Po viru

[nuder]

Ahojte prosim mám problém...měl jsem v pc virus alert ...ten jsem dal pryč ale zdá semi, že pc nejde tak jak má ..třeba když dám ctrl+alt+delete nejdou mi ukončit některé procesy a to mi vždy šly .....prosím o radu dík moc ...zde je log z hijackthis....
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:04, on 27.9.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\ferda\Dokumenty\antiviry\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60076
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60076
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 7324 bytes

[Reklama]

[jaro3]

Stáhni si ComboFix (by sUBs)
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

[nuder]

ComboFix 08-09-27.01 - ferda 2008-09-28 9:47:23.4 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1029.18.688 [GMT 2:00]
Spuštěný z: C:\Documents and Settings\ferda\Dokumenty\antiviry\ComboFix.exe
* Vytvořen nový Bod Obnovení

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((( Soubory vytvořené od 2008-08-28 do 2008-09-28 )))))))))))))))))))))))))))))))
.

2008-09-28 09:33 . 2008-09-28 09:33 <DIR> d-------- C:\WINDOWS\LastGood
2008-09-27 21:10 . 2008-09-27 21:10 <DIR> d-------- C:\Program Files\Codemasters
2008-09-27 21:09 . <DIR> C:\Documents and Settings\Táta\Data aplikací\InstallShield
2008-09-26 20:13 . <DIR> C:\Documents and Settings\Táta\Data aplikací\PC Suite
2008-09-26 20:13 . <DIR> C:\Documents and Settings\Táta\Data aplikací\Nokia
2008-09-26 14:44 . 2008-09-26 14:49 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
2008-09-26 14:44 . 22,328 C:\Documents and Settings\ferda\Data aplikací\PnkBstrK.sys
2008-09-26 14:34 . 2008-09-26 14:34 <DIR> d-------- C:\Program Files\Activision
2008-09-24 20:10 . <DIR> C:\Documents and Settings\Táta\Data aplikací\Adobe
2008-09-24 20:09 . <DIR> C:\Documents and Settings\Táta\Data aplikací\ICQ
2008-09-23 18:43 . <DIR> C:\Documents and Settings\ferda\Data aplikací\Lost Marble
2008-09-22 19:54 . <DIR> C:\Documents and Settings\ferda\Data aplikací\Malwarebytes
2008-09-22 19:34 . 2008-09-22 19:34 <DIR> d-------- C:\Program Files\Sun
2008-09-22 19:33 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-09-22 19:31 . 2008-09-22 19:33 <DIR> d-------- C:\Program Files\Java
2008-09-22 19:30 . 2008-09-22 19:30 <DIR> d-------- C:\Program Files\Common Files\Java
2008-09-22 19:30 . <DIR> C:\Documents and Settings\ferda\Data aplikací\Sun
2008-09-22 18:04 . 2008-09-22 18:04 <DIR> d-------- C:\Program Files\Alwil Software
2008-09-22 17:15 . <DIR> C:\Documents and Settings\ferda\Data aplikací\uTorrent
2008-09-21 20:49 . <DIR> C:\Documents and Settings\Táta\Data aplikací\Macromedia
2008-09-21 20:44 . <DIR> C:\Documents and Settings\Táta\Data aplikací\Mozilla
2008-09-21 20:44 . <DIR> C:\Documents and Settings\Táta\Data aplikací\ESET
2008-09-21 20:43 . <DIR> C:\Documents and Settings\Táta\ćablony
2008-09-21 20:43 . <DIR> C:\Documents and Settings\Táta\Plocha
2008-09-21 20:43 . <DIR> C:\Documents and Settings\Táta\Okolnˇ tisk rny
2008-09-21 20:43 . <DIR> C:\Documents and Settings\Táta\Okolnˇ sˇś
2008-09-21 20:43 . <DIR> C:\Documents and Settings\Táta\Oblˇben‚ polo§ky
2008-09-21 20:43 . <DIR> C:\Documents and Settings\Táta\Nabˇdka Start
2008-09-21 20:43 . <DIR> C:\Documents and Settings\Táta\Dokumenty
2008-09-21 20:43 . <DIR> C:\Documents and Settings\Táta\Data aplikací\Microsoft
2008-09-21 20:43 . <DIR> C:\Documents and Settings\Táta\Data aplikací\Identities
2008-09-21 20:43 . <DIR> C:\Documents and Settings\Táta\Data aplikacˇ
2008-09-21 20:43 . 2008-09-21 20:43 <DIR> d-------- C:\Documents and Settings\T ta
2008-09-21 13:09 . 2008-09-21 19:24 <DIR> d-------- C:\Program Files\SUPERAntiSpyware
2008-09-21 13:09 . <DIR> C:\Documents and Settings\ferda\Data aplikací\SUPERAntiSpyware.com
2008-09-21 13:08 . 2008-09-21 13:08 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-09-20 19:30 . <DIR> C:\Documents and Settings\ferda\Data aplikací\TmpRecentIcons
