VIRY.CZ

Diky:-)
Logfile of random's system information tool 1.09 (written by random/random)
Run by bob at 2011-08-07 17:15:05
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 11 GB (18%) free of 60 GB
Total RAM: 255 MB (30% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:16:09, on 7.8.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Documents and Settings\bob\Plocha\udržba\RSIT.exe
C:\Program Files\trend micro\bob.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{349937D0-5B7C-485E-8CCD-17EB667A9E08}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CS1\Services\Tcpip\..\{349937D0-5B7C-485E-8CCD-17EB667A9E08}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CS2\Services\Tcpip\..\{349937D0-5B7C-485E-8CCD-17EB667A9E08}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CS3\Services\Tcpip\..\{349937D0-5B7C-485E-8CCD-17EB667A9E08}: NameServer = 156.154.70.25,156.154.71.25
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe

--
End of file - 3102 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\bob\Data aplikací\Mozilla\Firefox\Profiles\s6b4sydw.default

prefs.js - "browser.startup.homepage" - "http://seznam.cz/"
prefs.js - "extensions.enabledItems" - "{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.18"
prefs.js - "keyword.URL" - "http://www.webhledani.cz/results.aspx?i=39&tp=ab&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=1.0.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsILegitCheckPlugin.xpt
nsINIProcessor.js
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
npLegitCheckPlugin.dll
npnul32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
avg_igeared.xml
google.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-08-02 2554696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [2009-01-30 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\COMODO Memory Firewall]
C:\Program Files\COMODO\Memory Firewall\cmf.exe -s []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility]
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe [2002-07-10 188416]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
C:\WINDOWS\SOUNDMAN.EXE [2007-04-16 577536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]
C:\PROGRA~1\MICROS~2\Office10\OSA.EXE [2001-02-13 83360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Documents and Settings\bob\Plocha\quake3a\quake3.exe"="C:\Documents and Settings\bob\Plocha\quake3a\quake3.exe:*:Enabled:quake3"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\Program Files\Counter-Strike Source\hl2.exe"="C:\Program Files\Counter-Strike Source\hl2.exe:*:Disabled:hl2"
"C:\WINDOWS\Network Diagnostic\xpnetdiag.exe"="C:\WINDOWS\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"vidc.xvid"=xvid.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"vidc.divx"=divx.dll
"vidc.div4"=DivXc32f.dll
"vidc.div3"=DivXc32.dll
"vidc.mp43"=mpg4c32.dll
"msacm.l3radius"=l3codecp.acm
"msacm.divxa"=divxa32.acm
"msacm.a3d"=a3d.dll
"msacm.ogg"=ogg.dll
"msacm.vorbisenc"=vorbisenc.dll

======List of files/folders created in the last 3 months======

2011-08-06 19:42:42 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2011-08-06 19:42:09 ----D---- C:\Program Files\HDD Regenerator
2011-08-01 23:29:02 ----D---- C:\rsit
2011-08-01 23:18:04 ----SHD---- C:\RECYCLER
2011-08-01 23:08:58 ----D---- C:\WINDOWS\temp
2011-08-01 00:56:12 ----D---- C:\Program Files\HD Tune
2011-07-31 22:36:29 ----D---- C:\Program Files\CrystalDiskInfo
2011-07-27 23:01:04 ----A---- C:\Boot.bak
2011-07-27 23:00:52 ----RASHD---- C:\cmdcons
2011-07-27 22:32:34 ----D---- C:\Program Files\Trend Micro
2011-07-26 23:13:42 ----D---- C:\WINDOWS\system32\NtmsData
2011-07-23 19:44:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\comodo
2011-07-23 19:37:17 ----D---- C:\Documents and Settings\bob\Data aplikací\Comodo
2011-07-22 23:47:21 ----D---- C:\Documents and Settings\bob\Data aplikací\Allstar
2011-07-18 19:19:15 ----D---- C:\WINDOWS\pss
2011-07-16 21:05:54 ----D---- C:\Program Files\Windows Sidebar
2011-07-16 21:05:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2011-07-16 21:05:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller
2011-07-16 01:02:50 ----D---- C:\Program Files\CCleaner
2011-07-14 18:36:06 ----D---- C:\Program Files\COMODO
2011-07-14 18:35:30 ----A---- C:\WINDOWS\system32\mfc71.dll
2011-07-14 18:35:29 ----A---- C:\WINDOWS\system32\msvcr71.dll
2011-07-14 18:35:26 ----A---- C:\WINDOWS\system32\gdiplus.dll
2011-07-12 22:28:53 ----D---- C:\Program Files\SlySoft
2011-07-12 21:54:15 ----D---- C:\Inetpub
2011-07-10 12:43:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-07-09 19:44:19 ----D---- C:\Documents and Settings\bob\Data aplikací\Macromedia
2011-07-01 21:58:37 ----D---- C:\Documents and Settings\bob\Data aplikací\Malwarebytes
2011-07-01 21:57:22 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2011-07-01 21:57:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2011-07-01 21:57:10 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2011-07-01 21:57:09 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-06-20 21:21:26 ----A---- C:\WINDOWS\hpinfo.lnk
2011-06-20 21:20:57 ----D---- C:\Program Files\hp deskjet 3320 series
2011-06-20 21:20:14 ----A---- C:\WINDOWS\system32\hpzsnt05.dll
2011-06-20 21:17:46 ----D---- C:\Program Files\Hewlett-Packard
2011-06-20 21:11:27 ----A---- C:\WINDOWS\system32\drivers\usbprint.sys
2011-06-13 00:20:14 ----D---- C:\q3a
2011-06-13 00:19:47 ----N---- C:\WINDOWS\Setup1.exe
2011-06-13 00:19:39 ----A---- C:\WINDOWS\ST6UNST.EXE

