Padá internet

[PredyP]

Například když si chci otevřít Emailovou schránku na seznamu přes pošťáka tak po otevření se to círka do 5 až 10 vteřn kousne a nejde nic jiného než zavřít.



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:47:18, on 18.12.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\ConMet\ConMet.exe
C:\Program Files\Seznam\Postak\Postak.exe
C:\WINDOWS\tsnpstd3.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe
C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Kerio\Personal Firewall\persfw.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Skype\Plugin Manager\SkypePM.exe
C:\Program Files\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\TRANSLAT\WEBIE.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ConMet] C:\Program Files\ConMet\ConMet.exe
O4 - HKLM\..\Run: [SMail] "C:\Program Files\Seznam\Postak\Postak.exe"
O4 - HKLM\..\Run: [tsnpstd3] C:\WINDOWS\tsnpstd3.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1029
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: APC UPS Status.lnk = C:\Program Files\APC\APC PowerChute Personal Edition\Display.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Easy-WebPrint - Náhled - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint - Přidat na seznam k tisku - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint - Tisk - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint - Vysokorychlostní tisk - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
O9 - Extra button: WebTran - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\TRANSLAT\WEBIE.DLL
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 7916518213
O16 - DPF: {9059F30F-4EB1-4BD2-9FDC-36F43A218F4A} (Microsoft RDP Client Control (redist)) - http://connectto.mckennalong.com/msrdp.cab
O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} -
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} -
O16 - DPF: {E8ABBEBD-0B80-4091-B3B0-2C5AAD97A11A} (ScreenShooter Control) - http://tapety.mojelogo.cz/ScreenShooter.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{F7E2E785-61BE-48CD-84AB-33CD00498012}: NameServer = 192.168.1.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Kerio Personal Firewall (PersFw) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall\persfw.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

--
End of file - 8312 bytes

[Reklama]

[Baron Prášil]

běží ti avg antispy a teatimer od spybotu současně,tak jedno s toho vypni.

ale jinak je log v pořádku.

takže udělej log z MWAVu,ale předtím
vyčisti systém CCleanerem a RegCleanerem

[X]

PredyP: Spadlo ti t. Titulek vlákna: "Padá interne". To si to tu nikdo po sobě nečte, co napíše jako já? Připadám si tu jako mezi dyslektiky Jsem nejdřív přemýšlel, co ti vnitřně padá (interne).

[PredyP]

Tak jsem vyčistil CCleanerem a RegCleanerem. Spustil MWAV a asi po hodině se sám zavřel co teď????

[OndraP.]

...dysletiky ...

nevim jestli si děláš srandu nebo to myslíš vážně...

[PredyP]

Ten log v MWAV je, ale je celý a ne jen hrozby. Mám ho sem dát?????

[Baron Prášil]

ne,celej proboha ne.
udělej a pošli log z combofixu
Stáhni si ComboFix (by sUBs) a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem klávesy 1
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log, který se ti zobrazí, jinak ho najdeš zde: C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

[X]

OndraP.: To víš že vážně. Když máš nejdříve luštit, co kdo napsal ... a nejlepší je, že některé takové pěsti na oko tu visí několik týdnů. Jako by to bylo schválně

[PredyP]

Nejprve se musím omluvit X za to malé nedopatření které jsem již napravil.

Po restartu combofixem jsem musel provést opravu připojení k síti.

ComboFix 07-12-18.1 - Administrator 2007-12-18 19:23:57.12 - FAT32x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.1.1029.18.693 [GMT 1:00]
Running from: C:\Documents and Settings\Administrator.A123\Plocha\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\regedit.com
C:\WINDOWS\system32\taskmgr.com

.
((((((((((((((((((((((((( Files Created from 2007-11-18 to 2007-12-18 )))))))))))))))))))))))))))))))
.

