VIRY.CZ

Zdravím.
Veľmi pomaly sa mi načítavajú stránky, príp. sa vôbec nenačítajú. Pritom mám net 20/2 Mb. Strata packetov cez http://pingtest.net/ dosahuje 98%. Naopak cez príkazový riadok nie je žiadna strata pri pingu. Poprosím vás o kontrolu logu, či to nemá na svedomí nejaký vír. Vďaka.
Mám Windows XP.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Uz at 2012-02-19 13:54:09
Systém Microsoft Windows XP Professional Service Pack 3
System drive E: has 43 GB (53%) free of 80 GB
Total RAM: 3326 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:54:44, on 19.2.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\Explorer.EXE
E:\Program Files\Avira\AntiVir Desktop\sched.exe
E:\Program Files\Avira\AntiVir Desktop\avguard.exe
E:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
E:\Program Files\Java\jre6\bin\jqs.exe
E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
E:\Program Files\Avira\AntiVir Desktop\avshadow.exe
E:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe
E:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
E:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
E:\Program Files\ASUS\WLAN Card Utilities\Center.exe
E:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
E:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe
E:\Program Files\Cyberlink\Shared files\brs.exe
E:\Program Files\Common Files\Java\Java Update\jusched.exe
E:\Program files\Returnil\Returnil.exe
E:\Program Files\Avira\AntiVir Desktop\avgnt.exe
E:\WINDOWS\system32\ctfmon.exe
E:\Documents and Settings\Uz\Desktop\utorrent.exe
E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
E:\WINDOWS\system32\wbem\unsecapp.exe
E:\Program Files\Mozilla Firefox\firefox.exe
E:\Program Files\Mozilla Firefox\plugin-container.exe
E:\Program Files\Java\jre6\bin\javaw.exe
E:\Documents and Settings\Uz\Desktop\RSIT.exe
E:\Program Files\trend micro\Uz.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.christ-net.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - E:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - E:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - (no file)
O4 - HKLM\..\Run: [StartCCC] "E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Six Engine] "E:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe" -b
O4 - HKLM\..\Run: [BCU] "E:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKLM\..\Run: [HDAudDeck] E:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [Control Center] E:\Program Files\ASUS\WLAN Card Utilities\Center.exe
O4 - HKLM\..\Run: [GrooveMonitor] "E:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [RemoteControl10] "E:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [BDRegion] E:\Program Files\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "E:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Rvsystem] "E:\Program files\Returnil\Returnil.exe"
O4 - HKLM\..\Run: [avgnt] "E:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "E:\Documents and Settings\Uz\Desktop\utorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Google Update] "E:\Documents and Settings\Uz\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{14C87369-A245-46FB-9539-ED92BA03FDA8}: NameServer = 8.8.8.8
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - E:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - E:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - E:\WINDOWS\system32\browseui.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - E:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - E:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: ASWLSVC - Unknown owner - E:\WINDOWS\system32\ASWLSVC.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - E:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe

--
End of file - 7179 bytes

======Scheduled tasks folder======

E:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-329068152-73586283-839522115-1003Core.job
E:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-329068152-73586283-839522115-1003UA.job
E:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-329068152-73586283-839522115-1003.job
E:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-329068152-73586283-839522115-1003.job
E:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
E:\WINDOWS\tasks\User_Feed_Synchronization-{8B9D2BC8-DA69-41EB-9FB6-8E4556A899E7}.job

=========Mozilla firefox=========

ProfilePath - E:\Documents and Settings\Uz\Application Data\Mozilla\Firefox\Profiles\7lwh4jeq.default

prefs.js - "browser.startup.homepage" - "http://www.google.sk/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, jqs@sun.com:1.0, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {20a82645-c095-46ed-80e3-08825760534b}:0.0.0, {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26, {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.8, {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.27"

"{20a82645-c095-46ed-80e3-08825760534b}"=E:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=E:\Program Files\Java\jre6\lib\deploy\jqs\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=E:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf]
"Description"=
"Path"=E:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=E:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=E:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=E:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

E:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}

E:\Program Files\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsINIProcessor.js
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

E:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
npnul32.dll
NPOFF12.DLL

E:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
fcmdSrch.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml

E:\Documents and Settings\Uz\Application Data\Mozilla\Firefox\Profiles\7lwh4jeq.default\extensions\
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

E:\Documents and Settings\Uz\Application Data\Mozilla\Firefox\Profiles\7lwh4jeq.default\searchplugins\
sfd.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - E:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - E:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-18 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{DB4E9724-F518-4dfd-9C7C-78B52103CAB9}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 98304]
"Six Engine"=E:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe [2010-02-03 5756544]
"BCU"=E:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe [2010-03-05 411864]
"HDAudDeck"=E:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2010-01-18 33714176]
"Control Center"=E:\Program Files\ASUS\WLAN Card Utilities\Center.exe [2006-08-15 1696256]
"GrooveMonitor"=E:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"RemoteControl10"=E:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe [2010-02-03 87336]
"BDRegion"=E:\Program Files\Cyberlink\Shared files\brs.exe [2010-06-28 75048]
"SunJavaUpdateSched"=E:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"Rvsystem"=E:\Program files\Returnil\Returnil.exe [2011-12-27 2304000]
"avgnt"=E:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2011-04-21 281768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=E:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"uTorrent"=E:\Documents and Settings\Uz\Desktop\utorrent.exe [2012-02-18 740216]
"Google Update"=E:\Documents and Settings\Uz\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-01-24 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USDownloader]
E:\USDownloader\USDownloader.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\E:^Documents and Settings^Uz^Start Menu^Programs^Startup^Orezávač obrazovky a spúšťač programu OneNote 2007.lnk]
E:\PROGRA~1\MICROS~2\Office12\ONENOTEM.EXE [2009-02-26 97680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
E:\WINDOWS\system32\Ati2evxx.dll [2010-02-11 159744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - E:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=E:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"E:\Documents and Settings\Uz\Desktop\utorrent.exe"="E:\Documents and Settings\Uz\Desktop\utorrent.exe:*:Enabled:µTorrent"
"E:\Program Files\Skype\Plugin Manager\skypePM.exe"="E:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"E:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="E:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"E:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="E:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"E:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="E:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"E:\Program Files\ASUS\WLAN Card Utilities\Center.exe"="E:\Program Files\ASUS\WLAN Card Utilities\Center.exe:*:Enabled:ASUS WLAN Control Center"
"E:\Program Files\Ashampoo\Ashampoo Burning Studio 6 FREE\burningstudio.exe"="E:\Program Files\Ashampoo\Ashampoo Burning Studio 6 FREE\burningstudio.exe:*:Enabled:Ashampoo Burning Studio 6 FREE"
"E:\Program Files\Java\jre6\bin\javaw.exe"="E:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"E:\totalcmd\TOTALCMD.EXE"="E:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"E:\Program Files\Skype\Phone\Skype.exe"="E:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"E:\Program Files\Java\jre6\bin\java.exe"="E:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"E:\Program Files\Mozilla Firefox\firefox.exe"="E:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Mozilla Firefox"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=E:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=E:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-02-19 13:54:09 ----D---- E:\rsit
2012-02-19 13:54:09 ----D---- E:\Program Files\trend micro
2012-02-18 05:21:25 ----HDC---- E:\WINDOWS\$NtUninstallKB2660465$
2012-02-18 05:19:55 ----HDC---- E:\WINDOWS\$NtUninstallKB2661637$
2012-02-17 19:53:47 ----D---- E:\Documents and Settings\Uz\Application Data\Avira
2012-02-17 17:38:57 ----A---- E:\WINDOWS\system32\drivers\ssmdrv.sys
2012-02-17 17:38:55 ----D---- E:\Program Files\Avira
2012-02-17 17:38:55 ----D---- E:\Documents and Settings\All Users\Application Data\Avira
2012-02-17 17:38:55 ----A---- E:\WINDOWS\system32\drivers\avipbb.sys
2012-02-17 17:38:55 ----A---- E:\WINDOWS\system32\drivers\avgntmgr.sys
2012-02-17 17:38:55 ----A---- E:\WINDOWS\system32\drivers\avgntflt.sys
2012-02-17 17:38:55 ----A---- E:\WINDOWS\system32\drivers\avgntdd.sys
2012-02-15 22:45:17 ----N---- E:\WINDOWS\system32\iacenc.dll
2012-02-10 14:00:45 ----SHD---- E:\found.003

