater.exe [2011-05-17 395144]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-12-29 687560]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^BlueSoleil.lnk]
C:\PROGRA~1\IVTCOR~1\BLUESO~1\BLUESO~1.EXE [2005-06-06 1183744]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Documents and Settings\Tatik\Nabídka Start\Programy\Po spuštění
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoResolveSearch"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\rFactor\rfactor.exe"="C:\Program Files\rFactor\rfactor.exe:*:Enabled:rFactor"
"C:\Program Files\rFactor\rFactor Dedicated.exe"="C:\Program Files\rFactor\rFactor Dedicated.exe:*:Enabled:rFactor"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\Program Files\QIP\qip.exe"="C:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"D:\hry\FarCry bojovka\Bin32\FarCry.exe"="D:\hry\FarCry bojovka\Bin32\FarCry.exe:*:Enabled:Far Cry"
"C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprbui.exe"="C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprbui.exe:*:Enabled:HP Product Assistant"
"C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:HP Photosmart Essential 2.01"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\TeamViewer\Version5\TeamViewer.exe"="C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\DsNET Corp\aTube Catcher 1.0\yct.exe"="C:\Program Files\DsNET Corp\aTube Catcher 1.0\yct.exe:*:Enabled:aTube Catcher"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"VIDC.DIVX"=divx.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"msacm.lhacm"=lhacm.acm
"VIDC.MPG4"=mpg4c32.dll
"VIDC.MP42"=mpg4c32.dll
"VIDC.FMVC"=fmcodec.dll

======List of files/folders created in the last 1 month======

2011-07-26 12:23:41 ----D---- C:\Program Files\trend micro
2011-07-24 11:29:19 ----D---- C:\Program Files\Zrychleni Pocitace
2011-07-24 11:29:12 ----D---- C:\Documents and Settings\Tatik\Data aplikací\OpenCandy
2011-07-24 11:28:34 ----D---- C:\Program Files\Ask.com
2011-07-24 10:33:58 ----D---- C:\Documents and Settings\Tatik\Data aplikací\Desktopicon
2011-07-24 09:13:54 ----D---- C:\Program Files\DsNET Corp
2011-07-13 21:16:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2011-07-13 21:12:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2555917$
2011-07-04 20:08:04 ----D---- C:\Program Files\TeamViewer
2011-07-03 22:07:01 ----A---- C:\WINDOWS\system32\ptpusb.dll
2011-07-03 22:07:00 ----A---- C:\WINDOWS\system32\ptpusd.dll
2011-07-01 21:48:40 ----D---- C:\0955afa4789d21a9d312
2011-07-01 21:41:30 ----D---- C:\8fdda7c1a18ec541fe2ecf5bc4f94cf3
2011-07-01 21:24:52 ----D---- C:\Program Files\Virtools
2011-07-01 16:56:37 ----D---- C:\Program Files\Ligos
2011-07-01 16:51:09 ----D---- C:\Program Files\JoWooD(2)
2011-06-30 20:09:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2541763$
2011-06-30 10:18:40 ----D---- C:\Documents and Settings\Tatik\Data aplikací\MSN6

