V aplikaci msiexec.exe došlo k problému

[soundman]

Ten nástroj jsem spustil,proběhla akce a vytvořili se 2 zazipované soubory,ale ty teď nemůžu najít,protože jsem si nevšiml,kam se uložily.
Myslíš.že budou potřeba?
Tady je ten první log:

Malwarebytes' Anti-Malware 1.41
Verze databáze: 2962
Windows 5.1.2600 Service Pack 3

15.10.2009 14:50:31
mbam-log-2009-10-15 (14-50-31).txt

Typ kontroly: Rychlá kontrola
Zkontrolované objekty: 95572
Uplynulý čas: 8 minute(s), 22 second(s)

Infikované procesy v paměti: 1
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 1
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 1

Infikované procesy v paměti:
C:\Program Files\SyncroSoft\POS\H2O\cledx.exe (Trojan.Downloader) -> Unloaded process successfully.

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované hodnoty registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\h2o (Trojan.Downloader) -> Quarantined and deleted successfully.

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
C:\Program Files\SyncroSoft\POS\H2O\cledx.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

A tady ten druhý:
ComboFix 09-10-14.09 - Soundman 15.10.2009 17:30.1.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1023.607 [GMT 2:00]
Spuštěný z: c:\documents and settings\Soundman\Plocha\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: Tiny Firewall 6.0 *enabled* {14CB4B80-8E52-45EA-905E-67C1267B4160}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Installer\12b9e65.msp
c:\windows\Installer\12b9e66.msp
c:\windows\Installer\12b9e67.msp
c:\windows\Installer\12b9e68.msp
c:\windows\Installer\12b9e69.msp
c:\windows\Installer\12b9e6a.msp
c:\windows\Installer\12b9e6b.msp
c:\windows\Installer\12b9e6c.msp
c:\windows\Installer\12b9e6d.msp
c:\windows\Installer\12b9e6e.msp
c:\windows\Installer\131ee5.msp
c:\windows\Installer\16aeabe.msp
c:\windows\Installer\16aeabf.msp
c:\windows\Installer\16aeac0.msp
c:\windows\Installer\16aeac1.msp
c:\windows\Installer\16aeac2.msp
c:\windows\Installer\16aeac3.msp
c:\windows\Installer\16aeac4.msp
c:\windows\Installer\16aeac5.msp
c:\windows\Installer\16aeac6.msp
c:\windows\Installer\16aeac7.msp
c:\windows\Installer\17959a.msp
c:\windows\Installer\17959b.msp
c:\windows\Installer\17959c.msp
c:\windows\Installer\17959d.msp
c:\windows\Installer\17959e.msp
c:\windows\Installer\17959f.msp
c:\windows\Installer\1795a0.msp
c:\windows\Installer\1795a1.msp
c:\windows\Installer\1795a2.msp
c:\windows\Installer\1795a3.msp
c:\windows\Installer\1f07aa.msi
c:\windows\Installer\1f07ab.msp
c:\windows\Installer\1f07ac.msp
c:\windows\Installer\1f07ad.msp
c:\windows\Installer\1f07ae.msp
c:\windows\Installer\1f07af.msp
c:\windows\Installer\1f07b0.msp
c:\windows\Installer\1f07b1.msp
c:\windows\Installer\1f07b2.msp
c:\windows\Installer\1f07b3.msp
c:\windows\Installer\1f1f069.msi
c:\windows\Installer\1f1f06a.msp
c:\windows\Installer\1f1f06b.msp
c:\windows\Installer\1f1f06c.msp
c:\windows\Installer\1f1f06d.msp
c:\windows\Installer\1f1f06e.msp
c:\windows\Installer\1f1f06f.msp
c:\windows\Installer\1f1f070.msp
c:\windows\Installer\1f1f071.msp
c:\windows\Installer\1f1f072.msp
c:\windows\Installer\1f6da7.msi
c:\windows\Installer\1f6da8.msp
c:\windows\Installer\1f6da9.msp
c:\windows\Installer\1f6daa.msp
c:\windows\Installer\1f6dab.msp
c:\windows\Installer\1f6dac.msp
c:\windows\Installer\1f6dad.msp
c:\windows\Installer\1f6dae.msp
c:\windows\Installer\1f6daf.msp
c:\windows\Installer\1f6db0.msp
c:\windows\Installer\209176.msi
c:\windows\Installer\209177.msp
c:\windows\Installer\209178.msp
c:\windows\Installer\209179.msp
c:\windows\Installer\20917a.msp
c:\windows\Installer\20917b.msp
c:\windows\Installer\20917c.msp
c:\windows\Installer\20917d.msp
c:\windows\Installer\20917e.msp
c:\windows\Installer\20917f.msp
c:\windows\Installer\221529.msp
c:\windows\Installer\22152a.msp
c:\windows\Installer\22152b.msp
c:\windows\Installer\22152c.msp
c:\windows\Installer\22152d.msp
c:\windows\Installer\22152e.msp
c:\windows\Installer\22152f.msp
c:\windows\Installer\221530.msp
c:\windows\Installer\221531.msp
c:\windows\Installer\221532.msp
c:\windows\Installer\25f4399.msp
c:\windows\Installer\25f439a.msp
c:\windows\Installer\25f439b.msp
c:\windows\Installer\25f439c.msp
c:\windows\Installer\25f439d.msp
c:\windows\Installer\25f439e.msp
c:\windows\Installer\25f439f.msp
c:\windows\Installer\25f43a0.msp
c:\windows\Installer\25f43a1.msp
c:\windows\Installer\25f43a2.msp
c:\windows\Installer\2cdf27e.msi
c:\windows\Installer\2cdf27f.msp
c:\windows\Installer\2cdf280.msp
c:\windows\Installer\2cdf281.msp
c:\windows\Installer\2cdf282.msp
c:\windows\Installer\2cdf283.msp
c:\windows\Installer\2cdf284.msp
c:\windows\Installer\2cdf285.msp
c:\windows\Installer\2cdf286.msp
c:\windows\Installer\2cdf287.msp
c:\windows\Installer\32caf.msp
c:\windows\Installer\32cb0.msp
c:\windows\Installer\32cb1.msp
c:\windows\Installer\32cb2.msp
c:\windows\Installer\32cb3.msp
c:\windows\Installer\32cb4.msp
c:\windows\Installer\32cb5.msp
c:\windows\Installer\32cb6.msp
c:\windows\Installer\32cb7.msp
c:\windows\Installer\32cb8.msp
c:\windows\Installer\350ff.msi
c:\windows\Installer\35100.msp
c:\windows\Installer\35101.msp
c:\windows\Installer\35102.msp
c:\windows\Installer\35103.msp
c:\windows\Installer\35104.msp
c:\windows\Installer\35105.msp
c:\windows\Installer\35106.msp
c:\windows\Installer\35107.msp
c:\windows\Installer\35108.msp
c:\windows\Installer\35287.msp
c:\windows\Installer\35288.msp
c:\windows\Installer\35289.msp
c:\windows\Installer\3528a.msp
c:\windows\Installer\3528b.msp
c:\windows\Installer\3528c.msp
c:\windows\Installer\3528d.msp
c:\windows\Installer\3528e.msp
c:\windows\Installer\3528f.msp
c:\windows\Installer\35290.msp
c:\windows\Installer\36331.msp
c:\windows\Installer\36332.msp
c:\windows\Installer\36333.msp
c:\windows\Installer\36334.msp
c:\windows\Installer\36335.msp
c:\windows\Installer\36336.msp
c:\windows\Installer\36337.msp
c:\windows\Installer\36338.msp
c:\windows\Installer\36339.msp
c:\windows\Installer\3633a.msp
c:\windows\Installer\363db.msi
c:\windows\Installer\363dc.msp
c:\windows\Installer\363dd.msp
c:\windows\Installer\363de.msp
c:\windows\Installer\363df.msp
c:\windows\Installer\363e0.msp
c:\windows\Installer\363e1.msp
c:\windows\Installer\363e2.msp
c:\windows\Installer\363e3.msp
c:\windows\Installer\363e4.msp
c:\windows\Installer\3664d.msp
c:\windows\Installer\3664e.msp
c:\windows\Installer\3664f.msp
c:\windows\Installer\36650.msp
