Prosím o kontrolu

[Lydie]

ComboFix 08-10-30.04 - Owner 2008-10-30 0:25:54.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.1.1029.18.199 [GMT 1:00]
Spuštěný z: C:\Documents and Settings\Owner\Plocha\ComboFix.exe
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\DOCUME~1\Owner\LOCALS~1\Temp\tmp2.tmp
C:\Documents and Settings\Owner\Nabídka Start\Free MP3 Search.url
C:\Documents and Settings\Owner\Nabídka Start\Free Porn.url
C:\Documents and Settings\Owner\Nabídka Start\Search Online.url
C:\Documents and Settings\Owner\Nabídka Start\VIP Casino.url
C:\Documents and Settings\Owner\Oblíbené položky\Free MP3 Search.url
C:\Documents and Settings\Owner\Oblíbené položky\Free Porn.url
C:\Documents and Settings\Owner\Oblíbené položky\Search Online.url
C:\Documents and Settings\Owner\Oblíbené položky\VIP Casino.url
C:\Program Files\PISQORKY.PIF
C:\WINDOWS\Downloaded Program Files\setup.inf
C:\WINDOWS\system32\dao350.dll
C:\WINDOWS\system32\Dvbpws.dll
C:\WINDOWS\system32\dykgatkb.ini
C:\WINDOWS\system32\eLlSYGgh.ini
C:\WINDOWS\system32\eLlSYGgh.ini2

.
((((((((((((((((((((((((( Soubory vytvořené od 2008-09-28 do 2008-10-29 )))))))))))))))))))))))))))))))
.