2007-12-18 16:26 . 2007-12-18 16:26 <DIR> d-------- C:\Program Files\RegCleaner
2007-12-18 13:32 . 2007-12-18 13:32 <DIR> d-------- C:\Program Files\Seznam
2007-12-18 12:03 . 2004-08-17 15:48 96,768 --------- C:\WINDOWS\system32\dllcache\dpcdll.dll
2007-12-18 12:03 . 2004-08-17 15:49 10,752 --------- C:\WINDOWS\system32\smtpapi.dll
2007-12-18 12:03 . 2004-08-17 15:49 9,728 --------- C:\WINDOWS\system32\rwnh.dll
2007-12-18 09:19 . 2007-12-18 09:19 <DIR> d-------- C:\Documents and Settings\Administrator.A123\Data aplikací\Grisoft
2007-12-18 09:18 . 2007-12-18 09:18 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Grisoft
2007-12-18 09:18 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-12-17 21:49 . 2007-12-17 21:49 <DIR> d-------- C:\Program Files\IObit
2007-12-17 09:55 . 2007-12-17 09:55 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ESET
2007-12-16 22:16 . 2007-12-16 22:16 <DIR> d-a------ C:\WINDOWS\zts2.exe
2007-12-16 22:16 . 2007-12-16 22:16 <DIR> d-a------ C:\WINDOWS\system32\vcmgcd32.dll
2007-12-16 22:16 . 2007-12-16 22:16 <DIR> d-a------ C:\WINDOWS\system32\iifgfgf.dll
2007-12-16 22:16 . 2007-12-16 22:16 <DIR> d-a------ C:\WINDOWS\rundll16.exe
2007-12-16 22:16 . 2007-12-16 22:16 <DIR> d-a------ C:\WINDOWS\rundl132.dll
2007-12-16 22:16 . 2007-12-16 22:16 <DIR> d-a------ C:\WINDOWS\logo1_.exe
2007-12-16 22:12 . 2004-08-17 15:49 147,968 --a------ C:\WINDOWS\R.COM
2007-12-16 22:12 . 2004-08-17 15:49 137,216 --a------ C:\WINDOWS\system32\T.COM
2007-12-16 22:12 . 2007-12-18 18:05 50 --a------ C:\WINDOWS\Lic.xxx
2007-12-16 12:43 . 2004-07-17 11:40 19,528 --a------ C:\WINDOWS\002449_.tmp
2007-12-14 13:58 . 2007-12-14 13:58 <DIR> d-------- C:\Program Files\FlatOut2
2007-12-13 16:11 . 2007-12-13 16:11 <DIR> d-------- C:\Documents and Settings\Administrator.A123\Data aplikací\Canon
2007-12-11 20:57 . 2007-12-11 20:57 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Nero
2007-12-09 21:08 . 2007-12-09 21:08 <DIR> d-------- C:\Program Files\Simpli Software
2007-12-07 20:09 . 2007-12-07 20:09 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2007-12-07 14:19 . 2007-12-07 14:19 <DIR> d-------- C:\Program Files\GamePark
2007-12-05 20:06 . 2007-12-05 20:06 <DIR> d-------- C:\Program Files\Kerio
2007-12-05 20:06 . 2002-04-15 12:18 102,912 --------- C:\WINDOWS\system32\drivers\FWDRV.SYS
2007-12-05 19:27 . 2007-12-05 19:42 158 --a------ C:\WINDOWS\system32\drivers\fwdrv.err
2007-12-03 21:52 . 2007-12-03 21:52 <DIR> dr------- C:\Documents and Settings\LocalService.NT AUTHORITY\Oblíbené položky
2007-12-03 19:31 . 2007-12-03 19:31 <DIR> d-------- C:\Documents and Settings\Administrator.A123\Data aplikací\InstallShield
2007-11-29 19:52 . 2001-09-17 10:28 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll
2007-11-29 19:51 . 2004-08-17 15:49 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll
2007-11-29 19:42 . 2005-04-30 17:02 86,016 --------- C:\WINDOWS\system32\bgsvcgen.exe
2007-11-29 19:42 . 2005-04-30 17:09 57,344 --------- C:\WINDOWS\system32\GenSvcInst.exe
2007-11-29 19:42 . 2005-05-01 14:41 49,152 --------- C:\WINDOWS\system32\setupsvc.dll
2007-11-29 19:42 . 2005-05-11 00:33 32,256 --------- C:\WINDOWS\system32\drivers\cdrbsdrv.sys
2007-11-29 19:39 . 2007-11-29 19:39 <DIR> d-------- C:\Documents and Settings\Administrator.A123\Data aplikací\FUJIFILM
2007-11-29 19:38 . 2007-11-29 19:38 <DIR> d-------- C:\Program Files\FinePixViewer
2007-11-29 19:38 . 2003-09-03 16:45 274,432 --a------ C:\WINDOWS\system32\FFTIFF16.dll
2007-11-29 19:38 . 2006-07-12 14:39 208,896 --a------ C:\WINDOWS\system32\FFRafShellEx.dll
2007-11-29 19:38 . 2004-07-24 21:28 155,648 --a------ C:\WINDOWS\system32\FFRAFLIB.DLL
2007-11-29 19:37 . 2007-11-29 19:37 <DIR> d-------- C:\Program Files\REGSHAVE
2007-11-29 19:37 . 2001-11-25 12:11 81,924 --------- C:\WINDOWS\system32\drivers\VC4CB104.SYS
2007-11-29 19:37 . 2002-02-05 17:33 69,632 --------- C:\WINDOWS\system32\FREGSHEX.DLL
2007-11-29 19:37 . 2002-02-27 12:27 65,536 --------- C:\WINDOWS\system32\FINFCHECK.dll
2007-11-29 19:37 . 2002-06-25 10:06 45,056 --------- C:\WINDOWS\system32\FINFCOPY.dll
2007-11-29 19:37 . 2002-02-13 11:00 45,056 --------- C:\WINDOWS\system32\FCLKBTN.DLL
2007-11-25 09:28 . 2007-11-25 09:28 <DIR> d--h----- C:\FOUND.000
2007-11-21 21:19 . 2007-11-21 21:19 <DIR> d-------- C:\Documents and Settings\Administrator.A123\Data aplikací\Apple Computer
2007-11-21 18:14 . 2007-11-21 18:14 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Apple Computer
