VIRY.CZ

Zdravim,
mam mesic nove PC a nejak me zlobi prohlizec Firefox. Pouzivám verzi 3.5.7 a obcas mi vyhodi hlasku, ze se se serverem nejde spojit a stranku nenacte, ale kdyz dam refresh stranka najede. V posledni dobe se hlaska zmenila v popup okno "Firefox nemůže nalézt www.jakakoliv_adresa_.cz" a nactese az tak na 3-4 refresh. Zkousel sem Spyboy, Ad-adware, Kaspersky ale zadny vir nebo problem jsem nenasel... Diky za pomoc.

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrator at 2010-01-10 09:50:42
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 50 GB (82%) free of 60 GB
Total RAM: 3327 MB (88% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:50:44, on 10.1.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWZZ\System32\smss.exe
C:\WINDOWZZ\system32\winlogon.exe
C:\WINDOWZZ\system32\services.exe
C:\WINDOWZZ\system32\lsass.exe
C:\WINDOWZZ\system32\nvsvc32.exe
C:\WINDOWZZ\system32\svchost.exe
C:\WINDOWZZ\System32\svchost.exe
C:\WINDOWZZ\system32\spoolsv.exe
C:\Program Files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWZZ\system32\PnkBstrA.exe
C:\WINDOWZZ\Explorer.EXE
C:\WINDOWZZ\system32\PnkBstrB.exe
C:\WINDOWZZ\system32\svchost.exe
C:\WINDOWZZ\System32\TUProgSt.exe
C:\WINDOWZZ\system32\RUNDLL32.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\ASUS\Six Engine\SixEngine.exe
C:\WINDOWZZ\system32\RUNDLL32.EXE
C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe
C:\Program Files\ASUS\AI Suite\QFan3\QFanHelp.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
C:\WINDOWZZ\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\WINDOWZZ\system32\wuauclt.exe
D:\Downloadzz\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [Six Engine] "C:\Program Files\ASUS\Six Engine\SixEngine.exe" -b
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWZZ\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWZZ\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe"
O4 - HKLM\..\Run: [QFan Help] "C:\Program Files\ASUS\AI Suite\QFan3\QFanHelp.exe"
O4 - HKLM\..\Run: [Cpu Level Up help] "C:\Program Files\ASUS\AI Suite\CpuLevelUpHelp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWZZ\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\RunOnce: [WiseStubReboot] MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I "C:\Program Files\Common Files\Wise Installation Wizard\WISC5C1C0F0D62F4DBF81D4D7EF397C228B_9_09_0814.MSI" TRANSFORMS="C:\Program Files\Common Files\Wise Installation Wizard\WISC5C1C0F0D62F4DBF81D4D7EF397C228B_9_09_0814.MST" WISE_SETUP_EXE_PATH="c:\nvidia\displaydriver\191.07\winxp\international\PhysX_9.09.0814_SystemSoftware.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWZZ\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_01] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWZZ\Cursors" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_03] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWZZ\Connection Wizard" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_04] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWZZ\system32\NtmsData" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_05] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWZZ\Srchasst" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_06] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWZZ\msagent" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_07] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWZZ\system32\Oobe" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_08] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWZZ\Tasks" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_09] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWZZ\Help\Tours" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_16] cmd.exe /c md "%USERPROFILE%\Local Settings\Temp" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_17] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_18] rundll32 advpack.dll,LaunchINFSection nlite.inf,nLiteReg (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_19] rundll32 advpack.dll,LaunchINFSection nlite.inf,S (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWZZ\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nlpo_01] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWZZ\Cursors" (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWZZ\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWZZ\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: &Virtuální klávesnice - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll
O9 - Extra button: &Kontrola adres URL - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWZZ\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWZZ\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: ASUS System Control Service (AsSysCtrlService) - Unknown owner - C:\Program Files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWZZ\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWZZ\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWZZ\system32\PnkBstrB.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWZZ\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWZZ\System32\TUProgSt.exe
O23 - Service: Marvell Yukon Service (yksvc) - Unknown owner - RUNDLL32.EXE (file missing)

--
End of file - 7985 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll [2009-10-20 68112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll [2009-10-20 268816]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2008-03-16 1040384]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2008-03-24 884736]
"Six Engine"=C:\Program Files\ASUS\Six Engine\SixEngine.exe [2009-06-26 6036992]
"NvMediaCenter"=C:\WINDOWZZ\system32\NvMcTray.dll [2009-09-27 86016]
"NvCplDaemon"=C:\WINDOWZZ\system32\NvCpl.dll [2009-09-27 13918208]
"Ai Nap"=C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe [2009-07-01 1435136]
"QFan Help"=C:\Program Files\ASUS\AI Suite\QFan3\QFanHelp.exe [2009-07-01 601088]
"Cpu Level Up help"=C:\Program Files\ASUS\AI Suite\CpuLevelUpHelp.exe [2007-11-30 881152]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe [2009-10-20 340456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWZZ\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WiseStubReboot"=MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I C:\Program Files\Common Files\Wise Installation Wizard\WISC5C1C0F0D62F4DBF81D4D7EF397C228B_9_09_0814.MSI TRANSFORMS=C:\Program Files\Common Files\Wise Installation Wizard\WISC5C1C0F0D62F4DBF81D4D7EF397C228B_9_09_0814.MST WISE_SETUP_EXE_PATH=c:\nvidia\displaydriver\191.07\winxp\international\PhysX_9.09.0814_SystemSoftware.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\WINDOWZZ\system32\klogon.dll [2009-10-20 219664]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoSMMyPictures"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceClassicControlPanel"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\Miranda IM\miranda32.exe"="C:\Program Files\Miranda IM\miranda32.exe:*:Enabled:Miranda IM"
"C:\WINDOWZZ\system32\PnkBstrA.exe"="C:\WINDOWZZ\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWZZ\system32\PnkBstrB.exe"="C:\WINDOWZZ\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Total Commander\TOTALCMD.EXE"="C:\Program Files\Total Commander\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"D:\Gamezz\Wolfenstein - Enemy Territory\ET.exe"="D:\Gamezz\Wolfenstein - Enemy Territory\ET.exe:*:Enabled:ET"
"D:\Gamezz\Call of Duty 4 - Modern Warfare\iw3mp.exe"="D:\Gamezz\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"F:\Programzz\Miranda IM\miranda32.exe"="F:\Programzz\Miranda IM\miranda32.exe:*:Enabled:Miranda IM"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{99419481-f3b8-11de-a4a6-002618aa73d7}]
shell\AutoRun\command - RECYCLER\usbv.exe
shell\open\command - RECYCLER\usbv.exe