2008-10-29 19:38 . 2008-10-29 19:38 578,560 --a--c--- C:\WINDOWS\system32\dllcache\user32.dll
2008-10-29 19:32 . 2008-10-29 19:32 <DIR> d-------- C:\WINDOWS\ERUNT
2008-10-29 19:30 . 2008-10-29 19:38 <DIR> d-------- C:\Documents and Settings\Administrator\Plocha
2008-10-29 19:30 . 2006-01-01 01:12 <DIR> d--h----- C:\Documents and Settings\Administrator\Okolní tiskárny
2008-10-29 19:30 . 2006-01-01 01:12 <DIR> d--h----- C:\Documents and Settings\Administrator\Okolní síť
2008-10-29 19:30 . 2006-01-01 01:12 <DIR> d-------- C:\Documents and Settings\Administrator\Oblíbené položky
2008-10-29 19:30 . 2006-01-01 00:24 <DIR> d--h----- C:\Documents and Settings\Administrator\Šablony
2008-10-29 19:30 . 2006-01-01 01:12 <DIR> dr------- C:\Documents and Settings\Administrator\Nabídka Start
2008-10-29 19:30 . 2006-01-01 01:12 <DIR> d-------- C:\Documents and Settings\Administrator\Dokumenty
2008-10-29 19:30 . 2006-01-01 01:12 <DIR> dr-h----- C:\Documents and Settings\Administrator\Data aplikací
2008-10-29 19:30 . 2008-10-29 19:30 <DIR> d-------- C:\Documents and Settings\Administrator
2008-10-28 21:13 . 2008-10-28 21:13 <DIR> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-10-28 21:13 . 2008-10-28 21:13 <DIR> d-------- C:\Documents and Settings\Owner\Data aplikací\Malwarebytes
2008-10-28 21:13 . 2008-10-28 21:13 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2008-10-28 21:13 . 2008-09-10 00:04 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-10-28 21:13 . 2008-09-10 00:03 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-10-28 20:12 . 2008-10-28 20:12 <DIR> d-------- C:\VundoFix Backups
2008-10-25 17:26 . 2008-10-25 17:26 <DIR> d-------- C:\Program Files\Alwil Software
2008-10-23 18:09 . 2008-10-15 17:38 337,408 -----c--- C:\WINDOWS\system32\dllcache\netapi32.dll
2008-10-21 21:42 . 2008-10-21 21:42 <DIR> d-------- C:\Program Files\ClamWin
2008-10-21 21:42 . 2008-10-21 21:43 <DIR> d-------- C:\Documents and Settings\Owner\Data aplikací\.clamwin
2008-10-21 21:42 . 2008-10-21 21:42 <DIR> d-------- C:\Documents and Settings\All Users\.clamwin
2008-10-21 17:53 . 2008-10-26 18:00 <DIR> d-------- C:\Documents and Settings\Owner\Data aplikací\SPORE
2008-10-19 11:51 . 2008-10-19 11:51 <DIR> d-------- C:\Documents and Settings\Owner\Saved Games
2008-10-19 11:49 . 2008-10-19 11:49 <DIR> d-------- C:\Program Files\ReflexiveArcade
2008-10-17 21:11 . 2008-10-17 21:15 154 --a------ C:\WINDOWS\adidsl.ini
2008-10-17 21:11 . 2008-10-17 21:11 21 --a------ C:\WINDOWS\Fast800.ini
2008-10-17 21:10 . 2008-10-17 21:10 <DIR> d-------- C:\Program Files\SAGEM
2008-10-17 20:17 . 2003-01-30 09:46 28,672 -ra------ C:\WINDOWS\system32\adinst32.dll
2008-10-17 12:24 . 2008-10-17 12:24 921,654 --a------ C:\WINDOWS\GOM_Wallpaper.bmp
2008-10-16 08:30 . 2008-10-28 17:05 <DIR> d--h----- C:\$AVG8.VAULT$
2008-10-15 20:22 . 2008-10-29 21:47 <DIR> d-------- C:\WINDOWS\system32\drivers\Avg
2008-10-15 20:22 . 2008-10-18 19:30 97,928 --a------ C:\WINDOWS\system32\drivers\avgldx86.sys
2008-10-15 20:22 . 2008-10-18 19:30 76,040 --a------ C:\WINDOWS\system32\drivers\avgtdix.sys
2008-10-15 20:22 . 2008-10-18 19:30 10,520 --a------ C:\WINDOWS\system32\avgrsstx.dll
2008-10-15 20:21 . 2008-10-15 20:21 <DIR> d-------- C:\Program Files\AVG
2008-10-15 20:21 . 2008-10-18 19:26 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\avg8
2008-10-15 07:03 . 2008-09-08 11:41 333,824 -----c--- C:\WINDOWS\system32\dllcache\srv.sys
2008-10-15 07:00 . 2008-08-14 14:26 2,191,360 -----c--- C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2008-10-15 07:00 . 2008-08-14 14:26 2,147,328 -----c--- C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2008-10-15 07:00 . 2008-08-14 14:26 2,068,224 -----c--- C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2008-10-15 07:00 . 2008-08-14 14:26 2,025,984 -----c--- C:\WINDOWS\system32\dllcache\ntkrpamp.exe
2008-10-15 07:00 . 2008-09-15 16:27 1,846,400 -----c--- C:\WINDOWS\system32\dllcache\win32k.sys
2008-10-14 21:27 . 2008-10-14 21:27 3,468,904 --a------ C:\WINDOWS\system32\drivers\appdrv01.sys
2008-10-14 21:27 . 2008-10-14 21:27 304,528 --a------ C:\WINDOWS\system32\appdrvrem01.exe
2008-10-12 15:48 . 2008-10-12 15:48 <DIR> d-------- C:\Program Files\Western Digital Technologies
2008-10-12 15:48 . 2008-10-14 17:38 364,544 --a------ C:\WINDOWS\system32\WDBtnMgr.exe
2008-10-12 15:45 . 2008-04-13 19:45 32,128 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2008-10-12 15:45 . 2008-04-13 19:45 32,128 --a--c--- C:\WINDOWS\system32\dllcache\usbccgp.sys
2008-10-12 12:43 . 2006-01-01 01:12 <DIR> d-------- C:\Documents and Settings\Daniel\Plocha
2008-10-12 12:43 . 2006-01-01 01:12 <DIR> d--h----- C:\Documents and Settings\Daniel\Okolní tiskárny
2008-10-12 12:43 . 2006-01-01 01:12 <DIR> d--h----- C:\Documents and Settings\Daniel\Okolní síť
2008-10-12 12:43 . 2008-10-12 12:44 <DIR> dr------- C:\Documents and Settings\Daniel\Oblíbené položky
2008-10-12 12:43 . 2006-01-01 00:24 <DIR> d--h----- C:\Documents and Settings\Daniel\Šablony
2008-10-12 12:43 . 2006-01-01 01:12 <DIR> dr------- C:\Documents and Settings\Daniel\Nabídka Start
2008-10-12 12:43 . 2008-10-12 12:44 <DIR> dr------- C:\Documents and Settings\Daniel\Dokumenty
2008-10-12 12:43 . 2008-10-15 20:22 <DIR> dr-h----- C:\Documents and Settings\Daniel\Data aplikací
2008-10-12 12:43 . 2008-10-15 20:22 <DIR> d-------- C:\Documents and Settings\Daniel
2008-10-12 00:23 . 2008-10-12 00:23 <DIR> d-------- C:\WINDOWS\system32\cs
2008-10-12 00:23 . 2008-10-12 00:23 <DIR> d-------- C:\WINDOWS\system32\bits
2008-10-12 00:23 . 2008-10-12 00:23 <DIR> d-------- C:\WINDOWS\l2schemas
2008-10-12 00:20 . 2008-10-12 00:23 <DIR> d-------- C:\WINDOWS\ServicePackFiles
2008-10-12 00:16 . 2008-10-12 00:16 <DIR> d-------- C:\WINDOWS\EHome
2008-10-11 18:57 . 2004-08-03 21:29 25,471 --------- C:\WINDOWS\system32\drivers\watv10nt.sys
2008-10-11 18:57 . 2004-08-03 21:29 22,271 --------- C:\WINDOWS\system32\drivers\watv06nt.sys
2008-10-11 18:54 . 2004-08-17 14:43 701,440 --------- C:\WINDOWS\system32\drivers\ati2mtag.sys
2008-10-11 14:31 . 2008-10-11 14:31 <DIR> d-------- C:\Program Files\SUPERAntiSpyware
2008-10-11 14:31 . 2008-10-11 14:31 <DIR> d-------- C:\Documents and Settings\Owner\Data aplikací\SUPERAntiSpyware.com
2008-10-11 14:31 . 2008-10-11 14:31 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2008-10-08 07:29 . 2008-10-08 07:29 <DIR> d-------- C:\Program Files\iPod
2008-10-08 07:28 . 2008-10-08 07:29 <DIR> d-------- C:\Program Files\iTunes
2008-10-08 07:28 . 2008-10-08 07:29 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-10-08 07:26 . 2008-10-08 07:27 <DIR> d-------- C:\Program Files\QuickTime
2008-10-08 07:13 . 2008-10-08 07:13 <DIR> d-------- C:\Program Files\Bonjour
2008-09-29 14:33 . 2008-10-21 09:34 <DIR> d-------- C:\Documents and Settings\Owner\Data aplikací\SolSuite
2008-09-29 14:33 . 2008-09-29 14:33 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\TreeCardGames

