VIRY.CZ

nejak mi nefunguje adobat a spatne se mi zobrazuji fota,videa a selhavaji ruzne pluginy. predem dekuji

Logfile of random's system information tool 1.09 (written by random/random)
Run by x at 2012-08-01 21:08:07
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 102 GB (33%) free of 305 GB
Total RAM: 2047 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:08:17, on 1.8.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS.0\System32\smss.exe
C:\WINDOWS.0\system32\winlogon.exe
C:\WINDOWS.0\system32\services.exe
C:\WINDOWS.0\system32\lsass.exe
C:\WINDOWS.0\system32\Ati2evxx.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\System32\svchost.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\system32\Ati2evxx.exe
C:\WINDOWS.0\system32\spoolsv.exe
C:\WINDOWS.0\system32\acs.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS.0\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS.0\system32\dgdersvc.exe
C:\WINDOWS.0\system32\inetsrv\inetinfo.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS.0\system32\wbem\wmiapsrv.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\x.exe

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS.0\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS.0\system32\browseui.dll
O23 - Service: TP-LINK Configuration Service (ACS) - Atheros - C:\WINDOWS.0\system32\acs.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS.0\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS.0\system32\Ati2evxx.exe
O23 - Service: Device Error Recovery Service (dgdersvc) - Devguru Co., Ltd. - C:\WINDOWS.0\system32\dgdersvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS.0\system32\GameMon.des.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 4862 bytes

======Scheduled tasks folder======

C:\WINDOWS.0\tasks\Adobe Flash Player Updater.job
C:\WINDOWS.0\tasks\Google Software Updater.job
C:\WINDOWS.0\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS.0\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS.0\tasks\GoogleUpdateTaskUserS-1-5-21-1214440339-117609710-1801674531-1005Core.job
C:\WINDOWS.0\tasks\GoogleUpdateTaskUserS-1-5-21-1214440339-117609710-1801674531-1005UA.job
C:\WINDOWS.0\tasks\User_Feed_Synchronization-{41D70D58-BB43-4BC2-8B4D-0D42CAD68699}.job
C:\WINDOWS.0\tasks\Your File Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2012-06-15 348624]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"KiesTrayAgent"= []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS.0\system32\Ati2evxx.dll [2006-11-29 90112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS.0\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS.0\system32\usmt\migwiz.exe"="C:\WINDOWS.0\system32\usmt\migwiz.exe:*:Enabled:Průvodce přenesením souborů a nastavení"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\WINDOWS.0\system32\muzapp.exe"="C:\WINDOWS.0\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
"C:\Program Files\YourFileDownloader\Downloader.exe"="C:\Program Files\YourFileDownloader\Downloader.exe:*:Enabled:YourFile Downloader"
"C:\Program Files\YourFileDownloader\YourFile.exe"="C:\Program Files\YourFileDownloader\YourFile.exe:*:Enabled:YourFile Downloader"
"C:\Program Files\TP-LINK\TP-LINK Wireless Client Utility\TWCU.exe"="C:\Program Files\TP-LINK\TP-LINK Wireless Client Utility\TWCU.exe:*:Enabled:TP-LINK Wireless Client Utility"
"C:\Documents and Settings\x\Plocha\DCPlusPlus.exe"="C:\Documents and Settings\x\Plocha\DCPlusPlus.exe:*:Disabled:DC++"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe"="C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe:*:Enabled:Opera Internet Browser - Plugin wrapper"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS.0\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS.0\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll

======List of files/folders created in the last 1 month======

2012-07-20 16:35:55 ----DC---- C:\WINDOWS.0\Sun
2012-07-20 16:35:17 ----D---- C:\Program Files\Oracle
2012-07-20 16:35:07 ----AC---- C:\WINDOWS.0\system32\javaws.exe
2012-07-20 16:34:45 ----AC---- C:\WINDOWS.0\system32\javaw.exe
2012-07-20 16:34:45 ----AC---- C:\WINDOWS.0\system32\java.exe
2012-07-16 12:56:39 ----D---- C:\Program Files\Common Files\McAfee
2012-07-16 12:56:32 ----D---- C:\Program Files\McAfee
2012-07-14 16:16:49 ----DC---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\McAfee Security Scan
2012-07-14 16:16:43 ----DC---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\McAfee
2012-07-14 16:16:43 ----D---- C:\Program Files\McAfee Security Scan
2012-07-14 16:15:51 ----DC---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Adobe
2012-07-12 17:45:57 ----HDC---- C:\WINDOWS.0\$NtUninstallKB2691442$
2012-07-12 17:45:49 ----HDC---- C:\WINDOWS.0\$NtUninstallKB2718523$
2012-07-12 17:45:43 ----HDC---- C:\WINDOWS.0\$NtUninstallKB2655992$
2012-07-12 17:45:30 ----HDC---- C:\WINDOWS.0\$NtUninstallKB2719985$
2012-07-11 22:22:58 ----HDC---- C:\WINDOWS.0\$NtUninstallKB2698365$
2012-07-10 15:26:01 ----DC---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Martau
2012-07-10 15:25:58 ----D---- C:\Program Files\Total Uninstall 5
2012-07-09 15:35:44 ----DC---- C:\WINDOWS.0\system32\Adobe
2012-07-08 12:26:54 ----DC---- C:\Documents and Settings\x\Data aplikací\DDMSettings
2012-07-08 12:15:42 ----DC---- C:\Documents and Settings\x\Data aplikací\DivX
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\vxblock.dll
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxwave.dll
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxsfs.dll
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxmas.dll
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxinsi64.exe
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxinsa64.exe
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxhpinst.exe
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxdrv.dll
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxcpyi64.exe
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxcpya64.exe
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxafs.dll
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\drivers\PxHelp20.sys
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\drivers\cdralw2k.sys
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\drivers\cdr4_xp.sys
2012-07-08 12:15:25 ----C---- C:\WINDOWS.0\system32\px.dll
2012-07-08 12:13:57 ----DC---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\DivX
2012-07-06 09:03:28 ----D---- C:\Program Files\ClocX
2012-07-05 19:44:49 ----DC---- C:\Documents and Settings\x\Data aplikací\Desktop Sidebar
2012-07-05 19:43:53 ----D---- C:\Program Files\Desktop Sidebar
2012-07-03 19:08:22 ----AC---- C:\WINDOWS.0\stinger.sys

