VIRY.CZ

Dobrý den mám menší problém s internetem zhruba před 5 dny mi začal špatně fungovat internet.
Občas jede normální rychlostí 4mb/s pak to začne kolísat až na 900kb/s (v intervalu 2 minut), dnes je internet extrémně pomalý občas ale jen na chvilku se zrychlý, záhada je že stahuju (pokud se mi povede něco otevřít) normální rychlostí 500kb/s. Avira antivir mi v pc nenašel žádnou havěť stejně tak i MAMB. Prosím o radu děkuji. Jen sem jsem se registroval skoro hodinu.


Logfile of random's system information tool 1.09 (written by random/random)
Run by Martí at 2011-09-02 15:50:30
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 132 GB (86%) free of 153 GB
Total RAM: 1535 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:50:38, on 2. 9. 2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\PixArt\PAC207\Monitor.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Martí\Local Settings\Temporary Internet Files\Content.IE5\N8B5M6WY\RSIT[1].exe
C:\Program Files\trend micro\Martí.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [PAC207_Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil10u_ActiveX.exe -update activex
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{86CF064D-B3EA-476B-B41D-81F4460CE8EA}: NameServer = 10.120.0.1,10.120.0.2
O17 - HKLM\System\CCS\Services\Tcpip\..\{F50A6362-957A-41A4-ACF3-6228211DA0C9}: NameServer = 10.120.0.1,10.120.0.2
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

--
End of file - 5597 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1220945662-1965331169-839522115-1004Core1cc0ad8fbe72046.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1220945662-1965331169-839522115-1004UA.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{E42F4FED-0DC5-44A7-9A08-5A798CDD15C5}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-05-23 115072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-05-25 2799488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-02 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-05-02 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-09-06 16262656]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"PAC207_Monitor"=C:\WINDOWS\PixArt\PAC207\Monitor.exe [2007-12-10 323584]
"Monitor"=C:\WINDOWS\PixArt\PAC207\Monitor.exe [2007-12-10 323584]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2011-01-10 281768]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-12-01 77824]
"WinSys2"=C:\WINDOWS\system32\winsys2.exe [2008-07-09 208896]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-08-03 13892200]
"NvMediaCenter"=NvMCTray.dll,NvTaskbarInit -login []
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2011-07-05 1632360]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2006-03-02 15360]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\WINDOWS\system32\Macromed\Flash\FlashUtil10u_ActiveX.exe [2011-07-19 243360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-03-21 1230704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\Martí\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-02-20 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files\Hamachi\hamachi-2-ui.exe --auto-start []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando Media Booster]
C:\Program Files\Pando Networks\Media Booster\PMB.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-01-07 253672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Martí^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.2.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-06-07 1195520]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Codemasters\The Lord of the Rings Online\lotroclient.exe"="C:\Program Files\Codemasters\The Lord of the Rings Online\lotroclient.exe:*:Disabled:lotroclient"
"C:\Program Files\Warcraft III\war3.exe"="C:\Program Files\Warcraft III\war3.exe:*:Enabled:Warcraft III"
"C:\Program Files\Warcraft III\euroloader.exe"="C:\Program Files\Warcraft III\euroloader.exe:*:Enabled:euroloader"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Documents and Settings\Martí\Plocha\Minecraft\.minecraft\MineEdit-RELEASE-11212010_novy\LaunchServer.exe"="C:\Documents and Settings\Martí\Plocha\Minecraft\.minecraft\MineEdit-RELEASE-11212010_novy\LaunchServer.exe:*:Enabled:LaunchServer"
"C:\Program Files\Cabal Online\launcher\update\ESTdnheadless.exe"="C:\Program Files\Cabal Online\launcher\update\ESTdnheadless.exe:*:Disabled:EST! download engine"
"C:\Program Files\Winamp\winamp.exe"="C:\Program Files\Winamp\winamp.exe:*:Enabled:Winamp"
"C:\Program Files\World of Warcraft\Launcher.exe"="C:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"C:\Program Files\World of Warcraft\Launcher.patch.exe"="C:\Program Files\World of Warcraft\Launcher.patch.exe:*:Enabled:Blizzard Launcher"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======List of files/folders created in the last 3 months======

