prosim o kontrolu logu

[Iwet]

Logfile of HijackThis v1.99.1
Scan saved at 18:32, on 2007-11-19
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\MSI\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\slmdmsr.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\ICQ6\ICQ.exe
C:\WINDOWS\system32\dwwin.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Vítězslav - Fischer\Plocha\instalační programy\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.bearshare.com/sidebar.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wm ... Ojg5&lid=2
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
R3 - URLSearchHook: (no name) - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} - (no file)
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: MSVPS System - {6A78E352-B1FA-4C18-9C48-96DD03979770} - C:\WINDOWS\popnetmtq.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: ActivationManager module - {86A44EF7-78FC-4e18-A564-B18F806F7F56} - C:\Program Files\ActivationManager\ActivationManager.dll
O2 - BHO: XBTP01621 - {F6104497-54FD-4688-9162-5115CC8AB0FB} - C:\PROGRA~1\BEARSH~1\BEARSH~2\MediaBar.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare applications\BearShare MediaBar\MediaBar.dll
O3 - Toolbar: The jokwmp - {6BA27973-068D-4F85-BE84-1251E0B20FD3} - C:\WINDOWS\jokwmp.dll (file missing)
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe -onlytray
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [FreeCall] "C:\program files\freecall.com\freecall\freecall.exe" -nosplash -minimized
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\MSI\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O16 - DPF: {50E43D86-A74D-11D0-98CE-004005249458} (AnimatedGif Control) - https://www.mojebanka.cz/jars/confwiz/MVSGif.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0FCD3CE3-A492-4922-83F4-68E53B911A10}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{1038C02A-56E6-4B99-AEC5-894720643805}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{2671F829-6C2B-4352-AB62-6C6F136F024C}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{33D94E3C-54E0-4207-A14D-BB6245535F95}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{3BDBE977-5A85-4D80-9B5A-80A5F83D07EC}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{EB64C662-BB6B-4881-8B21-3B88E180039C}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{F4065618-4CCE-4EF0-AC59-7CFE5C858C63}: NameServer = 205.191.194.14
O17 - HKLM\System\CS1\Services\Tcpip\..\{0FCD3CE3-A492-4922-83F4-68E53B911A10}: NameServer = 205.191.194.14
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: rmvgor - {DB364514-4582-4747-BB9F-0556149F3B0E} - C:\WINDOWS\rmvgor.dll
O21 - SSODL: sapnet - {B43BB217-F5FC-47F5-B34B-A5D8BEC29904} - C:\WINDOWS\sapnet.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\MSI\Bluetooth Software\bin\btwdins.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slmdmsr.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe

[Reklama]

[fredik]

Doporučil bych ti odinstalovat přes Přidat nebo odebrat programy:
BearShare MediaBar

Stáhni si SDFix
- Spusť ho a rozbalí se ti na disk kde je nainstalovaný Windows (typicky to je C:\SDfix)
- Pak restartuj PC do nouzového režimu (zvol možnost: Stav nouze, ne Stav nouze s práci v síti)
- Otevři adresář kde je vybalený SDFix a spusť soubor RunThis.bat tím spustíš program.
* Pak stiskni klávesu Y a pak Enter pro zahájení čistícího procesu.
* Pro dokončení kontroly budeš vyzván ke stisknoutí libovolné klávesy a počítač se restartuje.
* Při nabíhání operačního systému se program spustí znovu a dokončí čistící proces. Až se objeví Finish, budeš muset po vyzvání stisknout libovolnou klávesu, tim se ukončí program a zobrazí se ti ikony na ploše
- Když se skončí načítání ikon na ploše, otevře se ti na obrazovce log z SDFix a zároveň ho uloží do adresáře kde je rozbalený SDFix jako soubor Report.txt
Pak sem zkopíruj jeho obsah.

Poznámka:
Používáš starší verzi HijackThis, stáhni si aktuální verzi zde a tu starou před použitím vymaž a dej sem pak i nový log z HJT.