c:\windows\Installer\36651.msp
c:\windows\Installer\36652.msp
c:\windows\Installer\36653.msp
c:\windows\Installer\36654.msp
c:\windows\Installer\36655.msp
c:\windows\Installer\36656.msp
c:\windows\Installer\36bcb.msi
c:\windows\Installer\36bcc.msp
c:\windows\Installer\36bcd.msp
c:\windows\Installer\36bce.msp
c:\windows\Installer\36bcf.msp
c:\windows\Installer\36bd0.msp
c:\windows\Installer\36bd1.msp
c:\windows\Installer\36bd2.msp
c:\windows\Installer\36bd3.msp
c:\windows\Installer\36bd4.msp
c:\windows\Installer\36cd4.msi
c:\windows\Installer\36cd5.msp
c:\windows\Installer\36cd6.msp
c:\windows\Installer\36cd7.msp
c:\windows\Installer\36cd8.msp
c:\windows\Installer\36cd9.msp
c:\windows\Installer\36cda.msp
c:\windows\Installer\36cdb.msp
c:\windows\Installer\36cdc.msp
c:\windows\Installer\36cdd.msp
c:\windows\Installer\36d13.msi
c:\windows\Installer\36d14.msp
c:\windows\Installer\36d15.msp
c:\windows\Installer\36d16.msp
c:\windows\Installer\36d17.msp
c:\windows\Installer\36d18.msp
c:\windows\Installer\36d19.msp
c:\windows\Installer\36d1a.msp
c:\windows\Installer\36d1b.msp
c:\windows\Installer\36d1c.msp
c:\windows\Installer\3711a.msi
c:\windows\Installer\3711b.msp
c:\windows\Installer\3711c.msp
c:\windows\Installer\3711d.msp
c:\windows\Installer\3711e.msp
c:\windows\Installer\3711f.msp
c:\windows\Installer\37120.msp
c:\windows\Installer\37121.msp
c:\windows\Installer\37122.msp
c:\windows\Installer\37123.msp
c:\windows\Installer\3715a.msp
c:\windows\Installer\3715b.msp
c:\windows\Installer\3715c.msp
c:\windows\Installer\3715d.msp
c:\windows\Installer\3715e.msp
c:\windows\Installer\3715f.msp
c:\windows\Installer\37160.msp
c:\windows\Installer\37161.msp
c:\windows\Installer\37162.msp
c:\windows\Installer\37163.msp
c:\windows\Installer\371d7.msp
c:\windows\Installer\371d8.msp
c:\windows\Installer\371d9.msp
c:\windows\Installer\371da.msp
c:\windows\Installer\371db.msp
c:\windows\Installer\371dc.msp
c:\windows\Installer\371dd.msp
c:\windows\Installer\371de.msp
c:\windows\Installer\371df.msp
c:\windows\Installer\371e0.msp
c:\windows\Installer\373ea.msp
c:\windows\Installer\373eb.msp
c:\windows\Installer\373ec.msp
c:\windows\Installer\373ed.msp
c:\windows\Installer\373ee.msp
c:\windows\Installer\373ef.msp
c:\windows\Installer\373f0.msp
c:\windows\Installer\373f1.msp
c:\windows\Installer\373f2.msp
c:\windows\Installer\373f3.msp
c:\windows\Installer\3786e.msp
c:\windows\Installer\3786f.msp
c:\windows\Installer\37870.msp
c:\windows\Installer\37871.msp
c:\windows\Installer\37872.msp
c:\windows\Installer\37873.msp
c:\windows\Installer\37874.msp
c:\windows\Installer\37875.msp
c:\windows\Installer\37876.msp
c:\windows\Installer\37877.msp
c:\windows\Installer\37c27.msp
c:\windows\Installer\37c28.msp
c:\windows\Installer\37c29.msp
c:\windows\Installer\37c2a.msp
c:\windows\Installer\37c2b.msp
c:\windows\Installer\37c2c.msp
c:\windows\Installer\37c2d.msp
c:\windows\Installer\37c2e.msp
c:\windows\Installer\37c2f.msp
c:\windows\Installer\37c30.msp
c:\windows\Installer\37d9e.msp
c:\windows\Installer\37d9f.msp
c:\windows\Installer\37da0.msp
c:\windows\Installer\37da1.msp
c:\windows\Installer\37da2.msp
c:\windows\Installer\37da3.msp
c:\windows\Installer\37da4.msp
c:\windows\Installer\37da5.msp
c:\windows\Installer\37da6.msp
c:\windows\Installer\37da7.msp
c:\windows\Installer\384b3.msp
c:\windows\Installer\384b4.msp
c:\windows\Installer\384b5.msp
c:\windows\Installer\384b6.msp
c:\windows\Installer\384b7.msp
c:\windows\Installer\384b8.msp
c:\windows\Installer\384b9.msp
c:\windows\Installer\384ba.msp
c:\windows\Installer\384bb.msp
c:\windows\Installer\384bc.msp
c:\windows\Installer\388b9.msi
c:\windows\Installer\388ba.msp
c:\windows\Installer\388bb.msp
c:\windows\Installer\388bc.msp
c:\windows\Installer\388bd.msp
c:\windows\Installer\388be.msp
c:\windows\Installer\388bf.msp
c:\windows\Installer\388c0.msp
c:\windows\Installer\388c1.msp
c:\windows\Installer\388c2.msp
c:\windows\Installer\38cef.msi
c:\windows\Installer\38cf0.msp
c:\windows\Installer\38cf1.msp
c:\windows\Installer\38cf2.msp
c:\windows\Installer\38cf3.msp
c:\windows\Installer\38cf4.msp
c:\windows\Installer\38cf5.msp
c:\windows\Installer\38cf6.msp
c:\windows\Installer\38cf7.msp
c:\windows\Installer\38cf8.msp
c:\windows\Installer\392eb.msp
c:\windows\Installer\392ec.msp
c:\windows\Installer\392ed.msp
c:\windows\Installer\392ee.msp
c:\windows\Installer\392ef.msp
c:\windows\Installer\392f0.msp
c:\windows\Installer\392f1.msp
c:\windows\Installer\392f2.msp
c:\windows\Installer\392f3.msp
c:\windows\Installer\392f4.msp
c:\windows\Installer\3a51b.msi
c:\windows\Installer\3a51c.msp
c:\windows\Installer\3a51d.msp
c:\windows\Installer\3a51e.msp
c:\windows\Installer\3a51f.msp
c:\windows\Installer\3a520.msp
c:\windows\Installer\3a521.msp
c:\windows\Installer\3a522.msp
c:\windows\Installer\3a523.msp
c:\windows\Installer\3a524.msp
c:\windows\Installer\3a6ef.msi
c:\windows\Installer\3a6f0.msp
c:\windows\Installer\3a6f1.msp
c:\windows\Installer\3a6f2.msp
c:\windows\Installer\3a6f3.msp
c:\windows\Installer\3a6f4.msp
c:\windows\Installer\3a6f5.msp
c:\windows\Installer\3a6f6.msp
c:\windows\Installer\3a6f7.msp
c:\windows\Installer\3a6f8.msp
c:\windows\Installer\3b0d3.msi
c:\windows\Installer\3b0d4.msp
c:\windows\Installer\3b0d5.msp
c:\windows\Installer\3b0d6.msp
c:\windows\Installer\3b0d7.msp
c:\windows\Installer\3b0d8.msp
c:\windows\Installer\3b0d9.msp
c:\windows\Installer\3b0da.msp
c:\windows\Installer\3b0db.msp
c:\windows\Installer\3b0dc.msp
c:\windows\Installer\3baf4.msi
c:\windows\Installer\3baf5.msp
c:\windows\Installer\3baf6.msp
c:\windows\Installer\3baf7.msp
c:\windows\Installer\3baf8.msp
c:\windows\Installer\3baf9.msp
c:\windows\Installer\3bafa.msp
c:\windows\Installer\3bafb.msp
c:\windows\Installer\3bafc.msp
c:\windows\Installer\3bafd.msp
c:\windows\Installer\3c4e8.msp
c:\windows\Installer\3c4e9.msp
c:\windows\Installer\3c4ea.msp
c:\windows\Installer\3c4eb.msp
c:\windows\Installer\3c4ec.msp
c:\windows\Installer\3c4ed.msp
c:\windows\Installer\3c4ee.msp
c:\windows\Installer\3c4ef.msp
c:\windows\Installer\3c4f0.msp
c:\windows\Installer\3c4f1.msp
c:\windows\Installer\3d6ab.msp
c:\windows\Installer\3d6ac.msp
c:\windows\Installer\3d6ad.msp
c:\windows\Installer\3d6ae.msp
c:\windows\Installer\3d6af.msp
c:\windows\Installer\3d6b0.msp
c:\windows\Installer\3d6b1.msp
c:\windows\Installer\3d6b2.msp
c:\windows\Installer\3d6b3.msp
c:\windows\Installer\3d6b4.msp
c:\windows\Installer\3eac0.msp
