VIRY.CZ

Mám problém znižeho nic mi zmyzel zástupce total comanderu tak si ho tam chci přidat znova a z adresáře kde je nainstalován zmyzel i TOTALCMD.EXE tak jsem si řek že asi nějaká chyba nebo jsem ho smazal sám ale dneska se to stao u programu NVU. Operační systém mám win7, nevíte čím by to mohlo být? AVG ani Spyware Terminátor nic nenašli. když se podivám do přidat nebo odebrat programy tak tam ten program už taky neni

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:00:18, on 23.1.2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Genius\ioCentre\gTaskBar.exe
C:\Windows\vsnpstd.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Genius\ioCentre\gMouseTask.exe
C:\Genius\ioCentre\gKbdTask.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Genius\ioCentre\gIoCentreFunMgm.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\ESET\ESET Online Scanner\OnlineScannerApp.exe
C:\Program Files\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
C:\Windows\system32\conhost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [ioCentre] C:\Genius\ioCentre\gTaskBar.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [snpstd] C:\Windows\vsnpstd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/f ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GRA32A~1.DLL
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe

--
End of file - 6668 bytes

ComboFix log:
ComboFix 10-01-22.01 - Lukas 23.01.2010 9:23.1.4 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.3582.2244 [GMT 1:00]
Spuštěný z: c:\users\Lukas\Desktop\ComboFix.exe
SP: Spyware Terminator *disabled* (Updated) {55EE49A8-16BE-4601-BBE6-607B7F7317DE}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\ICQ6.5\ICQLRun.exe
c:\program files\temp

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-12-23 do 2010-01-23 )))))))))))))))))))))))))))))))
.