======List of files/folders modified in the last 1 month======

2012-08-01 21:08:14 ----DC---- C:\WINDOWS.0\Prefetch
2012-08-01 21:08:10 ----D---- C:\Program Files\Trend Micro
2012-08-01 21:08:09 ----DC---- C:\WINDOWS.0\Temp
2012-08-01 20:05:18 ----DC---- C:\WINDOWS.0\system32\inetsrv
2012-08-01 19:54:00 ----AC---- C:\WINDOWS.0\SchedLgU.Txt
2012-08-01 19:48:49 ----DC---- C:\WINDOWS.0
2012-08-01 19:48:43 ----SDC---- C:\WINDOWS.0\Tasks
2012-08-01 19:45:37 ----DC---- C:\Documents and Settings\x\Data aplikací\uTorrent
2012-08-01 19:34:07 ----DC---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Google Updater
2012-07-31 20:45:11 ----D---- C:\filmy-hry
2012-07-31 20:43:42 ----DC---- C:\Documents and Settings\x\Data aplikací\vlc
2012-07-31 20:22:52 ----DC---- C:\WINDOWS.0\system32\Logfiles
2012-07-29 22:36:05 ----DC---- C:\WINDOWS.0\system32\CatRoot2
2012-07-29 14:15:31 ----RSDC---- C:\WINDOWS.0\assembly
2012-07-29 14:12:32 ----DC---- C:\WINDOWS.0\Microsoft.NET
2012-07-29 09:18:18 ----DC---- C:\WINDOWS.0\system32\drivers
2012-07-29 09:00:59 ----DC---- C:\foto-miminko
2012-07-28 21:50:25 ----SHDC---- C:\WINDOWS.0\Installer
2012-07-28 21:50:25 ----HDC---- C:\Config.Msi
2012-07-28 21:49:22 ----DC---- C:\WINDOWS.0\WinSxS
2012-07-28 21:49:20 ----DC---- C:\WINDOWS.0\system32
2012-07-28 21:49:20 ----AC---- C:\WINDOWS.0\system32\PerfStringBackup.INI
2012-07-28 07:17:25 ----AC---- C:\WINDOWS.0\system32\FlashPlayerApp.exe
2012-07-27 15:41:38 ----DC---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Avira
2012-07-27 15:41:02 ----D---- C:\Program Files\Avira
2012-07-27 15:40:40 ----DC---- C:\WINDOWS.0\system32\cs-cz
2012-07-27 15:36:41 ----DC---- C:\WINDOWS.0\system32\en-US
2012-07-27 15:36:32 ----D---- C:\Program Files\Microsoft.NET
2012-07-25 17:14:27 ----DC---- C:\Documents and Settings\x\Data aplikací\Skype
2012-07-25 15:33:09 ----DC---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Skype
2012-07-22 18:44:17 ----SHD---- C:\System Volume Information
2012-07-22 18:42:45 ----DC---- C:\WINDOWS.0\system32\NtmsData
2012-07-22 17:18:11 ----DC---- C:\WINDOWS.0\Registration
2012-07-20 16:35:17 ----RD---- C:\Program Files
2012-07-20 16:34:43 ----D---- C:\Program Files\Java
2012-07-18 14:19:54 ----HDC---- C:\WINDOWS.0\inf
2012-07-17 15:34:53 ----DC---- C:\WINDOWS.0\Debug
2012-07-16 13:17:23 ----D---- C:\Program Files\Opera
2012-07-16 12:56:39 ----D---- C:\Program Files\Common Files
2012-07-14 16:17:21 ----SDC---- C:\Documents and Settings\x\Data aplikací\Microsoft
2012-07-14 16:17:21 ----DC---- C:\Documents and Settings\x\Data aplikací\Adobe
2012-07-12 17:46:01 ----DC---- C:\WINDOWS.0\system32\dllcache
2012-07-12 17:45:48 ----HDC---- C:\WINDOWS.0\$hf_mig$
2012-07-11 22:23:10 ----AC---- C:\WINDOWS.0\system32\MRT.exe
2012-07-09 19:38:50 ----D---- C:\Program Files\uTorrent
2012-07-08 12:15:51 ----D---- C:\Program Files\DivX
2012-07-08 12:15:50 ----D---- C:\Program Files\Common Files\DivX Shared
2012-07-06 13:09:27 ----DC---- C:\foto-kurim
2012-07-05 22:06:30 ----AC---- C:\WINDOWS.0\system32\npDeployJava1.dll
2012-07-05 22:06:20 ----AC---- C:\WINDOWS.0\system32\deployJava1.dll
2012-07-03 19:23:46 ----DC---- C:\WINDOWS.0\Minidump
2012-07-02 22:19:12 ----DC---- C:\WINDOWS.0\system32\CatRoot
2012-07-02 22:17:16 ----DC---- C:\WINDOWS.0\system32\ReinstallBackups

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 JGOGO;JMicron Hot-Plug Driver; C:\WINDOWS.0\system32\DRIVERS\JGOGO.sys [2006-02-07 6912]
R0 JRAID;JRAID; C:\WINDOWS.0\system32\DRIVERS\jraid.sys [2006-10-30 43648]
R0 PxHelp20;PxHelp20; C:\WINDOWS.0\System32\Drivers\PxHelp20.sys [2011-11-29 45648]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS.0\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 avipbb;avipbb; C:\WINDOWS.0\system32\DRIVERS\avipbb.sys [2012-06-15 137928]
R1 avkmgr;avkmgr; C:\WINDOWS.0\system32\DRIVERS\avkmgr.sys [2011-12-09 36000]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS.0\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS.0\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 ssmdrv;ssmdrv; C:\WINDOWS.0\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R2 avgntflt;avgntflt; C:\WINDOWS.0\system32\DRIVERS\avgntflt.sys [2012-06-15 83392]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS.0\system32\drivers\ADIHdAud.sys [2007-01-16 293888]
R3 AEAudio;AE Audio Service; C:\WINDOWS.0\system32\drivers\AEAudio.sys [2006-08-07 93952]
R3 AR9271;Wireless Network Adapter Service; C:\WINDOWS.0\system32\DRIVERS\athuw.sys [2010-01-05 1714176]
R3 ati2mtag;ati2mtag; C:\WINDOWS.0\system32\DRIVERS\ati2mtag.sys [2006-11-29 2830336]
R3 dgderdrv;dgderdrv; C:\WINDOWS.0\System32\drivers\dgderdrv.sys [2009-12-22 18136]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS.0\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS.0\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS.0\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS.0\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS.0\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS.0\system32\DRIVERS\Rtenicxp.sys [2006-07-27 83712]
R3 SenFiltService;SenFilt Service; C:\WINDOWS.0\system32\drivers\Senfilt.sys [2006-03-17 392960]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS.0\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS.0\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 WSIMD;wsimd Service; C:\WINDOWS.0\system32\DRIVERS\wsimd.sys [2010-05-21 58208]
S3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS.0\system32\FsUsbExDisk.SYS []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS.0\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\WINDOWS.0\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\WINDOWS.0\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\WINDOWS.0\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
S3 ss_bserd;SAMSUNG USB Mobile Logging Driver; C:\WINDOWS.0\system32\DRIVERS\ss_bserd.sys [2009-09-19 100224]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS.0\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS.0\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS.0\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACS;TP-LINK Configuration Service; C:\WINDOWS.0\system32\acs.exe [2010-05-21 499796]
R2 AntiVirService;Avira Realtime Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2012-06-15 110032]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2012-06-15 86224]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS.0\system32\Ati2evxx.exe [2006-11-29 430080]
R2 dgdersvc;Device Error Recovery Service; C:\WINDOWS.0\system32\dgdersvc.exe [2009-12-22 95568]
R2 IISADMIN;Správa služby IIS; C:\WINDOWS.0\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe [2012-07-05 161704]
R2 W3SVC;Publikování na webu; C:\WINDOWS.0\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS.0\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS.0\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-17 116648]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-06-05 182768]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-07-03 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS.0\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-28 250056]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS.0\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-17 116648]
S3 idsvc;Windows CardSpace; c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe [2011-06-17 237008]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS.0\system32\GameMon.des [2012-04-05 3969336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS.0\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 ATI Smart;ATI Smart; C:\WINDOWS.0\system32\ati2sgag.exe [2006-11-28 520192]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS.0\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 FsUsbExService;FsUsbExService; C:\WINDOWS.0\system32\FsUsbExService.Exe [2009-12-22 217088]
S4 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [2012-01-13 95200]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-11-11 620544]
S4 Skype C2C Service;Skype C2C Service; C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-07-05 3048136]

