PC-HELP.CZ

cau , byl sem na soe.cz potom sem sel na nakou stanku hernich serveru a tam mi nod nasel vir , ulozil je do karanteny bo co tak bych prosil o konrolu ..díky Martin

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:04:36, on 13.9.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\VibrateGameDeviceDriver\RFPIcon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\QIP Infium30\infium.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Martin.MARTIN-PC\Local Settings\Data aplikací\Google\Update\1.2.183.7\GoogleCrashHandler.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Martin\Opera\Opera.exe
C:\Documents and Settings\Martin.MARTIN-PC\Plocha\Nová složka (2)\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTBatteryMeter] C:\Program Files\VibrateGameDeviceDriver\RFPIcon.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-448539723-926492609-1801674531-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Ostatní')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: NHL® 09 Registration.lnk = C:\Martin\EA Sports\NHL 09\Support\EAregister.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {076169AA-8C3D-4CFC-AC23-3ACA88FC21B5} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/f-s ... uncher.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{46F288FA-1A35-4FA6-AFC1-24F703C2B251}: NameServer = 10.10.10.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{46F288FA-1A35-4FA6-AFC1-24F703C2B251}: NameServer = 10.10.10.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{46F288FA-1A35-4FA6-AFC1-24F703C2B251}: NameServer = 10.10.10.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (file missing)
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

--
End of file - 7196 bytes

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Malwarebytes' Anti-Malware 1.41
Verze databáze: 2791
Windows 5.1.2600 Service Pack 3

13.9.2009 19:28:27
mbam-log-2009-09-13 (19-28-27).txt

Typ kontroly: Rychlá kontrola
Zkontrolované objekty: 143833
Uplynulý čas: 9 minute(s), 48 second(s)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované hodnoty registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
(Nebyly nalezeny žádné škodlivé položky)

ComboFix 09-09-12.A0 - Martin 13.09.2009 20:23.5.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2046.1553 [GMT 2:00]
Spuštěný z: c:\documents and settings\Martin.MARTIN-PC\Plocha\ComboFix.exe
AV: Eset NOD32 Antivirus 2.51 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.

((((((((((((((((((((((((( Soubory vytvořené od 2009-08-13 do 2009-09-13 )))))))))))))))))))))))))))))))
.

