Výchozí poskytovatel hledání IE 8

[ninja_girl]

Vždy když zapnu Internet Explorer 8, tak mi vyskočí tato hláška:

"Program v počítači poškodil nastavení výchozího poskytovatele hledání v prohlížeči Internet Explorer 8."

IE normálně nepoužívám, pouze při optimalizování www stránek apod. Kontrola Avastem a Spybotem byla v pořádku.

Předem díky!

Tady je log z RSIT:

Logfile of random's system information tool 1.06 (written by random/random)
Run by home at 2009-09-07 15:01:54
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 279 GB (93%) free of 299 GB
Total RAM: 987 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:02:05, on 7.9.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Intel\AMT\atchksrv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Intel\AMT\LMS.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Program Files\Intel\AMT\UNS.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\rundll32.exe
C:\Documents and Settings\home\Dokumenty\RSIT.exe
C:\Program Files\trend micro\home.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk.disabled
O4 - Global Startup: HP Digital Imaging Monitor.lnk.disabled
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: HP Chytrý výběr - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.autocont.cz
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Intel(R) Active Management Technology System Status Service (atchksrv) - Intel Corporation - C:\Program Files\Intel\AMT\atchksrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Intel(R) Active Management Technology Local Management Service (LMS) - Intel - C:\Program Files\Intel\AMT\LMS.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Intel(R) Active Management Technology User Notification Service (UNS) - Intel - C:\Program Files\Intel\AMT\UNS.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZONELABS\vsmon.exe

--
End of file - 5857 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2007-11-06 322880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2005-09-24 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-02-01 1377576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-10 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-10 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2008-11-10 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2007-11-06 542016]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-08-17 81000]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-10-22 7700480]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2009-02-16 981384]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2006-03-02 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Reader Speed Launch.lnk.disabled - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
HP Digital Imaging Monitor.lnk.disabled - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 3 months======

2009-09-07 14:35:14 ----HD---- C:\WINDOWS\ie8
2009-09-01 13:17:03 ----A---- C:\WINDOWS\PhotoSnapViewer.INI
2009-08-29 12:01:27 ----HD---- C:\WINDOWS\$NtUninstallKB970653-v3$
2009-08-23 21:03:42 ----D---- C:\Documents and Settings\home\Data aplikací\OpenOffice.org
2009-08-23 21:02:29 ----D---- C:\Program Files\OpenOffice.org 3
2009-08-21 20:28:38 ----D---- C:\Program Files\Common Files\Borland
2009-08-21 20:27:06 ----D---- C:\Program Files\MRP
2009-08-21 18:27:36 ----HD---- C:\WINDOWS\$NtUninstallKB968389$
2009-08-14 17:43:37 ----HD---- C:\WINDOWS\$NtUninstallKB960859$
2009-08-14 17:43:32 ----HD---- C:\WINDOWS\$NtUninstallKB971657$
2009-08-14 17:43:28 ----HD---- C:\WINDOWS\$NtUninstallKB971557$
2009-08-14 17:43:24 ----HD---- C:\WINDOWS\$NtUninstallKB973869$
2009-08-14 17:43:18 ----HD---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2009-08-14 17:43:14 ----HD---- C:\WINDOWS\$NtUninstallKB973507$
2009-08-14 17:43:10 ----HD---- C:\WINDOWS\$NtUninstallKB973354$
2009-08-14 17:42:23 ----D---- C:\WINDOWS\ServicePackFiles
2009-08-14 17:42:21 ----HD---- C:\WINDOWS\$NtUninstallKB958470$
2009-08-14 17:42:16 ----HD---- C:\WINDOWS\$NtUninstallKB973815$
2009-08-14 17:42:08 ----HD---- C:\WINDOWS\$NtUninstallKB971032$
2009-07-31 19:48:01 ----HD---- C:\WINDOWS\$NtUninstallKB961118$
2009-07-31 19:47:57 ----HD---- C:\WINDOWS\$NtUninstallKB925720$
2009-07-26 16:22:13 ----A---- C:\WINDOWS\WININIT.INI
2009-07-26 16:17:07 ----D---- C:\Documents and Settings\home\Data aplikací\Roxio
2009-07-26 16:13:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Uninstall
2009-07-26 16:04:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\InstallShield
2009-07-26 16:03:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\Roxio
2009-07-26 16:02:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sonic
2009-07-26 16:02:16 ----D---- C:\Program Files\Common Files\Roxio Shared
2009-07-26 16:01:55 ----A---- C:\WINDOWS\emunist.exe
2009-07-26 16:01:45 ----N---- C:\WINDOWS\system32\vfwwdm32.dll
2009-07-26 16:01:45 ----N---- C:\WINDOWS\system32\PsisDecd.dll
2009-07-26 16:01:38 ----D---- C:\Program Files\Roxio Easy VHS to DVD
2009-07-26 16:01:35 ----N---- C:\WINDOWS\system32\xactengine2_10.dll
2009-07-26 16:01:35 ----N---- C:\WINDOWS\system32\d3dx10_36.dll
2009-07-26 16:01:35 ----N---- C:\WINDOWS\system32\D3DCompiler_36.dll
2009-07-26 16:01:34 ----N---- C:\WINDOWS\system32\xactengine2_9.dll
2009-07-26 16:01:34 ----N---- C:\WINDOWS\system32\d3dx9_36.dll
2009-07-26 16:01:34 ----N---- C:\WINDOWS\system32\d3dx10_35.dll
2009-07-26 16:01:33 ----N---- C:\WINDOWS\system32\xactengine2_8.dll
2009-07-26 16:01:33 ----N---- C:\WINDOWS\system32\X3DAudio1_2.dll
2009-07-26 16:01:33 ----N---- C:\WINDOWS\system32\d3dx9_35.dll
2009-07-26 16:01:33 ----N---- C:\WINDOWS\system32\D3DCompiler_35.dll
2009-07-26 16:01:32 ----N---- C:\WINDOWS\system32\d3dx9_34.dll
2009-07-26 16:01:32 ----N---- C:\WINDOWS\system32\d3dx10_34.dll
2009-07-26 16:01:32 ----N---- C:\WINDOWS\system32\D3DCompiler_34.dll
2009-07-26 16:01:31 ----N---- C:\WINDOWS\system32\xinput1_3.dll
2009-07-26 16:01:31 ----N---- C:\WINDOWS\system32\xactengine2_7.dll
2009-07-26 16:01:30 ----N---- C:\WINDOWS\system32\d3dx10_33.dll
2009-07-26 16:01:30 ----N---- C:\WINDOWS\system32\D3DCompiler_33.dll
2009-07-26 16:01:29 ----N---- C:\WINDOWS\system32\xactengine2_6.dll
2009-07-26 16:01:29 ----N---- C:\WINDOWS\system32\d3dx9_33.dll
2009-07-26 16:01:28 ----N---- C:\WINDOWS\system32\xactengine2_5.dll
2009-07-26 16:01:28 ----N---- C:\WINDOWS\system32\xactengine2_4.dll
2009-07-26 16:01:28 ----N---- C:\WINDOWS\system32\x3daudio1_1.dll
2009-07-26 16:01:28 ----N---- C:\WINDOWS\system32\d3dx9_32.dll
2009-07-26 16:01:27 ----N---- C:\WINDOWS\system32\xinput1_2.dll
2009-07-26 16:01:27 ----N---- C:\WINDOWS\system32\xactengine2_3.dll
2009-07-26 16:01:27 ----N---- C:\WINDOWS\system32\xactengine2_2.dll
2009-07-26 16:01:27 ----N---- C:\WINDOWS\system32\d3dx9_31.dll
2009-07-26 16:01:26 ----N---- C:\WINDOWS\system32\xinput1_1.dll
2009-07-26 16:01:26 ----N---- C:\WINDOWS\system32\xactengine2_1.dll
2009-07-26 16:01:22 ----N---- C:\WINDOWS\system32\xactengine2_0.dll
2009-07-26 16:01:21 ----N---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-07-26 16:01:21 ----N---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-07-26 16:01:21 ----N---- C:\WINDOWS\system32\d3dx9_29.dll
2009-07-26 16:01:20 ----N---- C:\WINDOWS\system32\d3dx9_27.dll
2009-07-26 16:01:20 ----N---- C:\WINDOWS\system32\d3dx9_26.dll
2009-07-26 16:01:20 ----N---- C:\WINDOWS\system32\d3dx9_25.dll
2009-07-26 16:01:19 ----N---- C:\WINDOWS\system32\d3dx9_24.dll
2009-07-26 16:00:45 ----N---- C:\WINDOWS\system32\spmsg2.dll
2009-07-26 16:00:43 ----HD---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2009-07-26 15:52:39 ----D---- C:\WINDOWS\system32\XPSViewer
2009-07-26 15:52:36 ----D---- C:\Program Files\MSBuild
2009-07-26 15:52:35 ----D---- C:\WINDOWS\system32\en-US
2009-07-26 15:52:31 ----D---- C:\Program Files\Reference Assemblies
2009-07-26 15:52:07 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2009-07-26 15:52:07 ----N---- C:\WINDOWS\system32\prntvpt.dll
2009-07-26 15:52:06 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2009-07-26 15:52:06 ----D---- C:\5a7b73682f308f0b138d0a
2009-07-26 15:50:51 ----HD---- C:\WINDOWS\$NtUninstallWIC$
2009-07-24 18:50:11 ----N---- C:\WINDOWS\system32\StwRv50C.exe
2009-07-24 18:50:11 ----N---- C:\WINDOWS\system32\StwRp50C.dll
2009-07-24 18:50:11 ----N---- C:\WINDOWS\system32\StwRex50.dll
2009-07-24 18:50:11 ----N---- C:\WINDOWS\system32\StwGrd50.dll
2009-07-21 18:44:44 ----HD---- C:\WINDOWS\$NtUninstallKB973346$
2009-07-21 18:44:39 ----HD---- C:\WINDOWS\$NtUninstallKB971633$
2009-07-21 18:43:54 ----HD---- C:\WINDOWS\$NtUninstallKB961371$
2009-06-30 15:56:55 ----D---- C:\WINDOWS\system32\NtmsData
2009-06-30 15:50:29 ----HD---- C:\WINDOWS\$NtUninstallKB961501$
2009-06-30 15:50:25 ----HD---- C:\WINDOWS\$NtUninstallKB969898$
2009-06-30 15:50:21 ----HD---- C:\WINDOWS\$NtUninstallKB970238$
2009-06-30 15:50:17 ----D---- C:\WINDOWS\pss
2009-06-30 15:50:13 ----HD---- C:\WINDOWS\$NtUninstallKB968537$
2009-06-29 19:29:57 ----D---- C:\WINDOWS\ie8updates
2009-06-29 19:27:34 ----A---- C:\WINDOWS\system32\MRT.exe