======List of files/folders modified in the last 1 month======

2012-02-19 13:54:09 ----RD---- E:\Program Files
2012-02-19 13:54:07 ----D---- E:\WINDOWS\Prefetch
2012-02-19 13:53:49 ----D---- E:\Documents and Settings\Uz\Application Data\uTorrent
2012-02-19 11:42:17 ----D---- E:\Torrenty
2012-02-19 11:06:24 ----D---- E:\WINDOWS\system32
2012-02-19 11:06:24 ----A---- E:\WINDOWS\system32\PerfStringBackup.INI
2012-02-19 11:02:52 ----D---- E:\WINDOWS\Temp
2012-02-19 11:02:47 ----D---- E:\WINDOWS\system32\CatRoot2
2012-02-19 11:02:30 ----D---- E:\Program Files\uTorrent
2012-02-19 03:23:23 ----A---- E:\WINDOWS\SchedLgU.Txt
2012-02-18 18:38:41 ----A---- E:\ASWL2K.ini
2012-02-18 16:47:49 ----D---- E:\WINDOWS\Microsoft.NET
2012-02-18 16:47:47 ----RSD---- E:\WINDOWS\assembly
2012-02-18 16:06:00 ----D---- E:\Program Files\Mozilla Firefox
2012-02-18 16:03:56 ----D---- E:\WINDOWS
2012-02-18 16:03:32 ----D---- E:\Program Files\Microsoft Silverlight
2012-02-18 05:24:27 ----SHD---- E:\WINDOWS\Installer
2012-02-18 05:24:27 ----D---- E:\Config.Msi
2012-02-18 05:24:00 ----D---- E:\WINDOWS\WinSxS
2012-02-18 05:21:31 ----A---- E:\WINDOWS\system32\MRT.exe
2012-02-18 05:21:28 ----HD---- E:\WINDOWS\inf
2012-02-18 05:21:27 ----RSHDC---- E:\WINDOWS\system32\dllcache
2012-02-18 05:21:24 ----A---- E:\WINDOWS\imsins.BAK
2012-02-18 05:21:20 ----D---- E:\Program Files\Internet Explorer
2012-02-18 05:21:12 ----D---- E:\WINDOWS\ie8updates
2012-02-18 05:21:06 ----D---- E:\WINDOWS\$hf_mig$
2012-02-18 05:20:32 ----D---- E:\Documents and Settings\All Users\Application Data\Microsoft Help
2012-02-18 04:19:00 ----SD---- E:\WINDOWS\Downloaded Program Files
2012-02-18 00:29:45 ----D---- E:\Program Files\JDownloader
2012-02-17 17:38:57 ----D---- E:\WINDOWS\system32\drivers
2012-02-16 03:57:32 ----D---- E:\WINDOWS\security
2012-02-15 21:39:19 ----D---- E:\WINDOWS\Debug
2012-02-12 00:14:02 ----D---- E:\WINDOWS\network diagnostic
2012-02-04 02:19:48 ----D---- E:\Documents and Settings\Uz\Application Data\Skype
2012-01-24 18:30:23 ----SD---- E:\WINDOWS\Tasks

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 RVFsSec;RVFsSec; E:\WINDOWS\system32\Drivers\RVFsSec.sys [2011-12-27 22272]
R0 RVSystem;RVSystem; E:\WINDOWS\system32\Drivers\RVSystem.sys [2011-12-27 39424]
R0 sptd;sptd; E:\WINDOWS\System32\Drivers\sptd.sys [2011-07-28 691696]
R1 AmdPPM;AMD HwPState Processor Driver; E:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 AsIO;AsIO; E:\WINDOWS\system32\drivers\AsIO.sys [2009-08-04 11296]
R1 avgio;avgio; \??\E:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; E:\WINDOWS\system32\DRIVERS\avipbb.sys [2012-02-17 138192]
R1 ssmdrv;ssmdrv; E:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; E:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2011/01/31 21:54:30]; \??\E:\Program Files\CyberLink\PowerDVD10\NavFilter\000.fcl []
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.3.0; E:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-12-20 20747]
R2 avgntflt;avgntflt; E:\WINDOWS\system32\DRIVERS\avgntflt.sys [2012-02-17 66616]
R3 ASNDIS5;ASNDIS5 Protocol Driver; \??\E:\WINDOWS\system32\ASNDIS5.SYS []
R3 ati2mtag;ati2mtag; E:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-11 4614144]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; E:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; E:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Mouse HID Driver; E:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; E:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; E:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2010-03-08 220112]
R3 usbprint;Microsoft USB PRINTER Class; E:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; E:\WINDOWS\system32\drivers\viahduaa.sys [2010-01-11 2106880]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\E:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 RT73;ASUS USB Wireless LAN Card Driver; E:\WINDOWS\system32\DRIVERS\rt73.sys [2006-06-08 344064]
S3 tunmp;Microsoft Tun Miniport Adapter Driver; E:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
S3 USBSTOR;USB Mass Storage Driver; E:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S4 WS2IFSL;Prostredie podpory poskytovateľa služby Windows Socket 2.0 Non-IFS Service; E:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-08-23 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira AntiVir Guard; E:\Program Files\Avira\AntiVir Desktop\avguard.exe [2012-02-17 269480]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; E:\Program Files\Avira\AntiVir Desktop\sched.exe [2011-04-21 136360]
R2 Ati HotKey Poller;Ati HotKey Poller; E:\WINDOWS\system32\Ati2evxx.exe [2010-02-11 602112]
R2 BCUService;Browser Configuration Utility Service; E:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe [2010-03-05 235752]
R2 JavaQuickStarterService;Java Quick Starter; E:\Program Files\Java\jre6\bin\jqs.exe [2011-10-03 153376]
S2 ASWLSVC;ASWLSVC; E:\WINDOWS\system32\ASWLSVC.exe [2004-05-06 496640]
S3 aspnet_state;ASP.NET State Service; E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; E:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; E:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; E:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; E:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; E:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; E:\Program Files\Windows Media Player\wmpnetwk.exe [2006-10-18 913408]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; E:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Avira ukončená, Skype, utorrent aj JDownloader takisto.
Ako mám skontrolovať DNS?

Zmenil som na DNS automaticky.