c:\windows\Installer\3eac1.msp
c:\windows\Installer\3eac2.msp
c:\windows\Installer\3eac3.msp
c:\windows\Installer\3eac4.msp
c:\windows\Installer\3eac5.msp
c:\windows\Installer\3eac6.msp
c:\windows\Installer\3eac7.msp
c:\windows\Installer\3eac8.msp
c:\windows\Installer\3eac9.msp
c:\windows\Installer\3f667.msi
c:\windows\Installer\3f668.msp
c:\windows\Installer\3f669.msp
c:\windows\Installer\3f66a.msp
c:\windows\Installer\3f66b.msp
c:\windows\Installer\3f66c.msp
c:\windows\Installer\3f66d.msp
c:\windows\Installer\3f66e.msp
c:\windows\Installer\3f66f.msp
c:\windows\Installer\3f670.msp
c:\windows\Installer\413a4.msp
c:\windows\Installer\413a5.msp
c:\windows\Installer\413a6.msp
c:\windows\Installer\413a7.msp
c:\windows\Installer\413a8.msp
c:\windows\Installer\413a9.msp
c:\windows\Installer\413aa.msp
c:\windows\Installer\413ab.msp
c:\windows\Installer\413ac.msp
c:\windows\Installer\413ad.msp
c:\windows\Installer\436fa.msi
c:\windows\Installer\436fb.msp
c:\windows\Installer\436fc.msp
c:\windows\Installer\436fd.msp
c:\windows\Installer\436fe.msp
c:\windows\Installer\436ff.msp
c:\windows\Installer\43700.msp
c:\windows\Installer\43701.msp
c:\windows\Installer\43702.msp
c:\windows\Installer\43703.msp
c:\windows\Installer\446da.msp
c:\windows\Installer\446db.msp
c:\windows\Installer\446dc.msp
c:\windows\Installer\446dd.msp
c:\windows\Installer\446de.msp
c:\windows\Installer\446df.msp
c:\windows\Installer\446e0.msp
c:\windows\Installer\446e1.msp
c:\windows\Installer\446e2.msp
c:\windows\Installer\446e3.msp
c:\windows\Installer\458bb.msi
c:\windows\Installer\458bc.msp
c:\windows\Installer\458bd.msp
c:\windows\Installer\458be.msp
c:\windows\Installer\458bf.msp
c:\windows\Installer\458c0.msp
c:\windows\Installer\458c1.msp
c:\windows\Installer\458c2.msp
c:\windows\Installer\458c3.msp
c:\windows\Installer\458c4.msp
c:\windows\Installer\4a583.msi
c:\windows\Installer\4a584.msp
c:\windows\Installer\4a585.msp
c:\windows\Installer\4a586.msp
c:\windows\Installer\4a587.msp
c:\windows\Installer\4a588.msp
c:\windows\Installer\4a589.msp
c:\windows\Installer\4a58a.msp
c:\windows\Installer\4a58b.msp
c:\windows\Installer\4a58c.msp
c:\windows\Installer\5bdc5c.msp
c:\windows\Installer\5bdc5d.msp
c:\windows\Installer\5bdc5e.msp
c:\windows\Installer\5bdc5f.msp
c:\windows\Installer\5bdc60.msp
c:\windows\Installer\5bdc61.msp
c:\windows\Installer\5bdc62.msp
c:\windows\Installer\5bdc63.msp
c:\windows\Installer\5bdc64.msp
c:\windows\Installer\5bdc65.msp
c:\windows\Installer\5d6ef.msi
c:\windows\Installer\5d6f0.msp
c:\windows\Installer\5d6f1.msp
c:\windows\Installer\5d6f2.msp
c:\windows\Installer\5d6f3.msp
c:\windows\Installer\5d6f4.msp
c:\windows\Installer\5d6f5.msp
c:\windows\Installer\5d6f6.msp
c:\windows\Installer\5d6f7.msp
c:\windows\Installer\5d6f8.msp
c:\windows\Installer\7275c.msi
c:\windows\Installer\7275d.msp
c:\windows\Installer\7275e.msp
c:\windows\Installer\7275f.msp
c:\windows\Installer\72760.msp
c:\windows\Installer\72761.msp
c:\windows\Installer\72762.msp
c:\windows\Installer\72763.msp
c:\windows\Installer\72764.msp
c:\windows\Installer\72765.msp
c:\windows\Installer\73343.msi
c:\windows\Installer\73344.msp
c:\windows\Installer\73345.msp
c:\windows\Installer\73346.msp
c:\windows\Installer\73347.msp
c:\windows\Installer\73348.msp
c:\windows\Installer\73349.msp
c:\windows\Installer\7334a.msp
c:\windows\Installer\7334b.msp
c:\windows\Installer\7334c.msp
c:\windows\Installer\7b16b.msi
c:\windows\Installer\7b16c.msp
c:\windows\Installer\7b16d.msp
c:\windows\Installer\7b16e.msp
c:\windows\Installer\7b16f.msp
c:\windows\Installer\7b170.msp
c:\windows\Installer\7b171.msp
c:\windows\Installer\7b172.msp
c:\windows\Installer\7b173.msp
c:\windows\Installer\7b174.msp
c:\windows\Installer\85c81.msp
c:\windows\Installer\85c82.msp
c:\windows\Installer\85c83.msp
c:\windows\Installer\85c84.msp
c:\windows\Installer\85c85.msp
c:\windows\Installer\85c86.msp
c:\windows\Installer\85c87.msp
c:\windows\Installer\85c88.msp
c:\windows\Installer\85c89.msp
c:\windows\Installer\85c8a.msp
c:\windows\Installer\9de3dc.msi
c:\windows\Installer\9de3dd.msp
c:\windows\Installer\9de3de.msp
c:\windows\Installer\9de3df.msp
c:\windows\Installer\9de3e0.msp
c:\windows\Installer\9de3e1.msp
c:\windows\Installer\9de3e2.msp
c:\windows\Installer\9de3e3.msp
c:\windows\Installer\9de3e4.msp
c:\windows\Installer\9de3e5.msp
c:\windows\Installer\bcee3.msi
c:\windows\Installer\bcee4.msp
c:\windows\Installer\bcee5.msp
c:\windows\Installer\bcee6.msp
c:\windows\Installer\bcee7.msp
c:\windows\Installer\bcee8.msp
c:\windows\Installer\bcee9.msp
c:\windows\Installer\bceea.msp
c:\windows\Installer\bceeb.msp
c:\windows\Installer\bceec.msp
c:\windows\Installer\cd1ff6.msi
c:\windows\Installer\cd1ff7.msp
c:\windows\Installer\cd1ff8.msp
c:\windows\Installer\cd1ff9.msp
c:\windows\Installer\cd1ffa.msp
c:\windows\Installer\cd1ffb.msp
c:\windows\Installer\cd1ffc.msp
c:\windows\Installer\cd1ffd.msp
c:\windows\Installer\cd1ffe.msp
c:\windows\Installer\cd1fff.msp
c:\windows\Installer\cead0e.msi
c:\windows\Installer\cead0f.msp
c:\windows\Installer\cead10.msp
c:\windows\Installer\cead11.msp
c:\windows\Installer\cead12.msp
c:\windows\Installer\cead13.msp
c:\windows\Installer\cead14.msp
c:\windows\Installer\cead15.msp
c:\windows\Installer\cead16.msp
c:\windows\Installer\cead17.msp
c:\windows\Installer\d7928.msi
c:\windows\Installer\d7929.msp
c:\windows\Installer\d792a.msp
c:\windows\Installer\d792b.msp
c:\windows\Installer\d792c.msp
c:\windows\Installer\d792d.msp
c:\windows\Installer\d792e.msp
c:\windows\Installer\d792f.msp
c:\windows\Installer\d7930.msp
c:\windows\Installer\d7931.msp
c:\windows\Installer\d9fea.msi
c:\windows\Installer\d9feb.msp
c:\windows\Installer\d9fec.msp
c:\windows\Installer\d9fed.msp
c:\windows\Installer\d9fee.msp
c:\windows\Installer\d9fef.msp
c:\windows\Installer\d9ff0.msp
c:\windows\Installer\d9ff1.msp
c:\windows\Installer\d9ff2.msp
c:\windows\Installer\d9ff3.msp
c:\windows\Installer\e3c3cc.msi
c:\windows\Installer\e3c3cd.msp
c:\windows\Installer\e3c3ce.msp
c:\windows\Installer\e3c3cf.msp
c:\windows\Installer\e3c3d0.msp
c:\windows\Installer\e3c3d1.msp
c:\windows\Installer\e3c3d2.msp
c:\windows\Installer\e3c3d3.msp
c:\windows\Installer\e3c3d4.msp
c:\windows\Installer\e3c3d5.msp
c:\windows\system32\ceme25.dll
c:\windows\system32\ieuinit.inf
c:\windows\system32\msvcsv60.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-09-15 do 2009-10-15 )))))))))))))))))))))))))))))))
.