2011-09-02 15:50:30 ----D---- C:\rsit
2011-09-02 15:50:30 ----D---- C:\Program Files\trend micro
2011-09-02 06:38:46 ----A---- C:\WINDOWS\ntbtlog.txt
2011-09-01 13:16:23 ----D---- C:\Documents and Settings\Martí\Data aplikací\Malwarebytes
2011-09-01 13:15:14 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2011-09-01 13:15:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2011-09-01 13:15:09 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-09-01 13:15:09 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2011-08-24 15:26:43 ----D---- C:\Documents and Settings\Martí\Data aplikací\NVIDIA
2011-08-24 14:36:05 ----A---- C:\WINDOWS\system32\nvgenco32.dll
2011-08-24 14:36:05 ----A---- C:\WINDOWS\system32\nvdispco32.dll
2011-08-23 23:03:19 ----D---- C:\Documents and Settings\Martí\Data aplikací\LolClient
2011-08-23 14:15:14 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2011-08-23 14:15:14 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2011-08-23 14:15:13 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2011-08-23 14:15:13 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2011-08-23 14:15:11 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2011-08-08 20:17:39 ----AH---- C:\WINDOWS\system32\hamachi.sys
2011-07-29 14:37:05 ----A---- C:\WINDOWS\NBT.dll
2011-07-24 16:03:48 ----D---- C:\Documents and Settings\Martí\Data aplikací\DDMSettings
2011-07-24 16:00:24 ----D---- C:\Documents and Settings\Martí\Data aplikací\DivX
2011-07-24 15:59:00 ----D---- C:\Program Files\DivX
2011-07-24 14:10:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\Blizzard Entertainment
2011-07-24 13:13:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Blizzard
2011-07-24 11:27:37 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2011-07-21 14:56:55 ----D---- C:\Documents and Settings\Martí\Data aplikací\.minecraft
2011-07-21 11:17:00 ----D---- C:\Documents and Settings\Martí\Data aplikací\PhotoFiltre
2011-07-21 11:16:57 ----D---- C:\Program Files\PhotoFiltre
2011-07-18 20:49:38 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-07-18 20:49:26 ----D---- C:\WINDOWS\system32\AGEIA
2011-07-18 20:49:25 ----D---- C:\Program Files\AGEIA Technologies
2011-07-18 20:48:44 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-06-29 12:58:25 ----N---- C:\WINDOWS\system32\vxblock.dll
2011-06-29 12:58:25 ----N---- C:\WINDOWS\system32\pxwma.dll
2011-06-29 12:58:25 ----N---- C:\WINDOWS\system32\pxwave.dll
2011-06-29 12:58:25 ----N---- C:\WINDOWS\system32\pxsfs.dll
2011-06-29 12:58:25 ----N---- C:\WINDOWS\system32\pxmas.dll
2011-06-29 12:58:25 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2011-06-29 12:58:25 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2011-06-29 12:58:25 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2011-06-29 12:58:25 ----N---- C:\WINDOWS\system32\pxdrv.dll
2011-06-29 12:58:25 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2011-06-29 12:58:25 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2011-06-29 12:58:25 ----N---- C:\WINDOWS\system32\pxafs.dll
2011-06-29 12:58:25 ----N---- C:\WINDOWS\system32\px.dll
2011-06-29 12:58:25 ----N---- C:\WINDOWS\system32\drivers\PxHelp20.sys
2011-06-29 12:58:25 ----N---- C:\WINDOWS\system32\drivers\cdralw2k.sys
2011-06-29 12:58:25 ----N---- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2011-06-29 12:58:23 ----D---- C:\Documents and Settings\Martí\Data aplikací\Winamp
2011-06-29 12:47:19 ----D---- C:\WINDOWS\RegisteredPackages
2011-06-29 12:46:41 ----D---- C:\Program Files\Winamp
2011-06-25 18:28:00 ----D---- C:\WINDOWS\Minidump
2011-06-25 18:24:01 ----A---- C:\WINDOWS\msicpl.ini
2011-06-25 18:20:33 ----A---- C:\WINDOWS\system32\WinSys2.exe
2011-06-25 18:20:33 ----A---- C:\WINDOWS\system32\smdll.dll
2011-06-25 18:20:32 ----A---- C:\WINDOWS\system32\nvwssr.dll
2011-06-25 18:20:32 ----A---- C:\WINDOWS\system32\nvwss.dll
2011-06-25 18:20:32 ----A---- C:\WINDOWS\system32\nvwddi.dll
2011-06-25 18:20:32 ----A---- C:\WINDOWS\system32\nvvitvsr.dll
2011-06-25 18:20:31 ----A---- C:\WINDOWS\system32\nvvitvs.dll
2011-06-25 18:20:31 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2011-06-25 18:20:31 ----A---- C:\WINDOWS\system32\nvrszht.dll
2011-06-25 18:20:31 ----A---- C:\WINDOWS\system32\nvrszhc.dll
2011-06-25 18:20:31 ----A---- C:\WINDOWS\system32\nvrstr.dll
2011-06-25 18:20:31 ----A---- C:\WINDOWS\system32\nvrsth.dll
2011-06-25 18:20:31 ----A---- C:\WINDOWS\system32\nvrssv.dll
2011-06-25 18:20:31 ----A---- C:\WINDOWS\system32\nvrssl.dll
2011-06-25 18:20:31 ----A---- C:\WINDOWS\system32\nvrssk.dll
2011-06-25 18:20:31 ----A---- C:\WINDOWS\system32\nvrsru.dll
2011-06-25 18:20:31 ----A---- C:\WINDOWS\system32\nvrsptb.dll
2011-06-25 18:20:31 ----A---- C:\WINDOWS\system32\nvrspt.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrspl.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrsno.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrsnl.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrsko.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrsja.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrsit.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrshu.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrshe.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrsfr.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrsfi.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrsesm.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrses.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrseng.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrsel.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrsde.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrsda.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrscs.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvrsar.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvnt4cpl.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvmoblsr.dll
2011-06-25 18:20:30 ----A---- C:\WINDOWS\system32\nvmobls.dll
2011-06-25 18:20:29 ----A---- C:\WINDOWS\system32\nvmctray.dll
2011-06-25 18:20:29 ----A---- C:\WINDOWS\system32\nvmccssr.dll
2011-06-25 18:20:29 ----A---- C:\WINDOWS\system32\nvmccss.dll
2011-06-25 18:20:29 ----A---- C:\WINDOWS\system32\nvmccsrs.dll
2011-06-25 18:20:29 ----A---- C:\WINDOWS\system32\nvmccs.dll
2011-06-25 18:20:29 ----A---- C:\WINDOWS\system32\nvgamesr.dll
2011-06-25 18:20:29 ----A---- C:\WINDOWS\system32\nvgames.dll
2011-06-25 18:20:29 ----A---- C:\WINDOWS\system32\nvexpbar.dll
2011-06-25 18:20:27 ----A---- C:\WINDOWS\system32\nvdispsr.dll
2011-06-25 18:20:27 ----A---- C:\WINDOWS\system32\nvdisps.dll
2011-06-25 18:20:27 ----A---- C:\WINDOWS\system32\nvcuda.dll
2011-06-25 18:20:27 ----A---- C:\WINDOWS\system32\nvcpluir.dll
2011-06-25 18:20:26 ----A---- C:\WINDOWS\system32\nvcplui.exe
2011-06-25 18:20:24 ----A---- C:\WINDOWS\system32\nvcpl.dll
2011-06-25 18:20:23 ----A---- C:\WINDOWS\system32\nvcolor.exe
2011-06-25 18:20:23 ----A---- C:\WINDOWS\system32\nvcodins.dll
2011-06-25 18:20:23 ----A---- C:\WINDOWS\system32\nvcod.dll
2011-06-25 18:20:23 ----A---- C:\WINDOWS\system32\nvapi.dll
2011-06-25 18:20:19 ----A---- C:\WINDOWS\system32\msvcr80.dll
2011-06-25 18:20:18 ----A---- C:\WINDOWS\system32\msicpl.dll
2011-06-25 18:20:18 ----A---- C:\WINDOWS\system32\MadCHook.dll
2011-06-25 18:20:18 ----A---- C:\WINDOWS\system32\HookShield.dll
2011-06-25 18:20:18 ----A---- C:\WINDOWS\system32\HookMAp.dll
2011-06-25 18:20:17 ----A---- C:\WINDOWS\system32\Auxiliary.dll
2011-06-25 17:56:39 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2011-06-25 17:44:06 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2011-06-25 17:44:05 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2011-06-25 17:44:05 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2011-06-25 17:44:04 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2011-06-25 17:44:04 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2011-06-25 17:44:04 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2011-06-25 17:44:03 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2011-06-25 17:44:02 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2011-06-25 17:44:02 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2011-06-25 17:44:02 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2011-06-25 17:44:01 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2011-06-25 17:44:01 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2011-06-25 17:44:01 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2011-06-25 17:43:59 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2011-06-25 17:43:57 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2011-06-25 17:43:57 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2011-06-25 17:43:56 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2011-06-25 17:43:56 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2011-06-25 17:43:56 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2011-06-25 17:43:55 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2011-06-25 17:43:54 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2011-06-25 17:43:49 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2011-06-25 17:43:49 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2011-06-25 17:43:32 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2011-06-25 17:43:32 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2011-06-25 17:43:31 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2011-06-25 17:43:30 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2011-06-25 17:43:30 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2011-06-25 17:43:30 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2011-06-25 17:43:29 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2011-06-25 17:43:29 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2011-06-25 17:43:28 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2011-06-25 17:43:28 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2011-06-25 17:43:27 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2011-06-25 17:43:18 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2011-06-25 17:43:18 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2011-06-25 17:43:16 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2011-06-25 17:43:14 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2011-06-25 17:43:12 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2011-06-25 17:42:57 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2011-06-22 23:05:55 ----A---- C:\WINDOWS\system32\npptNT2.sys
2011-06-22 23:04:51 ----D---- C:\Program Files\Common Files\INCA Shared
2011-06-22 17:58:08 ----D---- C:\Program Files\Cabal Online
2011-06-22 15:30:51 ----RA---- C:\WINDOWS\system32\drivers\wf2kXbar.sys
2011-06-22 15:30:24 ----RA---- C:\WINDOWS\system32\drivers\wf2ktunr.sys
2011-06-22 15:29:22 ----RA---- C:\WINDOWS\system32\drivers\wf2kvcap.sys
2011-06-22 15:23:34 ----A---- C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2011-06-22 15:23:33 ----A---- C:\WINDOWS\system32\RTLCPAPI.dll
2011-06-22 15:23:32 ----A---- C:\WINDOWS\system32\RTLCPL.EXE
2011-06-22 15:23:22 ----N---- C:\WINDOWS\alcupd.exe
2011-06-22 15:23:22 ----N---- C:\WINDOWS\alcrmv.exe
2011-06-22 15:21:40 ----RA---- C:\WINDOWS\system32\drivers\nvatabus.sys
2011-06-22 15:21:21 ----RA---- C:\WINDOWS\system32\nvusmb.exe
2011-06-10 10:38:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\CyberLink
2011-06-05 21:43:57 ----HDC---- C:\WINDOWS\$NtUninstallKB952011$