2009-09-09 15:05 . 2009-09-09 15:06 -------- d-----w- c:\program files\Valve
2009-09-02 18:28 . 2009-09-02 18:28 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2009-09-02 18:28 . 2009-09-02 18:28 -------- d-----w- c:\program files\Hamachi
2009-09-02 16:24 . 2009-09-02 16:28 -------- d-----w- C:\fifa
2009-09-02 16:20 . 2009-09-02 16:28 -------- d-----w- C:\Fraps
2009-09-02 14:03 . 2009-09-02 14:03 -------- d-----w- c:\program files\Creative
2009-09-02 14:03 . 1998-10-29 14:45 306688 ----a-w- c:\windows\IsUninst.exe
2009-09-02 13:32 . 2002-08-07 23:11 319488 ----a-r- c:\windows\system32\MafiaSetup.exe
2009-09-02 05:28 . 2009-09-02 05:28 -------- d-sh--w- c:\documents and settings\NetworkService.NT AUTHORITY\IETldCache
2009-08-31 10:44 . 2009-08-31 10:44 -------- d-----w- c:\program files\FLVPlayer
2009-08-31 09:52 . 2009-08-31 09:52 -------- d-----w- c:\program files\Webteh
2009-08-30 19:08 . 2009-08-30 19:08 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-08-29 11:19 . 2009-08-29 11:19 86016 ----a-w- c:\windows\system32\frapsvid.dll
2009-08-28 10:56 . 2009-08-28 11:08 -------- d-----w- c:\program files\QIP Infium30
2009-08-27 16:40 . 2009-08-27 16:40 -------- d-----w- c:\program files\Real
2009-08-26 12:20 . 2009-08-26 12:20 618 ----a-w- c:\windows\eReg.dat
2009-08-25 11:04 . 2009-09-02 18:27 -------- d-----w- C:\Temp
2009-08-25 11:04 . 2009-08-25 11:04 -------- d-----w- c:\program files\VibrateGameDeviceDriver
2009-08-24 20:45 . 2009-08-24 20:46 -------- d-----w- c:\documents and settings\Martin.MARTIN-PC\.gimp-2.6
2009-08-24 20:44 . 2009-08-24 20:44 -------- d-----w- c:\program files\GIMP-2.0
2009-08-24 16:49 . 2009-08-24 16:49 -------- d-----w- c:\documents and settings\Martin.MARTIN-PC\DoctorWeb
2009-08-24 10:13 . 2009-08-24 10:13 -------- d-----w- c:\windows\system32\Adobe
2009-08-24 10:12 . 2009-08-24 10:12 -------- d-----w- c:\windows\Sun
2009-08-24 08:51 . 2009-08-24 08:51 -------- d-----w- c:\program files\SUPERAntiSpyware
2009-08-24 08:12 . 2009-08-24 08:12 -------- d-sh--w- c:\documents and settings\Martin.MARTIN-PC\PrivacIE
2009-08-24 08:08 . 2009-08-24 08:08 -------- d-sh--w- c:\documents and settings\LocalService.NT AUTHORITY\IETldCache
2009-08-24 08:06 . 2009-08-24 08:06 -------- d-sh--w- c:\documents and settings\Martin.MARTIN-PC\IETldCache
2009-08-24 07:41 . 2009-08-24 07:41 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-08-24 07:41 . 2009-08-24 07:41 -------- d-----w- c:\program files\Java
2009-08-24 07:09 . 2009-08-24 07:09 -------- d-----w- c:\windows\ie8updates
2009-08-24 07:07 . 2009-08-24 07:08 -------- dc-h--w- c:\windows\ie8
2009-08-24 07:05 . 2009-07-03 16:59 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2009-08-24 07:05 . 2009-07-03 16:59 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2009-08-24 07:05 . 2009-07-03 16:59 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-08-24 07:05 . 2009-07-03 16:59 1985536 -c----w- c:\windows\system32\dllcache\iertutil.dll
2009-08-24 07:05 . 2009-07-03 16:59 594432 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2009-08-24 07:05 . 2009-07-01 07:08 101376 -c----w- c:\windows\system32\dllcache\iecompat.dll
2009-08-23 21:45 . 2009-08-23 21:45 -------- d-----w- c:\program files\MSXML 4.0
2009-08-23 15:43 . 2009-08-23 15:43 -------- d-----w- c:\program files\Common Files\Skype
2009-08-23 15:43 . 2009-08-23 15:43 -------- d-----r- c:\program files\Skype
2009-08-22 21:01 . 2009-08-22 21:01 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys
2009-08-22 21:00 . 2009-08-22 21:00 -------- d-----w- c:\program files\DVDFab 6
2009-08-22 12:26 . 2009-08-22 13:02 -------- d-----w- c:\program files\Vietcong2
2009-08-22 10:57 . 2009-08-22 10:57 737280 ----a-w- c:\windows\iun6002.exe
2009-08-22 10:57 . 2009-08-22 10:57 -------- d-----w- c:\program files\Codec Pack - All In 1
2009-08-22 09:39 . 2009-08-22 09:39 -------- d-----w- c:\windows\UfdApp
2009-08-22 09:21 . 2009-08-31 09:02 -------- d-----w- c:\program files\Nero
2009-08-22 09:20 . 2009-08-31 09:16 -------- d-----w- c:\program files\Common Files\Nero
2009-08-21 12:49 . 2009-08-21 12:54 -------- d-----w- c:\program files\OpenOffice.org 2.3
2009-08-20 13:03 . 2009-08-20 17:27 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2009-08-20 13:02 . 2009-08-20 13:02 -------- d-----w- c:\windows\system32\drivers\umdf
2009-08-20 13:01 . 2009-08-20 13:16 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2009-08-20 13:01 . 2009-08-20 13:01 -------- d-----w- c:\windows\system32\xlive
2009-08-18 13:23 . 2009-08-24 15:31 -------- d-----w- c:\documents and settings\Ostatní
2009-08-15 20:54 . 2009-08-15 20:54 -------- d-----w- C:\a8ad30fbc72f1e633f

