Prosím o kontrolu logu

[machro222]

Prosím o kontrolu logu.podezření na vir
Logfile of HijackThis v1.99.1
Scan saved at 10:25:01, on 24.9.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\csrss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\svchost.exe
C:\windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\windows\system32\spoolsv.exe
C:\windows\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\windows\system32\PnkBstrA.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\windows\Mixer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\SYSTEM32\ATIPTAXX.EXE
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\SaveSnap\SaveSnap.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\windows\System32\alg.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Totalcom\TOTALCMD.EXE
F:\Servis\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [AtiPTA] C:\WINDOWS\SYSTEM32\ATIPTAXX.EXE
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - Startup: SaveSnap.lnk = C:\Program Files\SaveSnap\SaveSnap.exe
O4 - Startup: Zástupce - dslmon.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International
O15 - Trusted Zone: http://download.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 2999884000
O17 - HKLM\System\CCS\Services\Tcpip\..\{5C2DCBD4-EA92-4ED4-AEF9-EB104227BF3F}: NameServer = 90.183.231.251 194.228.41.113
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\windows\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\windows\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

[Reklama]

[Damned]

Odinstaluj si Spyware Doctor a Crawler Toolbar.
Pak si stáhni z mého podpisu novější HijackThis a pak udělej log z něho.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu a ten log z nového HJT.

[machro222]

Malwarebytes' Anti-Malware 1.41
Verze databáze: 2856
Windows 5.1.2600 Service Pack 3

24.9.2009 20:01:38
mbam-log-2009-09-24 (20-01-38).txt

Typ kontroly: Rychlá kontrola
Zkontrolované objekty: 86598
Uplynulý čas: 4 minute(s), 37 second(s)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované hodnoty registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
(Nebyly nalezeny žádné škodlivé položky)


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:15:24, on 24.9.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\windows\system32\PnkBstrA.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\windows\system32\svchost.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\windows\Mixer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\SYSTEM32\ATIPTAXX.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\SaveSnap\SaveSnap.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\windows\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [AtiPTA] C:\WINDOWS\SYSTEM32\ATIPTAXX.EXE
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: SaveSnap.lnk = C:\Program Files\SaveSnap\SaveSnap.exe
O4 - Startup: Zástupce - dslmon.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://download.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 2999884000
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\windows\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--
End of file - 7958 bytes

[Damned]

Odinstaluj si i Daemon Tools Toolbar.

Spusť HJT (HijackThis), vypni prohlížeče, odpoj se od internetu a fixni (spustit HJT, "Do a system scan only",
zatrhnout políčko před hodnotou, zmáčknout "Fix checked" a poté "Ano"):

O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
O3 - Toolbar: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - (no file)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
*****************************************************************************************************************************************
Vypni rezidentní štít antiviru (pokud máš tak i antispyware).
Stáhni si ComboFix (by sUBs)
nebo ComboFix (subs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

[machro222]

ComboFix 09-09-23.02 - Mac 24.09.2009 21:06.1.1 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1535.1108 [GMT 2:00]
Spuštěný z: c:\documents and settings\Mac\Plocha\ComboFix.exe
AV: avast! antivirus 4.8.1351 [VPS 090924-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Mac\Dokumenty\cc_20090924_100523.reg
c:\windows\regedit.com
c:\windows\system32\taskmgr.com

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-08-24 do 2009-09-24 )))))))))))))))))))))))))))))))
.