2007-11-21 17:59 . 2007-11-21 17:59 <DIR> d-------- C:\Program Files\DK
2007-11-18 09:04 . 2007-11-18 09:04 98,304 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2007-11-18 09:04 . 2007-11-22 17:39 43,520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-06 18:51 18,480 ----a-w C:\Documents and Settings\Administrator.A123\Data aplikací\GDIPFONTCACHEV1.DAT
2007-12-04 14:56 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys
2007-12-04 14:55 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
2007-12-04 14:53 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
2007-12-04 14:51 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
2007-12-04 14:49 26,624 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
2007-12-04 13:04 837,496 ----a-w C:\WINDOWS\system32\aswBoot.exe
2007-12-04 12:54 95,608 ----a-w C:\WINDOWS\system32\AVASTSS.scr
2007-11-16 17:24 --------- d-----w C:\Program Files\Common Files\StarCam
2007-11-15 19:57 32 ----a-w C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ezsid.dat
2007-11-15 19:57 --------- d-----w C:\Documents and Settings\Administrator.A123\Data aplikací\skypePM
2007-11-07 20:40 --------- d-----w C:\Documents and Settings\Administrator.A123\Data aplikací\CyberLink
2007-11-07 20:39 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Data aplikací\CyberLink
2007-11-07 20:27 --------- d-----w C:\Program Files\CyberLink
2007-11-06 18:59 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Data aplikací\WinZip
2007-11-04 20:29 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Data aplikací\PopCap
2007-11-03 11:49 --------- d-----w C:\Documents and Settings\Administrator.A123\Data aplikací\ArcSoft
2007-10-31 20:02 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Data aplikací\DVD Shrink
2007-10-31 16:20 --------- d-----w C:\Program Files\THQ
2007-10-29 16:37 --------- d-----w C:\Program Files\CCleaner
2007-10-29 15:13 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Data aplikací\NFS Underground
2007-10-28 15:49 --------- d-----w C:\Program Files\SMS Posílač
2007-10-25 22:30 --------- d-----w C:\Documents and Settings\Administrator.A123\Data aplikací\ICQLite
2007-10-25 20:43 685,816 ----a-w C:\WINDOWS\system32\drivers\sptd.sys
2007-10-25 19:15 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Ahead
2007-10-25 18:28 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Data aplikací\nView_Profiles
2007-10-25 17:11 --------- d-----w C:\Documents and Settings\Administrator.A123\Data aplikací\Ahead
2007-10-25 15:46 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Spybot - Search & Destroy
2007-10-25 13:37 --------- d-----w C:\Documents and Settings\Administrator.A123\Data aplikací\Zoner
2007-10-24 21:20 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ScanSoft
2007-10-24 21:20 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Data aplikací\InstallShield
2007-10-24 21:18 --------- d-----w C:\Program Files\ArcSoft
2007-10-24 21:16 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Data aplikací\CanonBJ
2007-10-24 21:15 --------- d-----w C:\Program Files\CanonBJ
2007-10-24 21:15 --------- d-----w C:\Program Files\Canon
2007-10-24 20:12 --------- d-----w C:\Documents and Settings\Administrator.A123\Data aplikací\ConMet
2007-10-24 20:11 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ConMet
2007-10-24 19:37 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Skype
2007-10-24 19:37 --------- d-----w C:\Documents and Settings\Administrator.A123\Data aplikací\Skype
2007-10-24 19:27 --------- d-----w C:\Documents and Settings\Administrator.A123\Data aplikací\Lavasoft
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-17 15:49]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-12-07 15:08]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-02 19:10]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-09-18 16:16]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="RUNDLL32.exe" [2004-08-17 15:49 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2007-09-17 01:07 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="RUNDLL32.exe" [2004-08-17 15:49 C:\WINDOWS\system32\rundll32.exe]
"ConMet"="C:\Program Files\ConMet\ConMet.exe" [2007-05-24 07:19]
"SMail"="C:\Program Files\Seznam\Postak\Postak.exe" [2006-05-18 14:36]
"tsnpstd3"="C:\WINDOWS\tsnpstd3.exe" [2006-06-19 11:43]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-17 15:49]

