PC-HELP.CZ

Prosím o kontrolu logu.podezření na vir
Logfile of HijackThis v1.99.1
Scan saved at 10:25:01, on 24.9.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\csrss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\svchost.exe
C:\windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\windows\system32\spoolsv.exe
C:\windows\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\windows\system32\PnkBstrA.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\windows\Mixer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\SYSTEM32\ATIPTAXX.EXE
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\SaveSnap\SaveSnap.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\windows\System32\alg.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Totalcom\TOTALCMD.EXE
F:\Servis\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [AtiPTA] C:\WINDOWS\SYSTEM32\ATIPTAXX.EXE
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - Startup: SaveSnap.lnk = C:\Program Files\SaveSnap\SaveSnap.exe
O4 - Startup: Zástupce - dslmon.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International
O15 - Trusted Zone: http://download.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 2999884000
O17 - HKLM\System\CCS\Services\Tcpip\..\{5C2DCBD4-EA92-4ED4-AEF9-EB104227BF3F}: NameServer = 90.183.231.251 194.228.41.113
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\windows\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\windows\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

Odinstaluj si Spyware Doctor a Crawler Toolbar.
Pak si stáhni z mého podpisu novější HijackThis a pak udělej log z něho.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu a ten log z nového HJT.

Malwarebytes' Anti-Malware 1.41
Verze databáze: 2856
Windows 5.1.2600 Service Pack 3

24.9.2009 20:01:38
mbam-log-2009-09-24 (20-01-38).txt

Typ kontroly: Rychlá kontrola
Zkontrolované objekty: 86598
Uplynulý čas: 4 minute(s), 37 second(s)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované hodnoty registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
(Nebyly nalezeny žádné škodlivé položky)


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:15:24, on 24.9.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\windows\system32\PnkBstrA.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\windows\system32\svchost.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\windows\Mixer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\SYSTEM32\ATIPTAXX.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\SaveSnap\SaveSnap.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\windows\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [AtiPTA] C:\WINDOWS\SYSTEM32\ATIPTAXX.EXE
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: SaveSnap.lnk = C:\Program Files\SaveSnap\SaveSnap.exe
O4 - Startup: Zástupce - dslmon.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://download.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 2999884000
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\windows\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--
End of file - 7958 bytes

Odinstaluj si i Daemon Tools Toolbar.

Spusť HJT (HijackThis), vypni prohlížeče, odpoj se od internetu a fixni (spustit HJT, "Do a system scan only",
zatrhnout políčko před hodnotou, zmáčknout "Fix checked" a poté "Ano"):

O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
*****************************************************************************************************************************************
Vypni rezidentní štít antiviru (pokud máš tak i antispyware).
Stáhni si ComboFix (by sUBs)
nebo ComboFix (subs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

ComboFix 09-09-23.02 - Mac 24.09.2009 21:06.1.1 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1535.1108 [GMT 2:00]
Spuštěný z: c:\documents and settings\Mac\Plocha\ComboFix.exe
AV: avast! antivirus 4.8.1351 [VPS 090924-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Mac\Dokumenty\cc_20090924_100523.reg
c:\windows\regedit.com
c:\windows\system32\taskmgr.com

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-08-24 do 2009-09-24 )))))))))))))))))))))))))))))))
.