[Iwet]

tenhle program mi bohuzel nefunguje:o/

[fredik]

Zkus být víc sdílná, jak nefunguje? Program je nutné spustit v nouzovém režimu.

Stáhni si SUPERAntiSpyware
Nainstaluj a spusť ho a klikni na tlačítko Check for Updates...
Po provedení Update klikni na tlačítko: Scan your computer
Zvol možnost: Perform Complete Scan a klikni na tlačítko Další >

Proběhne kontrola, po skončení vypíše vše co našel.
Ujisti se že všechny položko jsou zaškrtnuty a pak zvol tlačítko Další
Pak klikni na tlačítko Finish a měl by ses dostat na úvodní obrazovku.
Tam klikni na tlačítko: Preferences... a tam zvol záložku Statistics/Logs
Tam klikni na log s dnešním datem který tam bude a dej tlačítko: View Log...
Otevře se ti Okno s logem tak jeho obsah sem zkopíruj.
+
Dej sem nový log z HJT

[Iwet]

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 11/20/2007 at 09:11 PM

Application Version : 3.9.1008

Core Rules Database Version : 3259
Trace Rules Database Version: 1270

Scan type : Quick Scan
Total Scan Time : 00:51:42

Memory items scanned : 459
Memory threats detected : 0
Registry items scanned : 762
Registry threats detected : 122
File items scanned : 14258
File threats detected : 143

Adware.Tracking Cookie
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@ads.adbrite[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@fr.sitestat[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@msnportal.112.2o7[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@www.googleadservices[3].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@perf.overture[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@imrworldwide[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@cz.search.etargetnet[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@www.best-warez[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@indexstats[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@maxis.112.2o7[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@toplist[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@counter.cnw[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@www.warez-area[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@fr.sitestat[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@toplist[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@tracker.boodin[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@targetnet[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@stajam-sro.takeit.idnes[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav - fischer@ads.addynamix[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@achmedia[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@revenue[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@ad.yieldmanager[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@advertising[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@adopt.specificclick[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@clicktorrent[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@4.adbrite[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@adserver.adreactor[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@www.cracks[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@usenext[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav - fischer@popularscreensavers[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@bs.serving-sys[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@www.googleadservices[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@zedo[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@adrenaline[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@adrenalinesk[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@pornofoto[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@ad2.billboard[3].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@www.sakra-warez[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@tribalfusion[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@rotator.adjuggler[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@sales.liveperson[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@xiti[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@k.iinfo[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav - fischer@rambler[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@2.adbrite[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@www.cracks[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@altastat[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@phg.hitbox[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav - fischer@mywebsearch[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@statse.webtrendslive[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@metacafe.122.2o7[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@ad.zanox[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@findcrack[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@bluestreak[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav - fischer@maxserving[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@warez.cz-forums[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@statcounter[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@overture[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav - fischer@doubleclick[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@ad2.billboard[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@fastclick[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@ads.adbrite[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@audit.median[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@adecn[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@as1.falkag[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@2o7[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@adidnes2.bbmedia[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@www.888[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@smileycentral[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@realmedia[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@ukazse.idnes[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@atwola[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@ad.abum[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@int.sitestat[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@www.pornofoto[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@cs.sexcounter[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@adbrite[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@ad1.clickhype[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@adarbo2.bbmedia[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@ad.allstar[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@adtech[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@serving-sys[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@clickbank[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@media.adrevolver[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@casalemedia[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@tacoda[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@ad2.bbmedia[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav - fischer@sex-doma[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@int.sitestat[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@stat.onestat[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@cracks[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@247realmedia[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@adx.allstar[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav - fischer@atdmt[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@sales.liveperson[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@hit.stat[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@warezblog[3].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@mapy-cabalka.takeit.idnes[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@forum.cz-warez[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@tradedoubler[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@adrevolver[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@spylog[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@indextools[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@hitbox[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@c5.zedo[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@www.googleadservices[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@counter.studentagency[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@ads.atlas[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@anad.tacoda[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@warezblog[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@adultfriendfinder[2].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@clicksor[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@prvni-izolacni-alfa.takeit.idnes[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@creative.adsrevenue[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@stats.zimmi[1].txt
C:\Documents and Settings\Vítězslav - Fischer\Cookies\vítězslav_-_fischer@specificclick[1].txt
C:\Documents and Settings\Martina\Cookies\martina@2o7[1].txt
C:\Documents and Settings\Martina\Cookies\martina@3.adbrite[1].txt
C:\Documents and Settings\Martina\Cookies\martina@ad.crazytomato[1].txt
C:\Documents and Settings\Martina\Cookies\martina@ad2.bbmedia[2].txt
C:\Documents and Settings\Martina\Cookies\martina@ad2.billboard[1].txt
C:\Documents and Settings\Martina\Cookies\martina@ad2.billboard[3].txt
C:\Documents and Settings\Martina\Cookies\martina@ad4.bannerbank[2].txt
C:\Documents and Settings\Martina\Cookies\martina@adbrite[2].txt
C:\Documents and Settings\Martina\Cookies\martina@ads.adbrite[2].txt
C:\Documents and Settings\Martina\Cookies\martina@adtech[1].txt
C:\Documents and Settings\Martina\Cookies\martina@adultadworld[1].txt
C:\Documents and Settings\Martina\Cookies\martina@advertising[2].txt
C:\Documents and Settings\Martina\Cookies\martina@atwola[1].txt
C:\Documents and Settings\Martina\Cookies\martina@audit.median[1].txt
C:\Documents and Settings\Martina\Cookies\martina@counter.cnw[2].txt
C:\Documents and Settings\Martina\Cookies\martina@doubleclick[1].txt
C:\Documents and Settings\Martina\Cookies\martina@hotlog[1].txt
C:\Documents and Settings\Martina\Cookies\martina@mywebsearch[1].txt
C:\Documents and Settings\Martina\Cookies\martina@sextv1[2].txt
C:\Documents and Settings\Martina\Cookies\martina@stat.onestat[2].txt
C:\Documents and Settings\Martina\Cookies\martina@statcounter[2].txt
C:\Documents and Settings\Martina\Cookies\martina@toplist[1].txt
C:\Documents and Settings\Martina\Cookies\martina@toplist[2].txt
C:\Documents and Settings\Martina\Cookies\martina@www.telemedia[1].txt
C:\Documents and Settings\Martina\Cookies\martina@yadro[1].txt

