PC-HELP.CZ

Přeji hezký den Všem na PC.HELPu.
Nakazil mě Pc Suspenzor. Potřeboval bych pomoct s odstraněním toho šmejda. Děkuju všem za pomoc.
log je zde:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:21, on 2008-02-25
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ClientRs\ClientRS.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\CA\eTrust Antivirus\InoTask.exe
C:\WINDOWS\system32\netdde.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ClientRs\WinVNC.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\CA\ETRUST~1\realmon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Documents and Settings\danes\Plocha\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.atlas.cz/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe"
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [MSDisp32] rundll32.exe C:\WINDOWS\system32\drvcab.dll,startup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: ClientRS - Micos s.r.o. - C:\Program Files\ClientRs\ClientRS.exe
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: WinFast(R) Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: VNC Server (winvnc) - Constantin Kaplinsky - C:\Program Files\ClientRs\WinVNC.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/danes/LOCALS~1/Temp/msohtml1/01/clip_image001.jpg

--
End of file - 4665 bytes







ComboFix 08-02-21 - danes 2008-02-25 7:23:00.18 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.1.1029.18.237 [GMT 1:00]
Running from: C:\Documents and Settings\danes\Plocha\ComboFix.exe

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2008-01-25 to 2008-02-25 )))))))))))))))))))))))))))))))
.

2008-02-22 13:43 . 2008-02-22 13:43 <DIR> d-------- C:\_OTMoveIt
2008-02-21 15:49 . 2007-04-23 12:50 <DIR> d-------- C:\Documents and Settings\danes.USMD2\Šablony
2008-02-21 11:44 . 2008-02-21 11:44 <DIR> d-------- C:\Program Files\ESET
2008-02-21 11:44 . 2008-02-21 11:44 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\ESET
2008-02-21 11:00 . 2008-02-21 11:00 138,752 --a------ C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2008-02-21 10:59 . 2008-02-25 07:13 <DIR> d-------- C:\Program Files\Spyware Terminator
2008-02-21 10:59 . 2008-02-22 09:35 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2008-02-20 17:03 . 2008-02-21 17:11 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2008-02-20 17:03 . 2008-02-21 17:11 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2008-02-20 15:34 . 2008-02-20 15:34 18,944 --a------ C:\WINDOWS\system32\drvcab.dll
2008-02-18 07:21 . 2008-02-18 07:21 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2008-02-18 07:20 . 2008-02-18 07:20 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2008-02-18 07:20 . 2008-02-22 10:33 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2008-02-11 13:06 . 2004-10-07 13:39 1,060,864 --a------ C:\WINDOWS\system32\mfc71.dll
2008-02-11 13:06 . 2004-10-07 13:39 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll
2008-02-11 13:06 . 2004-10-07 13:39 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll
2008-02-11 13:06 . 2004-10-07 13:39 89,088 --a------ C:\WINDOWS\system32\atl71.dll
2008-02-11 13:06 . 2001-03-08 18:30 24,064 --a------ C:\WINDOWS\system32\msxml3a.dll
2008-02-11 07:34 . 2008-02-14 07:46 69 --a------ C:\WINDOWS\NeroDigital.ini
2008-02-08 14:22 . 2008-02-14 10:00 <DIR> d-------- C:\Documents and Settings\danes\Data aplikací\Ahead
2008-02-08 14:20 . 2008-02-08 14:20 <DIR> d-------- C:\Program Files\Nero
2008-02-08 14:20 . 2008-02-14 10:23 <DIR> d-------- C:\Program Files\Common Files\Ahead
2008-02-05 08:01 . 2008-02-11 13:30 <DIR> d-------- C:\Program Files\Lavasoft
2008-02-05 08:01 . 2008-02-05 08:01 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Lavasoft
2008-02-05 07:53 . 2008-02-22 07:29 <DIR> d-------- C:\Program Files\Yahoo!
2008-02-05 07:53 . 2008-02-05 07:53 <DIR> d-------- C:\Program Files\CCleaner
2008-02-04 12:35 . 2008-02-04 12:35 <DIR> d-------- C:\Programme
2008-02-04 08:45 . 2008-02-04 08:45 <DIR> d--h----- C:\Program Files\Zero G Registry