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-13 17:18 . 2009-08-05 21:10 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-13 09:55 . 2009-08-01 14:08 -------- d-----w- c:\program files\Fifa Master
2009-09-12 17:34 . 2009-07-28 18:01 137928 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-09-12 17:34 . 2009-07-28 18:00 189768 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-09-10 12:54 . 2009-08-05 21:10 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-10 12:53 . 2009-08-05 21:10 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-09 14:51 . 2009-07-28 14:56 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-08-27 16:40 . 2009-08-08 20:05 -------- d-----w- c:\program files\Common Files\Real
2009-08-24 08:51 . 2009-07-29 12:32 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-08-23 19:37 . 2008-04-14 12:00 78052 ----a-w- c:\windows\system32\perfc005.dat
2009-08-23 19:37 . 2008-04-14 12:00 429024 ----a-w- c:\windows\system32\perfh005.dat
2009-08-13 18:46 . 2009-08-13 18:46 -------- d-----w- c:\program files\Game Cam V2
2009-08-12 13:17 . 2009-07-28 15:13 -------- d-----w- c:\program files\ESET
2009-08-09 19:26 . 2009-07-28 20:22 -------- d-----w- c:\program files\ICQ6.5
2009-08-09 15:07 . 2009-08-09 15:07 -------- d-----w- c:\program files\GameSpy Arcade
2009-08-09 14:10 . 2009-08-09 14:07 -------- d-----w- c:\program files\DivX
2009-08-09 14:07 . 2009-08-09 14:07 -------- d-----w- c:\program files\Common Files\DivX Shared
2009-08-07 17:51 . 2009-08-07 17:51 15308424 ----a-w- c:\windows\system32\xlive.dll
2009-08-07 17:51 . 2009-08-07 17:51 13642888 ----a-w- c:\windows\system32\xlivefnt.dll
2009-08-07 12:44 . 2009-08-07 12:44 -------- d-----w- c:\program files\Microsoft.NET
2009-08-07 12:29 . 2009-08-07 12:29 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-08-06 07:13 . 2009-08-06 07:12 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-08-05 20:13 . 2009-08-05 20:13 -------- d-----w- c:\program files\Windows Doctor
2009-08-05 20:09 . 2009-08-05 20:09 -------- d-----w- c:\program files\ToniArts
2009-08-05 16:11 . 2009-08-05 16:11 -------- d-----w- c:\program files\RocketDock
2009-08-05 09:01 . 2008-04-14 12:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-04 20:14 . 2009-08-04 20:14 604416 ----a-w- c:\windows\system32\TUProgSt.exe
2009-08-04 20:14 . 2009-08-04 20:14 361216 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-08-04 20:14 . 2009-08-04 20:14 -------- d-----w- c:\program files\TuneUp Utilities 2009
2009-08-04 13:20 . 2009-08-04 13:20 -------- d-----w- c:\program files\Acoustica CD Label Maker
2009-08-03 07:47 . 2009-08-03 07:47 -------- d-----w- c:\program files\Common Files\Xing Shared
2009-08-03 07:47 . 2009-08-03 07:47 -------- d-----w- c:\program files\Xing
2009-08-01 18:26 . 2009-08-01 18:26 -------- d-----w- c:\program files\Bonjour
2009-08-01 18:26 . 2009-08-01 16:22 -------- d-----w- c:\program files\Common Files\Adobe
2009-08-01 18:21 . 2009-08-01 18:21 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2009-08-01 17:53 . 2009-08-01 17:53 -------- d-----w- c:\program files\Game Graphic Studio
2009-07-30 18:11 . 2009-07-30 18:11 -------- d-----w- c:\program files\Ashampoo
2009-07-30 13:06 . 2009-07-28 14:56 -------- d-----w- c:\program files\Common Files\InstallShield
2009-07-30 10:25 . 2009-07-30 10:25 -------- d-----w- c:\program files\OEdit
2009-07-29 17:48 . 2009-07-29 17:48 -------- d-----w- c:\program files\SopCast