2009-10-15 12:55 . 2009-10-15 12:55 -------- d-----w- c:\windows\LastGood
2009-10-14 21:20 . 2009-10-14 21:24 -------- d-----w- C:\AULOGS
2009-10-14 20:55 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-10-14 20:55 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-10-14 20:55 . 2009-10-15 12:59 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-10-11 18:04 . 2009-10-11 18:05 1992 ----a-w- c:\windows\desctemp.dat
2009-10-10 07:32 . 2009-10-10 07:32 -------- d-----w- c:\program files\CCleaner

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-15 12:54 . 2008-12-26 22:21 298420 ----a-w- c:\windows\system32\drivers\Ids_cfg.dat
2009-10-15 12:52 . 2008-12-26 22:44 48062 ----a-w- c:\windows\system32\drivers\kmxcfg.u2k
2009-10-14 19:56 . 2008-12-27 09:43 80 ----a-w- c:\windows\msocreg32.dat
2009-10-12 18:51 . 2008-04-14 12:00 82974 ----a-w- c:\windows\system32\perfc005.dat
2009-10-12 18:51 . 2008-04-14 12:00 438254 ----a-w- c:\windows\system32\perfh005.dat
2009-09-25 05:37 . 2008-04-14 12:00 668160 ----a-w- c:\windows\system32\wininet.dll
2009-09-25 05:37 . 2008-04-14 12:00 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-09-11 14:19 . 2008-04-14 12:00 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-10 16:08 . 2009-07-31 18:15 -------- d-----w- c:\program files\Microsoft Silverlight
2009-09-04 21:05 . 2008-04-14 12:00 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-09-04 15:26 . 2009-09-04 15:26 -------- d-----w- c:\program files\M-Audio
2009-09-04 15:26 . 2008-12-26 21:56 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-08-30 07:48 . 2008-12-28 20:20 -------- d-----w- c:\program files\Sibelius Software
2009-08-26 08:02 . 2008-04-14 12:00 247326 ----a-w- c:\windows\system32\strmdll.dll
2009-08-19 19:42 . 2009-08-19 19:11 -------- d-----w- c:\program files\rajce
2009-08-05 09:01 . 2008-04-14 12:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-04 20:59 . 2008-04-14 12:00 2191360 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-08-04 17:29 . 2008-04-14 08:06 2068224 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-07-17 19:04 . 2008-04-14 12:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-17 16:17 . 2008-04-14 12:00 1437696 ----a-w- c:\windows\system32\query.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AMonitor"="c:\program files\Tiny Firewall Pro\amon.exe" [2004-08-18 557056]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-06-14 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 45056]
"HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2003-10-23 233472]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb09.exe" [2003-11-10 176128]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-03-19 2029640]
"MimBoot"="c:\program files\Musicmatch\Musicmatch Jukebox\mimboot.exe" [2004-12-06 11264]
"DeltaIITaskbarApp"="c:\windows\system32\DeltaIITray.exe" [2008-03-03 236040]
"M-Audio Taskbar Icon"="c:\windows\System32\M-AudioTaskBarIcon.exe" [2007-01-25 154112]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Soundman\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Lingea Update Center.lnk - c:\program files\Common Files\Lingea Shared\luc.exe [2008-9-30 275736]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
BlueSoleil.lnk - c:\program files\IVT Corporation\BlueSoleil\BlueSoleil.exe [2005-9-20 1200128]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-2-17 65588]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\PFW]
2004-07-20 12:44 73793 ----a-w- c:\windows\system32\UmxWNP.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\UmxSbxExw.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TinyFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\WINDOWS\\system32\\mshta.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=