2009-09-24 18:10 . 2009-09-24 18:10 -------- d-----w- c:\program files\Trend Micro
2009-09-24 13:08 . 2003-12-11 09:15 626960 ----a-r- c:\windows\system32\hpvaut32.dll
2009-09-24 13:08 . 2003-12-11 09:15 487424 ----a-r- c:\windows\system32\hpvcp70.dll
2009-09-24 13:08 . 2003-12-11 09:15 44544 ----a-r- c:\windows\system32\MSXML4a.dll
2009-09-24 13:08 . 2003-12-11 09:15 344064 ----a-r- c:\windows\system32\hpvcr70.dll
2009-09-24 13:07 . 2009-09-24 13:08 -------- d-----w- c:\program files\Hewlett-Packard
2009-09-24 13:07 . 2009-09-24 13:07 -------- d-----w- c:\program files\HP
2009-09-24 12:54 . 2001-10-24 10:25 94720 -c--a-w- c:\windows\system32\dllcache\umaxud32.dll
2009-09-24 12:54 . 2001-10-24 10:25 94720 ----a-w- c:\windows\system32\umaxud32.dll
2009-09-24 12:54 . 2001-10-24 10:25 69632 -c--a-w- c:\windows\system32\dllcache\umaxu12.dll
2009-09-24 12:54 . 2001-10-24 10:25 69632 ----a-w- c:\windows\system32\umaxu12.dll
2009-09-24 12:54 . 2001-10-24 10:25 50688 -c--a-w- c:\windows\system32\dllcache\umaxscan.dll
2009-09-24 12:54 . 2001-10-24 10:25 50688 ----a-w- c:\windows\system32\umaxscan.dll
2009-09-24 12:54 . 2008-04-13 22:15 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2009-09-24 12:54 . 2008-04-13 22:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2009-09-24 08:20 . 1997-11-19 13:49 303616 ----a-w- c:\windows\IsUninst.exe
2009-09-24 08:03 . 2009-09-24 08:03 -------- d-----w- c:\program files\CCleaner
2009-09-24 07:18 . 2009-09-24 08:06 -------- d--h--w- c:\windows\$hf_mig$
2009-09-23 22:20 . 2009-09-23 22:20 -------- d-sh--w- c:\documents and settings\All Users\DRM
2009-09-23 22:16 . 2008-04-14 06:51 81920 ------w- c:\windows\system32\ieencode.dll
2009-09-23 22:11 . 2009-09-23 22:11 -------- d-----w- c:\documents and settings\All Users\Dokumenty
2009-09-23 20:42 . 2009-09-24 17:49 -------- d-----w- c:\documents and settings\All Users\Plocha
2009-09-23 14:34 . 2009-09-23 14:34 -------- d---a-w- c:\windows\rundll16.exe
2009-09-23 14:34 . 2009-09-23 14:34 -------- d---a-w- c:\windows\logo1_.exe
2009-09-23 12:29 . 2009-09-23 12:29 -------- d-----w- c:\documents and settings\All Users\Šablony
2009-09-23 12:23 . 2009-09-23 22:16 -------- d-----r- c:\documents and settings\All Users\Nabídka Start
2009-09-23 11:55 . 2009-09-24 17:51 -------- d-----w- c:\documents and settings\All Users\Data aplikací
2009-09-23 11:55 . 2009-09-23 22:20 -------- d-----w- c:\documents and settings\All Users
2009-09-23 10:44 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-23 10:44 . 2009-09-23 10:44 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-23 10:44 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-23 09:16 . 2009-09-23 09:16 -------- d---a-w- c:\windows\VDLL.DLL
2009-09-23 09:16 . 2009-09-23 09:16 -------- d---a-w- c:\windows\system32\runouce.exe
2009-09-23 09:16 . 2009-09-23 09:16 -------- d---a-w- c:\windows\RUNDL132.EXE
2009-09-23 09:16 . 2009-09-23 09:16 -------- d---a-w- c:\windows\logo_1.exe
2009-09-23 09:14 . 2009-09-23 09:14 632064 ----a-w- c:\windows\system32\msvcr80.dll
2009-09-23 09:14 . 2009-09-23 09:14 554240 ----a-w- c:\windows\system32\msvcp80.dll
2009-09-23 09:14 . 2009-09-23 09:14 34048 ----a-w- c:\windows\system32\eEmpty.exe
2009-09-23 09:14 . 2008-04-14 03:22 137216 ----a-w- c:\windows\system32\T.COM
2009-09-23 09:14 . 2008-04-14 03:22 147968 ----a-w- c:\windows\R.COM
2009-09-23 09:14 . 2009-09-23 09:14 -------- d-----w- c:\program files\Common Files\MicroWorld
2009-09-22 20:03 . 2009-09-22 20:03 139152 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-09-22 20:03 . 2009-09-22 20:03 111928 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-09-22 20:03 . 2009-09-22 20:03 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2009-09-22 20:03 . 2009-09-22 20:03 794408 ----a-w- c:\windows\system32\pbsvc.exe
2009-09-22 20:03 . 2009-09-22 20:03 -------- d-----w- c:\windows\system32\LogFiles
2009-09-22 19:51 . 2009-09-22 19:51 -------- d-sh--w- c:\windows\ftpcache
2009-09-22 19:50 . 2009-09-22 19:50 -------- d-----w- c:\program files\Activision
2009-09-20 21:12 . 2009-09-20 21:12 -------- d-----w- c:\program files\MSECache
2009-09-20 21:10 . 2009-09-20 21:14 -------- d--h--w- c:\windows\msdownld.tmp
2009-09-20 21:10 . 2009-09-22 20:04 -------- d-----w- c:\windows\Logs
2009-09-20 15:50 . 2009-09-20 15:50 -------- d-----w- c:\program files\MSXML 4.0
2009-09-20 15:40 . 2009-09-20 15:40 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2009-09-20 15:37 . 2009-09-24 18:53 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2009-09-20 15:37 . 2009-09-20 15:37 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-09-19 22:35 . 2009-09-19 22:35 -------- d-----w- c:\program files\Windows Sidebar
2009-09-19 22:04 . 2009-09-19 22:36 -------- d-----w- c:\program files\Nero
2009-09-19 22:03 . 2009-09-19 22:52 -------- d-----w- c:\program files\Common Files\Nero
2009-09-19 21:50 . 2009-09-19 21:51 -------- d-----w- c:\program files\MegaSpoof
2009-09-19 21:47 . 2009-09-20 15:35 -------- d-----w- c:\program files\SaveSnap
2009-09-19 21:38 . 2009-05-15 12:45 21192 ----a-w- c:\windows\system32\dopdfmn6.dll
2009-09-19 21:38 . 2009-05-15 12:45 18632 ----a-w- c:\windows\system32\dopdfmi6.dll
2009-09-19 21:37 . 2009-09-19 21:37 -------- d-----w- c:\program files\Softland
2009-09-19 21:37 . 2009-09-19 21:37 717296 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-09-19 21:35 . 2009-09-19 21:35 -------- d-----w- c:\program files\XviD
2009-09-19 21:35 . 2009-09-19 21:35 -------- d-----w- c:\program files\AviSynth 2.5
2009-09-19 21:35 . 2009-09-19 21:35 -------- d-----w- c:\program files\Gabest
2009-09-19 21:35 . 2009-09-19 21:35 -------- d-----w- c:\program files\AutoGK
2009-09-19 21:32 . 2009-09-19 21:32 -------- d-----w- c:\program files\Womble Multimedia
2009-09-19 21:26 . 2009-09-19 21:26 47360 ----a-w- c:\windows\system32\drivers\Pcouffin.sys
2009-09-19 21:26 . 2009-09-19 21:26 -------- d-----w- c:\program files\vso
2009-09-19 21:18 . 2009-09-04 01:36 299008 ----a-w- c:\windows\system32\TubeFinder.exe
2009-09-19 21:18 . 2009-06-19 17:51 119568 ----a-w- c:\windows\system32\VB6FR.DLL
2009-09-19 21:18 . 2009-06-19 17:51 101888 ----a-w- c:\windows\system32\VB6STKIT.DLL
2009-09-19 21:18 . 2009-09-19 21:23 -------- d-----w- c:\program files\Free FLV Converter
2009-09-19 21:18 . 2009-06-19 17:51 9728 ----a-w- c:\windows\system32\PCCLPFR.DLL
2009-09-19 21:18 . 2009-06-19 17:51 32768 ----a-w- c:\windows\system32\CMDLGFR.DLL
2009-09-19 21:18 . 2009-06-19 17:51 141312 ----a-w- c:\windows\system32\MSCMCFR.DLL
2009-09-18 20:56 . 2009-09-18 20:56 -------- d-----w- c:\documents and settings\Mac\Spyware Terminator
2009-09-18 20:54 . 2008-04-14 03:22 221184 ----a-w- c:\windows\system32\wmpns.dll
2009-09-18 20:18 . 2009-09-18 20:18 142592 ----a-w- c:\windows\system32\drivers\sp_rsdrv2.sys
2009-09-18 20:18 . 2009-09-18 20:20 -------- d-----w- c:\program files\Spyware Terminator
2009-09-18 17:45 . 2003-05-22 11:26 638976 ----a-w- c:\windows\system32\divx.dll
2009-09-18 17:45 . 2003-05-21 22:50 261632 ----a-w- c:\windows\system32\mcdvd_32.dll
2009-09-18 17:45 . 2002-08-19 23:41 413760 ----a-w- c:\windows\system32\mpg4c32.dll
2009-09-18 17:08 . 2009-09-18 17:08 -------- d-----w- c:\program files\uTorrent
2009-09-18 16:36 . 2009-09-18 16:36 472576 ----a-w- c:\windows\Radeon Omega Drivers v4.8.442 Uninstall.exe
2009-09-18 16:36 . 2009-09-18 16:36 -------- d-----w- c:\program files\Radeon Omega Drivers
2009-09-17 20:07 . 2009-09-17 20:07 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-09-17 20:07 . 2009-09-17 20:07 -------- d-----w- c:\program files\Java
2009-09-16 20:29 . 2009-09-16 20:29 -------- d-----w- c:\program files\Common Files\Adobe Systems Shared