======List of files/folders created in the last 1 months======

2010-01-08 20:06:36 ----SHD---- C:\Config.Msi
2010-01-07 13:52:25 ----D---- C:\Program Files\Kaspersky Lab
2010-01-07 13:52:25 ----D---- C:\Documentzz\All Users\Data aplikací\Kaspersky Lab
2010-01-07 13:50:05 ----D---- C:\Documentzz\All Users\Data aplikací\Kaspersky Lab Setup Files
2010-01-06 18:15:22 ----A---- C:\WINDOWZZ\system32\NCTWMAFile2.dll
2010-01-06 18:15:22 ----A---- C:\WINDOWZZ\system32\NCTTextToAudio2.dll
2010-01-06 18:15:22 ----A---- C:\WINDOWZZ\system32\NCTAudioVisualizationEx2.dll
2010-01-06 18:15:22 ----A---- C:\WINDOWZZ\system32\NCTAudioVisualization2.dll
2010-01-06 18:15:22 ----A---- C:\WINDOWZZ\system32\NCTAudioTransform2.dll
2010-01-06 18:15:22 ----A---- C:\WINDOWZZ\system32\NCTAudioRecord2.dll
2010-01-06 18:15:22 ----A---- C:\WINDOWZZ\system32\NCTAudioPlayer2.dll
2010-01-06 18:15:22 ----A---- C:\WINDOWZZ\system32\NCTAudioInformation2.dll
2010-01-06 18:15:22 ----A---- C:\WINDOWZZ\system32\NCTAudioFile2.dll
2010-01-06 18:15:22 ----A---- C:\WINDOWZZ\system32\NCTAudioEditor2.dll
2010-01-06 18:15:22 ----A---- C:\WINDOWZZ\system32\NCTAudioDisplay2.dll
2010-01-06 18:15:22 ----A---- C:\WINDOWZZ\system32\NCTAudioDesign2.dll
2010-01-06 18:15:22 ----A---- C:\WINDOWZZ\system32\NCTAudioCDGrabber2.dll
2010-01-06 18:15:22 ----A---- C:\WINDOWZZ\system32\msvcr70.dll
2010-01-06 18:15:21 ----D---- C:\Program Files\Free Sound Recorder
2010-01-06 16:45:48 ----D---- C:\RSIT
2010-01-06 16:45:48 ----D---- C:\Program Files\trend micro
2010-01-06 16:11:22 ----D---- C:\Documentzz\Administrator\Data aplikací\Lavasoft
2010-01-06 16:06:40 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-01-06 16:06:40 ----D---- C:\Documentzz\All Users\Data aplikací\Spybot - Search & Destroy
2010-01-06 15:31:06 ----D---- C:\Program Files\Lavasoft
2010-01-06 15:05:43 ----D---- C:\Documentzz\All Users\Data aplikací\Lavasoft
2010-01-05 10:20:27 ----D---- C:\Documentzz\Administrator\Data aplikací\skypePM
2010-01-05 09:35:22 ----HD---- C:\Documentzz\All Users\Data aplikací\CanonBJ
2010-01-05 09:35:19 ----HD---- C:\WINDOWZZ\system32\CanonIJ Uninstaller Information
2010-01-05 09:35:19 ----A---- C:\WINDOWZZ\system32\CNMLM9E.DLL
2010-01-05 09:35:15 ----A---- C:\WINDOWZZ\system32\CNC540O.DLL
2010-01-05 09:35:15 ----A---- C:\WINDOWZZ\system32\CNC540L.DLL
2010-01-05 09:35:15 ----A---- C:\WINDOWZZ\system32\CNC540I.DLL
2010-01-05 09:35:15 ----A---- C:\WINDOWZZ\system32\CNC540C.DLL
2010-01-05 09:35:11 ----HD---- C:\Program Files\CanonBJ
2010-01-05 08:41:48 ----D---- C:\Program Files\FireTune
2010-01-04 18:59:51 ----D---- C:\Documentzz\Administrator\Data aplikací\Skype
2010-01-04 18:46:11 ----D---- C:\Program Files\Common Files\Skype
2010-01-04 18:46:10 ----RD---- C:\Program Files\Skype
2010-01-04 18:46:08 ----D---- C:\Documentzz\All Users\Data aplikací\Skype
2010-01-04 18:23:28 ----D---- C:\Documentzz\All Users\Data aplikací\FLEXnet
2010-01-04 17:50:53 ----D---- C:\Program Files\Bonjour
2010-01-04 17:47:39 ----D---- C:\Program Files\Common Files\Macrovision Shared
2010-01-03 18:24:38 ----A---- C:\WINDOWZZ\game.ini
2010-01-03 18:18:38 ----SHD---- C:\WINDOWZZ\ftpcache
2009-12-30 19:24:00 ----D---- C:\Documentzz\All Users\Data aplikací\Adobe
2009-12-30 19:23:58 ----D---- C:\Program Files\Common Files\Adobe
2009-12-30 19:23:58 ----D---- C:\Program Files\Adobe
2009-12-30 13:48:35 ----A---- C:\WINDOWZZ\ODBC.INI
2009-12-30 13:48:33 ----A---- C:\WINDOWZZ\system32\mdimon.dll
2009-12-29 21:14:34 ----A---- C:\WINDOWZZ\system32\TUProgSt.exe
2009-12-29 21:14:33 ----A---- C:\WINDOWZZ\system32\uxtuneup.dll
2009-12-29 21:14:32 ----A---- C:\WINDOWZZ\system32\TuneUpDefragService.exe
2009-12-29 21:14:00 ----D---- C:\Program Files\TuneUp Utilities 2009
2009-12-29 21:13:39 ----SHD---- C:\Documentzz\All Users\Data aplikací\{55A29068-F2CE-456C-9148-C869879E2357}
2009-12-29 18:53:44 ----D---- C:\Program Files\PunkBuster
2009-12-29 18:23:14 ----RD---- C:\Program Files\HLSW
2009-12-29 18:23:14 ----D---- C:\Documentzz\Administrator\Data aplikací\HLSW
2009-12-28 14:55:03 ----D---- C:\Program Files\PSPad editor
2009-12-27 14:36:11 ----D---- C:\Documentzz\Administrator\Data aplikací\Thunderbird
2009-12-27 14:35:43 ----D---- C:\Program Files\Mozilla Thunderbird
2009-12-27 12:12:32 ----D---- C:\Program Files\DAEMON Tools Lite
2009-12-27 12:12:02 ----D---- C:\Documentzz\Administrator\Data aplikací\DAEMON Tools Lite
2009-12-27 12:12:00 ----D---- C:\Documentzz\All Users\Data aplikací\DAEMON Tools Lite
2009-12-27 11:47:08 ----D---- C:\Program Files\Total Commander
2009-12-27 11:47:08 ----D---- C:\Documentzz\Administrator\Data aplikací\GHISLER
2009-12-27 11:22:06 ----D---- C:\Documentzz\Administrator\Data aplikací\WinRAR
2009-12-27 11:21:28 ----D---- C:\Program Files\WinRAR
2009-12-27 11:19:10 ----D---- C:\WINDOWZZ\SoftwareDistribution
2009-12-27 11:15:58 ----N---- C:\WINDOWZZ\system32\msxml6r.dll
2009-12-27 11:15:58 ----N---- C:\WINDOWZZ\system32\msxml6.dll
2009-12-27 11:15:58 ----D---- C:\Program Files\Messenger
2009-12-27 11:15:56 ----N---- C:\WINDOWZZ\system32\smtpapi.dll
2009-12-27 11:15:56 ----N---- C:\WINDOWZZ\system32\rwnh.dll
2009-12-27 11:15:56 ----N---- C:\WINDOWZZ\system32\comsdupd.exe
2009-12-27 11:15:55 ----N---- C:\WINDOWZZ\system32\bitsprx4.dll
2009-12-27 11:15:55 ----N---- C:\WINDOWZZ\system32\azroles.dll
2009-12-27 11:15:55 ----N---- C:\WINDOWZZ\system32\ativvaxx.dll
2009-12-27 11:15:55 ----N---- C:\WINDOWZZ\system32\ativtmxx.dll
2009-12-27 11:15:55 ----N---- C:\WINDOWZZ\system32\ati3duag.dll
2009-12-27 11:15:55 ----N---- C:\WINDOWZZ\system32\ati3d1ag.dll
2009-12-27 11:15:55 ----N---- C:\WINDOWZZ\system32\ati2dvag.dll
2009-12-27 11:15:55 ----N---- C:\WINDOWZZ\system32\ati2dvaa.dll
2009-12-27 11:15:55 ----N---- C:\WINDOWZZ\system32\ati2cqag.dll
2009-12-27 11:15:55 ----N---- C:\WINDOWZZ\system32\aaclient.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\kbdbhc.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\hsfcisp2.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\eapsvc.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\eapqec.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\eappprxy.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\eapphost.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\eappgnui.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\eappcfg.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\eapp3hst.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\eapolqec.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\dot3ui.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\dot3svc.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\dot3msm.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\dot3gpclnt.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\dot3dlg.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\dot3cfg.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\dot3api.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\dimsroam.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\dimsntfy.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\dhcpqec.dll
2009-12-27 11:15:54 ----N---- C:\WINDOWZZ\system32\credssp.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\slserv.exe
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\slrundll.exe
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\slgen.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\slextspk.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\slcoinst.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\setupn.exe
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\s3gnb.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\rhttpaa.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\rasqec.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\qutil.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\qcliprov.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\qagentrt.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\qagent.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\pnrpnsp.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\photometadatahandler.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\p2psvc.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\p2pnetsh.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\p2pgraph.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\p2pgasvc.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\p2p.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\onex.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\napstat.exe
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\napmontr.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\napipsec.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\mtxparhd.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\msshavmsg.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\mssha.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\mmcperf.exe
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\mmcfxcommon.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\mmcex.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\microsoft.managementconsole.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\mdmxsdk.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\l2gpstore.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\kmsvc.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\kbdpash.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\kbdnepr.dll
2009-12-27 11:15:53 ----N---- C:\WINDOWZZ\system32\kbdiultn.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\xpsp3res.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\xmllite.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\wuweb.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\wups.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\wucltui.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\wuauserv.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\wuaueng1.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\wuaueng.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\wuauclt1.exe
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\wuauclt.exe
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\wuapi.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\wscsvc.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\wscntfy.exe
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\wmphoto.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\wlanapi.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\windowscodecsext.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\windowscodecs.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\verclsid.exe
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\tzchange.exe
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\tspkg.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\system32\tsgqec.dll
2009-12-27 11:15:52 ----N---- C:\WINDOWZZ\slrundll.exe
2009-12-27 11:15:52 ----D---- C:\WINDOWZZ\system32\cs-cz
2009-12-27 11:15:51 ----D---- C:\WINDOWZZ\system32\cs
2009-12-27 11:15:51 ----D---- C:\WINDOWZZ\system32\bits
2009-12-27 11:15:51 ----D---- C:\WINDOWZZ\l2schemas
2009-12-27 11:15:17 ----D---- C:\WINDOWZZ\ServicePackFiles
2009-12-27 11:14:50 ----N---- C:\WINDOWZZ\system32\mplay32.exe
2009-12-27 11:14:38 ----N---- C:\WINDOWZZ\system32\shmedia.dll
2009-12-27 11:14:30 ----D---- C:\WINDOWZZ\network diagnostic
2009-12-27 11:13:51 ----A---- C:\WINDOWZZ\002231_.tmp
2009-12-27 11:12:53 ----D---- C:\WINDOWZZ\EHome
2009-12-26 15:43:13 ----D---- C:\Program Files\OpenAL
2009-12-26 15:43:13 ----A---- C:\WINDOWZZ\system32\wrap_oal.dll
2009-12-26 15:43:13 ----A---- C:\WINDOWZZ\system32\OpenAL32.dll
2009-12-26 15:34:24 ----D---- C:\Documentzz\Administrator\Data aplikací\Media Player Classic
2009-12-26 15:33:10 ----A---- C:\WINDOWZZ\system32\unrar.dll
2009-12-26 15:33:10 ----A---- C:\WINDOWZZ\system32\rmoc3260.dll
2009-12-26 15:33:10 ----A---- C:\WINDOWZZ\system32\pndx5032.dll
2009-12-26 15:33:10 ----A---- C:\WINDOWZZ\system32\pndx5016.dll
2009-12-26 15:33:10 ----A---- C:\WINDOWZZ\system32\pncrt.dll
2009-12-26 15:33:10 ----A---- C:\WINDOWZZ\avisplitter.ini
2009-12-26 15:33:09 ----A---- C:\WINDOWZZ\system32\yv12vfw.dll
2009-12-26 15:33:09 ----A---- C:\WINDOWZZ\system32\xvidvfw.dll
2009-12-26 15:33:09 ----A---- C:\WINDOWZZ\system32\xvidcore.dll
2009-12-26 15:33:08 ----A---- C:\WINDOWZZ\system32\qt-dx331.dll
2009-12-26 15:33:08 ----A---- C:\WINDOWZZ\system32\dpl100.dll
2009-12-26 15:33:08 ----A---- C:\WINDOWZZ\system32\divx.dll
2009-12-26 15:33:07 ----A---- C:\WINDOWZZ\system32\msvcp71.dll
2009-12-26 15:33:07 ----A---- C:\WINDOWZZ\system32\ff_vfw.dll.manifest
2009-12-26 15:33:07 ----A---- C:\WINDOWZZ\system32\ff_vfw.dll
2009-12-26 15:33:06 ----D---- C:\Program Files\K-Lite Codec Pack
2009-12-26 15:33:06 ----A---- C:\WINDOWZZ\system32\msvcr71.dll
2009-12-26 15:28:05 ----SHD---- C:\RECYCLER
2009-12-26 15:23:54 ----D---- C:\WINDOWZZ\system32\Futuremark
2009-12-26 15:23:54 ----D---- C:\Program Files\Common Files\Futuremark Shared
2009-12-26 15:23:12 ----D---- C:\Program Files\Futuremark
2009-12-26 14:47:31 ----A---- C:\WINDOWZZ\system32\PnkBstrB.exe
2009-12-26 14:47:13 ----D---- C:\Documentzz\Administrator\Data aplikací\id Software
2009-12-26 14:47:10 ----D---- C:\WINDOWZZ\system32\LogFiles
2009-12-26 14:47:10 ----D---- C:\Documentzz\All Users\Data aplikací\id Software
2009-12-26 14:47:10 ----A---- C:\WINDOWZZ\system32\PnkBstrA.exe
2009-12-26 14:47:10 ----A---- C:\WINDOWZZ\system32\pbsvc.exe
2009-12-24 21:55:59 ----D---- C:\Documentzz\Administrator\Data aplikací\Miranda
2009-12-24 21:55:40 ----D---- C:\Program Files\Miranda IM
2009-12-24 18:05:07 ----D---- C:\WINDOWZZ\RegisteredPackages
2009-12-24 17:59:40 ----D---- C:\Program Files\Winamp
2009-12-24 17:59:40 ----D---- C:\Documentzz\Administrator\Data aplikací\Winamp