======List of files/folders modified in the last 3 months======

2011-09-02 15:50:30 ----RD---- C:\Program Files
2011-09-02 15:15:52 ----D---- C:\WINDOWS\system32\CatRoot2
2011-09-02 15:14:50 ----D---- C:\WINDOWS\Temp
2011-09-02 15:10:30 ----SHD---- C:\RECYCLER
2011-09-02 06:55:47 ----SHD---- C:\WINDOWS\Installer
2011-09-02 06:38:46 ----D---- C:\WINDOWS
2011-09-02 05:57:32 ----D---- C:\WINDOWS\system32
2011-09-01 21:08:21 ----D---- C:\WINDOWS\system32\drivers
2011-09-01 19:56:52 ----D---- C:\Program Files\FlatOut2
2011-09-01 13:01:38 ----SH---- C:\boot.ini
2011-09-01 13:01:38 ----A---- C:\WINDOWS\win.ini
2011-09-01 13:01:38 ----A---- C:\WINDOWS\system.ini
2011-08-24 14:37:04 ----D---- C:\Documents and Settings\All Users\Data aplikací\NVIDIA
2011-08-24 14:37:04 ----D---- C:\Documents and Settings
2011-08-24 14:37:03 ----D---- C:\Program Files\NVIDIA Corporation
2011-08-24 14:37:02 ----D---- C:\WINDOWS\Help
2011-08-24 14:36:37 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-24 14:36:18 ----HD---- C:\WINDOWS\inf
2011-08-24 14:36:17 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-08-23 14:15:15 ----D---- C:\WINDOWS\system32\DirectX
2011-08-23 14:11:56 ----HD---- C:\Program Files\InstallShield Installation Information
2011-08-17 16:01:20 ----D---- C:\Documents and Settings\Martí\Data aplikací\skypePM
2011-08-17 15:06:33 ----D---- C:\Documents and Settings\Martí\Data aplikací\Skype
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\OpenCL.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\easyUpdatusAPIU.dll
2011-07-25 16:53:26 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-07-24 16:02:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\DivX
2011-07-24 16:02:31 ----D---- C:\Program Files\Common Files\DivX Shared
2011-07-24 11:27:37 ----D---- C:\Program Files\Common Files
2011-07-19 21:37:51 ----D---- C:\Documents and Settings\Martí\Data aplikací\gtk-2.0
2011-07-18 20:49:39 ----D---- C:\WINDOWS\system32\CatRoot
2011-06-29 23:01:15 ----D---- C:\WINDOWS\security
2011-06-29 12:47:44 ----D---- C:\Program Files\Windows Media Player
2011-06-29 12:47:43 ----D---- C:\WINDOWS\Debug
2011-06-25 18:22:26 ----D---- C:\WINDOWS\nview
2011-06-25 17:55:46 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-06-25 17:43:27 ----RSD---- C:\WINDOWS\assembly
2011-06-22 23:04:49 ----RSD---- C:\WINDOWS\Fonts
2011-06-22 16:04:24 ----A---- C:\WINDOWS\system32\wpa.bak

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2006-08-14 105344]
R0 nvatabus;nvatabus; C:\WINDOWS\system32\DRIVERS\nvatabus.sys [2004-12-07 87936]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2011-03-04 45648]
R1 AmdK8;AMD Athlon64 Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2004-10-21 35840]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2011-07-02 138192]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2011-07-02 66616]
R2 BT848;WinFast TV2000 XP WDM Video Capture; C:\WINDOWS\system32\drivers\wf2kvcap.sys [2006-04-20 59776]
R2 tv2ktunr;WinFast TV2000 XP WDM TVTuner; C:\WINDOWS\system32\drivers\wf2ktunr.sys [2006-04-20 19456]
R2 Tv2kXbar;WinFast TV2000 XP WDM Crossbar; C:\WINDOWS\system32\drivers\wf2kxbar.sys [2006-04-20 9600]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-12-01 2300928]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2006-03-02 9600]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-08-03 12542592]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2004-11-24 33408]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2004-11-24 12928]
R3 PAC207;Trust 100K Series Webcam; C:\WINDOWS\system32\DRIVERS\PFC027.SYS [2008-02-13 618112]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2006-03-02 26496]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2006-03-02 14848]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024]
S3 dump_wmimmc;dump_wmimmc; \??\C:\Program Files\Cabal Online\GameGuard\dump_wmimmc.sys []
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
S3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-09-06 4377600]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-04 10880]
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS.sys []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\D:\NTGLM7X.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-04 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-04 15360]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2006-03-02 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-04 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2011-07-02 269480]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2011-05-01 136360]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-05-02 153376]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2011-08-03 146024]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-08-03 2255464]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2011-06-16 4305592]

-----------------EOF-----------------

Zdravím!
Vidím tam vira. Dejte log z CoomboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

Dobrý večer stále žádná změna.

