poprosím tě o zkontrolování logu z HJT a Mbam a CF, protože už nějakou dobu nefungují na booku mojí přítulky aktualizace antiviru. Hlásí to, že má aktuální (3890) a přitom nejnovější je 4026
Javu a IE 7 dodělám po kontrole 
ComboFix 09-04-22.02 - Terezky 22.04.2009 1:23.2 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.503.196 [GMT 2:00]
Spuštěný z: c:\documents and settings\HP\Plocha\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated)
FW: ZoneAlarm Firewall *enabled*
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
((((((((((((((((((((((((( Soubory vytvořené od 2009-03-22 do 2009-04-22 )))))))))))))))))))))))))))))))
.
2009-04-21 22:17 . 2009-04-21 22:17 -------- d-----w c:\documents and settings\All Users\Data aplikací\ESET
2009-04-16 06:22 . 2009-02-06 10:10 227840 ------w c:\windows\system32\dllcache\wmiprvse.exe
2009-04-16 06:22 . 2009-02-09 11:25 111104 ------w c:\windows\system32\dllcache\services.exe
2009-04-16 06:22 . 2009-02-09 10:56 401408 ------w c:\windows\system32\dllcache\rpcss.dll
2009-04-16 06:22 . 2009-02-09 10:56 684032 ------w c:\windows\system32\dllcache\advapi32.dll
2009-04-16 06:22 . 2009-02-09 10:56 473600 ------w c:\windows\system32\dllcache\fastprox.dll
2009-04-16 06:22 . 2009-02-09 10:56 728064 ------w c:\windows\system32\dllcache\lsasrv.dll
2009-04-16 06:22 . 2009-02-09 10:56 709632 ------w c:\windows\system32\dllcache\ntdll.dll
2009-04-16 06:22 . 2009-02-09 10:56 453120 ------w c:\windows\system32\dllcache\wmiprvsd.dll
2009-03-30 17:25 . 2009-03-30 17:25 0 ----a-w C:\23990098.$$$
2009-03-30 17:19 . 2009-03-30 17:21 7402831 ----a-w c:\windows\REGBK00.ZIP
2009-03-30 17:15 . 2009-03-30 17:15 -------- d---a-w c:\windows\system32\runouce.exe
2009-03-30 17:13 . 2009-03-30 17:15 54 ----a-w c:\windows\Lic.xxx
2009-03-30 17:12 . 2009-03-30 17:12 548864 ----a-w c:\windows\system32\msvcp80.dll
2009-03-30 17:12 . 2009-03-30 17:12 28672 ----a-w c:\windows\system32\eEmpty.exe
2009-03-30 17:12 . 2005-09-22 21:22 522 ----a-w c:\windows\system32\Microsoft.VC80.CRT.manifest
2009-03-30 17:12 . 2008-04-14 03:22 137216 ----a-w c:\windows\system32\T.COM
2009-03-30 17:12 . 2008-04-14 03:22 147968 ----a-w c:\windows\R.COM
2009-03-30 17:11 . 2009-03-30 17:11 -------- d-----w c:\documents and settings\All Users\Data aplikací\MicroWorld
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-21 23:06 . 2001-10-25 13:00 76534 ----a-w c:\windows\system32\perfc005.dat
2009-04-21 23:06 . 2001-10-25 13:00 406866 ----a-w c:\windows\system32\perfh005.dat
2009-04-21 22:59 . 2007-10-05 20:27 -------- d-----w c:\program files\Eset
2009-04-21 22:08 . 2007-10-05 20:31 -------- d-----w c:\program files\Smarty Uninstaller Pro
2009-04-20 22:08 . 2008-09-28 13:33 -------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-04-08 17:20 . 2007-10-20 17:56 -------- d-----w c:\documents and settings\HP\Data aplikací\Skype
2009-04-08 16:38 . 2009-01-06 13:47 -------- d-----w c:\documents and settings\HP\Data aplikací\skypePM
2009-04-06 13:32 . 2008-09-28 13:33 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-04-06 13:32 . 2008-09-28 13:33 15504 ----a-w c:\windows\system32\drivers\mbam.sys