C:\Documents and Settings\All Users.WINDOWS\Nabˇdka Start\Programy\Po spuçtŘnˇ\
APC UPS Status.lnk - C:\Program Files\APC\APC PowerChute Personal Edition\Display.exe [2007-09-04 16:41:03]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveSearch"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoToolbarCustomize"= 0 (0x0)
"NoBandCustomize"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Nabídka Start^Programy^Po spuštění^WinZip Quick Pick.lnk]
path=C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění\WinZip Quick Pick.lnk
backup=C:\WINDOWS\pss\WinZip Quick Pick.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
2007-02-07 16:21 54832 --a------ C:\Program Files\CyberLink\PowerDVD\Language\Language.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 15:57 153136 --a------ C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\REGSHAVE]
C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
2007-02-07 16:24 71216 --------- C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
SOUNDMAN.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" /background
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

R1 fwdrv;Kerio Personal Firewall Driver;C:\WINDOWS\system32\Drivers\fwdrv.sys [2002-04-15 12:18]
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B};C:\Program Files\CyberLink\PowerDVD\000.fcl [2006-11-02 16:51]
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\system32\DRIVERS\psched.sys [2004-08-03 23:04]
S3 cdiskdun;cdiskdun;C:\DOCUME~1\ADMINI~1.A12\LOCALS~1\Temp\cdiskdun.sys []

.
**************************************************************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-18 19:26:29
Windows 5.1.2600 Service Pack 2 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-12-18 19:27:05
C:\ComboFix2.txt ... 2007-12-18 12:58

[PredyP]

Dal jsem sem ten Combofix Log

[PredyP]

Prosím o kontrolu

[Baron Prášil]

toto smaž
C:\WINDOWS\Lic.xxx
C:\WINDOWS\002449_.tmp
(líp najdeš když si zapneš zobrazování skrytých a systémových souborů(otevři jakoukoliv složku,Nástroje>Možnosti složky>Zobrazení)

zkus udělat ten mwav v nouzovém režimu