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-29 17:00 --------- d-----w C:\Program Files\Norton Security Scan
2008-10-25 16:49 --------- d-----w C:\Documents and Settings\Owner\Data aplikací\ZapSpot
2008-10-24 20:05 --------- d-----w C:\Program Files\ZEEK1
2008-10-22 06:47 --------- d-----w C:\Documents and Settings\Owner\Data aplikací\uTorrent
2008-10-21 16:45 --------- d-----w C:\Program Files\Electronic Arts
2008-10-21 16:39 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-10-21 08:20 --------- d-----w C:\Program Files\Zatre Online
2008-10-19 16:43 --------- d-----w C:\Program Files\Games
2008-10-19 10:50 --------- d-----w C:\Documents and Settings\Owner\Data aplikací\iWin
2008-10-17 20:15 23 ----a-w C:\WINDOWS\system32\drivers\adidsl.cfg
2008-10-15 17:17 --------- d-----w C:\Program Files\EA GAMES
2008-10-15 14:27 --------- d-----w C:\Documents and Settings\Owner\Data aplikací\Pro Cycling Manager 2008
2008-10-14 18:38 --------- d-----w C:\Program Files\Cyanide
2008-10-14 17:50 --------- d-----w C:\Program Files\Medvěd Míša ve vesmíru
2008-10-13 11:50 --------- d-----w C:\Program Files\uTorrent
2008-10-12 17:41 --------- d-----w C:\Program Files\Disney Interactive
2008-10-11 13:30 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-10-11 13:09 98,304 ----a-w C:\WINDOWS\DUMP4594.tmp
2008-10-11 13:07 98,304 ----a-w C:\WINDOWS\DUMP40f1.tmp
2008-10-11 11:53 98,304 ----a-w C:\WINDOWS\DUMP449b.tmp
2008-10-11 10:00 98,304 ----a-w C:\WINDOWS\DUMP41cb.tmp
2008-10-11 08:16 98,304 ----a-w C:\WINDOWS\DUMP4893.tmp
2008-10-10 20:34 90,112 ----a-w C:\WINDOWS\DUMP44b9.tmp
2008-10-10 19:19 98,304 ----a-w C:\WINDOWS\DUMP48a1.tmp
2008-10-10 19:15 98,304 ----a-w C:\WINDOWS\DUMP449a.tmp
2008-10-10 18:59 98,304 ----a-w C:\WINDOWS\DUMP4892.tmp
2008-10-10 18:58 98,304 ----a-w C:\WINDOWS\DUMP448a.tmp
2008-10-10 18:52 90,112 ----a-w C:\WINDOWS\DUMP3613.tmp
2008-10-10 18:51 98,304 ----a-w C:\WINDOWS\DUMP319f.tmp
2008-10-10 18:50 98,304 ----a-w C:\WINDOWS\DUMP4517.tmp
2008-10-10 18:44 98,304 ----a-w C:\WINDOWS\DUMP46fb.tmp
2008-10-09 15:29 --------- d---a-w C:\Documents and Settings\All Users\Data aplikací\TEMP
2008-10-08 06:26 --------- d-----w C:\Program Files\Common Files\Apple
2008-09-16 21:54 --------- d-----w C:\Documents and Settings\Owner\Data aplikací\safenetdrm
2008-09-15 23:08 --------- d-----w C:\Program Files\CCTV
2008-09-15 23:02 --------- d-----w C:\Documents and Settings\Owner\Data aplikací\CCTV
2008-09-08 13:19 --------- d-----w C:\Program Files\Project64 1.6
2008-09-08 10:41 333,824 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-09-05 17:28 --------- d-----w C:\Program Files\SCi Games
2008-09-02 07:42 --------- d-----w C:\Program Files\Apple Software Update
2008-09-02 07:41 --------- d-----w C:\Documents and Settings\All Users\Data aplikací\Apple Computer
2008-08-30 11:36 --------- d-----w C:\Program Files\InterActual
2008-08-29 14:56 --------- d-----w C:\Program Files\Pokémon
2008-08-29 12:21 --------- d-----w C:\Program Files\Medvěd Míša - Rybí dobrodružství
2007-12-28 14:18 96,736 ----a-w C:\Program Files\PISQORKY.EXE
2007-12-26 13:04 417,792 ----a-w C:\Documents and Settings\Owner\GL4JavbJauGljJNI14.dll
2007-10-09 19:44 4,645,520 ----a-w C:\Program Files\flashget194en.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-04-01 486856]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-09-03 1576176]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-10-16 68856]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-10-23 443968]
"EA Core"="C:\Program Files\Electronic Arts\EADM\Core.exe" [2008-06-13 2752512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinFastDTV"="C:\Program Files\WinFast\WFDTV\DTVSchdl.exe" [2006-05-04 69632]
"WinFast Schedule"="C:\Program Files\WinFast\WFDTV\WFWIZ.exe" [2006-04-27 344064]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-09-06 413696]
"AppleSyncNotifier"="C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-10-01 111936]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-10-01 289576]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-10-18 1234712]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2005-12-14 86016]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-12-14 7323648]
"ClamWin"="C:\Program Files\ClamWin\bin\ClamTray.exe" [2008-09-05 86016]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2006-05-01 843776]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2004-08-09 81920]
"ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-06-16 221184]
"WD Button Manager"="WDBtnMgr.exe" [2008-10-14 C:\WINDOWS\system32\WDBtnMgr.exe]
"nwiz"="nwiz.exe" [2005-12-14 C:\WINDOWS\system32\nwiz.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-10-23 443968]

C:\Documents and Settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2008-10-17 962663]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-18 65588]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "C:\Program Files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-07-23 15:28 352256 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.l3acm"= c:\program files\games\pro_hockey_manager_2005\required\mp3\l3codeca.acm
"msacm.l3codecp"= l3codecp.acm
"msacm.divxa32"= msaud32_divx.acm

[HKLM\~\startupfolder\C:^Documents and Settings^Owner^Nabídka Start^Programy^Po spuštění^RollerCoaster Tycoon 3 Registration.lnk]
path=C:\Documents and Settings\Owner\Nabídka Start\Programy\Po spuštění\RollerCoaster Tycoon 3 Registration.lnk
backup=C:\WINDOWS\pss\RollerCoaster Tycoon 3 Registration.lnkStartup

