delší doba s neaktivním AV, podezření

[petrofff]

Známý si stěžoval na zablokování PC, zjistil jsem (a napravil neaktivní AVAST)
Prosím o kontrolu (pokračovat můžu až za dva dny po jeho návratu)

Logfile of random's system information tool 1.08 (written by random/random)
Run by Evžen a Vilma at 2010-12-20 09:36:07
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 96 GB (94%) free of 102 GB
Total RAM: 1980 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:36:15, on 20.12.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
C:\Program Files\TeamViewer\Version4\TeamViewer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Opera10.63\opera.exe
C:\Documents and Settings\Evžen a Vilma\Dokumenty\Stahovani\RSIT.exe
C:\Program Files\trend micro\Evžen a Vilma.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O4 - HKLM\..\Run: [BCU] "C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
O23 - Service: TeamViewer 4 (TeamViewer4) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe

--
End of file - 5706 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BCU"=C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe [2009-08-04 346320]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-06-25 17887232]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2009-03-25 134656]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2009-03-25 166912]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2009-03-25 136192]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-06-28 2837864]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-05-13 26192168]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2009-03-25 206848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\TeamViewer\Version4\TeamViewer.exe"="C:\Program Files\TeamViewer\Version4\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\OperaPortable10.63\opera.exe"="C:\OperaPortable10.63\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Opera10.63\opera.exe"="C:\Opera10.63\opera.exe:*:Enabled:Opera Internet Browser"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-12-20 09:36:07 ----D---- C:\rsit
2010-12-20 09:36:07 ----D---- C:\Program Files\trend micro
2010-12-20 09:33:36 ----A---- C:\WINDOWS\system32\MRT.exe
2010-12-20 09:32:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2010-12-20 09:32:29 ----D---- C:\WINDOWS\LastGood
2010-12-19 22:08:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2010-12-19 22:08:19 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-12-19 22:08:15 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-12-19 22:08:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
2010-12-18 19:03:46 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-12-18 19:03:42 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-12-18 19:03:38 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-12-18 19:03:34 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-12-18 19:03:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2010-12-18 19:03:24 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-12-18 19:03:20 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-12-18 19:03:16 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2010-12-18 19:03:13 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-12-18 19:03:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2010-12-18 19:03:05 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2010-12-18 19:03:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2010-12-18 19:02:57 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-12-18 19:02:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2010-12-18 19:02:49 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2010-12-18 19:02:46 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-12-18 19:02:44 ----D---- C:\WINDOWS\system32\KB905474
2010-12-18 19:02:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2296199$
2010-12-18 19:02:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2010-12-18 19:02:31 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-12-18 19:02:26 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-12-18 19:02:22 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-12-18 19:02:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2010-12-18 19:02:14 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-12-18 19:02:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-12-18 19:02:06 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-12-18 19:02:01 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-12-18 19:01:57 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-12-18 19:01:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2010-12-18 19:01:49 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2010-12-18 19:01:45 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-12-18 19:01:41 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-12-18 19:01:38 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-12-18 19:01:35 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-12-18 19:01:30 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-12-18 19:01:26 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-12-18 19:01:20 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-12-18 19:01:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2010-12-18 19:01:11 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-12-18 19:01:06 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$
2010-12-18 19:01:01 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-12-18 19:00:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$
2010-12-18 19:00:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2010-12-18 19:00:49 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2010-12-18 19:00:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2010-12-18 19:00:42 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-12-18 19:00:37 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-12-18 19:00:33 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-12-18 19:00:29 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-12-18 19:00:24 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-12-18 19:00:19 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-12-18 19:00:15 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-12-18 19:00:11 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-12-18 19:00:07 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-12-18 19:00:03 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-12-18 18:59:59 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2010-12-18 18:59:56 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2010-12-18 18:59:52 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-12-18 18:59:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2436673$
2010-12-18 18:59:44 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2010-12-18 18:59:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-12-18 18:59:36 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-12-18 18:59:31 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2010-12-18 18:59:27 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-12-18 18:59:23 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2010-12-18 18:59:19 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-12-18 18:59:15 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-12-18 18:59:09 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-12-18 18:59:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2010-12-18 18:58:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2416400$
2010-12-18 18:58:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-12-18 18:58:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$
2010-12-18 18:58:45 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-12-18 18:58:41 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-12-18 18:58:37 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-12-18 18:58:33 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2010-12-18 18:58:29 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-12-18 18:58:25 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-12-18 18:58:21 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2010-12-18 18:58:17 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-12-18 18:58:14 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-12-18 18:58:10 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2010-12-18 18:58:06 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-12-18 18:58:02 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-12-18 18:57:58 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-12-18 18:57:53 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-12-18 18:57:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2010-12-18 18:57:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2010-12-18 18:20:15 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2010-12-18 16:08:49 ----A---- C:\WINDOWS\imsins.BAK
2010-12-18 16:08:47 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-12-18 16:08:47 ----D---- C:\WINDOWS\system32\PreInstall
2010-12-18 16:08:46 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-12-18 16:08:45 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2010-12-18 16:08:45 ----HD---- C:\WINDOWS\$hf_mig$
2010-12-18 12:37:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-12-18 12:37:03 ----D---- C:\Program Files\Common Files\Adobe
2010-12-18 12:37:03 ----D---- C:\Program Files\Adobe
2010-12-18 10:50:36 ----D---- C:\Opera10.63
2010-12-18 10:45:00 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-12-18 10:01:50 ----D---- C:\WINDOWS\pss
2010-12-17 14:52:52 ----D---- C:\Program Files\CCleaner
2010-12-17 14:39:12 ----D---- C:\Program Files\ESET
2010-11-29 22:17:21 ----D---- C:\Dok
2010-11-29 09:43:28 ----D---- C:\OperaPortable10.63
2010-11-29 09:31:45 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2010-11-21 10:27:32 ----A---- C:\WINDOWS\WORDPAD.INI