======List of files/folders modified in the last 3 months======

2011-08-07 17:14:53 ----D---- C:\WINDOWS\system32\CatRoot2
2011-08-07 10:56:46 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-08-07 02:11:05 ----D---- C:\WINDOWS\Prefetch
2011-08-07 02:10:29 ----AD---- C:\WINDOWS
2011-08-06 19:42:21 ----SHD---- C:\WINDOWS\Installer
2011-08-06 19:42:13 ----D---- C:\WINDOWS\system32
2011-08-06 19:42:09 ----RD---- C:\Program Files
2011-08-06 02:12:26 ----D---- C:\WINDOWS\system32\drivers
2011-08-06 02:12:13 ----SD---- C:\WINDOWS\Tasks
2011-08-04 20:07:37 ----D---- C:\WINDOWS\SoftwareDistribution
2011-08-02 12:55:10 ----A---- C:\WINDOWS\system32\guard32.dll
2011-08-01 23:17:17 ----D---- C:\Program Files\Mozilla Firefox
2011-08-01 23:14:27 ----SHD---- C:\System Volume Information
2011-08-01 23:01:40 ----A---- C:\WINDOWS\system.ini
2011-08-01 21:02:47 ----D---- C:\Program Files\Spybot - Search & Destroy
2011-08-01 21:02:47 ----D---- C:\Program Files\Common Files
2011-08-01 21:02:07 ----HD---- C:\WINDOWS\inf
2011-07-31 03:51:58 ----D---- C:\WINDOWS\system32\Restore
2011-07-31 00:38:13 ----D---- C:\Documents and Settings\bob\Data aplikací\Media Player Classic
2011-07-30 22:26:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-07-29 00:14:10 ----D---- C:\Documents and Settings\bob\Data aplikací\vlc
2011-07-27 23:28:08 ----D---- C:\WINDOWS\system32\drivers\etc
2011-07-27 23:17:08 ----D---- C:\WINDOWS\AppPatch
2011-07-27 23:01:04 ----RASH---- C:\boot.ini
2011-07-27 22:32:36 ----SD---- C:\Documents and Settings\bob\Data aplikací\Microsoft
2011-07-27 21:38:08 ----A---- C:\WINDOWS\win.ini
2011-07-27 00:51:53 ----D---- C:\WINDOWS\security
2011-07-26 20:38:11 ----D---- C:\WINDOWS\system32\LogFiles
2011-07-15 22:37:37 ----D---- C:\WINDOWS\Debug
2011-07-14 21:10:00 ----D---- C:\WINDOWS\Minidump
2011-07-12 21:55:13 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-07-12 21:55:04 ----D---- C:\WINDOWS\system32\inetsrv
2011-07-12 21:54:37 ----RD---- C:\WINDOWS\Web
2011-06-06 20:16:16 ----D---- C:\WINDOWS\Registration

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2011-08-02 97504]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2011-08-02 242600]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2011-08-02 29400]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-04-25 4030144]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
R3 HCF_MSFT;HCF_MSFT; C:\WINDOWS\system32\DRIVERS\HCF_MSFT.sys [2001-10-24 907456]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-04 1897408]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 USB_RNDIS;USB Remote NDIS Network Device Driver; C:\WINDOWS\system32\DRIVERS\usb8023k.sys [2002-08-12 11136]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 VM650FVM11;UMAX AstraSlim Scanner ProdID x0104; C:\WINDOWS\System32\Drivers\USB650C.sys []
S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2008-04-14 31744]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-08-02 1793712]
S4 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-10-17 66872]
S4 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

Zdravím.