======List of files/folders modified in the last 1 months======

2010-01-09 18:24:14 ----D---- C:\Program Files\Mozilla Firefox
2010-01-08 20:06:56 ----SHD---- C:\WINDOWZZ\Installer
2010-01-08 20:06:48 ----D---- C:\WINDOWZZ\pchealth
2010-01-08 20:06:48 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-01-08 20:06:48 ----D---- C:\Program Files
2010-01-08 20:06:47 ----RSD---- C:\WINDOWZZ\Fonts
2010-01-08 20:06:45 ----HD---- C:\WINDOWZZ\inf
2010-01-08 20:06:45 ----D---- C:\WINDOWZZ\system32
2010-01-08 20:06:45 ----D---- C:\WINDOWZZ
2010-01-08 20:06:45 ----D---- C:\Program Files\Common Files
2010-01-07 14:03:41 ----SHD---- C:\System Volume Information
2010-01-07 13:52:51 ----D---- C:\WINDOWZZ\system32\drivers
2010-01-07 13:52:21 ----D---- C:\WINDOWZZ\system32\CatRoot2
2010-01-06 20:05:54 ----D---- C:\Documentzz\Administrator\Data aplikací\Adobe
2010-01-06 16:11:56 ----D---- C:\Program Files\SpeedFan
2010-01-06 16:11:15 ----SD---- C:\Documentzz\All Users\Data aplikací\Microsoft
2010-01-05 10:45:52 ----HDC---- C:\WINDOWZZ\$NtUninstallKB888111WXPSP2$
2010-01-05 09:35:59 ----RSHDC---- C:\WINDOWZZ\system32\dllcache
2010-01-05 09:35:55 ----D---- C:\WINDOWZZ\Media
2010-01-05 09:35:19 ----D---- C:\WINDOWZZ\twain_32
2010-01-04 17:47:47 ----D---- C:\WINDOWZZ\WinSxS
2010-01-03 18:30:29 ----HD---- C:\Program Files\InstallShield Installation Information
2009-12-30 21:01:27 ----SD---- C:\Documentzz\Administrator\Data aplikací\Microsoft
2009-12-30 13:40:30 ----D---- C:\WINDOWZZ\system
2009-12-29 21:14:11 ----D---- C:\WINDOWZZ\system32\config
2009-12-27 17:50:42 ----A---- C:\WINDOWZZ\Ascd_tmp.ini
2009-12-27 16:34:05 ----D---- C:\Program Files\ASUS
2009-12-27 11:54:34 ----D---- C:\Program Files\Steam
2009-12-27 11:20:17 ----A---- C:\WINDOWZZ\system32\PerfStringBackup.INI
2009-12-27 11:19:20 ----D---- C:\WINDOWZZ\Temp
2009-12-27 11:18:43 ----D---- C:\WINDOWZZ\system32\wbem
2009-12-27 11:18:43 ----D---- C:\WINDOWZZ\system32\Setup
2009-12-27 11:18:43 ----D---- C:\WINDOWZZ\AppPatch
2009-12-27 11:17:54 ----D---- C:\WINDOWZZ\security
2009-12-27 11:17:17 ----D---- C:\WINDOWZZ\system32\CatRoot
2009-12-27 11:15:59 ----D---- C:\WINDOWZZ\Help
2009-12-27 11:15:58 ----D---- C:\Program Files\Windows Media Player
2009-12-27 11:15:55 ----D---- C:\WINDOWZZ\system32\inetsrv
2009-12-27 11:15:55 ----D---- C:\WINDOWZZ\ime
2009-12-27 11:15:52 ----D---- C:\WINDOWZZ\system32\usmt
2009-12-27 11:15:52 ----D---- C:\WINDOWZZ\system32\oobe
2009-12-27 11:15:52 ----D---- C:\Program Files\Internet Explorer
2009-12-27 11:15:51 ----D---- C:\WINDOWZZ\PeerNet
2009-12-27 11:15:51 ----D---- C:\Program Files\Movie Maker
2009-12-27 11:15:14 ----D---- C:\WINDOWZZ\system32\Restore
2009-12-27 11:15:14 ----D---- C:\WINDOWZZ\system32\npp
2009-12-27 11:15:14 ----D---- C:\Program Files\NetMeeting
2009-12-27 11:15:13 ----D---- C:\WINDOWZZ\system32\Com
2009-12-27 11:15:12 ----D---- C:\Program Files\Windows NT

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AsIO;AsIO; C:\WINDOWZZ\system32\drivers\AsIO.sys [2007-12-17 12400]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWZZ\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWZZ\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 kl1;Kl1; \??\C:\WINDOWZZ\system32\drivers\kl1.sys []
R1 KLIF;Kaspersky Lab Driver; C:\WINDOWZZ\system32\DRIVERS\klif.sys [2010-01-07 315408]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWZZ\system32\drivers\ADIHdAud.sys [2008-03-24 331264]
R3 AEAudio;AE Audio Service; C:\WINDOWZZ\system32\drivers\AEAudio.sys [2007-07-13 94976]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWZZ\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWZZ\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWZZ\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWZZ\system32\DRIVERS\klim5.sys [2009-09-14 32272]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\WINDOWZZ\system32\DRIVERS\klmouflt.sys [2009-10-02 19472]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWZZ\system32\DRIVERS\mouhid.sys [2006-07-08 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWZZ\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;1394 Net Driver; C:\WINDOWZZ\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWZZ\system32\DRIVERS\nv4_mini.sys [2009-09-27 7655872]
R3 SenFiltService;SenFilt Service; C:\WINDOWZZ\system32\drivers\Senfilt.sys [2006-03-17 392960]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWZZ\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWZZ\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWZZ\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWZZ\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWZZ\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWZZ\system32\DRIVERS\yk51x86.sys [2008-09-19 290432]
S3 as22is09;as22is09; C:\WINDOWZZ\system32\drivers\as22is09.sys []
S3 cpuz130;cpuz130; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys []
S3 ENTECH;ENTECH; \??\C:\WINDOWZZ\system32\DRIVERS\ENTECH.sys []
S3 usbprint;Třída USB Printer; C:\WINDOWZZ\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWZZ\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S4 IntelIde;IntelIde; C:\WINDOWZZ\system32\drivers\IntelIde.sys []
S4 sr;Ovladač filtru Obnovy systému; C:\WINDOWZZ\system32\DRIVERS\sr.sys [2008-04-14 73344]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AsSysCtrlService;ASUS System Control Service; C:\Program Files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [2009-04-02 90112]
R2 AVP;Kaspersky Anti-Virus; C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe [2009-10-20 340456]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWZZ\system32\nvsvc32.exe [2009-09-27 172100]
R2 PnkBstrA;PnkBstrA; C:\WINDOWZZ\system32\PnkBstrA.exe [2009-12-26 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWZZ\system32\PnkBstrB.exe [2010-01-08 214488]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:\WINDOWZZ\System32\TUProgSt.exe [2009-12-29 604488]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWZZ\system32\wdfmgr.exe [2005-01-28 38912]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWZZ\System32\svchost.exe [2008-04-14 14336]
R2 yksvc;Marvell Yukon Service; ykx32mpcoinst,serviceStartProc []
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-01-04 654848]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWZZ\System32\TuneUpDefragService.exe [2009-12-29 361288]

-----------------EOF-----------------

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

ComboFix 10-01-04.01 - Administrator 10.01.2010 21:50:32.1.4 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3327.2890 [GMT 1:00]
Spuštěný z: c:\documentzz\Administrator\Plocha\ComboFix.exe
AV: Kaspersky Anti-Virus *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windowzz\system32\ieuinit.inf

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-12-10 do 2010-01-10 )))))))))))))))))))))))))))))))
.