2009-09-16 20:28 . 2009-09-16 20:29 -------- d-----w- c:\program files\Common Files\Adobe
2009-09-16 20:09 . 2009-09-16 20:09 -------- d-----w- c:\program files\Maxthon
2009-09-15 20:38 . 2009-09-18 20:02 -------- d-----w- c:\program files\Common Files\AVSMedia
2009-09-15 20:38 . 2009-09-15 20:38 -------- d-----w- c:\windows\system32\drivers\umdf
2009-09-15 20:37 . 2008-08-13 09:22 974848 ----a-w- c:\windows\system32\mfc70.dll
2009-09-15 20:37 . 2008-08-13 09:22 487424 ----a-w- c:\windows\system32\msvcp70.dll
2009-09-15 20:37 . 2008-08-13 09:22 344064 ----a-w- c:\windows\system32\msvcr70.dll
2009-09-15 20:37 . 2008-08-13 09:22 1700352 ----a-w- c:\windows\system32\GdiPlus.dll
2009-09-15 20:37 . 2008-08-13 09:22 24576 ----a-w- c:\windows\system32\msxml3a.dll
2009-09-15 20:36 . 2009-09-22 19:37 -------- d-----w- c:\program files\FreeRapid-0.82
2009-09-15 20:04 . 2006-10-26 17:56 32592 ----a-w- c:\windows\system32\msonpmon.dll
2009-09-15 20:03 . 2009-09-15 20:03 -------- d-----w- c:\program files\Microsoft Works
2009-09-15 20:02 . 2009-09-15 20:02 -------- d-----w- c:\program files\Microsoft.NET
2009-09-15 20:00 . 2009-09-15 20:00 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2009-09-15 20:00 . 2009-09-15 20:00 -------- d-----w- c:\windows\SHELLNEW
2009-09-15 19:59 . 2009-09-15 19:59 -------- d-----r- C:\MSOCache
2009-09-15 19:56 . 2009-09-15 19:56 -------- d-----w- c:\documents and settings\Mac\Panel
2009-09-15 19:56 . 2009-09-15 19:56 -------- d-----w- c:\documents and settings\Mac\Ikony
2009-09-15 19:51 . 2009-09-15 19:52 -------- d-----w- c:\documents and settings\Mac\Hry
2009-09-15 10:07 . 2009-09-15 10:07 -------- d-----w- c:\program files\Totalcom
2009-09-15 09:41 . 2009-09-15 09:41 -------- d-----w- c:\program files\Yahoo!
2009-09-15 09:15 . 2009-09-15 09:15 -------- d-----w- c:\program files\GRETECH
2009-09-15 09:03 . 2009-09-15 09:03 -------- d-----w- c:\program files\MSBuild
2009-09-15 09:00 . 2009-09-16 20:34 -------- d-----w- c:\windows\system32\XPSViewer
2009-09-15 09:00 . 2009-09-15 09:00 -------- d-----w- c:\program files\Reference Assemblies
2009-09-15 09:00 . 2006-06-29 11:07 14048 ------w- c:\windows\system32\spmsg2.dll
2009-09-15 08:48 . 2009-09-15 08:48 -------- d-sh--w- c:\documents and settings\Mac\IECompatCache
2009-09-15 08:48 . 2009-09-15 08:48 -------- d-sh--w- c:\documents and settings\Mac\PrivacIE
2009-09-15 08:36 . 2009-09-15 08:36 -------- d-sh--w- c:\documents and settings\Mac\IETldCache
2009-09-15 08:31 . 2009-08-07 08:48 100352 -c----w- c:\windows\system32\dllcache\iecompat.dll
2009-09-15 08:31 . 2009-09-16 20:30 -------- d-----w- c:\windows\ie8updates
2009-09-15 08:31 . 2009-07-19 16:46 11067392 -c----w- c:\windows\system32\dllcache\ieframe.dll
2009-09-15 08:31 . 2009-07-03 16:59 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-09-15 08:31 . 2009-07-03 16:59 594432 -c----w- c:\windows\system32\dllcache\msfeeds.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-22 20:07 . 2009-09-14 22:37 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-09-18 16:32 . 2009-09-14 22:54 -------- d-----w- c:\program files\ATI Technologies
2009-09-16 20:37 . 2001-10-25 12:00 79242 ----a-w- c:\windows\system32\perfc005.dat
2009-09-16 20:37 . 2001-10-25 12:00 432278 ----a-w- c:\windows\system32\perfh005.dat
2009-09-15 09:37 . 2009-09-15 09:37 -------- d-----w- c:\program files\Alwil Software
2009-09-14 23:03 . 2009-09-14 23:03 0 ----a-w- c:\windows\ativpsrm.bin
2009-09-14 22:37 . 2009-09-14 22:37 23 ----a-w- c:\windows\system32\drivers\adidsl.cfg
2009-09-14 22:37 . 2009-09-14 22:37 -------- d-----w- c:\program files\SAGEM
2009-09-14 22:37 . 2009-09-14 22:26 -------- d-----w- c:\program files\Common Files\InstallShield
2009-09-14 22:35 . 2009-09-14 22:35 -------- d-----w- c:\program files\C-Media
2009-09-14 22:28 . 2009-09-14 22:28 -------- d-----w- c:\program files\DIFX
2009-09-14 22:21 . 2009-09-14 22:21 -------- d-----w- c:\program files\microsoft frontpage
2009-09-14 22:17 . 2009-09-14 22:17 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2009-09-04 15:44 . 2009-09-20 21:14 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2009-09-04 15:44 . 2009-09-20 21:14 238936 ----a-w- c:\windows\system32\xactengine3_5.dll
2009-09-04 15:44 . 2009-09-20 21:14 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2009-09-04 15:29 . 2009-09-20 21:14 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2009-09-04 15:29 . 2009-09-20 21:14 235344 ----a-w- c:\windows\system32\d3dx11_42.dll
2009-09-04 15:29 . 2009-09-20 21:14 5501792 ----a-w- c:\windows\system32\d3dcsx_42.dll
2009-09-04 15:29 . 2009-09-20 21:14 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2009-09-04 15:29 . 2009-09-20 21:14 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2009-08-17 16:10 . 2009-09-15 09:37 1279456 ----a-w- c:\windows\system32\aswBoot.exe
2009-08-17 16:06 . 2009-09-15 09:37 93392 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-08-17 16:06 . 2009-09-15 09:37 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-08-17 16:05 . 2009-09-15 09:37 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-08-17 16:05 . 2009-09-15 09:37 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-08-17 16:04 . 2009-09-15 09:37 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-08-17 16:04 . 2009-09-15 09:37 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-08-17 16:03 . 2009-09-15 09:37 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-08-17 16:02 . 2009-09-15 09:37 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-08-05 09:01 . 2004-08-17 13:49 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-07-29 04:36 . 2004-08-17 13:49 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-07-29 04:36 . 2001-10-25 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-07-17 19:04 . 2004-08-17 13:49 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-12 10:21 . 2004-08-17 13:49 233472 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-03 16:59 . 2004-08-17 13:49 915456 ----a-w- c:\windows\system32\wininet.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2009-09-18 3055616]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-07-24 490952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-08-17 81000]
"AtiPTA"="c:\windows\SYSTEM32\ATIPTAXX.EXE" [2006-02-22 344064]
"HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 241664]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2004-03-04 172032]
"C-Media Mixer"="Mixer.exe" - c:\windows\mixer.exe [2002-07-12 1581056]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Mac\Nabˇdka Start\Programy\Po spuçtŘnˇ\
SaveSnap.lnk - c:\program files\SaveSnap\SaveSnap.exe [2009-9-19 1264128]
Z stupce - dslmon.lnk - c:\program files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2009-9-15 962663]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Java\\jre6\\launch4j-tmp\\frd.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=
"c:\\Program Files\\Maxthon\\Maxthon.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Activision\\Wolfenstein\\MP\\Wolf2MP.exe"=
"c:\\Program Files\\Activision\\Wolfenstein\\MP\\Wolf2MPLite.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [15.9.2009 11:37 114768]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [18.9.2009 22:18 142592]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [15.9.2009 11:37 20560]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: microsoft.com\*.update
Trusted Zone: microsoft.com\*.windowsupdate
Trusted Zone: microsoft.com\update
Trusted Zone: windowsupdate.com
Trusted Zone: windowsupdate.com\download
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-2kv4.8.442 - c:\windows\Radeon Omega Drivers v4.8.442