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Ubisoft\\Heroes of Might and Magic V\\bin\\H5_Game.exe"=
"C:\\Program Files\\Games\\RocketRacer\\RocketRacer.exe"=
"C:\\Program Files\\Cyanide\\GameCenter\\GameCenter.exe"=
"C:\\Program Files\\ProCycling Manager Season 2006\\PCM.exe"=
"C:\\Program Files\\Games\\BZFlag2.0.2\\bzfs.exe"=
"C:\\Program Files\\Games\\BZFlag2.0.2\\bzflag.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Aquadelic GT\\Run.exe"=
"C:\\Documents and Settings\\Owner\\Dokumenty\\Prizee\\server prizee\\http_prizee.exe"=
"C:\\Documents and Settings\\Owner\\Dokumenty\\Prizee\\server prizee\\serwer_prizee.exe"=
"C:\\Program Files\\PPMate\\PPMate\\ppmate.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\Microsoft Games\\Zoo Tycoon 2\\zt.exe"=
"C:\\Program Files\\Sports Interactive\\Football Manager 2007\\fm.exe"=
"C:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Cyanide\\Pro Cycling Manager - Season 2008\\PCM.exe"=
"C:\\Program Files\\Cyanide\\Pro Cycling Manager - Season 2008\\Autorun\\Exe\\Autorun.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"23456:TCP"= 23456:TCP:BitComet 23456 TCP
"23456:UDP"= 23456:UDP:BitComet 23456 UDP

R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);C:\WINDOWS\system32\drivers\sfdrv01a.sys [2006-07-05 63352]
R1 appdrv01;Application Driver (01);C:\WINDOWS\system32\Drivers\appdrv01.sys [2008-10-14 3468904]
R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 78416]
R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-10-18 97928]
R1 wfcxacap;WinFast TV PCI Audio Capture Driver;C:\WINDOWS\system32\DRIVERS\wfcxacap.sys [2006-03-24 9856]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
R2 avg8emc;AVG8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-10-18 875288]
R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-10-18 231704]
R2 AvgTdiX;AVG8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-10-18 76040]
R2 wfcxatun;WinFast TV Analog Tuner Driver;C:\WINDOWS\system32\drivers\wfcxatun.sys [2006-03-24 31616]
R2 WFCXVCAP;WinFast TV Video Capture Driver;C:\WINDOWS\system32\drivers\wfcxvcap.sys [2006-03-24 167296]
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\system32\DRIVERS\psched.sys [2008-04-13 69120]
R3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver;C:\WINDOWS\system32\drivers\wfcxdtun.sys [2006-03-24 21248]
R3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver;C:\WINDOWS\system32\drivers\wfcxtcap.sys [2006-03-24 15872]
R3 wfcxxbar;WinFast TV Crossbar Driver;C:\WINDOWS\system32\drivers\wfcxxbar.sys [2006-03-24 10368]
R3 WFIOCTL;WFIOCTL;C:\Program Files\WinFast\WFDTV\WFIOCTL.SYS [2005-01-06 9446]
S2 appdrvrem01;Application Driver Auto Removal Service (01);C:\WINDOWS\System32\appdrvrem01.exe svc [ ]
S3 Asushwio;Asushwio;C:\WINDOWS\system32\drivers\Asushwio.sys [2004-04-27 5824]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\J]
\Shell\AutoRun\command - J:\wd_windows_tools\WDEULA.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bcc4ac63-9859-11dd-a838-4d6564696130}]
\Shell\AutoRun\command - J:\wd_windows_tools\WDEULA.exe
.
Obsah adresáře 'Naplánované úlohy'

2008-10-29 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2008-10-29 C:\WINDOWS\Tasks\Norton Security Scan.job
- C:\Program Files\Norton Security Scan\Nss.exe [2008-01-09 03:08]
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

BHO-{EB2BCDD6-5F6C-4C91-A9F2-71B42C63F5CF} - C:\WINDOWS\system32\hgGYSlLe.dll


.
------- Doplňkový sken -------
.
FireFox -: Profile - C:\Documents and Settings\Owner\Data aplikací\Mozilla\Firefox\Profiles\zqscofsy.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.seznam.cz/
FF -: plugin - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\browser\nppdf32.dll
FF -: plugin - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-30 00:38:23
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
------------------------ Jiné spuštené procesy ------------------------
.
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Celkový čas: 2008-10-30 1:03:27 - počítač byl restartován
ComboFix-quarantined-files.txt 2008-10-30 00:02:56

Před spuštěním: Volných bajtů: 12 037 632 000
Po spuštění: Volných bajtů: 13,424,566,272

WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

[Reklama]

[jaro3]

Můžeš smazat: C:\VundoFix Backups
Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

File::
C:\WINDOWS\DUMP4594.tmp
C:\WINDOWS\DUMP40f1.tmp
C:\WINDOWS\DUMP449b.tmp
C:\WINDOWS\DUMP41cb.tmp
C:\WINDOWS\DUMP4893.tmp
C:\WINDOWS\DUMP44b9.tmp
C:\WINDOWS\DUMP48a1.tmp
C:\WINDOWS\DUMP449a.tmp
C:\WINDOWS\DUMP4892.tmp
C:\WINDOWS\DUMP448a.tmp
C:\WINDOWS\DUMP3613.tmp
C:\WINDOWS\DUMP319f.tmp
C:\WINDOWS\DUMP4517.tmp
C:\WINDOWS\DUMP46fb.tmp


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.
Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

[Lydie]

ComboFix 08-10-30.04 - Owner 2008-10-30 20:31:10.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.1.1029.18.183 [GMT 1:00]
Spuštěný z: C:\Documents and Settings\Owner\Plocha\ComboFix.exe
Použité ovládací přepínače :: C:\Documents and Settings\Owner\Plocha\CFScript.txt
* Vytvořen nový Bod Obnovení

FILE ::
C:\WINDOWS\DUMP319f.tmp
C:\WINDOWS\DUMP3613.tmp
C:\WINDOWS\DUMP40f1.tmp
C:\WINDOWS\DUMP41cb.tmp
C:\WINDOWS\DUMP448a.tmp
C:\WINDOWS\DUMP449a.tmp
C:\WINDOWS\DUMP449b.tmp
C:\WINDOWS\DUMP44b9.tmp
C:\WINDOWS\DUMP4517.tmp
C:\WINDOWS\DUMP4594.tmp
C:\WINDOWS\DUMP46fb.tmp
C:\WINDOWS\DUMP4892.tmp
C:\WINDOWS\DUMP4893.tmp
C:\WINDOWS\DUMP48a1.tmp
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\DUMP319f.tmp
C:\WINDOWS\DUMP3613.tmp
C:\WINDOWS\DUMP40f1.tmp
C:\WINDOWS\DUMP41cb.tmp
C:\WINDOWS\DUMP448a.tmp
C:\WINDOWS\DUMP449a.tmp
C:\WINDOWS\DUMP449b.tmp
C:\WINDOWS\DUMP44b9.tmp
C:\WINDOWS\DUMP4517.tmp
C:\WINDOWS\DUMP4594.tmp
C:\WINDOWS\DUMP46fb.tmp
C:\WINDOWS\DUMP4892.tmp
C:\WINDOWS\DUMP4893.tmp
C:\WINDOWS\DUMP48a1.tmp

.
((((((((((((((((((((((((( Soubory vytvořené od 2008-09-28 do 2008-10-30 )))))))))))))))))))))))))))))))
.