Teraz mi prehliadanie stranok funguje, ale môj problém je takýto, že niekedy je to v poriadku, ale často sa stránky načítavajú veľmi pomaly, alebo vôbec. Musím niekedy aj 20x načítavať stránku kým sa načíta. DNS som zmenil na radu jedného užívateľa na 8.8.8.8, či to náhodou nepomôže. Ale nepomohlo to. Predtým som mal DNS na automaticky.

---

ComboFix 12-02-17.02 - Uz 19.02.2012 15:30:21.1.3 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.421.1033.18.3326.2353 [GMT 1:00]
Running from: e:\documents and settings\Uz\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
e:\documents and settings\All Users\Application Data\TEMP
e:\documents and settings\All Users\Application Data\TEMP\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}\PostBuild.exe
e:\windows\pkunzip.pif
e:\windows\pkzip.pif
e:\windows\system32\drivers\tcpip.copy
.
.
((((((((((((((((((((((((( Files Created from 2012-01-19 to 2012-02-19 )))))))))))))))))))))))))))))))
.
.
2012-02-19 12:54 . 2012-02-19 12:54 -------- d-----w- E:\rsit
2012-02-19 12:54 . 2012-02-19 12:54 -------- d-----w- e:\program files\trend micro
2012-02-17 18:53 . 2012-02-17 18:53 -------- d-----w- e:\documents and settings\Uz\Application Data\Avira
2012-02-17 16:38 . 2012-02-17 19:06 66616 ----a-w- e:\windows\system32\drivers\avgntflt.sys
2012-02-17 16:38 . 2012-02-17 19:06 138192 ----a-w- e:\windows\system32\drivers\avipbb.sys
2012-02-17 16:38 . 2012-02-17 16:38 -------- d-----w- e:\program files\Avira
2012-02-17 16:38 . 2012-02-17 16:38 -------- d-----w- e:\documents and settings\All Users\Application Data\Avira
2012-02-17 16:38 . 2010-06-17 14:27 45416 ----a-w- e:\windows\system32\drivers\avgntdd.sys
2012-02-17 16:38 . 2010-06-17 14:27 22360 ----a-w- e:\windows\system32\drivers\avgntmgr.sys
2012-02-15 21:45 . 2012-01-11 19:06 3072 -c----w- e:\windows\system32\dllcache\iacenc.dll
2012-02-15 21:45 . 2012-01-11 19:06 3072 ------w- e:\windows\system32\iacenc.dll
2012-02-10 13:00 . 2012-02-10 13:00 -------- d-----w- E:\found.003
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-02-18 03:18 . 2011-07-24 08:30 414368 ----a-w- e:\windows\system32\FlashPlayerCPLApp.cpl
2012-01-12 16:53 . 2004-08-03 21:17 1859968 ----a-w- e:\windows\system32\win32k.sys
2011-12-27 15:57 . 2011-12-27 15:57 22272 ----a-w- e:\windows\system32\drivers\RVFsSec.sys
2011-12-27 15:57 . 2011-12-27 15:57 39424 ----a-w- e:\windows\system32\drivers\RVSystem.sys
2011-12-17 19:46 . 2004-08-03 22:56 1469440 ------w- e:\windows\system32\inetcpl.cpl
2011-12-17 19:46 . 2004-08-03 22:56 916992 ----a-w- e:\windows\system32\wininet.dll
2011-12-17 19:46 . 2004-08-03 22:56 43520 ------w- e:\windows\system32\licmgr10.dll
2011-12-16 12:22 . 2004-08-03 20:59 385024 ------w- e:\windows\system32\html.iec
2011-11-25 21:57 . 2004-08-03 22:56 293376 ----a-w- e:\windows\system32\winsrv.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="e:\documents and settings\Uz\Desktop\utorrent.exe" [2012-02-18 740216]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="e:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-10 98304]
"Six Engine"="e:\program files\ASUS\EPU-4 Engine\FourEngine.exe" [2010-02-03 5756544]
"BCU"="e:\program files\DeviceVM\Browser Configuration Utility\BCU.exe" [2010-03-05 411864]
"HDAudDeck"="e:\program files\VIA\VIAudioi\HDADeck\HDeck.exe" [2010-01-18 33714176]
"Control Center"="e:\program files\ASUS\WLAN Card Utilities\Center.exe" [2006-08-15 1696256]
"GrooveMonitor"="e:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"RemoteControl10"="e:\program files\CyberLink\PowerDVD10\PDVD10Serv.exe" [2010-02-02 87336]
"BDRegion"="e:\program files\Cyberlink\Shared files\brs.exe" [2010-06-28 75048]
"SunJavaUpdateSched"="e:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"Rvsystem"="e:\program files\Returnil\Returnil.exe" [2011-12-27 2304000]
"avgnt"="e:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-04-21 281768]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="e:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKLM\~\startupfolder\E:^Documents and Settings^Uz^Start Menu^Programs^Startup^Orezávač obrazovky a spúšťač programu OneNote 2007.lnk]
path=e:\documents and settings\Uz\Start Menu\Programs\Startup\Orezávač obrazovky a spúšťač programu OneNote 2007.lnk
backup=e:\windows\pss\Orezávač obrazovky a spúšťač programu OneNote 2007.lnkStartup
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"e:\\Documents and Settings\\Uz\\Desktop\\utorrent.exe"=
"e:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"e:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"e:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"e:\\Program Files\\ASUS\\WLAN Card Utilities\\Center.exe"=
"e:\\Program Files\\Ashampoo\\Ashampoo Burning Studio 6 FREE\\burningstudio.exe"=
"e:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"e:\\totalcmd\\TOTALCMD.EXE"=
"e:\\Program Files\\Skype\\Phone\\Skype.exe"=
"e:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"e:\\Program Files\\Mozilla Firefox\\firefox.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)
.
R0 RVFsSec;RVFsSec;e:\windows\system32\drivers\RVFsSec.sys [27.12.2011 16:57 22272]
R0 RVSystem;RVSystem;e:\windows\system32\drivers\RVSystem.sys [27.12.2011 16:57 39424]
R0 sptd;sptd;e:\windows\system32\drivers\sptd.sys [28.7.2011 19:07 691696]
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2011/01/31 21:54];e:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl [28.6.2010 22:50 87536]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;e:\program files\Avira\AntiVir Desktop\sched.exe [17.2.2012 17:38 136360]
R2 BCUService;Browser Configuration Utility Service;e:\program files\DeviceVM\Browser Configuration Utility\BCUService.exe [5.3.2010 10:15 235752]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;e:\windows\system32\drivers\viahduaa.sys [17.12.2010 11:55 2106880]
S3 MBAMSwissArmy;MBAMSwissArmy;\??\e:\windows\system32\drivers\mbamswissarmy.sys --> e:\windows\system32\drivers\mbamswissarmy.sys [?]
.
Contents of the 'Scheduled Tasks' folder
.
2012-02-19 e:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-329068152-73586283-839522115-1003Core.job
- e:\documents and settings\Uz\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-01-24 17:30]
.
2012-02-19 e:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-329068152-73586283-839522115-1003UA.job
- e:\documents and settings\Uz\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-01-24 17:30]
.
2012-02-19 e:\windows\Tasks\User_Feed_Synchronization-{8B9D2BC8-DA69-41EB-9FB6-8E4556A899E7}.job
- e:\windows\system32\msfeedssync.exe [2011-01-11 03:31]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.christ-net.sk/
IE: E&xportovať do programu Microsoft Excel - e:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.5.18.5 10.5.18.2 195.80.171.4
FF - ProfilePath - e:\documents and settings\Uz\Application Data\Mozilla\Firefox\Profiles\7lwh4jeq.default\
FF - prefs.js: browser.search.selectedEngine - ÄŚSFD
FF - prefs.js: browser.startup.homepage - hxxp://www.google.sk/
FF - prefs.js: network.proxy.type - 0
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - e:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - e:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - e:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - e:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - e:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - e:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - e:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - e:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
.
- - - - ORPHANS REMOVED - - - -
.
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
MSConfigStartUp-USDownloader - e:\usdownloader\USDownloader.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-02-19 15:33
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HDAudDeck = e:\program files\VIA\VIAudioi\HDADeck\HDeck.exe 1????????????????????????????????????????????????
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}]
"ImagePath"="\??\e:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(704)
e:\windows\system32\Ati2evxx.dll
e:\windows\system32\atiadlxx.dll
.
Completion time: 2012-02-19 15:34:42
ComboFix-quarantined-files.txt 2012-02-19 14:34
.
Pre-Run: 44 645 969 920 bytes free
Post-Run: 45 641 609 216 bytes free
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 359DCABB49869ED46562AE5ABC16A54C