2009-09-24 18:10 . 2009-09-24 18:10 -------- d-----w- c:\program files\Trend Micro
2009-09-24 13:08 . 2003-12-11 09:15 626960 ----a-r- c:\windows\system32\hpvaut32.dll
2009-09-24 13:08 . 2003-12-11 09:15 487424 ----a-r- c:\windows\system32\hpvcp70.dll
2009-09-24 13:08 . 2003-12-11 09:15 44544 ----a-r- c:\windows\system32\MSXML4a.dll
2009-09-24 13:08 . 2003-12-11 09:15 344064 ----a-r- c:\windows\system32\hpvcr70.dll
2009-09-24 13:07 . 2009-09-24 13:08 -------- d-----w- c:\program files\Hewlett-Packard
2009-09-24 13:07 . 2009-09-24 13:07 -------- d-----w- c:\program files\HP
2009-09-24 12:54 . 2001-10-24 10:25 94720 -c--a-w- c:\windows\system32\dllcache\umaxud32.dll
2009-09-24 12:54 . 2001-10-24 10:25 94720 ----a-w- c:\windows\system32\umaxud32.dll
2009-09-24 12:54 . 2001-10-24 10:25 69632 -c--a-w- c:\windows\system32\dllcache\umaxu12.dll
2009-09-24 12:54 . 2001-10-24 10:25 69632 ----a-w- c:\windows\system32\umaxu12.dll
2009-09-24 12:54 . 2001-10-24 10:25 50688 -c--a-w- c:\windows\system32\dllcache\umaxscan.dll
2009-09-24 12:54 . 2001-10-24 10:25 50688 ----a-w- c:\windows\system32\umaxscan.dll
2009-09-24 12:54 . 2008-04-13 22:15 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2009-09-24 12:54 . 2008-04-13 22:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2009-09-24 08:20 . 1997-11-19 13:49 303616 ----a-w- c:\windows\IsUninst.exe
2009-09-24 08:03 . 2009-09-24 08:03 -------- d-----w- c:\program files\CCleaner
2009-09-24 07:18 . 2009-09-24 08:06 -------- d--h--w- c:\windows\$hf_mig$
2009-09-23 22:20 . 2009-09-23 22:20 -------- d-sh--w- c:\documents and settings\All Users\DRM
2009-09-23 22:16 . 2008-04-14 06:51 81920 ------w- c:\windows\system32\ieencode.dll
2009-09-23 22:11 . 2009-09-23 22:11 -------- d-----w- c:\documents and settings\All Users\Dokumenty
2009-09-23 20:42 . 2009-09-24 17:49 -------- d-----w- c:\documents and settings\All Users\Plocha
2009-09-23 14:34 . 2009-09-23 14:34 -------- d---a-w- c:\windows\rundll16.exe
2009-09-23 14:34 . 2009-09-23 14:34 -------- d---a-w- c:\windows\logo1_.exe
2009-09-23 12:29 . 2009-09-23 12:29 -------- d-----w- c:\documents and settings\All Users\Šablony
2009-09-23 12:23 . 2009-09-23 22:16 -------- d-----r- c:\documents and settings\All Users\Nabídka Start
2009-09-23 11:55 . 2009-09-24 17:51 -------- d-----w- c:\documents and settings\All Users\Data aplikací
2009-09-23 11:55 . 2009-09-23 22:20 -------- d-----w- c:\documents and settings\All Users
2009-09-23 10:44 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-23 10:44 . 2009-09-23 10:44 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-23 10:44 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-23 09:16 . 2009-09-23 09:16 -------- d---a-w- c:\windows\VDLL.DLL
2009-09-23 09:16 . 2009-09-23 09:16 -------- d---a-w- c:\windows\system32\runouce.exe
2009-09-23 09:16 . 2009-09-23 09:16 -------- d---a-w- c:\windows\RUNDL132.EXE
2009-09-23 09:16 . 2009-09-23 09:16 -------- d---a-w- c:\windows\logo_1.exe
2009-09-23 09:14 . 2009-09-23 09:14 632064 ----a-w- c:\windows\system32\msvcr80.dll
2009-09-23 09:14 . 2009-09-23 09:14 554240 ----a-w- c:\windows\system32\msvcp80.dll
2009-09-23 09:14 . 2009-09-23 09:14 34048 ----a-w- c:\windows\system32\eEmpty.exe
2009-09-23 09:14 . 2008-04-14 03:22 137216 ----a-w- c:\windows\system32\T.COM
2009-09-23 09:14 . 2008-04-14 03:22 147968 ----a-w- c:\windows\R.COM
2009-09-23 09:14 . 2009-09-23 09:14 -------- d-----w- c:\program files\Common Files\MicroWorld
2009-09-22 20:03 . 2009-09-22 20:03 139152 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-09-22 20:03 . 2009-09-22 20:03 111928 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-09-22 20:03 . 2009-09-22 20:03 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2009-09-22 20:03 . 2009-09-22 20:03 794408 ----a-w- c:\windows\system32\pbsvc.exe
2009-09-22 20:03 . 2009-09-22 20:03 -------- d-----w- c:\windows\system32\LogFiles
2009-09-22 19:51 . 2009-09-22 19:51 -------- d-sh--w- c:\windows\ftpcache
2009-09-22 19:50 . 2009-09-22 19:50 -------- d-----w- c:\program files\Activision
2009-09-20 21:12 . 2009-09-20 21:12 -------- d-----w- c:\program files\MSECache
2009-09-20 21:10 . 2009-09-20 21:14 -------- d--h--w- c:\windows\msdownld.tmp
2009-09-20 21:10 . 2009-09-22 20:04 -------- d-----w- c:\windows\Logs
2009-09-20 15:50 . 2009-09-20 15:50 -------- d-----w- c:\program files\MSXML 4.0
2009-09-20 15:40 . 2009-09-20 15:40 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2009-09-20 15:37 . 2009-09-24 18:53 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2009-09-20 15:37 . 2009-09-20 15:37 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-09-19 22:35 . 2009-09-19 22:35 -------- d-----w- c:\program files\Windows Sidebar
2009-09-19 22:04 . 2009-09-19 22:36 -------- d-----w- c:\program files\Nero
2009-09-19 22:03 . 2009-09-19 22:52 -------- d-----w- c:\program files\Common Files\Nero
2009-09-19 21:50 . 2009-09-19 21:51 -------- d-----w- c:\program files\MegaSpoof
2009-09-19 21:47 . 2009-09-20 15:35 -------- d-----w- c:\program files\SaveSnap
2009-09-19 21:38 . 2009-05-15 12:45 21192 ----a-w- c:\windows\system32\dopdfmn6.dll
2009-09-19 21:38 . 2009-05-15 12:45 18632 ----a-w- c:\windows\system32\dopdfmi6.dll
2009-09-19 21:37 . 2009-09-19 21:37 -------- d-----w- c:\program files\Softland
2009-09-19 21:37 . 2009-09-19 21:37 717296 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-09-19 21:35 . 2009-09-19 21:35 -------- d-----w- c:\program files\XviD
2009-09-19 21:35 . 2009-09-19 21:35 -------- d-----w- c:\program files\AviSynth 2.5
2009-09-19 21:35 . 2009-09-19 21:35 -------- d-----w- c:\program files\Gabest
2009-09-19 21:35 . 2009-09-19 21:35 -------- d-----w- c:\program files\AutoGK
2009-09-19 21:32 . 2009-09-19 21:32 -------- d-----w- c:\program files\Womble Multimedia
2009-09-19 21:26 . 2009-09-19 21:26 47360 ----a-w- c:\windows\system32\drivers\Pcouffin.sys
2009-09-19 21:26 . 2009-09-19 21:26 -------- d-----w- c:\program files\vso
2009-09-19 21:18 . 2009-09-04 01:36 299008 ----a-w- c:\windows\system32\TubeFinder.exe
2009-09-19 21:18 . 2009-06-19 17:51 119568 ----a-w- c:\windows\system32\VB6FR.DLL
2009-09-19 21:18 . 2009-06-19 17:51 101888 ----a-w- c:\windows\system32\VB6STKIT.DLL
2009-09-19 21:18 . 2009-09-19 21:23 -------- d-----w- c:\program files\Free FLV Converter
2009-09-19 21:18 . 2009-06-19 17:51 9728 ----a-w- c:\windows\system32\PCCLPFR.DLL
2009-09-19 21:18 . 2009-06-19 17:51 32768 ----a-w- c:\windows\system32\CMDLGFR.DLL
2009-09-19 21:18 . 2009-06-19 17:51 141312 ----a-w- c:\windows\system32\MSCMCFR.DLL
2009-09-18 20:56 . 2009-09-18 20:56 -------- d-----w- c:\documents and settings\Mac\Spyware Terminator
2009-09-18 20:54 . 2008-04-14 03:22 221184 ----a-w- c:\windows\system32\wmpns.dll
2009-09-18 20:18 . 2009-09-18 20:18 142592 ----a-w- c:\windows\system32\drivers\sp_rsdrv2.sys
2009-09-18 20:18 . 2009-09-18 20:20 -------- d-----w- c:\program files\Spyware Terminator
2009-09-18 17:45 . 2003-05-22 11:26 638976 ----a-w- c:\windows\system32\divx.dll
2009-09-18 17:45 . 2003-05-21 22:50 261632 ----a-w- c:\windows\system32\mcdvd_32.dll
2009-09-18 17:45 . 2002-08-19 23:41 413760 ----a-w- c:\windows\system32\mpg4c32.dll
2009-09-18 17:08 . 2009-09-18 17:08 -------- d-----w- c:\program files\uTorrent
2009-09-18 16:36 . 2009-09-18 16:36 472576 ----a-w- c:\windows\Radeon Omega Drivers v4.8.442 Uninstall.exe
2009-09-18 16:36 . 2009-09-18 16:36 -------- d-----w- c:\program files\Radeon Omega Drivers
2009-09-17 20:07 . 2009-09-17 20:07 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-09-17 20:07 . 2009-09-17 20:07 -------- d-----w- c:\program files\Java
2009-09-16 20:29 . 2009-09-16 20:29 -------- d-----w- c:\program files\Common Files\Adobe Systems Shared