======List of files/folders modified in the last 3 months======

2009-09-07 14:38:08 ----A---- C:\WINDOWS\system32\log.txt
2009-09-07 14:37:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-09-07 14:36:38 ----A---- C:\WINDOWS\imsins.BAK
2009-08-17 18:10:20 ----A---- C:\WINDOWS\system32\aswBoot.exe
2009-08-15 15:33:50 ----A---- C:\WINDOWS\system32\PerfStringBackup.TMP
2009-08-05 11:07:44 ----N---- C:\WINDOWS\system32\mswebdvd.dll
2009-07-19 18:46:58 ----A---- C:\WINDOWS\system32\ieframe.dll
2009-07-19 15:17:00 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-07-17 20:57:54 ----A---- C:\WINDOWS\system32\atl.dll
2009-07-14 13:03:14 ----N---- C:\WINDOWS\system32\tzchange.exe
2009-07-13 23:43:24 ----N---- C:\WINDOWS\system32\wmpdxm.dll
2009-07-13 23:43:24 ----N---- C:\WINDOWS\system32\wmp.dll
2009-07-03 18:59:42 ----N---- C:\WINDOWS\system32\occache.dll
2009-07-03 18:59:42 ----A---- C:\WINDOWS\system32\wininet.dll
2009-07-03 18:59:42 ----A---- C:\WINDOWS\system32\urlmon.dll
2009-07-03 18:59:40 ----N---- C:\WINDOWS\system32\jsproxy.dll
2009-07-03 18:59:40 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2009-07-03 18:59:40 ----A---- C:\WINDOWS\system32\msfeeds.dll
2009-07-03 18:59:40 ----A---- C:\WINDOWS\system32\iertutil.dll
2009-07-03 18:59:38 ----N---- C:\WINDOWS\system32\iepeers.dll
2009-07-03 18:59:36 ----N---- C:\WINDOWS\system32\iedkcs32.dll
2009-07-03 13:01:06 ----N---- C:\WINDOWS\system32\ie4uinit.exe
2009-06-30 15:51:48 ----RASH---- C:\boot.ini
2009-06-30 15:51:48 ----A---- C:\WINDOWS\win.ini
2009-06-30 15:51:48 ----A---- C:\WINDOWS\system.ini
2009-06-25 20:37:50 ----A---- C:\WINDOWS\system32\mqutil.dll
2009-06-25 20:37:50 ----A---- C:\WINDOWS\system32\mqupgrd.dll
2009-06-25 20:37:50 ----A---- C:\WINDOWS\system32\mqtrig.dll
2009-06-25 20:37:50 ----A---- C:\WINDOWS\system32\mqsnap.dll
2009-06-25 20:37:50 ----A---- C:\WINDOWS\system32\mqsec.dll
2009-06-25 20:37:50 ----A---- C:\WINDOWS\system32\mqrtdep.dll
2009-06-25 20:37:50 ----A---- C:\WINDOWS\system32\mqrt.dll
2009-06-25 20:37:50 ----A---- C:\WINDOWS\system32\mqqm.dll
2009-06-25 20:37:50 ----A---- C:\WINDOWS\system32\mqoa.dll
2009-06-25 20:37:50 ----A---- C:\WINDOWS\system32\mqise.dll
2009-06-25 20:37:50 ----A---- C:\WINDOWS\system32\mqdscli.dll
2009-06-25 20:37:50 ----A---- C:\WINDOWS\system32\mqad.dll
2009-06-25 10:48:08 ----N---- C:\WINDOWS\system32\lsasrv.dll
2009-06-25 10:48:08 ----A---- C:\WINDOWS\system32\wdigest.dll
2009-06-25 10:48:08 ----A---- C:\WINDOWS\system32\schannel.dll
2009-06-25 10:48:08 ----A---- C:\WINDOWS\system32\secur32.dll
2009-06-25 10:48:08 ----A---- C:\WINDOWS\system32\msv1_0.dll
2009-06-25 10:48:08 ----A---- C:\WINDOWS\system32\kerberos.dll
2009-06-22 13:49:24 ----A---- C:\WINDOWS\system32\mqtgsvc.exe
2009-06-22 13:49:24 ----A---- C:\WINDOWS\system32\mqbkup.exe
2009-06-22 13:49:04 ----A---- C:\WINDOWS\system32\mqsvc.exe
2009-06-16 16:55:10 ----N---- C:\WINDOWS\system32\t2embed.dll
2009-06-16 16:55:10 ----N---- C:\WINDOWS\system32\fontsub.dll
2009-06-15 13:33:50 ----N---- C:\WINDOWS\system32\telnet.exe
2009-06-15 13:33:48 ----N---- C:\WINDOWS\system32\tlntsess.exe
2009-06-10 16:24:50 ----N---- C:\WINDOWS\system32\avifil32.dll
2009-06-10 08:31:44 ----N---- C:\WINDOWS\system32\wkssvc.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-08-17 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-08-17 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-08-17 51376]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2006-03-02 39936]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2006-03-02 14848]
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2009-02-16 353672]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-08-17 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-08-17 94160]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2006-03-02 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-08-17 23152]
R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2007-04-13 254872]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HECI;Intel(R) Management Engine Interface; C:\WINDOWS\system32\DRIVERS\HECI.sys [2007-05-11 45056]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2006-03-02 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-10-16 4615168]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2006-03-02 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-10-22 3994624]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2006-03-02 31616]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S1 easdrv;easdrv; C:\WINDOWS\system32\DRIVERS\easdrv.sys []
S1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys []
S2 eamon;EAMON; C:\WINDOWS\system32\DRIVERS\eamon.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-10-30 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-10-30 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-10-30 21568]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2004-08-03 15360]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-08-17 18752]
R2 atchksrv;Intel(R) Active Management Technology System Status Service; C:\Program Files\Intel\AMT\atchksrv.exe [2007-05-23 176128]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-08-17 138680]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2006-03-02 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-11-10 152984]
R2 LMS;Intel(R) Active Management Technology Local Management Service; C:\Program Files\Intel\AMT\LMS.exe [2007-05-23 102400]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2006-03-02 14336]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-10-22 159810]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2006-03-02 14336]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2005-08-08 167936]
R2 UNS;Intel(R) Active Management Technology User Notification Service; C:\Program Files\Intel\AMT\UNS.exe [2007-05-23 2514944]
R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZONELABS\vsmon.exe [2009-02-16 2402184]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-08-17 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-08-17 352920]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2006-03-02 14336]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-04-13 792112]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-05-16 271920]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2006-03-02 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Roli]