2010-01-07 12:52 . 2010-01-07 12:52 95259 ----a-w- c:\windowzz\system32\drivers\klick.dat
2010-01-07 12:52 . 2010-01-07 12:52 108059 ----a-w- c:\windowzz\system32\drivers\klin.dat
2010-01-07 12:52 . 2010-01-07 12:52 -------- d-----w- c:\program files\Kaspersky Lab
2010-01-06 15:45 . 2010-01-10 08:50 -------- d-----w- c:\program files\trend micro
2010-01-06 15:45 . 2010-01-06 15:45 -------- d-----w- C:\RSIT
2010-01-06 15:06 . 2010-01-06 15:10 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-01-06 14:31 . 2010-01-07 11:02 -------- d-----w- c:\program files\Lavasoft
2010-01-06 14:05 . 2010-01-06 14:34 54 ----a-w- c:\windowzz\system32\rp_stats.dat
2010-01-06 14:05 . 2010-01-06 14:34 44 ----a-w- c:\windowzz\system32\statistics.dat
2010-01-06 14:05 . 2010-01-06 14:34 39 ----a-w- c:\windowzz\system32\rp_rules.dat
2010-01-05 09:20 . 2010-01-05 09:20 56 ---ha-w- c:\windowzz\system32\ezsidmv.dat
2010-01-05 08:35 . 2008-04-13 23:15 15104 -c--a-w- c:\windowzz\system32\dllcache\usbscan.sys
2010-01-05 08:35 . 2008-04-13 23:15 15104 ----a-w- c:\windowzz\system32\drivers\usbscan.sys
2010-01-05 08:35 . 2008-05-27 04:00 69632 ----a-w- c:\windowzz\system32\Spool\prtprocs\w32x86\CNMPP9E.DLL
2010-01-05 08:35 . 2008-05-27 04:00 27136 ----a-w- c:\windowzz\system32\Spool\prtprocs\w32x86\CNMPD9E.DLL
2010-01-05 08:35 . 2010-01-05 08:35 -------- d--h--w- c:\windowzz\system32\CanonIJ Uninstaller Information
2010-01-05 08:35 . 2008-05-27 04:00 230912 ----a-w- c:\windowzz\system32\CNMLM9E.DLL
2010-01-05 08:35 . 2008-05-30 08:27 270336 ----a-w- c:\windowzz\system32\CNC540L.DLL
2010-01-05 08:35 . 2008-04-07 13:58 1339392 ----a-w- c:\windowzz\system32\CNC540C.DLL
2010-01-05 08:35 . 2008-04-07 13:58 98304 ----a-w- c:\windowzz\system32\CNC540I.DLL
2010-01-05 08:35 . 2007-03-15 13:12 188416 ----a-w- c:\windowzz\system32\CNC540O.DLL
2010-01-05 08:35 . 2010-01-05 08:35 -------- d--h--w- c:\program files\CanonBJ
2010-01-05 08:33 . 2008-04-13 23:17 25856 -c--a-w- c:\windowzz\system32\dllcache\usbprint.sys
2010-01-05 08:33 . 2008-04-13 23:17 25856 ----a-w- c:\windowzz\system32\drivers\usbprint.sys
2010-01-05 07:41 . 2010-01-05 07:41 -------- d-----w- c:\program files\FireTune
2010-01-04 17:46 . 2010-01-04 17:46 -------- d-----w- c:\program files\Common Files\Skype
2010-01-04 17:46 . 2010-01-07 11:02 -------- d-----r- c:\program files\Skype
2010-01-04 16:50 . 2010-01-04 16:50 -------- d-----w- c:\program files\Bonjour
2010-01-04 16:47 . 2010-01-04 16:47 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2010-01-03 17:18 . 2010-01-03 17:18 -------- d-sh--w- c:\windowzz\ftpcache
2009-12-31 00:24 . 2009-12-31 00:24 -------- d-s---w- c:\documentzz\Administrator\UserData
2009-12-30 18:23 . 2010-01-04 16:50 -------- d-----w- c:\program files\Common Files\Adobe
2009-12-30 12:48 . 2004-03-22 14:17 25840 ----a-w- c:\windowzz\system32\Spool\prtprocs\w32x86\mdippr.dll
2009-12-30 12:48 . 2004-03-22 14:17 24816 ----a-w- c:\windowzz\system32\mdimon.dll
2009-12-29 20:14 . 2009-12-29 20:14 604488 ----a-w- c:\windowzz\system32\TUProgSt.exe
2009-12-29 20:14 . 2009-11-16 11:25 29000 ----a-w- c:\windowzz\system32\uxtuneup.dll
2009-12-29 20:14 . 2009-12-29 20:14 361288 ----a-w- c:\windowzz\system32\TuneUpDefragService.exe
2009-12-29 20:14 . 2009-12-29 20:14 -------- d-----w- c:\program files\TuneUp Utilities 2009
2009-12-29 17:53 . 2010-01-03 17:37 -------- d-----w- c:\program files\PunkBuster
2009-12-29 17:23 . 2010-01-04 10:30 -------- d-----r- c:\program files\HLSW
2009-12-28 13:55 . 2009-12-28 16:38 -------- d-----w- c:\program files\PSPad editor
2009-12-27 13:35 . 2010-01-10 09:07 -------- d-----w- c:\program files\Mozilla Thunderbird
2009-12-27 11:12 . 2009-12-27 11:12 691696 ----a-w- c:\windowzz\system32\drivers\sptd.sys
2009-12-27 11:12 . 2009-12-27 12:09 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-12-27 10:47 . 2009-12-27 13:52 -------- d-----w- c:\program files\Total Commander
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\UC.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\RAR.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\PKZIP.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\PKUNZIP.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\NOCLOSE.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\LHA.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\ARJ.PIF
2009-12-27 10:14 . 2008-04-14 07:52 123904 ------w- c:\windowzz\system32\mplay32.exe
2009-12-27 10:12 . 2009-12-27 10:15 -------- d-----w- c:\windowzz\EHome
2009-12-26 14:43 . 2009-12-26 14:43 413696 ----a-w- c:\windowzz\system32\wrap_oal.dll
2009-12-26 14:43 . 2009-12-26 14:43 110592 ----a-w- c:\windowzz\system32\OpenAL32.dll
2009-12-26 14:43 . 2009-12-26 14:43 -------- d-----w- c:\program files\OpenAL
2009-12-26 14:23 . 2009-12-26 14:23 -------- d-----w- c:\windowzz\system32\Futuremark
2009-12-26 14:23 . 2009-12-26 14:23 -------- d-----w- c:\program files\Common Files\Futuremark Shared
2009-12-26 14:23 . 2008-09-17 13:14 27672 ----a-r- c:\windowzz\system32\drivers\Entech.sys
2009-12-26 14:23 . 2009-12-26 14:23 -------- d-----w- c:\program files\Futuremark
2009-12-26 13:57 . 2010-01-08 18:39 138504 ----a-w- c:\windowzz\system32\drivers\PnkBstrK.sys
2009-12-26 13:47 . 2010-01-08 18:39 214488 ----a-w- c:\windowzz\system32\PnkBstrB.exe
2009-12-26 13:47 . 2009-12-26 13:47 75064 ----a-w- c:\windowzz\system32\PnkBstrA.exe
2009-12-26 13:47 . 2009-12-26 13:47 2373712 ----a-w- c:\windowzz\system32\pbsvc.exe
2009-12-26 13:47 . 2009-12-26 13:47 -------- d-----w- c:\windowzz\system32\LogFiles
2009-12-24 20:55 . 2010-01-05 16:25 -------- d-----w- c:\program files\Miranda IM
2009-12-24 16:59 . 2010-01-05 14:00 -------- d-----w- c:\program files\Winamp

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-06 17:15 . 2010-01-06 17:15 -------- d-----w- c:\program files\Free Sound Recorder
2010-01-06 15:11 . 2009-11-18 14:24 -------- d-----w- c:\program files\SpeedFan
2010-01-03 17:30 . 2009-11-18 14:02 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-27 15:34 . 2009-11-18 14:09 -------- d-----w- c:\program files\ASUS
2009-12-27 10:54 . 2009-11-18 14:37 -------- d-----w- c:\program files\Steam
2009-12-27 10:20 . 2001-10-25 12:00 44554 ----a-w- c:\windowzz\system32\perfc005.dat
2009-12-27 10:20 . 2001-10-25 12:00 307280 ----a-w- c:\windowzz\system32\perfh005.dat
2009-12-27 10:16 . 2009-11-18 13:45 86333 ----a-w- c:\windowzz\pchealth\helpctr\OfflineCache\index.dat
2009-12-27 10:16 . 2009-11-18 13:45 2752 ----a-w- c:\windowzz\pchealth\helpctr\PackageStore\SkuStore.bin
2009-12-26 14:37 . 2009-12-26 14:33 -------- d-----w- c:\program files\K-Lite Codec Pack
2009-12-11 18:00 . 2009-12-26 14:33 85504 ----a-w- c:\windowzz\system32\ff_vfw.dll
2009-11-18 18:19 . 2009-11-18 18:18 -------- d-----w- c:\program files\GPU-Z
2009-11-18 18:09 . 2009-11-18 18:09 -------- d-----w- c:\program files\CPU-Z
2009-11-18 17:08 . 2009-11-18 17:08 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-11-18 17:07 . 2009-11-18 17:07 -------- d-----w- c:\program files\NVIDIA Corporation
2009-11-18 14:16 . 2009-11-18 14:16 0 ----a-w- c:\windowzz\nsreg.dat
2009-11-18 14:10 . 2009-11-18 14:06 -------- d-----w- c:\program files\Marvell
2009-11-18 14:09 . 2009-11-18 14:01 -------- d-----w- c:\program files\Common Files\InstallShield
2009-11-18 14:02 . 2009-11-18 14:02 -------- d-----w- c:\program files\Analog Devices
2009-11-18 13:53 . 2009-11-18 13:53 -------- d-----w- c:\program files\Intel
2009-11-18 13:48 . 2009-11-18 13:46 8972 ----a-w- c:\windowzz\pchealth\helpctr\Config\Cntstore.bin
2009-11-18 13:46 . 2009-11-18 13:46 -------- d-----w- c:\program files\microsoft frontpage
2009-11-18 13:44 . 2009-11-18 13:44 21812 ----a-w- c:\windowzz\system32\emptyregdb.dat
2009-10-20 18:34 . 2009-10-20 18:34 219664 ----a-w- c:\windowzz\system32\klogon.dll
2009-10-14 19:18 . 2009-10-14 19:18 36880 ----a-w- c:\windowzz\system32\drivers\klbg.sys
.