2008-09-20 18:28 . 2007-02-19 19:52 <DIR> d--h----- C:\Documents and Settings\Administrator\ćablony
2008-09-20 18:28 . 2008-09-21 18:10 <DIR> d-------- C:\Documents and Settings\Administrator\Plocha
2008-09-20 18:28 . 2007-02-19 20:43 <DIR> d--h----- C:\Documents and Settings\Administrator\Okolnˇ tisk rny
2008-09-20 18:28 . 2007-02-19 20:43 <DIR> d--h----- C:\Documents and Settings\Administrator\Okolnˇ sˇś
2008-09-20 18:28 . 2007-02-19 20:43 <DIR> d-------- C:\Documents and Settings\Administrator\Oblˇben‚ polo§ky
2008-09-20 18:28 . 2007-02-19 20:43 <DIR> dr------- C:\Documents and Settings\Administrator\Nabˇdka Start
2008-09-20 18:28 . 2007-02-19 20:43 <DIR> d-------- C:\Documents and Settings\Administrator\Dokumenty
2008-09-20 18:28 . <DIR> C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2008-09-20 18:28 . 2007-02-19 20:43 <DIR> dr-h----- C:\Documents and Settings\Administrator\Data aplikacˇ
2008-09-20 18:28 . 2008-09-20 18:28 <DIR> d-------- C:\Documents and Settings\Administrator
2008-09-20 16:38 . <DIR> C:\Documents and Settings\ferda\Data aplikací\Adobe
2008-09-20 16:37 . <DIR> C:\Documents and Settings\ferda\Data aplikací\ICQ
2008-09-20 16:00 . <DIR> C:\Documents and Settings\ferda\Data aplikací\ESET
2008-09-20 11:19 . <DIR> C:\Documents and Settings\ferda\Data aplikací\Lavasoft
2008-09-20 10:34 . <DIR> C:\Documents and Settings\ferda\Data aplikací\Macromedia
2008-09-20 10:33 . <DIR> C:\Documents and Settings\ferda\Data aplikací\Mozilla
2008-09-20 10:20 . <DIR> C:\Documents and Settings\ferda\Data aplikací\PC Suite
2008-09-20 10:14 . <DIR> C:\Documents and Settings\ferda\Data aplikací\Identities
2008-09-20 10:13 . 2007-02-19 19:52 <DIR> d--h----- C:\Documents and Settings\ferda\ćablony
2008-09-20 10:13 . 2008-09-27 14:14 <DIR> d-------- C:\Documents and Settings\ferda\Plocha
2008-09-20 10:13 . 2007-02-19 20:43 <DIR> d--h----- C:\Documents and Settings\ferda\Okolnˇ tisk rny
2008-09-20 10:13 . 2007-02-19 20:43 <DIR> d--h----- C:\Documents and Settings\ferda\Okolnˇ sˇś
2008-09-20 10:13 . 2008-09-27 08:51 <DIR> dr------- C:\Documents and Settings\ferda\Oblˇben‚ polo§ky
2008-09-20 10:13 . 2008-09-22 17:18 <DIR> dr------- C:\Documents and Settings\ferda\Nabˇdka Start
2008-09-20 10:13 . 2008-09-27 11:19 <DIR> dr------- C:\Documents and Settings\ferda\Dokumenty
2008-09-20 10:13 . <DIR> C:\Documents and Settings\ferda\Data aplikací\Microsoft
2008-09-20 10:13 . 2008-09-26 14:45 <DIR> dr-h----- C:\Documents and Settings\ferda\Data aplikacˇ
2008-09-20 10:13 . 2008-09-26 22:34 <DIR> d-------- C:\Documents and Settings\ferda
2008-09-20 08:12 . 2008-09-20 08:12 <DIR> d-------- C:\Program Files\CCleaner
2008-09-19 19:02 . 2008-03-03 14:25 5,702 --ah----- C:\WINDOWS\nod32restoretemdono.reg
2008-09-16 19:14 . 2008-09-16 19:14 <DIR> d-------- C:\Program Files\DesetiPrsty
2008-09-14 11:18 . 2008-09-14 11:18 <DIR> d-------- C:\WINDOWS\ERUNT
2008-09-13 14:52 . 2008-09-13 14:52 27 --a------ C:\WINDOWS\Lic.xxx
2008-09-13 14:51 . 2004-08-18 14:00 147,968 --a------ C:\WINDOWS\R.COM
2008-09-13 14:51 . 2004-08-18 14:00 137,216 --a------ C:\WINDOWS\system32\T.COM
2008-09-13 13:16 . 2008-09-13 18:13 14,483,488 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-09-13 13:16 . 2008-09-13 18:13 170,804 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2008-09-07 14:58 . 2008-09-07 19:08 <DIR> d-------- C:\Program Files\AutoCAD 2009
2008-09-07 14:51 . 2008-09-07 14:51 <DIR> d-------- C:\WINDOWS\system32\XPSViewer
2008-09-07 14:49 . 2006-06-29 13:07 14,048 --------- C:\WINDOWS\system32\spmsg2.dll
2008-09-06 14:50 . 2008-09-06 14:50 <DIR> d-------- C:\ProgramData
2008-09-06 14:42 . 2008-09-06 16:48 <DIR> d-------- C:\Program Files\Electronic Arts
2008-09-05 14:52 . 2008-09-05 14:52 356,352 --a------ C:\WINDOWS\eSellerateEngine.dll
2008-09-04 19:55 . 2008-09-07 15:03 <DIR> d-------- C:\Program Files\Common Files\Autodesk Shared
2008-09-03 17:26 . 2008-09-06 16:48 4,400 --a------ C:\WINDOWS\system32\ealregsnapshot1.reg