V logu nic špatného nevidím, zkus tedy IE 8 spustit a buď nahoře přes Soubor >> vyber Import a Export a nech načíst z jiného prohlížeče, nebo přes Nástroje >> Možnosti internetu >> karta Obecné a do okna Domovská stránka napiš co chceš.

Pokud nezabere dej vědět.

[ninja_girl]

Asi jsem se špatně vyjádřila, domovská stránka se načte v pořádku, ale chvilku po spuštění se objeví dialogové okno, kde je toto napsané. Dá se tam kliknout jenom OK a pak se otevře nastavení poskytovatele hledání. Tady je screenshot:

[Roli]

A tohle dělá při každém spuštění IE 8 ?

Pokud ano smaž nepotřebné soubory

pomocí Ccleaneru

návod :

položka Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

položka Registry - tady vyčistíš registry; před použitím doporučuji udělat jejich zálohu, kterou Ccleaner nabízí, čištění registru je třeba několikrát zopakovat !

Pak použij Mbam z mého podpisu.

[ninja_girl]

CCleanerem promazáno, Mbam jsem spustila Rychlý test a nic to nenašlo. Dělá to při každým spuštění IE. Napadá mě, jestli není v počítači nějaký program (ne nic zákeřného), který nějak koliduje s IE?

[Roli]

A v tom Nastavení hledání jde některý poskytovatel přidat nebo změnit ?

Zkus IE 8 reinstalovat nebo pokud chceš můžeme použít větší kalibr abychom měli jistotu že to nedělá nějaký zašitý šmejd

proto, stáhni a ulož na plochu ComboFix

pak spusť aplikaci pod účtem s administrátorským oprávněním

hned po startu se zobrazí obrazovka s licenčními podmínkami které potvrdíš kliknutím na ANO a už to jede

celá akce trvá okolo 10 minut, může i déle, během skenu se nepokoušej spouštět nic jiného

při skenovaní může být PC i restartováno nelekat se

upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu, protože Combofix se pokouší napadené soubory smazat

a tyto programy mu můžou bránit.

[ninja_girl]

Přidat další poskytovatele hledání jde, ale už je nejde nastavit jako výchozí. Zkoušela jsem reinstalovat ale problém přetrvává. Na mým druhým PC jede IE v pohodě, tak nevím jestli to třeba není nějakým nainstalovaným programem co se s tím bije?

Přikládám log z ComboFixu:

ComboFix 09-09-10.03 - home 11.09.2009 14:20.1.2 - FAT32x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.987.494 [GMT 2:00]
Spuštěný z: c:\documents and settings\home\Plocha\ComboFix.exe
AV: avast! antivirus 4.8.1351 [VPS 090910-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: ZoneAlarm Firewall *enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Installer\b1a1.msi

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-08-11 do 2009-09-11 )))))))))))))))))))))))))))))))
.

2009-09-09 11:15 . 2009-08-03 11:36 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-09 11:15 . 2009-09-09 11:15 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-09 11:15 . 2009-08-03 11:36 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-07 12:35 . 2009-09-07 12:35 -------- d--h--w- c:\windows\ie8
2009-08-23 19:02 . 2009-08-23 19:02 -------- d-----w- c:\program files\OpenOffice.org 3
2009-08-21 18:28 . 2009-08-21 18:28 -------- d-----w- c:\program files\Common Files\Borland
2009-08-21 18:27 . 2009-08-21 18:27 -------- d-----w- c:\program files\MRP
2009-08-14 15:42 . 2009-08-14 15:42 -------- d-----w- c:\windows\ServicePackFiles