======List of files/folders modified in the last 1 months======

2010-12-20 09:36:09 ----D---- C:\WINDOWS\Prefetch
2010-12-20 09:36:07 ----RD---- C:\Program Files
2010-12-20 09:34:26 ----D---- C:\WINDOWS\Temp
2010-12-20 09:33:37 ----D---- C:\WINDOWS\Debug
2010-12-20 09:33:36 ----D---- C:\WINDOWS\system32
2010-12-20 09:33:00 ----SD---- C:\WINDOWS\Tasks
2010-12-20 09:32:45 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-12-20 09:32:44 ----D---- C:\WINDOWS
2010-12-20 09:32:29 ----HD---- C:\WINDOWS\inf
2010-12-20 09:32:29 ----D---- C:\WINDOWS\system32\CatRoot2
2010-12-20 09:32:24 ----D---- C:\Documents and Settings\Evžen a Vilma\Data aplikací\Skype
2010-12-20 09:31:39 ----D---- C:\Documents and Settings\Evžen a Vilma\Data aplikací\skypePM
2010-12-19 22:08:32 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-12-19 22:08:25 ----D---- C:\WINDOWS\system32\drivers
2010-12-18 22:10:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-12-18 20:08:03 ----D---- C:\WINDOWS\system32\wbem
2010-12-18 20:08:03 ----D---- C:\WINDOWS\AppPatch
2010-12-18 19:03:35 ----D---- C:\Program Files\Messenger
2010-12-18 19:03:13 ----D---- C:\WINDOWS\WinSxS
2010-12-18 18:58:55 ----D---- C:\Program Files\Outlook Express
2010-12-18 18:58:35 ----D---- C:\Program Files\Movie Maker
2010-12-18 12:38:29 ----D---- C:\Documents and Settings\Evžen a Vilma\Data aplikací\Adobe
2010-12-18 12:37:24 ----SHD---- C:\WINDOWS\Installer
2010-12-18 12:37:03 ----D---- C:\Program Files\Common Files
2010-12-18 10:50:44 ----D---- C:\Documents and Settings\Evžen a Vilma\Data aplikací\Opera
2010-12-18 10:45:07 ----D---- C:\WINDOWS\SoftwareDistribution
2010-12-18 10:45:05 ----D---- C:\WINDOWS\Help
2010-12-17 14:53:34 ----D---- C:\Documents and Settings\Evžen a Vilma\Data aplikací\Media Player Classic
2010-12-17 14:53:29 ----D---- C:\WINDOWS\Minidump
2010-12-17 14:39:14 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-11-29 10:16:04 ----SD---- C:\Documents and Settings\Evžen a Vilma\Data aplikací\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-06-28 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-06-28 165456]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-06-28 46672]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-06-28 17744]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-06-28 100176]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-06-28 23376]
R3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2009-03-25 6313088]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-06-25 5095936]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2009-03-25 130432]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-06-25 1684736]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-06-25 1389056]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R2 BCUService;Browser Configuration Utility Service; C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe [2009-08-04 219360]
R2 ES lite Service;ES lite Service for program management.; C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [2009-03-02 68136]
R2 TeamViewer4;TeamViewer 4; C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe [2010-03-22 185640]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]

-----------------EOF-----------------

[motji]

Hezké poledne

Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.

[petrofff]

Zdravím, bohužel přes svátky to nešlo...
Scan MBAM je čistý:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 5455

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

4.1.2011 10:30:39
mbam-log-2011-01-04 (10-30-39).txt

Typ kontroly: Úplný test (C:\|F:\|)
Testované objekty: 140693
Uplynulý čas: 6 minut, 28 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

[motji]

Jak se chová počítač?

[petrofff]

Kolega říká, že od té doby už žádné výpadky/potíže nebyly.
Rezid.štít je zapnutý jak má být.

[motji]

Tak by mělo být vše v pořádku

[petrofff]

Dík

[motji]

Není zač