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-24 21:09
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(696)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2009-09-24 21:10
ComboFix-quarantined-files.txt 2009-09-24 19:10

Před spuštěním: Volných bajtů: 30 099 312 640
Po spuštění: Volných bajtů: 30 065 946 624

271 --- E O F --- 2009-09-24 08:06

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok).
Zkopíruj do něj následující celý text označený zeleně:

File::
c:\windows\system32\eEmpty.exe
c:\windows\msdownld.tmp

Folder::
c:\windows\rundll16.exe
c:\windows\logo1_.exe
c:\windows\VDLL.DLL
c:\windows\system32\runouce.exe
c:\windows\RUNDL132.EXE
c:\windows\logo_1.exe
c:\program files\DAEMON Tools Toolbar




Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.


Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe
a když se oba soubory překryjí, skript upusť.


- Automaticky se spustí ComboFix, oprava může trvat i déle než 10 minut. ! Nech ComboFix dokončit svou práci !
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT a popiš chování počítače

ComboFix 09-09-25.01 - Mac 25.09.2009 22:32.3.1 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1535.1025 [GMT 2:00]
Spuštěný z: c:\documents and settings\Mac\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Mac\Plocha\CFScript.txt
AV: avast! antivirus 4.8.1351 [VPS 090925-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!

FILE ::
"c:\windows\msdownld.tmp"
"c:\windows\system32\eEmpty.exe"
.

((((((((((((((((((((((((( Soubory vytvořené od 2009-08-25 do 2009-09-25 )))))))))))))))))))))))))))))))
.