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-17 16:10 . 2008-08-22 11:26 1279456 ----a-w- c:\windows\system32\aswBoot.exe
2009-08-17 16:06 . 2008-08-22 11:26 93392 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-08-17 16:06 . 2008-08-22 11:26 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-08-17 16:05 . 2008-08-22 11:26 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-08-17 16:05 . 2008-08-22 11:26 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-08-17 16:04 . 2008-08-22 11:27 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-08-17 16:04 . 2008-08-22 11:27 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-08-17 16:03 . 2008-08-22 11:26 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-08-17 16:02 . 2008-08-22 11:26 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-08-15 13:33 . 2008-02-25 06:06 4530 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2009-08-05 09:07 . 1979-12-31 22:00 205312 ------w- c:\windows\system32\mswebdvd.dll
2009-07-26 14:02 . 2009-07-26 14:02 -------- d-----w- c:\program files\Common Files\Roxio Shared
2009-07-26 14:01 . 2009-07-26 14:01 -------- d-----w- c:\program files\Roxio Easy VHS to DVD
2009-07-26 13:52 . 2009-07-26 13:52 -------- d-----w- c:\program files\MSBuild
2009-07-26 13:52 . 2009-07-26 13:52 -------- d-----w- c:\program files\Reference Assemblies
2009-07-17 18:57 . 1979-12-31 22:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-13 21:43 . 1979-12-31 22:00 286208 ------w- c:\windows\system32\wmpdxm.dll
2009-07-03 16:59 . 1979-12-31 22:00 915456 ----a-w- c:\windows\system32\wininet.dll
2009-06-25 18:37 . 1979-12-31 22:00 95744 ----a-w- c:\windows\system32\mqsec.dll
2009-06-25 18:37 . 1979-12-31 22:00 661504 ----a-w- c:\windows\system32\mqqm.dll
2009-06-25 18:37 . 1979-12-31 22:00 517120 ----a-w- c:\windows\system32\mqsnap.dll
2009-06-25 18:37 . 1979-12-31 22:00 489472 ----a-w- c:\windows\system32\mqutil.dll
2009-06-25 18:37 . 1979-12-31 22:00 48640 ----a-w- c:\windows\system32\mqupgrd.dll
2009-06-25 18:37 . 1979-12-31 22:00 47104 ----a-w- c:\windows\system32\mqdscli.dll
2009-06-25 18:37 . 1979-12-31 22:00 225280 ----a-w- c:\windows\system32\mqoa.dll
2009-06-25 18:37 . 1979-12-31 22:00 186880 ----a-w- c:\windows\system32\mqtrig.dll
2009-06-25 18:37 . 1979-12-31 22:00 177152 ----a-w- c:\windows\system32\mqrt.dll
2009-06-25 18:37 . 1979-12-31 22:00 16896 ----a-w- c:\windows\system32\mqise.dll
2009-06-25 18:37 . 1979-12-31 22:00 138240 ----a-w- c:\windows\system32\mqad.dll
2009-06-25 18:37 . 1979-12-31 22:00 123392 ----a-w- c:\windows\system32\mqrtdep.dll
2009-06-25 08:48 . 1979-12-31 23:00 723456 ------w- c:\windows\system32\lsasrv.dll
2009-06-25 08:48 . 1979-12-31 23:00 168448 ----a-w- c:\windows\system32\schannel.dll
2009-06-25 08:48 . 1979-12-31 22:00 59392 ----a-w- c:\windows\system32\wdigest.dll
2009-06-25 08:48 . 1979-12-31 22:00 56320 ----a-w- c:\windows\system32\secur32.dll
2009-06-25 08:48 . 1979-12-31 22:00 298496 ----a-w- c:\windows\system32\kerberos.dll
2009-06-25 08:48 . 1979-12-31 22:00 133632 ----a-w- c:\windows\system32\msv1_0.dll
2009-06-22 11:49 . 1979-12-31 22:00 19968 ----a-w- c:\windows\system32\mqbkup.exe
2009-06-22 11:49 . 1979-12-31 22:00 117248 ----a-w- c:\windows\system32\mqtgsvc.exe
2009-06-22 11:49 . 1979-12-31 22:00 4608 ----a-w- c:\windows\system32\mqsvc.exe
2009-06-22 11:48 . 1979-12-31 22:00 91776 ----a-w- c:\windows\system32\drivers\mqac.sys
2009-06-22 11:34 . 1979-12-31 22:00 92544 ------w- c:\windows\system32\drivers\ksecdd.sys
2009-06-16 14:55 . 1979-12-31 22:00 82432 ------w- c:\windows\system32\fontsub.dll
2009-06-16 14:55 . 1979-12-31 22:00 119808 ------w- c:\windows\system32\t2embed.dll
2009-06-15 11:33 . 1979-12-31 22:00 78336 ------w- c:\windows\system32\telnet.exe
2009-06-15 11:33 . 1979-12-31 22:00 81408 ------w- c:\windows\system32\tlntsess.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-08-17 81000]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-10-22 7700480]
"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2009-02-15 981384]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Reader Speed Launch.lnk.disabled [2008-2-22 1666]
HP Digital Imaging Monitor.lnk.disabled [2008-10-8 1717]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe"
"CTFMON.EXE"=c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"HP Software Update"=c:\program files\HP\HP Software Update\HPWuSchd2.exe
"hpqSRMon"=c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe
"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe"
"NeroFilterCheck"=c:\program files\Common Files\Ahead\Lib\NeroCheck.exe
"NvCplDaemon"=RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
"NvMediaCenter"=RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
"nwiz"=nwiz.exe /install
"OTA2007"=c:\install\OTA2007\install.cmd
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe"
"RTHDCPL"=RTHDCPL.EXE
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe"
"Toolbar_eula_launcher"=c:\install\google\eula\EULALauncher.exe
"atchk"="c:\program files\Intel\AMT\atchk.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
"3389:UDP"= 3389:UDP:remote

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [22.8.2008 13:26 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [22.8.2008 13:26 20560]
R2 atchksrv;Intel(R) Active Management Technology System Status Service;c:\program files\Intel\AMT\atchksrv.exe [25.2.2008 8:05 176128]
R2 UNS;Intel(R) Active Management Technology User Notification Service;c:\program files\Intel\AMT\UNS.exe [25.2.2008 8:05 2514944]
S1 epfwtdir;epfwtdir;c:\windows\system32\DRIVERS\epfwtdir.sys --> c:\windows\system32\DRIVERS\epfwtdir.sys [?]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
FF - ProfilePath - c:\documents and settings\home\Data aplikací\Mozilla\Firefox\Profiles\iettermh.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-11 14:25
Windows 5.1.2600 Service Pack 2 FAT NTAPI

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
Celkový čas: 2009-09-11 14:27
ComboFix-quarantined-files.txt 2009-09-11 12:27

Před spuštěním: Volných bajtů: 292 302 225 408
Po spuštění: Volných bajtů: 292 262 051 840

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

156 --- E O F --- 2009-09-09 12:06

[Roli]

Něco smazáno zbytek v pořádku nyní tedy přes Start >> Spustit zkopíruj do okna:

ComboFix /u

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.

Dále bych zkusil použít pekelný návod od kolegy

po kazdem kroku spustit IE a zjistit, zda zabralo:

1. spustit IE bez doplnku

start --> spustit --> vepsat a potvrdit enter: iexplore -extoff (pokud se okno neobjevi, odinstalovat postupne jednotlive doplnky)

2. zkopirovat, ulozit jako soubor registru, spustit a pridat informace do registru (pred spustenim je nutne, aby vsechna okna prohlizece byla zavrena)

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders]
"AppData"=hex(2):25,00,55,00,53,00,45,00,52,00,50,00,52,00,4f,00,46,00,49,00,\
4c,00,45,00,25,00,5c,00,44,00,61,00,74,00,61,00,20,00,61,00,70,00,6c,00,69,\
00,6b,00,61,00,63,00,ed,00,00,00

3.
- spustit IE --> vpravo nahore vedle okna pro vyhledavani rozbalit nabidku --> "Vyhledat dalsi poskytovatele..." --> v horni casti okna zvolit "Jazyk doplnku: English" --> napr. Bing Search --> tl. Pridat do Internet Exploreru --> souhlasit s pridanim tl. Pridat
- spustit IE --> vpravo nahore vedle okna pro vyhledavani rozbalit nabidku --> "Spravovat poskytovatele hledani" --> vlevo "Poskytovatel vyhledavani" --> v prave casti okna zvolit jako vychozi "Bing Search" --> tl. Nastavit jako vychoziho poskytovatele hledani --> pridat zatrzitko k "Zabranit programum v navrhovani zmen meho vychoziho poskytovatele hledani" --> tl. Zavrit --> restart IE

Také by nebylo naškodu doinstalovat SP 3

Pak dej vědět jak to dopadlo.