ComboFix 11-09-02.04 - Martí . 09. 2011 23:44:38.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1029.18.1535.1104 [GMT 2:00]
Spuštěný z: c:\documents and settings\MartÝ\Plocha\ComboFix.exe
AV: AntiVir Desktop *Disabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\Thumbs.db
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-02 do 2011-09-02 )))))))))))))))))))))))))))))))
.
.
2011-09-02 14:14 . 2011-09-02 14:15 -------- d-----w- c:\documents and settings\Martí\Local Settings\Data aplikací\Deployment
2011-09-02 13:50 . 2011-09-02 13:50 -------- d-----w- C:\rsit
2011-09-02 13:50 . 2011-09-02 13:50 -------- d-----w- c:\program files\trend micro
2011-09-01 11:16 . 2011-09-01 11:16 -------- d-----w- c:\documents and settings\Martí\Data aplikací\Malwarebytes
2011-09-01 11:15 . 2010-11-29 15:42 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-09-01 11:15 . 2011-09-01 11:15 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2011-09-01 11:15 . 2011-09-01 11:15 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-09-01 11:15 . 2010-11-29 15:42 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-08-24 13:26 . 2011-08-24 13:26 -------- d-----w- c:\documents and settings\Martí\Data aplikací\NVIDIA
2011-08-24 13:02 . 2011-08-24 13:02 -------- d-----w- c:\documents and settings\Martí\riotsGamesLogs
2011-08-24 12:37 . 2011-08-24 12:37 -------- d-----w- c:\documents and settings\UpdatusUser
2011-08-24 12:36 . 2011-08-03 11:49 914024 ----a-w- c:\windows\system32\nvdispco32.dll
2011-08-24 12:36 . 2011-08-03 11:49 875112 ----a-w- c:\windows\system32\nvgenco32.dll
2011-08-23 21:03 . 2011-08-23 21:03 -------- d-----w- c:\documents and settings\Martí\Data aplikací\LolClient
2011-08-23 12:15 . 2008-07-31 08:41 68616 ----a-w- c:\windows\system32\XAPOFX1_1.dll
2011-08-23 12:15 . 2008-07-31 08:40 509448 ----a-w- c:\windows\system32\XAudio2_2.dll
2011-08-23 12:15 . 2008-07-12 06:18 467984 ----a-w- c:\windows\system32\d3dx10_39.dll
2011-08-23 12:15 . 2008-07-12 06:18 1493528 ----a-w- c:\windows\system32\D3DCompiler_39.dll
2011-08-23 12:15 . 2008-07-12 06:18 3851784 ----a-w- c:\windows\system32\D3DX9_39.dll
2011-08-09 15:43 . 2011-08-29 17:00 -------- d-----w- c:\documents and settings\Jiří\Local Settings\Data aplikací\LogMeIn Hamachi
2011-08-08 18:17 . 2009-03-18 15:35 26176 ---ha-w- c:\windows\system32\hamachi.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-02 21:28 . 2011-07-19 18:02 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-08-03 11:49 . 2011-06-25 16:20 54272 ----a-w- c:\windows\system32\nvwddi.dll
2011-08-03 11:49 . 2011-06-25 16:20 274432 ----a-w- c:\windows\system32\nvrspt.dll
2011-08-03 11:49 . 2011-06-25 16:20 270336 ----a-w- c:\windows\system32\nvrsru.dll
2011-08-03 11:49 . 2011-06-25 16:20 270336 ----a-w- c:\windows\system32\nvrsptb.dll
2011-08-03 11:49 . 2011-06-25 16:20 258048 ----a-w- c:\windows\system32\nvrstr.dll
2011-08-03 11:49 . 2011-06-25 16:20 258048 ----a-w- c:\windows\system32\nvrssl.dll
2011-08-03 11:49 . 2011-06-25 16:20 258048 ----a-w- c:\windows\system32\nvrssk.dll
2011-08-03 11:49 . 2011-06-25 16:20 253952 ----a-w- c:\windows\system32\nvrsth.dll
2011-08-03 11:49 . 2011-06-25 16:20 253952 ----a-w- c:\windows\system32\nvrssv.dll
2011-08-03 11:49 . 2011-06-25 16:20 229376 ----a-w- c:\windows\system32\nvrszhc.dll
2011-08-03 11:49 . 2011-06-25 16:20 146024 ----a-w- c:\windows\system32\nvsvc32.exe
2011-08-03 11:49 . 2011-06-25 16:20 126976 ----a-w- c:\windows\system32\nvrszht.dll
2011-08-03 11:49 . 2011-06-25 16:20 335872 ----a-w- c:\windows\system32\nvrsar.dll
2011-08-03 11:49 . 2011-06-25 16:20 331776 ----a-w- c:\windows\system32\nvrshe.dll
2011-08-03 11:49 . 2011-06-25 16:20 286720 ----a-w- c:\windows\system32\nvrsfr.dll
2011-08-03 11:49 . 2011-06-25 16:20 282624 ----a-w- c:\windows\system32\nvrsit.dll
2011-08-03 11:49 . 2011-06-25 16:20 282624 ----a-w- c:\windows\system32\nvrses.dll
2011-08-03 11:49 . 2011-06-25 16:20 282624 ----a-w- c:\windows\system32\nvrsel.dll
2011-08-03 11:49 . 2011-06-25 16:20 278528 ----a-w- c:\windows\system32\nvrsde.dll
2011-08-03 11:49 . 2011-06-25 16:20 274432 ----a-w- c:\windows\system32\nvrsnl.dll
2011-08-03 11:49 . 2011-06-25 16:20 274432 ----a-w- c:\windows\system32\nvrsesm.dll
2011-08-03 11:49 . 2011-06-25 16:20 270336 ----a-w- c:\windows\system32\nvrsja.dll
2011-08-03 11:49 . 2011-06-25 16:20 266240 ----a-w- c:\windows\system32\nvrsko.dll
2011-08-03 11:49 . 2011-06-25 16:20 262144 ----a-w- c:\windows\system32\nvrshu.dll
2011-08-03 11:49 . 2011-06-25 16:20 258048 ----a-w- c:\windows\system32\nvrspl.dll
2011-08-03 11:49 . 2011-06-25 16:20 253952 ----a-w- c:\windows\system32\nvrsno.dll
2011-08-03 11:49 . 2011-06-25 16:20 253952 ----a-w- c:\windows\system32\nvrsda.dll
2011-08-03 11:49 . 2011-06-25 16:20 249856 ----a-w- c:\windows\system32\nvrsfi.dll
2011-08-03 11:49 . 2011-06-25 16:20 249856 ----a-w- c:\windows\system32\nvrseng.dll
2011-08-03 11:49 . 2011-06-25 16:20 249856 ----a-w- c:\windows\system32\nvrscs.dll
2011-08-03 11:49 . 2011-06-25 16:20 16191488 ----a-w- c:\windows\system32\nvoglnt.dll
2011-08-03 11:49 . 2011-06-25 16:20 111208 ----a-w- c:\windows\system32\nvmctray.dll
2011-08-03 11:49 . 2011-06-25 16:20 5427200 ----a-w- c:\windows\system32\nvcuda.dll
2011-08-03 11:49 . 2011-06-25 16:20 13892200 ----a-w- c:\windows\system32\nvcpl.dll
2011-08-03 11:49 . 2011-06-25 16:20 2404864 ----a-w- c:\windows\system32\nvapi.dll
2011-08-03 11:49 . 2011-06-25 16:20 145000 ----a-w- c:\windows\system32\nvcolor.exe
2011-08-03 11:49 . 2011-03-14 18:25 61440 ----a-w- c:\windows\system32\OpenCL.dll
2011-08-03 11:49 . 2011-03-14 18:25 2387560 ----a-w- c:\windows\system32\nvcuvid.dll
2011-08-03 11:49 . 2011-03-14 18:25 2090088 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-08-03 11:49 . 2011-03-14 18:25 17186816 ----a-w- c:\windows\system32\nvcompiler.dll
2011-08-03 11:49 . 2011-01-07 17:58 600680 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll
2011-08-03 11:49 . 2006-08-16 07:35 4210816 ----a-w- c:\windows\system32\nv4_disp.dll
2011-08-03 11:49 . 2006-08-16 07:35 12542592 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2011-07-02 08:32 . 2011-02-20 17:22 66616 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-07-02 08:32 . 2011-02-20 17:22 138192 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-06-25 15:56 . 2011-06-25 15:56 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-06-16 17:19 . 2011-06-22 21:06 4305592 ----a-w- c:\windows\system32\GameMon.des
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"RTHDCPL"="RTHDCPL.EXE" [2006-09-06 16262656]
"PAC207_Monitor"="c:\windows\PixArt\PAC207\Monitor.exe" [2007-12-10 323584]
"Monitor"="c:\windows\PixArt\PAC207\Monitor.exe" [2007-12-10 323584]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-01-10 281768]
"SoundMan"="SOUNDMAN.EXE" [2004-12-01 77824]
"WinSys2"="c:\windows\system32\winsys2.exe" [2008-07-09 208896]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-08-03 13892200]
"NvMediaCenter"="NvMCTray.dll" [2011-08-03 111208]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2011-07-05 1632360]
.
[HKLM\~\startupfolder\C:^Documents and Settings^Martí^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.2.lnk]
path=c:\documents and settings\Martí\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.2.lnk
backup=c:\windows\pss\OpenOffice.org 3.2.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2011-03-30 17:29 937920 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2011-01-30 15:45 35736 ----a-w- c:\program files\Adobe\Reader 10.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2011-03-21 18:56 1230704 ----a-w- c:\program files\DivX\DivX Update\DivXUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2011-02-20 16:33 136176 ----atw- c:\documents and settings\Martí\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2011-01-07 11:12 253672 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\Winamp\\winamp.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"56724:TCP"= 56724:TCP:Pando Media Booster
"56724:UDP"= 56724:UDP:Pando Media Booster
"6112:TCP"= 6112:TCP:W3 hoster
"6112:UDP"= 6112:UDP:W3 hoster
"57754:TCP"= 57754:TCP:Pando Media Booster
"57754:UDP"= 57754:UDP:Pando Media Booster
.
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [20. 2. 2011 19:22 136360]
R2 BT848;WinFast TV2000 XP WDM Video Capture;c:\windows\system32\drivers\wf2kvcap.sys [22. 6. 2011 15:29 59776]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [24. 8. 2011 14:37 2255464]
R2 tv2ktunr;WinFast TV2000 XP WDM TVTuner;c:\windows\system32\drivers\wf2ktunr.sys [22. 6. 2011 15:30 19456]
R2 Tv2kXbar;WinFast TV2000 XP WDM Crossbar;c:\windows\system32\drivers\wf2kXbar.sys [22. 6. 2011 15:30 9600]
R3 PAC207;Trust 100K Series Webcam;c:\windows\system32\drivers\PFC027.SYS [20. 2. 2011 18:15 618112]
S3 dump_wmimmc;dump_wmimmc;\??\c:\program files\Cabal Online\GameGuard\dump_wmimmc.sys --> c:\program files\Cabal Online\GameGuard\dump_wmimmc.sys [?]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\d:\ntglm7x.sys --> d:\NTGLM7X.sys [?]
.
Obsah adresáře 'Naplánované úlohy'
.
2011-06-26 c:\windows\Tasks\User_Feed_Synchronization-{E42F4FED-0DC5-44A7-9A08-5A798CDD15C5}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 03:31]
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: Interfaces\{86CF064D-B3EA-476B-B41D-81F4460CE8EA}: NameServer = 10.120.0.1,10.120.0.2
TCP: Interfaces\{F50A6362-957A-41A4-ACF3-6228211DA0C9}: NameServer = 10.120.0.1,10.120.0.2
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
MSConfigStartUp-LogMeIn Hamachi Ui - c:\program files\Hamachi\hamachi-2-ui.exe
MSConfigStartUp-Pando Media Booster - c:\program files\Pando Networks\Media Booster\PMB.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-02 23:53
Windows 5.1.2600 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
Celkový čas: 2011-09-02 23:54:23
ComboFix-quarantined-files.txt 2011-09-02 21:54
.
Před spuštěním: Volných bajtů: 137 733 500 928
Po spuštění: Volných bajtů: 138 968 371 200
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
.
- - End Of File - - FEB8D23A5F4AEF6A5D14DAC91565A930