Adware.WhenU
HKCR\WUSN.1
HKCR\WUSN.1#WUSN_Id
HKCR\WUSE.1
HKCR\WUSE.1#WUSE_Id

Trojan.MalwareWipe
HKCR\TypeLib\{70BD49C5-7776-46B8-B025-E5E34CED92C3}
HKCR\TypeLib\{70BD49C5-7776-46B8-B025-E5E34CED92C3}\1.0
HKCR\TypeLib\{70BD49C5-7776-46B8-B025-E5E34CED92C3}\1.0\0
HKCR\TypeLib\{70BD49C5-7776-46B8-B025-E5E34CED92C3}\1.0\0\win32
HKCR\TypeLib\{70BD49C5-7776-46B8-B025-E5E34CED92C3}\1.0\FLAGS
HKCR\TypeLib\{70BD49C5-7776-46B8-B025-E5E34CED92C3}\1.0\HELPDIR
HKCR\Interface\{16CE4DF1-88FC-4843-9134-F13D4C7BF3EE}
HKCR\Interface\{16CE4DF1-88FC-4843-9134-F13D4C7BF3EE}\ProxyStubClsid
HKCR\Interface\{16CE4DF1-88FC-4843-9134-F13D4C7BF3EE}\ProxyStubClsid32
HKCR\Interface\{16CE4DF1-88FC-4843-9134-F13D4C7BF3EE}\TypeLib
HKCR\Interface\{16CE4DF1-88FC-4843-9134-F13D4C7BF3EE}\TypeLib#Version
HKCR\Interface\{17811539-2602-4840-A189-DE2F58C61038}
HKCR\Interface\{17811539-2602-4840-A189-DE2F58C61038}\ProxyStubClsid
HKCR\Interface\{17811539-2602-4840-A189-DE2F58C61038}\ProxyStubClsid32
HKCR\Interface\{17811539-2602-4840-A189-DE2F58C61038}\TypeLib
HKCR\Interface\{17811539-2602-4840-A189-DE2F58C61038}\TypeLib#Version
HKCR\Interface\{24368407-E9FC-45CD-B403-AC9FCDB8988C}
HKCR\Interface\{24368407-E9FC-45CD-B403-AC9FCDB8988C}\ProxyStubClsid
HKCR\Interface\{24368407-E9FC-45CD-B403-AC9FCDB8988C}\ProxyStubClsid32
HKCR\Interface\{24368407-E9FC-45CD-B403-AC9FCDB8988C}\TypeLib
HKCR\Interface\{24368407-E9FC-45CD-B403-AC9FCDB8988C}\TypeLib#Version
HKCR\Interface\{36A742EE-7EB2-428C-BF53-FD44E8D24A6B}
HKCR\Interface\{36A742EE-7EB2-428C-BF53-FD44E8D24A6B}\ProxyStubClsid
HKCR\Interface\{36A742EE-7EB2-428C-BF53-FD44E8D24A6B}\ProxyStubClsid32
HKCR\Interface\{36A742EE-7EB2-428C-BF53-FD44E8D24A6B}\TypeLib
HKCR\Interface\{36A742EE-7EB2-428C-BF53-FD44E8D24A6B}\TypeLib#Version
HKCR\Interface\{419813FC-0271-4521-8855-4AD41884CB73}
HKCR\Interface\{419813FC-0271-4521-8855-4AD41884CB73}\ProxyStubClsid
HKCR\Interface\{419813FC-0271-4521-8855-4AD41884CB73}\ProxyStubClsid32
HKCR\Interface\{419813FC-0271-4521-8855-4AD41884CB73}\TypeLib
HKCR\Interface\{419813FC-0271-4521-8855-4AD41884CB73}\TypeLib#Version
HKCR\Interface\{49AB62F1-1F76-4D45-8830-FDA6B3C3B4DE}
HKCR\Interface\{49AB62F1-1F76-4D45-8830-FDA6B3C3B4DE}\ProxyStubClsid
HKCR\Interface\{49AB62F1-1F76-4D45-8830-FDA6B3C3B4DE}\ProxyStubClsid32
HKCR\Interface\{49AB62F1-1F76-4D45-8830-FDA6B3C3B4DE}\TypeLib
HKCR\Interface\{49AB62F1-1F76-4D45-8830-FDA6B3C3B4DE}\TypeLib#Version
HKCR\Interface\{58120ABA-BEB7-4459-8297-8CBCB2E9D795}
HKCR\Interface\{58120ABA-BEB7-4459-8297-8CBCB2E9D795}\ProxyStubClsid
HKCR\Interface\{58120ABA-BEB7-4459-8297-8CBCB2E9D795}\ProxyStubClsid32
HKCR\Interface\{58120ABA-BEB7-4459-8297-8CBCB2E9D795}\TypeLib
HKCR\Interface\{58120ABA-BEB7-4459-8297-8CBCB2E9D795}\TypeLib#Version
HKCR\Interface\{631C5E80-EF5A-436A-ACEE-603844A024B4}
HKCR\Interface\{631C5E80-EF5A-436A-ACEE-603844A024B4}\ProxyStubClsid