2008-10-29 19:38 . 2008-10-29 19:38 578,560 --a--c--- C:\WINDOWS\system32\dllcache\user32.dll
2008-10-29 19:32 . 2008-10-29 19:32 <DIR> d-------- C:\WINDOWS\ERUNT
2008-10-29 19:30 . 2008-10-29 19:38 <DIR> d-------- C:\Documents and Settings\Administrator\Plocha
2008-10-29 19:30 . 2006-01-01 01:12 <DIR> d--h----- C:\Documents and Settings\Administrator\Okolní tiskárny
2008-10-29 19:30 . 2006-01-01 01:12 <DIR> d--h----- C:\Documents and Settings\Administrator\Okolní síť
2008-10-29 19:30 . 2006-01-01 01:12 <DIR> d-------- C:\Documents and Settings\Administrator\Oblíbené položky
2008-10-29 19:30 . 2006-01-01 00:24 <DIR> d--h----- C:\Documents and Settings\Administrator\Šablony
2008-10-29 19:30 . 2006-01-01 01:12 <DIR> dr------- C:\Documents and Settings\Administrator\Nabídka Start
2008-10-29 19:30 . 2006-01-01 01:12 <DIR> d-------- C:\Documents and Settings\Administrator\Dokumenty
2008-10-29 19:30 . 2006-01-01 01:12 <DIR> dr-h----- C:\Documents and Settings\Administrator\Data aplikací
2008-10-29 19:30 . 2008-10-29 19:30 <DIR> d-------- C:\Documents and Settings\Administrator
2008-10-28 21:13 . 2008-10-28 21:13 <DIR> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-10-28 21:13 . 2008-10-28 21:13 <DIR> d-------- C:\Documents and Settings\Owner\Data aplikací\Malwarebytes
2008-10-28 21:13 . 2008-10-28 21:13 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2008-10-28 21:13 . 2008-09-10 00:04 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-10-28 21:13 . 2008-09-10 00:03 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-10-28 20:12 . 2008-10-28 20:12 <DIR> d-------- C:\VundoFix Backups
2008-10-25 17:26 . 2008-10-25 17:26 <DIR> d-------- C:\Program Files\Alwil Software
2008-10-23 18:09 . 2008-10-15 17:38 337,408 -----c--- C:\WINDOWS\system32\dllcache\netapi32.dll
2008-10-21 21:42 . 2008-10-21 21:42 <DIR> d-------- C:\Program Files\ClamWin
2008-10-21 21:42 . 2008-10-21 21:43 <DIR> d-------- C:\Documents and Settings\Owner\Data aplikací\.clamwin
2008-10-21 21:42 . 2008-10-21 21:42 <DIR> d-------- C:\Documents and Settings\All Users\.clamwin
2008-10-21 17:53 . 2008-10-26 18:00 <DIR> d-------- C:\Documents and Settings\Owner\Data aplikací\SPORE
2008-10-19 11:51 . 2008-10-19 11:51 <DIR> d-------- C:\Documents and Settings\Owner\Saved Games
2008-10-19 11:49 . 2008-10-19 11:49 <DIR> d-------- C:\Program Files\ReflexiveArcade
2008-10-17 21:11 . 2008-10-17 21:15 154 --a------ C:\WINDOWS\adidsl.ini
2008-10-17 21:11 . 2008-10-17 21:11 21 --a------ C:\WINDOWS\Fast800.ini
2008-10-17 21:10 . 2008-10-17 21:10 <DIR> d-------- C:\Program Files\SAGEM
2008-10-17 20:17 . 2003-01-30 09:46 28,672 -ra------ C:\WINDOWS\system32\adinst32.dll
2008-10-17 12:24 . 2008-10-17 12:24 921,654 --a------ C:\WINDOWS\GOM_Wallpaper.bmp
2008-10-16 08:30 . 2008-10-28 17:05 <DIR> d--h----- C:\$AVG8.VAULT$
2008-10-15 20:22 . 2008-10-30 18:48 <DIR> d-------- C:\WINDOWS\system32\drivers\Avg
2008-10-15 20:22 . 2008-10-18 19:30 97,928 --a------ C:\WINDOWS\system32\drivers\avgldx86.sys
2008-10-15 20:22 . 2008-10-18 19:30 76,040 --a------ C:\WINDOWS\system32\drivers\avgtdix.sys
2008-10-15 20:22 . 2008-10-18 19:30 10,520 --a------ C:\WINDOWS\system32\avgrsstx.dll
2008-10-15 20:21 . 2008-10-15 20:21 <DIR> d-------- C:\Program Files\AVG
2008-10-15 20:21 . 2008-10-18 19:26 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\avg8
2008-10-15 07:03 . 2008-09-08 11:41 333,824 -----c--- C:\WINDOWS\system32\dllcache\srv.sys
2008-10-15 07:00 . 2008-08-14 14:26 2,191,360 -----c--- C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2008-10-15 07:00 . 2008-08-14 14:26 2,147,328 -----c--- C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2008-10-15 07:00 . 2008-08-14 14:26 2,068,224 -----c--- C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2008-10-15 07:00 . 2008-08-14 14:26 2,025,984 -----c--- C:\WINDOWS\system32\dllcache\ntkrpamp.exe
2008-10-15 07:00 . 2008-09-15 16:27 1,846,400 -----c--- C:\WINDOWS\system32\dllcache\win32k.sys
2008-10-14 21:27 . 2008-10-14 21:27 3,468,904 --a------ C:\WINDOWS\system32\drivers\appdrv01.sys
2008-10-14 21:27 . 2008-10-14 21:27 304,528 --a------ C:\WINDOWS\system32\appdrvrem01.exe
2008-10-12 15:48 . 2008-10-12 15:48 <DIR> d-------- C:\Program Files\Western Digital Technologies
2008-10-12 15:48 . 2008-10-14 17:38 364,544 --a------ C:\WINDOWS\system32\WDBtnMgr.exe
2008-10-12 15:45 . 2008-04-13 19:45 32,128 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2008-10-12 15:45 . 2008-04-13 19:45 32,128 --a--c--- C:\WINDOWS\system32\dllcache\usbccgp.sys
2008-10-12 12:43 . 2006-01-01 01:12 <DIR> d-------- C:\Documents and Settings\Daniel\Plocha
2008-10-12 12:43 . 2006-01-01 01:12 <DIR> d--h----- C:\Documents and Settings\Daniel\Okolní tiskárny
2008-10-12 12:43 . 2006-01-01 01:12 <DIR> d--h----- C:\Documents and Settings\Daniel\Okolní síť
2008-10-12 12:43 . 2008-10-12 12:44 <DIR> dr------- C:\Documents and Settings\Daniel\Oblíbené položky
2008-10-12 12:43 . 2006-01-01 00:24 <DIR> d--h----- C:\Documents and Settings\Daniel\Šablony
2008-10-12 12:43 . 2006-01-01 01:12 <DIR> dr------- C:\Documents and Settings\Daniel\Nabídka Start
2008-10-12 12:43 . 2008-10-12 12:44 <DIR> dr------- C:\Documents and Settings\Daniel\Dokumenty
2008-10-12 12:43 . 2008-10-15 20:22 <DIR> dr-h----- C:\Documents and Settings\Daniel\Data aplikací
2008-10-12 12:43 . 2008-10-15 20:22 <DIR> d-------- C:\Documents and Settings\Daniel
2008-10-12 00:23 . 2008-10-12 00:23 <DIR> d-------- C:\WINDOWS\system32\cs
2008-10-12 00:23 . 2008-10-12 00:23 <DIR> d-------- C:\WINDOWS\system32\bits
2008-10-12 00:23 . 2008-10-12 00:23 <DIR> d-------- C:\WINDOWS\l2schemas
2008-10-12 00:20 . 2008-10-12 00:23 <DIR> d-------- C:\WINDOWS\ServicePackFiles
2008-10-12 00:16 . 2008-10-12 00:16 <DIR> d-------- C:\WINDOWS\EHome
2008-10-11 18:57 . 2004-08-03 21:29 25,471 --------- C:\WINDOWS\system32\drivers\watv10nt.sys
2008-10-11 18:57 . 2004-08-03 21:29 22,271 --------- C:\WINDOWS\system32\drivers\watv06nt.sys
2008-10-11 18:54 . 2004-08-17 14:43 701,440 --------- C:\WINDOWS\system32\drivers\ati2mtag.sys
2008-10-11 14:31 . 2008-10-11 14:31 <DIR> d-------- C:\Program Files\SUPERAntiSpyware
2008-10-11 14:31 . 2008-10-11 14:31 <DIR> d-------- C:\Documents and Settings\Owner\Data aplikací\SUPERAntiSpyware.com
2008-10-11 14:31 . 2008-10-11 14:31 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2008-10-08 07:29 . 2008-10-08 07:29 <DIR> d-------- C:\Program Files\iPod
2008-10-08 07:28 . 2008-10-08 07:29 <DIR> d-------- C:\Program Files\iTunes
2008-10-08 07:28 . 2008-10-08 07:29 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-10-08 07:26 . 2008-10-08 07:27 <DIR> d-------- C:\Program Files\QuickTime
2008-10-08 07:13 . 2008-10-08 07:13 <DIR> d-------- C:\Program Files\Bonjour
2008-09-29 14:33 . 2008-10-21 09:34 <DIR> d-------- C:\Documents and Settings\Owner\Data aplikací\SolSuite
2008-09-29 14:33 . 2008-09-29 14:33 <DIR> d-------- C:\Documents and Settings\All Users\Data aplikací\TreeCardGames
2008-09-16 22:54 . 2008-09-16 22:54 <DIR> d-------- C:\Documents and Settings\Owner\Data aplikací\safenetdrm
2008-09-16 00:08 . 2008-09-16 00:08 <DIR> d-------- C:\Program Files\CCTV
2008-09-16 00:02 . 2008-09-16 00:02 <DIR> d-------- C:\Documents and Settings\Owner\Data aplikací\CCTV
2008-09-08 14:11 . 2008-09-08 14:19 <DIR> d-------- C:\Program Files\Project64 1.6
2008-09-06 14:09 . 2008-09-06 14:09 90,112 --a------ C:\WINDOWS\system32\QuickTimeVR.qtx
2008-09-06 14:09 . 2008-09-06 14:09 57,344 --a------ C:\WINDOWS\system32\QuickTime.qts
2008-09-05 18:28 . 2008-09-05 18:28 <DIR> d-------- C:\Program Files\SCi Games
2008-09-02 08:42 . 2008-09-02 08:42 <DIR> d-------- C:\Program Files\Apple Software Update