2010-01-23 08:28 . 2010-01-23 08:28 -------- d-----w- c:\users\Lukas\AppData\Local\temp
2010-01-23 08:28 . 2010-01-23 08:28 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-01-23 07:59 . 2010-01-23 07:59 -------- d-----w- c:\program files\Trend Micro
2010-01-23 07:46 . 2010-01-23 07:46 -------- d-----w- c:\program files\ESET
2010-01-23 07:30 . 2010-01-23 07:30 6144 ----a-w- c:\programdata\Spyware Terminator\sp_rsdel.exe
2010-01-23 07:30 . 2010-01-23 07:30 5632 ----a-w- c:\programdata\Spyware Terminator\fileobjinfo.sys
2010-01-23 07:30 . 2010-01-23 07:30 142592 ----a-w- c:\windows\system32\drivers\sp_rsdrv2.sys
2010-01-23 07:30 . 2010-01-23 07:31 -------- d-----w- c:\users\Lukas\AppData\Roaming\Spyware Terminator
2010-01-23 07:30 . 2010-01-23 07:45 -------- d-----w- c:\programdata\Spyware Terminator
2010-01-23 07:30 . 2010-01-23 07:45 -------- d-----w- c:\program files\Spyware Terminator
2010-01-23 07:02 . 2010-01-23 07:02 -------- d-----w- c:\users\Lukas\AppData\Local\TSVNCache
2010-01-22 20:42 . 2010-01-22 20:42 -------- d-----w- c:\users\Lukas\AppData\Roaming\TortoiseSVN
2010-01-22 20:30 . 2010-01-22 20:30 -------- d-----w- c:\users\Lukas\AppData\Roaming\Subversion
2010-01-22 20:30 . 2010-01-22 20:30 -------- d-----w- c:\program files\TortoiseSVN
2010-01-22 20:30 . 2010-01-22 20:30 -------- d-----w- c:\program files\Common Files\TortoiseOverlays
2010-01-22 20:06 . 2010-01-22 20:06 -------- d-----w- C:\totalcmd
2010-01-22 20:06 . 2010-01-22 20:06 -------- d-----w- c:\users\Lukas\AppData\Roaming\GHISLER
2010-01-22 20:06 . 2009-09-24 06:50 545 ----a-w- c:\windows\UC.PIF
2010-01-22 20:06 . 2009-09-24 06:50 545 ----a-w- c:\windows\RAR.PIF
2010-01-22 20:06 . 2009-09-24 06:50 545 ----a-w- c:\windows\PKZIP.PIF
2010-01-22 20:06 . 2009-09-24 06:50 545 ----a-w- c:\windows\PKUNZIP.PIF
2010-01-22 20:06 . 2009-09-24 06:50 545 ----a-w- c:\windows\NOCLOSE.PIF
2010-01-22 20:06 . 2009-09-24 06:50 545 ----a-w- c:\windows\LHA.PIF
2010-01-22 20:06 . 2009-09-24 06:50 545 ----a-w- c:\windows\ARJ.PIF
2010-01-21 20:22 . 2009-12-19 09:02 977920 ----a-w- c:\windows\system32\wininet.dll
2010-01-21 16:57 . 2010-01-21 16:57 -------- d-----w- c:\users\Lukas\AppData\Local\Rockstar Games
2010-01-21 16:55 . 2010-01-21 16:55 -------- d-----w- C:\Hry
2010-01-21 16:53 . 2010-01-21 16:56 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2010-01-21 16:53 . 2010-01-21 16:53 -------- d-----w- c:\windows\system32\xlive
2010-01-19 17:26 . 2010-01-19 17:26 -------- d-----w- c:\users\Lukas\AppData\Roaming\Thunderbird – kopie
2010-01-17 07:29 . 2010-01-17 07:29 -------- d-----w- c:\programdata\ICQ
2010-01-15 15:01 . 2010-01-15 15:01 -------- d-----w- c:\users\Lukas\AppData\Roaming\Nvu