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-27 19:10 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-09-27 12:15 183,120 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2008-09-27 12:15 137,480 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-09-22 16:49 --------- d-----w C:\Program Files\ICQ6
2008-09-20 08:37 --------- d-s---w C:\Documents and Settings\NetworkService\Data aplikací\Microsoft
2008-09-20 08:37 --------- d-s---w C:\Documents and Settings\NetworkService\Data aplikací\Microsoft
2008-09-20 08:37 --------- d-s---w C:\Documents and Settings\NetworkService\Data aplikací\Microsoft
2008-09-20 08:37 --------- d-s---w C:\Documents and Settings\LocalService\Data aplikací\Microsoft
2008-09-18 16:56 278,984 ----a-w C:\WINDOWS\system32\drivers\atksgt.sys
2008-09-13 12:02 --------- d-----w C:\Program Files\ICQToolbar
2008-09-12 18:28 --------- d-----w C:\Program Files\Common Files\SureThing Shared
2008-08-28 12:17 --------- d-----w C:\Program Files\EA GAMES
2008-08-27 09:21 --------- d-----w C:\Program Files\Rockstar Games
2008-08-22 14:11 0 ---ha-w C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2008-08-22 14:11 0 ---ha-w C:\WINDOWS\system32\drivers\Msft_Kernel_ccdcmb_01005.Wdf
2008-08-22 14:08 --------- d-----w C:\Program Files\PC Connectivity Solution
2008-08-22 14:08 --------- d-----w C:\Program Files\Nokia
2008-08-22 14:08 --------- d-----w C:\Program Files\Common Files\PCSuite
2008-08-22 14:08 --------- d-----w C:\Program Files\Common Files\Nokia
2008-08-22 13:39 --------- d-----w C:\Program Files\DIFX
2008-08-03 16:50 --------- d-----w C:\Program Files\Bonjour
2008-07-19 06:56 10,520 ----a-w C:\WINDOWS\system32\avgrsstx(2).dll
2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll
2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe
2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll
2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll
2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll
2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll
2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll
2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll
2008-07-18 20:07 270,880 ----a-w C:\WINDOWS\system32\mucltui.dll
2008-07-18 20:07 210,976 ----a-w C:\WINDOWS\system32\muweb.dll
2008-07-07 20:32 253,952 ----a-w C:\WINDOWS\system32\es.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-18 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 8523776]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-09 153136]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-12-05 81920]
"AppleSyncNotifier"="C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-07-22 116040]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 78008]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"nwiz"="nwiz.exe" [2007-12-05 C:\WINDOWS\system32\nwiz.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-18 15360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoBandCustomize"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "C:\Program Files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\BitLord\\BitLord.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"C:\\Program Files\\Common Files\\Ahead\\Nero Web\\SetupX.exe"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\WINDOWS\\system32\\dpnsvr.exe"=
"C:\\Program Files\\ICQ6\\ICQ.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
"C:\\WINDOWS\\system32\\PnkBstrA.exe"=
"C:\\WINDOWS\\system32\\PnkBstrB.exe"=
"C:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"22204:TCP"= 22204:TCP:BitComet 22204 TCP
"22204:UDP"= 22204:UDP:BitComet 22204 UDP