======List of files/folders modified in the last 1 month======

2011-07-26 12:23:46 ----D---- C:\WINDOWS\Prefetch
2011-07-26 12:23:41 ----RD---- C:\Program Files
2011-07-26 12:20:13 ----D---- C:\WINDOWS\Microsoft.NET
2011-07-26 12:20:11 ----RSD---- C:\WINDOWS\assembly
2011-07-26 12:18:59 ----D---- C:\WINDOWS\temp
2011-07-26 12:18:55 ----D---- C:\WINDOWS\system32\CatRoot2
2011-07-26 12:18:11 ----D---- C:\WINDOWS\system32\drivers
2011-07-26 12:13:28 ----SD---- C:\WINDOWS\Tasks
2011-07-26 12:06:39 ----D---- C:\WINDOWS
2011-07-26 11:54:57 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-07-26 11:49:28 ----SHD---- C:\WINDOWS\Installer
2011-07-26 11:49:28 ----D---- C:\Config.Msi
2011-07-26 11:49:14 ----D---- C:\WINDOWS\system32
2011-07-26 11:49:14 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-07-26 11:48:55 ----D---- C:\WINDOWS\WinSxS
2011-07-26 11:46:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-07-26 11:41:54 ----D---- C:\Documents and Settings\Tatik\Data aplikací\TeamViewer
2011-07-26 11:39:13 ----D---- C:\WINDOWS\Debug
2011-07-26 08:15:04 ----D---- C:\Program Files\Mozilla Firefox
2011-07-25 18:31:16 ----D---- C:\Program Files\Mozilla Thunderbird
2011-07-25 18:31:13 ----D---- C:\WINDOWS\system32\config
2011-07-25 18:31:13 ----D---- C:\WINDOWS\security
2011-07-25 18:31:12 ----D---- C:\Program Files\rFactor
2011-07-25 18:31:11 ----D---- C:\Documents and Settings\Tatik\Data aplikací\uTorrent
2011-07-25 18:13:05 ----D---- C:\Documents and Settings\Tatik\Data aplikací\IObit
2011-07-25 17:39:55 ----D---- C:\Documents and Settings\Tatik\Data aplikací\Skype
2011-07-25 17:34:38 ----D---- C:\Documents and Settings\Tatik\Data aplikací\skypePM
2011-07-25 14:02:38 ----A---- C:\WINDOWS\NeroDigital.ini
2011-07-25 13:38:11 ----A---- C:\WINDOWS\wincmd.ini
2011-07-25 13:37:29 ----A---- C:\WINDOWS\wcx_ftp.ini
2011-07-25 09:31:18 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2011-07-24 11:29:11 ----HD---- C:\WINDOWS\inf
2011-07-23 18:25:26 ----D---- C:\Program Files\rajce
2011-07-19 16:27:42 ----A---- C:\WINDOWS\VehVwr.INI
2011-07-13 21:16:18 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-07-13 21:13:17 ----A---- C:\WINDOWS\system32\MRT.exe
2011-07-13 20:00:24 ----HD---- C:\WINDOWS\$hf_mig$
2011-07-10 21:45:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype Extras
2011-07-07 19:45:12 ----A---- C:\WINDOWS\3DSIMED.INI
2011-07-05 12:28:59 ----A---- C:\WINDOWS\system32\lgAxconfig.ini
2011-07-05 09:10:05 ----D---- C:\WINDOWS\system32\CatRoot
2011-07-05 09:09:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\LGMOBILEAX
2011-07-05 09:07:09 ----D---- C:\LG_USB
2011-07-02 12:31:42 ----A---- C:\WINDOWS\win.ini
2011-07-02 11:39:01 ----D---- C:\WINDOWS\system32\NtmsData
2011-07-02 09:32:41 ----D---- C:\WINDOWS\Registration
2011-07-02 08:49:21 ----A---- C:\error.txt
2011-07-01 21:31:59 ----D---- C:\WINDOWS\system32\wbem
2011-07-01 21:29:18 ----D---- C:\Program Files\Common Files\Java
2011-07-01 21:29:18 ----D---- C:\Program Files\Common Files
2011-07-01 21:25:04 ----D---- C:\WINDOWS\Help
2011-07-01 16:52:06 ----D---- C:\Program Files\Windows Media Player
2011-07-01 14:43:46 ----SHD---- C:\System Volume Information
2011-06-30 10:55:55 ----D---- C:\WINDOWS\network diagnostic
2011-06-30 10:06:57 ----D---- C:\WINDOWS\system32\drivers\etc

Zdravím. Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

Tak zatím stránky nabíhaji v pohodě.Ale potřebují ještě poradit stáhnul jsem RSIT.exe a mám ho na ploše nemohu ho ale odstranit píše mi to že nelze že je bud chráněn nebo zaplněný disk.