-----------------EOF-----------------

Zdravim a pekny den preji

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.exe

Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
Spustte tradicne dvojklikem - program probehne do par sekund a ukonci i svou cinnost
Na plose vznikne log Rkill.txt ten mi sem vlozte
RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
Ted nerestartujte PC - prisli byste o ucinek RKillu

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK

Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
Pokud mate Win XP spustte pod uctem Spravce\Administratora
Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

tak rkill se mi nepodarilo spustit,obrazovka zmodrala a psalo to ze system byl kvuli vaznym problemum vypnut. ComboFix je hotov a zde je log

ComboFix 12-07-31.03 - x 02.08.2012 14:11:03.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2047.1505 [GMT 2:00]
Spuštěný z: c:\documents and settings\x\Plocha\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\PC\WINDOWS
c:\program files\Incredibar.com
c:\program files\Incredibar.com\incredibar\1.5.11.14\incredibarApp.dll
c:\program files\Incredibar.com\incredibar\1.5.11.14\incredibarEng.dll
c:\program files\Incredibar.com\incredibar\1.5.11.14\incredibarsrv.exe
c:\program files\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll
c:\program files\Incredibar.com\incredibar\1.5.11.14\uninstall.exe
c:\program files\SSearch
c:\program files\SSearch\sqlite3.exe
c:\windows.0\system32\Cache
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-07-02 do 2012-08-02 )))))))))))))))))))))))))))))))
.
.
2012-07-20 14:35 . 2012-07-20 14:35 -------- dc----w- c:\windows.0\Sun
2012-07-20 14:35 . 2012-07-20 14:35 -------- d-----w- c:\program files\Oracle
2012-07-16 11:18 . 2012-07-16 11:18 -------- dc----w- c:\windows.0\system32\config\systemprofile\Local Settings\Data aplikací\Google
2012-07-16 10:56 . 2012-07-16 10:56 -------- d-----w- c:\program files\Common Files\McAfee
2012-07-16 10:56 . 2012-07-19 13:28 -------- d-----w- c:\program files\McAfee
2012-07-14 14:22 . 2012-07-14 14:22 -------- dc----w- c:\documents and settings\LocalService.NT AUTHORITY\Data aplikací\McAfee
2012-07-14 14:17 . 2012-07-14 14:17 -------- dc----w- c:\documents and settings\x\Local Settings\Data aplikací\Adobe
2012-07-14 14:16 . 2012-07-14 14:16 -------- dc----w- c:\documents and settings\All Users.WINDOWS.0\Data aplikací\McAfee Security Scan
2012-07-14 14:16 . 2012-07-16 10:56 -------- dc----w- c:\documents and settings\All Users.WINDOWS.0\Data aplikací\McAfee
2012-07-14 14:16 . 2012-07-14 14:21 -------- d-----w- c:\program files\McAfee Security Scan
2012-07-13 21:15 . 2012-07-13 21:15 -------- dc----w- c:\windows.0\system32\config\systemprofile\Local Settings\Data aplikací\ATI
2012-07-10 13:26 . 2012-07-10 13:26 -------- dc----w- c:\documents and settings\All Users.WINDOWS.0\Data aplikací\Martau
2012-07-10 13:25 . 2012-07-10 13:26 -------- d-----w- c:\program files\Total Uninstall 5
2012-07-09 13:35 . 2012-07-09 13:35 -------- dc----w- c:\windows.0\system32\Adobe
2012-07-08 10:26 . 2012-07-08 10:26 -------- dc----w- c:\documents and settings\x\Data aplikací\DDMSettings
2012-07-06 07:03 . 2012-07-06 07:03 -------- d-----w- c:\program files\ClocX
2012-07-05 17:44 . 2012-07-06 06:38 -------- dc----w- c:\documents and settings\x\Data aplikací\Desktop Sidebar
2012-07-05 17:43 . 2012-07-06 06:39 -------- d-----w- c:\program files\Desktop Sidebar
2012-07-03 17:08 . 2012-07-03 17:08 14664 -c--a-w- c:\windows.0\stinger.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-28 05:17 . 2012-06-05 16:04 70344 -c--a-w- c:\windows.0\system32\FlashPlayerCPLApp.cpl
2012-07-28 05:17 . 2012-06-05 16:04 426184 -c--a-w- c:\windows.0\system32\FlashPlayerApp.exe
2012-07-05 20:07 . 2012-06-05 16:28 143872 -c--a-w- c:\windows.0\system32\javacpl.cpl
2012-07-05 20:06 . 2012-06-05 16:28 772544 -c--a-w- c:\windows.0\system32\npDeployJava1.dll
2012-07-05 20:06 . 2012-06-05 16:28 687544 -c--a-w- c:\windows.0\system32\deployJava1.dll
2012-06-15 14:46 . 2012-06-15 14:38 137928 -c--a-w- c:\windows.0\system32\drivers\avipbb.sys
2012-06-15 14:46 . 2012-06-15 14:38 83392 -c--a-w- c:\windows.0\system32\drivers\avgntflt.sys
2012-06-13 13:55 . 2008-04-14 05:45 1866112 -c--a-w- c:\windows.0\system32\win32k.sys
2012-06-05 15:49 . 2008-04-14 06:51 1372672 -c--a-w- c:\windows.0\system32\msxml6.dll
2012-06-05 15:49 . 2008-04-14 06:51 1172480 -c--a-w- c:\windows.0\system32\msxml3.dll
2012-06-04 20:33 . 2012-06-04 20:33 84480 -c--a-w- c:\documents and settings\All Users.WINDOWS.0\Data aplikací\Microsoft\USMT\iconlib.dll
2012-06-04 04:32 . 2008-04-14 06:51 152576 -c--a-w- c:\windows.0\system32\schannel.dll
2012-06-02 13:19 . 2009-08-06 17:24 15384 -c--a-w- c:\windows.0\system32\wuaucpl.cpl.mui
2012-06-02 13:19 . 2009-08-06 17:24 22552 -c--a-w- c:\windows.0\system32\wucltui.dll.mui
2012-06-02 13:19 . 2012-06-04 19:53 329240 -c--a-w- c:\windows.0\system32\wucltui.dll
2012-06-02 13:19 . 2012-06-04 19:53 219160 -c--a-w- c:\windows.0\system32\wuaucpl.cpl
2012-06-02 13:19 . 2012-06-04 19:53 210968 -c--a-w- c:\windows.0\system32\wuweb.dll
2012-06-02 13:19 . 2012-06-04 19:53 53784 -c--a-w- c:\windows.0\system32\wuauclt.exe
2012-06-02 13:19 . 2012-06-04 19:53 35864 -c--a-w- c:\windows.0\system32\wups.dll
2012-06-02 13:19 . 2009-08-06 17:24 45080 -c--a-w- c:\windows.0\system32\wups2.dll
2012-06-02 13:19 . 2009-08-06 17:24 18456 -c--a-w- c:\windows.0\system32\wuaueng.dll.mui
2012-06-02 13:19 . 2009-08-06 17:24 15384 -c--a-w- c:\windows.0\system32\wuapi.dll.mui
2012-06-02 13:19 . 2008-04-14 06:51 97304 -c--a-w- c:\windows.0\system32\cdm.dll
2012-06-02 13:19 . 2012-06-04 19:53 577048 -c--a-w- c:\windows.0\system32\wuapi.dll
2012-06-02 13:19 . 2012-06-04 19:53 1933848 -c--a-w- c:\windows.0\system32\wuaueng.dll
2012-05-31 13:22 . 2008-04-14 06:51 602112 -c--a-w- c:\windows.0\system32\crypt32.dll
2012-05-16 15:09 . 2008-04-14 06:52 916992 -c--a-w- c:\windows.0\system32\wininet.dll
2012-05-11 14:44 . 2008-04-14 06:52 1469440 -c----w- c:\windows.0\system32\inetcpl.cpl
2012-05-11 14:44 . 2008-04-14 06:51 43520 -c----w- c:\windows.0\system32\licmgr10.dll
2012-05-11 11:38 . 2008-04-14 05:50 385024 -c----w- c:\windows.0\system32\html.iec
2012-05-05 03:14 . 2008-04-14 08:06 2028544 -c--a-w- c:\windows.0\system32\ntkrnlpa.exe
2012-05-05 03:14 . 2008-04-14 06:06 2150400 -c--a-w- c:\windows.0\system32\ntoskrnl.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2012-06-15 348624]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS.0\\system32\\usmt\\migwiz.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\WINDOWS.0\\system32\\muzapp.exe"=
"c:\\Program Files\\TP-LINK\\TP-LINK Wireless Client Utility\\TWCU.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Opera\\pluginwrapper\\opera_plugin_wrapper.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R1 avkmgr;avkmgr;c:\windows.0\system32\drivers\avkmgr.sys [15.6.2012 16:38 36000]
R2 AntiVirSchedulerService;Avira Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [15.6.2012 16:38 86224]
R2 dgdersvc;Device Error Recovery Service;c:\windows.0\system32\dgdersvc.exe [22.12.2009 4:31 95568]
R3 AR9271;Wireless Network Adapter Service;c:\windows.0\system32\drivers\athuw.sys [29.6.2012 21:42 1714176]
R3 dgderdrv;dgderdrv;c:\windows.0\system32\drivers\dgderdrv.sys [22.12.2009 4:31 18136]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [17.6.2012 11:13 116648]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [3.7.2012 13:19 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows.0\system32\Macromed\Flash\FlashPlayerUpdateService.exe [5.6.2012 18:04 250056]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows.0\system32\FsUsbExDisk.Sys [15.6.2012 16:57 36640]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [17.6.2012 11:13 116648]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.0.207\McCHSvc.exe [17.6.2011 19:33 237008]
S3 npggsvc;nProtect GameGuard Service;c:\windows.0\system32\GameMon.des -service --> c:\windows.0\system32\GameMon.des -service [?]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows.0\system32\drivers\ss_bbus.sys [15.6.2012 16:58 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows.0\system32\drivers\ss_bmdfl.sys [15.6.2012 16:58 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows.0\system32\drivers\ss_bmdm.sys [15.6.2012 16:58 123648]
S3 ss_bserd;SAMSUNG USB Mobile Logging Driver;c:\windows.0\system32\drivers\ss_bserd.sys [15.6.2012 16:58 100224]
S4 FsUsbExService;FsUsbExService;c:\windows.0\system32\FsUsbExService.Exe [15.6.2012 16:57 217088]
S4 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~1\mcafee\SITEAD~1\mcsacore.exe [16.7.2012 12:56 95200]
S4 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users.WINDOWS.0\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [5.7.2012 18:41 3048136]
.
Obsah adresáře 'Naplánované úlohy'
.
2012-08-02 c:\windows.0\Tasks\Adobe Flash Player Updater.job
- c:\windows.0\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-05 05:17]
.
2012-08-02 c:\windows.0\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-02-08 15:42]
.
2012-08-02 c:\windows.0\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-06-17 09:13]
.
2012-08-02 c:\windows.0\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-06-17 09:13]
.
2012-08-02 c:\windows.0\Tasks\User_Feed_Synchronization-{41D70D58-BB43-4BC2-8B4D-0D42CAD68699}.job
- c:\windows.0\system32\msfeedssync.exe [2009-03-08 02:31]
.
.
------- Doplňkový sken -------
.
TCP: DhcpNameServer = 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{687578B9-7132-4A7A-80E4-30EE31099E03} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKCU-Run-KiesTrayAgent - (no file)
AddRemove-01_Simmental - c:\program files\SAMSUNG\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\SAMSUNG\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\SAMSUNG\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\SAMSUNG\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-05_Sloan - c:\program files\SAMSUNG\USB Drivers\05_Sloan\Uninstall.exe
AddRemove-06_Spencer - c:\program files\SAMSUNG\USB Drivers\06_Spencer\Uninstall.exe
AddRemove-07_Schorl - c:\program files\SAMSUNG\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-08_EMPChipset - c:\program files\SAMSUNG\USB Drivers\08_EMPChipset\Uninstall.exe
AddRemove-09_Hsp - c:\program files\SAMSUNG\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\SAMSUNG\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-12_Symbian_USB_Download_Driver - c:\program files\SAMSUNG\USB Drivers\12_Symbian_USB_Download_Driver\Uninstall.exe
AddRemove-15_Symbian_Samsung_PC_DLC_Driver - c:\program files\SAMSUNG\USB Drivers\15_Symbian_Samsung_PC_DLC_Driver\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\SAMSUNG\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-17_EMP_Chipset2 - c:\program files\SAMSUNG\USB Drivers\17_EMP_Chipset2\Uninstall.exe
AddRemove-18_Zinia_Serial_Driver - c:\program files\SAMSUNG\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe
AddRemove-19_VIA_driver - c:\program files\SAMSUNG\USB Drivers\19_VIA_driver\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\SAMSUNG\USB Drivers\20_NXP_Driver\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-08-02 14:15
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\npggsvc]
"ImagePath"="c:\windows.0\system32\GameMon.des -service"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1032)
c:\windows.0\system32\Ati2evxx.dll
.
Celkový čas: 2012-08-02 14:16:44
ComboFix-quarantined-files.txt 2012-08-02 12:16
.
Před spuštěním: Volných bajtů: 108 272 091 136
Po spuštění: Volných bajtů: 108 282 503 168
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS.0
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS.0="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 09DA5ACF604F2D9A17660A3F66105732