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 78416]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\system32\DRIVERS\psched.sys [2004-08-18 69120]
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
O8 -: E&xportovat do aplikace Microsoft Office Excel - C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-28 09:49:57
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
Celkový čas: 2008-09-28 9:51:40
ComboFix-quarantined-files.txt 2008-09-28 07:51:35

Před spuštěním: Volněch bajt…: 19˙216˙809˙984
Po spuštění: Volněch bajt…: 19,231,125,504

205 --- E O F --- 2008-09-10 09:10:59

[jaro3]

LOg z CF je čistý , odstraňoval jsi virus alert pomocí Avastu a Malwarebytes-Antimalware? Koukni do správce úloh zda tam něco pracuje , co nemá. Jinak vyčistit CCleanerem, popř. defragmentuj.napiš jak to vypadá.
Odinstaloval bych komplet Crawler.

[nuder]

Ahoj dík za proskoumání těch logů...jo odstranoval sem to pomocí avastu a superantispyware i toho Malwarebytes-Antimalware....v těch správce úloh běží vše co má a kdyžtak jen náký dodatky, a právě ty některý nejdou ukončit...třeba pro ipod apple mobile device ...dokonce když dám do mechaniky náký cd tak mi to nepřečte automaticky ...musim to spustit ručně ...jinak ten pc docela jede v poho ...a co znamená ten crawler .....jinak tim ccleaner a tu defregmentaci udělám neboj...jinak moc dík ....

[jaro3]

Crawler Toolbar vyhledávač-máš ho v prohlížečích. V minulosti s ním byly problémy nalézali tam paraziti, jestli ho nepoužíváš, tak ho odinstaluj.Dle mě zbytečnej balast.