------- Sigcheck -------

[7] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . c:\windowzz\ServicePackFiles\i386\regsvc.dll

[7] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . c:\windowzz\ServicePackFiles\i386\schedsvc.dll

c:\windowzz\System32\regsvc.dll ... chybí !!
c:\windowzz\System32\schedsvc.dll ... chybí !!
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"WiseStubReboot"="MSIEXEC" [X]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2008-03-16 1040384]
"Six Engine"="c:\program files\ASUS\Six Engine\SixEngine.exe" [2009-06-26 6036992]
"NvMediaCenter"="c:\windowzz\system32\NvMcTray.dll" [2009-09-27 86016]
"NvCplDaemon"="c:\windowzz\system32\NvCpl.dll" [2009-09-27 13918208]
"Ai Nap"="c:\program files\ASUS\AI Suite\AiNap\AiNap.exe" [2009-07-01 1435136]
"QFan Help"="c:\program files\ASUS\AI Suite\QFan3\QFanHelp.exe" [2009-07-01 601088]
"Cpu Level Up help"="c:\program files\ASUS\AI Suite\CpuLevelUpHelp.exe" [2007-11-30 881152]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe" [2009-10-20 340456]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windowzz\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMMyPictures"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMMyPictures"= 1 (0x1)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /r \??\F:\0autocheck autochk *

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Steam"="c:\program files\Steam\Steam.exe" -silent

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\Miranda IM\\miranda32.exe"=
"c:\\WINDOWZZ\\system32\\PnkBstrA.exe"=
"c:\\WINDOWZZ\\system32\\PnkBstrB.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Total Commander\\TOTALCMD.EXE"=
"c:\\Program Files\\HLSW\\hlsw.exe"=
"d:\\Gamezz\\Wolfenstein - Enemy Territory\\ET.exe"=
"d:\\Gamezz\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"f:\\Programzz\\Miranda IM\\miranda32.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windowzz\system32\drivers\klbg.sys [14.10.2009 20:18 36880]
R0 mrdd;Marvell Removable Disk Control Driver;c:\windowzz\system32\drivers\mrdd.sys [18.11.2009 15:11 18984]
R0 mv61xx;mv61xx;c:\windowzz\system32\drivers\mv61xx.sys [9.2.2009 3:30 152616]
R0 sptd;sptd;c:\windowzz\system32\drivers\sptd.sys [27.12.2009 12:12 691696]
R2 AsSysCtrlService;ASUS System Control Service;c:\program files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [18.11.2009 15:09 90112]
R2 yksvc;Marvell Yukon Service;RUNDLL32.EXE ykx32mpcoinst,serviceStartProc --> RUNDLL32.EXE ykx32mpcoinst,serviceStartProc [?]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windowzz\system32\drivers\klim5.sys [14.9.2009 13:42 32272]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windowzz\system32\drivers\klmouflt.sys [2.10.2009 18:39 19472]
S3 cpuz130;cpuz130;\??\c:\docume~1\ADMINI~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys --> c:\docume~1\ADMINI~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys [?]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documentzz\Administrator\Data aplikací\Mozilla\Firefox\Profiles\idwuofb0.default\
FF - prefs.js: network.proxy.type - 4
FF - component: c:\program files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru\components\KavLinkFilter.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

---- NASTAVENÍ FIREFOXU ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
FF - user.js: network.http.max-connections-per-server - 8
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-10 21:55
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys spax.sys >>UNKNOWN [0x8A6C0938]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xb810cf28
\Driver\ACPI -> ACPI.sys @ 0xb7e74cb8
\Driver\atapi -> atapi.sys @ 0xb7e09b40
IoDeviceObjectType -> DeleteProcedure -> ntkrnlpa.exe @ 0x805836a8
ParseProcedure -> ntkrnlpa.exe @ 0x805827e8
\Device\Harddisk0\DR0 -> DeleteProcedure -> ntkrnlpa.exe @ 0x805836a8
ParseProcedure -> ntkrnlpa.exe @ 0x805827e8
NDIS: Marvell Yukon 88E8001/8003/8010 PCI Gigabit Ethernet Controller -> SendCompleteHandler -> NDIS.sys @ 0xb7cd2bb0
PacketIndicateHandler -> NDIS.sys @ 0xb7cc1a0d
SendHandler -> NDIS.sys @ 0xb7cd5b40
user & kernel MBR OK

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-1177238915-507921405-839522115-500\Software\Andreas Haak\a*Ű]
"Language"="English"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windowzz\system32\nvsvc32.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windowzz\system32\PnkBstrA.exe
c:\windowzz\system32\PnkBstrB.exe
c:\windowzz\System32\TUProgSt.exe
c:\windowzz\system32\wdfmgr.exe
c:\windowzz\system32\RUNDLL32.EXE
c:\windowzz\system32\wscntfy.exe
c:\windowzz\system32\RUNDLL32.EXE
.
**************************************************************************
.
Celkový čas: 2010-01-10 21:56:32 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-01-10 20:56

Před spuštěním: Volných bajtů: 51 526 225 920
Po spuštění: Volných bajtů: 52 428 341 248

- - End Of File - - 9FEE3487D9FA15AFC26D8153B4ABB81D

1. Stáhněte soubory regsvc.dll z http://www.dlldll.com/getdll/5020.html a schedsvc.dll z http://www.dlldump.com/download-dll-fil ... nload.html a rozbalte je na plochu.
2. Otevřte poznámkový blok a zkopírujte do něj:

FCopy::
c:\documentzz\Administrator\Plocha\regsvc.dll | c:\windowzz\System32\regsvc.dll
c:\documentzz\Administrator\Plocha\schedsvc.dll | c:\windowzz\System32\schedsvc.dll

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

ComboFix 10-01-11.03 - Administrator 12.01.2010 14:40:22.2.4 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3327.2996 [GMT 1:00]
Spuštěný z: c:\documentzz\Administrator\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documentzz\Administrator\Plocha\CFScript.txt
AV: Kaspersky Anti-Virus *On-access scanning disabled* (Outdated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Anti-Virus *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windowzz\system32\twain_32.dll

.
--------------- FCopy ---------------

c:\documentzz\Administrator\Plocha\regsvc.dll --> c:\windowzz\System32\regsvc.dll
c:\documentzz\Administrator\Plocha\schedsvc.dll --> c:\windowzz\System32\schedsvc.dll
.
((((((((((((((((((((((((( Soubory vytvořené od 2009-12-12 do 2010-01-12 )))))))))))))))))))))))))))))))
.

2010-01-12 13:40 . 2010-01-12 13:40 -------- d-----w- c:\windowzz\LastGood
2010-01-12 13:40 . 2008-04-14 07:51 59904 -c--a-w- c:\windowzz\system32\dllcache\regsvc.dll
2010-01-12 13:40 . 2008-04-14 07:51 59904 ----a-w- c:\windowzz\system32\regsvc.dll
2010-01-12 13:40 . 2008-04-14 07:51 192512 -c--a-w- c:\windowzz\system32\dllcache\schedsvc.dll
2010-01-12 13:40 . 2008-04-14 07:51 192512 ----a-w- c:\windowzz\system32\schedsvc.dll
2010-01-10 21:21 . 2010-01-10 21:21 -------- d-----w- c:\program files\MSECache
2010-01-07 12:52 . 2010-01-07 12:52 95259 ----a-w- c:\windowzz\system32\drivers\klick.dat
2010-01-07 12:52 . 2010-01-07 12:52 108059 ----a-w- c:\windowzz\system32\drivers\klin.dat
2010-01-07 12:52 . 2010-01-07 12:52 -------- d-----w- c:\program files\Kaspersky Lab
2010-01-06 15:45 . 2010-01-10 08:50 -------- d-----w- c:\program files\trend micro
2010-01-06 15:45 . 2010-01-06 15:45 -------- d-----w- C:\RSIT
2010-01-06 15:06 . 2010-01-06 15:10 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-01-06 14:31 . 2010-01-07 11:02 -------- d-----w- c:\program files\Lavasoft
2010-01-06 14:05 . 2010-01-06 14:34 54 ----a-w- c:\windowzz\system32\rp_stats.dat
2010-01-06 14:05 . 2010-01-06 14:34 44 ----a-w- c:\windowzz\system32\statistics.dat
2010-01-06 14:05 . 2010-01-06 14:34 39 ----a-w- c:\windowzz\system32\rp_rules.dat
2010-01-05 09:20 . 2010-01-05 09:20 56 ---ha-w- c:\windowzz\system32\ezsidmv.dat
2010-01-05 08:35 . 2008-04-13 23:15 15104 -c--a-w- c:\windowzz\system32\dllcache\usbscan.sys
2010-01-05 08:35 . 2008-04-13 23:15 15104 ----a-w- c:\windowzz\system32\drivers\usbscan.sys
2010-01-05 08:35 . 2008-05-27 04:00 69632 ----a-w- c:\windowzz\system32\Spool\prtprocs\w32x86\CNMPP9E.DLL
2010-01-05 08:35 . 2008-05-27 04:00 27136 ----a-w- c:\windowzz\system32\Spool\prtprocs\w32x86\CNMPD9E.DLL
2010-01-05 08:35 . 2010-01-05 08:35 -------- d--h--w- c:\windowzz\system32\CanonIJ Uninstaller Information
2010-01-05 08:35 . 2008-05-27 04:00 230912 ----a-w- c:\windowzz\system32\CNMLM9E.DLL
2010-01-05 08:35 . 2008-05-30 08:27 270336 ----a-w- c:\windowzz\system32\CNC540L.DLL
2010-01-05 08:35 . 2008-04-07 13:58 1339392 ----a-w- c:\windowzz\system32\CNC540C.DLL
2010-01-05 08:35 . 2008-04-07 13:58 98304 ----a-w- c:\windowzz\system32\CNC540I.DLL
2010-01-05 08:35 . 2007-03-15 13:12 188416 ----a-w- c:\windowzz\system32\CNC540O.DLL
2010-01-05 08:35 . 2010-01-05 08:35 -------- d--h--w- c:\program files\CanonBJ
2010-01-05 08:33 . 2008-04-13 23:17 25856 -c--a-w- c:\windowzz\system32\dllcache\usbprint.sys
2010-01-05 08:33 . 2008-04-13 23:17 25856 ----a-w- c:\windowzz\system32\drivers\usbprint.sys
2010-01-05 07:41 . 2010-01-05 07:41 -------- d-----w- c:\program files\FireTune
2010-01-04 17:46 . 2010-01-04 17:46 -------- d-----w- c:\program files\Common Files\Skype
2010-01-04 17:46 . 2010-01-07 11:02 -------- d-----r- c:\program files\Skype
2010-01-04 16:50 . 2010-01-04 16:50 -------- d-----w- c:\program files\Bonjour
2010-01-04 16:47 . 2010-01-04 16:47 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2010-01-03 17:18 . 2010-01-03 17:18 -------- d-sh--w- c:\windowzz\ftpcache
2009-12-31 00:24 . 2009-12-31 00:24 -------- d-s---w- c:\documentzz\Administrator\UserData
2009-12-30 18:23 . 2010-01-04 16:50 -------- d-----w- c:\program files\Common Files\Adobe
2009-12-30 12:48 . 2004-03-22 14:17 25840 ----a-w- c:\windowzz\system32\Spool\prtprocs\w32x86\mdippr.dll
2009-12-30 12:48 . 2004-03-22 14:17 24816 ----a-w- c:\windowzz\system32\mdimon.dll
2009-12-29 20:14 . 2009-12-29 20:14 604488 ----a-w- c:\windowzz\system32\TUProgSt.exe
2009-12-29 20:14 . 2009-11-16 11:25 29000 ----a-w- c:\windowzz\system32\uxtuneup.dll
2009-12-29 20:14 . 2009-12-29 20:14 361288 ----a-w- c:\windowzz\system32\TuneUpDefragService.exe
2009-12-29 20:14 . 2009-12-29 20:14 -------- d-----w- c:\program files\TuneUp Utilities 2009
2009-12-29 17:53 . 2010-01-03 17:37 -------- d-----w- c:\program files\PunkBuster
2009-12-29 17:23 . 2010-01-04 10:30 -------- d-----r- c:\program files\HLSW
2009-12-28 13:55 . 2009-12-28 16:38 -------- d-----w- c:\program files\PSPad editor
2009-12-27 13:35 . 2010-01-12 12:24 -------- d-----w- c:\program files\Mozilla Thunderbird
2009-12-27 11:12 . 2009-12-27 11:12 691696 ----a-w- c:\windowzz\system32\drivers\sptd.sys
2009-12-27 11:12 . 2009-12-27 12:09 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-12-27 10:47 . 2009-12-27 13:52 -------- d-----w- c:\program files\Total Commander
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\UC.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\RAR.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\PKZIP.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\PKUNZIP.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\NOCLOSE.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\LHA.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\ARJ.PIF
2009-12-27 10:14 . 2008-04-14 07:52 123904 ------w- c:\windowzz\system32\mplay32.exe
2009-12-27 10:12 . 2009-12-27 10:15 -------- d-----w- c:\windowzz\EHome
2009-12-26 14:43 . 2009-12-26 14:43 413696 ----a-w- c:\windowzz\system32\wrap_oal.dll
2009-12-26 14:43 . 2009-12-26 14:43 110592 ----a-w- c:\windowzz\system32\OpenAL32.dll
2009-12-26 14:43 . 2009-12-26 14:43 -------- d-----w- c:\program files\OpenAL
2009-12-26 14:23 . 2009-12-26 14:23 -------- d-----w- c:\windowzz\system32\Futuremark
2009-12-26 14:23 . 2009-12-26 14:23 -------- d-----w- c:\program files\Common Files\Futuremark Shared
2009-12-26 14:23 . 2008-09-17 13:14 27672 ----a-r- c:\windowzz\system32\drivers\Entech.sys
2009-12-26 14:23 . 2009-12-26 14:23 -------- d-----w- c:\program files\Futuremark
2009-12-26 13:57 . 2010-01-08 18:39 138504 ----a-w- c:\windowzz\system32\drivers\PnkBstrK.sys
2009-12-26 13:47 . 2010-01-08 18:39 214488 ----a-w- c:\windowzz\system32\PnkBstrB.exe
2009-12-26 13:47 . 2009-12-26 13:47 75064 ----a-w- c:\windowzz\system32\PnkBstrA.exe
2009-12-26 13:47 . 2009-12-26 13:47 2373712 ----a-w- c:\windowzz\system32\pbsvc.exe
2009-12-26 13:47 . 2009-12-26 13:47 -------- d-----w- c:\windowzz\system32\LogFiles
2009-12-24 20:55 . 2010-01-05 16:25 -------- d-----w- c:\program files\Miranda IM
2009-12-24 16:59 . 2010-01-05 14:00 -------- d-----w- c:\program files\Winamp