[fandaj]

mám naprosto stejný problém, přeinstalace IE 8 nepomohla, PC se zdá čistý, Win Vista SP2, každá rada dobrá, neboť je to hrozně otravné a změnit to dle návodů vůbec nejde. Díky za radu Franta

[Roli]

Zdravím použij nejdříve Rsit z mého podpisu.

[fandaj]

zde je výsledný log :


Logfile of random's system information tool 1.06 (written by random/random)
Run by HP at 2009-10-14 08:46:08
Microsoft® Windows Vista™ Home Basic Service Pack 2
System drive C: has 58 GB (40%) free of 143 GB
Total RAM: 2039 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:46:43, on 14.10.2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\SMINST\scheduler.exe
C:\Program Files\Secunia\PSI\psi.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\pthosttr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hp\HP Software Update\hpwuschd2.exe
C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe
C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe
C:\Program Files\SmarThru Office\BackUpSvr.exe
C:\Program Files\SmarThru Office\LegacyLauncher.exe
C:\Windows\Samsung\PanelMgr\SSMMgr.exe
C:\Windows\twain_32\Samsung\SCX4x24\Scan2Pc.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Net Profiles\Net Profiles.exe
C:\Program Files\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\HP\AppData\Local\Temp\Temporary Internet Files\Content.IE5\JZMPJ1WJ\RSIT[1].exe
C:\Program Files\Trend Micro\HijackThis\HP.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://home.microsoft.com/search/search.asp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [lxdimon.exe] "C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe"
O4 - HKLM\..\Run: [lxdiamon] "C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe"
O4 - HKLM\..\Run: [STO Backup Service] C:\Program Files\SmarThru Office\BackUpSvr.exe
O4 - HKLM\..\Run: [STO Launcher Service] C:\Program Files\SmarThru Office\LegacyLauncher.exe /run
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe /autorun
O4 - HKLM\..\Run: [4x24 Scan2PC] "C:\Windows\Twain_32\Samsung\SCX4x24\Scan2pc.exe"
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [ST Recovery Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [Titan Backup] "C:\PROGRA~1\TITANB~1\Launcher.exe" /startup
O4 - HKCU\..\Run: [Net Profiles] "C:\Program Files\Net Profiles\Net Profiles.exe"
O4 - HKCU\..\Run: [UIWatcher] C:\Program Files\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1150596.exe -Update -1150596 -"Mozilla/5.0_(Windows;_U;_Windows_NT_6.0;_cs;_rv:1.9.1.3)_Gecko/20090824_Firefox/3.5.3_(.NET_CLR_3.5.30729)" -"http://www.hry.cz/games/gameShockwave.a ... hewall.dcr"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Download All by ASUS Download - C:\Program Files\ASUS\WL-500gP Wireless Router Utilities\ASDownloadAll.htm
O8 - Extra context menu item: Download using ASUS Download - C:\Program Files\ASUS\WL-500gP Wireless Router Utilities\ASDownload.htm
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Britanik - {479BEE90-08C0-44fa-AE28-06BA96963B5B} - C:\Program Files\Britanik\britanik.dll
O9 - Extra 'Tools' menuitem: Britanik - {479BEE90-08C0-44fa-AE28-06BA96963B5B} - C:\Program Files\Britanik\britanik.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Web Capture - {7BDBFB9E-FD6E-43c2-937A-5C9F33FEBE5F} - C:\Program Files\SmarThru Office\WebCapture.dll (HKCU)
O9 - Extra 'Tools' menuitem: Web Capture - {7BDBFB9E-FD6E-43c2-937A-5C9F33FEBE5F} - C:\Program Files\SmarThru Office\WebCapture.dll (HKCU)
O9 - Extra button: Capture Selection - {A36A58CC-70D5-4462-9C90-C0E9D244B230} - C:\Program Files\SmarThru Office\WebCapture.dll (HKCU)
O9 - Extra 'Tools' menuitem: Capture Selection - {A36A58CC-70D5-4462-9C90-C0E9D244B230} - C:\Program Files\SmarThru Office\WebCapture.dll (HKCU)
O9 - Extra button: Save Selected Text - {A5183750-A927-4ec3-B027-C633A2D5418C} - C:\Program Files\SmarThru Office\WebCapture.dll (HKCU)
O9 - Extra 'Tools' menuitem: Save Selected Text - {A5183750-A927-4ec3-B027-C633A2D5418C} - C:\Program Files\SmarThru Office\WebCapture.dll (HKCU)
O9 - Extra button: Save as HTML - {BDC4DF0E-D605-48d6-B4AF-CA5927A463EE} - C:\Program Files\SmarThru Office\WebCapture.dll (HKCU)
O9 - Extra 'Tools' menuitem: Save as HTML - {BDC4DF0E-D605-48d6-B4AF-CA5927A463EE} - C:\Program Files\SmarThru Office\WebCapture.dll (HKCU)
O13 - Gopher Prefix:
O16 - DPF: {13CE29D9-E21E-441E-9F0B-AA84633BDFCB} (WebScan Class) - http://www.auditpro.cz/webscan/ScanXen.cab
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} (Windows Live OneCare safety scanner control) - http://cdn.scan.onecare.live.com/resour ... cctrl2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 5374380479
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O20 - Winlogon Notify: DeviceNP - C:\Windows\SYSTEM32\DeviceNP.dll
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\bin\fbserver.exe
O23 - Service: HP ProtectTools Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Ltd - C:\Windows\system32\flcdlock.exe
O23 - Service: Služba Google Update (gupdate1ca2b3a2f3d8f37) (gupdate1ca2b3a2f3d8f37) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxdiCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdiserv.exe
O23 - Service: lxdi_device - - C:\Windows\system32\lxdicoms.exe
O23 - Service: QKWMNNSK - Unknown owner - C:\Users\HP\AppData\Local\Temp\QKWMNNSK.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: TeamViewer 3 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer3\TeamViewer_Service.exe
O23 - Service: WKEQM - Unknown owner - C:\Users\HP\AppData\Local\Temp\WKEQM.exe (file missing)