2009-04-03 15:40 . 2009-01-21 17:09 -------- d-----w c:\documents and settings\HP\Data aplikací\AIMP
2009-03-29 13:01 . 2007-10-05 21:27 -------- d---a-w c:\documents and settings\All Users\Data aplikací\TEMP
2009-03-27 22:15 . 2008-09-15 16:38 -------- d-----w c:\documents and settings\All Users\Data aplikací\AVerTV
2009-03-23 21:20 . 2007-11-06 18:01 -------- d-----w c:\documents and settings\HP\Data aplikací\uTorrent
2009-03-23 18:38 . 2009-03-07 09:56 -------- d-----w c:\program files\Unlocker
2009-03-21 14:09 . 2009-03-21 14:09 988160 ------w c:\windows\system32\dllcache\kernel32.dll
2009-03-10 21:18 . 2007-04-10 13:01 969608 ------w c:\windows\system32\dllcache\WgaTray.exe
2009-03-10 21:18 . 2007-04-10 13:04 265096 ------w c:\windows\system32\dllcache\wgaLogon.dll
2009-03-10 11:57 . 2008-08-27 16:09 -------- d-----w c:\program files\QIP
2009-03-08 01:26 . 2009-03-07 22:28 -------- d-----w c:\program files\WYSIWYG Web Builder 5
2009-03-06 14:23 . 2004-08-17 12:49 284160 ----a-w c:\windows\system32\pdh.dll
2009-03-06 14:23 . 2004-08-17 12:49 284160 ----a-w c:\windows\system32\dllcache\pdh.dll
2009-03-02 23:11 . 2008-06-26 08:14 1499648 ------w c:\windows\system32\dllcache\shdocvw.dll
2009-03-01 21:59 . 2009-03-02 06:38 2690560 ----a-w c:\windows\Internet Logs\xDB1.tmp
2009-02-20 08:12 . 2008-04-21 06:45 3089408 ------w c:\windows\system32\dllcache\mshtml.dll
2009-02-20 08:12 . 2008-06-26 08:14 619008 ------w c:\windows\system32\dllcache\urlmon.dll
2009-02-20 08:12 . 2008-04-21 06:45 667136 ------w c:\windows\system32\dllcache\wininet.dll
2009-02-20 08:12 . 2006-11-10 12:14 667136 ----a-w c:\windows\system32\wininet.dll
2009-02-20 08:12 . 2004-08-17 12:49 81920 ----a-w c:\windows\system32\ieencode.dll
2009-02-20 08:12 . 2004-08-17 12:49 81920 ----a-w c:\windows\system32\dllcache\ieencode.dll
2009-02-18 13:44 . 2007-11-23 21:49 4212 -c-ha-w c:\windows\system32\zllictbl.dat
2009-02-10 17:09 . 2004-08-17 15:45 2068224 ----a-w c:\windows\system32\ntkrnlpa.exe
2009-02-10 17:09 . 2004-08-17 15:45 2068224 ----a-w c:\windows\system32\dllcache\ntkrnlpa.exe
2009-02-09 14:07 . 2008-10-15 17:31 1846784 ------w c:\windows\system32\dllcache\win32k.sys
2009-02-09 14:07 . 2004-08-17 12:44 1846784 ----a-w c:\windows\system32\win32k.sys
2009-02-09 11:26 . 2004-08-17 12:45 2191232 ----a-w c:\windows\system32\ntoskrnl.exe
2009-02-09 11:26 . 2004-08-17 12:45 2191232 ----a-w c:\windows\system32\dllcache\ntoskrnl.exe
2009-02-09 11:26 . 2008-10-15 17:31 2025984 ------w c:\windows\system32\dllcache\ntkrpamp.exe
2009-02-09 11:26 . 2008-10-15 17:31 2147328 ------w c:\windows\system32\dllcache\ntkrnlmp.exe
2009-02-09 11:25 . 2004-08-17 12:49 111104 ----a-w c:\windows\system32\services.exe
2009-02-09 10:56 . 2004-08-17 12:49 401408 ----a-w c:\windows\system32\rpcss.dll
2009-02-09 10:56 . 2004-08-17 12:49 728064 ----a-w c:\windows\system32\lsasrv.dll
2009-02-09 10:56 . 2004-08-17 12:49 684032 ----a-w c:\windows\system32\advapi32.dll
2009-02-09 10:56 . 2004-08-17 12:48 709632 ----a-w c:\windows\system32\ntdll.dll
2009-02-06 10:39 . 2001-10-25 13:00 35328 ----a-w c:\windows\system32\sc.exe
2009-02-06 10:39 . 2001-10-25 13:00 35328 ----a-w c:\windows\system32\dllcache\sc.exe