R0 KmxNdis;KmxNdis;c:\windows\system32\drivers\KmxNdis.sys [25.8.2004 17:46 83456]
R1 Asapi;Asapi;c:\windows\system32\drivers\asapi.sys [27.12.2008 14:00 11264]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [19.3.2009 11:44 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [19.3.2009 11:45 93848]
R1 KmxAgent;KmxAgent;c:\windows\system32\drivers\KmxAgent.sys [6.8.2004 15:11 61024]
R1 KmxFile;KmxFile;c:\windows\system32\drivers\KmxFile.sys [20.7.2004 14:43 39264]
R1 KmxFw;KmxFw;c:\windows\system32\drivers\KmxFw.sys [26.8.2004 18:57 100864]
R1 KmxIds;KmxIds;c:\windows\system32\drivers\KmxIds.sys [25.8.2004 17:46 98304]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [19.3.2009 11:44 731840]
R2 KmxBiG;KmxBiG;c:\windows\system32\drivers\KmxBiG.sys [20.7.2004 14:43 14560]
R2 KmxSbx;KmxSbx;c:\windows\system32\drivers\KmxSbx.sys [24.8.2004 13:19 50720]
R2 UmxAgent;FW Event Manager;c:\program files\Tiny Firewall Pro\UmxAgent.exe [13.8.2004 12:40 389120]
R2 UmxCfg;FW Configuration Interpreter;c:\program files\Common Files\PFShared\UmxCfg.exe [18.8.2004 11:48 495616]
R2 UmxLU;FW Live Update;c:\program files\Common Files\PFShared\umxlu.exe [20.7.2004 14:43 98304]
R2 UmxPol;FW Policy Manager;c:\program files\Common Files\PFShared\UmxPol.exe [20.7.2004 14:43 196676]
R3 CLEDX;Team H2O CLEDX service;c:\windows\system32\drivers\cledx.sys [27.12.2008 10:24 33792]
R3 KmxCfg;KmxCfg;c:\windows\system32\drivers\KmxCfg.sys [20.7.2004 14:43 65408]
S2 gupdate1c9eccc47d714f2;Služba Google Update (gupdate1c9eccc47d714f2);c:\program files\Google\Update\GoogleUpdate.exe [14.6.2009 10:44 133104]
S3 DELTAII;Service for M-Audio Delta Driver (WDM);c:\windows\system32\DRIVERS\deltaII.sys --> c:\windows\system32\DRIVERS\deltaII.sys [?]
S3 UmxUTA;FW User to IP Address Translation;c:\program files\Tiny Firewall Pro\umxuta.exe [19.8.2004 17:22 163840]
.
Obsah adresáře 'Naplánované úlohy'