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-29 17:00 --------- d-----w C:\Program Files\Norton Security Scan
2008-10-25 16:49 --------- d-----w C:\Documents and Settings\Owner\Data aplikací\ZapSpot
2008-10-24 20:05 --------- d-----w C:\Program Files\ZEEK1
2008-10-22 06:47 --------- d-----w C:\Documents and Settings\Owner\Data aplikací\uTorrent
2008-10-21 16:51 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2008-10-21 16:45 --------- d-----w C:\Program Files\Electronic Arts
2008-10-21 16:39 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-10-21 08:20 --------- d-----w C:\Program Files\Zatre Online
2008-10-19 16:43 --------- d-----w C:\Program Files\Games
2008-10-19 10:50 --------- d-----w C:\Documents and Settings\Owner\Data aplikací\iWin
2008-10-17 20:15 23 ----a-w C:\WINDOWS\system32\drivers\adidsl.cfg
2008-10-15 17:17 --------- d-----w C:\Program Files\EA GAMES
2008-10-15 14:27 --------- d-----w C:\Documents and Settings\Owner\Data aplikací\Pro Cycling Manager 2008
2008-10-14 18:38 --------- d-----w C:\Program Files\Cyanide
2008-10-14 17:50 --------- d-----w C:\Program Files\Medvěd Míša ve vesmíru
2008-10-13 11:50 --------- d-----w C:\Program Files\uTorrent
2008-10-12 17:41 --------- d-----w C:\Program Files\Disney Interactive
2008-10-11 13:30 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-10-09 15:29 --------- d---a-w C:\Documents and Settings\All Users\Data aplikací\TEMP
2008-10-08 06:26 --------- d-----w C:\Program Files\Common Files\Apple
2008-09-15 15:27 1,846,400 ----a-w C:\WINDOWS\system32\win32k.sys
2008-09-08 10:41 333,824 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-09-02 07:41 --------- d-----w C:\Documents and Settings\All Users\Data aplikací\Apple Computer
2008-08-30 11:36 --------- d-----w C:\Program Files\InterActual
2008-08-29 14:56 --------- d-----w C:\Program Files\Pokémon
2008-08-29 12:21 --------- d-----w C:\Program Files\Medvěd Míša - Rybí dobrodružství
2008-08-29 08:18 87,336 ----a-w C:\WINDOWS\system32\dns-sd.exe
2008-08-29 07:53 61,440 ----a-w C:\WINDOWS\system32\dnssd.dll
2008-08-26 08:27 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-08-14 13:26 2,191,360 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
2008-08-14 13:26 2,068,224 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
2008-08-05 22:02 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe
2008-08-05 22:02 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
2008-08-05 22:02 129,784 ------w C:\WINDOWS\system32\pxafs.dll
2008-08-05 22:02 120,056 ------w C:\WINDOWS\system32\pxcpyi64.exe
2008-08-05 22:02 118,520 ------w C:\WINDOWS\system32\pxinsi64.exe
2008-08-05 22:00 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2008-08-05 22:00 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2008-08-05 21:59 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
2008-08-05 21:59 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
2008-08-05 21:59 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
2008-08-05 21:59 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
2008-08-05 21:59 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
2008-08-05 21:59 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
2008-08-05 21:59 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
2008-08-05 21:59 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
2008-08-05 21:58 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
2008-08-05 21:58 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
2008-08-05 21:58 815,104 ----a-w C:\WINDOWS\system32\divx_xx0a.dll
2008-08-05 21:58 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
2008-08-05 21:58 683,520 ----a-w C:\WINDOWS\system32\DivX.dll
2008-08-05 21:58 161,096 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2008-08-05 21:58 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
2008-08-02 12:25 236,686 ----a-w C:\WINDOWS\system32\JETIX.scr
2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll
2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe
2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll
2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll
2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll
2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll
2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll
2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll
2008-07-18 20:07 270,880 ----a-w C:\WINDOWS\system32\mucltui.dll
2008-07-18 20:07 210,976 ----a-w C:\WINDOWS\system32\muweb.dll
2008-07-07 20:29 253,952 ----a-w C:\WINDOWS\system32\es.dll
2007-12-28 14:18 96,736 ----a-w C:\Program Files\PISQORKY.EXE
2007-12-26 13:04 417,792 ----a-w C:\Documents and Settings\Owner\GL4JavbJauGljJNI14.dll
2007-10-09 19:44 4,645,520 ----a-w C:\Program Files\flashget194en.exe
.