2010-01-15 15:00 . 2010-01-19 11:22 -------- d-----w- c:\program files\Nvu
2010-01-15 12:27 . 2009-12-28 17:25 1260312 ----a-w- c:\programdata\avg9\update\backup\avgfrw.exe
2010-01-13 05:57 . 2009-10-19 14:10 108544 ----a-w- c:\windows\system32\t2embed.dll
2010-01-13 05:57 . 2009-10-19 14:10 70656 ----a-w- c:\windows\system32\fontsub.dll
2010-01-12 19:27 . 2010-01-12 19:27 -------- d-----w- c:\program files\SlySoft
2010-01-12 14:01 . 2010-01-19 11:22 -------- d-----w- c:\users\Lukas\AppData\Roaming\SPORE
2010-01-10 17:41 . 2010-01-10 17:41 -------- d-----w- c:\users\Lukas\AppData\Local\Aspyr
2010-01-10 17:33 . 2007-07-19 17:14 3727720 ----a-w- c:\windows\system32\d3dx9_35.dll
2010-01-10 17:33 . 2007-04-04 17:53 81768 ----a-w- c:\windows\system32\xinput1_3.dll
2010-01-09 07:49 . 2008-12-04 10:57 146432 ----a-w- c:\windows\system32\APOMngr.DLL
2010-01-09 07:49 . 2008-09-17 13:05 72704 ----a-w- c:\windows\system32\CmdRtr.DLL
2010-01-09 07:47 . 2009-11-24 09:40 838176 ----a-w- c:\windows\RtlExUpd.dll
2010-01-08 21:02 . 2010-01-08 21:02 -------- d-----w- C:\wamp
2010-01-08 20:56 . 2010-01-08 20:57 -------- d-----w- C:\MaNGOS
2010-01-08 14:53 . 2010-01-08 14:53 -------- d-----w- c:\users\Lukas\AppData\Roaming\Talkback
2010-01-08 14:52 . 2010-01-19 11:22 -------- d-----w- c:\users\Lukas\AppData\Roaming\Thunderbird
2010-01-08 14:49 . 2010-01-19 17:27 -------- d-----w- c:\users\Lukas\AppData\Local\Thunderbird
2010-01-08 14:49 . 2010-01-08 14:49 -------- d-----w- c:\users\Lukas\AppData\Roaming\Thunderbird1
2010-01-08 14:48 . 2010-01-19 17:27 -------- d-----w- c:\program files\Mozilla Thunderbird
2010-01-06 18:06 . 2010-01-06 18:06 -------- d-----w- c:\programdata\SSScanAppDataDir
2010-01-06 18:06 . 2010-01-06 18:06 -------- d-----w- c:\programdata\MSScanAppDataDir
2010-01-05 16:12 . 2010-01-22 12:27 -------- d-----w- c:\users\Lukas\AppData\Roaming\ICQ
2010-01-04 19:52 . 2010-01-19 17:22 -------- d-----w- c:\users\Lukas\AppData\Local\Diagnostics
2010-01-03 13:25 . 2007-05-23 20:22 89600 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\HPZPPLHN.DLL
2010-01-02 11:06 . 2006-10-26 18:58 30512 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\mdippr.dll
2010-01-02 11:06 . 2006-10-26 18:58 30512 ----a-w- c:\windows\system32\mdimon.dll
2010-01-02 11:04 . 2010-01-02 11:04 -------- d-----w- c:\program files\Microsoft Works
2010-01-02 11:03 . 2010-01-02 11:03 -------- d-----w- c:\program files\Microsoft.NET
2010-01-02 11:02 . 2010-01-02 11:02 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2010-01-02 11:00 . 2010-01-02 11:00 -------- d-----w- c:\windows\PCHEALTH