Momentík, hnedle se na to mrknu.

Log vypadá čistý.

Jeden dotaz:

IP adresu 156.154.70.25 znáš?

Krapet vyčistíme:

Fixni v HJT tyto zbtečnosti:
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

"Fixnout" znamená, že spustíš HJT, zvolíš možnost [Do a system scan only] a zaškrtneš čtvereček vlevo od mnou vypsaných položek. Poté klikni na [Fix checked] a odsouhlasíš ANO.
HJT najdeš zde: C:\Program Files\trend micro\bob.exe

Dále si otevři Poznámkový blok (Start >> Spustit... >> notepad nebo Win+R) a do něj vlož následující text:

Kód: Vybrat vše

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]

V "Uložit jako typ:" zvol Všechny soubory, "Kódování:" ANSI
Zavři Poznámkový blok a dvojklikem spusť vytvořený soubor oprava.reg
Dotaz na změny registru pochopitelně potvrď.
Budeš-li vyzván, počítač restartuj. Jestli ne, restartuj ho ručně sám.
Soubor po použití smaž.

Pokud nemáš, stáhni Malwarebytes' Anti-Malware (zkráceně MBAM) z tohoto topicu.

Proveď aktualizaci - třetí záložka.
Proveď úplný sken - nic nemaž
MBAM mívá občas falešné detekce, proto vlož jeho log do příspěvku a počkej na posouzení.

Dobrý večer, tak registry přepsané a log je toť: IP neznám, měl bych?? Rád bych věděl čí je.

Malwarebytes' Anti-Malware
www.malwarebytes.org

Verze databáze:

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

8.8.2011 21:30:16
mbam-log-2011-08-08 (21-30-03).txt

Typ: Rychlá kontrola
Kontrolované objekty: 137939
Uplynulý čas: 9 minut, 31 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 2
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

Zdravím,

v MBAM nech Odstranit označené.
IP je tvého poskytovatele internetového připojení (je v USA http://whois.smartweb.cz/object/156.154.70.25/)
prozradíš přes koho se připojuješ - jen pro naše poučení

)))to má být vtip..?? Přes nikoho se nepřipojuji....!!!! Ccleaner pořád stejné chyby,, ted pouze 2, ale jinak tak 10 a pořád dpkola. Neplatná nebo chybějící třída souboru .ogg\OpenWithProgids\Ogg File (*.ogg) HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogg\OpenWithProgids
Neplatná nebo chybějící třída souboru .ogm\OpenWithProgids\Ogg File (*.ogg) HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogm\OpenWithProgids

žádnej vtip, máš snad s nějakým poskytovatelem smlouvu o připojení

jinak sem dej nový RSIT log

Asi mi to nedošlo, ale zda se že mám problém,,,,,?? Mám net od O2! a jiného poskytovatele jsem neměl!!!už 10let ten samý.

tady je log...
Logfile of random's system information tool 1.09 (written by random/random)
Run by bob at 2011-08-08 21:57:14
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 11 GB (18%) free of 60 GB
Total RAM: 255 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:57:55, on 8.8.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Documents and Settings\bob\Plocha\udržba\RSIT.exe
C:\Program Files\trend micro\bob.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{349937D0-5B7C-485E-8CCD-17EB667A9E08}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CS1\Services\Tcpip\..\{349937D0-5B7C-485E-8CCD-17EB667A9E08}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CS2\Services\Tcpip\..\{349937D0-5B7C-485E-8CCD-17EB667A9E08}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CS3\Services\Tcpip\..\{349937D0-5B7C-485E-8CCD-17EB667A9E08}: NameServer = 156.154.70.25,156.154.71.25
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe

--
End of file - 2904 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\bob\Data aplikací\Mozilla\Firefox\Profiles\s6b4sydw.default

prefs.js - "browser.startup.homepage" - "http://seznam.cz/"
prefs.js - "extensions.enabledItems" - "{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.18"
prefs.js - "keyword.URL" - "http://www.webhledani.cz/results.aspx?i=39&tp=ab&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=1.0.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsILegitCheckPlugin.xpt
nsINIProcessor.js
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
npLegitCheckPlugin.dll
npnul32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
avg_igeared.xml
google.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-08-02 2554696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\COMODO Memory Firewall]
C:\Program Files\COMODO\Memory Firewall\cmf.exe -s []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
C:\WINDOWS\SOUNDMAN.EXE [2007-04-16 577536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Documents and Settings\bob\Plocha\quake3a\quake3.exe"="C:\Documents and Settings\bob\Plocha\quake3a\quake3.exe:*:Enabled:quake3"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\Program Files\Counter-Strike Source\hl2.exe"="C:\Program Files\Counter-Strike Source\hl2.exe:*:Disabled:hl2"
"C:\WINDOWS\Network Diagnostic\xpnetdiag.exe"="C:\WINDOWS\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"vidc.xvid"=xvid.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"vidc.divx"=divx.dll
"vidc.div4"=DivXc32f.dll
"vidc.div3"=DivXc32.dll
"vidc.mp43"=mpg4c32.dll
"msacm.l3radius"=l3codecp.acm
"msacm.divxa"=divxa32.acm
"msacm.a3d"=a3d.dll
"msacm.ogg"=ogg.dll
"msacm.vorbisenc"=vorbisenc.dll

======List of files/folders created in the last 1 month======

2011-08-06 19:42:42 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2011-08-06 19:42:09 ----D---- C:\Program Files\HDD Regenerator
2011-08-01 23:29:02 ----D---- C:\rsit
2011-08-01 23:18:04 ----SHD---- C:\RECYCLER
2011-08-01 23:08:58 ----D---- C:\WINDOWS\temp
2011-08-01 00:56:12 ----D---- C:\Program Files\HD Tune
2011-07-31 22:36:29 ----D---- C:\Program Files\CrystalDiskInfo
2011-07-27 23:01:04 ----A---- C:\Boot.bak
2011-07-27 23:00:52 ----RASHD---- C:\cmdcons
2011-07-27 22:32:34 ----D---- C:\Program Files\Trend Micro
2011-07-26 23:13:42 ----D---- C:\WINDOWS\system32\NtmsData
2011-07-23 19:44:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\comodo
2011-07-23 19:37:17 ----D---- C:\Documents and Settings\bob\Data aplikací\Comodo
2011-07-22 23:47:21 ----D---- C:\Documents and Settings\bob\Data aplikací\Allstar
2011-07-18 19:19:15 ----D---- C:\WINDOWS\pss
2011-07-16 21:05:54 ----D---- C:\Program Files\Windows Sidebar
2011-07-16 21:05:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2011-07-16 21:05:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller
2011-07-16 01:02:50 ----D---- C:\Program Files\CCleaner
2011-07-14 18:36:06 ----D---- C:\Program Files\COMODO
2011-07-14 18:35:30 ----A---- C:\WINDOWS\system32\mfc71.dll
2011-07-14 18:35:29 ----A---- C:\WINDOWS\system32\msvcr71.dll
2011-07-14 18:35:26 ----A---- C:\WINDOWS\system32\gdiplus.dll
2011-07-12 22:28:53 ----D---- C:\Program Files\SlySoft
2011-07-12 21:54:15 ----D---- C:\Inetpub
2011-07-10 12:43:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-07-09 19:44:19 ----D---- C:\Documents and Settings\bob\Data aplikací\Macromedia