Pokud nemate, tak presunte Combofix na plochu

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

KillAll::

File::
C:\WINDOWS.0\tasks\Adobe Flash Player Updater.job
C:\WINDOWS.0\tasks\Google Software Updater.job
C:\WINDOWS.0\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS.0\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS.0\tasks\GoogleUpdateTaskUserS-1-5-21-1214440339-117609710-1801674531-1005Core.job
C:\WINDOWS.0\tasks\GoogleUpdateTaskUserS-1-5-21-1214440339-117609710-1801674531-1005UA.job
C:\WINDOWS.0\tasks\User_Feed_Synchronization-{41D70D58-BB43-4BC2-8B4D-0D42CAD68699}.job
C:\WINDOWS.0\tasks\Your File Updater.job

Driver::
gupdate
gupdatem
gusvc
JavaQuickStarterService

Registry::
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"KiesTrayAgent"=-

ClearJavaCache::

Reboot::

Ulozte vytvoreny TXT jako CFScript.txt
Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Pokud vyskoci hlaska "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni", tak jen restartujte PC - registr se da do kupy - jedna se o vnitrni chybu, kterou zpusobuje CF a autor ji zatim neumi bohuzel opravit

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

tak jsem to udelal a vlastne to vypadalo jako kdyz jsem predtim spustil jen ComboFix. po pretahnuti se spustil,tak snad jsem to udelal dobre.