2010-01-02 10:44 . 2006-10-26 18:56 33104 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll
2010-01-02 10:44 . 2006-10-26 18:56 32592 ----a-w- c:\windows\system32\msonpmon.dll
2010-01-02 10:41 . 2010-01-02 10:41 -------- d-----w- c:\users\Lukas\AppData\Local\Microsoft Help
2010-01-02 10:41 . 2010-01-02 11:06 -------- d-----w- c:\programdata\Microsoft Help
2010-01-02 10:41 . 2010-01-02 10:41 -------- d-----r- C:\MSOCache
2010-01-02 10:08 . 2010-01-02 10:08 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-01-02 10:08 . 2010-01-02 10:08 -------- d-----w- c:\program files\Java
2010-01-02 09:51 . 2010-01-17 11:54 -------- d-----w- c:\users\Lukas\AppData\Local\Adobe
2010-01-02 09:48 . 2009-07-10 11:33 1589248 ----a-w- c:\windows\system32\libmysql_d.dll
2010-01-02 09:48 . 2010-01-02 09:48 -------- d-----w- c:\program files\PremiumSoft
2010-01-02 09:20 . 2010-01-02 09:20 -------- d-----w- c:\program files\Common Files\Adobe
2010-01-02 09:01 . 2009-06-27 16:30 20480 ----a-w- c:\windows\system32\drivers\gHidPnp.sys
2010-01-02 09:01 . 2009-06-25 16:04 11520 ----a-w- c:\windows\system32\drivers\gMouUsb.sys
2010-01-02 09:01 . 2010-01-02 09:01 -------- d-----w- C:\Genius
2010-01-02 08:56 . 2010-01-02 09:26 -------- d-----w- c:\program files\Common Files\snpstd
2010-01-02 08:56 . 2006-07-03 09:31 94208 ----a-w- c:\windows\amcap.exe
2010-01-02 08:56 . 2005-04-20 16:34 61440 ----a-w- c:\windows\system32\rsnpstd.dll
2010-01-02 08:56 . 2010-01-02 08:56 -------- d-----w- c:\users\Lukas\AppData\Roaming\InstallShield
2009-12-30 08:58 . 2009-12-30 09:09 -------- d-----w- c:\programdata\Blizzard Entertainment
2009-12-30 08:26 . 2009-12-30 08:26 -------- d-----w- c:\programdata\Blizzard
2009-12-29 21:01 . 2009-12-29 21:25 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment
2009-12-29 18:15 . 2009-12-29 18:15 -------- d-----w- c:\program files\Elaborate Bytes
2009-12-29 10:05 . 2010-01-03 16:41 108824 ----a-w- c:\users\Lukas\AppData\Local\GDIPFONTCACHEV1.DAT
2009-12-29 10:05 . 2009-12-29 10:06 -------- d-----w- c:\users\Lukas\AppData\Local\Abelssoft
2009-12-29 08:34 . 2009-12-31 08:00 3966744 ----a-w- c:\programdata\avg9\update\backup\avgcorex.dll
2009-12-29 08:34 . 2009-12-29 08:34 3776280 ----a-w- c:\programdata\avg9\update\backup\setup.exe
2009-12-29 08:34 . 2009-12-28 17:25 4043032 ----a-w- c:\programdata\avg9\update\backup\avgui.exe
2009-12-29 08:34 . 2009-12-28 17:25 2352920 ----a-w- c:\programdata\avg9\update\backup\avgresf.dll
2009-12-29 08:34 . 2009-12-28 17:25 2033432 ----a-w- c:\programdata\avg9\update\backup\avgtray.exe
2009-12-29 08:34 . 2009-12-28 17:25 916248 ----a-w- c:\programdata\avg9\update\backup\avgcfgx.dll
2009-12-28 19:39 . 2009-12-28 19:40 -------- d-----w- c:\users\Lukas\.VirtualBox