2009-07-29 13:28 . 2009-07-29 13:27 -------- d-----w- c:\program files\PhotoFiltre Studio
2009-07-29 12:37 . 2009-07-29 12:37 -------- d-----w- c:\program files\CCleaner
2009-07-29 12:32 . 2009-07-29 12:32 -------- d-----w- c:\program files\AGEIA Technologies
2009-07-29 12:32 . 2009-07-29 12:32 -------- d-----w- c:\program files\NVIDIA Corporation
2009-07-29 09:04 . 2009-07-28 18:00 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2009-07-29 08:58 . 2009-07-29 08:58 -------- d-----w- c:\program files\GamePark
2009-07-28 19:51 . 2009-07-28 19:51 -------- d-----w- c:\program files\MSBuild
2009-07-28 19:49 . 2009-07-28 19:49 -------- d-----w- c:\program files\Reference Assemblies
2009-07-28 18:19 . 2009-07-28 18:19 -------- d-----w- c:\program files\Opera
2009-07-28 17:35 . 2009-07-28 17:35 -------- d-----w- c:\program files\Alcohol Soft
2009-07-28 17:31 . 2009-07-28 17:31 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-07-28 16:50 . 2009-07-28 16:49 -------- d-----w- c:\program files\uTorrent
2009-07-28 16:31 . 2009-07-28 16:31 -------- d-----w- c:\program files\QIP
2009-07-28 16:16 . 2009-07-28 16:16 274432 ----a-w- c:\windows\system32\imon.dll
2009-07-28 16:16 . 2009-07-28 16:16 502368 ----a-w- c:\windows\system32\drivers\amon.sys
2009-07-28 16:13 . 2009-07-28 15:07 -------- d-----w- c:\program files\EXPERTool
2009-07-28 16:11 . 2009-07-28 16:08 15600 ----a-w- c:\windows\gdrv.sys
2009-07-28 16:09 . 2009-07-28 16:09 315392 ----a-w- c:\windows\HideWin.exe
2009-07-28 14:56 . 2009-07-28 14:56 -------- d-----w- c:\program files\Realtek
2009-07-28 14:56 . 2009-07-28 14:56 -------- d-----w- c:\program files\DIFX
2009-07-28 14:49 . 2009-07-28 14:49 -------- d-----w- c:\program files\microsoft frontpage
2009-07-25 14:36 . 2009-07-25 14:36 2235107 ----a-w- C:\qip8092.exe
2009-07-17 19:04 . 2008-04-14 12:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-14 18:54 . 2009-07-29 12:31 2189856 ----a-w- c:\windows\system32\nvcuvid.dll
2009-07-14 18:54 . 2009-07-29 12:31 1706528 ----a-w- c:\windows\system32\nvcuvenc.dll
2009-07-14 18:54 . 2009-07-29 12:31 1597690 ----a-w- c:\windows\system32\nvdata.bin
2009-07-14 18:54 . 2009-07-28 16:14 485920 ----a-w- c:\windows\system32\nvudisp.exe
2009-07-14 18:54 . 2009-07-28 16:14 7741664 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2009-07-14 18:54 . 2009-07-28 16:13 868352 ----a-w- c:\windows\system32\nvapi.dll
2009-07-14 18:54 . 2009-07-28 16:13 5842816 ----a-w- c:\windows\system32\nv4_disp.dll
2009-07-14 18:54 . 2009-07-28 16:13 2002944 ----a-w- c:\windows\system32\nvcuda.dll
2009-07-14 18:54 . 2009-07-28 16:13 151552 ----a-w- c:\windows\system32\nvcodins.dll
2009-07-14 18:54 . 2009-07-28 16:13 151552 ----a-w- c:\windows\system32\nvcod.dll
2009-07-14 18:54 . 2009-07-28 16:13 10457088 ----a-w- c:\windows\system32\nvoglnt.dll
2009-07-14 11:34 . 2009-07-14 11:34 86016 ----a-w- c:\windows\system32\nvmctray.dll
2009-07-14 11:34 . 2009-07-14 11:34 8085504 ----a-w- c:\windows\system32\nvdispsr.dll
2009-07-14 11:34 . 2009-07-14 11:34 4923392 ----a-w- c:\windows\system32\nvdisps.dll
2009-07-14 11:34 . 2009-07-14 11:34 4640768 ----a-w- c:\windows\system32\nvgamesr.dll
2009-07-14 11:34 . 2009-07-14 11:34 458752 ----a-w- c:\windows\system32\nvmccssr.dll
2009-07-14 11:34 . 2009-07-14 11:34 3547136 ----a-w- c:\windows\system32\nvgames.dll
2009-07-14 11:34 . 2009-07-14 11:34 2854912 ----a-w- c:\windows\system32\nvmoblsr.dll