ComboFix 12-07-31.03 - x 02.08.2012 15:44:24.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2047.1506 [GMT 2:00]
Spuštěný z: c:\documents and settings\x\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\x\Plocha\CFScript.txt
AV: Avira Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
FILE ::
"c:\windows.0\tasks\Adobe Flash Player Updater.job"
"c:\windows.0\tasks\Google Software Updater.job"
"c:\windows.0\tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows.0\tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows.0\tasks\GoogleUpdateTaskUserS-1-5-21-1214440339-117609710-1801674531-1005Core.job"
"c:\windows.0\tasks\GoogleUpdateTaskUserS-1-5-21-1214440339-117609710-1801674531-1005UA.job"
"c:\windows.0\tasks\User_Feed_Synchronization-{41D70D58-BB43-4BC2-8B4D-0D42CAD68699}.job"
"c:\windows.0\tasks\Your File Updater.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_GUPDATE
-------\Legacy_GUSVC
-------\Legacy_JAVAQUICKSTARTERSERVICE
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_gusvc
-------\Service_JavaQuickStarterService
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-07-02 do 2012-08-02 )))))))))))))))))))))))))))))))
.
.
2012-07-20 14:35 . 2012-07-20 14:35 -------- dc----w- c:\windows.0\Sun
2012-07-20 14:35 . 2012-07-20 14:35 -------- d-----w- c:\program files\Oracle
2012-07-16 11:18 . 2012-07-16 11:18 -------- dc----w- c:\windows.0\system32\config\systemprofile\Local Settings\Data aplikací\Google
2012-07-16 10:56 . 2012-07-16 10:56 -------- d-----w- c:\program files\Common Files\McAfee
2012-07-16 10:56 . 2012-07-19 13:28 -------- d-----w- c:\program files\McAfee
2012-07-14 14:22 . 2012-07-14 14:22 -------- dc----w- c:\documents and settings\LocalService.NT AUTHORITY\Data aplikací\McAfee
2012-07-14 14:17 . 2012-07-14 14:17 -------- dc----w- c:\documents and settings\x\Local Settings\Data aplikací\Adobe
2012-07-14 14:16 . 2012-07-14 14:16 -------- dc----w- c:\documents and settings\All Users.WINDOWS.0\Data aplikací\McAfee Security Scan
2012-07-14 14:16 . 2012-07-16 10:56 -------- dc----w- c:\documents and settings\All Users.WINDOWS.0\Data aplikací\McAfee
2012-07-14 14:16 . 2012-07-14 14:21 -------- d-----w- c:\program files\McAfee Security Scan
2012-07-13 21:15 . 2012-07-13 21:15 -------- dc----w- c:\windows.0\system32\config\systemprofile\Local Settings\Data aplikací\ATI
2012-07-10 13:26 . 2012-07-10 13:26 -------- dc----w- c:\documents and settings\All Users.WINDOWS.0\Data aplikací\Martau
2012-07-10 13:25 . 2012-07-10 13:26 -------- d-----w- c:\program files\Total Uninstall 5
2012-07-09 13:35 . 2012-07-09 13:35 -------- dc----w- c:\windows.0\system32\Adobe
2012-07-08 10:26 . 2012-07-08 10:26 -------- dc----w- c:\documents and settings\x\Data aplikací\DDMSettings
2012-07-06 07:03 . 2012-07-06 07:03 -------- d-----w- c:\program files\ClocX
2012-07-05 17:44 . 2012-07-06 06:38 -------- dc----w- c:\documents and settings\x\Data aplikací\Desktop Sidebar
2012-07-05 17:43 . 2012-07-06 06:39 -------- d-----w- c:\program files\Desktop Sidebar
2012-07-03 17:08 . 2012-07-03 17:08 14664 -c--a-w- c:\windows.0\stinger.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-28 05:17 . 2012-06-05 16:04 70344 -c--a-w- c:\windows.0\system32\FlashPlayerCPLApp.cpl
2012-07-28 05:17 . 2012-06-05 16:04 426184 -c--a-w- c:\windows.0\system32\FlashPlayerApp.exe
2012-07-05 20:07 . 2012-06-05 16:28 143872 -c--a-w- c:\windows.0\system32\javacpl.cpl
2012-07-05 20:06 . 2012-06-05 16:28 772544 -c--a-w- c:\windows.0\system32\npDeployJava1.dll
2012-07-05 20:06 . 2012-06-05 16:28 687544 -c--a-w- c:\windows.0\system32\deployJava1.dll
2012-06-15 14:46 . 2012-06-15 14:38 137928 -c--a-w- c:\windows.0\system32\drivers\avipbb.sys
2012-06-15 14:46 . 2012-06-15 14:38 83392 -c--a-w- c:\windows.0\system32\drivers\avgntflt.sys
2012-06-13 13:55 . 2008-04-14 05:45 1866112 -c--a-w- c:\windows.0\system32\win32k.sys
2012-06-05 15:49 . 2008-04-14 06:51 1372672 -c--a-w- c:\windows.0\system32\msxml6.dll
2012-06-05 15:49 . 2008-04-14 06:51 1172480 -c--a-w- c:\windows.0\system32\msxml3.dll
2012-06-04 20:33 . 2012-06-04 20:33 84480 -c--a-w- c:\documents and settings\All Users.WINDOWS.0\Data aplikací\Microsoft\USMT\iconlib.dll
2012-06-04 04:32 . 2008-04-14 06:51 152576 -c--a-w- c:\windows.0\system32\schannel.dll
2012-06-02 13:19 . 2009-08-06 17:24 15384 -c--a-w- c:\windows.0\system32\wuaucpl.cpl.mui
2012-06-02 13:19 . 2009-08-06 17:24 22552 -c--a-w- c:\windows.0\system32\wucltui.dll.mui
2012-06-02 13:19 . 2012-06-04 19:53 329240 -c--a-w- c:\windows.0\system32\wucltui.dll
2012-06-02 13:19 . 2012-06-04 19:53 219160 -c--a-w- c:\windows.0\system32\wuaucpl.cpl
2012-06-02 13:19 . 2012-06-04 19:53 210968 -c--a-w- c:\windows.0\system32\wuweb.dll
2012-06-02 13:19 . 2012-06-04 19:53 53784 -c--a-w- c:\windows.0\system32\wuauclt.exe
2012-06-02 13:19 . 2012-06-04 19:53 35864 -c--a-w- c:\windows.0\system32\wups.dll
2012-06-02 13:19 . 2009-08-06 17:24 45080 -c--a-w- c:\windows.0\system32\wups2.dll
2012-06-02 13:19 . 2009-08-06 17:24 18456 -c--a-w- c:\windows.0\system32\wuaueng.dll.mui
2012-06-02 13:19 . 2009-08-06 17:24 15384 -c--a-w- c:\windows.0\system32\wuapi.dll.mui
2012-06-02 13:19 . 2008-04-14 06:51 97304 -c--a-w- c:\windows.0\system32\cdm.dll
2012-06-02 13:19 . 2012-06-04 19:53 577048 -c--a-w- c:\windows.0\system32\wuapi.dll
2012-06-02 13:19 . 2012-06-04 19:53 1933848 -c--a-w- c:\windows.0\system32\wuaueng.dll
2012-05-31 13:22 . 2008-04-14 06:51 602112 -c--a-w- c:\windows.0\system32\crypt32.dll
2012-05-16 15:09 . 2008-04-14 06:52 916992 -c--a-w- c:\windows.0\system32\wininet.dll
2012-05-11 14:44 . 2008-04-14 06:52 1469440 -c----w- c:\windows.0\system32\inetcpl.cpl
2012-05-11 14:44 . 2008-04-14 06:51 43520 -c----w- c:\windows.0\system32\licmgr10.dll
2012-05-11 11:38 . 2008-04-14 05:50 385024 -c----w- c:\windows.0\system32\html.iec
2012-05-05 03:14 . 2008-04-14 08:06 2028544 -c--a-w- c:\windows.0\system32\ntkrnlpa.exe
2012-05-05 03:14 . 2008-04-14 06:06 2150400 -c--a-w- c:\windows.0\system32\ntoskrnl.exe
.
.
((((((((((((((((((((((((((((( SnapShot@2012-08-02_12.15.22 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-06-26 14:46 . 2012-08-02 13:54 212520 c:\windows.0\system32\inetsrv\MetaBase.bin
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2012-06-15 348624]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS.0\\system32\\usmt\\migwiz.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\WINDOWS.0\\system32\\muzapp.exe"=
"c:\\Program Files\\TP-LINK\\TP-LINK Wireless Client Utility\\TWCU.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Opera\\pluginwrapper\\opera_plugin_wrapper.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R1 avkmgr;avkmgr;c:\windows.0\system32\drivers\avkmgr.sys [15.6.2012 16:38 36000]
R2 AntiVirSchedulerService;Avira Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [15.6.2012 16:38 86224]
R2 dgdersvc;Device Error Recovery Service;c:\windows.0\system32\dgdersvc.exe [22.12.2009 4:31 95568]
R3 AR9271;Wireless Network Adapter Service;c:\windows.0\system32\drivers\athuw.sys [29.6.2012 21:42 1714176]
R3 dgderdrv;dgderdrv;c:\windows.0\system32\drivers\dgderdrv.sys [22.12.2009 4:31 18136]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [3.7.2012 13:19 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows.0\system32\Macromed\Flash\FlashPlayerUpdateService.exe [5.6.2012 18:04 250056]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows.0\system32\FsUsbExDisk.Sys [15.6.2012 16:57 36640]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.0.207\McCHSvc.exe [17.6.2011 19:33 237008]
S3 npggsvc;nProtect GameGuard Service;c:\windows.0\system32\GameMon.des -service --> c:\windows.0\system32\GameMon.des -service [?]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows.0\system32\drivers\ss_bbus.sys [15.6.2012 16:58 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows.0\system32\drivers\ss_bmdfl.sys [15.6.2012 16:58 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows.0\system32\drivers\ss_bmdm.sys [15.6.2012 16:58 123648]
S3 ss_bserd;SAMSUNG USB Mobile Logging Driver;c:\windows.0\system32\drivers\ss_bserd.sys [15.6.2012 16:58 100224]
S4 FsUsbExService;FsUsbExService;c:\windows.0\system32\FsUsbExService.Exe [15.6.2012 16:57 217088]
S4 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~1\mcafee\SITEAD~1\mcsacore.exe [16.7.2012 12:56 95200]
S4 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users.WINDOWS.0\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [5.7.2012 18:41 3048136]
.
Obsah adresáře 'Naplánované úlohy'
.
2012-08-02 c:\windows.0\Tasks\Adobe Flash Player Updater.job
- c:\windows.0\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-05 05:17]
.
2012-08-02 c:\windows.0\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-02-08 15:42]
.
2012-08-02 c:\windows.0\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-06-17 09:13]
.
2012-08-02 c:\windows.0\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-06-17 09:13]
.
2012-08-02 c:\windows.0\Tasks\User_Feed_Synchronization-{41D70D58-BB43-4BC2-8B4D-0D42CAD68699}.job
- c:\windows.0\system32\msfeedssync.exe [2009-03-08 02:31]
.
.
------- Doplňkový sken -------
.
TCP: DhcpNameServer = 192.168.1.1
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-08-02 15:54
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\npggsvc]
"ImagePath"="c:\windows.0\system32\GameMon.des -service"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1036)
c:\windows.0\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(2964)
c:\windows.0\system32\webcheck.dll
c:\windows.0\system32\WPDShServiceObj.dll
c:\windows.0\system32\PortableDeviceTypes.dll
c:\windows.0\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows.0\system32\Ati2evxx.exe
c:\windows.0\system32\Ati2evxx.exe
c:\windows.0\system32\acs.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\windows.0\system32\inetsrv\inetinfo.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
.
**************************************************************************
.
Celkový čas: 2012-08-02 15:57:42 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-08-02 13:57
ComboFix2.txt 2012-08-02 12:16
.
Před spuštěním: Volných bajtů: 108 188 135 424
Po spuštění: Volných bajtů: 108 171 255 808
.
- - End Of File - - 98C525B200FFAF3563F8E71D01CED48B