((((((((((((((((((((((((((((( snapshot@2008-10-30_ 1.02.07.68 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-10-30 12:03:59 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_5e4.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-04-01 486856]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-09-03 1576176]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-10-16 68856]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-10-23 443968]
"EA Core"="C:\Program Files\Electronic Arts\EADM\Core.exe" [2008-06-13 2752512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinFastDTV"="C:\Program Files\WinFast\WFDTV\DTVSchdl.exe" [2006-05-04 69632]
"WinFast Schedule"="C:\Program Files\WinFast\WFDTV\WFWIZ.exe" [2006-04-27 344064]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-09-06 413696]
"AppleSyncNotifier"="C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-10-01 111936]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-10-01 289576]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-10-18 1234712]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2005-12-14 86016]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-12-14 7323648]
"ClamWin"="C:\Program Files\ClamWin\bin\ClamTray.exe" [2008-09-05 86016]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2006-05-01 843776]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2004-08-09 81920]
"ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-06-16 221184]
"WD Button Manager"="WDBtnMgr.exe" [2008-10-14 C:\WINDOWS\system32\WDBtnMgr.exe]
"nwiz"="nwiz.exe" [2005-12-14 C:\WINDOWS\system32\nwiz.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-10-23 443968]

C:\Documents and Settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2008-10-17 962663]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-18 65588]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "C:\Program Files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-07-23 15:28 352256 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.l3acm"= c:\program files\games\pro_hockey_manager_2005\required\mp3\l3codeca.acm
"msacm.l3codecp"= l3codecp.acm
"msacm.divxa32"= msaud32_divx.acm

[HKLM\~\startupfolder\C:^Documents and Settings^Owner^Nabídka Start^Programy^Po spuštění^RollerCoaster Tycoon 3 Registration.lnk]
path=C:\Documents and Settings\Owner\Nabídka Start\Programy\Po spuštění\RollerCoaster Tycoon 3 Registration.lnk
backup=C:\WINDOWS\pss\RollerCoaster Tycoon 3 Registration.lnkStartup