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

Collect::
c:\windows\system32\winsys2.exe

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinSys2"=-

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Dobrý den přidávám další log.

ComboFix 11-09-02.04 - Martí . 09. 2011 11:28:05.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1029.18.1535.1106 [GMT 2:00]
Spuštěný z: c:\documents and settings\MartÝ\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\MartÝ\Plocha\CFScript.txt
AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-03 do 2011-09-03 )))))))))))))))))))))))))))))))
.
.
2011-09-03 07:11 . 2011-09-03 09:25 -------- d-----w- c:\windows\LastGood
2011-09-02 14:14 . 2011-09-02 14:15 -------- d-----w- c:\documents and settings\Martí\Local Settings\Data aplikací\Deployment
2011-09-02 13:50 . 2011-09-02 13:50 -------- d-----w- C:\rsit
2011-09-02 13:50 . 2011-09-02 13:50 -------- d-----w- c:\program files\trend micro
2011-09-01 11:16 . 2011-09-01 11:16 -------- d-----w- c:\documents and settings\Martí\Data aplikací\Malwarebytes
2011-09-01 11:15 . 2010-11-29 15:42 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-09-01 11:15 . 2011-09-01 11:15 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2011-09-01 11:15 . 2011-09-01 11:15 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-09-01 11:15 . 2010-11-29 15:42 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-08-24 13:26 . 2011-08-24 13:26 -------- d-----w- c:\documents and settings\Martí\Data aplikací\NVIDIA
2011-08-24 13:02 . 2011-08-24 13:02 -------- d-----w- c:\documents and settings\Martí\riotsGamesLogs
2011-08-24 12:37 . 2011-08-24 12:37 -------- d-----w- c:\documents and settings\UpdatusUser
2011-08-24 12:36 . 2011-08-03 11:49 914024 ----a-w- c:\windows\system32\nvdispco32.dll
2011-08-24 12:36 . 2011-08-03 11:49 875112 ----a-w- c:\windows\system32\nvgenco32.dll
2011-08-23 21:03 . 2011-08-23 21:03 -------- d-----w- c:\documents and settings\Martí\Data aplikací\LolClient
2011-08-23 12:15 . 2008-07-31 08:41 68616 ----a-w- c:\windows\system32\XAPOFX1_1.dll
2011-08-23 12:15 . 2008-07-31 08:40 509448 ----a-w- c:\windows\system32\XAudio2_2.dll
2011-08-23 12:15 . 2008-07-12 06:18 467984 ----a-w- c:\windows\system32\d3dx10_39.dll
2011-08-23 12:15 . 2008-07-12 06:18 1493528 ----a-w- c:\windows\system32\D3DCompiler_39.dll
2011-08-23 12:15 . 2008-07-12 06:18 3851784 ----a-w- c:\windows\system32\D3DX9_39.dll
2011-08-09 15:43 . 2011-08-29 17:00 -------- d-----w- c:\documents and settings\Jiří\Local Settings\Data aplikací\LogMeIn Hamachi
2011-08-08 18:17 . 2009-03-18 15:35 26176 ---ha-w- c:\windows\system32\hamachi.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-02 21:28 . 2011-07-19 18:02 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-08-03 11:49 . 2011-06-25 16:20 54272 ----a-w- c:\windows\system32\nvwddi.dll
2011-08-03 11:49 . 2011-06-25 16:20 274432 ----a-w- c:\windows\system32\nvrspt.dll
2011-08-03 11:49 . 2011-06-25 16:20 270336 ----a-w- c:\windows\system32\nvrsru.dll
2011-08-03 11:49 . 2011-06-25 16:20 270336 ----a-w- c:\windows\system32\nvrsptb.dll
2011-08-03 11:49 . 2011-06-25 16:20 258048 ----a-w- c:\windows\system32\nvrstr.dll
2011-08-03 11:49 . 2011-06-25 16:20 258048 ----a-w- c:\windows\system32\nvrssl.dll
2011-08-03 11:49 . 2011-06-25 16:20 258048 ----a-w- c:\windows\system32\nvrssk.dll
2011-08-03 11:49 . 2011-06-25 16:20 253952 ----a-w- c:\windows\system32\nvrsth.dll
2011-08-03 11:49 . 2011-06-25 16:20 253952 ----a-w- c:\windows\system32\nvrssv.dll
2011-08-03 11:49 . 2011-06-25 16:20 229376 ----a-w- c:\windows\system32\nvrszhc.dll
2011-08-03 11:49 . 2011-06-25 16:20 146024 ----a-w- c:\windows\system32\nvsvc32.exe
2011-08-03 11:49 . 2011-06-25 16:20 126976 ----a-w- c:\windows\system32\nvrszht.dll
2011-08-03 11:49 . 2011-06-25 16:20 335872 ----a-w- c:\windows\system32\nvrsar.dll
2011-08-03 11:49 . 2011-06-25 16:20 331776 ----a-w- c:\windows\system32\nvrshe.dll
2011-08-03 11:49 . 2011-06-25 16:20 286720 ----a-w- c:\windows\system32\nvrsfr.dll
2011-08-03 11:49 . 2011-06-25 16:20 282624 ----a-w- c:\windows\system32\nvrsit.dll
2011-08-03 11:49 . 2011-06-25 16:20 282624 ----a-w- c:\windows\system32\nvrses.dll
2011-08-03 11:49 . 2011-06-25 16:20 282624 ----a-w- c:\windows\system32\nvrsel.dll
2011-08-03 11:49 . 2011-06-25 16:20 278528 ----a-w- c:\windows\system32\nvrsde.dll
2011-08-03 11:49 . 2011-06-25 16:20 274432 ----a-w- c:\windows\system32\nvrsnl.dll
2011-08-03 11:49 . 2011-06-25 16:20 274432 ----a-w- c:\windows\system32\nvrsesm.dll
2011-08-03 11:49 . 2011-06-25 16:20 270336 ----a-w- c:\windows\system32\nvrsja.dll
2011-08-03 11:49 . 2011-06-25 16:20 266240 ----a-w- c:\windows\system32\nvrsko.dll
2011-08-03 11:49 . 2011-06-25 16:20 262144 ----a-w- c:\windows\system32\nvrshu.dll
2011-08-03 11:49 . 2011-06-25 16:20 258048 ----a-w- c:\windows\system32\nvrspl.dll
2011-08-03 11:49 . 2011-06-25 16:20 253952 ----a-w- c:\windows\system32\nvrsno.dll
2011-08-03 11:49 . 2011-06-25 16:20 253952 ----a-w- c:\windows\system32\nvrsda.dll
2011-08-03 11:49 . 2011-06-25 16:20 249856 ----a-w- c:\windows\system32\nvrsfi.dll
2011-08-03 11:49 . 2011-06-25 16:20 249856 ----a-w- c:\windows\system32\nvrseng.dll