Stahnete OTM http://oldtimer.geekstogo.com/OTM.exe

Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize

Kód: Vybrat vše

:files
C:\WINDOWS.0\tasks\Adobe Flash Player Updater.job
C:\WINDOWS.0\tasks\Google Software Updater.job
C:\WINDOWS.0\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS.0\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS.0\tasks\GoogleUpdateTaskUserS-1-5-21-1214440339-117609710-1801674531-1005Core.job
C:\WINDOWS.0\tasks\GoogleUpdateTaskUserS-1-5-21-1214440339-117609710-1801674531-1005UA.job
C:\WINDOWS.0\tasks\User_Feed_Synchronization-{41D70D58-BB43-4BC2-8B4D-0D42CAD68699}.job
C:\WINDOWS.0\tasks\Your File Updater.job
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
[EMPTYJAVA]

Kliknete na cervene tlacitko MoveIt!
Budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles, obsah sem vlozte

tak mi to napsalo nejakou chybu(Cannot create file C:/WIDOWS.0/System32/drivers/ete/Hosts) a zmizely mi vsechny ikony! ted budu restartovat. pouzivam XP

Pak poprosim o novy log z RSIT a pokud najdete log z OTM budu rad

Logfile of random's system information tool 1.09 (written by random/random)
Run by x at 2012-08-02 17:06:10
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 103 GB (34%) free of 305 GB
Total RAM: 2047 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:06:18, on 2.8.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS.0\System32\smss.exe
C:\WINDOWS.0\system32\winlogon.exe
C:\WINDOWS.0\system32\services.exe
C:\WINDOWS.0\system32\lsass.exe
C:\WINDOWS.0\system32\Ati2evxx.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\System32\svchost.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\system32\Ati2evxx.exe
C:\WINDOWS.0\system32\spoolsv.exe
C:\WINDOWS.0\system32\acs.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS.0\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS.0\system32\dgdersvc.exe
C:\WINDOWS.0\system32\inetsrv\inetinfo.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\x\Dokumenty\Downloads\RSIT (1).exe
C:\Program Files\trend micro\x.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS.0\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS.0\system32\browseui.dll
O23 - Service: TP-LINK Configuration Service (ACS) - Atheros - C:\WINDOWS.0\system32\acs.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS.0\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS.0\system32\Ati2evxx.exe
O23 - Service: Device Error Recovery Service (dgdersvc) - Devguru Co., Ltd. - C:\WINDOWS.0\system32\dgdersvc.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS.0\system32\GameMon.des.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 4414 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2012-06-15 348624]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS.0\system32\Ati2evxx.dll [2006-11-29 90112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS.0\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS.0\system32\usmt\migwiz.exe"="C:\WINDOWS.0\system32\usmt\migwiz.exe:*:Enabled:Průvodce přenesením souborů a nastavení"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\WINDOWS.0\system32\muzapp.exe"="C:\WINDOWS.0\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
"C:\Program Files\TP-LINK\TP-LINK Wireless Client Utility\TWCU.exe"="C:\Program Files\TP-LINK\TP-LINK Wireless Client Utility\TWCU.exe:*:Enabled:TP-LINK Wireless Client Utility"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe"="C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe:*:Enabled:Opera Internet Browser - Plugin wrapper"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS.0\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS.0\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll

======List of files/folders created in the last 1 month======

2012-08-02 16:40:23 ----SHDC---- C:\RECYCLER
2012-08-02 16:33:59 ----DC---- C:\_OTM
2012-08-02 15:57:45 ----DC---- C:\WINDOWS.0\temp
2012-08-02 15:57:43 ----AC---- C:\ComboFix.txt
2012-08-02 15:43:13 ----DC---- C:\ComboFix
2012-08-02 13:55:24 ----AC---- C:\Boot.bak
2012-08-02 13:55:20 ----RASHDC---- C:\cmdcons
2012-08-02 13:50:32 ----AC---- C:\WINDOWS.0\zip.exe
2012-08-02 13:50:32 ----AC---- C:\WINDOWS.0\SWXCACLS.exe
2012-08-02 13:50:32 ----AC---- C:\WINDOWS.0\SWSC.exe
2012-08-02 13:50:32 ----AC---- C:\WINDOWS.0\SWREG.exe
2012-08-02 13:50:32 ----AC---- C:\WINDOWS.0\sed.exe
2012-08-02 13:50:32 ----AC---- C:\WINDOWS.0\PEV.exe
2012-08-02 13:50:32 ----AC---- C:\WINDOWS.0\NIRCMD.exe
2012-08-02 13:50:32 ----AC---- C:\WINDOWS.0\MBR.exe
2012-08-02 13:50:32 ----AC---- C:\WINDOWS.0\grep.exe
2012-08-02 13:50:21 ----DC---- C:\Qoobox
2012-08-02 13:50:08 ----DC---- C:\WINDOWS.0\erdnt
2012-07-20 16:35:55 ----DC---- C:\WINDOWS.0\Sun
2012-07-20 16:35:17 ----D---- C:\Program Files\Oracle
2012-07-20 16:35:07 ----AC---- C:\WINDOWS.0\system32\javaws.exe
2012-07-20 16:34:45 ----AC---- C:\WINDOWS.0\system32\javaw.exe
2012-07-20 16:34:45 ----AC---- C:\WINDOWS.0\system32\java.exe
2012-07-16 12:56:39 ----D---- C:\Program Files\Common Files\McAfee
2012-07-16 12:56:32 ----D---- C:\Program Files\McAfee
2012-07-14 16:16:49 ----DC---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\McAfee Security Scan
2012-07-14 16:16:43 ----DC---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\McAfee
2012-07-14 16:16:43 ----D---- C:\Program Files\McAfee Security Scan
2012-07-14 16:15:51 ----DC---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Adobe
2012-07-12 17:45:57 ----HDC---- C:\WINDOWS.0\$NtUninstallKB2691442$
2012-07-12 17:45:49 ----HDC---- C:\WINDOWS.0\$NtUninstallKB2718523$
2012-07-12 17:45:43 ----HDC---- C:\WINDOWS.0\$NtUninstallKB2655992$
2012-07-12 17:45:30 ----HDC---- C:\WINDOWS.0\$NtUninstallKB2719985$
2012-07-11 22:22:58 ----HDC---- C:\WINDOWS.0\$NtUninstallKB2698365$
2012-07-10 15:26:01 ----DC---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Martau
2012-07-10 15:25:58 ----D---- C:\Program Files\Total Uninstall 5
2012-07-09 15:35:44 ----DC---- C:\WINDOWS.0\system32\Adobe
2012-07-08 12:26:54 ----DC---- C:\Documents and Settings\x\Data aplikací\DDMSettings
2012-07-08 12:15:42 ----DC---- C:\Documents and Settings\x\Data aplikací\DivX
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\vxblock.dll
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxwave.dll
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxsfs.dll
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxmas.dll
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxinsi64.exe
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxinsa64.exe
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxhpinst.exe
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxdrv.dll
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxcpyi64.exe
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxcpya64.exe
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\pxafs.dll
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\drivers\PxHelp20.sys
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\drivers\cdralw2k.sys
2012-07-08 12:15:26 ----C---- C:\WINDOWS.0\system32\drivers\cdr4_xp.sys
2012-07-08 12:15:25 ----C---- C:\WINDOWS.0\system32\px.dll
2012-07-08 12:13:57 ----DC---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\DivX
2012-07-06 09:03:28 ----D---- C:\Program Files\ClocX
2012-07-05 19:44:49 ----DC---- C:\Documents and Settings\x\Data aplikací\Desktop Sidebar
2012-07-05 19:43:53 ----D---- C:\Program Files\Desktop Sidebar
2012-07-03 19:08:22 ----AC---- C:\WINDOWS.0\stinger.sys