2009-09-16 20:28 . 2009-09-16 20:29 -------- d-----w- c:\program files\Common Files\Adobe
2009-09-16 20:09 . 2009-09-16 20:09 -------- d-----w- c:\program files\Maxthon
2009-09-15 20:38 . 2009-09-18 20:02 -------- d-----w- c:\program files\Common Files\AVSMedia
2009-09-15 20:38 . 2009-09-15 20:38 -------- d-----w- c:\windows\system32\drivers\umdf
2009-09-15 20:37 . 2008-08-13 09:22 974848 ----a-w- c:\windows\system32\mfc70.dll
2009-09-15 20:37 . 2008-08-13 09:22 487424 ----a-w- c:\windows\system32\msvcp70.dll
2009-09-15 20:37 . 2008-08-13 09:22 344064 ----a-w- c:\windows\system32\msvcr70.dll
2009-09-15 20:37 . 2008-08-13 09:22 1700352 ----a-w- c:\windows\system32\GdiPlus.dll
2009-09-15 20:37 . 2008-08-13 09:22 24576 ----a-w- c:\windows\system32\msxml3a.dll
2009-09-15 20:36 . 2009-09-22 19:37 -------- d-----w- c:\program files\FreeRapid-0.82
2009-09-15 20:04 . 2006-10-26 17:56 32592 ----a-w- c:\windows\system32\msonpmon.dll
2009-09-15 20:03 . 2009-09-15 20:03 -------- d-----w- c:\program files\Microsoft Works
2009-09-15 20:02 . 2009-09-15 20:02 -------- d-----w- c:\program files\Microsoft.NET
2009-09-15 20:00 . 2009-09-15 20:00 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2009-09-15 20:00 . 2009-09-15 20:00 -------- d-----w- c:\windows\SHELLNEW
2009-09-15 19:59 . 2009-09-15 19:59 -------- d-----r- C:\MSOCache
2009-09-15 19:56 . 2009-09-15 19:56 -------- d-----w- c:\documents and settings\Mac\Panel
2009-09-15 19:56 . 2009-09-15 19:56 -------- d-----w- c:\documents and settings\Mac\Ikony
2009-09-15 19:51 . 2009-09-15 19:52 -------- d-----w- c:\documents and settings\Mac\Hry
2009-09-15 10:07 . 2009-09-15 10:07 -------- d-----w- c:\program files\Totalcom
2009-09-15 09:41 . 2009-09-15 09:41 -------- d-----w- c:\program files\Yahoo!
2009-09-15 09:15 . 2009-09-15 09:15 -------- d-----w- c:\program files\GRETECH
2009-09-15 09:03 . 2009-09-15 09:03 -------- d-----w- c:\program files\MSBuild
2009-09-15 09:00 . 2009-09-16 20:34 -------- d-----w- c:\windows\system32\XPSViewer
2009-09-15 09:00 . 2009-09-15 09:00 -------- d-----w- c:\program files\Reference Assemblies
2009-09-15 09:00 . 2006-06-29 11:07 14048 ------w- c:\windows\system32\spmsg2.dll
2009-09-15 08:48 . 2009-09-15 08:48 -------- d-sh--w- c:\documents and settings\Mac\IECompatCache
2009-09-15 08:48 . 2009-09-15 08:48 -------- d-sh--w- c:\documents and settings\Mac\PrivacIE
2009-09-15 08:36 . 2009-09-15 08:36 -------- d-sh--w- c:\documents and settings\Mac\IETldCache
2009-09-15 08:31 . 2009-08-07 08:48 100352 -c----w- c:\windows\system32\dllcache\iecompat.dll
2009-09-15 08:31 . 2009-09-16 20:30 -------- d-----w- c:\windows\ie8updates
2009-09-15 08:31 . 2009-07-19 16:46 11067392 -c----w- c:\windows\system32\dllcache\ieframe.dll
2009-09-15 08:31 . 2009-07-03 16:59 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-09-15 08:31 . 2009-07-03 16:59 594432 -c----w- c:\windows\system32\dllcache\msfeeds.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-22 20:07 . 2009-09-14 22:37 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-09-18 16:32 . 2009-09-14 22:54 -------- d-----w- c:\program files\ATI Technologies
2009-09-16 20:37 . 2001-10-25 12:00 79242 ----a-w- c:\windows\system32\perfc005.dat
2009-09-16 20:37 . 2001-10-25 12:00 432278 ----a-w- c:\windows\system32\perfh005.dat
2009-09-15 09:37 . 2009-09-15 09:37 -------- d-----w- c:\program files\Alwil Software
2009-09-14 23:03 . 2009-09-14 23:03 0 ----a-w- c:\windows\ativpsrm.bin
2009-09-14 22:37 . 2009-09-14 22:37 23 ----a-w- c:\windows\system32\drivers\adidsl.cfg
2009-09-14 22:37 . 2009-09-14 22:37 -------- d-----w- c:\program files\SAGEM
2009-09-14 22:37 . 2009-09-14 22:26 -------- d-----w- c:\program files\Common Files\InstallShield
2009-09-14 22:35 . 2009-09-14 22:35 -------- d-----w- c:\program files\C-Media
2009-09-14 22:28 . 2009-09-14 22:28 -------- d-----w- c:\program files\DIFX
2009-09-14 22:21 . 2009-09-14 22:21 -------- d-----w- c:\program files\microsoft frontpage
2009-09-14 22:17 . 2009-09-14 22:17 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2009-09-04 15:44 . 2009-09-20 21:14 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2009-09-04 15:44 . 2009-09-20 21:14 238936 ----a-w- c:\windows\system32\xactengine3_5.dll
2009-09-04 15:44 . 2009-09-20 21:14 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2009-09-04 15:29 . 2009-09-20 21:14 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2009-09-04 15:29 . 2009-09-20 21:14 235344 ----a-w- c:\windows\system32\d3dx11_42.dll
2009-09-04 15:29 . 2009-09-20 21:14 5501792 ----a-w- c:\windows\system32\d3dcsx_42.dll
2009-09-04 15:29 . 2009-09-20 21:14 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2009-09-04 15:29 . 2009-09-20 21:14 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2009-08-17 16:10 . 2009-09-15 09:37 1279456 ----a-w- c:\windows\system32\aswBoot.exe
2009-08-17 16:06 . 2009-09-15 09:37 93392 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-08-17 16:06 . 2009-09-15 09:37 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-08-17 16:05 . 2009-09-15 09:37 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-08-17 16:05 . 2009-09-15 09:37 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-08-17 16:04 . 2009-09-15 09:37 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-08-17 16:04 . 2009-09-15 09:37 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-08-17 16:03 . 2009-09-15 09:37 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-08-17 16:02 . 2009-09-15 09:37 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-08-05 09:01 . 2004-08-17 13:49 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-07-29 04:36 . 2004-08-17 13:49 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-07-29 04:36 . 2001-10-25 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-07-17 19:04 . 2004-08-17 13:49 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-12 10:21 . 2004-08-17 13:49 233472 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-03 16:59 . 2004-08-17 13:49 915456 ----a-w- c:\windows\system32\wininet.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2009-09-18 3055616]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-07-24 490952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-08-17 81000]
"AtiPTA"="c:\windows\SYSTEM32\ATIPTAXX.EXE" [2006-02-22 344064]
"HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 241664]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2004-03-04 172032]
"C-Media Mixer"="Mixer.exe" - c:\windows\mixer.exe [2002-07-12 1581056]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Mac\Nabˇdka Start\Programy\Po spuçtŘnˇ\
SaveSnap.lnk - c:\program files\SaveSnap\SaveSnap.exe [2009-9-19 1264128]
Z stupce - dslmon.lnk - c:\program files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2009-9-15 962663]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Java\\jre6\\launch4j-tmp\\frd.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=
"c:\\Program Files\\Maxthon\\Maxthon.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Activision\\Wolfenstein\\MP\\Wolf2MP.exe"=
"c:\\Program Files\\Activision\\Wolfenstein\\MP\\Wolf2MPLite.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [15.9.2009 11:37 114768]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [18.9.2009 22:18 142592]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [15.9.2009 11:37 20560]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: microsoft.com\*.update
Trusted Zone: microsoft.com\*.windowsupdate
Trusted Zone: microsoft.com\update
Trusted Zone: windowsupdate.com
Trusted Zone: windowsupdate.com\download
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-2kv4.8.442 - c:\windows\Radeon Omega Drivers v4.8.442