2009-10-15 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-06-14 08:41]

2009-10-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-14 08:43]

2009-10-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-14 08:43]
.
.
------- Doplňkový sken -------
.
Trusted Zone: musicmatch.com
Trusted Zone: musicmatch.com
FF - ProfilePath - c:\documents and settings\Soundman\Data aplikací\Mozilla\Firefox\Profiles\bnbht094.default\
FF - plugin: c:\program files\Google\Google Updater\2.4.1601.7122\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.183.7\npGoogleOneClick8.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKLM-Run-DeltTray - DeltTray.exe
Notify-WgaLogon - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-15 17:42
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\ESET\ESET Security\CurrentVersion\Info]
@Denied: (2) (LocalSystem)
"AppDataDir"="c:\\Documents and Settings\\All Users\\Data aplikací\\ESET\\ESET NOD32 Antivirus\\"
"DataDir"="ESET\\ESET NOD32 Antivirus\\"
"EditionName"=" "
"InstallDir"="c:\\Program Files\\ESET\\ESET NOD32 Antivirus\\"
"LanguageId"=dword:00000409
"PackageTag"=dword:6090e758
"ProductBase"=dword:00000000
"ProductCode"="{FE9C13F6-6BBD-47D3-B939-F7E061BC4930}"
"ProductName"="ESET NOD32 Antivirus"
"ProductType"="eav"
"ProductVersion"="4.0.417.0"
"UniqueId"="000791604A0FEDC9"
"ScannerBuild"=dword:0000121d
"ScannerVersionId"=dword:00000f6c
"ScannerVersion"="Open window for status."
"FixId"=dword:00000005
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(624)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\UmxWnp.Dll
c:\windows\system32\msi.dll
.
Celkový čas: 2009-10-15 17:47
ComboFix-quarantined-files.txt 2009-10-15 15:47

Před spuštěním: 9 620 869 120
Po spuštění: Volných bajtů: 11 125 182 464

WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=signature(40d740d6)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
signature(40d740d6)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

736

[Reklama]

[Damned]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok).
Zkopíruj do něj následující celý text označený zeleně:

File::
c:\windows\desctemp.dat
c:\windows\msocreg32.dat

FileLook::
c:\windows\system32\drivers\kmxcfg.u2k

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000000
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TinyFirewall]
"DisableMonitoring"=dword:00000000




Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.


Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe
a když se oba soubory překryjí, skript upusť.


- Automaticky se spustí ComboFix, oprava může trvat i déle než 10 minut. ! Nech ComboFix dokončit svou práci !
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT a popiš chování počítače

[soundman]

CFlog

ComboFix 09-10-14.09 - Soundman 15.10.2009 20:22.2.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1023.581 [GMT 2:00]
Spuštěný z: c:\documents and settings\Soundman\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Soundman\Plocha\CFScript.txt
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: Tiny Firewall 6.0 *enabled* {14CB4B80-8E52-45EA-905E-67C1267B4160}

FILE ::
"c:\windows\desctemp.dat"
"c:\windows\msocreg32.dat"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\desctemp.dat
c:\windows\msocreg32.dat

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-09-15 do 2009-10-15 )))))))))))))))))))))))))))))))
.

2009-10-15 12:55 . 2009-10-15 12:55 -------- d-----w- c:\windows\LastGood
2009-10-14 21:20 . 2009-10-14 21:24 -------- d-----w- C:\AULOGS
2009-10-14 20:55 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-10-14 20:55 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-10-14 20:55 . 2009-10-15 12:59 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-10-10 07:32 . 2009-10-10 07:32 -------- d-----w- c:\program files\CCleaner