2009-09-24 23:06 . 2009-09-24 23:06 -------- d-----w- c:\program files\Total Uninstall 4
2009-09-24 22:51 . 2009-09-24 22:51 -------- d-----w- c:\documents and settings\Mac\WINDOWS
2009-09-24 22:48 . 2009-09-24 22:48 -------- d-----w- c:\program files\EDDICA
2009-09-24 20:07 . 2001-10-25 12:00 4952 ----a-r- C:\Bootfont.bin
2009-09-24 18:10 . 2009-09-24 18:10 -------- d-----w- c:\program files\Trend Micro
2009-09-24 13:08 . 2003-12-11 09:15 626960 ----a-r- c:\windows\system32\hpvaut32.dll
2009-09-24 13:08 . 2003-12-11 09:15 487424 ----a-r- c:\windows\system32\hpvcp70.dll
2009-09-24 13:08 . 2003-12-11 09:15 44544 ----a-r- c:\windows\system32\MSXML4a.dll
2009-09-24 13:08 . 2003-12-11 09:15 344064 ----a-r- c:\windows\system32\hpvcr70.dll
2009-09-24 13:07 . 2009-09-24 13:08 -------- d-----w- c:\program files\Hewlett-Packard
2009-09-24 13:07 . 2009-09-24 13:07 -------- d-----w- c:\program files\HP
2009-09-24 12:54 . 2001-10-24 10:25 94720 -c--a-w- c:\windows\system32\dllcache\umaxud32.dll
2009-09-24 12:54 . 2001-10-24 10:25 94720 ----a-w- c:\windows\system32\umaxud32.dll
2009-09-24 12:54 . 2001-10-24 10:25 69632 -c--a-w- c:\windows\system32\dllcache\umaxu12.dll
2009-09-24 12:54 . 2001-10-24 10:25 69632 ----a-w- c:\windows\system32\umaxu12.dll
2009-09-24 12:54 . 2001-10-24 10:25 50688 -c--a-w- c:\windows\system32\dllcache\umaxscan.dll
2009-09-24 12:54 . 2001-10-24 10:25 50688 ----a-w- c:\windows\system32\umaxscan.dll
2009-09-24 12:54 . 2008-04-13 22:15 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2009-09-24 12:54 . 2008-04-13 22:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2009-09-24 08:20 . 1997-11-19 13:49 303616 ----a-w- c:\windows\IsUninst.exe
2009-09-24 08:03 . 2009-09-24 08:03 -------- d-----w- c:\program files\CCleaner
2009-09-24 07:18 . 2009-09-24 08:06 -------- d--h--w- c:\windows\$hf_mig$
2009-09-23 22:20 . 2009-09-23 22:20 -------- d-sh--w- c:\documents and settings\All Users\DRM
2009-09-23 22:16 . 2008-04-14 06:51 81920 ------w- c:\windows\system32\ieencode.dll
2009-09-23 22:11 . 2009-09-23 22:11 -------- d-----w- c:\documents and settings\All Users\Dokumenty
2009-09-23 20:42 . 2009-09-25 20:08 -------- d-----w- c:\documents and settings\All Users\Plocha
2009-09-23 12:29 . 2009-09-23 12:29 -------- d-----w- c:\documents and settings\All Users\Šablony
2009-09-23 12:23 . 2009-09-23 22:16 -------- d-----r- c:\documents and settings\All Users\Nabídka Start
2009-09-23 11:55 . 2009-09-24 23:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací
2009-09-23 11:55 . 2009-09-23 22:20 -------- d-----w- c:\documents and settings\All Users
2009-09-23 10:44 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-23 10:44 . 2009-09-23 10:44 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-23 10:44 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-23 09:14 . 2009-09-23 09:14 632064 ----a-w- c:\windows\system32\msvcr80.dll
2009-09-23 09:14 . 2009-09-23 09:14 554240 ----a-w- c:\windows\system32\msvcp80.dll
2009-09-23 09:14 . 2008-04-14 03:22 137216 ----a-w- c:\windows\system32\T.COM
2009-09-23 09:14 . 2008-04-14 03:22 147968 ----a-w- c:\windows\R.COM
2009-09-23 09:14 . 2009-09-23 09:14 -------- d-----w- c:\program files\Common Files\MicroWorld
2009-09-22 20:03 . 2009-09-22 20:03 139152 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-09-22 20:03 . 2009-09-22 20:03 111928 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-09-22 20:03 . 2009-09-22 20:03 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2009-09-22 20:03 . 2009-09-22 20:03 794408 ----a-w- c:\windows\system32\pbsvc.exe
2009-09-22 20:03 . 2009-09-22 20:03 -------- d-----w- c:\windows\system32\LogFiles
2009-09-22 19:51 . 2009-09-22 19:51 -------- d-sh--w- c:\windows\ftpcache
2009-09-22 19:50 . 2009-09-22 19:50 -------- d-----w- c:\program files\Activision
2009-09-20 21:12 . 2009-09-20 21:12 -------- d-----w- c:\program files\MSECache
2009-09-20 21:10 . 2009-09-20 21:14 -------- d--h--w- c:\windows\msdownld.tmp
2009-09-20 21:10 . 2009-09-22 20:04 -------- d-----w- c:\windows\Logs
2009-09-20 15:50 . 2009-09-20 15:50 -------- d-----w- c:\program files\MSXML 4.0
2009-09-20 15:40 . 2009-09-20 15:40 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2009-09-19 22:35 . 2009-09-19 22:35 -------- d-----w- c:\program files\Windows Sidebar
2009-09-19 22:04 . 2009-09-19 22:36 -------- d-----w- c:\program files\Nero
2009-09-19 22:03 . 2009-09-19 22:52 -------- d-----w- c:\program files\Common Files\Nero
2009-09-19 21:50 . 2009-09-19 21:51 -------- d-----w- c:\program files\MegaSpoof
2009-09-19 21:47 . 2009-09-20 15:35 -------- d-----w- c:\program files\SaveSnap
2009-09-19 21:38 . 2009-05-15 12:45 21192 ----a-w- c:\windows\system32\dopdfmn6.dll
2009-09-19 21:38 . 2009-05-15 12:45 18632 ----a-w- c:\windows\system32\dopdfmi6.dll
2009-09-19 21:37 . 2009-09-19 21:37 -------- d-----w- c:\program files\Softland
2009-09-19 21:37 . 2009-09-19 21:37 717296 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-09-19 21:35 . 2009-09-19 21:35 -------- d-----w- c:\program files\XviD
2009-09-19 21:35 . 2009-09-19 21:35 -------- d-----w- c:\program files\AviSynth 2.5
2009-09-19 21:35 . 2009-09-19 21:35 -------- d-----w- c:\program files\Gabest
2009-09-19 21:35 . 2009-09-19 21:35 -------- d-----w- c:\program files\AutoGK
2009-09-19 21:32 . 2009-09-19 21:32 -------- d-----w- c:\program files\Womble Multimedia
2009-09-19 21:26 . 2009-09-19 21:26 47360 ----a-w- c:\windows\system32\drivers\Pcouffin.sys
2009-09-19 21:26 . 2009-09-19 21:26 -------- d-----w- c:\program files\vso
2009-09-19 21:18 . 2009-09-04 01:36 299008 ----a-w- c:\windows\system32\TubeFinder.exe
2009-09-19 21:18 . 2009-06-19 17:51 119568 ----a-w- c:\windows\system32\VB6FR.DLL