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-24 21:09
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(696)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2009-09-24 21:10
ComboFix-quarantined-files.txt 2009-09-24 19:10

Před spuštěním: Volných bajtů: 30 099 312 640
Po spuštění: Volných bajtů: 30 065 946 624

271 --- E O F --- 2009-09-24 08:06

[Damned]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok).
Zkopíruj do něj následující celý text označený zeleně:

File::
c:\windows\system32\eEmpty.exe
c:\windows\msdownld.tmp

Folder::
c:\windows\rundll16.exe
c:\windows\logo1_.exe
c:\windows\VDLL.DLL
c:\windows\system32\runouce.exe
c:\windows\RUNDL132.EXE
c:\windows\logo_1.exe
c:\program files\DAEMON Tools Toolbar




Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.


Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe
a když se oba soubory překryjí, skript upusť.


- Automaticky se spustí ComboFix, oprava může trvat i déle než 10 minut. ! Nech ComboFix dokončit svou práci !
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT a popiš chování počítače

[machro222]

ComboFix 09-09-25.01 - Mac 25.09.2009 22:32.3.1 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1535.1025 [GMT 2:00]
Spuštěný z: c:\documents and settings\Mac\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Mac\Plocha\CFScript.txt
AV: avast! antivirus 4.8.1351 [VPS 090925-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!

FILE ::
"c:\windows\msdownld.tmp"
"c:\windows\system32\eEmpty.exe"
.

((((((((((((((((((((((((( Soubory vytvořené od 2009-08-25 do 2009-09-25 )))))))))))))))))))))))))))))))
.