--
End of file - 13214 bytes

======Scheduled tasks folder======

C:\Windows\tasks\AWC Startup.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\HPCeeScheduleForHP.job
C:\Windows\tasks\Spybot - Search & Destroy - Scheduled Task.job
C:\Windows\tasks\Spybot - Search & Destroy Updater - Scheduled Task.job
C:\Windows\tasks\User_Feed_Synchronization-{F9F8C4D9-AD06-4562-A0EF-B47A527675C3}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-31 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"PTHOSTTR"=C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE [2007-01-09 145184]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-03-28 1045800]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2008-12-08 54576]
"lxdimon.exe"=C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe [2007-07-16 434864]
"lxdiamon"=C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe [2007-07-16 25264]
"STO Backup Service"=C:\Program Files\SmarThru Office\BackUpSvr.exe [2008-06-11 192512]
"STO Launcher Service"=C:\Program Files\SmarThru Office\LegacyLauncher.exe [2008-06-11 331776]
"Samsung PanelMgr"=C:\Windows\Samsung\PanelMgr\SSMMgr.exe [2008-05-20 536576]
"4x24 Scan2PC"=C:\Windows\Twain_32\Samsung\SCX4x24\Scan2pc.exe [2008-05-29 491520]
"HP Health Check Scheduler"=c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-10-09 75008]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2008-04-15 488752]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2008-06-03 177456]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-04-04 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-04-04 166424]
"Persistence"=C:\Windows\system32\igfxpers.exe [2008-04-04 133656]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2007-02-21 1183744]
"RoxioDragToDisc"=C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe [2007-02-02 1116920]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-05-14 2029640]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-31 149280]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"ST Recovery Launcher"=C:\Windows\SMINST\launcher.exe [2007-06-06 44168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"ISUSPM"=C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2007-08-30 205480]
"Titan Backup"=C:\PROGRA~1\TITANB~1\Launcher.exe [2009-02-04 137216]
"Net Profiles"=C:\Program Files\Net Profiles\Net Profiles.exe [2009-05-22 1273856]
"UIWatcher"=C:\Program Files\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe [2009-02-23 3508568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Shockwave Updater"=C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1150596.exe [2009-04-29 468408]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
DVD Check.lnk - C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\DeviceNP]
C:\Windows\system32\DeviceNP.dll [2007-06-08 49152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2008-02-11 204800]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{31b8e251-38df-11de-985a-0021866d7ee2}]
shell\AutoRun\command - G:\Web'n'walk_Helper.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{407a3033-80a3-11dd-8cf4-0021866d7ee2}]
shell\AutoRun\command - H:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{add436d7-3a53-11de-91a4-0021866d7ee2}]
shell\AutoRun\command - H:\PortableApps\PortableAppsMenu\PortableAppsMenu.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b391b3d3-fff4-11dd-8740-0021866d7ee2}]
shell\AutoRun\command - G:\OnSpcLCK.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c8fb0857-8f28-11de-a871-0021866d7ee2}]
shell\AutoRun\command - G:\WDSetup.exe


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2009-10-14 08:46:08 ----D---- C:\rsit
2009-10-13 20:44:41 ----A---- C:\Windows\system32\mshtml.dll
2009-10-13 20:44:37 ----A---- C:\Windows\system32\ieframe.dll
2009-10-13 20:44:36 ----A---- C:\Windows\system32\wininet.dll
2009-10-13 20:44:36 ----A---- C:\Windows\system32\urlmon.dll
2009-10-13 20:44:36 ----A---- C:\Windows\system32\iertutil.dll
2009-10-13 20:44:35 ----A---- C:\Windows\system32\occache.dll
2009-10-13 20:44:35 ----A---- C:\Windows\system32\msfeeds.dll
2009-10-13 20:44:35 ----A---- C:\Windows\system32\iedkcs32.dll
2009-10-13 20:44:33 ----A---- C:\Windows\system32\ieui.dll
2009-10-13 20:44:33 ----A---- C:\Windows\system32\iepeers.dll
2009-10-13 20:44:32 ----A---- C:\Windows\system32\msfeedssync.exe
2009-10-13 20:44:32 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-10-13 20:44:32 ----A---- C:\Windows\system32\jsproxy.dll
2009-10-13 20:44:32 ----A---- C:\Windows\system32\ieUnatt.exe
2009-10-13 20:44:32 ----A---- C:\Windows\system32\iesysprep.dll
2009-10-13 20:44:32 ----A---- C:\Windows\system32\iesetup.dll
2009-10-13 20:44:32 ----A---- C:\Windows\system32\iernonce.dll
2009-10-13 20:44:32 ----A---- C:\Windows\system32\ie4uinit.exe
2009-10-13 20:44:28 ----A---- C:\Windows\system32\msv1_0.dll
2009-10-13 20:44:25 ----A---- C:\Windows\system32\msasn1.dll
2009-10-13 20:44:12 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-10-13 20:44:10 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-10-13 20:43:44 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2009-10-12 20:50:17 ----D---- C:\Users\HP\AppData\Roaming\Foxit
2009-10-12 20:37:20 ----D---- C:\Program Files\Secunia
2009-10-09 11:09:13 ----RD---- C:\Users\HP\AppData\Roaming\Brother
2009-10-08 20:20:47 ----D---- C:\Program Files\XTB-Trader 4
2009-10-05 20:51:24 ----D---- C:\Program Files\Trend Micro
2009-10-05 19:57:53 ----D---- C:\Program Files\IRIS Desktop Search
2009-10-05 19:49:10 ----D---- C:\Program Files\Readiris Pro 11 HP
2009-10-02 19:53:47 ----N---- C:\Windows\system32\MpSigStub.exe
2009-10-01 14:21:41 ----D---- C:\ProgramData\HP Product Assistant
2009-10-01 14:17:31 ----D---- C:\Users\HP\AppData\Roaming\HpUpdate
2009-10-01 14:17:26 ----D---- C:\Windows\Hewlett-Packard
2009-09-29 20:18:41 ----D---- C:\Program Files\Windows Live Safety Center
2009-09-29 11:00:34 ----D---- C:\Users\HP\AppData\Roaming\Broad Intelligence
2009-09-29 10:57:37 ----D---- C:\Program Files\MediaCoder
2009-09-25 10:25:38 ----A---- C:\Windows\BRWMARK.INI
2009-09-25 10:25:38 ----A---- C:\Windows\BRPP2KA.INI
2009-09-22 22:46:09 ----A---- C:\Windows\system32\bcmwlrc.dll
2009-09-22 22:46:08 ----A---- C:\Windows\system32\bcmihvui.dll
2009-09-22 22:35:55 ----D---- C:\Users\HP\AppData\Roaming\hpqLog
2009-09-22 20:24:08 ----A---- C:\Windows\system32\d3dx10_41.dll
2009-09-22 20:24:08 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2009-09-22 20:24:07 ----A---- C:\Windows\system32\XAudio2_4.dll
2009-09-22 20:24:07 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2009-09-22 20:24:07 ----A---- C:\Windows\system32\xactengine3_4.dll
2009-09-22 20:24:07 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2009-09-22 20:24:07 ----A---- C:\Windows\system32\D3DX9_41.dll
2009-09-22 20:24:07 ----A---- C:\Windows\system32\D3DX9_40.dll
2009-09-22 20:24:07 ----A---- C:\Windows\system32\d3dx10_40.dll
2009-09-22 20:24:07 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2009-09-22 20:24:06 ----A---- C:\Windows\system32\XAudio2_3.dll
2009-09-22 20:24:06 ----A---- C:\Windows\system32\XAudio2_2.dll
2009-09-22 20:24:06 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2009-09-22 20:24:06 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2009-09-22 20:24:06 ----A---- C:\Windows\system32\xactengine3_3.dll
2009-09-22 20:24:06 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2009-09-22 20:24:04 ----A---- C:\Windows\system32\xactengine3_2.dll
2009-09-22 20:24:04 ----A---- C:\Windows\system32\d3dx10_39.dll
2009-09-22 20:24:04 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2009-09-22 20:24:03 ----A---- C:\Windows\system32\XAudio2_1.dll
2009-09-22 20:24:03 ----A---- C:\Windows\system32\XAudio2_0.dll
2009-09-22 20:24:03 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2009-09-22 20:24:03 ----A---- C:\Windows\system32\xactengine3_1.dll
2009-09-22 20:24:03 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2009-09-22 20:24:03 ----A---- C:\Windows\system32\D3DX9_39.dll
2009-09-22 20:24:03 ----A---- C:\Windows\system32\D3DX9_38.dll
2009-09-22 20:24:03 ----A---- C:\Windows\system32\d3dx10_38.dll
2009-09-22 20:24:03 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2009-09-22 20:24:02 ----A---- C:\Windows\system32\xactengine3_0.dll
2009-09-22 20:24:02 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2009-09-22 20:24:02 ----A---- C:\Windows\system32\D3DX9_37.dll
2009-09-22 20:24:02 ----A---- C:\Windows\system32\d3dx10_37.dll
2009-09-22 20:24:02 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2009-09-22 15:25:07 ----D---- C:\Users\HP\AppData\Roaming\CloneSpy
2009-09-22 15:25:03 ----D---- C:\Program Files\CloneSpy
2009-09-21 21:46:07 ----D---- C:\Program Files\Generali
2009-09-15 19:12:31 ----D---- C:\Program Files\Microsoft Sync Framework