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Ubisoft\\Heroes of Might and Magic V\\bin\\H5_Game.exe"=
"C:\\Program Files\\Games\\RocketRacer\\RocketRacer.exe"=
"C:\\Program Files\\Cyanide\\GameCenter\\GameCenter.exe"=
"C:\\Program Files\\ProCycling Manager Season 2006\\PCM.exe"=
"C:\\Program Files\\Games\\BZFlag2.0.2\\bzfs.exe"=
"C:\\Program Files\\Games\\BZFlag2.0.2\\bzflag.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Aquadelic GT\\Run.exe"=
"C:\\Documents and Settings\\Owner\\Dokumenty\\Prizee\\server prizee\\http_prizee.exe"=
"C:\\Documents and Settings\\Owner\\Dokumenty\\Prizee\\server prizee\\serwer_prizee.exe"=
"C:\\Program Files\\PPMate\\PPMate\\ppmate.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\Microsoft Games\\Zoo Tycoon 2\\zt.exe"=
"C:\\Program Files\\Sports Interactive\\Football Manager 2007\\fm.exe"=
"C:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Cyanide\\Pro Cycling Manager - Season 2008\\PCM.exe"=
"C:\\Program Files\\Cyanide\\Pro Cycling Manager - Season 2008\\Autorun\\Exe\\Autorun.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"23456:TCP"= 23456:TCP:BitComet 23456 TCP
"23456:UDP"= 23456:UDP:BitComet 23456 UDP

R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);C:\WINDOWS\system32\drivers\sfdrv01a.sys [2006-07-05 63352]
R1 appdrv01;Application Driver (01);C:\WINDOWS\system32\Drivers\appdrv01.sys [2008-10-14 3468904]
R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 78416]
R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-10-18 97928]
R1 wfcxacap;WinFast TV PCI Audio Capture Driver;C:\WINDOWS\system32\DRIVERS\wfcxacap.sys [2006-03-24 9856]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
R2 avg8emc;AVG8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-10-18 875288]
R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-10-18 231704]
R2 AvgTdiX;AVG8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-10-18 76040]
R2 wfcxatun;WinFast TV Analog Tuner Driver;C:\WINDOWS\system32\drivers\wfcxatun.sys [2006-03-24 31616]
R2 WFCXVCAP;WinFast TV Video Capture Driver;C:\WINDOWS\system32\drivers\wfcxvcap.sys [2006-03-24 167296]
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\system32\DRIVERS\psched.sys [2008-04-13 69120]
R3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver;C:\WINDOWS\system32\drivers\wfcxdtun.sys [2006-03-24 21248]
R3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver;C:\WINDOWS\system32\drivers\wfcxtcap.sys [2006-03-24 15872]
R3 wfcxxbar;WinFast TV Crossbar Driver;C:\WINDOWS\system32\drivers\wfcxxbar.sys [2006-03-24 10368]
R3 WFIOCTL;WFIOCTL;C:\Program Files\WinFast\WFDTV\WFIOCTL.SYS [2005-01-06 9446]
S2 appdrvrem01;Application Driver Auto Removal Service (01);C:\WINDOWS\System32\appdrvrem01.exe svc [ ]
S3 Asushwio;Asushwio;C:\WINDOWS\system32\drivers\Asushwio.sys [2004-04-27 5824]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\J]
\Shell\AutoRun\command - J:\wd_windows_tools\WDEULA.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bcc4ac63-9859-11dd-a838-4d6564696130}]
\Shell\AutoRun\command - J:\wd_windows_tools\WDEULA.exe
.
Obsah adresáře 'Naplánované úlohy'

2008-10-29 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2008-10-29 C:\WINDOWS\Tasks\Norton Security Scan.job
- C:\Program Files\Norton Security Scan\Nss.exe [2008-01-09 03:08]
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-30 20:41:46
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
Celkový čas: 2008-10-30 21:04:03
ComboFix-quarantined-files.txt 2008-10-30 20:03:56
ComboFix2.txt 2008-10-30 00:03:28

Před spuštěním: Volných bajtů: 13 341 798 400
Po spuštění: Volných bajtů: 13,377,658,880

320 --- E O F --- 2008-10-23 21:12:06

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:35, on 30.10.2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\ATKKBService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
C:\Program Files\WinFast\WFDTV\WFWIZ.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\ClamWin\bin\ClamTray.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\download\Antivir\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
O4 - HKLM\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFDTV\WFWIZ.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ClamWin] "C:\Program Files\ClamWin\bin\ClamTray.exe" --logon
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://www.lizardtech.com/download/file ... _en_US.cab
O16 - DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} (Disney Online Games ActiveX Control) - http://disney.go.com/pirates/online/tes ... eGames.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resour ... se4009.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 5770455421
O16 - DPF: {88E07994-F8DD-4952-8DBF-0C4617F11117} (PMPXPlayerCtl Class) - http://download.cctv.com/euro2008/videoclient.cab
O16 - DPF: {AC414988-E5BB-4C2C-873B-EA53D2F3D23A} (CCTVUpdateInstall) - http://t.live.cctv.com/ieocx/CCTVUpdateInstall.dll
O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} (SABScanProcesses Class) - http://www.superadblocker.com/activex/sabspx.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{84D470C6-E6CC-4EB1-95C4-34380F84EC8B}: NameServer = 194.228.41.65 194.228.41.113
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\WINDOWS\System32\appdrvrem01.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 9456 bytes

[jaro3]

Logy O.K:
Najdi a smaž: C:\VundoFix Backups
Zapni znovu rez. ochranu u AVG.
ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix[mezera]/u
takže jestli nejsou problémy,tak vyčisti systém CCleanerem
viewtopic.php?t=5130
a použij i T-Cleaner
http://www.sweb.cz/Marinus/T-Cleaner.exe
smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš>spustíš
Aktualizuj javu:
Java SE Runtime Environment 6u10

Vyber OS ( předpokládám Windows), zatržítko agree-continue
Vyber:
Windows Offline Installation
jre-6u10-windows-i586-p.exe
Ostatní javy odeber v přidat/odebrat programy.

Je to vše.

[Lydie]

Moc děkuji.