15:36:01.0625 3008 TDSS rootkit removing tool 2.7.13.0 Feb 15 2012 19:33:14
15:36:01.0718 3008 ============================================================
15:36:01.0718 3008 Current date / time: 2012/02/19 15:36:01.0718
15:36:01.0718 3008 SystemInfo:
15:36:01.0718 3008
15:36:01.0718 3008 OS Version: 5.1.2600 ServicePack: 3.0
15:36:01.0718 3008 Product type: Workstation
15:36:01.0718 3008 ComputerName: UZ-8FBC9A02F4E4
15:36:01.0718 3008 UserName: Uz
15:36:01.0718 3008 Windows directory: E:\WINDOWS
15:36:01.0718 3008 System windows directory: E:\WINDOWS
15:36:01.0718 3008 Processor architecture: Intel x86
15:36:01.0718 3008 Number of processors: 3
15:36:01.0718 3008 Page size: 0x1000
15:36:01.0718 3008 Boot type: Normal boot
15:36:01.0718 3008 ============================================================
15:36:02.0812 3008 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
15:36:02.0812 3008 Drive \Device\Harddisk1\DR1 - Size: 0x15D50F66000 (1397.27 Gb), SectorSize: 0x200, Cylinders: 0x2C881, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
15:36:02.0812 3008 Drive \Device\Harddisk2\DR2 - Size: 0x1D1C1116000 (1863.02 Gb), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
15:36:02.0812 3008 \Device\Harddisk0\DR0:
15:36:02.0812 3008 MBR used
15:36:02.0812 3008 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x9C41AD8
15:36:02.0812 3008 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x9C41B17, BlocksNum 0x3074312A
15:36:02.0812 3008 \Device\Harddisk1\DR1:
15:36:02.0812 3008 MBR used
15:36:02.0812 3008 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x6DDD066F
15:36:02.0812 3008 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x6DDD06AE, BlocksNum 0x40CB6093
15:36:02.0812 3008 \Device\Harddisk2\DR2:
15:36:02.0812 3008 MBR used
15:36:02.0812 3008 \Device\Harddisk2\DR2\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x9FA284F9
15:36:02.0812 3008 \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x9FA28538, BlocksNum 0x493DEF89
15:36:03.0437 3008 Initialize success
15:36:03.0437 3008 ============================================================
15:36:27.0375 2492 ============================================================
15:36:27.0375 2492 Scan started
15:36:27.0375 2492 Mode: Manual; SigCheck; TDLFS;
15:36:27.0375 2492 ============================================================
15:36:28.0265 2492 Abiosdsk - ok
15:36:28.0281 2492 abp480n5 - ok
15:36:28.0312 2492 ACPI (8fd99680a539792a30e97944fdaecf17) E:\WINDOWS\system32\DRIVERS\ACPI.sys
15:36:28.0484 2492 ACPI - ok
15:36:28.0500 2492 ACPIEC (9859c0f6936e723e4892d7141b1327d5) E:\WINDOWS\system32\drivers\ACPIEC.sys
15:36:28.0578 2492 ACPIEC - ok
15:36:28.0578 2492 adpu160m - ok
15:36:28.0625 2492 aec (8bed39e3c35d6a489438b8141717a557) E:\WINDOWS\system32\drivers\aec.sys
15:36:28.0703 2492 aec - ok
15:36:28.0718 2492 AegisP (2f7f3e8da380325866e566f5d5ec23d5) E:\WINDOWS\system32\DRIVERS\AegisP.sys
15:36:28.0734 2492 AegisP ( UnsignedFile.Multi.Generic ) - warning
15:36:28.0734 2492 AegisP - detected UnsignedFile.Multi.Generic (1)
15:36:28.0765 2492 AFD (1e44bc1e83d8fd2305f8d452db109cf9) E:\WINDOWS\System32\drivers\afd.sys
15:36:28.0781 2492 AFD - ok
15:36:28.0796 2492 Aha154x - ok
15:36:28.0796 2492 aic78u2 - ok
15:36:28.0812 2492 aic78xx - ok
15:36:28.0812 2492 AliIde - ok
15:36:28.0843 2492 AmdPPM (033448d435e65c4bd72e70521fd05c76) E:\WINDOWS\system32\DRIVERS\AmdPPM.sys
15:36:28.0875 2492 AmdPPM - ok
15:36:28.0875 2492 amsint - ok
15:36:28.0890 2492 asc - ok
15:36:28.0906 2492 asc3350p - ok
15:36:28.0906 2492 asc3550 - ok
15:36:28.0921 2492 AsIO (9d8cb58b9a9e177ddd599791a58a654d) E:\WINDOWS\system32\drivers\AsIO.sys
15:36:28.0937 2492 AsIO - ok
15:36:28.0968 2492 ASNDIS5 (05a56c3156e1b6cc7bbd8e1d54d491f2) E:\WINDOWS\system32\ASNDIS5.SYS
15:36:28.0968 2492 ASNDIS5 ( UnsignedFile.Multi.Generic ) - warning
15:36:28.0968 2492 ASNDIS5 - detected UnsignedFile.Multi.Generic (1)
15:36:28.0984 2492 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) E:\WINDOWS\system32\DRIVERS\asyncmac.sys
15:36:29.0062 2492 AsyncMac - ok
15:36:29.0078 2492 atapi (9f3a2f5aa6875c72bf062c712cfa2674) E:\WINDOWS\system32\DRIVERS\atapi.sys
15:36:29.0140 2492 atapi - ok
15:36:29.0140 2492 Atdisk - ok
15:36:29.0234 2492 ati2mtag (c3718c928e75ee9d19c4947d186fefac) E:\WINDOWS\system32\DRIVERS\ati2mtag.sys
15:36:29.0359 2492 ati2mtag - ok
15:36:29.0390 2492 Atmarpc (9916c1225104ba14794209cfa8012159) E:\WINDOWS\system32\DRIVERS\atmarpc.sys
15:36:29.0468 2492 Atmarpc - ok
15:36:29.0484 2492 audstub (d9f724aa26c010a217c97606b160ed68) E:\WINDOWS\system32\DRIVERS\audstub.sys
15:36:29.0578 2492 audstub - ok
15:36:29.0640 2492 avgio (0b497c79824f8e1bf22fa6aacd3de3a0) E:\Program Files\Avira\AntiVir Desktop\avgio.sys
15:36:29.0656 2492 avgio - ok
15:36:29.0656 2492 avgntflt (1e4114685de1ffa9675e09c6a1fb3f4b) E:\WINDOWS\system32\DRIVERS\avgntflt.sys
15:36:29.0671 2492 avgntflt - ok
15:36:29.0687 2492 avipbb (0f78d3dae6dedd99ae54c9491c62adf2) E:\WINDOWS\system32\DRIVERS\avipbb.sys
15:36:29.0687 2492 avipbb - ok
15:36:29.0734 2492 Beep (da1f27d85e0d1525f6621372e7b685e9) E:\WINDOWS\system32\drivers\Beep.sys
15:36:29.0812 2492 Beep - ok
15:36:29.0843 2492 catchme - ok
15:36:29.0875 2492 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) E:\WINDOWS\system32\drivers\cbidf2k.sys
15:36:29.0968 2492 cbidf2k - ok
15:36:29.0968 2492 cd20xrnt - ok
15:36:29.0968 2492 Cdaudio (c1b486a7658353d33a10cc15211a873b) E:\WINDOWS\system32\drivers\Cdaudio.sys
15:36:30.0062 2492 Cdaudio - ok
15:36:30.0078 2492 Cdfs (c885b02847f5d2fd45a24e219ed93b32) E:\WINDOWS\system32\drivers\Cdfs.sys
15:36:30.0140 2492 Cdfs - ok
15:36:30.0156 2492 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) E:\WINDOWS\system32\DRIVERS\cdrom.sys
15:36:30.0218 2492 Cdrom - ok
15:36:30.0234 2492 Changer - ok
15:36:30.0234 2492 CmdIde - ok
15:36:30.0250 2492 Cpqarray - ok
15:36:30.0250 2492 dac2w2k - ok
15:36:30.0265 2492 dac960nt - ok
15:36:30.0265 2492 Disk (044452051f3e02e7963599fc8f4f3e25) E:\WINDOWS\system32\DRIVERS\disk.sys
15:36:30.0328 2492 Disk - ok
15:36:30.0359 2492 dmboot (d992fe1274bde0f84ad826acae022a41) E:\WINDOWS\system32\drivers\dmboot.sys
15:36:30.0437 2492 dmboot - ok
15:36:30.0437 2492 dmio (7c824cf7bbde77d95c08005717a95f6f) E:\WINDOWS\system32\drivers\dmio.sys
15:36:30.0515 2492 dmio - ok