Při prvním spuštění combofixu jsem musel odejít a aktivní manželka vypla počítač. Neuložil se první TXT soubor tak jsem ted udělal druhý scen

ComboFix 11-07-26.02 - Tatik 26.07.2011 17:08:31.6.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1023.576 [GMT 2:00]
Spuštěný z: c:\documents and settings\Tatik\Plocha\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-06-26 do 2011-07-26 )))))))))))))))))))))))))))))))
.
.
2011-07-26 14:43 . 2011-07-26 14:56 66616 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-07-26 14:43 . 2011-07-26 14:56 138192 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-07-26 14:43 . 2010-06-17 12:27 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2011-07-26 14:43 . 2010-06-17 12:27 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2011-07-26 14:43 . 2011-07-26 14:43 -------- d-----w- c:\program files\Avira
2011-07-26 14:43 . 2011-07-26 14:43 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Avira
2011-07-26 12:20 . 2008-04-13 18:40 62976 -c--a-w- c:\windows\system32\dllcache\cdrom.sys
2011-07-26 12:20 . 2008-04-13 18:40 62976 ----a-w- c:\windows\system32\drivers\cdrom.sys
2011-07-26 10:23 . 2011-07-26 11:32 -------- d-----w- c:\program files\trend micro
2011-07-24 09:29 . 2011-07-25 06:38 -------- d-----w- c:\documents and settings\Tatik\Local Settings\Data aplikací\OpenCandy
2011-07-24 09:29 . 2011-07-24 09:29 -------- d-----w- c:\documents and settings\Tatik\Data aplikací\OpenCandy
2011-07-24 09:28 . 2011-07-24 09:28 -------- d-----w- c:\program files\Ask.com
2011-07-24 08:33 . 2011-07-24 08:41 -------- d-----w- c:\documents and settings\Tatik\Data aplikací\Desktopicon
2011-07-24 08:33 . 2004-03-08 22:00 124688 ----a-w- c:\windows\system32\MSWINSCK.OCX
2011-07-24 07:13 . 2011-07-24 09:28 -------- d-----w- c:\program files\DsNET Corp
2011-07-04 18:08 . 2011-07-04 18:08 -------- d-----w- c:\program files\TeamViewer
2011-07-03 20:07 . 2001-10-24 10:25 5632 ----a-w- c:\windows\system32\ptpusb.dll
2011-07-03 20:07 . 2008-04-14 02:21 159232 ----a-w- c:\windows\system32\ptpusd.dll
2011-07-01 19:55 . 2011-07-01 19:55 -------- d-----w- c:\documents and settings\Tatik\Local Settings\Data aplikací\PCHealth
2011-07-01 19:48 . 2011-07-01 19:48 -------- d-----w- C:\0955afa4789d21a9d312
2011-07-01 19:41 . 2011-07-01 19:43 -------- d-----w- C:\8fdda7c1a18ec541fe2ecf5bc4f94cf3
2011-07-01 19:31 . 2011-07-01 19:31 -------- d-----w- c:\windows\system32\wbem\Repository
2011-07-01 19:24 . 2011-07-01 19:24 -------- d-----w- c:\program files\Virtools
2011-07-01 14:56 . 2011-07-01 14:56 -------- d-----w- c:\program files\Ligos
2011-07-01 14:51 . 2011-07-01 14:51 -------- d-----w- c:\program files\JoWooD(2)
2011-06-30 08:18 . 2011-06-30 08:19 -------- d-----w- c:\documents and settings\Tatik\Data aplikací\MSN6
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-23 21:53 . 2011-06-07 04:36 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-06 11:35 . 2002-09-23 10:00 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-05-13 07:03 . 2011-05-13 06:27 21840 ----atw- c:\windows\system32\SIntfNT.dll
2011-05-13 07:03 . 2011-05-13 06:27 17212 ----atw- c:\windows\system32\SIntf32.dll
2011-05-13 07:03 . 2011-05-13 06:27 12067 ----atw- c:\windows\system32\SIntf16.dll
2011-05-04 02:52 . 2010-12-10 20:26 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-05-04 00:25 . 2010-12-10 20:26 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-05-02 15:32 . 2010-12-10 12:33 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-29 17:25 . 2002-09-23 10:00 151552 ----a-w- c:\windows\system32\schannel.dll
2011-04-29 16:19 . 2002-09-23 10:00 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-29 18:57 . 2011-04-05 08:37 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-07-26_12.39.20 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-07-26 14:43 . 2010-06-17 12:27 28520 c:\windows\system32\drivers\ssmdrv.sys