2009-07-14 11:34 . 2009-07-14 11:34 188416 ----a-w- c:\windows\system32\nvmccss.dll
2009-07-14 11:34 . 2009-07-14 11:34 168004 ----a-w- c:\windows\system32\nvsvc32.exe
2009-07-14 11:34 . 2009-07-14 11:34 143360 ----a-w- c:\windows\system32\nvcolor.exe
2009-07-14 11:34 . 2009-07-14 11:34 13877248 ----a-w- c:\windows\system32\nvcpl.dll
2009-07-14 11:34 . 2009-07-14 11:34 1286144 ----a-w- c:\windows\system32\nvmobls.dll
2009-07-14 11:34 . 2009-07-14 11:34 229376 ----a-w- c:\windows\system32\nvmccs.dll
2009-07-12 10:21 . 2008-04-14 12:00 233472 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-10 05:01 . 2009-07-28 16:08 485920 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-07-03 16:59 . 2008-04-14 12:00 915456 ------w- c:\windows\system32\wininet.dll
2009-06-25 08:27 . 2008-04-14 12:00 729088 ----a-w- c:\windows\system32\lsasrv.dll
2009-06-25 08:27 . 2008-04-14 12:00 56832 ----a-w- c:\windows\system32\secur32.dll
2009-06-25 08:27 . 2008-04-14 12:00 54272 ----a-w- c:\windows\system32\wdigest.dll
2009-06-25 08:27 . 2008-04-14 12:00 301568 ----a-w- c:\windows\system32\kerberos.dll
2009-06-25 08:27 . 2008-04-14 12:00 147456 ----a-w- c:\windows\system32\schannel.dll
2009-06-25 08:27 . 2008-04-14 12:00 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-06-24 11:18 . 2008-04-14 12:00 92928 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-06-16 14:40 . 2008-04-14 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-06-16 14:40 . 2008-04-14 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\opera\program\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\opera\program\plugins\ssldivx.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2009-07-28 921600]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2009-07-08 1657376]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-07-14 13877248]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-07-14 86016]
"RTBatteryMeter"="c:\program files\VibrateGameDeviceDriver\RFPIcon.exe" [2003-01-16 49152]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-08-27 185896]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-08-10 16384000]
"SkyTel"="SkyTel.EXE" - c:\windows\SkyTel.exe [2007-08-03 1826816]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Martin.MARTIN-PC\Nabˇdka Start\Programy\Po spuçtŘnˇ\
NHLR 09 Registration.lnk - c:\martin\EA Sports\NHL 09\Support\EAregister.exe [2008-12-12 4374792]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 10:05 356352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Martin\\KONAMI\\Pro Evolution Soccer 2009\\pes2009.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Martin\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Martin\\KONAMI\\Pro Evolution Soccer 2009\\CSP2009.exe"=
"c:\\Program Files\\SopCast\\SopCast.exe"=
"c:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"c:\\Martin\\Counter-Strike Source\\hl2.exe"=
"c:\\Program Files\\QIP\\qip.exe"=
"c:\\Martin\\Activision\\Call of Duty 2\\CoD2MP_s.exe"=
"c:\\Martin\\Football Superstars\\FSClientr.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Martin\\KONAMI\\Pro Evolution Soccer 2009\\GCP2009.exe"=
"c:\\Martin\\Rockstar Games\\Rockstar Games Social Club\\RGSCLauncher.exe"=
"c:\\Martin\\Rockstar Games\\Grand Theft Auto IV\\LaunchGTAIV.exe"=
"c:\\Martin\\Rockstar Games\\Grand Theft Auto IV\\GTAIV.exe"=
"c:\\Martin\\Codemasters\\DiRT\\DiRT.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Martin\\EA Sports\\FIFA 08\\FIFA08.exe"=
"c:\\Martin\\CS 1.6\\hl.exe"=