2009-09-19 21:18 . 2009-06-19 17:51 101888 ----a-w- c:\windows\system32\VB6STKIT.DLL
2009-09-19 21:18 . 2009-09-19 21:23 -------- d-----w- c:\program files\Free FLV Converter
2009-09-19 21:18 . 2009-06-19 17:51 9728 ----a-w- c:\windows\system32\PCCLPFR.DLL
2009-09-19 21:18 . 2009-06-19 17:51 32768 ----a-w- c:\windows\system32\CMDLGFR.DLL
2009-09-19 21:18 . 2009-06-19 17:51 141312 ----a-w- c:\windows\system32\MSCMCFR.DLL
2009-09-18 20:56 . 2009-09-18 20:56 -------- d-----w- c:\documents and settings\Mac\Spyware Terminator
2009-09-18 20:54 . 2008-04-14 03:22 221184 ----a-w- c:\windows\system32\wmpns.dll
2009-09-18 20:18 . 2009-09-18 20:18 142592 ----a-w- c:\windows\system32\drivers\sp_rsdrv2.sys
2009-09-18 20:18 . 2009-09-18 20:20 -------- d-----w- c:\program files\Spyware Terminator
2009-09-18 17:45 . 2003-05-22 11:26 638976 ----a-w- c:\windows\system32\divx.dll
2009-09-18 17:45 . 2003-05-21 22:50 261632 ----a-w- c:\windows\system32\mcdvd_32.dll
2009-09-18 17:45 . 2002-08-19 23:41 413760 ----a-w- c:\windows\system32\mpg4c32.dll
2009-09-18 17:08 . 2009-09-18 17:08 -------- d-----w- c:\program files\uTorrent
2009-09-18 16:36 . 2009-09-18 16:36 472576 ----a-w- c:\windows\Radeon Omega Drivers v4.8.442 Uninstall.exe
2009-09-18 16:36 . 2009-09-18 16:36 -------- d-----w- c:\program files\Radeon Omega Drivers
2009-09-17 20:07 . 2009-09-17 20:07 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-09-17 20:07 . 2009-09-17 20:07 -------- d-----w- c:\program files\Java
2009-09-16 20:29 . 2009-09-16 20:29 -------- d-----w- c:\program files\Common Files\Adobe Systems Shared
2009-09-16 20:28 . 2009-09-16 20:29 -------- d-----w- c:\program files\Common Files\Adobe
2009-09-16 20:09 . 2009-09-16 20:09 -------- d-----w- c:\program files\Maxthon
2009-09-15 20:38 . 2009-09-18 20:02 -------- d-----w- c:\program files\Common Files\AVSMedia
2009-09-15 20:38 . 2009-09-15 20:38 -------- d-----w- c:\windows\system32\drivers\umdf
2009-09-15 20:37 . 2008-08-13 09:22 974848 ----a-w- c:\windows\system32\mfc70.dll
2009-09-15 20:37 . 2008-08-13 09:22 487424 ----a-w- c:\windows\system32\msvcp70.dll
2009-09-15 20:37 . 2008-08-13 09:22 344064 ----a-w- c:\windows\system32\msvcr70.dll
2009-09-15 20:37 . 2008-08-13 09:22 1700352 ----a-w- c:\windows\system32\GdiPlus.dll
2009-09-15 20:37 . 2008-08-13 09:22 24576 ----a-w- c:\windows\system32\msxml3a.dll
2009-09-15 20:36 . 2009-09-22 19:37 -------- d-----w- c:\program files\FreeRapid-0.82
2009-09-15 20:04 . 2006-10-26 17:56 32592 ----a-w- c:\windows\system32\msonpmon.dll
2009-09-15 20:03 . 2009-09-15 20:03 -------- d-----w- c:\program files\Microsoft Works
2009-09-15 20:02 . 2009-09-15 20:02 -------- d-----w- c:\program files\Microsoft.NET
2009-09-15 20:00 . 2009-09-15 20:00 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2009-09-15 20:00 . 2009-09-15 20:00 -------- d-----w- c:\windows\SHELLNEW
2009-09-15 19:59 . 2009-09-15 19:59 -------- d-----r- C:\MSOCache
2009-09-15 19:56 . 2009-09-15 19:56 -------- d-----w- c:\documents and settings\Mac\Panel
2009-09-15 19:56 . 2009-09-15 19:56 -------- d-----w- c:\documents and settings\Mac\Ikony
2009-09-15 19:51 . 2009-09-15 19:52 -------- d-----w- c:\documents and settings\Mac\Hry
2009-09-15 10:07 . 2009-09-15 10:07 -------- d-----w- c:\program files\Totalcom
2009-09-15 09:41 . 2009-09-15 09:41 -------- d-----w- c:\program files\Yahoo!
2009-09-15 09:15 . 2009-09-15 09:15 -------- d-----w- c:\program files\GRETECH
2009-09-15 09:03 . 2009-09-15 09:03 -------- d-----w- c:\program files\MSBuild
2009-09-15 09:00 . 2009-09-16 20:34 -------- d-----w- c:\windows\system32\XPSViewer
2009-09-15 09:00 . 2009-09-15 09:00 -------- d-----w- c:\program files\Reference Assemblies
2009-09-15 09:00 . 2006-06-29 11:07 14048 ------w- c:\windows\system32\spmsg2.dll
2009-09-15 08:48 . 2009-09-15 08:48 -------- d-sh--w- c:\documents and settings\Mac\IECompatCache
2009-09-15 08:48 . 2009-09-15 08:48 -------- d-sh--w- c:\documents and settings\Mac\PrivacIE
2009-09-15 08:36 . 2009-09-15 08:36 -------- d-sh--w- c:\documents and settings\Mac\IETldCache
2009-09-15 08:31 . 2009-08-07 08:48 100352 -c----w- c:\windows\system32\dllcache\iecompat.dll
2009-09-15 08:31 . 2009-09-16 20:30 -------- d-----w- c:\windows\ie8updates
2009-09-15 08:31 . 2009-07-19 16:46 11067392 -c----w- c:\windows\system32\dllcache\ieframe.dll
2009-09-15 08:31 . 2009-07-03 16:59 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-09-15 08:31 . 2009-07-03 16:59 594432 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2009-09-15 08:31 . 2009-07-03 16:59 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2009-09-15 08:31 . 2009-07-03 16:59 1985536 -c----w- c:\windows\system32\dllcache\iertutil.dll
2009-09-15 08:31 . 2009-07-03 16:59 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2009-09-15 08:31 . 2009-09-15 08:31 -------- dc-h--w- c:\windows\ie8
2009-09-15 08:02 . 2009-06-21 21:48 153088 -c----w- c:\windows\system32\dllcache\triedit.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-22 20:07 . 2009-09-14 22:37 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-09-18 16:32 . 2009-09-14 22:54 -------- d-----w- c:\program files\ATI Technologies
2009-09-16 20:37 . 2001-10-25 12:00 79242 ----a-w- c:\windows\system32\perfc005.dat
2009-09-16 20:37 . 2001-10-25 12:00 432278 ----a-w- c:\windows\system32\perfh005.dat
2009-09-15 09:37 . 2009-09-15 09:37 -------- d-----w- c:\program files\Alwil Software
2009-09-14 23:03 . 2009-09-14 23:03 0 ----a-w- c:\windows\ativpsrm.bin
2009-09-14 22:37 . 2009-09-14 22:37 23 ----a-w- c:\windows\system32\drivers\adidsl.cfg
2009-09-14 22:37 . 2009-09-14 22:37 -------- d-----w- c:\program files\SAGEM