15:36:30.0515 2492 dmload (e9317282a63ca4d188c0df5e09c6ac5f) E:\WINDOWS\system32\drivers\dmload.sys
15:36:30.0593 2492 dmload - ok
15:36:30.0609 2492 DMusic (8a208dfcf89792a484e76c40e5f50b45) E:\WINDOWS\system32\drivers\DMusic.sys
15:36:30.0687 2492 DMusic - ok
15:36:30.0687 2492 dpti2o - ok
15:36:30.0703 2492 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) E:\WINDOWS\system32\drivers\drmkaud.sys
15:36:30.0765 2492 drmkaud - ok
15:36:30.0781 2492 Fastfat (38d332a6d56af32635675f132548343e) E:\WINDOWS\system32\drivers\Fastfat.sys
15:36:30.0859 2492 Fastfat - ok
15:36:30.0859 2492 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) E:\WINDOWS\system32\drivers\Fdc.sys
15:36:30.0937 2492 Fdc - ok
15:36:30.0953 2492 Fips (d45926117eb9fa946a6af572fbe1caa3) E:\WINDOWS\system32\drivers\Fips.sys
15:36:31.0015 2492 Fips - ok
15:36:31.0015 2492 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) E:\WINDOWS\system32\drivers\Flpydisk.sys
15:36:31.0093 2492 Flpydisk - ok
15:36:31.0109 2492 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) E:\WINDOWS\system32\drivers\fltmgr.sys
15:36:31.0171 2492 FltMgr - ok
15:36:31.0171 2492 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) E:\WINDOWS\system32\drivers\Fs_Rec.sys
15:36:31.0250 2492 Fs_Rec - ok
15:36:31.0265 2492 Ftdisk (6ac26732762483366c3969c9e4d2259d) E:\WINDOWS\system32\DRIVERS\ftdisk.sys
15:36:31.0359 2492 Ftdisk - ok
15:36:31.0375 2492 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) E:\WINDOWS\system32\DRIVERS\msgpc.sys
15:36:31.0437 2492 Gpc - ok
15:36:31.0453 2492 HDAudBus (573c7d0a32852b48f3058cfd8026f511) E:\WINDOWS\system32\DRIVERS\HDAudBus.sys
15:36:31.0515 2492 HDAudBus - ok
15:36:31.0515 2492 hidusb (ccf82c5ec8a7326c3066de870c06daf1) E:\WINDOWS\system32\DRIVERS\hidusb.sys
15:36:31.0578 2492 hidusb - ok
15:36:31.0593 2492 hpn - ok
15:36:31.0609 2492 HTTP (f80a415ef82cd06ffaf0d971528ead38) E:\WINDOWS\system32\Drivers\HTTP.sys
15:36:31.0921 2492 HTTP ( UnsignedFile.Multi.Generic ) - warning
15:36:31.0921 2492 HTTP - detected UnsignedFile.Multi.Generic (1)
15:36:31.0937 2492 i2omgmt - ok
15:36:31.0937 2492 i2omp - ok
15:36:31.0953 2492 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) E:\WINDOWS\system32\DRIVERS\i8042prt.sys
15:36:32.0015 2492 i8042prt - ok
15:36:32.0031 2492 Imapi (083a052659f5310dd8b6a6cb05edcf8e) E:\WINDOWS\system32\DRIVERS\imapi.sys
15:36:32.0093 2492 Imapi - ok
15:36:32.0093 2492 ini910u - ok
15:36:32.0109 2492 IntelIde - ok
15:36:32.0125 2492 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) E:\WINDOWS\system32\drivers\ip6fw.sys
15:36:32.0187 2492 Ip6Fw - ok
15:36:32.0187 2492 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) E:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
15:36:32.0265 2492 IpFilterDriver - ok
15:36:32.0265 2492 IpInIp (b87ab476dcf76e72010632b5550955f5) E:\WINDOWS\system32\DRIVERS\ipinip.sys
15:36:32.0328 2492 IpInIp - ok
15:36:32.0359 2492 IpNat (cc748ea12c6effde940ee98098bf96bb) E:\WINDOWS\system32\DRIVERS\ipnat.sys
15:36:32.0421 2492 IpNat - ok
15:36:32.0437 2492 IPSec (23c74d75e36e7158768dd63d92789a91) E:\WINDOWS\system32\DRIVERS\ipsec.sys
15:36:32.0484 2492 IPSec - ok
15:36:32.0500 2492 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) E:\WINDOWS\system32\DRIVERS\irenum.sys
15:36:32.0562 2492 IRENUM - ok
15:36:32.0562 2492 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) E:\WINDOWS\system32\DRIVERS\isapnp.sys
15:36:32.0625 2492 isapnp - ok
15:36:32.0640 2492 Kbdclass (463c1ec80cd17420a542b7f36a36f128) E:\WINDOWS\system32\DRIVERS\kbdclass.sys
15:36:32.0703 2492 Kbdclass - ok
15:36:32.0718 2492 kmixer (692bcf44383d056aed41b045a323d378) E:\WINDOWS\system32\drivers\kmixer.sys
15:36:32.0781 2492 kmixer - ok
15:36:32.0796 2492 KSecDD (b467646c54cc746128904e1654c750c1) E:\WINDOWS\system32\drivers\KSecDD.sys
15:36:32.0828 2492 KSecDD - ok
15:36:32.0828 2492 lbrtfdc - ok
15:36:32.0843 2492 MBAMSwissArmy - ok
15:36:32.0859 2492 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) E:\WINDOWS\system32\drivers\mnmdd.sys
15:36:32.0937 2492 mnmdd - ok
15:36:32.0937 2492 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) E:\WINDOWS\system32\drivers\Modem.sys
15:36:33.0000 2492 Modem - ok
15:36:33.0015 2492 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) E:\WINDOWS\system32\DRIVERS\mouclass.sys
15:36:33.0093 2492 Mouclass - ok
15:36:33.0093 2492 mouhid (b1c303e17fb9d46e87a98e4ba6769685) E:\WINDOWS\system32\DRIVERS\mouhid.sys
15:36:33.0171 2492 mouhid - ok
15:36:33.0171 2492 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) E:\WINDOWS\system32\drivers\MountMgr.sys
15:36:33.0234 2492 MountMgr - ok
15:36:33.0234 2492 mraid35x - ok
15:36:33.0250 2492 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) E:\WINDOWS\system32\DRIVERS\mrxdav.sys
15:36:33.0312 2492 MRxDAV - ok
15:36:33.0343 2492 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) E:\WINDOWS\system32\DRIVERS\mrxsmb.sys
15:36:33.0390 2492 MRxSmb - ok
15:36:33.0390 2492 Msfs (c941ea2454ba8350021d774daf0f1027) E:\WINDOWS\system32\drivers\Msfs.sys
15:36:33.0453 2492 Msfs - ok
15:36:33.0468 2492 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) E:\WINDOWS\system32\drivers\MSKSSRV.sys
15:36:33.0531 2492 MSKSSRV - ok
15:36:33.0531 2492 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) E:\WINDOWS\system32\drivers\MSPCLOCK.sys
15:36:33.0593 2492 MSPCLOCK - ok
15:36:33.0609 2492 MSPQM (bad59648ba099da4a17680b39730cb3d) E:\WINDOWS\system32\drivers\MSPQM.sys
15:36:33.0687 2492 MSPQM - ok
15:36:33.0687 2492 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) E:\WINDOWS\system32\DRIVERS\mssmbios.sys
15:36:33.0750 2492 mssmbios - ok
15:36:33.0765 2492 MTsensor (d48659bb24c48345d926ecb45c1ebdf5) E:\WINDOWS\system32\DRIVERS\ASACPI.sys
15:36:33.0796 2492 MTsensor - ok
15:36:33.0812 2492 Mup (de6a75f5c270e756c5508d94b6cf68f5) E:\WINDOWS\system32\drivers\Mup.sys
15:36:33.0812 2492 Mup - ok
15:36:33.0828 2492 NDIS (1df7f42665c94b825322fae71721130d) E:\WINDOWS\system32\drivers\NDIS.sys
15:36:33.0906 2492 NDIS - ok
15:36:33.0921 2492 NdisTapi (0109c4f3850dfbab279542515386ae22) E:\WINDOWS\system32\DRIVERS\ndistapi.sys
15:36:33.0937 2492 NdisTapi - ok
15:36:33.0953 2492 Ndisuio (f927a4434c5028758a842943ef1a3849) E:\WINDOWS\system32\DRIVERS\ndisuio.sys
15:36:34.0015 2492 Ndisuio - ok