======List of files/folders modified in the last 1 months======

2009-10-14 08:46:20 ----D---- C:\Windows\Prefetch
2009-10-14 08:46:11 ----D---- C:\Windows\Temp
2009-10-14 08:37:12 ----D---- C:\Windows\SMINST
2009-10-14 08:37:00 ----D---- C:\Program Files\Firebird
2009-10-14 08:36:15 ----D---- C:\Windows
2009-10-13 23:03:41 ----HD---- C:\ProgramData
2009-10-13 23:03:41 ----D---- C:\Windows\Tasks
2009-10-13 23:03:41 ----D---- C:\Program Files\Google
2009-10-13 22:58:16 ----SHD---- C:\Windows\Installer
2009-10-13 21:58:00 ----D---- C:\Users\HP\AppData\Roaming\IObit
2009-10-13 21:54:56 ----D---- C:\Windows\Microsoft.NET
2009-10-13 21:54:40 ----RSD---- C:\Windows\assembly
2009-10-13 21:36:51 ----D---- C:\Windows\system32\catroot2
2009-10-13 21:36:27 ----D---- C:\Windows\inf
2009-10-13 21:23:06 ----D---- C:\Windows\Debug
2009-10-13 21:23:06 ----D---- C:\Users\HP\AppData\Roaming\TeamViewer
2009-10-13 21:13:35 ----D---- C:\Windows\winsxs
2009-10-13 21:03:23 ----D---- C:\Windows\system32\catroot
2009-10-13 21:00:47 ----D---- C:\Windows\System32
2009-10-13 21:00:44 ----D---- C:\Program Files\Windows Mail
2009-10-13 21:00:43 ----D---- C:\Windows\system32\migration
2009-10-13 21:00:41 ----D---- C:\Program Files\Internet Explorer
2009-10-13 20:45:50 ----D---- C:\Windows\system32\drivers
2009-10-13 20:45:27 ----SHD---- C:\System Volume Information
2009-10-12 21:06:34 ----D---- C:\Windows\SoftwareDistribution
2009-10-12 21:06:33 ----SD---- C:\Windows\Downloaded Program Files
2009-10-12 20:38:09 ----D---- C:\Windows\system32\Tasks
2009-10-12 20:37:20 ----RD---- C:\Program Files
2009-10-12 10:50:35 ----D---- C:\ProgramData\Lx_cats
2009-10-05 21:01:04 ----D---- C:\Windows\system32\config
2009-10-05 20:46:50 ----D---- C:\Windows\system32\LogFiles
2009-10-05 20:46:50 ----D---- C:\Windows\Logs
2009-10-05 20:46:50 ----D---- C:\ProgramData\Roxio
2009-10-05 20:46:50 ----D---- C:\Program Files\Mozilla Thunderbird
2009-10-05 20:46:50 ----D---- C:\Program Files\Mozilla Firefox
2009-10-05 19:51:34 ----A---- C:\Windows\win.ini
2009-10-05 19:50:24 ----A---- C:\Windows\Readiris.ini
2009-10-04 22:57:52 ----D---- C:\ProgramData\Spybot - Search & Destroy
2009-10-04 22:56:04 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-10-04 22:13:08 ----D---- C:\Windows\system32\wbem
2009-10-04 22:12:09 ----D---- C:\Windows\registration
2009-10-04 21:50:53 ----A---- C:\Windows\msvrc20.dll
2009-10-04 21:31:01 ----D---- C:\Program Files\Common Files
2009-10-04 21:29:07 ----DC---- C:\Windows\system32\DRVSTORE
2009-10-04 21:19:24 ----D---- C:\Program Files\Panda Security
2009-10-04 21:17:24 ----SD---- C:\ProgramData\Microsoft
2009-10-02 20:01:57 ----A---- C:\Windows\system32\mrt.exe
2009-10-01 14:47:52 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-10-01 14:18:02 ----D---- C:\Program Files\Hp
2009-09-29 13:19:15 ----D---- C:\Users\HP\AppData\Roaming\Mozilla
2009-09-22 22:57:03 ----D---- C:\Windows\twain_32
2009-09-22 22:54:38 ----HD---- C:\Program Files\InstallShield Installation Information
2009-09-22 22:54:38 ----D---- C:\Program Files\Intel
2009-09-22 22:46:11 ----D---- C:\Windows\system32\tr-TR
2009-09-22 22:46:11 ----D---- C:\Windows\system32\th-TH
2009-09-22 22:46:11 ----D---- C:\Windows\system32\sv-SE
2009-09-22 22:46:11 ----D---- C:\Windows\system32\sl-SI
2009-09-22 22:46:11 ----D---- C:\Windows\system32\sk-SK
2009-09-22 22:46:11 ----D---- C:\Windows\system32\ru-RU
2009-09-22 22:46:11 ----D---- C:\Windows\system32\ro-RO
2009-09-22 22:46:11 ----D---- C:\Windows\system32\pl-PL
2009-09-22 22:46:11 ----D---- C:\Windows\system32\no-NO
2009-09-22 22:46:11 ----D---- C:\Windows\system32\nl-NL
2009-09-22 22:46:11 ----D---- C:\Windows\system32\lv-LV
2009-09-22 22:46:11 ----D---- C:\Windows\system32\lt-LT
2009-09-22 22:46:11 ----D---- C:\Windows\system32\ko-KR
2009-09-22 22:46:11 ----D---- C:\Windows\system32\ja-JP
2009-09-22 22:46:11 ----D---- C:\Windows\system32\it-IT
2009-09-22 22:46:11 ----D---- C:\Windows\system32\hu-HU
2009-09-22 22:46:10 ----D---- C:\Windows\system32\hr-HR
2009-09-22 22:46:10 ----D---- C:\Windows\system32\fr-FR
2009-09-22 22:46:10 ----D---- C:\Windows\system32\fi-FI
2009-09-22 22:46:10 ----D---- C:\Windows\system32\et-EE
2009-09-22 22:46:10 ----D---- C:\Windows\system32\en-US
2009-09-22 22:46:09 ----D---- C:\Windows\system32\el-GR
2009-09-22 22:46:09 ----D---- C:\Windows\system32\de-DE
2009-09-22 22:46:09 ----D---- C:\Windows\system32\da-DK
2009-09-22 22:46:09 ----D---- C:\Windows\system32\cs-CZ
2009-09-22 22:46:09 ----D---- C:\Windows\system32\bg-BG
2009-09-22 22:46:00 ----A---- C:\Windows\system32\bcmwlcoi.dll
2009-09-22 22:46:00 ----A---- C:\Windows\system32\bcmihvsrv.dll
2009-09-22 22:45:54 ----D---- C:\Users\HP\AppData\Roaming\Hewlett-Packard
2009-09-22 22:45:33 ----D---- C:\Program Files\Hewlett-Packard
2009-09-22 22:35:30 ----D---- C:\SwSetup
2009-09-22 20:11:54 ----D---- C:\ProgramData\ashampoo
2009-09-22 20:11:49 ----D---- C:\Program Files\Ashampoo
2009-09-22 19:50:50 ----D---- C:\ProgramData\Norton
2009-09-21 20:09:03 ----SHD---- C:\$Recycle.Bin
2009-09-21 15:00:46 ----D---- C:\Program Files\Common Files\Symantec Shared
2009-09-17 20:57:25 ----D---- C:\Windows\Minidump
2009-09-16 11:15:13 ----D---- C:\ProgramData\LightScribe
2009-09-15 19:12:52 ----D---- C:\Program Files\Windows Live
2009-09-15 19:08:29 ----D---- C:\Program Files\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 DLACDBHM;DLACDBHM; C:\Windows\System32\Drivers\DLACDBHM.SYS [2007-02-08 12856]
R1 DLARTL_M;DLARTL_M; C:\Windows\System32\Drivers\DLARTL_M.SYS [2007-02-08 28120]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-05-14 107256]
R2 DLABMFSM;DLABMFSM; C:\Windows\System32\DLA\DLABMFSM.SYS [2006-10-26 35096]
R2 DLABOIOM;DLABOIOM; C:\Windows\System32\DLA\DLABOIOM.SYS [2006-10-26 32472]
R2 DLADResM;DLADResM; C:\Windows\System32\DLA\DLADResM.SYS [2006-10-26 9400]
R2 DLAIFS_M;DLAIFS_M; C:\Windows\System32\DLA\DLAIFS_M.SYS [2006-10-26 104536]
R2 DLAOPIOM;DLAOPIOM; C:\Windows\System32\DLA\DLAOPIOM.SYS [2006-10-26 26296]
R2 DLAPoolM;DLAPoolM; C:\Windows\System32\DLA\DLAPoolM.SYS [2006-10-26 14520]
R2 DLAUDF_M;DLAUDF_M; C:\Windows\System32\DLA\DLAUDF_M.SYS [2006-10-26 97848]
R2 DLAUDFAM;DLAUDFAM; C:\Windows\System32\DLA\DLAUDFAM.SYS [2006-10-26 94648]
R2 DRVNDDM;DRVNDDM; C:\Windows\System32\Drivers\DRVNDDM.SYS [2007-02-09 51768]
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-05-14 114472]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2009-05-14 133000]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2009-05-14 38240]
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2007-12-11 5120]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2008-04-24 309248]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2008-11-21 1204128]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2009-09-22 1331192]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-19 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2007-12-12 80424]
R3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2007-12-12 80936]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2007-12-12 16168]
R3 CmBatt;Ovladač baterie Microsoft ACPI Control Method Battery; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-19 14208]
R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\Windows\system32\DRIVERS\e1e6032.sys [2007-03-13 223616]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2009-05-14 33096]
R3 HBtnKey;HBtnKey; C:\Windows\system32\DRIVERS\cpqbttn.sys [2008-04-14 9344]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-02-11 2302976]
R3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf.sys [2009-06-17 12648]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-03-28 199472]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-19 11264]
S2 DgiVecp;DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [2007-12-11 41984]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2006-11-02 167936]
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2009-09-22 1331192]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 DAMDrv;DAMDrv; C:\Windows\system32\DRIVERS\DAMDrv.sys [2007-06-08 30008]
S3 Dot4;Ovladač MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584]
S3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2006-11-02 987648]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2009-02-09 17664]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2009-02-09 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2009-02-21 47360]
S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 2028032]
S3 Ser2pl;Prolific2 Serial port driver; C:\Windows\system32\DRIVERS\ser2pl.sys [2005-11-04 48640]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2005-08-17 58352]
S3 sscdmdfl;SAMSUNG CDMA Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2005-08-17 8272]
S3 sscdmdm;SAMSUNG CDMA Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2005-08-17 93872]
S3 TPM;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2006-11-02 41064]
S3 UIUSys;Conexant Setup API; C:\Windows\system32\DRIVERS\UIUSYS.SYS []
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2009-02-09 7808]
S3 USB_RNDIS;USB Remote NDIS Network Device Driver; C:\Windows\system32\DRIVERS\usb8023k.sys [2002-08-12 11136]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-04-11 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2009-02-09 7808]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2006-11-02 128104]
S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2006-11-02 654336]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2006-11-02 82432]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2007-02-06 69632]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2008-08-26 14336]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-05-14 731840]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files\Firebird\bin\fbguard.exe [2007-12-12 65536]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-10-09 94208]
R2 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-12-07 73728]
R2 LPDSVC;@%systemroot%\system32\lpdsvc.dll,-500; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 lxdi_device;lxdi_device; C:\Windows\system32\lxdicoms.exe [2007-06-11 517040]
R2 lxdiCATSCustConnectService;lxdiCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdiserv.exe [2007-04-26 99248]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\Windows\System32\tcpsvcs.exe [2009-08-14 9728]
R2 TeamViewer;TeamViewer 3; C:\Program Files\TeamViewer3\TeamViewer_Service.exe [2008-09-25 181544]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-04-03 193840]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files\Firebird\bin\fbserver.exe [2007-12-12 1531989]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2009-04-30 229944]
S2 gupdate1ca2b3a2f3d8f37;Služba Google Update (gupdate1ca2b3a2f3d8f37); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-09-01 133104]
S2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2007-02-10 89968]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-05-14 20680]
S3 FLCDLOCK;HP ProtectTools Device Locking / Auditing; C:\Windows\system32\flcdlock.exe [2007-06-08 172131]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-09-01 194032]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 QKWMNNSK;QKWMNNSK; C:\Users\HP\AppData\Local\Temp\QKWMNNSK.exe []
S3 RoxMediaDB9;RoxMediaDB9; c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2007-05-22 1010424]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-06-02 637952]
S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2007-05-03 74656]
S3 WKEQM;WKEQM; C:\Users\HP\AppData\Local\Temp\WKEQM.exe []