2011-08-03 11:49 . 2011-06-25 16:20 249856 ----a-w- c:\windows\system32\nvrscs.dll
2011-08-03 11:49 . 2011-06-25 16:20 16191488 ----a-w- c:\windows\system32\nvoglnt.dll
2011-08-03 11:49 . 2011-06-25 16:20 111208 ----a-w- c:\windows\system32\nvmctray.dll
2011-08-03 11:49 . 2011-06-25 16:20 5427200 ----a-w- c:\windows\system32\nvcuda.dll
2011-08-03 11:49 . 2011-06-25 16:20 13892200 ----a-w- c:\windows\system32\nvcpl.dll
2011-08-03 11:49 . 2011-06-25 16:20 2404864 ----a-w- c:\windows\system32\nvapi.dll
2011-08-03 11:49 . 2011-06-25 16:20 145000 ----a-w- c:\windows\system32\nvcolor.exe
2011-08-03 11:49 . 2011-03-14 18:25 61440 ----a-w- c:\windows\system32\OpenCL.dll
2011-08-03 11:49 . 2011-03-14 18:25 2387560 ----a-w- c:\windows\system32\nvcuvid.dll
2011-08-03 11:49 . 2011-03-14 18:25 2090088 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-08-03 11:49 . 2011-03-14 18:25 17186816 ----a-w- c:\windows\system32\nvcompiler.dll
2011-08-03 11:49 . 2011-01-07 17:58 600680 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll
2011-08-03 11:49 . 2006-08-16 07:35 4210816 ----a-w- c:\windows\system32\nv4_disp.dll
2011-08-03 11:49 . 2006-08-16 07:35 12542592 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2011-07-02 08:32 . 2011-02-20 17:22 66616 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-07-02 08:32 . 2011-02-20 17:22 138192 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-06-25 15:56 . 2011-06-25 15:56 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-06-16 17:19 . 2011-06-22 21:06 4305592 ----a-w- c:\windows\system32\GameMon.des
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"RTHDCPL"="RTHDCPL.EXE" [2006-09-06 16262656]
"PAC207_Monitor"="c:\windows\PixArt\PAC207\Monitor.exe" [2007-12-10 323584]
"Monitor"="c:\windows\PixArt\PAC207\Monitor.exe" [2007-12-10 323584]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-01-10 281768]
"SoundMan"="SOUNDMAN.EXE" [2004-12-01 77824]
"WinSys2"="c:\windows\system32\winsys2.exe" [2008-07-09 208896]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-08-03 13892200]
"NvMediaCenter"="NvMCTray.dll" [2011-08-03 111208]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2011-07-05 1632360]
.
[HKLM\~\startupfolder\C:^Documents and Settings^Martí^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.2.lnk]
path=c:\documents and settings\Martí\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.2.lnk
backup=c:\windows\pss\OpenOffice.org 3.2.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2011-03-30 17:29 937920 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2011-01-30 15:45 35736 ----a-w- c:\program files\Adobe\Reader 10.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2011-03-21 18:56 1230704 ----a-w- c:\program files\DivX\DivX Update\DivXUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2011-02-20 16:33 136176 ----atw- c:\documents and settings\Martí\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2011-01-07 11:12 253672 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\Winamp\\winamp.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"56724:TCP"= 56724:TCP:Pando Media Booster
"56724:UDP"= 56724:UDP:Pando Media Booster
"6112:TCP"= 6112:TCP:W3 hoster
"6112:UDP"= 6112:UDP:W3 hoster
"57754:TCP"= 57754:TCP:Pando Media Booster
"57754:UDP"= 57754:UDP:Pando Media Booster
.
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [20. 2. 2011 19:22 136360]
R2 BT848;WinFast TV2000 XP WDM Video Capture;c:\windows\system32\drivers\wf2kvcap.sys [22. 6. 2011 15:29 59776]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [24. 8. 2011 14:37 2255464]
R2 tv2ktunr;WinFast TV2000 XP WDM TVTuner;c:\windows\system32\drivers\wf2ktunr.sys [22. 6. 2011 15:30 19456]
R2 Tv2kXbar;WinFast TV2000 XP WDM Crossbar;c:\windows\system32\drivers\wf2kXbar.sys [22. 6. 2011 15:30 9600]
R3 PAC207;Trust 100K Series Webcam;c:\windows\system32\drivers\PFC027.SYS [20. 2. 2011 18:15 618112]
S3 dump_wmimmc;dump_wmimmc;\??\c:\program files\Cabal Online\GameGuard\dump_wmimmc.sys --> c:\program files\Cabal Online\GameGuard\dump_wmimmc.sys [?]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\d:\ntglm7x.sys --> d:\NTGLM7X.sys [?]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 9026298DRV
*NewlyCreated* - 92115421
.
Obsah adresáře 'Naplánované úlohy'
.
2011-06-26 c:\windows\Tasks\User_Feed_Synchronization-{E42F4FED-0DC5-44A7-9A08-5A798CDD15C5}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 03:31]
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: Interfaces\{86CF064D-B3EA-476B-B41D-81F4460CE8EA}: NameServer = 10.120.0.1,10.120.0.2
TCP: Interfaces\{F50A6362-957A-41A4-ACF3-6228211DA0C9}: NameServer = 10.120.0.1,10.120.0.2
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-03 11:33
Windows 5.1.2600 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(3040)
c:\windows\system32\ieframe.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
.
Celkový čas: 2011-09-03 11:35:00
ComboFix-quarantined-files.txt 2011-09-03 09:34
ComboFix2.txt 2011-09-02 21:54
.
Před spuštěním: Volných bajtů: 138 957 385 728
Po spuštění: Volných bajtů: 138 946 920 448
.
- - End Of File - - 917FE09D885D1FC9B6DCBA1E5033E381