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-25 06:11 --------- d-----w C:\Program Files\ClientRs
2008-02-22 06:30 --------- d-----w C:\Program Files\Google
2008-02-20 15:18 --------- d-----w C:\Program Files\Adware & Spyware Firewall
2008-02-11 12:30 --------- d-----w C:\Documents and Settings\danes\Data aplikací\Lavasoft
2008-02-11 06:39 --------- d-----w C:\Program Files\Common Files\Adobe
2008-01-15 07:27 16 ------w C:\Documents and Settings\danes\pDOP33.dll
2007-12-07 14:38 3,080,192 ----a-w C:\WINDOWS\system32\SET1D.tmp
2007-12-07 01:08 660,480 ----a-w C:\WINDOWS\system32\SET15.tmp
2007-12-07 01:08 615,936 ----a-w C:\WINDOWS\system32\SET16.tmp
2007-12-07 01:08 474,112 ----a-w C:\WINDOWS\system32\SET17.tmp
2007-12-07 01:08 449,024 ----a-w C:\WINDOWS\system32\SET1C.tmp
2007-12-07 01:08 1,495,040 ----a-w C:\WINDOWS\system32\SET18.tmp
2007-12-07 01:08 1,023,488 ----a-w C:\WINDOWS\system32\SET25.tmp
2007-12-06 23:40 357,888 ------w C:\WINDOWS\system32\SET27.tmp
2007-05-11 05:45 7,050,552 ------w C:\Program Files\psa30se_en_us.exe
2007-05-11 05:45 21,822,168 ------w C:\Program Files\AdbeRdr80_en_US.exe
2007-05-11 05:44 811,560 ------w C:\Program Files\GoogleToolbarInstaller_ADBx_en_401019_signed.exe
2007-05-11 05:42 8,981,440 ------w C:\Program Files\acrobat.exe
2007-04-30 11:55 758,354 ------w C:\Program Files\SpyFirewall.exe
2007-04-30 07:05 372,204 ------w C:\Program Files\dcsetup.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24 1694208]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-06-01 13:32 94208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Realtime Monitor"="C:\PROGRA~1\CA\ETRUST~1\realmon.exe" [2004-04-06 16:14 504080]
"nwiz"="nwiz.exe" [2006-08-11 20:43 1519616 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-08-11 20:43 86016]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-08-11 20:43 7630848]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40 155648]
"MSDisp32"="C:\WINDOWS\system32\drvcab.dll" [2008-02-20 15:34 18944]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [2005-06-06 22:46 57344]
"SpywareTerminator"="C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe" [2008-02-21 10:59 2834432]

R1 sp_rsdrv2;Spyware Terminator Driver 2;C:\WINDOWS\system32\drivers\sp_rsdrv2.sys [2008-02-21 11:00]
R2 ClientRS;ClientRS;C:\Program Files\ClientRs\ClientRS.exe [2007-06-27 08:29]
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\system32\DRIVERS\psched.sys [2006-03-02 13:00]

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-25 07:25:01
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-02-25 7:25:24
ComboFix-quarantined-files.txt 2008-02-25 06:25:22
ComboFix2.txt 2008-02-22 13:13:52
ComboFix3.txt 2008-02-22 12:55:40
ComboFix4.txt 2008-02-22 11:51:46
ComboFix5.txt 2008-02-22 11:24:28
.
2008-02-18 06:18:16 --- E O F ---

Pekny den aj Tebe :)

spusti poznamkovy blok - skopiruj donho:

uloz pod nazvom CFScript tak, aby mal koncovku txt a podla spodneho obrazku ho presun nad combofix - spusti sa combofix, log z neho vloz sem

Moc děkuji již je to asi v pořádku zasílám ještě log:

ComboFix 08-02-21 - danes 2008-02-25 10:45:45.20 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.1.1029.18.178 [GMT 1:00]
Running from: C:\Documents and Settings\danes\Plocha\ComboFix.exe

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2008-01-25 to 2008-02-25 )))))))))))))))))))))))))))))))
.