2009-09-24 23:06 . 2009-09-24 23:06 -------- d-----w- c:\program files\Total Uninstall 4
2009-09-24 22:51 . 2009-09-24 22:51 -------- d-----w- c:\documents and settings\Mac\WINDOWS
2009-09-24 22:48 . 2009-09-24 22:48 -------- d-----w- c:\program files\EDDICA
2009-09-24 20:07 . 2001-10-25 12:00 4952 ----a-r- C:\Bootfont.bin
2009-09-24 18:10 . 2009-09-24 18:10 -------- d-----w- c:\program files\Trend Micro
2009-09-24 13:08 . 2003-12-11 09:15 626960 ----a-r- c:\windows\system32\hpvaut32.dll
2009-09-24 13:08 . 2003-12-11 09:15 487424 ----a-r- c:\windows\system32\hpvcp70.dll
2009-09-24 13:08 . 2003-12-11 09:15 44544 ----a-r- c:\windows\system32\MSXML4a.dll
2009-09-24 13:08 . 2003-12-11 09:15 344064 ----a-r- c:\windows\system32\hpvcr70.dll
2009-09-24 13:07 . 2009-09-24 13:08 -------- d-----w- c:\program files\Hewlett-Packard
2009-09-24 13:07 . 2009-09-24 13:07 -------- d-----w- c:\program files\HP
2009-09-24 12:54 . 2001-10-24 10:25 94720 -c--a-w- c:\windows\system32\dllcache\umaxud32.dll
2009-09-24 12:54 . 2001-10-24 10:25 94720 ----a-w- c:\windows\system32\umaxud32.dll
2009-09-24 12:54 . 2001-10-24 10:25 69632 -c--a-w- c:\windows\system32\dllcache\umaxu12.dll
2009-09-24 12:54 . 2001-10-24 10:25 69632 ----a-w- c:\windows\system32\umaxu12.dll
2009-09-24 12:54 . 2001-10-24 10:25 50688 -c--a-w- c:\windows\system32\dllcache\umaxscan.dll
2009-09-24 12:54 . 2001-10-24 10:25 50688 ----a-w- c:\windows\system32\umaxscan.dll
2009-09-24 12:54 . 2008-04-13 22:15 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2009-09-24 12:54 . 2008-04-13 22:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2009-09-24 08:20 . 1997-11-19 13:49 303616 ----a-w- c:\windows\IsUninst.exe
2009-09-24 08:03 . 2009-09-24 08:03 -------- d-----w- c:\program files\CCleaner
2009-09-24 07:18 . 2009-09-24 08:06 -------- d--h--w- c:\windows\$hf_mig$
2009-09-23 22:20 . 2009-09-23 22:20 -------- d-sh--w- c:\documents and settings\All Users\DRM
2009-09-23 22:16 . 2008-04-14 06:51 81920 ------w- c:\windows\system32\ieencode.dll
2009-09-23 22:11 . 2009-09-23 22:11 -------- d-----w- c:\documents and settings\All Users\Dokumenty
2009-09-23 20:42 . 2009-09-25 20:08 -------- d-----w- c:\documents and settings\All Users\Plocha
2009-09-23 12:29 . 2009-09-23 12:29 -------- d-----w- c:\documents and settings\All Users\Šablony
2009-09-23 12:23 . 2009-09-23 22:16 -------- d-----r- c:\documents and settings\All Users\Nabídka Start
2009-09-23 11:55 . 2009-09-24 23:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací
2009-09-23 11:55 . 2009-09-23 22:20 -------- d-----w- c:\documents and settings\All Users
2009-09-23 10:44 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-23 10:44 . 2009-09-23 10:44 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-23 10:44 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-23 09:14 . 2009-09-23 09:14 632064 ----a-w- c:\windows\system32\msvcr80.dll
2009-09-23 09:14 . 2009-09-23 09:14 554240 ----a-w- c:\windows\system32\msvcp80.dll
2009-09-23 09:14 . 2008-04-14 03:22 137216 ----a-w- c:\windows\system32\T.COM
2009-09-23 09:14 . 2008-04-14 03:22 147968 ----a-w- c:\windows\R.COM
2009-09-23 09:14 . 2009-09-23 09:14 -------- d-----w- c:\program files\Common Files\MicroWorld
2009-09-22 20:03 . 2009-09-22 20:03 139152 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-09-22 20:03 . 2009-09-22 20:03 111928 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-09-22 20:03 . 2009-09-22 20:03 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2009-09-22 20:03 . 2009-09-22 20:03 794408 ----a-w- c:\windows\system32\pbsvc.exe
2009-09-22 20:03 . 2009-09-22 20:03 -------- d-----w- c:\windows\system32\LogFiles
2009-09-22 19:51 . 2009-09-22 19:51 -------- d-sh--w- c:\windows\ftpcache
2009-09-22 19:50 . 2009-09-22 19:50 -------- d-----w- c:\program files\Activision
2009-09-20 21:12 . 2009-09-20 21:12 -------- d-----w- c:\program files\MSECache
2009-09-20 21:10 . 2009-09-20 21:14 -------- d--h--w- c:\windows\msdownld.tmp
2009-09-20 21:10 . 2009-09-22 20:04 -------- d-----w- c:\windows\Logs
2009-09-20 15:50 . 2009-09-20 15:50 -------- d-----w- c:\program files\MSXML 4.0
2009-09-20 15:40 . 2009-09-20 15:40 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2009-09-19 22:35 . 2009-09-19 22:35 -------- d-----w- c:\program files\Windows Sidebar
2009-09-19 22:04 . 2009-09-19 22:36 -------- d-----w- c:\program files\Nero
2009-09-19 22:03 . 2009-09-19 22:52 -------- d-----w- c:\program files\Common Files\Nero
2009-09-19 21:50 . 2009-09-19 21:51 -------- d-----w- c:\program files\MegaSpoof
2009-09-19 21:47 . 2009-09-20 15:35 -------- d-----w- c:\program files\SaveSnap
2009-09-19 21:38 . 2009-05-15 12:45 21192 ----a-w- c:\windows\system32\dopdfmn6.dll
2009-09-19 21:38 . 2009-05-15 12:45 18632 ----a-w- c:\windows\system32\dopdfmi6.dll
2009-09-19 21:37 . 2009-09-19 21:37 -------- d-----w- c:\program files\Softland
2009-09-19 21:37 . 2009-09-19 21:37 717296 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-09-19 21:35 . 2009-09-19 21:35 -------- d-----w- c:\program files\XviD
2009-09-19 21:35 . 2009-09-19 21:35 -------- d-----w- c:\program files\AviSynth 2.5
2009-09-19 21:35 . 2009-09-19 21:35 -------- d-----w- c:\program files\Gabest
2009-09-19 21:35 . 2009-09-19 21:35 -------- d-----w- c:\program files\AutoGK
2009-09-19 21:32 . 2009-09-19 21:32 -------- d-----w- c:\program files\Womble Multimedia
2009-09-19 21:26 . 2009-09-19 21:26 47360 ----a-w- c:\windows\system32\drivers\Pcouffin.sys
2009-09-19 21:26 . 2009-09-19 21:26 -------- d-----w- c:\program files\vso
2009-09-19 21:18 . 2009-09-04 01:36 299008 ----a-w- c:\windows\system32\TubeFinder.exe
2009-09-19 21:18 . 2009-06-19 17:51 119568 ----a-w- c:\windows\system32\VB6FR.DLL