HKCR\Interface\{631C5E80-EF5A-436A-ACEE-603844A024B4}\ProxyStubClsid32
HKCR\Interface\{631C5E80-EF5A-436A-ACEE-603844A024B4}\TypeLib
HKCR\Interface\{631C5E80-EF5A-436A-ACEE-603844A024B4}\TypeLib#Version
HKCR\Interface\{6B2C0504-130C-486F-A2BB-000E53BCF48C}
HKCR\Interface\{6B2C0504-130C-486F-A2BB-000E53BCF48C}\ProxyStubClsid
HKCR\Interface\{6B2C0504-130C-486F-A2BB-000E53BCF48C}\ProxyStubClsid32
HKCR\Interface\{6B2C0504-130C-486F-A2BB-000E53BCF48C}\TypeLib
HKCR\Interface\{6B2C0504-130C-486F-A2BB-000E53BCF48C}\TypeLib#Version
HKCR\Interface\{716C0242-551E-429C-A93C-955016678C4D}
HKCR\Interface\{716C0242-551E-429C-A93C-955016678C4D}\ProxyStubClsid
HKCR\Interface\{716C0242-551E-429C-A93C-955016678C4D}\ProxyStubClsid32
HKCR\Interface\{716C0242-551E-429C-A93C-955016678C4D}\TypeLib
HKCR\Interface\{716C0242-551E-429C-A93C-955016678C4D}\TypeLib#Version
HKCR\Interface\{83198DC1-CB01-457A-A375-A23CC9A0055B}
HKCR\Interface\{83198DC1-CB01-457A-A375-A23CC9A0055B}\ProxyStubClsid
HKCR\Interface\{83198DC1-CB01-457A-A375-A23CC9A0055B}\ProxyStubClsid32
HKCR\Interface\{83198DC1-CB01-457A-A375-A23CC9A0055B}\TypeLib
HKCR\Interface\{83198DC1-CB01-457A-A375-A23CC9A0055B}\TypeLib#Version
HKCR\Interface\{A9EE6184-0DFA-4296-94B4-CC19111A586B}
HKCR\Interface\{A9EE6184-0DFA-4296-94B4-CC19111A586B}\ProxyStubClsid
HKCR\Interface\{A9EE6184-0DFA-4296-94B4-CC19111A586B}\ProxyStubClsid32
HKCR\Interface\{A9EE6184-0DFA-4296-94B4-CC19111A586B}\TypeLib
HKCR\Interface\{A9EE6184-0DFA-4296-94B4-CC19111A586B}\TypeLib#Version
HKCR\Interface\{B09F616C-B561-4111-BD8F-D7D7E5BD0341}
HKCR\Interface\{B09F616C-B561-4111-BD8F-D7D7E5BD0341}\ProxyStubClsid
HKCR\Interface\{B09F616C-B561-4111-BD8F-D7D7E5BD0341}\ProxyStubClsid32
HKCR\Interface\{B09F616C-B561-4111-BD8F-D7D7E5BD0341}\TypeLib
HKCR\Interface\{B09F616C-B561-4111-BD8F-D7D7E5BD0341}\TypeLib#Version
HKCR\Interface\{B41D39A9-1044-4A96-979B-6B43718E5680}
HKCR\Interface\{B41D39A9-1044-4A96-979B-6B43718E5680}\ProxyStubClsid
HKCR\Interface\{B41D39A9-1044-4A96-979B-6B43718E5680}\ProxyStubClsid32
HKCR\Interface\{B41D39A9-1044-4A96-979B-6B43718E5680}\TypeLib
HKCR\Interface\{B41D39A9-1044-4A96-979B-6B43718E5680}\TypeLib#Version
HKCR\Interface\{D973304C-F078-4BA4-B295-F53006FE330A}
HKCR\Interface\{D973304C-F078-4BA4-B295-F53006FE330A}\ProxyStubClsid
HKCR\Interface\{D973304C-F078-4BA4-B295-F53006FE330A}\ProxyStubClsid32
HKCR\Interface\{D973304C-F078-4BA4-B295-F53006FE330A}\TypeLib
HKCR\Interface\{D973304C-F078-4BA4-B295-F53006FE330A}\TypeLib#Version
HKCR\Interface\{E72ECD09-2B43-4687-938A-4485CA0E91F7}
HKCR\Interface\{E72ECD09-2B43-4687-938A-4485CA0E91F7}\ProxyStubClsid
HKCR\Interface\{E72ECD09-2B43-4687-938A-4485CA0E91F7}\ProxyStubClsid32
HKCR\Interface\{E72ECD09-2B43-4687-938A-4485CA0E91F7}\TypeLib
HKCR\Interface\{E72ECD09-2B43-4687-938A-4485CA0E91F7}\TypeLib#Version