-----------------EOF-----------------

[Roli]

Tak že tyhle zbytečnosti fixni v HJT :

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1150596.exe -Update -1150596 -"Mozilla/5.0_(Windows;_U;_Windows_NT_6.0;_cs;_rv:1.9.1.3)_Gecko/20090824_Firefox/3.5.3_(.NET_CLR_3.5.30729)" -"http://www.hry.cz/games/gameShockwave.a ... hewall.dcr"

HJT najdeš zde :

C:\Program Files\Trend Micro\HijackThis\HP

Fix znamená, že spustíš HJT klikneš na Do a system scan only vedle těch řádek co jsem ti napsal

je čtvereček do kterého uděláš zatržítko, pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.

Pak použij Mbam z mého podpisu.

[fandaj]

Tak vše provedeno dle návodů - bez úspěchu. Myslím si, že chyba bude někde v IE či blokací jiným programem. Bohužel žádný kloudný návod jsem nikde nenašel, a že jsem hledal "fest".

[Roli]

Bohužel žádný kloudný návod jsem nikde nenašel, a že jsem hledal "fest".

Tak to jsme dva, protože jsem se s tímhle ještě nesetkal.

Zkus přejít na jiný prohlížeč třeba Firefox který zobrazí totéž jako IE 8 včetně Win Update když si do něj přidáš doplněk IE Tab.

[fandaj]

Firefox (3.5.3) samozřejmě používám včetně IE Tab, ale pro práci prostě IE potřebuji. Snad někdo ještě přidá nějaký nápad. Děkuji.