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-15 12:54 . 2008-12-26 22:21 298420 ----a-w- c:\windows\system32\drivers\Ids_cfg.dat
2009-10-15 12:52 . 2008-12-26 22:44 48062 ----a-w- c:\windows\system32\drivers\kmxcfg.u2k
2009-10-12 18:51 . 2008-04-14 12:00 82974 ----a-w- c:\windows\system32\perfc005.dat
2009-10-12 18:51 . 2008-04-14 12:00 438254 ----a-w- c:\windows\system32\perfh005.dat
2009-09-25 05:37 . 2008-04-14 12:00 668160 ------w- c:\windows\system32\wininet.dll
2009-09-25 05:37 . 2008-04-14 12:00 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-09-11 14:19 . 2008-04-14 12:00 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-10 16:08 . 2009-07-31 18:15 -------- d-----w- c:\program files\Microsoft Silverlight
2009-09-04 21:05 . 2008-04-14 12:00 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-09-04 15:26 . 2009-09-04 15:26 -------- d-----w- c:\program files\M-Audio
2009-09-04 15:26 . 2008-12-26 21:56 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-08-30 07:48 . 2008-12-28 20:20 -------- d-----w- c:\program files\Sibelius Software
2009-08-26 08:02 . 2008-04-14 12:00 247326 ----a-w- c:\windows\system32\strmdll.dll
2009-08-19 19:42 . 2009-08-19 19:11 -------- d-----w- c:\program files\rajce
2009-08-05 09:01 . 2008-04-14 12:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-04 20:59 . 2008-04-14 12:00 2191360 ------w- c:\windows\system32\ntoskrnl.exe
2009-08-04 17:29 . 2008-04-14 08:06 2068224 ------w- c:\windows\system32\ntkrnlpa.exe
2009-07-17 19:04 . 2008-04-14 12:00 58880 ----a-w- c:\windows\system32\atl.dll
.

(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.

--- c:\windows\system32\drivers\kmxcfg.u2k ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File size: 48062
Created time: 2008-12-26 22:44
Modified time: 2009-10-15 12:52
MD5: 10CC25A21D1B9C473CCAA1C5F543FBAB
SHA1: D8CA3D5D0A1A9CCAB0827897B92A22902D9EB8D5


(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AMonitor"="c:\program files\Tiny Firewall Pro\amon.exe" [2004-08-18 557056]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-06-14 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 45056]
"HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2003-10-23 233472]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb09.exe" [2003-11-10 176128]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-03-19 2029640]
"MimBoot"="c:\program files\Musicmatch\Musicmatch Jukebox\mimboot.exe" [2004-12-06 11264]
"DeltaIITaskbarApp"="c:\windows\system32\DeltaIITray.exe" [2008-03-03 236040]
"M-Audio Taskbar Icon"="c:\windows\System32\M-AudioTaskBarIcon.exe" [2007-01-25 154112]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Soundman\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Lingea Update Center.lnk - c:\program files\Common Files\Lingea Shared\luc.exe [2008-9-30 275736]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
BlueSoleil.lnk - c:\program files\IVT Corporation\BlueSoleil\BlueSoleil.exe [2005-9-20 1200128]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-2-17 65588]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\PFW]
2004-07-20 12:44 73793 ----a-w- c:\windows\system32\UmxWNP.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\UmxSbxExw.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\WINDOWS\\system32\\mshta.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=

R0 KmxNdis;KmxNdis;c:\windows\system32\drivers\KmxNdis.sys [25.8.2004 17:46 83456]
R1 Asapi;Asapi;c:\windows\system32\drivers\asapi.sys [27.12.2008 14:00 11264]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [19.3.2009 11:44 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [19.3.2009 11:45 93848]
R1 KmxAgent;KmxAgent;c:\windows\system32\drivers\KmxAgent.sys [6.8.2004 15:11 61024]
R1 KmxFile;KmxFile;c:\windows\system32\drivers\KmxFile.sys [20.7.2004 14:43 39264]
R1 KmxFw;KmxFw;c:\windows\system32\drivers\KmxFw.sys [26.8.2004 18:57 100864]
R1 KmxIds;KmxIds;c:\windows\system32\drivers\KmxIds.sys [25.8.2004 17:46 98304]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [19.3.2009 11:44 731840]
R2 KmxBiG;KmxBiG;c:\windows\system32\drivers\KmxBiG.sys [20.7.2004 14:43 14560]
R2 KmxSbx;KmxSbx;c:\windows\system32\drivers\KmxSbx.sys [24.8.2004 13:19 50720]
R2 UmxAgent;FW Event Manager;c:\program files\Tiny Firewall Pro\UmxAgent.exe [13.8.2004 12:40 389120]
R2 UmxCfg;FW Configuration Interpreter;c:\program files\Common Files\PFShared\UmxCfg.exe [18.8.2004 11:48 495616]
R2 UmxLU;FW Live Update;c:\program files\Common Files\PFShared\umxlu.exe [20.7.2004 14:43 98304]
R2 UmxPol;FW Policy Manager;c:\program files\Common Files\PFShared\UmxPol.exe [20.7.2004 14:43 196676]
R3 CLEDX;Team H2O CLEDX service;c:\windows\system32\drivers\cledx.sys [27.12.2008 10:24 33792]
R3 KmxCfg;KmxCfg;c:\windows\system32\drivers\KmxCfg.sys [20.7.2004 14:43 65408]
S2 gupdate1c9eccc47d714f2;Služba Google Update (gupdate1c9eccc47d714f2);c:\program files\Google\Update\GoogleUpdate.exe [14.6.2009 10:44 133104]
S3 DELTAII;Service for M-Audio Delta Driver (WDM);c:\windows\system32\DRIVERS\deltaII.sys --> c:\windows\system32\DRIVERS\deltaII.sys [?]
S3 UmxUTA;FW User to IP Address Translation;c:\program files\Tiny Firewall Pro\umxuta.exe [19.8.2004 17:22 163840]
.
Obsah adresáře 'Naplánované úlohy'

2009-10-15 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-06-14 08:41]

2009-10-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-14 08:43]

2009-10-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-14 08:43]
.
.
------- Doplňkový sken -------
.
Trusted Zone: musicmatch.com
Trusted Zone: musicmatch.com
FF - ProfilePath - c:\documents and settings\Soundman\Data aplikací\Mozilla\Firefox\Profiles\bnbht094.default\
FF - plugin: c:\program files\Google\Google Updater\2.4.1601.7122\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.183.7\npGoogleOneClick8.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-15 20:27
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\ESET\ESET Security\CurrentVersion\Info]
@Denied: (2) (LocalSystem)
"AppDataDir"="c:\\Documents and Settings\\All Users\\Data aplikací\\ESET\\ESET NOD32 Antivirus\\"
"DataDir"="ESET\\ESET NOD32 Antivirus\\"
"EditionName"=" "
"InstallDir"="c:\\Program Files\\ESET\\ESET NOD32 Antivirus\\"
"LanguageId"=dword:00000409
"PackageTag"=dword:6090e758
"ProductBase"=dword:00000000
"ProductCode"="{FE9C13F6-6BBD-47D3-B939-F7E061BC4930}"
"ProductName"="ESET NOD32 Antivirus"
"ProductType"="eav"
"ProductVersion"="4.0.417.0"
"UniqueId"="000791604A0FEDC9"
"ScannerBuild"=dword:0000121d
"ScannerVersionId"=dword:00000f6c
"ScannerVersion"="Open window for status."
"FixId"=dword:00000005
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(624)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\UmxWnp.Dll
c:\windows\system32\msi.dll
.
Celkový čas: 2009-10-15 20:29
ComboFix-quarantined-files.txt 2009-10-15 18:29
ComboFix2.txt 2009-10-15 15:47