CF nemazal. Zkuste znovu, ale v nouz. režimu přes profil Administrator.

Tak konečně mazalo po autorestartu pc nešel internet musel jsem ho znovu nastavit.

ComboFix 11-09-02.04 - Administrator . 09. 2011 12:01:48.3.1 - x86 NETWORK
Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1029.18.1535.1295 [GMT 2:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Administrator\Plocha\CFScript.txt
AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
file zipped: c:\windows\system32\winsys2.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\winsys2.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-03 do 2011-09-03 )))))))))))))))))))))))))))))))
.
.
2011-09-03 07:11 . 2011-09-03 09:25 -------- d-----w- c:\windows\LastGood.Tmp
2011-09-02 14:14 . 2011-09-02 14:15 -------- d-----w- c:\documents and settings\Martí\Local Settings\Data aplikací\Deployment
2011-09-02 13:50 . 2011-09-02 13:50 -------- d-----w- C:\rsit
2011-09-02 13:50 . 2011-09-02 13:50 -------- d-----w- c:\program files\trend micro
2011-09-01 11:16 . 2011-09-01 11:16 -------- d-----w- c:\documents and settings\Martí\Data aplikací\Malwarebytes
2011-09-01 11:15 . 2010-11-29 15:42 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-09-01 11:15 . 2011-09-01 11:15 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2011-09-01 11:15 . 2011-09-01 11:15 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-09-01 11:15 . 2010-11-29 15:42 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-08-24 13:26 . 2011-08-24 13:26 -------- d-----w- c:\documents and settings\Martí\Data aplikací\NVIDIA
2011-08-24 13:02 . 2011-08-24 13:02 -------- d-----w- c:\documents and settings\Martí\riotsGamesLogs
2011-08-24 12:37 . 2011-08-24 12:37 -------- d-----w- c:\documents and settings\UpdatusUser
2011-08-24 12:36 . 2011-08-03 11:49 914024 ----a-w- c:\windows\system32\nvdispco32.dll
2011-08-24 12:36 . 2011-08-03 11:49 875112 ----a-w- c:\windows\system32\nvgenco32.dll
2011-08-23 21:03 . 2011-08-23 21:03 -------- d-----w- c:\documents and settings\Martí\Data aplikací\LolClient
2011-08-23 12:15 . 2008-07-31 08:41 68616 ----a-w- c:\windows\system32\XAPOFX1_1.dll
2011-08-23 12:15 . 2008-07-31 08:40 509448 ----a-w- c:\windows\system32\XAudio2_2.dll
2011-08-23 12:15 . 2008-07-12 06:18 467984 ----a-w- c:\windows\system32\d3dx10_39.dll
2011-08-23 12:15 . 2008-07-12 06:18 1493528 ----a-w- c:\windows\system32\D3DCompiler_39.dll
2011-08-23 12:15 . 2008-07-12 06:18 3851784 ----a-w- c:\windows\system32\D3DX9_39.dll
2011-08-09 15:43 . 2011-08-29 17:00 -------- d-----w- c:\documents and settings\Jiří\Local Settings\Data aplikací\LogMeIn Hamachi
2011-08-08 18:17 . 2009-03-18 15:35 26176 ---ha-w- c:\windows\system32\hamachi.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-02 21:28 . 2011-07-19 18:02 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-08-03 11:49 . 2011-06-25 16:20 54272 ----a-w- c:\windows\system32\nvwddi.dll
2011-08-03 11:49 . 2011-06-25 16:20 274432 ----a-w- c:\windows\system32\nvrspt.dll
2011-08-03 11:49 . 2011-06-25 16:20 270336 ----a-w- c:\windows\system32\nvrsru.dll
2011-08-03 11:49 . 2011-06-25 16:20 270336 ----a-w- c:\windows\system32\nvrsptb.dll
2011-08-03 11:49 . 2011-06-25 16:20 258048 ----a-w- c:\windows\system32\nvrstr.dll
2011-08-03 11:49 . 2011-06-25 16:20 258048 ----a-w- c:\windows\system32\nvrssl.dll
2011-08-03 11:49 . 2011-06-25 16:20 258048 ----a-w- c:\windows\system32\nvrssk.dll
2011-08-03 11:49 . 2011-06-25 16:20 253952 ----a-w- c:\windows\system32\nvrsth.dll
2011-08-03 11:49 . 2011-06-25 16:20 253952 ----a-w- c:\windows\system32\nvrssv.dll
2011-08-03 11:49 . 2011-06-25 16:20 229376 ----a-w- c:\windows\system32\nvrszhc.dll
2011-08-03 11:49 . 2011-06-25 16:20 146024 ----a-w- c:\windows\system32\nvsvc32.exe
2011-08-03 11:49 . 2011-06-25 16:20 126976 ----a-w- c:\windows\system32\nvrszht.dll
2011-08-03 11:49 . 2011-06-25 16:20 335872 ----a-w- c:\windows\system32\nvrsar.dll
2011-08-03 11:49 . 2011-06-25 16:20 331776 ----a-w- c:\windows\system32\nvrshe.dll
2011-08-03 11:49 . 2011-06-25 16:20 286720 ----a-w- c:\windows\system32\nvrsfr.dll
2011-08-03 11:49 . 2011-06-25 16:20 282624 ----a-w- c:\windows\system32\nvrsit.dll
2011-08-03 11:49 . 2011-06-25 16:20 282624 ----a-w- c:\windows\system32\nvrses.dll
2011-08-03 11:49 . 2011-06-25 16:20 282624 ----a-w- c:\windows\system32\nvrsel.dll
2011-08-03 11:49 . 2011-06-25 16:20 278528 ----a-w- c:\windows\system32\nvrsde.dll
2011-08-03 11:49 . 2011-06-25 16:20 274432 ----a-w- c:\windows\system32\nvrsnl.dll
2011-08-03 11:49 . 2011-06-25 16:20 274432 ----a-w- c:\windows\system32\nvrsesm.dll
2011-08-03 11:49 . 2011-06-25 16:20 270336 ----a-w- c:\windows\system32\nvrsja.dll
2011-08-03 11:49 . 2011-06-25 16:20 266240 ----a-w- c:\windows\system32\nvrsko.dll
2011-08-03 11:49 . 2011-06-25 16:20 262144 ----a-w- c:\windows\system32\nvrshu.dll
2011-08-03 11:49 . 2011-06-25 16:20 258048 ----a-w- c:\windows\system32\nvrspl.dll
2011-08-03 11:49 . 2011-06-25 16:20 253952 ----a-w- c:\windows\system32\nvrsno.dll
2011-08-03 11:49 . 2011-06-25 16:20 253952 ----a-w- c:\windows\system32\nvrsda.dll
2011-08-03 11:49 . 2011-06-25 16:20 249856 ----a-w- c:\windows\system32\nvrsfi.dll
2011-08-03 11:49 . 2011-06-25 16:20 249856 ----a-w- c:\windows\system32\nvrseng.dll
2011-08-03 11:49 . 2011-06-25 16:20 249856 ----a-w- c:\windows\system32\nvrscs.dll
2011-08-03 11:49 . 2011-06-25 16:20 16191488 ----a-w- c:\windows\system32\nvoglnt.dll
2011-08-03 11:49 . 2011-06-25 16:20 111208 ----a-w- c:\windows\system32\nvmctray.dll
2011-08-03 11:49 . 2011-06-25 16:20 5427200 ----a-w- c:\windows\system32\nvcuda.dll
2011-08-03 11:49 . 2011-06-25 16:20 13892200 ----a-w- c:\windows\system32\nvcpl.dll
2011-08-03 11:49 . 2011-06-25 16:20 2404864 ----a-w- c:\windows\system32\nvapi.dll
2011-08-03 11:49 . 2011-06-25 16:20 145000 ----a-w- c:\windows\system32\nvcolor.exe
2011-08-03 11:49 . 2011-03-14 18:25 61440 ----a-w- c:\windows\system32\OpenCL.dll
2011-08-03 11:49 . 2011-03-14 18:25 2387560 ----a-w- c:\windows\system32\nvcuvid.dll
2011-08-03 11:49 . 2011-03-14 18:25 2090088 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-08-03 11:49 . 2011-03-14 18:25 17186816 ----a-w- c:\windows\system32\nvcompiler.dll
2011-08-03 11:49 . 2011-01-07 17:58 600680 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll
2011-08-03 11:49 . 2006-08-16 07:35 4210816 ----a-w- c:\windows\system32\nv4_disp.dll
2011-08-03 11:49 . 2006-08-16 07:35 12542592 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2011-07-02 08:32 . 2011-02-20 17:22 66616 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-07-02 08:32 . 2011-02-20 17:22 138192 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-06-25 15:56 . 2011-06-25 15:56 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-06-16 17:19 . 2011-06-22 21:06 4305592 ----a-w- c:\windows\system32\GameMon.des
.
.
((((((((((((((((((((((((((((( SnapShot@2011-09-02_21.53.01 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-08-06 17:24 . 2009-08-06 17:24 44768 c:\windows\system32\wups2.dll