======List of files/folders modified in the last 1 month======

2011-08-08 21:35:54 ----D---- C:\WINDOWS\system32\CatRoot2
2011-08-08 21:32:54 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-08-08 21:11:52 ----D---- C:\WINDOWS\Prefetch
2011-08-08 19:08:12 ----AD---- C:\WINDOWS
2011-08-06 19:42:21 ----SHD---- C:\WINDOWS\Installer
2011-08-06 19:42:13 ----D---- C:\WINDOWS\system32
2011-08-06 19:42:09 ----RD---- C:\Program Files
2011-08-06 02:12:26 ----D---- C:\WINDOWS\system32\drivers
2011-08-06 02:12:13 ----SD---- C:\WINDOWS\Tasks
2011-08-04 20:07:37 ----D---- C:\WINDOWS\SoftwareDistribution
2011-08-02 12:55:10 ----A---- C:\WINDOWS\system32\guard32.dll
2011-08-01 23:17:17 ----D---- C:\Program Files\Mozilla Firefox
2011-08-01 23:14:27 ----SHD---- C:\System Volume Information
2011-08-01 23:01:40 ----A---- C:\WINDOWS\system.ini
2011-08-01 21:02:47 ----D---- C:\Program Files\Spybot - Search & Destroy
2011-08-01 21:02:47 ----D---- C:\Program Files\Common Files
2011-08-01 21:02:07 ----HD---- C:\WINDOWS\inf
2011-07-31 03:51:58 ----D---- C:\WINDOWS\system32\Restore
2011-07-31 00:38:13 ----D---- C:\Documents and Settings\bob\Data aplikací\Media Player Classic
2011-07-30 22:26:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-07-29 00:14:10 ----D---- C:\Documents and Settings\bob\Data aplikací\vlc
2011-07-28 21:20:02 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-07-27 23:28:08 ----D---- C:\WINDOWS\system32\drivers\etc
2011-07-27 23:17:08 ----D---- C:\WINDOWS\AppPatch
2011-07-27 23:01:04 ----RASH---- C:\boot.ini
2011-07-27 22:32:36 ----SD---- C:\Documents and Settings\bob\Data aplikací\Microsoft
2011-07-27 21:38:08 ----A---- C:\WINDOWS\win.ini
2011-07-27 00:51:53 ----D---- C:\WINDOWS\security
2011-07-26 20:38:11 ----D---- C:\WINDOWS\system32\LogFiles
2011-07-18 18:59:56 ----D---- C:\q3a
2011-07-15 22:37:37 ----D---- C:\WINDOWS\Debug
2011-07-14 21:10:00 ----D---- C:\WINDOWS\Minidump
2011-07-12 21:55:13 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-07-12 21:55:04 ----D---- C:\WINDOWS\system32\inetsrv
2011-07-12 21:54:37 ----RD---- C:\WINDOWS\Web

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2011-08-02 97504]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2011-08-02 242600]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2011-08-02 29400]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-04-25 4030144]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
R3 HCF_MSFT;HCF_MSFT; C:\WINDOWS\system32\DRIVERS\HCF_MSFT.sys [2001-10-24 907456]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-04 1897408]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 USB_RNDIS;USB Remote NDIS Network Device Driver; C:\WINDOWS\system32\DRIVERS\usb8023k.sys [2002-08-12 11136]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 VM650FVM11;UMAX AstraSlim Scanner ProdID x0104; C:\WINDOWS\System32\Drivers\USB650C.sys []
S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2008-04-14 31744]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-08-02 1793712]
S4 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-10-17 66872]
S4 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

omlouvam se za vstup

jen tak bokem tyto ip adresy jsou v pohode -->> 156.154.70.25,156.154.71.25 === SecureDNS Comodo

- mahajana - díky za objasnění

- anittra6 Nevidím tam problém

A pokud tě iritují nálezy Ccleaneru, tak jsou to jen neplatné záznamy v registru, které tam uložil buď nějaký přehrávač nebo nainstalovaný codec

Pokus o opravu registru (i když si nejsem jistý jestli se znovu neobjeví) - není to nic závažného ani škodlivého

Otevři Poznámkový blok (Notepad) a vlož zelený text ze scriptu.

Kód: Vybrat vše

Windows Registry Editor Version 5.00

[-HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogg]
[-HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogm]

Soubor ulož na plochu jako -> oprava.reg - Uložit jako typ -> Všechny soubory
Zavři a dvojklikem na ikonu spusť - jen problikne a opraví registry - po akci jej smažeš.

Ok, tak diky moc a good luck. :

Nemáš zač - rádo se stalo a jsme tady i příště

Ehm... děkuji za vstupy...

No tak sorry, nebyl jsi tu

VIRY.CZ

prosím o kontrolu

prosím o kontrolu

Re: prosím o kontrolu

Re: prosím o kontrolu

Re: prosím o kontrolu

Re: prosím o kontrolu

Re: prosím o kontrolu

Re: prosím o kontrolu

Re: prosím o kontrolu

Re: prosím o kontrolu

Re: prosím o kontrolu

Re: prosím o kontrolu

Re: prosím o kontrolu

Re: prosím o kontrolu

Re: prosím o kontrolu

Re: prosím o kontrolu