Před spuštěním: Volných bajtů: 11 124 948 992
Po spuštění: Volných bajtů: 11 112 763 392

176

HJ log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:34:18, on 15.10.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\PFShared\UmxCfg.exe
C:\Program Files\Common Files\PFShared\UmxPol.exe
C:\Program Files\Tiny Firewall Pro\UmxAgent.exe
C:\Program Files\Tiny Firewall Pro\UmxTray.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\PFShared\umxlu.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\DeltaIITray.exe
C:\WINDOWS\System32\M-AudioTaskBarIcon.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mim.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Lingea Shared\luc.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Soundman\Dokumenty\Downloads\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [MimBoot] C:\Program Files\Musicmatch\Musicmatch Jukebox\mimboot.exe
O4 - HKLM\..\Run: [DeltaIITaskbarApp] C:\WINDOWS\system32\DeltaIITray.exe
O4 - HKLM\..\Run: [M-Audio Taskbar Icon] C:\WINDOWS\System32\M-AudioTaskBarIcon.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [AMonitor] C:\Program Files\Tiny Firewall Pro\amon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Lingea Update Center.lnk = C:\Program Files\Common Files\Lingea Shared\luc.exe
O4 - Global Startup: BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.musicmatch.com
O15 - Trusted Zone: *.musicmatch.com (HKLM)
O20 - AppInit_DLLs: C:\WINDOWS\system32\UmxSbxExw.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate1c9eccc47d714f2) (gupdate1c9eccc47d714f2) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: FW Event Manager (UmxAgent) - Tiny Software, Inc. - C:\Program Files\Tiny Firewall Pro\UmxAgent.exe
O23 - Service: FW Configuration Interpreter (UmxCfg) - Tiny Software, Inc. - C:\Program Files\Common Files\PFShared\UmxCfg.exe
O23 - Service: FW Live Update (UmxLU) - Tiny Software, Inc. - C:\Program Files\Common Files\PFShared\umxlu.exe
O23 - Service: FW Policy Manager (UmxPol) - Tiny Software Inc. - C:\Program Files\Common Files\PFShared\UmxPol.exe
O23 - Service: FW User to IP Address Translation (UmxUTA) - Tiny Software, Inc. - C:\Program Files\Tiny Firewall Pro\umxuta.exe

--
End of file - 5744 bytes

Zdá se , že počítač se chová normálně

[Damned]

Šmejdíky jsme odstranili.

Odinstaluj ComboFix ( nutné ) .
ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix[mezera]/u

Vyčisti systém CCleanerem a použij i T-Cleaner ( nutné - smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš->spustíš)

(pozn.Pokud máš AVG, avast! nebo Aviru, před stažením T-Cleaneru a po dobu čištění deaktivuj AVG, avast! i Aviru (i rezidenty), následně T-Cleaner smaž a zapni si AVG,avast!, Aviru.)


Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni select all found, pak klik empty selected.
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.

ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache,
cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer,
Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.
*****************************************************************************************************************************************

Pokud si použil toho klienta na opravu AU, tak zkus při instalaci aktualizací vypnout firewall. Vyzkoušej a napiš, zda se udál nějaký pokrok.
Případně: Odinstaluj celý NET.Framework včetně jeho aktualizací (i jazykových) a stáhni si základní instalátor poslední verze, tuším že to bude verze 3.5.

[soundman]

Všechno jsem provedl ,ale situace je stále stejnější.Zkusil jsem odinstalovat ty předchozí verze,povedlo se to u verze 1.0 a verze 2.0 už nešla odinstalovat.Tak jsem zkusil nainstalovat tu verzi 3.5 i s vypnutým firewallem a výsledek opět stejný .Nepodařilo se nainstalovat.
Vlastně ani nevím, jak moc je pro mě tato aplikace důležitá , jestli to stojí za tu námahu a jestli by to opravdu nebylo lepší zformátovat.
Ono mě to pravděpodobně kvůli zamýšlenému upgradu hardwaru za nějakou dobu stejně asi čeká a Tebe to určitě zabírá nemálo času .

[Damned]

Některé aplikace vyžadují NET.Framework verzi.... a vyšší. Zkusil bych support MS.
Máš vypnutý DEP?

[soundman]

Sorry, ale nevím co je DEP.

[Damned]

Vlastnosti systému a tam záložka "Upřenit" a Výkon--Nastavení--Zabránění spuštění dat (DEP).
Zkus tam nastavit vyjímku pro Windows Installer.

[soundman]

Chtěl jsem tam dát tu vyjímku,ale nemohl jsem najít umístění windows installeru,tak jsem dal vyhledávání a nebyly zobrazeny žádné výsledky.
Tak jsem se zpětně díval na ty logy a zrovna windows installer je tam mezi ostatními výmazy.Nemůže to být ten problém? A nemám ho stáhnout znovu?

[Damned]

Cesta k Windows® installer je

Kód: Vybrat vše

C:\WINDOWS\system32\msiexec.exe

[soundman]

Takže opět neúspěšně;aktualizace je stažená ,ale instalace neprobíhá,během procesu hláška,že Windows® installer musí být uzavřen atd....
Ještě k té podpoře od MS:já jsem několikrát ten problém odeslal a jednou mi přišlo od nich nějaké hlášení,že zaznamenali tady ten problém a na základě toho jsem jim zase poslal něco jako zprávu o chybách,ale je to zřejmě na dlouhý lokte.