2009-09-19 21:18 . 2009-06-19 17:51 101888 ----a-w- c:\windows\system32\VB6STKIT.DLL
2009-09-19 21:18 . 2009-09-19 21:23 -------- d-----w- c:\program files\Free FLV Converter
2009-09-19 21:18 . 2009-06-19 17:51 9728 ----a-w- c:\windows\system32\PCCLPFR.DLL
2009-09-19 21:18 . 2009-06-19 17:51 32768 ----a-w- c:\windows\system32\CMDLGFR.DLL
2009-09-19 21:18 . 2009-06-19 17:51 141312 ----a-w- c:\windows\system32\MSCMCFR.DLL
2009-09-18 20:56 . 2009-09-18 20:56 -------- d-----w- c:\documents and settings\Mac\Spyware Terminator
2009-09-18 20:54 . 2008-04-14 03:22 221184 ----a-w- c:\windows\system32\wmpns.dll
2009-09-18 20:18 . 2009-09-18 20:18 142592 ----a-w- c:\windows\system32\drivers\sp_rsdrv2.sys
2009-09-18 20:18 . 2009-09-18 20:20 -------- d-----w- c:\program files\Spyware Terminator
2009-09-18 17:45 . 2003-05-22 11:26 638976 ----a-w- c:\windows\system32\divx.dll
2009-09-18 17:45 . 2003-05-21 22:50 261632 ----a-w- c:\windows\system32\mcdvd_32.dll
2009-09-18 17:45 . 2002-08-19 23:41 413760 ----a-w- c:\windows\system32\mpg4c32.dll
2009-09-18 17:08 . 2009-09-18 17:08 -------- d-----w- c:\program files\uTorrent
2009-09-18 16:36 . 2009-09-18 16:36 472576 ----a-w- c:\windows\Radeon Omega Drivers v4.8.442 Uninstall.exe
2009-09-18 16:36 . 2009-09-18 16:36 -------- d-----w- c:\program files\Radeon Omega Drivers
2009-09-17 20:07 . 2009-09-17 20:07 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-09-17 20:07 . 2009-09-17 20:07 -------- d-----w- c:\program files\Java
2009-09-16 20:29 . 2009-09-16 20:29 -------- d-----w- c:\program files\Common Files\Adobe Systems Shared
2009-09-16 20:28 . 2009-09-16 20:29 -------- d-----w- c:\program files\Common Files\Adobe
2009-09-16 20:09 . 2009-09-16 20:09 -------- d-----w- c:\program files\Maxthon
2009-09-15 20:38 . 2009-09-18 20:02 -------- d-----w- c:\program files\Common Files\AVSMedia
2009-09-15 20:38 . 2009-09-15 20:38 -------- d-----w- c:\windows\system32\drivers\umdf
2009-09-15 20:37 . 2008-08-13 09:22 974848 ----a-w- c:\windows\system32\mfc70.dll
2009-09-15 20:37 . 2008-08-13 09:22 487424 ----a-w- c:\windows\system32\msvcp70.dll
2009-09-15 20:37 . 2008-08-13 09:22 344064 ----a-w- c:\windows\system32\msvcr70.dll
2009-09-15 20:37 . 2008-08-13 09:22 1700352 ----a-w- c:\windows\system32\GdiPlus.dll
2009-09-15 20:37 . 2008-08-13 09:22 24576 ----a-w- c:\windows\system32\msxml3a.dll
2009-09-15 20:36 . 2009-09-22 19:37 -------- d-----w- c:\program files\FreeRapid-0.82
2009-09-15 20:04 . 2006-10-26 17:56 32592 ----a-w- c:\windows\system32\msonpmon.dll
2009-09-15 20:03 . 2009-09-15 20:03 -------- d-----w- c:\program files\Microsoft Works
2009-09-15 20:02 . 2009-09-15 20:02 -------- d-----w- c:\program files\Microsoft.NET
2009-09-15 20:00 . 2009-09-15 20:00 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2009-09-15 20:00 . 2009-09-15 20:00 -------- d-----w- c:\windows\SHELLNEW
2009-09-15 19:59 . 2009-09-15 19:59 -------- d-----r- C:\MSOCache
2009-09-15 19:56 . 2009-09-15 19:56 -------- d-----w- c:\documents and settings\Mac\Panel
2009-09-15 19:56 . 2009-09-15 19:56 -------- d-----w- c:\documents and settings\Mac\Ikony
2009-09-15 19:51 . 2009-09-15 19:52 -------- d-----w- c:\documents and settings\Mac\Hry
2009-09-15 10:07 . 2009-09-15 10:07 -------- d-----w- c:\program files\Totalcom
2009-09-15 09:41 . 2009-09-15 09:41 -------- d-----w- c:\program files\Yahoo!
2009-09-15 09:15 . 2009-09-15 09:15 -------- d-----w- c:\program files\GRETECH
2009-09-15 09:03 . 2009-09-15 09:03 -------- d-----w- c:\program files\MSBuild
2009-09-15 09:00 . 2009-09-16 20:34 -------- d-----w- c:\windows\system32\XPSViewer
2009-09-15 09:00 . 2009-09-15 09:00 -------- d-----w- c:\program files\Reference Assemblies
2009-09-15 09:00 . 2006-06-29 11:07 14048 ------w- c:\windows\system32\spmsg2.dll
2009-09-15 08:48 . 2009-09-15 08:48 -------- d-sh--w- c:\documents and settings\Mac\IECompatCache
2009-09-15 08:48 . 2009-09-15 08:48 -------- d-sh--w- c:\documents and settings\Mac\PrivacIE
2009-09-15 08:36 . 2009-09-15 08:36 -------- d-sh--w- c:\documents and settings\Mac\IETldCache
2009-09-15 08:31 . 2009-08-07 08:48 100352 -c----w- c:\windows\system32\dllcache\iecompat.dll
2009-09-15 08:31 . 2009-09-16 20:30 -------- d-----w- c:\windows\ie8updates
2009-09-15 08:31 . 2009-07-19 16:46 11067392 -c----w- c:\windows\system32\dllcache\ieframe.dll
2009-09-15 08:31 . 2009-07-03 16:59 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-09-15 08:31 . 2009-07-03 16:59 594432 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2009-09-15 08:31 . 2009-07-03 16:59 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2009-09-15 08:31 . 2009-07-03 16:59 1985536 -c----w- c:\windows\system32\dllcache\iertutil.dll
2009-09-15 08:31 . 2009-07-03 16:59 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2009-09-15 08:31 . 2009-09-15 08:31 -------- dc-h--w- c:\windows\ie8
2009-09-15 08:02 . 2009-06-21 21:48 153088 -c----w- c:\windows\system32\dllcache\triedit.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-22 20:07 . 2009-09-14 22:37 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-09-18 16:32 . 2009-09-14 22:54 -------- d-----w- c:\program files\ATI Technologies
2009-09-16 20:37 . 2001-10-25 12:00 79242 ----a-w- c:\windows\system32\perfc005.dat
2009-09-16 20:37 . 2001-10-25 12:00 432278 ----a-w- c:\windows\system32\perfh005.dat
2009-09-15 09:37 . 2009-09-15 09:37 -------- d-----w- c:\program files\Alwil Software
2009-09-14 23:03 . 2009-09-14 23:03 0 ----a-w- c:\windows\ativpsrm.bin
2009-09-14 22:37 . 2009-09-14 22:37 23 ----a-w- c:\windows\system32\drivers\adidsl.cfg
2009-09-14 22:37 . 2009-09-14 22:37 -------- d-----w- c:\program files\SAGEM