2008-02-22 13:43 . 2008-02-22 13:43 <DIR> d-------- C:\_OTMoveIt
2008-02-21 15:49 . 2007-04-23 12:50 <DIR> d-------- C:\Documents and Settings\danes.USMD2\Šablony
2008-02-21 11:44 . 2008-02-21 11:44 <DIR> d-------- C:\Program Files\ESET
2008-02-21 11:44 . 2008-02-21 11:44 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\ESET
2008-02-21 11:00 . 2008-02-21 11:00 138,752 --a------ C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2008-02-21 10:59 . 2008-02-25 07:13 <DIR> d-------- C:\Program Files\Spyware Terminator
2008-02-21 10:59 . 2008-02-22 09:35 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2008-02-20 17:03 . 2008-02-21 17:11 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2008-02-20 17:03 . 2008-02-21 17:11 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2008-02-18 07:21 . 2008-02-18 07:21 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2008-02-18 07:20 . 2008-02-18 07:20 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2008-02-18 07:20 . 2008-02-22 10:33 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2008-02-11 13:06 . 2004-10-07 13:39 1,060,864 --a------ C:\WINDOWS\system32\mfc71.dll
2008-02-11 13:06 . 2004-10-07 13:39 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll
2008-02-11 13:06 . 2004-10-07 13:39 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll
2008-02-11 13:06 . 2004-10-07 13:39 89,088 --a------ C:\WINDOWS\system32\atl71.dll
2008-02-11 13:06 . 2001-03-08 18:30 24,064 --a------ C:\WINDOWS\system32\msxml3a.dll
2008-02-11 07:34 . 2008-02-25 07:58 69 --a------ C:\WINDOWS\NeroDigital.ini
2008-02-08 14:22 . 2008-02-14 10:00 <DIR> d-------- C:\Documents and Settings\danes\Data aplikací\Ahead
2008-02-08 14:20 . 2008-02-08 14:20 <DIR> d-------- C:\Program Files\Nero
2008-02-08 14:20 . 2008-02-14 10:23 <DIR> d-------- C:\Program Files\Common Files\Ahead
2008-02-05 08:01 . 2008-02-11 13:30 <DIR> d-------- C:\Program Files\Lavasoft
2008-02-05 08:01 . 2008-02-05 08:01 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Lavasoft
2008-02-05 07:53 . 2008-02-22 07:29 <DIR> d-------- C:\Program Files\Yahoo!
2008-02-05 07:53 . 2008-02-05 07:53 <DIR> d-------- C:\Program Files\CCleaner
2008-02-04 12:35 . 2008-02-04 12:35 <DIR> d-------- C:\Programme
2008-02-04 08:45 . 2008-02-04 08:45 <DIR> d--h----- C:\Program Files\Zero G Registry

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-25 06:11 --------- d-----w C:\Program Files\ClientRs
2008-02-22 06:30 --------- d-----w C:\Program Files\Google
2008-02-20 15:18 --------- d-----w C:\Program Files\Adware & Spyware Firewall
2008-02-11 12:30 --------- d-----w C:\Documents and Settings\danes\Data aplikací\Lavasoft
2008-02-11 06:39 --------- d-----w C:\Program Files\Common Files\Adobe
2008-01-15 07:27 16 ------w C:\Documents and Settings\danes\pDOP33.dll
2007-12-07 14:38 3,080,192 ----a-w C:\WINDOWS\system32\SET1D.tmp
2007-12-07 01:08 660,480 ----a-w C:\WINDOWS\system32\SET15.tmp
2007-12-07 01:08 615,936 ----a-w C:\WINDOWS\system32\SET16.tmp
2007-12-07 01:08 474,112 ----a-w C:\WINDOWS\system32\SET17.tmp
2007-12-07 01:08 449,024 ----a-w C:\WINDOWS\system32\SET1C.tmp
2007-12-07 01:08 1,495,040 ----a-w C:\WINDOWS\system32\SET18.tmp
2007-12-07 01:08 1,023,488 ----a-w C:\WINDOWS\system32\SET25.tmp
2007-12-06 23:40 357,888 ------w C:\WINDOWS\system32\SET27.tmp
2007-05-11 05:45 7,050,552 ------w C:\Program Files\psa30se_en_us.exe
2007-05-11 05:45 21,822,168 ------w C:\Program Files\AdbeRdr80_en_US.exe
2007-05-11 05:44 811,560 ------w C:\Program Files\GoogleToolbarInstaller_ADBx_en_401019_signed.exe
2007-05-11 05:42 8,981,440 ------w C:\Program Files\acrobat.exe
2007-04-30 11:55 758,354 ------w C:\Program Files\SpyFirewall.exe
2007-04-30 07:05 372,204 ------w C:\Program Files\dcsetup.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24 1694208]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-06-01 13:32 94208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Realtime Monitor"="C:\PROGRA~1\CA\ETRUST~1\realmon.exe" [2004-04-06 16:14 504080]
"nwiz"="nwiz.exe" [2006-08-11 20:43 1519616 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-08-11 20:43 86016]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-08-11 20:43 7630848]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40 155648]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [2005-06-06 22:46 57344]
"SpywareTerminator"="C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe" [2008-02-21 10:59 2834432]