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-12-29 687560]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-07-07 1753192]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-07-09 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-07-09 13923432]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-05-05 153672]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-03-11 49152]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2008-11-02 167936]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"ApnUpdater"="c:\program files\Ask.com\Updater\Updater.exe" [2011-05-17 395144]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-11-30 281768]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Tatik\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
.
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-3-11 210520]
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^BlueSoleil.lnk]
backup=c:\windows\pss\BlueSoleil.lnkCommon Startup
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\ICQ7.0\\ICQ.exe"=
"c:\\Program Files\\ICQ7.0\\aolload.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\rFactor\\rfactor.exe"=
"c:\\Program Files\\rFactor\\rFactor Dedicated.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\QIP\\qip.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"d:\\hry\\FarCry bojovka\\Bin32\\FarCry.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Product Assistant\\bin\\hprbui.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpse.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\TeamViewer\\Version5\\TeamViewer.exe"=
"c:\\Program Files\\DsNET Corp\\aTube Catcher 1.0\\yct.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Mozilla Thunderbird\\thunderbird.exe"=
"c:\\Program Files\\Mozilla Firefox\\plugin-container.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Vzdálená správa systému Windows
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [8.1.2011 11:16 717296]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [26.7.2011 16:43 136360]
R3 PAC207;Trust WB-1400T Webcam;c:\windows\system32\drivers\PFC027.sys [24.2.2005 13:29 162176]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe --> c:\program files\ICQ6Toolbar\ICQ Service.exe [?]
S3 FlashUSB;FlashUSB;c:\windows\system32\drivers\FlashUSB.sys [27.12.2010 13:47 16896]
S3 RSUSBSTOR;RTS5121.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RTS5121.sys --> c:\windows\system32\Drivers\RTS5121.sys [?]
S3 Rts516xIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys --> c:\windows\system32\DRIVERS\Rts516xIR.sys [?]
S3 viafilter;VIA USB Filter;c:\windows\system32\drivers\viausb1.sys [10.12.2010 23:52 9728]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [23.9.2002 12:00 14336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
WINRM REG_MULTI_SZ WINRM
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://eu.ask.com/?l=dis&o=14672
IE: &Download All using 4shared Desktop
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Tatik\Data aplikací\Mozilla\Firefox\Profiles\53jjrjh8.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-07-26 17:17
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(3076)
c:\program files\NVIDIA Corporation\nView\nview.dll
c:\program files\NVIDIA Corporation\nView\NVWRSCS.DLL
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2011-07-26 17:22:13
ComboFix-quarantined-files.txt 2011-07-26 15:22
ComboFix2.txt 2011-07-26 12:43
.
Před spuštěním: Volných bajtů: 28 506 841 088
Po spuštění: Volných bajtů: 28 483 678 208
.
Current=3 Default=3 Failed=2 LastKnownGood=4 Sets=1,2,3,4
- - End Of File - - 1A9A246EE3CED8B851D19116B17EB03B

Log již vypadá OK. Pouze smažte ručně tento adresář: c:\program files\Ask.com . Ještě nějaký problém?

jak mam smazat z plochy RSIT exe uložil jsem si ho tam a ted mi to hlasi že nelze odstranit.

Zapoměl jsem poděkovat moc děkuji za pomoc

Zkuste Avenger: http://www.viry.cz/forum/viewtopic.php?f=11&t=19832 s tímto skriptem:

Files to delete:
c:\documents and settings\Tatik\Plocha\rsit.exe

Nejde to odstranit píše to Error: Invalid script. A valid script must begin with a command directive.
Aborting execution!

Dal jsem vyčištění plochy ale RSIT.exe to vůbec nenačetlo

Jsem opravdu lama už je to odinstalované nezkopíroval jsem do příkazu Files to delete: jen tu cestu. Více takových lidí jak jsem já a radíte 24 hodin. Děkuji a nezlobte se

Nic se nestalo. Nemáte zač!