2009-09-14 22:37 . 2009-09-14 22:26 -------- d-----w- c:\program files\Common Files\InstallShield
2009-09-14 22:35 . 2009-09-14 22:35 -------- d-----w- c:\program files\C-Media
2009-09-14 22:28 . 2009-09-14 22:28 -------- d-----w- c:\program files\DIFX
2009-09-14 22:21 . 2009-09-14 22:21 -------- d-----w- c:\program files\microsoft frontpage
2009-09-14 22:17 . 2009-09-14 22:17 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2009-09-04 15:44 . 2009-09-20 21:14 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2009-09-04 15:44 . 2009-09-20 21:14 238936 ----a-w- c:\windows\system32\xactengine3_5.dll
2009-09-04 15:44 . 2009-09-20 21:14 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2009-09-04 15:29 . 2009-09-20 21:14 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2009-09-04 15:29 . 2009-09-20 21:14 235344 ----a-w- c:\windows\system32\d3dx11_42.dll
2009-09-04 15:29 . 2009-09-20 21:14 5501792 ----a-w- c:\windows\system32\d3dcsx_42.dll
2009-09-04 15:29 . 2009-09-20 21:14 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2009-09-04 15:29 . 2009-09-20 21:14 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2009-08-17 16:10 . 2009-09-15 09:37 1279456 ----a-w- c:\windows\system32\aswBoot.exe
2009-08-17 16:06 . 2009-09-15 09:37 93392 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-08-17 16:06 . 2009-09-15 09:37 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-08-17 16:05 . 2009-09-15 09:37 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-08-17 16:05 . 2009-09-15 09:37 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-08-17 16:04 . 2009-09-15 09:37 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-08-17 16:04 . 2009-09-15 09:37 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-08-17 16:03 . 2009-09-15 09:37 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-08-17 16:02 . 2009-09-15 09:37 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-08-05 09:01 . 2004-08-17 13:49 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-07-29 04:36 . 2004-08-17 13:49 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-07-29 04:36 . 2001-10-25 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-07-17 19:04 . 2004-08-17 13:49 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-12 10:21 . 2004-08-17 13:49 233472 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-03 16:59 . 2004-08-17 13:49 915456 ------w- c:\windows\system32\wininet.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-09-24_19.10.01 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-09-24 20:45 . 2009-09-24 20:45 16384 c:\windows\Temp\Perflib_Perfdata_e98.dat
+ 2009-09-24 19:21 . 2009-09-24 19:21 16384 c:\windows\Temp\Perflib_Perfdata_5f4.dat
+ 2001-07-14 15:32 . 2001-07-14 15:32 69632 c:\windows\setupupd\temp\wsdueng.dll
+ 2009-09-24 20:06 . 2009-09-24 20:06 12900 c:\windows\setupupd\dudrvs\4541876\hwcomp.dat
+ 2009-09-24 20:06 . 2002-10-09 07:38 32768 c:\windows\setupupd\dudrvs\4541876\CMNPROP.DLL
+ 2009-09-24 20:06 . 2002-11-19 13:46 39104 c:\windows\setupupd\dudrvs\4541876\cmijack.dat
+ 2009-09-24 20:06 . 2002-11-19 13:43 22178 c:\windows\setupupd\dudrvs\4541876\cmaudio.dat
+ 2009-09-24 20:06 . 2000-10-20 16:28 765952 c:\windows\setupupd\dudrvs\4541876\CRLDS3D.DLL
+ 2009-09-24 20:06 . 2002-07-11 09:24 139264 c:\windows\setupupd\dudrvs\4541876\CMUNINST.EXE
+ 2009-09-24 20:06 . 2002-07-11 10:13 135168 c:\windows\setupupd\dudrvs\4541876\CMUNINST.DAT
+ 2009-09-24 20:06 . 2002-11-18 13:51 377358 c:\windows\setupupd\dudrvs\4541876\cmaudio.sys
+ 2009-09-24 20:06 . 2001-11-23 10:08 712704 c:\windows\setupupd\dudrvs\4541876\AUDIO3D.DLL
+ 2009-09-24 20:06 . 2002-10-15 16:00 1818624 c:\windows\setupupd\dudrvs\4541876\MIXER.EXE
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2009-09-18 3055616]
"Total Uninstall Agent"="c:\program files\Total Uninstall 4\TuAgent.exe" [2007-06-08 595000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-08-17 81000]
"AtiPTA"="c:\windows\SYSTEM32\ATIPTAXX.EXE" [2006-02-22 344064]
"HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 241664]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2004-03-04 172032]
"C-Media Mixer"="Mixer.exe" - c:\windows\mixer.exe [2002-07-12 1581056]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Mac\Nabˇdka Start\Programy\Po spuçtŘnˇ\
SaveSnap.lnk - c:\program files\SaveSnap\SaveSnap.exe [2009-9-19 1264128]
Z stupce - dslmon.lnk - c:\program files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2009-9-15 962663]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Java\\jre6\\launch4j-tmp\\frd.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=
"c:\\Program Files\\Maxthon\\Maxthon.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Activision\\Wolfenstein\\MP\\Wolf2MP.exe"=
"c:\\Program Files\\Activision\\Wolfenstein\\MP\\Wolf2MPLite.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [15.9.2009 11:37 114768]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [18.9.2009 22:18 142592]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [15.9.2009 11:37 20560]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: microsoft.com\*.update
Trusted Zone: microsoft.com\*.windowsupdate
Trusted Zone: microsoft.com\update
Trusted Zone: windowsupdate.com
Trusted Zone: windowsupdate.com\download
TCP: {5C2DCBD4-EA92-4ED4-AEF9-EB104227BF3F} = 90.183.231.251 194.228.41.113
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-25 22:34
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(696)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(3756)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2009-09-25 22:35
ComboFix-quarantined-files.txt 2009-09-25 20:35
ComboFix2.txt 2009-09-25 20:22
ComboFix3.txt 2009-09-24 19:10