2009-12-28 19:39 . 2009-12-17 14:02 123280 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2009-12-28 19:38 . 2009-12-28 19:39 -------- dc----w- c:\windows\system32\DRVSTORE
2009-12-28 19:38 . 2009-12-17 14:02 41616 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2009-12-28 19:38 . 2009-12-28 19:38 -------- d-----w- c:\program files\Sun
2009-12-28 18:15 . 2010-01-23 08:28 -------- d-----w- c:\program files\ICQ6.5
2009-12-28 18:13 . 2010-01-23 08:28 -------- d-----w- c:\users\Lukas\AppData\Roaming\Skype
2009-12-28 18:13 . 2009-12-28 18:13 -------- d-----r- c:\program files\Skype
2009-12-28 18:13 . 2009-12-28 18:13 -------- d-----w- c:\programdata\Skype
2009-12-28 18:08 . 2010-01-23 07:49 -------- d-----w- c:\program files\Cheat Engine
2009-12-28 18:08 . 2007-12-26 16:30 679936 ----a-w- c:\windows\system32\D3DX81ab.dll
2009-12-28 18:08 . 2007-12-26 16:30 1970176 ----a-w- c:\windows\system32\d3dx9.dll
2009-12-28 18:03 . 2009-09-10 05:52 257024 ----a-w- c:\windows\system32\msv1_0.dll
2009-12-28 18:02 . 2009-10-29 07:22 2048 ----a-w- c:\windows\system32\tzres.dll
2009-12-28 18:00 . 2009-10-02 04:06 728648 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2009-12-28 18:00 . 2009-09-03 07:04 1320960 ----a-w- c:\windows\system32\CertEnroll.dll
2009-12-28 18:00 . 2009-08-29 06:54 12625408 ----a-w- c:\windows\system32\wmploc.DLL
2009-12-28 18:00 . 2009-08-19 07:20 442920 ----a-w- c:\windows\system32\winresume.exe
2009-12-28 18:00 . 2009-08-19 07:20 507568 ----a-w- c:\windows\system32\winload.exe
2009-12-28 18:00 . 2009-08-03 05:35 2613248 ----a-w- c:\windows\explorer.exe
2009-12-28 18:00 . 2009-07-30 04:44 293888 ----a-w- c:\windows\system32\atmfd.dll
2009-12-28 17:59 . 2009-08-29 06:57 34816 ----a-w- c:\windows\system32\msasn1.dll
2009-12-28 17:49 . 2010-01-21 16:55 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-28 17:49 . 2007-08-20 05:31 151552 ------r- c:\windows\system32\xRaidAPI.dll
2009-12-28 17:49 . 2007-08-29 08:55 1966080 ------r- c:\windows\system32\xRaidSetup.exe
2009-12-28 17:49 . 2009-12-28 17:49 -------- d-----w- C:\RaidTool
2009-12-28 17:49 . 2007-09-29 05:30 65024 ----a-w- c:\windows\system32\drivers\jraid.sys
2009-12-28 17:49 . 2009-12-28 17:49 -------- d-----w- c:\windows\RaidTool
2009-12-28 17:45 . 2009-12-28 17:45 319456 ----a-w- c:\windows\DIFxAPI.dll
2009-12-28 17:45 . 2009-12-28 17:45 -------- d-----w- c:\program files\Common Files\InstallShield
2009-12-28 17:43 . 2009-12-28 17:43 -------- d-----w- c:\program files\Intel
2009-12-28 17:43 . 2007-12-12 07:56 53248 ----a-r- c:\windows\system32\CSVer.dll
2009-12-28 17:43 . 2009-12-28 17:43 -------- d-----w- C:\Intel