R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [5.8.2009 16:06 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5.8.2009 16:06 74480]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [4.8.2009 22:14 604416]
R3 DynCal;Dynamic Calibration Service;c:\windows\system32\drivers\DynCal.sys [12.9.2004 9:45 8320]
S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [5.8.2009 16:06 7408]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Obsah adresáře 'Naplánované úlohy'

2009-09-13 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:37]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
LSP: c:\windows\system32\imon.dll
TCP: {46F288FA-1A35-4FA6-AFC1-24F703C2B251} = 10.10.10.1
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
FF - ProfilePath - c:\documents and settings\Martin.MARTIN-PC\Data aplikací\Mozilla\Firefox\Profiles\o3uxdtne.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - plugin: c:\martin\Opera\program\plugins\npdsplay.dll
FF - plugin: c:\martin\Opera\program\plugins\npwmsdrm.dll
FF - plugin: c:\program files\Opera\program\plugins\npdivx32.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-13 20:30
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(812)
c:\program files\SUPERAntiSpyware\SASWINLO.dll

- - - - - - - > 'winlogon.exe'(324)
c:\program files\SUPERAntiSpyware\SASWINLO.dll

- - - - - - - > 'lsass.exe'(892)
c:\windows\system32\imon.dll
c:\program files\Eset\pr_imon.dll

- - - - - - - > 'explorer.exe'(2924)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2009-09-13 20:33
ComboFix-quarantined-files.txt 2009-09-13 18:33

Před spuštěním: Volných bajtů: 137 556 062 208
Po spuštění: Volných bajtů: 137 950 613 504

280 --- E O F --- 2009-09-09 07:23

Já tu nic špatného nevidím. Tedy, alespoň co se týče šmejdů a virů.

Odinstaluj ComboFix.
ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix[mezera]/u

takže jestli nejsou problémy,tak vyčisti systém CCleanerem
a použij i T-Cleaner
smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš->spustíš

(pozn.Pokud máš AVG, avast! nebo Aviru, před stažením T-Cleaneru a po dobu čištění deaktivuj AVG, avast! i Aviru (i rezidenty), následně T-Cleaner smaž a zapni si AVG,avast!, Aviru.)


Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni select all found, pak klik empty selected.
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.

ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache,
cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer,
Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Kdyby něco, tak se zastav.
Označ topic za vyřešený (zelená fajfka) a měj se.

a mam vycistit aj karantenu ??

Jasně