Malware.SpyHeal
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\bjaMcrRofi
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\ckoWrojbUscf
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\dySKpzveUzug
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\fhxfntAh
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\fsqp
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\KzzsrhscVcArx
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\MhKc
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\MrsNmN
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\ncNkuNvxooX
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\ojmgtI
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\oyaJswyegcfYw
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\RtekObcSyzvny
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\uiaabcfj
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\Verb
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\Verb\0
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\Verb\1
HKCR\CLSID\{8AC99A2F-17F7-2E97-A7F8-6D9EF8B99CC4}\WvOuwiL

Trojan.Downloader-IBM/Shell
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSASVC
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSASVC#NextInstance
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSASVC\0000
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSASVC\0000#Service
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSASVC\0000#Legacy
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSASVC\0000#ConfigFlags
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSASVC\0000#Class
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSASVC\0000#ClassGUID
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSASVC\0000#DeviceDesc

Trojan.TaskDir
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run#taskdir [ C:\WINDOWS\system32\taskdir.exe ]
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run#taskdir [ C:\WINDOWS\system32\taskdir.exe ]

Trojan.Net-MSV/VPS
HKCR\MSVPS.MSVPSApp
HKCR\MSVPS.MSVPSApp\CLSID
HKCR\MSVPS.MSVPSApp\CurVer

Trojan.VXGame-Gen
C:\WINDOWS\SYSTEM32\DLH9JKD1Q8.EXE

Trojan.Downloader-WinCom32/Rootkit-Trace
C:\WINDOWS\SYSTEM32\WINCOM32.INI

[Iwet]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:30, on 2007-11-20
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\MSI\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\MSI\Bluetooth Software\BTTray.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\slmdmsr.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Vítězslav - Fischer\Plocha\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.bearshare.com/sidebar.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wm ... Ojg5&lid=2
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: MSVPS System - {6A78E352-B1FA-4C18-9C48-96DD03979770} - C:\WINDOWS\popnetmtq.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: ActivationManager module - {86A44EF7-78FC-4e18-A564-B18F806F7F56} - C:\Program Files\ActivationManager\ActivationManager.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O3 - Toolbar: The jokwmp - {6BA27973-068D-4F85-BE84-1251E0B20FD3} - C:\WINDOWS\jokwmp.dll (file missing)
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe -onlytray
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [FreeCall] "C:\program files\freecall.com\freecall\freecall.exe" -nosplash -minimized
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\MSI\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O16 - DPF: {50E43D86-A74D-11D0-98CE-004005249458} (AnimatedGif Control) - https://www.mojebanka.cz/jars/confwiz/MVSGif.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0FCD3CE3-A492-4922-83F4-68E53B911A10}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{1038C02A-56E6-4B99-AEC5-894720643805}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{2671F829-6C2B-4352-AB62-6C6F136F024C}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{33D94E3C-54E0-4207-A14D-BB6245535F95}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{3BDBE977-5A85-4D80-9B5A-80A5F83D07EC}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{EB64C662-BB6B-4881-8B21-3B88E180039C}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{F4065618-4CCE-4EF0-AC59-7CFE5C858C63}: NameServer = 205.191.194.14
O17 - HKLM\System\CS1\Services\Tcpip\..\{0FCD3CE3-A492-4922-83F4-68E53B911A10}: NameServer = 205.191.194.14
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O21 - SSODL: rmvgor - {DB364514-4582-4747-BB9F-0556149F3B0E} - C:\WINDOWS\rmvgor.dll
O21 - SSODL: sapnet - {B43BB217-F5FC-47F5-B34B-A5D8BEC29904} - C:\WINDOWS\sapnet.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\MSI\Bluetooth Software\bin\btwdins.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slmdmsr.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O24 - Desktop Component 0: Privacy Protection - file:///C:\WINDOWS\privacy_danger\index.htm