R1 sp_rsdrv2;Spyware Terminator Driver 2;C:\WINDOWS\system32\drivers\sp_rsdrv2.sys [2008-02-21 11:00]
R2 ClientRS;ClientRS;C:\Program Files\ClientRs\ClientRS.exe [2007-06-27 08:29]
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\system32\DRIVERS\psched.sys [2006-03-02 13:00]

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-25 10:47:46
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-02-25 10:48:10
ComboFix-quarantined-files.txt 2008-02-25 09:48:08
ComboFix2.txt 2008-02-25 09:28:52
ComboFix3.txt 2008-02-25 06:25:25
ComboFix4.txt 2008-02-22 13:13:52
ComboFix5.txt 2008-02-22 12:55:40
.
2008-02-18 06:18:16 --- E O F ---

to je stary log (ten isty ako hore), potrebujem novy...

pardon nějak se mi to pomíchalo


ComboFix 08-02-21 - danes 2008-02-25 12:48:56.21 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.1.1029.18.278 [GMT 1:00]
Running from: C:\Documents and Settings\danes\Plocha\ComboFix.exe

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2008-01-25 to 2008-02-25 )))))))))))))))))))))))))))))))
.

2008-02-22 13:43 . 2008-02-22 13:43 <DIR> d-------- C:\_OTMoveIt
2008-02-21 15:49 . 2007-04-23 12:50 <DIR> d-------- C:\Documents and Settings\danes.USMD2\Šablony
2008-02-21 11:44 . 2008-02-21 11:44 <DIR> d-------- C:\Program Files\ESET
2008-02-21 11:44 . 2008-02-21 11:44 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\ESET
2008-02-21 11:00 . 2008-02-21 11:00 138,752 --a------ C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2008-02-21 10:59 . 2008-02-25 07:13 <DIR> d-------- C:\Program Files\Spyware Terminator
2008-02-21 10:59 . 2008-02-22 09:35 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2008-02-20 17:03 . 2008-02-21 17:11 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2008-02-20 17:03 . 2008-02-21 17:11 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2008-02-18 07:21 . 2008-02-18 07:21 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2008-02-18 07:20 . 2008-02-18 07:20 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2008-02-18 07:20 . 2008-02-22 10:33 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2008-02-11 13:06 . 2004-10-07 13:39 1,060,864 --a------ C:\WINDOWS\system32\mfc71.dll
2008-02-11 13:06 . 2004-10-07 13:39 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll
2008-02-11 13:06 . 2004-10-07 13:39 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll
2008-02-11 13:06 . 2004-10-07 13:39 89,088 --a------ C:\WINDOWS\system32\atl71.dll
2008-02-11 13:06 . 2001-03-08 18:30 24,064 --a------ C:\WINDOWS\system32\msxml3a.dll
2008-02-11 07:34 . 2008-02-25 07:58 69 --a------ C:\WINDOWS\NeroDigital.ini
2008-02-08 14:22 . 2008-02-14 10:00 <DIR> d-------- C:\Documents and Settings\danes\Data aplikací\Ahead
2008-02-08 14:20 . 2008-02-08 14:20 <DIR> d-------- C:\Program Files\Nero
2008-02-08 14:20 . 2008-02-14 10:23 <DIR> d-------- C:\Program Files\Common Files\Ahead
2008-02-05 08:01 . 2008-02-11 13:30 <DIR> d-------- C:\Program Files\Lavasoft
2008-02-05 08:01 . 2008-02-05 08:01 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Lavasoft
2008-02-05 07:53 . 2008-02-22 07:29 <DIR> d-------- C:\Program Files\Yahoo!
2008-02-05 07:53 . 2008-02-05 07:53 <DIR> d-------- C:\Program Files\CCleaner
2008-02-04 12:35 . 2008-02-04 12:35 <DIR> d-------- C:\Programme
2008-02-04 08:45 . 2008-02-04 08:45 <DIR> d--h----- C:\Program Files\Zero G Registry