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-12 12:10 . 2010-01-12 13:40 190976 ----a-w- c:\windowzz\system32\OLD13.tmp
2010-01-06 17:15 . 2010-01-06 17:15 -------- d-----w- c:\program files\Free Sound Recorder
2010-01-06 15:11 . 2009-11-18 14:24 -------- d-----w- c:\program files\SpeedFan
2010-01-03 17:30 . 2009-11-18 14:02 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-27 15:34 . 2009-11-18 14:09 -------- d-----w- c:\program files\ASUS
2009-12-27 10:54 . 2009-11-18 14:37 -------- d-----w- c:\program files\Steam
2009-12-27 10:20 . 2001-10-25 12:00 44554 ----a-w- c:\windowzz\system32\perfc005.dat
2009-12-27 10:20 . 2001-10-25 12:00 307280 ----a-w- c:\windowzz\system32\perfh005.dat
2009-12-27 10:16 . 2009-11-18 13:45 86333 ----a-w- c:\windowzz\pchealth\helpctr\OfflineCache\index.dat
2009-12-27 10:16 . 2009-11-18 13:45 2752 ----a-w- c:\windowzz\pchealth\helpctr\PackageStore\SkuStore.bin
2009-12-26 14:37 . 2009-12-26 14:33 -------- d-----w- c:\program files\K-Lite Codec Pack
2009-12-11 18:00 . 2009-12-26 14:33 85504 ----a-w- c:\windowzz\system32\ff_vfw.dll
2009-11-18 18:19 . 2009-11-18 18:18 -------- d-----w- c:\program files\GPU-Z
2009-11-18 18:09 . 2009-11-18 18:09 -------- d-----w- c:\program files\CPU-Z
2009-11-18 17:08 . 2009-11-18 17:08 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-11-18 17:07 . 2009-11-18 17:07 -------- d-----w- c:\program files\NVIDIA Corporation
2009-11-18 14:16 . 2009-11-18 14:16 0 ----a-w- c:\windowzz\nsreg.dat
2009-11-18 14:10 . 2009-11-18 14:06 -------- d-----w- c:\program files\Marvell
2009-11-18 14:09 . 2009-11-18 14:01 -------- d-----w- c:\program files\Common Files\InstallShield
2009-11-18 14:02 . 2009-11-18 14:02 -------- d-----w- c:\program files\Analog Devices
2009-11-18 13:53 . 2009-11-18 13:53 -------- d-----w- c:\program files\Intel
2009-11-18 13:48 . 2009-11-18 13:46 8972 ----a-w- c:\windowzz\pchealth\helpctr\Config\Cntstore.bin
2009-11-18 13:46 . 2009-11-18 13:46 -------- d-----w- c:\program files\microsoft frontpage
2009-11-18 13:44 . 2009-11-18 13:44 21812 ----a-w- c:\windowzz\system32\emptyregdb.dat
2009-10-20 18:34 . 2009-10-20 18:34 219664 ----a-w- c:\windowzz\system32\klogon.dll
2009-10-14 19:18 . 2009-10-14 19:18 36880 ----a-w- c:\windowzz\system32\drivers\klbg.sys
.

((((((((((((((((((((((((((((( SnapShot@2010-01-10_20.55.20 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-01-12 13:40 . 2004-05-13 16:19 51712 c:\windowzz\LastGood\system32\regsvc.dll
+ 2010-01-10 21:21 . 2010-01-10 21:21 49936 c:\windowzz\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe
+ 2010-01-12 13:40 . 2010-01-12 12:10 190976 c:\windowzz\LastGood\system32\schedsvc.dll
+ 2010-01-10 21:21 . 2010-01-10 21:21 360448 c:\windowzz\Installer\18f750.msi
+ 2009-11-18 14:35 . 2010-01-11 09:39 1427408 c:\windowzz\system32\FNTCACHE.DAT
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"WiseStubReboot"="MSIEXEC" [X]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2008-03-16 1040384]
"Six Engine"="c:\program files\ASUS\Six Engine\SixEngine.exe" [2009-06-26 6036992]
"NvMediaCenter"="c:\windowzz\system32\NvMcTray.dll" [2009-09-27 86016]
"NvCplDaemon"="c:\windowzz\system32\NvCpl.dll" [2009-09-27 13918208]
"Ai Nap"="c:\program files\ASUS\AI Suite\AiNap\AiNap.exe" [2009-07-01 1435136]
"QFan Help"="c:\program files\ASUS\AI Suite\QFan3\QFanHelp.exe" [2009-07-01 601088]
"Cpu Level Up help"="c:\program files\ASUS\AI Suite\CpuLevelUpHelp.exe" [2007-11-30 881152]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe" [2009-10-20 340456]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windowzz\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMMyPictures"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMMyPictures"= 1 (0x1)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /r \??\F:\0autocheck autochk *

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Steam"="c:\program files\Steam\Steam.exe" -silent

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\Miranda IM\\miranda32.exe"=
"c:\\WINDOWZZ\\system32\\PnkBstrA.exe"=
"c:\\WINDOWZZ\\system32\\PnkBstrB.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Total Commander\\TOTALCMD.EXE"=
"c:\\Program Files\\HLSW\\hlsw.exe"=
"d:\\Gamezz\\Wolfenstein - Enemy Territory\\ET.exe"=
"d:\\Gamezz\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windowzz\system32\drivers\klbg.sys [14.10.2009 20:18 36880]
R0 mrdd;Marvell Removable Disk Control Driver;c:\windowzz\system32\drivers\mrdd.sys [18.11.2009 15:11 18984]
R0 mv61xx;mv61xx;c:\windowzz\system32\drivers\mv61xx.sys [9.2.2009 3:30 152616]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windowzz\system32\drivers\klim5.sys [14.9.2009 13:42 32272]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windowzz\system32\drivers\klmouflt.sys [2.10.2009 18:39 19472]
S0 sptd;sptd;c:\windowzz\system32\drivers\sptd.sys [27.12.2009 12:12 691696]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [18.11.2009 15:09 90112]
S2 yksvc;Marvell Yukon Service;RUNDLL32.EXE ykx32mpcoinst,serviceStartProc --> RUNDLL32.EXE ykx32mpcoinst,serviceStartProc [?]
S3 cpuz130;cpuz130;\??\c:\docume~1\ADMINI~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys --> c:\docume~1\ADMINI~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys [?]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documentzz\Administrator\Data aplikací\Mozilla\Firefox\Profiles\idwuofb0.default\
FF - prefs.js: network.proxy.type - 4
FF - component: c:\program files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru\components\KavLinkFilter.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

---- NASTAVENÍ FIREFOXU ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
FF - user.js: network.http.max-connections-per-server - 8
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-12 14:42
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-1177238915-507921405-839522115-500\Software\Andreas Haak\a*Ű]
"Language"="English"
.
Celkový čas: 2010-01-12 14:42:54
ComboFix-quarantined-files.txt 2010-01-12 13:42
ComboFix2.txt 2010-01-10 20:56

Před spuštěním: Volných bajtů: 52 132 999 168
Po spuštění: Volných bajtů: 52 104 814 592

- - End Of File - - 3C78020B5F7C64BB65E941330F9D7892

Spusťte CF ještě jednou skriptem:

Collect::
c:\windowzz\system32\OLD13.tmp

ComboFix 10-01-11.03 - Administrator 13.01.2010 13:32:20.3.4 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3327.2871 [GMT 1:00]
Spuštěný z: c:\documentzz\Administrator\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documentzz\Administrator\Plocha\CFScript.txt
AV: Kaspersky Anti-Virus *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Anti-Virus *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((( Soubory vytvořené od 2009-12-13 do 2010-01-13 )))))))))))))))))))))))))))))))
.