======List of files/folders modified in the last 1 month======

2012-08-02 17:06:18 ----DC---- C:\WINDOWS.0\Prefetch
2012-08-02 17:06:12 ----D---- C:\Program Files\Trend Micro
2012-08-02 17:02:20 ----DC---- C:\WINDOWS.0\system32\inetsrv
2012-08-02 16:34:00 ----DC---- C:\WINDOWS.0
2012-08-02 16:33:59 ----SDC---- C:\WINDOWS.0\Tasks
2012-08-02 15:57:45 ----DC---- C:\WINDOWS.0\system32\drivers
2012-08-02 15:54:21 ----AC---- C:\WINDOWS.0\system.ini
2012-08-02 15:53:55 ----DC---- C:\WINDOWS.0\system32\drivers\etc
2012-08-02 15:52:16 ----DC---- C:\WINDOWS.0\system32\config
2012-08-02 15:49:56 ----DC---- C:\WINDOWS.0\system32
2012-08-02 15:49:56 ----DC---- C:\WINDOWS.0\AppPatch
2012-08-02 15:49:54 ----D---- C:\Program Files\Common Files
2012-08-02 15:43:25 ----AC---- C:\WINDOWS.0\SchedLgU.Txt
2012-08-02 15:13:25 ----DC---- C:\WINDOWS.0\system32\CatRoot2
2012-08-02 14:14:54 ----RD---- C:\Program Files
2012-08-02 13:55:24 ----RASHC---- C:\boot.ini
2012-08-02 13:47:00 ----DC---- C:\Documents and Settings\x\Data aplikací\uTorrent
2012-08-01 21:58:36 ----D---- C:\filmy-hry
2012-08-01 21:58:02 ----DC---- C:\Documents and Settings\x\Data aplikací\vlc
2012-08-01 19:34:07 ----DC---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Google Updater
2012-07-31 20:22:52 ----DC---- C:\WINDOWS.0\system32\Logfiles
2012-07-29 14:15:31 ----RSDC---- C:\WINDOWS.0\assembly
2012-07-29 14:12:32 ----DC---- C:\WINDOWS.0\Microsoft.NET
2012-07-29 09:00:59 ----DC---- C:\foto-miminko
2012-07-28 21:50:25 ----SHDC---- C:\WINDOWS.0\Installer
2012-07-28 21:50:25 ----DC---- C:\Config.Msi
2012-07-28 21:49:22 ----DC---- C:\WINDOWS.0\WinSxS
2012-07-28 21:49:20 ----AC---- C:\WINDOWS.0\system32\PerfStringBackup.INI
2012-07-28 07:17:25 ----AC---- C:\WINDOWS.0\system32\FlashPlayerApp.exe
2012-07-27 15:41:38 ----DC---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Avira
2012-07-27 15:41:02 ----D---- C:\Program Files\Avira
2012-07-27 15:40:40 ----DC---- C:\WINDOWS.0\system32\cs-cz
2012-07-27 15:36:41 ----DC---- C:\WINDOWS.0\system32\en-US
2012-07-27 15:36:32 ----D---- C:\Program Files\Microsoft.NET
2012-07-25 17:14:27 ----DC---- C:\Documents and Settings\x\Data aplikací\Skype
2012-07-25 15:33:09 ----DC---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Skype
2012-07-22 18:44:17 ----SHD---- C:\System Volume Information
2012-07-22 18:42:45 ----DC---- C:\WINDOWS.0\system32\NtmsData
2012-07-22 17:18:11 ----DC---- C:\WINDOWS.0\Registration
2012-07-20 16:34:43 ----D---- C:\Program Files\Java
2012-07-18 14:19:54 ----HDC---- C:\WINDOWS.0\inf
2012-07-17 15:34:53 ----DC---- C:\WINDOWS.0\Debug
2012-07-16 13:17:23 ----D---- C:\Program Files\Opera
2012-07-14 16:17:21 ----SDC---- C:\Documents and Settings\x\Data aplikací\Microsoft
2012-07-14 16:17:21 ----DC---- C:\Documents and Settings\x\Data aplikací\Adobe
2012-07-12 17:46:01 ----DC---- C:\WINDOWS.0\system32\dllcache
2012-07-12 17:45:48 ----HDC---- C:\WINDOWS.0\$hf_mig$
2012-07-11 22:23:10 ----AC---- C:\WINDOWS.0\system32\MRT.exe
2012-07-09 19:38:50 ----D---- C:\Program Files\uTorrent
2012-07-08 12:15:51 ----D---- C:\Program Files\DivX
2012-07-08 12:15:50 ----D---- C:\Program Files\Common Files\DivX Shared
2012-07-06 13:09:27 ----DC---- C:\foto-kurim
2012-07-05 22:06:30 ----AC---- C:\WINDOWS.0\system32\npDeployJava1.dll
2012-07-05 22:06:20 ----AC---- C:\WINDOWS.0\system32\deployJava1.dll
2012-07-03 19:23:46 ----DC---- C:\WINDOWS.0\Minidump

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 JGOGO;JMicron Hot-Plug Driver; C:\WINDOWS.0\system32\DRIVERS\JGOGO.sys [2006-02-07 6912]
R0 JRAID;JRAID; C:\WINDOWS.0\system32\DRIVERS\jraid.sys [2006-10-30 43648]
R0 PxHelp20;PxHelp20; C:\WINDOWS.0\System32\Drivers\PxHelp20.sys [2011-11-29 45648]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS.0\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 avipbb;avipbb; C:\WINDOWS.0\system32\DRIVERS\avipbb.sys [2012-06-15 137928]
R1 avkmgr;avkmgr; C:\WINDOWS.0\system32\DRIVERS\avkmgr.sys [2011-12-09 36000]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS.0\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS.0\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 ssmdrv;ssmdrv; C:\WINDOWS.0\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS.0\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 avgntflt;avgntflt; C:\WINDOWS.0\system32\DRIVERS\avgntflt.sys [2012-06-15 83392]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS.0\system32\drivers\ADIHdAud.sys [2007-01-16 293888]
R3 AEAudio;AE Audio Service; C:\WINDOWS.0\system32\drivers\AEAudio.sys [2006-08-07 93952]
R3 AR9271;Wireless Network Adapter Service; C:\WINDOWS.0\system32\DRIVERS\athuw.sys [2010-01-05 1714176]
R3 ati2mtag;ati2mtag; C:\WINDOWS.0\system32\DRIVERS\ati2mtag.sys [2006-11-29 2830336]
R3 dgderdrv;dgderdrv; C:\WINDOWS.0\System32\drivers\dgderdrv.sys [2009-12-22 18136]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS.0\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS.0\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS.0\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS.0\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS.0\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS.0\system32\DRIVERS\Rtenicxp.sys [2006-07-27 83712]
R3 SenFiltService;SenFilt Service; C:\WINDOWS.0\system32\drivers\Senfilt.sys [2006-03-17 392960]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS.0\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS.0\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 WSIMD;wsimd Service; C:\WINDOWS.0\system32\DRIVERS\wsimd.sys [2010-05-21 58208]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS.0\system32\FsUsbExDisk.SYS []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS.0\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\WINDOWS.0\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\WINDOWS.0\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\WINDOWS.0\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
S3 ss_bserd;SAMSUNG USB Mobile Logging Driver; C:\WINDOWS.0\system32\DRIVERS\ss_bserd.sys [2009-09-19 100224]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS.0\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS.0\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS.0\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACS;TP-LINK Configuration Service; C:\WINDOWS.0\system32\acs.exe [2010-05-21 499796]
R2 AntiVirService;Avira Realtime Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2012-06-15 110032]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2012-06-15 86224]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS.0\system32\Ati2evxx.exe [2006-11-29 430080]
R2 dgdersvc;Device Error Recovery Service; C:\WINDOWS.0\system32\dgdersvc.exe [2009-12-22 95568]
R2 IISADMIN;Správa služby IIS; C:\WINDOWS.0\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 W3SVC;Publikování na webu; C:\WINDOWS.0\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS.0\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS.0\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-07-03 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS.0\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-28 250056]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS.0\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe [2011-06-17 237008]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS.0\system32\GameMon.des [2012-04-05 3969336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS.0\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 ATI Smart;ATI Smart; C:\WINDOWS.0\system32\ati2sgag.exe [2006-11-28 520192]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS.0\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 FsUsbExService;FsUsbExService; C:\WINDOWS.0\system32\FsUsbExService.Exe [2009-12-22 217088]
S4 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [2012-01-13 95200]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-11-11 620544]
S4 Skype C2C Service;Skype C2C Service; C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-07-05 3048136]

-----------------EOF-----------------

jeste mrknu po tom druhem: zde

Files moved on Reboot...
File move failed. C:\WINDOWS.0\System32\drivers\etc\Hosts scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Files moved on Reboot...
File move failed. C:\WINDOWS.0\System32\drivers\etc\Hosts scheduled to be moved on reboot.

Registry entries deleted on Reboot...

OK, ComboFix spolu s OTM udelali co mely

Tak jeste uklidime

Odinstalujte Combofix

Prejmenujte ComboFix na Uninstall
Spustte jej
Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

Napiste co PC

tak vse jsem udelal podle vas (CCleaner pouzivam) a vypada to ze vse je v naprostem poradku

moc vam dekuji za pomoc!!!

Nemate zac, rad jsem pomohl

Zase nekdy Obrázek

VIRY.CZ

prosim o kontrolu

prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu