PC-HELP.CZ

Už několik týdnu (cca6) sleduji že Spybot - Search & Destroj nemuže odstranit toto ani po restartu
mám se obavat nebo je to jen zbytečnost?
B5CEDB0D91BD4641.job (Open Trans Comp.exe) 7/22/2007 10:00:00 PM ** CHYBA **
Úlohu nelze spustit..
Příslušná chyba:
0x80070002: Systém nemůže nalézt uvedený soubor.
Zkuste aplikaci najít pomocí tlačítka Procházet na stránce Úloha..
B5CEDB0D91BD4641.job (Open Trans Comp.exe) 7/22/2007 11:00:00 PM ** CHYBA **
Úlohu nelze spustit..
Příslušná chyba:
0x80070002: Systém nemůže nalézt uvedený soubor.
Zkuste aplikaci najít pomocí tlačítka Procházet na stránce Úloha..
B5CEDB0D91BD4641.job (Open Trans Comp.exe) 7/23/2007 12:00:00 AM ** CHYBA **
Úlohu nelze spustit..
Příslušná chyba:
0x80070002: Systém nemůže nalézt uvedený soubor.
Zkuste aplikaci najít pomocí tlačítka Procházet na stránce Úloha..
B5CEDB0D91BD4641.job (Open Trans Comp.exe) 7/23/2007 1:00:02 AM ** CHYBA **
Úlohu nelze spustit..
Příslušná chyba:
0x80070002: Systém nemůže nalézt uvedený soubor.
Zkuste aplikaci najít pomocí tlačítka Procházet na stránce Úloha..
Služba Plánovač úloh
Spuštěno v 7/23/2007 12:24:19 PM
Služba Plánovač úloh
Ukončeno v 7/23/2007 4:34:36 PM
Služba Plánovač úloh
Spuštěno v 7/23/2007 4:35:47 PM
B5CEDB0D91BD4641.job (Open Trans Comp.exe) 7/23/2007 7:00:00 PM ** CHYBA **
Úlohu nelze spustit..
Příslušná chyba:
0x80070002: Systém nemůže nalézt uvedený soubor.
Zkuste aplikaci najít pomocí tlačítka Procházet na stránce Úloha..
B5CEDB0D91BD4641.job (Open Trans Comp.exe) 7/23/2007 8:00:00 PM ** CHYBA **
Úlohu nelze spustit..
Příslušná chyba:
0x80070002: Systém nemůže nalézt uvedený soubor.
Zkuste aplikaci najít pomocí tlačítka Procházet na stránce Úloha..
B5CEDB0D91BD4641.job (Open Trans Comp.exe) 7/23/2007 9:00:01 PM ** CHYBA **
Úlohu nelze spustit..
Příslušná chyba:
0x80070002: Systém nemůže nalézt uvedený soubor.
Zkuste aplikaci najít pomocí tlačítka Procházet na stránce Úloha..
[ ***** Poslední položka je uvedena nad tímto řádkem. *****)


Ten datum se mění podle spuštění očisty

nu,pošli Hijackthis-a ten spouštěcí exáč přejmenuj třeba na abc.exe

a pošli i log z Lopfindu
http://viry.cz/forum/viewtopic.php?t=34528

už se na tom pracuje

no to doufam

HijackThis log
Logfile of HijackThis v1.99.1
Scan saved at 22:22, on 2007-07-23
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\BufferZone\ClntSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\PROGRA~1\eScan\TRAYSSER.EXE
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\eScan\TRAYICOS.EXE
C:\PROGRA~1\COMMON~1\MICROW~1\Agent\MWASER.EXE
C:\PROGRA~1\COMMON~1\MICROW~1\Agent\MWAgent.exe
C:\Program Files\Cheetah Burner\Cheetah CD Burner\NMSAccess.exe
C:\WINDOWS\system32\oodag.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ConMet\ConMet.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\lexpps.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\agent.exe
C:\Program Files\ICQ6\ICQ.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Corel\CorelDRAW Graphics Suite 13\Programs\Capture.exe
C:\Program Files\Corel\CorelDRAW Graphics Suite 13\Programs\Cap.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\Nešpor\Dokumenty\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.icq.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Secured_eMule toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSecu.dll
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Secured_eMule toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSecu.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\TRANSLAT\WEBIE.DLL
O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O2 - BHO: Alcohol Toolbar Helper - {8126A4A5-BFD3-46FE-BBDF-BFB5CF78E489} - C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll
O3 - Toolbar: &S-Rank - {B71B15CF-3093-459C-B764-AEB2486F2273} - C:\Program Files\Seznam\Postak\SRank.dll
O3 - Toolbar: Centrum.cz Turbo - {72FF0384-108C-48a5-A60C-6A92067419CF} - C:\Program Files\NetCentrum\Turbo\turbo.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\TRANSLAT\WEBIE.DLL
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O3 - Toolbar: Secured_eMule toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSecu.dll
O3 - Toolbar: Alcohol Toolbar - {ED4BD629-C1B6-4399-8A34-02CCAA921DC9} - C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll
O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
O4 - HKLM\..\Run: [ConMet] C:\Program Files\ConMet\ConMet.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\RunOnce: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O4 - HKLM\..\RunOnce: [mwavscan] "C:\DOCUME~1\NEPOR~1\LOCALS~1\Temp\mexe.com" /s /AUTORUNBOOT
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredi ... p=ZJfox000
O8 - Extra context menu item: Stáhnout Free Download Managerem - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout vybrané Free Download Managerem - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše Free Download Managerem - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Stáhnout webovou stránku Free Download Managerem - file://C:\Program Files\Free Download Manager\dlpage.htm
O9 - Extra button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O9 - Extra 'Tools' menuitem: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: Centrum.cz - {8616B3F0-5B9D-4127-AFAF-DA12BFA2A05E} - C:\Program Files\NetCentrum\Turbo\turbo.dll
O9 - Extra 'Tools' menuitem: Centrum.cz Turbo - {8616B3F0-5B9D-4127-AFAF-DA12BFA2A05E} - C:\Program Files\NetCentrum\Turbo\turbo.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: &Nastavit poekladae - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Poeložit &oznaeený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Poeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O16 - DPF: {50E43D86-A74D-11D0-98CE-004005249458} - https://www.mojebanka.cz/jars/confwiz/MVSGif.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} - http://pokladna.station.zoznam.sk/god/ocx/ExentCtl.ocx
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: BufferZone Service (BufferZoneSvc) - Unknown owner - C:\Program Files\BufferZone\ClntSvc.exe
O23 - Service: eScan Server-Updater (eScan-trayicos) - MicroWorld Technologies Inc. - C:\PROGRA~1\eScan\TRAYSSER.EXE
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: MWAgent - MicroWorld Technologies Inc. - C:\PROGRA~1\COMMON~1\MICROW~1\Agent\MWASER.EXE
O23 - Service: NMSAccess - Unknown owner - C:\Program Files\Cheetah Burner\Cheetah CD Burner\NMSAccess.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: AdventNet ScanFi (ScanFi) - Unknown owner - C:\AdventNet\ScanFi\bin\wrapper.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

A toto nejde spustít LopFind

povedlo se
LopFind v3 © Čas: 22:28:14.71 Datum: 2007-07-23

******************************************

[b]1) Výpis obsahů Application Data složek pro zjištění podezřelých adresářů:

Svazek v jednotce C nem § dnou jmenovku.
S‚riov‚ źˇslo svazku je 70B0-38CE.

Věpis adres ýe C:\Documents and Settings\Administrator\DATAAP~1

2007-07-06 21:29 <DIR> Talkback
2007-07-06 21:26 <DIR> ICQ
2007-06-27 22:19 <DIR> Macromedia
2006-08-01 17:07 <DIR> Mozilla
2006-08-01 17:06 62 desktop.ini
2006-08-01 17:06 <DIR> Microsoft
2006-08-01 17:06 <DIR> Sun
2006-08-01 17:06 <DIR> .
2006-08-01 17:06 <DIR> ..
1 soubor…, 62 bajt…
Adres ý…: 8, Volněch bajt…: 4464848896
Svazek v jednotce C nem § dnou jmenovku.
S‚riov‚ źˇslo svazku je 70B0-38CE.

Věpis adres ýe C:\Documents and Settings\All Users\DATAAP~1

2007-07-16 22:48 <DIR> wma multi this chic
2007-06-21 20:45 <DIR> BufferZone
2007-06-17 15:09 <DIR> vsosdk
2007-06-05 20:09 <DIR> SUPERAntiSpyware.com
2007-06-04 21:51 <DIR> InstallShield
2007-06-04 10:44 <DIR> Iomatic
2007-04-13 12:02 <DIR> Kaspersky Lab
2007-03-21 22:26 <DIR> BVRP Software
2007-03-12 22:29 <DIR> WhiteCap (Holiday Edition)
2007-03-05 17:44 <DIR> Disney Interactive
2006-08-15 12:25 <DIR> akcnicestinashw
2006-08-15 09:05 <DIR> Trojan Remover
2006-07-19 17:39 <DIR> Yahoo! Companion
2006-07-16 13:41 <DIR> Trymedia
2006-06-07 19:13 <DIR> Skype
2006-04-20 17:10 <DIR> Spybot - Search & Destroy
2006-04-16 13:56 <DIR> ConMet
2006-03-31 17:48 <DIR> avg7(2)
2006-03-31 17:48 <DIR> Grisoft(2)
2006-03-31 13:16 <DIR> Windows Genuine Advantage
2006-03-30 12:15 <DIR> avg7
2006-02-23 09:15 <DIR> espionServerData
2006-02-22 23:31 <DIR> Adobe Systems
2005-12-26 14:19 <DIR> Symantec
2005-12-23 19:13 <DIR> QuickTime
2005-12-09 13:00 <DIR> UDL
2005-12-07 10:46 <DIR> The Learning Company
2005-11-29 13:03 <DIR> CyberLink
2005-11-29 13:00 <DIR> DVD Shrink
2005-11-29 12:36 <DIR> Adobe
2005-11-29 12:02 <DIR> Ahead
2005-11-29 11:52 62 desktop.ini
2005-11-29 11:52 <DIR> Microsoft
2005-11-29 11:52 <DIR> .
2005-11-29 11:52 <DIR> ..
1 soubor…, 62 bajt…
Adres ý…: 34, Volněch bajt…: 4464848896
Svazek v jednotce C nem § dnou jmenovku.
S‚riov‚ źˇslo svazku je 70B0-38CE.

Věpis adres ýe C:\Documents and Settings\LAURA\DATAAP~1

2007-07-22 17:42 <DIR> BitDownload
2007-07-22 13:06 <DIR> FunWebProducts
2007-06-03 00:55 <DIR> ICQ Toolbar
2007-06-03 00:54 <DIR> ICQ
2006-12-22 20:33 <DIR> ICQLite
2006-12-22 20:23 <DIR> Skype
2006-08-09 08:40 <DIR> ATI
2006-06-22 08:19 <DIR> Webroot
2006-05-13 08:27 <DIR> ConMet
2006-05-06 13:13 <DIR> OpenOffice.org2
2006-04-24 10:57 <DIR> Talkback
2006-04-24 10:57 <DIR> Mozilla
2006-04-18 14:04 <DIR> InstallShield
2006-04-12 16:27 <DIR> Championship Manager 2006 BETA Demo
2006-04-12 16:27 <DIR> InstallShield Installation Information
2006-04-06 18:17 <DIR> Real
2006-04-01 07:40 <DIR> AVG7
2006-02-13 13:08 <DIR> Help
2006-02-05 16:37 <DIR> CrystalSpace
2006-02-05 16:37 <DIR> Chromeflower
2005-12-30 20:32 <DIR> Template
2005-12-29 00:17 <DIR> Symantec
2005-12-18 15:23 <DIR> mbin.jp
2005-12-12 12:53 <DIR> InfoTurist
2005-12-08 20:38 <DIR> Ahead
2005-12-08 13:33 <DIR> Macromedia
2005-12-07 11:32 <DIR> AdobeUM
2005-12-02 22:52 <DIR> Adobe
2005-12-02 20:38 <DIR> Lavasoft
2005-12-02 20:15 <DIR> Identities
2005-12-02 20:15 <DIR> Microsoft
2005-12-02 20:15 <DIR> Sun
2005-12-02 20:15 <DIR> .
2005-12-02 20:15 <DIR> ..
2005-11-30 22:23 62 desktop.ini
1 soubor…, 62 bajt…
Adres ý…: 34, Volněch bajt…: 4464844800
Svazek v jednotce C nem § dnou jmenovku.
S‚riov‚ źˇslo svazku je 70B0-38CE.

Věpis adres ýe C:\Documents and Settings\mŁj internet\DATAAP~1

2006-06-23 11:22 <DIR> Webroot
2006-06-04 01:08 <DIR> ConMet
2006-06-04 01:08 <DIR> AVG7
2006-04-22 17:49 <DIR> Talkback
2006-04-22 17:49 <DIR> Mozilla
2006-04-08 18:06 <DIR> Real
2006-04-08 18:06 <DIR> Identities
2006-04-08 18:06 <DIR> Sun
2006-04-07 11:43 <DIR> Lavasoft
2006-04-07 11:41 <DIR> Macromedia
2006-04-07 11:39 62 desktop.ini
2006-04-07 11:39 <DIR> Microsoft
2006-04-07 11:39 <DIR> .
2006-04-07 11:39 <DIR> ..
1 soubor…, 62 bajt…
Adres ý…: 13, Volněch bajt…: 4464844800
Svazek v jednotce C nem § dnou jmenovku.
S‚riov‚ źˇslo svazku je 70B0-38CE.

Věpis adres ýe C:\Documents and Settings\Neçpor\DATAAP~1

2007-07-17 19:11 <DIR> nCleaner
2007-07-16 22:48 <DIR> BitDownload
2007-07-16 22:48 <DIR> New Support Camp
2007-07-02 20:01 <DIR> OLYMPUS
2007-06-21 20:45 <DIR> ICQ Toolbar
2007-06-17 14:06 <DIR> Registry Cleaner
2007-06-04 22:03 <DIR> Corel
2007-06-04 21:57 <DIR> Pixmantec
2007-06-04 21:21 <DIR> U3
2007-06-02 22:38 <DIR> ICQ
2007-06-01 07:46 <DIR> Desktop Sidebar
2007-05-17 18:55 <DIR> UseNeXT
2007-05-09 17:22 <DIR> SUPERAntiSpyware.com
2007-05-05 13:17 87608 inst.exe
2007-05-03 09:32 <DIR> uTorrent
2007-04-29 21:27 <DIR> Uniblue
2007-03-18 21:43 <DIR> GlarySoft
2006-09-12 16:04 34 pcouffin.log
2006-09-12 16:04 81920 ezpinst.exe
2006-09-12 16:04 7887 pcouffin.cat
2006-09-12 16:04 1144 pcouffin.inf
2006-09-12 16:04 47360 pcouffin.sys
2006-08-17 20:45 <DIR> Elaborate Bytes
2006-08-17 11:37 <DIR> Nero
2006-08-16 18:16 85 .zreglib
2006-08-15 12:25 <DIR> akcnicestinashw
2006-08-11 13:59 <DIR> PC Tools
2006-08-07 11:25 <DIR> SlySoft
2006-08-07 00:57 <DIR> ATI
2006-07-29 18:46 <DIR> Free Download Manager
2006-07-15 19:15 <DIR> Media Player Classic
2006-07-13 17:06 <DIR> Sereniti
2006-07-13 12:48 <DIR> ICQLite
2006-06-23 12:24 <DIR> Vso
2006-06-20 18:29 <DIR> Webroot
2006-06-16 18:21 <DIR> Template
2006-06-07 19:13 <DIR> Skype
2006-04-22 13:41 <DIR> Talkback
2006-04-22 13:40 <DIR> Mozilla
2006-04-16 13:56 <DIR> ConMet
2006-04-16 08:16 <DIR> NetCentrum
2006-04-13 23:33 <DIR> OpenOffice.org2
2006-04-08 18:05 <DIR> Google
2006-04-03 22:54 <DIR> Real
2006-04-02 15:54 <DIR> VSO_HWE
2006-03-31 17:49 <DIR> AVG7
2006-03-30 23:53 <DIR> dvdcss
2006-03-05 13:17 <DIR> teamspeak2
2006-02-23 17:32 <DIR> Opera
2006-01-14 21:50 <DIR> InfoTurist
2006-01-11 00:26 <DIR> MobileAction
2005-12-26 14:20 <DIR> Symantec
2005-12-23 19:45 <DIR> Macromedia
2005-12-22 01:57 <DIR> AquaNox
2005-12-18 09:45 <DIR> mbin.jp
2005-12-13 15:48 <DIR> Help
2005-12-10 19:49 <DIR> AdobeUM
2005-12-07 11:07 <DIR> DeepBurner
2005-12-07 01:35 <DIR> XnView
2005-12-04 21:57 <DIR> Ahead
2005-11-30 22:32 <DIR> Adobe
2005-11-29 12:08 <DIR> Lavasoft
2005-11-29 11:18 <DIR> Identities
2005-11-29 11:17 62 desktop.ini
2005-11-29 11:17 <DIR> Microsoft
2005-11-29 11:17 <DIR> Sun
2005-11-29 11:17 <DIR> .
2005-11-29 11:17 <DIR> ..
8 soubor…, 226100 bajt…
Adres ý…: 60, Volněch bajt…: 4464840704
Svazek v jednotce C nem § dnou jmenovku.
S‚riov‚ źˇslo svazku je 70B0-38CE.

Věpis adres ýe C:\Documents and Settings\remoteservice\DATAAP~1

2007-06-10 10:22 <DIR> ..
2007-06-10 10:22 <DIR> .
0 soubor…, 0 bajt…
Adres ý…: 2, Volněch bajt…: 4464840704
Svazek v jednotce C nem § dnou jmenovku.
S‚riov‚ źˇslo svazku je 70B0-38CE.

Věpis adres ýe C:\Documents and Settings\¦ANETA\DATAAP~1

2007-07-04 10:19 <DIR> ICQ Toolbar
2007-07-03 13:09 <DIR> ICQ
2007-04-19 19:09 <DIR> Ahead
2007-01-13 15:22 <DIR> akcnicestinashw
2006-12-22 20:20 <DIR> Skype
2006-08-09 08:41 <DIR> ATI
2006-07-13 13:46 <DIR> ICQLite
2006-06-21 23:00 <DIR> Webroot
2006-06-19 22:57 <DIR> OpenOffice.org2
2006-06-10 10:47 <DIR> Template
2006-06-10 10:42 <DIR> NetCentrum
2006-05-11 18:41 <DIR> ConMet
2006-04-22 15:47 <DIR> Talkback
2006-04-22 15:47 <DIR> Mozilla
2006-04-08 18:06 <DIR> Real
2006-04-03 20:03 <DIR> Lavasoft
2006-03-30 13:19 <DIR> Adobe
2006-03-30 13:14 <DIR> Macromedia
2006-03-30 12:27 <DIR> AVG7
2006-01-30 10:07 <DIR> Identities
2006-01-30 10:07 62 desktop.ini
2006-01-30 10:07 <DIR> Microsoft
2006-01-30 10:07 <DIR> ..
2006-01-30 10:07 <DIR> .
2006-01-30 10:07 <DIR> Sun
1 soubor…, 62 bajt…
Adres ý…: 24, Volněch bajt…: 4464840704
Svazek v jednotce C nem § dnou jmenovku.
S‚riov‚ źˇslo svazku je 70B0-38CE.

Věpis adres ýe C:\Documents and Settings\Default User\DATAAP~1

2005-11-29 11:52 62 desktop.ini
2005-11-29 11:52 <DIR> ..
2005-11-29 11:52 <DIR> Microsoft
2005-11-29 11:52 <DIR> .
2005-11-29 11:11 <DIR> Sun
1 soubor…, 62 bajt…
Adres ý…: 4, Volněch bajt…: 4464840704
Svazek v jednotce C nem § dnou jmenovku.
S‚riov‚ źˇslo svazku je 70B0-38CE.

Věpis adres ýe C:\Documents and Settings\LocalService\DATAAP~1

2007-04-02 16:28 <DIR> Help
2006-08-13 19:26 <DIR> Mozilla
2006-06-20 18:30 <DIR> Webroot
2006-03-30 12:15 <DIR> AVG7
2005-11-29 11:15 <DIR> Microsoft
2005-11-29 11:15 <DIR> ..
2005-11-29 11:15 <DIR> .
0 soubor…, 0 bajt…
Adres ý…: 7, Volněch bajt…: 4464840704
Svazek v jednotce C nem § dnou jmenovku.
S‚riov‚ źˇslo svazku je 70B0-38CE.

Věpis adres ýe C:\Documents and Settings\NetworkService\DATAAP~1

2006-08-01 17:06 <DIR> Webroot
2005-11-29 11:14 <DIR> Microsoft
2005-11-29 11:14 <DIR> ..
2005-11-29 11:14 <DIR> .
0 soubor…, 0 bajt…
Adres ý…: 4, Volněch bajt…: 4464840704
Svazek v jednotce C nem § dnou jmenovku.
S‚riov‚ źˇslo svazku je 70B0-38CE.

Věpis adres ýe C:\Documents and Settings\All Users\Application Data

2007-05-07 22:33 <DIR> Exetender
2007-05-07 22:33 <DIR> ..
2007-05-07 22:33 <DIR> .
0 soubor…, 0 bajt…
Adres ý…: 3, Volněch bajt…: 4464836608

******************************************

2) Vyhledávání a odstranění podezřelých .job souborů:

a) Soubory přítomné v C:\WINDOWS\tasks\ adresáři:

Svazek v jednotce C nem § dnou jmenovku.
S‚riov‚ źˇslo svazku je 70B0-38CE.

Věpis adres ýe C:\WINDOWS\Tasks

2007-07-06 08:04 330 MP Scheduled Scan.job
2007-06-25 10:17 340 Uniblue SpyEraser.job
2007-06-25 09:47 272 Uniblue SpeedUpMyPC Nag.job
2007-06-25 09:47 394 Uniblue SpeedUpMyPC.job
2006-06-18 15:10 350 At15.job
2006-06-18 15:10 346 At14.job
2006-06-18 15:10 346 At13.job
2006-06-18 15:03 350 At12.job
2006-06-18 15:03 346 At11.job
2006-06-18 15:03 346 At10.job
2006-06-18 14:47 350 At9.job
2006-06-18 14:47 346 At8.job
2006-06-18 14:47 346 At7.job
2005-12-27 15:31 350 At6.job
2005-12-27 15:31 346 At5.job
2005-12-27 15:31 346 At4.job
2005-12-27 15:23 350 At3.job
2005-12-27 15:23 346 At2.job
2005-11-29 11:15 6 SA.DAT
2005-11-29 11:07 65 desktop.ini
2005-11-29 11:07 <DIR> .
2005-11-29 11:07 <DIR> ..
20 soubor…, 6,271 bajt…
Adres ý…: 2, Volněch bajt…: 4,464,836,608

––––––––––––––––––––––––––––––––––––––––––

b) Zjišťování vlastností přítomných .job souborů:

––––––––––––––––––––––––––––––––––––––––––

c) Nalezené a odstraněné nežádoucí soubory:


––––––––––––––––––––––––––––––––––––––––––

d) Soubory přítomné v adresáři po vymazání:

Svazek v jednotce C nem § dnou jmenovku.
S‚riov‚ źˇslo svazku je 70B0-38CE.

Věpis adres ýe C:\WINDOWS\Tasks

2007-07-06 08:04 330 MP Scheduled Scan.job
2007-06-25 10:17 340 Uniblue SpyEraser.job
2007-06-25 09:47 272 Uniblue SpeedUpMyPC Nag.job
2007-06-25 09:47 394 Uniblue SpeedUpMyPC.job
2006-06-18 15:10 350 At15.job
2006-06-18 15:10 346 At14.job
2006-06-18 15:10 346 At13.job
2006-06-18 15:03 350 At12.job
2006-06-18 15:03 346 At11.job
2006-06-18 15:03 346 At10.job
2006-06-18 14:47 350 At9.job
2006-06-18 14:47 346 At8.job
2006-06-18 14:47 346 At7.job
2005-12-27 15:31 350 At6.job
2005-12-27 15:31 346 At5.job
2005-12-27 15:31 346 At4.job
2005-12-27 15:23 350 At3.job
2005-12-27 15:23 346 At2.job
2005-11-29 11:15 6 SA.DAT
2005-11-29 11:07 65 desktop.ini
2005-11-29 11:07 <DIR> .
2005-11-29 11:07 <DIR> ..
20 soubor…, 6,271 bajt…
Adres ý…: 2, Volněch bajt…: 4,464,836,608

******************************************

3) Vyhledávání podvodných programů ve složce Program Files:

Nebyly nalezeny žádné podvodné adresáře.
[/b]

A ještě toto

to je děs-běs,člověče nešťastná-běžej ti čtyři antispyware najednou.