2010-01-12 16:37 . 2010-01-12 16:37 -------- d-----w- c:\program files\Microsoft Works
2010-01-12 16:35 . 2010-01-12 16:35 -------- d-----w- c:\windowzz\SHELLNEW
2010-01-12 16:34 . 2010-01-12 16:34 -------- d-----r- C:\MSOCache
2010-01-12 13:40 . 2008-04-14 07:51 59904 -c--a-w- c:\windowzz\system32\dllcache\regsvc.dll
2010-01-12 13:40 . 2008-04-14 07:51 59904 ------w- c:\windowzz\system32\regsvc.dll
2010-01-12 13:40 . 2008-04-14 07:51 192512 -c--a-w- c:\windowzz\system32\dllcache\schedsvc.dll
2010-01-12 13:40 . 2008-04-14 07:51 192512 ------w- c:\windowzz\system32\schedsvc.dll
2010-01-10 21:21 . 2010-01-10 21:21 -------- d-----w- c:\program files\MSECache
2010-01-07 12:52 . 2010-01-07 12:52 95259 ----a-w- c:\windowzz\system32\drivers\klick.dat
2010-01-07 12:52 . 2010-01-07 12:52 108059 ----a-w- c:\windowzz\system32\drivers\klin.dat
2010-01-07 12:52 . 2010-01-07 12:52 -------- d-----w- c:\program files\Kaspersky Lab
2010-01-06 15:45 . 2010-01-10 08:50 -------- d-----w- c:\program files\trend micro
2010-01-06 15:45 . 2010-01-06 15:45 -------- d-----w- C:\RSIT
2010-01-06 15:06 . 2010-01-06 15:10 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-01-06 14:31 . 2010-01-07 11:02 -------- d-----w- c:\program files\Lavasoft
2010-01-06 14:05 . 2010-01-06 14:34 54 ----a-w- c:\windowzz\system32\rp_stats.dat
2010-01-06 14:05 . 2010-01-06 14:34 44 ----a-w- c:\windowzz\system32\statistics.dat
2010-01-06 14:05 . 2010-01-06 14:34 39 ----a-w- c:\windowzz\system32\rp_rules.dat
2010-01-05 09:20 . 2010-01-05 09:20 56 ---ha-w- c:\windowzz\system32\ezsidmv.dat
2010-01-05 08:35 . 2008-04-13 23:15 15104 -c--a-w- c:\windowzz\system32\dllcache\usbscan.sys
2010-01-05 08:35 . 2008-04-13 23:15 15104 ----a-w- c:\windowzz\system32\drivers\usbscan.sys
2010-01-05 08:35 . 2008-05-27 04:00 69632 ----a-w- c:\windowzz\system32\Spool\prtprocs\w32x86\CNMPP9E.DLL
2010-01-05 08:35 . 2008-05-27 04:00 27136 ----a-w- c:\windowzz\system32\Spool\prtprocs\w32x86\CNMPD9E.DLL
2010-01-05 08:35 . 2010-01-05 08:35 -------- d--h--w- c:\windowzz\system32\CanonIJ Uninstaller Information
2010-01-05 08:35 . 2008-05-27 04:00 230912 ----a-w- c:\windowzz\system32\CNMLM9E.DLL
2010-01-05 08:35 . 2008-05-30 08:27 270336 ----a-w- c:\windowzz\system32\CNC540L.DLL
2010-01-05 08:35 . 2008-04-07 13:58 1339392 ----a-w- c:\windowzz\system32\CNC540C.DLL
2010-01-05 08:35 . 2008-04-07 13:58 98304 ----a-w- c:\windowzz\system32\CNC540I.DLL
2010-01-05 08:35 . 2007-03-15 13:12 188416 ----a-w- c:\windowzz\system32\CNC540O.DLL
2010-01-05 08:35 . 2010-01-05 08:35 -------- d--h--w- c:\program files\CanonBJ
2010-01-05 08:33 . 2008-04-13 23:17 25856 -c--a-w- c:\windowzz\system32\dllcache\usbprint.sys
2010-01-05 08:33 . 2008-04-13 23:17 25856 ----a-w- c:\windowzz\system32\drivers\usbprint.sys
2010-01-05 07:41 . 2010-01-05 07:41 -------- d-----w- c:\program files\FireTune
2010-01-04 17:46 . 2010-01-04 17:46 -------- d-----w- c:\program files\Common Files\Skype
2010-01-04 17:46 . 2010-01-07 11:02 -------- d-----r- c:\program files\Skype
2010-01-04 16:50 . 2010-01-04 16:50 -------- d-----w- c:\program files\Bonjour
2010-01-04 16:47 . 2010-01-04 16:47 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2010-01-03 17:18 . 2010-01-03 17:18 -------- d-sh--w- c:\windowzz\ftpcache
2009-12-31 00:24 . 2009-12-31 00:24 -------- d-s---w- c:\documentzz\Administrator\UserData
2009-12-30 18:23 . 2010-01-04 16:50 -------- d-----w- c:\program files\Common Files\Adobe
2009-12-30 12:48 . 2004-03-22 14:17 25840 ----a-w- c:\windowzz\system32\Spool\prtprocs\w32x86\mdippr.dll
2009-12-30 12:48 . 2004-03-22 14:17 24816 ----a-w- c:\windowzz\system32\mdimon.dll
2009-12-29 20:14 . 2009-12-29 20:14 604488 ----a-w- c:\windowzz\system32\TUProgSt.exe
2009-12-29 20:14 . 2009-11-16 11:25 29000 ----a-w- c:\windowzz\system32\uxtuneup.dll
2009-12-29 20:14 . 2009-12-29 20:14 361288 ----a-w- c:\windowzz\system32\TuneUpDefragService.exe
2009-12-29 20:14 . 2009-12-29 20:14 -------- d-----w- c:\program files\TuneUp Utilities 2009
2009-12-29 17:53 . 2010-01-03 17:37 -------- d-----w- c:\program files\PunkBuster
2009-12-29 17:23 . 2010-01-04 10:30 -------- d-----r- c:\program files\HLSW
2009-12-28 13:55 . 2009-12-28 16:38 -------- d-----w- c:\program files\PSPad editor
2009-12-27 13:35 . 2010-01-13 10:27 -------- d-----w- c:\program files\Mozilla Thunderbird
2009-12-27 11:12 . 2009-12-27 11:12 691696 ----a-w- c:\windowzz\system32\drivers\sptd.sys
2009-12-27 11:12 . 2009-12-27 12:09 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-12-27 10:47 . 2009-12-27 13:52 -------- d-----w- c:\program files\Total Commander
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\UC.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\RAR.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\PKZIP.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\PKUNZIP.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\NOCLOSE.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\LHA.PIF
2009-12-27 10:47 . 2009-09-24 06:50 545 ----a-w- c:\windowzz\ARJ.PIF
2009-12-27 10:14 . 2008-04-14 07:52 123904 ------w- c:\windowzz\system32\mplay32.exe
2009-12-27 10:12 . 2009-12-27 10:15 -------- d-----w- c:\windowzz\EHome
2009-12-26 14:43 . 2009-12-26 14:43 413696 ----a-w- c:\windowzz\system32\wrap_oal.dll
2009-12-26 14:43 . 2009-12-26 14:43 110592 ----a-w- c:\windowzz\system32\OpenAL32.dll
2009-12-26 14:43 . 2009-12-26 14:43 -------- d-----w- c:\program files\OpenAL
2009-12-26 14:23 . 2009-12-26 14:23 -------- d-----w- c:\windowzz\system32\Futuremark
2009-12-26 14:23 . 2009-12-26 14:23 -------- d-----w- c:\program files\Common Files\Futuremark Shared
2009-12-26 14:23 . 2008-09-17 13:14 27672 ----a-r- c:\windowzz\system32\drivers\Entech.sys
2009-12-26 14:23 . 2009-12-26 14:23 -------- d-----w- c:\program files\Futuremark
2009-12-26 13:57 . 2010-01-12 17:48 138504 ----a-w- c:\windowzz\system32\drivers\PnkBstrK.sys
2009-12-26 13:47 . 2010-01-12 17:47 214488 ----a-w- c:\windowzz\system32\PnkBstrB.exe
2009-12-26 13:47 . 2009-12-26 13:47 75064 ----a-w- c:\windowzz\system32\PnkBstrA.exe
2009-12-26 13:47 . 2009-12-26 13:47 2373712 ----a-w- c:\windowzz\system32\pbsvc.exe
2009-12-26 13:47 . 2009-12-26 13:47 -------- d-----w- c:\windowzz\system32\LogFiles
2009-12-24 20:55 . 2010-01-05 16:25 -------- d-----w- c:\program files\Miranda IM
2009-12-24 16:59 . 2010-01-05 14:00 -------- d-----w- c:\program files\Winamp