+ 2011-02-20 15:35 . 2009-08-06 17:24 35552 c:\windows\system32\wups.dll
+ 2011-02-20 15:35 . 2009-08-06 17:24 53472 c:\windows\system32\wuauclt.exe
+ 2011-09-03 07:11 . 2009-08-06 17:24 35552 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll
+ 2011-02-20 15:35 . 2009-08-06 17:24 35552 c:\windows\system32\dllcache\wups.dll
+ 2011-02-20 15:35 . 2009-08-06 17:24 53472 c:\windows\system32\dllcache\wuauclt.exe
+ 2006-03-02 12:00 . 2009-08-06 17:24 96480 c:\windows\system32\dllcache\cdm.dll
+ 2006-03-02 12:00 . 2009-08-06 17:24 96480 c:\windows\system32\cdm.dll
- 2011-02-20 15:37 . 2011-02-20 15:37 76487 c:\windows\pchealth\helpctr\OfflineCache\index.dat
+ 2011-02-20 15:37 . 2011-09-03 07:11 76487 c:\windows\pchealth\helpctr\OfflineCache\index.dat
+ 2011-09-03 07:11 . 2006-03-02 12:00 36864 c:\windows\LastGood.Tmp\system32\wups.dll
+ 2011-09-03 07:11 . 2006-03-02 12:00 66560 c:\windows\LastGood.Tmp\system32\cdm.dll
+ 2011-02-20 15:37 . 2011-09-03 07:11 2378 c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
+ 2011-02-20 15:37 . 2011-09-03 07:10 8972 c:\windows\pchealth\helpctr\Config\Cntstore.bin
+ 2011-02-20 15:35 . 2009-08-06 17:24 209632 c:\windows\system32\wuweb.dll
+ 2011-02-20 15:35 . 2009-08-06 17:24 327896 c:\windows\system32\wucltui.dll
+ 2011-02-20 15:35 . 2009-08-06 17:23 575704 c:\windows\system32\wuapi.dll
+ 2011-02-20 15:35 . 2009-08-06 17:24 209632 c:\windows\system32\dllcache\wuweb.dll
+ 2011-02-20 15:35 . 2009-08-06 17:24 327896 c:\windows\system32\dllcache\wucltui.dll
+ 2011-02-20 15:35 . 2009-08-06 17:23 575704 c:\windows\system32\dllcache\wuapi.dll
+ 2011-09-03 07:11 . 2006-03-02 12:00 120320 c:\windows\LastGood.Tmp\system32\wuweb.dll
+ 2011-09-03 07:11 . 2006-03-02 12:00 112640 c:\windows\LastGood.Tmp\system32\wucltui.dll
+ 2011-09-03 07:11 . 2006-03-02 12:00 111104 c:\windows\LastGood.Tmp\system32\wuauclt.exe
+ 2011-09-03 07:11 . 2006-03-02 12:00 431104 c:\windows\LastGood.Tmp\system32\wuapi.dll
+ 2011-09-03 09:25 . 2011-09-03 08:58 133208 c:\windows\LastGood.Tmp\system32\DRIVERS\92115421.sys
+ 2011-09-03 08:58 . 2011-09-03 08:58 475736 c:\windows\LastGood.Tmp\system32\DRIVERS\9026298drv.sys
+ 2011-02-20 15:35 . 2009-08-06 17:23 1929952 c:\windows\system32\wuaueng.dll
+ 2011-02-20 15:35 . 2009-08-06 17:23 1929952 c:\windows\system32\dllcache\wuaueng.dll
+ 2011-09-03 07:11 . 2006-03-02 12:00 1134592 c:\windows\LastGood.Tmp\system32\wuaueng.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"RTHDCPL"="RTHDCPL.EXE" [2006-09-06 16262656]
"PAC207_Monitor"="c:\windows\PixArt\PAC207\Monitor.exe" [2007-12-10 323584]
"Monitor"="c:\windows\PixArt\PAC207\Monitor.exe" [2007-12-10 323584]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-01-10 281768]
"SoundMan"="SOUNDMAN.EXE" [2004-12-01 77824]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-08-03 13892200]
"NvMediaCenter"="NvMCTray.dll" [2011-08-03 111208]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2011-07-05 1632360]
.
[HKLM\~\startupfolder\C:^Documents and Settings^Martí^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.2.lnk]
path=c:\documents and settings\Martí\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.2.lnk
backup=c:\windows\pss\OpenOffice.org 3.2.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2011-03-30 17:29 937920 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2011-01-30 15:45 35736 ----a-w- c:\program files\Adobe\Reader 10.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2011-03-21 18:56 1230704 ----a-w- c:\program files\DivX\DivX Update\DivXUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2011-02-20 16:33 136176 ----atw- c:\documents and settings\Martí\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2011-01-07 11:12 253672 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\Winamp\\winamp.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"56724:TCP"= 56724:TCP:Pando Media Booster
"56724:UDP"= 56724:UDP:Pando Media Booster
"6112:TCP"= 6112:TCP:W3 hoster
"6112:UDP"= 6112:UDP:W3 hoster
"57754:TCP"= 57754:TCP:Pando Media Booster
"57754:UDP"= 57754:UDP:Pando Media Booster
.
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [20. 2. 2011 19:22 136360]
R2 BT848;WinFast TV2000 XP WDM Video Capture;c:\windows\system32\drivers\wf2kvcap.sys [22. 6. 2011 15:29 59776]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [24. 8. 2011 14:37 2255464]
R2 tv2ktunr;WinFast TV2000 XP WDM TVTuner;c:\windows\system32\drivers\wf2ktunr.sys [22. 6. 2011 15:30 19456]
R2 Tv2kXbar;WinFast TV2000 XP WDM Crossbar;c:\windows\system32\drivers\wf2kXbar.sys [22. 6. 2011 15:30 9600]
R3 PAC207;Trust 100K Series Webcam;c:\windows\system32\drivers\PFC027.SYS [20. 2. 2011 18:15 618112]
S3 dump_wmimmc;dump_wmimmc;\??\c:\program files\Cabal Online\GameGuard\dump_wmimmc.sys --> c:\program files\Cabal Online\GameGuard\dump_wmimmc.sys [?]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\d:\ntglm7x.sys --> d:\NTGLM7X.sys [?]
.
Obsah adresáře 'Naplánované úlohy'
.
2011-06-26 c:\windows\Tasks\User_Feed_Synchronization-{E42F4FED-0DC5-44A7-9A08-5A798CDD15C5}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 03:31]
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: Interfaces\{86CF064D-B3EA-476B-B41D-81F4460CE8EA}: NameServer = 10.120.0.1,10.120.0.2
TCP: Interfaces\{F50A6362-957A-41A4-ACF3-6228211DA0C9}: NameServer = 10.120.0.1,10.120.0.2
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-03 12:08
Windows 5.1.2600 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(3512)
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\windows\system32\nvsvc32.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
c:\windows\system32\wdfmgr.exe
c:\windows\SOUNDMAN.EXE
c:\windows\system32\RunDLL32.exe
.
**************************************************************************
.
Celkový čas: 2011-09-03 12:10:17 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-09-03 10:10
ComboFix2.txt 2011-09-03 09:35
ComboFix3.txt 2011-09-02 21:54
.
Před spuštěním: Volných bajtů: 139 110 633 472
Po spuštění: Volných bajtů: 138 937 606 144
.
- - End Of File - - 15F1E202D3B3992E8290744BB7E7DD0B

Internet je i po výmazu stále hrozně zasekaný a pomalý.

1. Restartujte modem, příp. další síť. prvek v datové cestě.
2. Použijte WinsockFix: http://www.spyware.cz/go.php?p=spyware&t=aplikace&id=22 . Utilita reinstaluje protokol TCP/IP. Máte-li parametry sítě zadány ručně, budete je muset po restartu PC znovu zadat.

zdá se mi to lepší uvidíme dám ještě vědět jestli to není jen chvilkový efekt děkuji za pomoc.

PC je furt stejně pomalé :/ už nevím co stím .

knespl.p píše:PC je furt stejně pomalé :/ už nevím co stím .

Nejste pod FUPem?

pod fupem nejsem stahuji normálně jen načítaní stránek je pomalé. (videa a filmy online se načítají rychle)

Co jste instaloval těsně před tím, než se problém objevil?

program psaní všemi deseti. Je pravda že cracklou verzi z ulož.to ale to už jsem smazal.