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-23 07:49 . 2009-12-28 18:08 -------- d-----w- c:\program files\Cheat Engine
2010-01-23 07:07 . 2009-07-14 08:44 622422 ----a-w- c:\windows\system32\perfh005.dat
2010-01-23 07:07 . 2009-07-14 08:44 118604 ----a-w- c:\windows\system32\perfc005.dat
2010-01-21 16:54 . 2010-01-21 16:54 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2010-01-19 11:23 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Photo Viewer
2010-01-09 07:48 . 2010-01-09 07:48 -------- d-----w- c:\program files\Realtek
2010-01-07 20:36 . 2010-01-07 20:36 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_09_00.Wdf
2010-01-02 11:04 . 2009-07-14 04:52 -------- d-----w- c:\program files\MSBuild
2009-12-28 17:13 . 2009-12-28 17:13 -------- d-sh--we c:\programdata\Plocha
2009-12-28 17:13 . 2009-12-28 17:13 -------- d-sh--we c:\programdata\Oblíbené položky
2009-12-28 17:13 . 2009-12-28 17:13 -------- d-sh--we c:\programdata\Šablony
2009-12-28 17:13 . 2009-12-28 17:13 -------- d-sh--we c:\programdata\Nabídka Start
2009-12-28 17:13 . 2009-12-28 17:13 -------- d-sh--we c:\programdata\Dokumenty
2009-12-28 17:13 . 2009-12-28 17:13 -------- d-sh--we c:\programdata\Data aplikací
2009-12-19 08:11 . 2009-12-19 08:11 249888 ----a-w- c:\windows\system32\drivers\Rt86win7.sys
2009-12-17 22:25 . 2009-12-17 22:25 26024 ------w- c:\windows\system32\drivers\ElbyCDIO.sys
2009-12-17 14:02 . 2009-12-17 14:02 99152 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2009-12-17 14:02 . 2009-12-17 14:02 133648 ----a-w- c:\windows\system32\VBoxNetFltNotify.dll
2009-12-17 14:02 . 2009-12-17 14:02 110096 ----a-w- c:\windows\system32\drivers\VBoxNetFlt.sys
2009-12-08 10:33 . 2010-01-09 07:48 55328 ----a-w- c:\windows\system32\RtkCoInst.dll
2009-12-08 10:33 . 2010-01-09 07:48 1538592 ----a-w- c:\windows\system32\RtkPgExt.dll
2009-12-08 10:33 . 2010-01-09 07:48 367136 ----a-w- c:\windows\system32\RtkApoApi.dll
2009-12-08 10:33 . 2010-01-09 07:48 2796064 ----a-w- c:\windows\system32\RtkAPO.dll
2009-12-08 10:16 . 2010-01-09 07:48 2975776 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2009-12-04 10:26 . 2010-01-09 07:48 297376 ----a-w- c:\windows\system32\FMAPO.dll
2009-12-04 07:43 . 2010-01-09 07:48 132368 ----a-w- c:\windows\system32\MaxxAudioAPO.dll
2009-12-03 08:27 . 2009-12-03 08:27 80416 ----a-w- c:\windows\system32\RtNicProp32.dll
2009-12-03 08:27 . 2009-07-21 02:24 100896 ----a-w- c:\windows\system32\RTNUninst32.dll
2009-11-24 01:55 . 2010-01-09 07:48 345328 ----a-w- c:\windows\system32\SRSTSXT.dll
2009-11-24 01:55 . 2010-01-09 07:48 185584 ----a-w- c:\windows\system32\SRSTSHD.dll
2009-11-24 01:55 . 2010-01-09 07:48 173296 ----a-w- c:\windows\system32\SRSHP360.dll
2009-11-24 01:55 . 2010-01-09 07:48 140528 ----a-w- c:\windows\system32\SRSWOW.dll
2009-11-20 19:33 . 2009-11-20 19:33 812648 ----a-w- c:\windows\system32\nvsvc.dll
2009-11-20 19:33 . 2009-11-20 19:33 66664 ----a-w- c:\windows\system32\nvshext.dll
2009-11-20 19:33 . 2009-11-20 19:33 1323624 ----a-w- c:\windows\system32\nvsvcr.dll
2009-11-20 19:33 . 2009-11-20 19:33 12685928 ----a-w- c:\windows\system32\nvcpl.dll
2009-11-20 19:33 . 2009-11-20 19:33 122984 ----a-w- c:\windows\system32\nvvsvc.exe
2009-11-20 19:33 . 2009-11-20 19:33 110184 ----a-w- c:\windows\system32\nvmctray.dll
2009-11-18 10:42 . 2010-01-09 07:48 1783056 ----a-w- c:\windows\system32\WavesLib.dll
2009-11-18 10:42 . 2010-01-09 07:48 311568 ----a-w- c:\windows\system32\MaxxAudioAPO20.dll
2009-11-18 10:42 . 2010-01-09 07:48 1938704 ----a-w- c:\windows\system32\MaxxAudioEQ.dll
2009-11-17 23:13 . 2010-01-09 07:48 531032 ----a-w- c:\windows\system32\MBAPO32.dll
2009-11-17 23:13 . 2010-01-09 07:48 50776 ----a-w- c:\windows\system32\MBPPCn32.dll
2009-11-17 23:12 . 2010-01-09 07:48 68696 ----a-w- c:\windows\system32\MBWrp32.dll
2009-11-17 23:12 . 2010-01-09 07:48 53848 ----a-w- c:\windows\system32\MBppld32.dll
2009-11-17 10:13 . 2010-01-09 07:48 96160 ----a-w- c:\windows\system32\AERTARen.dll
2009-11-17 10:10 . 2010-01-09 07:48 146336 ----a-w- c:\windows\system32\AERTACap.dll
2009-11-13 07:16 . 2010-01-09 07:48 73216 ----a-w- c:\windows\system32\RTEEL32A.dll
2009-11-13 07:16 . 2010-01-09 07:48 59392 ----a-w- c:\windows\system32\RTEEG32A.dll
2009-11-13 07:16 . 2010-01-09 07:48 348160 ----a-w- c:\windows\system32\RTEEP32A.dll
2009-11-13 07:16 . 2010-01-09 07:48 165376 ----a-w- c:\windows\system32\RTEED32A.dll
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2009-08-13 17:55 85768 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2009-08-13 17:55 85768 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2009-08-13 17:55 85768 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2009-08-13 17:55 85768 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2009-08-13 17:55 85768 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2009-08-13 17:55 85768 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2009-08-13 17:55 85768 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2009-08-13 17:55 85768 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2009-08-13 17:55 85768 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-10-09 25623336]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2010-01-23 3037696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2009-12-29 2033432]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-06-17 85160]
"ioCentre"="c:\genius\ioCentre\gTaskBar.exe" [2009-09-03 61440]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"snpstd"="c:\windows\vsnpstd.exe" [2007-03-30 344064]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-01-02 149280]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-12-08 8120864]
"CloneCDTray"="c:\program files\SlySoft\CloneCD\CloneCDTray.exe" [2009-01-29 57344]
"SpywareTerminator"="c:\program files\Spyware Terminator\SpywareTerminatorShield.exe" [2010-01-23 2166784]