2009-09-14 22:37 . 2009-09-14 22:26 -------- d-----w- c:\program files\Common Files\InstallShield
2009-09-14 22:35 . 2009-09-14 22:35 -------- d-----w- c:\program files\C-Media
2009-09-14 22:28 . 2009-09-14 22:28 -------- d-----w- c:\program files\DIFX
2009-09-14 22:21 . 2009-09-14 22:21 -------- d-----w- c:\program files\microsoft frontpage
2009-09-14 22:17 . 2009-09-14 22:17 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2009-09-04 15:44 . 2009-09-20 21:14 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2009-09-04 15:44 . 2009-09-20 21:14 238936 ----a-w- c:\windows\system32\xactengine3_5.dll
2009-09-04 15:44 . 2009-09-20 21:14 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2009-09-04 15:29 . 2009-09-20 21:14 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2009-09-04 15:29 . 2009-09-20 21:14 235344 ----a-w- c:\windows\system32\d3dx11_42.dll
2009-09-04 15:29 . 2009-09-20 21:14 5501792 ----a-w- c:\windows\system32\d3dcsx_42.dll
2009-09-04 15:29 . 2009-09-20 21:14 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2009-09-04 15:29 . 2009-09-20 21:14 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2009-08-17 16:10 . 2009-09-15 09:37 1279456 ----a-w- c:\windows\system32\aswBoot.exe
2009-08-17 16:06 . 2009-09-15 09:37 93392 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-08-17 16:06 . 2009-09-15 09:37 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-08-17 16:05 . 2009-09-15 09:37 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-08-17 16:05 . 2009-09-15 09:37 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-08-17 16:04 . 2009-09-15 09:37 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-08-17 16:04 . 2009-09-15 09:37 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-08-17 16:03 . 2009-09-15 09:37 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-08-17 16:02 . 2009-09-15 09:37 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-08-05 09:01 . 2004-08-17 13:49 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-07-29 04:36 . 2004-08-17 13:49 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-07-29 04:36 . 2001-10-25 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-07-17 19:04 . 2004-08-17 13:49 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-12 10:21 . 2004-08-17 13:49 233472 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-03 16:59 . 2004-08-17 13:49 915456 ------w- c:\windows\system32\wininet.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-09-24_19.10.01 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-09-24 20:45 . 2009-09-24 20:45 16384 c:\windows\Temp\Perflib_Perfdata_e98.dat
+ 2009-09-24 19:21 . 2009-09-24 19:21 16384 c:\windows\Temp\Perflib_Perfdata_5f4.dat
+ 2001-07-14 15:32 . 2001-07-14 15:32 69632 c:\windows\setupupd\temp\wsdueng.dll
+ 2009-09-24 20:06 . 2009-09-24 20:06 12900 c:\windows\setupupd\dudrvs\4541876\hwcomp.dat
+ 2009-09-24 20:06 . 2002-10-09 07:38 32768 c:\windows\setupupd\dudrvs\4541876\CMNPROP.DLL
+ 2009-09-24 20:06 . 2002-11-19 13:46 39104 c:\windows\setupupd\dudrvs\4541876\cmijack.dat
+ 2009-09-24 20:06 . 2002-11-19 13:43 22178 c:\windows\setupupd\dudrvs\4541876\cmaudio.dat
+ 2009-09-24 20:06 . 2000-10-20 16:28 765952 c:\windows\setupupd\dudrvs\4541876\CRLDS3D.DLL
+ 2009-09-24 20:06 . 2002-07-11 09:24 139264 c:\windows\setupupd\dudrvs\4541876\CMUNINST.EXE
+ 2009-09-24 20:06 . 2002-07-11 10:13 135168 c:\windows\setupupd\dudrvs\4541876\CMUNINST.DAT
+ 2009-09-24 20:06 . 2002-11-18 13:51 377358 c:\windows\setupupd\dudrvs\4541876\cmaudio.sys
+ 2009-09-24 20:06 . 2001-11-23 10:08 712704 c:\windows\setupupd\dudrvs\4541876\AUDIO3D.DLL
+ 2009-09-24 20:06 . 2002-10-15 16:00 1818624 c:\windows\setupupd\dudrvs\4541876\MIXER.EXE
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2009-09-18 3055616]
"Total Uninstall Agent"="c:\program files\Total Uninstall 4\TuAgent.exe" [2007-06-08 595000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-08-17 81000]
"AtiPTA"="c:\windows\SYSTEM32\ATIPTAXX.EXE" [2006-02-22 344064]
"HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 241664]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2004-03-04 172032]
"C-Media Mixer"="Mixer.exe" - c:\windows\mixer.exe [2002-07-12 1581056]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Mac\Nabˇdka Start\Programy\Po spuçtŘnˇ\
SaveSnap.lnk - c:\program files\SaveSnap\SaveSnap.exe [2009-9-19 1264128]
Z stupce - dslmon.lnk - c:\program files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2009-9-15 962663]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Java\\jre6\\launch4j-tmp\\frd.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=
"c:\\Program Files\\Maxthon\\Maxthon.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Activision\\Wolfenstein\\MP\\Wolf2MP.exe"=
"c:\\Program Files\\Activision\\Wolfenstein\\MP\\Wolf2MPLite.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [15.9.2009 11:37 114768]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [18.9.2009 22:18 142592]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [15.9.2009 11:37 20560]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: microsoft.com\*.update
Trusted Zone: microsoft.com\*.windowsupdate
Trusted Zone: microsoft.com\update
Trusted Zone: windowsupdate.com
Trusted Zone: windowsupdate.com\download
TCP: {5C2DCBD4-EA92-4ED4-AEF9-EB104227BF3F} = 90.183.231.251 194.228.41.113
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-25 22:34
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(696)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(3756)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2009-09-25 22:35
ComboFix-quarantined-files.txt 2009-09-25 20:35
ComboFix2.txt 2009-09-25 20:22
ComboFix3.txt 2009-09-24 19:10