takže bych to všechno kromě toho spybota odinstaloval
Windows Defender
Spy Sweeper
SUPERAntiSpyware
u všeho vymaž po odinstalu složky v program files a vyčisti ccleanerem a regcleanerem

a hlavně odinstaluj BitDownload!! (pokud v přidat odebrat bude)

ve službách zastav a zakaž spouštění
AdventNet ScanFi

použij avengera
http://www.spyware.cz/go.php?p=spyware&t=aplikace&id=35

a skript

Files to delete:
C:\AdventNet\ScanFi\bin\wrapper.exe

po restartu log z avengera a hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 17:08, on 2007-07-24
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\BufferZone\ClntSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\PROGRA~1\eScan\TRAYSSER.EXE
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\eScan\TRAYICOS.EXE
C:\PROGRA~1\COMMON~1\MICROW~1\Agent\MWASER.EXE
C:\Program Files\Cheetah Burner\Cheetah CD Burner\NMSAccess.exe
C:\PROGRA~1\COMMON~1\MICROW~1\Agent\MWAgent.exe
C:\WINDOWS\system32\oodag.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ConMet\ConMet.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\lexpps.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\agent.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\CCleaner\ccleaner.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Nešpor\Dokumenty\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.icq.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Secured_eMule toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSecu.dll
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Secured_eMule toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSecu.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\TRANSLAT\WEBIE.DLL
O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O2 - BHO: Alcohol Toolbar Helper - {8126A4A5-BFD3-46FE-BBDF-BFB5CF78E489} - C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll
O3 - Toolbar: &S-Rank - {B71B15CF-3093-459C-B764-AEB2486F2273} - C:\Program Files\Seznam\Postak\SRank.dll
O3 - Toolbar: Centrum.cz Turbo - {72FF0384-108C-48a5-A60C-6A92067419CF} - C:\Program Files\NetCentrum\Turbo\turbo.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\TRANSLAT\WEBIE.DLL
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O3 - Toolbar: Secured_eMule toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule\tbSecu.dll
O3 - Toolbar: Alcohol Toolbar - {ED4BD629-C1B6-4399-8A34-02CCAA921DC9} - C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll
O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
O4 - HKLM\..\Run: [ConMet] C:\Program Files\ConMet\ConMet.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredi ... p=ZJfox000
O8 - Extra context menu item: Stáhnout Free Download Managerem - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout vybrané Free Download Managerem - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše Free Download Managerem - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Stáhnout webovou stránku Free Download Managerem - file://C:\Program Files\Free Download Manager\dlpage.htm
O9 - Extra button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O9 - Extra 'Tools' menuitem: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: Centrum.cz - {8616B3F0-5B9D-4127-AFAF-DA12BFA2A05E} - C:\Program Files\NetCentrum\Turbo\turbo.dll
O9 - Extra 'Tools' menuitem: Centrum.cz Turbo - {8616B3F0-5B9D-4127-AFAF-DA12BFA2A05E} - C:\Program Files\NetCentrum\Turbo\turbo.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: &Nastavit poekladae - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Poeložit &oznaeený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Poeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O16 - DPF: {50E43D86-A74D-11D0-98CE-004005249458} - https://www.mojebanka.cz/jars/confwiz/MVSGif.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} - http://pokladna.station.zoznam.sk/god/ocx/ExentCtl.ocx
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: BufferZone Service (BufferZoneSvc) - Unknown owner - C:\Program Files\BufferZone\ClntSvc.exe
O23 - Service: eScan Server-Updater (eScan-trayicos) - MicroWorld Technologies Inc. - C:\PROGRA~1\eScan\TRAYSSER.EXE
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: MWAgent - MicroWorld Technologies Inc. - C:\PROGRA~1\COMMON~1\MICROW~1\Agent\MWASER.EXE
O23 - Service: NMSAccess - Unknown owner - C:\Program Files\Cheetah Burner\Cheetah CD Burner\NMSAccess.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: AdventNet ScanFi (ScanFi) - Unknown owner - C:\AdventNet\ScanFi\bin\wrapper.exe (file missing)
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

//////////////////////////////////////////
Avenger Pre-Processor log
//////////////////////////////////////////

Error: selected file does not appear to be a valid script.
Error code: 0

nech toto
C:\AdventNet\ScanFi\bin\wrapper.exe
zkontrolovat tady
http://scanner.virus.org/