c:\users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\avgrsstx.dll

R0 AvgRkx86;avgrkx86.sys;c:\windows\System32\drivers\avgrkx86.sys [28.12.2009 18:26 161800]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\System32\drivers\avgldx86.sys [28.12.2009 18:26 333192]
R1 AvgTdiX;AVG Network Redirector;c:\windows\System32\drivers\avgtdix.sys [28.12.2009 18:26 360584]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\System32\drivers\sp_rsdrv2.sys [23.1.2010 8:30 142592]
R1 VBoxDrv;VirtualBox Service;c:\windows\System32\drivers\VBoxDrv.sys [28.12.2009 20:39 123280]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\System32\drivers\VBoxUSBMon.sys [28.12.2009 20:38 41616]
R2 avg9emc;AVG E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [28.12.2009 18:25 906520]
R2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [28.12.2009 18:25 285392]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [20.11.2009 19:17 240232]
R3 gHidPnp;USB Device Enhanced Function Driver;c:\windows\System32\drivers\gHidPnp.sys [2.1.2010 10:01 20480]
R3 gMouUsb;USB Mouse Device Drv;c:\windows\System32\drivers\gMouUsb.sys [2.1.2010 10:01 11520]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\System32\drivers\Rt86win7.sys [19.12.2009 9:11 249888]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\System32\drivers\VBoxNetAdp.sys [17.12.2009 15:02 99152]
R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\System32\drivers\VBoxNetFlt.sys [17.12.2009 15:02 110096]

--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - SP_RSDRV2
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\jl3124jm.default\
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.avg.com/dispatcher.aspx?i=42&tp=ab&q=
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\NVIDIA Corporation\3D Vision\npnv3dv.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)


.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2010-01-23 09:30:07
ComboFix-quarantined-files.txt 2010-01-23 08:30

Před spuštěním: Volných bajtů: 116 605 075 456
Po spuštění: Volných bajtů: 116 858 281 984

- - End Of File - - 90EFC91F5BE4A5B954B6453D553E362C

Hezké odpoledne
Změnilo se po použití combofixu něco? a přečtěte si varování v mém podpise

Tyto složky znáte?
C:\wamp
C:\MaNGOS

jediné co se změnilo sobory typu *.php jsem měl nastavené na WordPad musel jsem to znova nastavit jinak o ničem jiném nevím. Složky C:\wamp C:\MaNGOS znám. Nemohl jsem tím program ComboFix něco poškodit? Udělal jsem jen to co bylo psáno v jiných příspěvcích

Stáhněte SAS z mého podpisu.

-Nainstalujte,
-proveďte aktualizaci a dejte uplný sken.
-Co najde, smažte,a napište co našel.
-SAS si můžete ponechat na občasný sken, je to výborný antispyware , ve free verzi bez rezidentního štítu.


Stáhněte Gmer http://www.viry.cz/forum/viewtopic.php?f=29&t=62878
- rozbalte a spusťte
-proběhne sken, po skončení se otevře okno s výsledky, klikněte na Save a tím si uložíte log,který sem vložíte

-Podle návodu v odkazu provedete druhý sken a log sem také vložíte.


Combofix opravuje asociace, takže Vám změnil nastavení. Combofix může poškodit systém, proto se nemá používat bez dozoru zkušené osoby