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-25 06:11 --------- d-----w C:\Program Files\ClientRs
2008-02-22 06:30 --------- d-----w C:\Program Files\Google
2008-02-20 15:18 --------- d-----w C:\Program Files\Adware & Spyware Firewall
2008-02-11 12:30 --------- d-----w C:\Documents and Settings\danes\Data aplikací\Lavasoft
2008-02-11 06:39 --------- d-----w C:\Program Files\Common Files\Adobe
2008-01-15 07:27 16 ------w C:\Documents and Settings\danes\pDOP33.dll
2007-12-07 14:38 3,080,192 ----a-w C:\WINDOWS\system32\SET1D.tmp
2007-12-07 01:08 660,480 ----a-w C:\WINDOWS\system32\SET15.tmp
2007-12-07 01:08 615,936 ----a-w C:\WINDOWS\system32\SET16.tmp
2007-12-07 01:08 474,112 ----a-w C:\WINDOWS\system32\SET17.tmp
2007-12-07 01:08 449,024 ----a-w C:\WINDOWS\system32\SET1C.tmp
2007-12-07 01:08 1,495,040 ----a-w C:\WINDOWS\system32\SET18.tmp
2007-12-07 01:08 1,023,488 ----a-w C:\WINDOWS\system32\SET25.tmp
2007-12-06 23:40 357,888 ------w C:\WINDOWS\system32\SET27.tmp
2007-05-11 05:45 7,050,552 ------w C:\Program Files\psa30se_en_us.exe
2007-05-11 05:45 21,822,168 ------w C:\Program Files\AdbeRdr80_en_US.exe
2007-05-11 05:44 811,560 ------w C:\Program Files\GoogleToolbarInstaller_ADBx_en_401019_signed.exe
2007-05-11 05:42 8,981,440 ------w C:\Program Files\acrobat.exe
2007-04-30 11:55 758,354 ------w C:\Program Files\SpyFirewall.exe
2007-04-30 07:05 372,204 ------w C:\Program Files\dcsetup.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24 1694208]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-06-01 13:32 94208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Realtime Monitor"="C:\PROGRA~1\CA\ETRUST~1\realmon.exe" [2004-04-06 16:14 504080]
"nwiz"="nwiz.exe" [2006-08-11 20:43 1519616 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-08-11 20:43 86016]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-08-11 20:43 7630848]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40 155648]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [2005-06-06 22:46 57344]
"SpywareTerminator"="C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe" [2008-02-21 10:59 2834432]

R1 sp_rsdrv2;Spyware Terminator Driver 2;C:\WINDOWS\system32\drivers\sp_rsdrv2.sys [2008-02-21 11:00]
R2 ClientRS;ClientRS;C:\Program Files\ClientRs\ClientRS.exe [2007-06-27 08:29]
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\system32\DRIVERS\psched.sys [2006-03-02 13:00]

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-25 12:51:02
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-02-25 12:51:26
ComboFix-quarantined-files.txt 2008-02-25 11:51:24
ComboFix2.txt 2008-02-25 09:48:11
ComboFix3.txt 2008-02-25 09:28:52
ComboFix4.txt 2008-02-25 06:25:25
ComboFix5.txt 2008-02-22 13:13:52
.
2008-02-18 06:18:16 --- E O F ---

log vyzera ok, problem pretrvava?

Moc děkuji již je to asi v pořádku

neni zac