2009-02-03 19:58 . 2009-02-03 19:58 56832 ------w c:\windows\system32\dllcache\secur32.dll
2009-02-03 19:58 . 2004-08-17 12:49 56832 ----a-w c:\windows\system32\secur32.dll
2008-12-15 19:21 . 2007-10-06 09:25 73088 -c--a-w c:\documents and settings\HP\Local Settings\Data aplikací\GDIPFONTCACHEV1.DAT
2008-09-27 11:57 . 2008-10-27 15:30 262144 -c--a-w c:\program files\Uninstall Spy Blocker.dll
2007-10-16 16:43 . 2007-10-16 16:43 122 -c--a-w c:\documents and settings\HP\Local Settings\Data aplikací\fusioncache.dat
.
((((((((((((((((((((((((((((( SnapShot@2009-04-21_22.44.01 )))))))))))))))))))))))))))))))))))))))))
.
- 2001-10-25 13:00 . 2009-04-21 22:32 64648 c:\windows\system32\perfc009.dat
+ 2001-10-25 13:00 . 2009-04-21 23:06 64648 c:\windows\system32\perfc009.dat
+ 2001-10-25 13:00 . 2009-04-21 23:06 409126 c:\windows\system32\perfh009.dat
- 2001-10-25 13:00 . 2009-04-21 22:32 409126 c:\windows\system32\perfh009.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"OEXPRESS"="c:\windows\OETRN.EXE" [2007-10-05 26624]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-02-06 2021400]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_3"="advpack.dll" - c:\windows\system32\advpack.dll [2008-04-14 100352]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
AVer HID Receiver.lnk - c:\program files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe [2008-9-15 155648]
AVerQuick.lnk - c:\program files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe [2008-9-15 561152]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2006-2-27 581693]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMConfigurePrograms"= 1 (0x1)
"NoResolveTrack"= 1 (0x1)
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMConfigurePrograms"= 1 (0x1)
"NoResolveTrack"= 1 (0x1)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"NeroFilterCheck"=c:\program files\Common Files\Ahead\Lib\NeroCheck.exe
"RemoteControl"="c:\program files\ASUSTek\ASUSDVD\PDVDServ.exe"
"SoundMAX"=c:\program files\Analog Devices\SoundMAX\Smax4.exe /tray
"igfxpers"=c:\windows\system32\igfxpers.exe
"igfxtray"=c:\windows\system32\igfxtray.exe
"AGRSMMSG"=AGRSMMSG.exe
"SDTray"="c:\program files\Spyware Doctor\SDTrayApp.exe"
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" -osboot
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe"
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe"
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_05\bin\jusched.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
R3 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\svcntaux.exe [2008-03-14 311112]
R3 sffp_mmc;Ovladač protokolu úložiště SFF pro karty MMC;c:\windows\system32\DRIVERS\sffp_mmc.sys [2008-04-13 10240]
R4 AdobeActiveFileMonitor6.0;Adobe Active File Monitor V6;c:\program files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [2007-09-10 124832]
S0 d346bus;d346bus;c:\windows\system32\DRIVERS\d346bus.sys [2004-03-12 156800]
S0 d346prt;d346prt;c:\windows\System32\Drivers\d346prt.sys [2004-03-12 5248]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2009-02-06 106208]
S1 epfwtdir;epfwtdir;c:\windows\system32\DRIVERS\epfwtdir.sys [2009-02-06 93336]