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-06 17:15 . 2010-01-06 17:15 -------- d-----w- c:\program files\Free Sound Recorder
2010-01-06 15:11 . 2009-11-18 14:24 -------- d-----w- c:\program files\SpeedFan
2010-01-03 17:30 . 2009-11-18 14:02 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-27 15:34 . 2009-11-18 14:09 -------- d-----w- c:\program files\ASUS
2009-12-27 10:54 . 2009-11-18 14:37 -------- d-----w- c:\program files\Steam
2009-12-27 10:20 . 2001-10-25 12:00 44554 ----a-w- c:\windowzz\system32\perfc005.dat
2009-12-27 10:20 . 2001-10-25 12:00 307280 ----a-w- c:\windowzz\system32\perfh005.dat
2009-12-27 10:16 . 2009-11-18 13:45 86333 ----a-w- c:\windowzz\pchealth\helpctr\OfflineCache\index.dat
2009-12-27 10:16 . 2009-11-18 13:45 2752 ----a-w- c:\windowzz\pchealth\helpctr\PackageStore\SkuStore.bin
2009-12-26 14:37 . 2009-12-26 14:33 -------- d-----w- c:\program files\K-Lite Codec Pack
2009-12-11 18:00 . 2009-12-26 14:33 85504 ----a-w- c:\windowzz\system32\ff_vfw.dll
2009-11-18 18:19 . 2009-11-18 18:18 -------- d-----w- c:\program files\GPU-Z
2009-11-18 18:09 . 2009-11-18 18:09 -------- d-----w- c:\program files\CPU-Z
2009-11-18 17:08 . 2009-11-18 17:08 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-11-18 17:07 . 2009-11-18 17:07 -------- d-----w- c:\program files\NVIDIA Corporation
2009-11-18 14:16 . 2009-11-18 14:16 0 ----a-w- c:\windowzz\nsreg.dat
2009-11-18 14:10 . 2009-11-18 14:06 -------- d-----w- c:\program files\Marvell
2009-11-18 14:09 . 2009-11-18 14:01 -------- d-----w- c:\program files\Common Files\InstallShield
2009-11-18 14:02 . 2009-11-18 14:02 -------- d-----w- c:\program files\Analog Devices
2009-11-18 13:53 . 2009-11-18 13:53 -------- d-----w- c:\program files\Intel
2009-11-18 13:48 . 2009-11-18 13:46 8972 ----a-w- c:\windowzz\pchealth\helpctr\Config\Cntstore.bin
2009-11-18 13:46 . 2009-11-18 13:46 -------- d-----w- c:\program files\microsoft frontpage
2009-11-18 13:44 . 2009-11-18 13:44 21812 ----a-w- c:\windowzz\system32\emptyregdb.dat
2009-10-20 18:34 . 2009-10-20 18:34 219664 ----a-w- c:\windowzz\system32\klogon.dll
.

((((((((((((((((((((((((((((( SnapShot@2010-01-10_20.55.20 )))))))))))))))))))))))))))))))))))))))))
.
+ 2006-07-24 09:50 . 2006-07-24 09:50 47920 c:\windowzz\system32\VBAME.DLL
+ 2006-07-24 09:50 . 2006-07-24 09:50 39728 c:\windowzz\system32\SCP32.DLL
+ 2006-10-26 12:10 . 2006-10-26 12:10 33088 c:\windowzz\system32\FM20ENU.DLL
+ 2010-01-12 16:35 . 2010-01-12 16:35 50688 c:\windowzz\Installer\22b315.msi
+ 2010-01-12 16:37 . 2010-01-12 16:37 35088 c:\windowzz\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2010-01-12 16:37 . 2010-01-12 16:37 18704 c:\windowzz\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2010-01-12 16:37 . 2010-01-12 16:37 20240 c:\windowzz\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2006-10-26 12:45 . 2006-10-26 12:45 293376 c:\windowzz\system32\WISPTIS.EXE
+ 2006-10-26 12:45 . 2006-10-26 12:45 207360 c:\windowzz\system32\INKED.DLL
+ 2010-01-12 16:36 . 2010-01-12 16:36 504832 c:\windowzz\Installer\22b347.msi
+ 2010-01-12 16:35 . 2010-01-12 16:35 506880 c:\windowzz\Installer\22b340.msi
+ 2010-01-12 16:35 . 2010-01-12 16:35 513536 c:\windowzz\Installer\22b338.msi
+ 2010-01-12 16:35 . 2010-01-12 16:35 507904 c:\windowzz\Installer\22b331.msi
+ 2010-01-12 16:35 . 2010-01-12 16:35 506368 c:\windowzz\Installer\22b32a.msi
+ 2010-01-12 16:34 . 2010-01-12 16:34 217864 c:\windowzz\Installer\{90120000-006E-0405-0000-0000000FF1CE}\misc.exe
+ 2010-01-12 16:37 . 2010-01-12 16:37 888080 c:\windowzz\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2010-01-12 16:37 . 2010-01-12 16:37 272648 c:\windowzz\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2010-01-12 16:37 . 2010-01-12 16:37 922384 c:\windowzz\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
+ 2010-01-12 16:37 . 2010-01-12 16:37 845584 c:\windowzz\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
+ 2010-01-12 16:37 . 2010-01-12 16:37 217864 c:\windowzz\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2010-01-12 16:37 . 2010-01-12 16:37 184080 c:\windowzz\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
+ 2010-01-12 16:37 . 2010-01-12 16:37 159504 c:\windowzz\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2009-11-18 14:35 . 2010-01-13 09:25 1486248 c:\windowzz\system32\FNTCACHE.DAT
+ 2006-10-26 13:10 . 2006-10-26 13:10 1190688 c:\windowzz\system32\FM20.DLL
+ 2010-01-12 16:36 . 2010-01-12 16:36 1643520 c:\windowzz\Installer\22b363.msi
+ 2010-01-12 16:36 . 2010-01-12 16:36 1656832 c:\windowzz\Installer\22b35c.msi
+ 2010-01-12 16:36 . 2010-01-12 16:36 1656832 c:\windowzz\Installer\22b355.msi
+ 2010-01-12 16:36 . 2010-01-12 16:36 1656832 c:\windowzz\Installer\22b34e.msi
+ 2010-01-12 16:35 . 2010-01-12 16:35 2347520 c:\windowzz\Installer\22b323.msi
+ 2010-01-12 16:35 . 2010-01-12 16:35 1651712 c:\windowzz\Installer\22b31c.msi
+ 2010-01-12 16:35 . 2010-01-12 16:35 1645056 c:\windowzz\Installer\22b30b.msi
+ 2010-01-12 16:35 . 2010-01-12 16:35 2027008 c:\windowzz\Installer\22b304.msi
+ 2010-01-12 16:35 . 2010-01-12 16:35 1717760 c:\windowzz\Installer\22b2fd.msi
+ 2010-01-12 16:34 . 2010-01-12 16:34 2395648 c:\windowzz\Installer\22b2f6.msi
+ 2010-01-12 16:37 . 2010-01-12 16:37 1172240 c:\windowzz\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
+ 2010-01-12 16:37 . 2010-01-12 16:37 1165584 c:\windowzz\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2010-01-12 16:37 . 2010-01-12 16:37 18181632 c:\windowzz\Installer\22b377.msi
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"WiseStubReboot"="MSIEXEC" [X]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2008-03-16 1040384]
"Six Engine"="c:\program files\ASUS\Six Engine\SixEngine.exe" [2009-06-26 6036992]
"NvMediaCenter"="c:\windowzz\system32\NvMcTray.dll" [2009-09-27 86016]
"NvCplDaemon"="c:\windowzz\system32\NvCpl.dll" [2009-09-27 13918208]
"Ai Nap"="c:\program files\ASUS\AI Suite\AiNap\AiNap.exe" [2009-07-01 1435136]
"QFan Help"="c:\program files\ASUS\AI Suite\QFan3\QFanHelp.exe" [2009-07-01 601088]
"Cpu Level Up help"="c:\program files\ASUS\AI Suite\CpuLevelUpHelp.exe" [2007-11-30 881152]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe" [2009-10-20 340456]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windowzz\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMMyPictures"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMMyPictures"= 1 (0x1)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /r \??\F:\0autocheck autochk *

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Steam"="c:\program files\Steam\Steam.exe" -silent

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\Miranda IM\\miranda32.exe"=
"c:\\WINDOWZZ\\system32\\PnkBstrA.exe"=
"c:\\WINDOWZZ\\system32\\PnkBstrB.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Total Commander\\TOTALCMD.EXE"=
"c:\\Program Files\\HLSW\\hlsw.exe"=
"d:\\Gamezz\\Wolfenstein - Enemy Territory\\ET.exe"=
"d:\\Gamezz\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windowzz\system32\drivers\klbg.sys [14.10.2009 20:18 36880]
R0 mrdd;Marvell Removable Disk Control Driver;c:\windowzz\system32\drivers\mrdd.sys [18.11.2009 15:11 18984]
R0 mv61xx;mv61xx;c:\windowzz\system32\drivers\mv61xx.sys [9.2.2009 3:30 152616]
R2 yksvc;Marvell Yukon Service;RUNDLL32.EXE ykx32mpcoinst,serviceStartProc --> RUNDLL32.EXE ykx32mpcoinst,serviceStartProc [?]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windowzz\system32\drivers\klim5.sys [14.9.2009 13:42 32272]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windowzz\system32\drivers\klmouflt.sys [2.10.2009 18:39 19472]
S0 sptd;sptd;c:\windowzz\system32\drivers\sptd.sys [27.12.2009 12:12 691696]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [18.11.2009 15:09 90112]
S3 cpuz130;cpuz130;\??\c:\docume~1\ADMINI~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys --> c:\docume~1\ADMINI~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys [?]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documentzz\Administrator\Data aplikací\Mozilla\Firefox\Profiles\idwuofb0.default\
FF - prefs.js: network.proxy.type - 4
FF - component: c:\program files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru\components\KavLinkFilter.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

---- NASTAVENÍ FIREFOXU ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
FF - user.js: network.http.max-connections-per-server - 8
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-13 13:34
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-1177238915-507921405-839522115-500\Software\Andreas Haak\a*Ű]
"Language"="English"
.
Celkový čas: 2010-01-13 13:35:44
ComboFix-quarantined-files.txt 2010-01-13 12:35
ComboFix2.txt 2010-01-12 13:42
ComboFix3.txt 2010-01-10 20:56

Před spuštěním: Volných bajtů: 50 982 969 344
Po spuštění: Volných bajtů: 50 953 424 896

- - End Of File - - 452E1DDE16CA1B22D063BDD192255CA6

Problém s FF pořád přetrvává, posílám screenshot - http://img683.imageshack.us/i/fferror.png/

Log již vypadá čistý. Zkuste reinstalovat FF, vč. smazání profilu. Použijte k reinstalu a zazálohování profilu MozBackup: http://www.slunecnice.cz/sw/mozbackup/ .