15:36:34.0046 2492 NdisWan (edc1531a49c80614b2cfda43ca8659ab) E:\WINDOWS\system32\DRIVERS\ndiswan.sys
15:36:34.0109 2492 NdisWan - ok
15:36:34.0140 2492 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) E:\WINDOWS\system32\drivers\NDProxy.sys
15:36:34.0156 2492 NDProxy - ok
15:36:34.0156 2492 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) E:\WINDOWS\system32\DRIVERS\netbios.sys
15:36:34.0234 2492 NetBIOS - ok
15:36:34.0265 2492 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) E:\WINDOWS\system32\DRIVERS\netbt.sys
15:36:34.0328 2492 NetBT - ok
15:36:34.0343 2492 Npfs (3182d64ae053d6fb034f44b6def8034a) E:\WINDOWS\system32\drivers\Npfs.sys
15:36:34.0421 2492 Npfs - ok
15:36:34.0437 2492 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) E:\WINDOWS\system32\drivers\Ntfs.sys
15:36:34.0531 2492 Ntfs - ok
15:36:34.0546 2492 Null (73c1e1f395918bc2c6dd67af7591a3ad) E:\WINDOWS\system32\drivers\Null.sys
15:36:34.0625 2492 Null - ok
15:36:34.0640 2492 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) E:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
15:36:34.0718 2492 NwlnkFlt - ok
15:36:34.0718 2492 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) E:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
15:36:34.0812 2492 NwlnkFwd - ok
15:36:34.0828 2492 Parport (5575faf8f97ce5e713d108c2a58d7c7c) E:\WINDOWS\system32\DRIVERS\parport.sys
15:36:34.0890 2492 Parport - ok
15:36:34.0890 2492 PartMgr (beb3ba25197665d82ec7065b724171c6) E:\WINDOWS\system32\drivers\PartMgr.sys
15:36:34.0953 2492 PartMgr - ok
15:36:34.0968 2492 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) E:\WINDOWS\system32\drivers\ParVdm.sys
15:36:35.0046 2492 ParVdm - ok
15:36:35.0062 2492 PCI (a219903ccf74233761d92bef471a07b1) E:\WINDOWS\system32\DRIVERS\pci.sys
15:36:35.0125 2492 PCI - ok
15:36:35.0125 2492 PCIDump - ok
15:36:35.0156 2492 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) E:\WINDOWS\system32\DRIVERS\pciide.sys
15:36:35.0234 2492 PCIIde - ok
15:36:35.0250 2492 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) E:\WINDOWS\system32\drivers\Pcmcia.sys
15:36:35.0312 2492 Pcmcia - ok
15:36:35.0312 2492 PDCOMP - ok
15:36:35.0328 2492 PDFRAME - ok
15:36:35.0328 2492 PDRELI - ok
15:36:35.0328 2492 PDRFRAME - ok
15:36:35.0343 2492 perc2 - ok
15:36:35.0343 2492 perc2hib - ok
15:36:35.0359 2492 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) E:\WINDOWS\system32\DRIVERS\raspptp.sys
15:36:35.0421 2492 PptpMiniport - ok
15:36:35.0421 2492 Processor (a32bebaf723557681bfc6bd93e98bd26) E:\WINDOWS\system32\DRIVERS\processr.sys
15:36:35.0500 2492 Processor - ok
15:36:35.0515 2492 PSched (09298ec810b07e5d582cb3a3f9255424) E:\WINDOWS\system32\DRIVERS\psched.sys
15:36:35.0578 2492 PSched - ok
15:36:35.0593 2492 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) E:\WINDOWS\system32\DRIVERS\ptilink.sys
15:36:35.0671 2492 Ptilink - ok
15:36:35.0687 2492 ql1080 - ok
15:36:35.0687 2492 Ql10wnt - ok
15:36:35.0703 2492 ql12160 - ok
15:36:35.0703 2492 ql1240 - ok
15:36:35.0703 2492 ql1280 - ok
15:36:35.0718 2492 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) E:\WINDOWS\system32\DRIVERS\rasacd.sys
15:36:35.0796 2492 RasAcd - ok
15:36:35.0796 2492 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) E:\WINDOWS\system32\DRIVERS\rasl2tp.sys
15:36:35.0859 2492 Rasl2tp - ok
15:36:35.0875 2492 RasPppoe (5bc962f2654137c9909c3d4603587dee) E:\WINDOWS\system32\DRIVERS\raspppoe.sys
15:36:36.0031 2492 RasPppoe - ok
15:36:36.0046 2492 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) E:\WINDOWS\system32\DRIVERS\raspti.sys
15:36:36.0125 2492 Raspti - ok
15:36:36.0140 2492 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) E:\WINDOWS\system32\DRIVERS\rdbss.sys
15:36:36.0218 2492 Rdbss - ok
15:36:36.0218 2492 RDPCDD (4912d5b403614ce99c28420f75353332) E:\WINDOWS\system32\DRIVERS\RDPCDD.sys
15:36:36.0296 2492 RDPCDD - ok
15:36:36.0312 2492 rdpdr (15cabd0f7c00c47c70124907916af3f1) E:\WINDOWS\system32\DRIVERS\rdpdr.sys
15:36:36.0390 2492 rdpdr - ok
15:36:36.0406 2492 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) E:\WINDOWS\system32\drivers\RDPWD.sys
15:36:36.0437 2492 RDPWD - ok
15:36:36.0453 2492 redbook (f828dd7e1419b6653894a8f97a0094c5) E:\WINDOWS\system32\DRIVERS\redbook.sys
15:36:36.0515 2492 redbook - ok
15:36:36.0546 2492 RT73 (abdc839bd1c53f9c17449b10221cb942) E:\WINDOWS\system32\DRIVERS\rt73.sys
15:36:36.0578 2492 RT73 - ok
15:36:36.0609 2492 RTLE8023xp (a1ad65718870dbf2bcb81e3c1406469e) E:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
15:36:36.0609 2492 RTLE8023xp - ok
15:36:36.0656 2492 RVFsSec (f024ff9359da36f68901f04c87daae1d) E:\WINDOWS\system32\Drivers\RVFsSec.sys
15:36:36.0656 2492 RVFsSec ( UnsignedFile.Multi.Generic ) - warning
15:36:36.0656 2492 RVFsSec - detected UnsignedFile.Multi.Generic (1)
15:36:36.0671 2492 RVSystem (01bb58be756292c842f42a7a183220d9) E:\WINDOWS\system32\Drivers\RVSystem.sys
15:36:36.0687 2492 RVSystem ( UnsignedFile.Multi.Generic ) - warning
15:36:36.0687 2492 RVSystem - detected UnsignedFile.Multi.Generic (1)
15:36:36.0703 2492 Secdrv (90a3935d05b494a5a39d37e71f09a677) E:\WINDOWS\system32\DRIVERS\secdrv.sys
15:36:36.0765 2492 Secdrv - ok
15:36:36.0781 2492 serenum (0f29512ccd6bead730039fb4bd2c85ce) E:\WINDOWS\system32\DRIVERS\serenum.sys
15:36:36.0843 2492 serenum - ok
15:36:36.0859 2492 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) E:\WINDOWS\system32\DRIVERS\serial.sys
15:36:36.0921 2492 Serial - ok
15:36:36.0937 2492 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) E:\WINDOWS\system32\drivers\Sfloppy.sys
15:36:37.0000 2492 Sfloppy - ok
15:36:37.0015 2492 Simbad - ok
15:36:37.0015 2492 Sparrow - ok
15:36:37.0031 2492 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) E:\WINDOWS\system32\drivers\splitter.sys
15:36:37.0093 2492 splitter - ok
15:36:37.0125 2492 sptd (cdddec541bc3c96f91ecb48759673505) E:\WINDOWS\system32\Drivers\sptd.sys
15:36:37.0125 2492 Suspicious file (NoAccess): E:\WINDOWS\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505
15:36:37.0125 2492 sptd ( LockedFile.Multi.Generic ) - warning
15:36:37.0125 2492 sptd - detected LockedFile.Multi.Generic (1)
15:36:37.0140 2492 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) E:\WINDOWS\system32\DRIVERS\sr.sys
15:36:37.0203 2492 sr - ok
15:36:37.0234 2492 Srv (47ddfc2f003f7f9f0592c6874962a2e7) E:\WINDOWS\system32\DRIVERS\srv.sys
15:36:37.0250 2492 Srv - ok
15:36:37.0281 2492 ssmdrv (a36ee93698802cd899f98bfd553d8185) E:\WINDOWS\system32\DRIVERS\ssmdrv.sys
15:36:37.0281 2492 ssmdrv - ok
15:36:37.0296 2492 swenum (3941d127aef12e93addf6fe6ee027e0f) E:\WINDOWS\system32\DRIVERS\swenum.sys
15:36:37.0375 2492 swenum - ok
15:36:37.0390 2492 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) E:\WINDOWS\system32\drivers\swmidi.sys
15:36:37.0453 2492 swmidi - ok
15:36:37.0468 2492 symc810 - ok
15:36:37.0468 2492 symc8xx - ok
15:36:37.0484 2492 sym_hi - ok
15:36:37.0484 2492 sym_u3 - ok
15:36:37.0500 2492 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) E:\WINDOWS\system32\drivers\sysaudio.sys
15:36:37.0578 2492 sysaudio - ok
15:36:37.0593 2492 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) E:\WINDOWS\system32\DRIVERS\tcpip.sys
15:36:37.0625 2492 Tcpip - ok
15:36:37.0640 2492 TDPIPE (6471a66807f5e104e4885f5b67349397) E:\WINDOWS\system32\drivers\TDPIPE.sys
15:36:37.0718 2492 TDPIPE - ok
15:36:37.0734 2492 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) E:\WINDOWS\system32\drivers\TDTCP.sys
15:36:37.0796 2492 TDTCP - ok
15:36:37.0812 2492 TermDD (88155247177638048422893737429d9e) E:\WINDOWS\system32\DRIVERS\termdd.sys
15:36:37.0890 2492 TermDD - ok
15:36:37.0890 2492 TosIde - ok
15:36:37.0906 2492 tunmp (8f861eda21c05857eb8197300a92501c) E:\WINDOWS\system32\DRIVERS\tunmp.sys
15:36:37.0968 2492 tunmp - ok
15:36:37.0984 2492 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) E:\WINDOWS\system32\drivers\Udfs.sys
15:36:38.0046 2492 Udfs - ok
15:36:38.0046 2492 ultra - ok
15:36:38.0062 2492 Update (402ddc88356b1bac0ee3dd1580c76a31) E:\WINDOWS\system32\DRIVERS\update.sys
15:36:38.0125 2492 Update - ok
15:36:38.0156 2492 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) E:\WINDOWS\system32\DRIVERS\usbehci.sys
15:36:38.0218 2492 usbehci - ok
15:36:38.0218 2492 usbhub (1ab3cdde553b6e064d2e754efe20285c) E:\WINDOWS\system32\DRIVERS\usbhub.sys
15:36:38.0281 2492 usbhub - ok
15:36:38.0296 2492 usbohci (0daecce65366ea32b162f85f07c6753b) E:\WINDOWS\system32\DRIVERS\usbohci.sys
15:36:38.0375 2492 usbohci - ok
15:36:38.0390 2492 usbprint (a717c8721046828520c9edf31288fc00) E:\WINDOWS\system32\DRIVERS\usbprint.sys
15:36:38.0453 2492 usbprint - ok
15:36:38.0468 2492 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) E:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
15:36:38.0546 2492 USBSTOR - ok
15:36:38.0578 2492 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) E:\WINDOWS\System32\drivers\vga.sys
15:36:38.0640 2492 VgaSave - ok
15:36:38.0687 2492 VIAHdAudAddService (80952920d6fdd8d65d37f488de340b5d) E:\WINDOWS\system32\drivers\viahduaa.sys
15:36:38.0750 2492 VIAHdAudAddService - ok
15:36:38.0765 2492 ViaIde - ok
15:36:38.0781 2492 VolSnap (4c8fcb5cc53aab716d810740fe59d025) E:\WINDOWS\system32\drivers\VolSnap.sys
15:36:38.0843 2492 VolSnap - ok
15:36:38.0859 2492 Wanarp (e20b95baedb550f32dd489265c1da1f6) E:\WINDOWS\system32\DRIVERS\wanarp.sys
15:36:38.0921 2492 Wanarp - ok
15:36:38.0937 2492 WDICA - ok
15:36:38.0953 2492 wdmaud (6768acf64b18196494413695f0c3a00f) E:\WINDOWS\system32\drivers\wdmaud.sys
15:36:39.0031 2492 wdmaud - ok
15:36:39.0046 2492 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) E:\WINDOWS\system32\DRIVERS\wmiacpi.sys
15:36:39.0109 2492 WmiAcpi - ok
15:36:39.0140 2492 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) E:\WINDOWS\System32\drivers\ws2ifsl.sys
15:36:39.0218 2492 WS2IFSL - ok
15:36:39.0296 2492 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC} (74ec37b9eaf9fca015b933a526825c7a) E:\Program Files\CyberLink\PowerDVD10\NavFilter\000.fcl
15:36:39.0296 2492 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC} - ok
15:36:39.0312 2492 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
15:36:39.0531 2492 \Device\Harddisk0\DR0 - ok
15:36:39.0531 2492 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1
15:36:39.0625 2492 \Device\Harddisk1\DR1 - ok
15:36:39.0625 2492 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk2\DR2
15:36:40.0078 2492 \Device\Harddisk2\DR2 - ok
15:36:40.0078 2492 Boot (0x1200) (33b722c2e7a9756b9428109dee88aac1) \Device\Harddisk0\DR0\Partition0
15:36:40.0078 2492 \Device\Harddisk0\DR0\Partition0 - ok
15:36:40.0093 2492 Boot (0x1200) (928da13a199be85d2eedf81f3aace4b0) \Device\Harddisk0\DR0\Partition1
15:36:40.0093 2492 \Device\Harddisk0\DR0\Partition1 - ok
15:36:40.0093 2492 Boot (0x1200) (899a1e2080a6c29be30c3f030c0bd385) \Device\Harddisk1\DR1\Partition0
15:36:40.0093 2492 \Device\Harddisk1\DR1\Partition0 - ok
15:36:40.0109 2492 Boot (0x1200) (5e04e536c3a0c4f63e44e1008ab8aee7) \Device\Harddisk1\DR1\Partition1
15:36:40.0109 2492 \Device\Harddisk1\DR1\Partition1 - ok
15:36:40.0109 2492 Boot (0x1200) (ec9b654765522e65b8c3bbda3544083b) \Device\Harddisk2\DR2\Partition0
15:36:40.0109 2492 \Device\Harddisk2\DR2\Partition0 - ok
15:36:40.0109 2492 Boot (0x1200) (14df67861f9eb2f296f2a983e75aaea5) \Device\Harddisk2\DR2\Partition1
15:36:40.0109 2492 \Device\Harddisk2\DR2\Partition1 - ok
15:36:40.0109 2492 ============================================================
15:36:40.0109 2492 Scan finished
15:36:40.0109 2492 ============================================================
15:36:40.0218 0580 Detected object count: 6
15:36:40.0218 0580 Actual detected object count: 6
15:36:49.0781 0580 AegisP ( UnsignedFile.Multi.Generic ) - skipped by user
15:36:49.0781 0580 AegisP ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:36:49.0781 0580 ASNDIS5 ( UnsignedFile.Multi.Generic ) - skipped by user
15:36:49.0781 0580 ASNDIS5 ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:36:49.0781 0580 HTTP ( UnsignedFile.Multi.Generic ) - skipped by user
15:36:49.0781 0580 HTTP ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:36:49.0781 0580 RVFsSec ( UnsignedFile.Multi.Generic ) - skipped by user
15:36:49.0781 0580 RVFsSec ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:36:49.0796 0580 RVSystem ( UnsignedFile.Multi.Generic ) - skipped by user
15:36:49.0796 0580 RVSystem ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:36:49.0796 0580 sptd ( LockedFile.Multi.Generic ) - skipped by user
15:36:49.0796 0580 sptd ( LockedFile.Multi.Generic ) - User select action: Skip