--
End of file - 9649 bytes

[fredik]

Stáhni si Avengera spusť ho pod účtem administrátora.
Zvol možnost - Input script manually a klikni na ikonku lupy, vyskočí prázdné okno kam zkopíruj tento tučný text:
Files to delete:
C:\WINDOWS\rmvgor.dll
C:\WINDOWS\sapnet.dll

Folders to delete:
C:\WINDOWS\privacy_danger

Poté klikni na Done.
Pak klikni na ikonku semafory.
Vyskočí ti hláška kde odklikni Yes. PC se restartuje po restartu by ti měl "vyskočit" výpis z Avengeru tak ho sem zkopíruj.

Spusť znovu HijackThis a zaškrtni v něm okénka před řádky:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.bearshare.com/sidebar.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/ju.....&lid=2
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
O2 - BHO: MSVPS System - {6A78E352-B1FA-4C18-9C48-96DD03979770} - C:\WINDOWS\popnetmtq.dll (file missing)
O3 - Toolbar: The jokwmp - {6BA27973-068D-4F85-BE84-1251E0B20FD3} - C:\WINDOWS\jokwmp.dll (file missing)
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O21 - SSODL: rmvgor - {DB364514-4582-4747-BB9F-0556149F3B0E} - C:\WINDOWS\rmvgor.dll
O21 - SSODL: sapnet - {B43BB217-F5FC-47F5-B34B-A5D8BEC29904} - C:\WINDOWS\sapnet.dll
O24 - Desktop Component 0: Privacy Protection - file:///C:\WINDOWS\privacy_danger\index.htm
po zaškrtnutí klikni na tlačítko Fix Checked

Dej sem pak nový log z HJT

[Iwet]

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\gmsdlweu

*******************

Script file located at: \??\C:\nsoojkod.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

File C:\WINDOWS\rmvgor.dll deleted successfully.
File C:\WINDOWS\sapnet.dll deleted successfully.
Folder C:\WINDOWS\privacy_danger deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

[Iwet]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:22, on 2007-11-20
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\MSI\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\slmdmsr.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Vítězslav - Fischer\Plocha\HiJackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: ActivationManager module - {86A44EF7-78FC-4e18-A564-B18F806F7F56} - C:\Program Files\ActivationManager\ActivationManager.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe -onlytray
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [FreeCall] "C:\program files\freecall.com\freecall\freecall.exe" -nosplash -minimized
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\MSI\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O16 - DPF: {50E43D86-A74D-11D0-98CE-004005249458} (AnimatedGif Control) - https://www.mojebanka.cz/jars/confwiz/MVSGif.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0FCD3CE3-A492-4922-83F4-68E53B911A10}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{1038C02A-56E6-4B99-AEC5-894720643805}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{2671F829-6C2B-4352-AB62-6C6F136F024C}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{33D94E3C-54E0-4207-A14D-BB6245535F95}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{3BDBE977-5A85-4D80-9B5A-80A5F83D07EC}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{EB64C662-BB6B-4881-8B21-3B88E180039C}: NameServer = 205.191.194.14
O17 - HKLM\System\CCS\Services\Tcpip\..\{F4065618-4CCE-4EF0-AC59-7CFE5C858C63}: NameServer = 205.191.194.14
O17 - HKLM\System\CS1\Services\Tcpip\..\{0FCD3CE3-A492-4922-83F4-68E53B911A10}: NameServer = 205.191.194.14
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\MSI\Bluetooth Software\bin\btwdins.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slmdmsr.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe

--
End of file - 8466 bytes

[fredik]

Fixni jete v HJT toto:
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb

Smaž adresář/složku kterou vytvořil Avenger:
C:\Avenger

Logy jinak vypadají dobře, máš ještě problémy?

[Iwet]

Diky za pomoc uz zadny problemy nemam...

[fredik]

Nemáš za co