S2 AVerRemote;AVerRemote;c:\program files\Common Files\AVerMedia\Service\AVerRemote.exe [2008-03-13 339968]
S2 AVerScheduleService;AVerScheduleService;c:\program files\Common Files\AVerMedia\Service\AVerScheduleService.exe [2008-03-05 380928]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-02-06 727720]
S3 AVerFx2hbtv;AVerMedia USB SW Hybrid Tuner;c:\windows\system32\drivers\AVerFx2hbtv.sys [2008-01-15 257024]
S3 GTIPCI21;GTIPCI21;c:\windows\system32\DRIVERS\gtipci21.sys [2005-05-31 87936]
S3 PSched;Plánovač paketů technologie QoS;c:\windows\system32\DRIVERS\psched.sys [2008-04-13 69120]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
IE: Send To &Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
LSP: c:\windows\system32\imon.dll
FF - ProfilePath - c:\documents and settings\HP\Data aplikací\Mozilla\Firefox\Profiles\z8647ygb.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-22 01:26
Windows 5.1.2600 Service Pack 3 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(792)
c:\windows\System32\BCMLogon.dll
- - - - - - - > 'lsass.exe'(852)
c:\windows\system32\imon.dll
- - - - - - - > 'explorer.exe'(2688)
c:\windows\TrnOEH.dll
.
Celkový čas: 2009-04-21 1:28
ComboFix-quarantined-files.txt 2009-04-21 23:27
ComboFix2.txt 2009-04-21 22:45
ComboFix3.txt 2008-01-08 18:04
Před spuštěním: Volných bajtů: 22 149 128 192
Po spuštění: Volných bajtů: 22 134 808 576
189 --- E O F --- 2009-04-16 19:57
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:34:33, on 22.4.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\OETRN.EXE
C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32Info.exe
C:\Documents and Settings\HP\Plocha\Prográmky-zástupci\HiJackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [OEXPRESS] C:\WINDOWS\OETRN.EXE
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - Global Startup: AVer HID Receiver.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
O4 - Global Startup: AVerQuick.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{C456A489-8870-4D0E-9FD5-8B7572AFC445}: NameServer = 217.112.162.34 217.112.160.1
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: AVerRemote - AVerMedia - C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe
--
End of file - 6843 bytes
Malwarebytes' Anti-Malware 1.36
Verze databáze: 2022
Windows 5.1.2600 Service Pack 3
22.4.2009 1:16:10
mbam-log-2009-04-22 (01-16-10).txt
Typ skenu: Rychlý sken
Objektu skenováno: 78043
Uplynulý cas: 4 minute(s), 41 second(s)
Infikované procesy pameti: 0
Infikované pametové moduly: 0
Infikované klíce registru: 0
Infikované hodnoty registru: 0
Infikované položky dat registru: 0
Infikované složky: 1
Infikované soubory: 0
Infikované procesy pameti:
(Žádné zákerné položky nebyly zjišteny)
Infikované pametové moduly:
(Žádné zákerné položky nebyly zjišteny)
Infikované klíce registru:
(Žádné zákerné položky nebyly zjišteny)
Infikované hodnoty registru:
(Žádné zákerné položky nebyly zjišteny)
Infikované položky dat registru:
(Žádné zákerné položky nebyly zjišteny)
Infikované složky:
C:\Program Files\ComPlus Applications (Rogue.MalwareCleaner) -> Quarantined and deleted successfully.
Infikované soubory:
(Žádné zákerné položky nebyly zjišteny)
Ještě pořeším tu Javu a IE. Díky moc za pomoc