Skúšal som Internet Explorer, Firefox, Google Chrome. Vo všetkých sa to deje. Teda nie je to nejakým doplnkom vo FF. Vieš, to nie sú drobné záseky, ak začne haprovať prehliadanie, trvá to aj niekoľko hodín.
Hm, myslel som, že to bude nejakým vírusom, takto sa to stále viac zamotáva. Žeby pomohla preinštalácia XP?
Čo sa týka doplnku SDF, takýto tam nemám nainštalovaný, neviem prečo to vypísalo.

Sused odo mňa berie net na notebook cez wifi, zatiaľ nič nevraví, žeby im šlo nejako zle.
Returnil takmer vôbec nepoužívam, teda neviem ako to ide, ale myslím že rovnako. Returnil mám len nainštalovaný, ale nie je aktívny.
Čo sa týka Aviry, už som ju aj odinštaloval, ale aj vtedy mi haprovalo prehliadanie. Už naozaj neviem kde môže byť chyba.

Ja som amatér, nerozumiem tomu čo píšeš, prepáč, myslím tú kolíziu a fordovanie. Mám zaheslovanú sieť, má odo mňa heslo, nemám ho pripojeného cez MAC adresu.
Niekedy keď mi začne haprovať, pripojím sa cez wifi, niekedy to na chvíľu pomôže, inokedy nie.

Vyskúšam ešte ten núdzový režim, či aj tam bude strata packetov.