Před spuštěním: Volných bajtů: 30 857 842 688
Po spuštění: Volných bajtů: 30 847 569 920

291 --- E O F --- 2009-09-24 08:06

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:36:49, on 25.9.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\windows\system32\spoolsv.exe
C:\windows\Mixer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\SYSTEM32\ATIPTAXX.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\windows\system32\PnkBstrA.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\windows\system32\svchost.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\HP\hpcoretech\comp\hpdarc.exe
C:\Program Files\Total Uninstall 4\TuAgent.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files\Maxthon\Maxthon.exe
C:\windows\system32\wscntfy.exe
C:\windows\explorer.exe
C:\windows\system32\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll (file missing)
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [AtiPTA] C:\WINDOWS\SYSTEM32\ATIPTAXX.EXE
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [Total Uninstall Agent] "C:\Program Files\Total Uninstall 4\TuAgent.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: SaveSnap.lnk = C:\Program Files\SaveSnap\SaveSnap.exe
O4 - Startup: Zástupce - dslmon.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://download.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 2999884000
O17 - HKLM\System\CCS\Services\Tcpip\..\{5C2DCBD4-EA92-4ED4-AEF9-EB104227BF3F}: NameServer = 90.183.231.251 194.228.41.113
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\windows\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--
End of file - 7077 bytes
V PC absence konzoly pro zotavení, absence windows update ,ve startu v systémových nástrojích jen internet explorer bez doplňků a v C: chybí složka bot.ini

Konzola pro zotavení se běžně neinstaluje s OS, systémové nástroje taky na zvolení s možností doinstalování a zvolení ve vlastnostech Hlavního Panelu. Všechno to je součást instalačního CD.
ComboFix nastavuje některé hodnoty do výchozích, proto tam je jen IE.
Windows Update ti chybí kde? Toto máš v Oblíbených položkách: Trusted Zone: http://download.windowsupdate.com, Trusted Zone: http://*.windowsupdate.com, podle všeho přes virtuální disk.
Soubor boot.ini nebo boot.bak není ani jako skrytý a systémový soubor?

Pokud jedeš na virtuální disky, soubor boot.ini na C ani nebude. To samý s WU, protože i to máš nastavený jen pro virtuální disk. Hlásí ti při restartu, že boot.ini chybí a že se spouští z C:\Windows?
*****************************************************************************************************************************************
Spusť HJT (HijackThis), vypni prohlížeče, odpoj se od internetu a fixni (spustit HJT, "Do a system scan only",
zatrhnout políčko před hodnotou, zmáčknout "Fix checked" a poté "Ano"):

O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll (file missing)
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"

V PC žádné virtuální disky nemám.Měl jsem tam jen přes daemon jednu hru.Ten jsem si odinstaloval, jak jsi napsal.Chtěl jsem si doinstalovat konzoli pro zotavení s CD a zahlásilo mě to že nemám bot.ini.Nemám ho tam ,ani bak ani skrytý.WU jsem měl vždycky v start/všechny programy.Není tam.V start/všchny programy/systémové nástroje jsem míval i vytvořit kontrolní bod apod.Taky tam není.Jinak mě všechno běží.Při startu nic nehlásí

Při spuštění PC nevyžaduje tedy soubor boot.ini? Nouzový režim ti funguje?

Soubor boot.ini jsem ti přiložil. Extrahuj ho do "C:\".
Zkontroluj nastavení WU z Ovládacích panelů a tam zkontroluj a nastav si i Hlavní panel.
WU zkus z IE8, jestli najde nějakou chybu v nastavení aktualizací.

Podívej, jestli máš v Všechny programy složku Příslušenství, jestli systémové nástroje nejsou tam.

Instalace Konzoly:
-Vlož instalační CD
-Klepni na tlačítko Start a na příkaz Spustit.
-Zadej následující řetězec, kde D: je písmeno jednotky CD-ROM:


Postupuj podle pokynů na obrazovce.

Děkuji za bot.ini.Instalace konzoli proběhla v pořádku.Systémové nástroje tam bohužel nejsou.Teď jsem přišel na to že v ovládacích panelech ve složce nástroje pro správu také nic není.

Stáhni si Dial-a-fix. Otevři složku a spusť Dial-a-fix.exe

Zaškrtni Control panel applets a klikni na GO. Nástroj by měl opravit Ovládací panel.