Před spuštěním: Volných bajtů: 30 857 842 688
Po spuštění: Volných bajtů: 30 847 569 920

291 --- E O F --- 2009-09-24 08:06

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:36:49, on 25.9.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\windows\system32\spoolsv.exe
C:\windows\Mixer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\SYSTEM32\ATIPTAXX.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\windows\system32\PnkBstrA.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\windows\system32\svchost.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\HP\hpcoretech\comp\hpdarc.exe
C:\Program Files\Total Uninstall 4\TuAgent.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files\Maxthon\Maxthon.exe
C:\windows\system32\wscntfy.exe
C:\windows\explorer.exe
C:\windows\system32\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll (file missing)
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [AtiPTA] C:\WINDOWS\SYSTEM32\ATIPTAXX.EXE
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [Total Uninstall Agent] "C:\Program Files\Total Uninstall 4\TuAgent.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: SaveSnap.lnk = C:\Program Files\SaveSnap\SaveSnap.exe
O4 - Startup: Zástupce - dslmon.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://download.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 2999884000
O17 - HKLM\System\CCS\Services\Tcpip\..\{5C2DCBD4-EA92-4ED4-AEF9-EB104227BF3F}: NameServer = 90.183.231.251 194.228.41.113
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\windows\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--
End of file - 7077 bytes
V PC absence konzoly pro zotavení, absence windows update ,ve startu v systémových nástrojích jen internet explorer bez doplňků a v C: chybí složka bot.ini

[Damned]

Konzola pro zotavení se běžně neinstaluje s OS, systémové nástroje taky na zvolení s možností doinstalování a zvolení ve vlastnostech Hlavního Panelu. Všechno to je součást instalačního CD.
ComboFix nastavuje některé hodnoty do výchozích, proto tam je jen IE.
Windows Update ti chybí kde? Toto máš v Oblíbených položkách: Trusted Zone: http://download.windowsupdate.com, Trusted Zone: http://*.windowsupdate.com, podle všeho přes virtuální disk.
Soubor boot.ini nebo boot.bak není ani jako skrytý a systémový soubor?

Pokud jedeš na virtuální disky, soubor boot.ini na C ani nebude. To samý s WU, protože i to máš nastavený jen pro virtuální disk. Hlásí ti při restartu, že boot.ini chybí a že se spouští z C:\Windows?
*****************************************************************************************************************************************
Spusť HJT (HijackThis), vypni prohlížeče, odpoj se od internetu a fixni (spustit HJT, "Do a system scan only",
zatrhnout políčko před hodnotou, zmáčknout "Fix checked" a poté "Ano"):

O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll (file missing)
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"

[machro222]

V PC žádné virtuální disky nemám.Měl jsem tam jen přes daemon jednu hru.Ten jsem si odinstaloval, jak jsi napsal.Chtěl jsem si doinstalovat konzoli pro zotavení s CD a zahlásilo mě to že nemám bot.ini.Nemám ho tam ,ani bak ani skrytý.WU jsem měl vždycky v start/všechny programy.Není tam.V start/všchny programy/systémové nástroje jsem míval i vytvořit kontrolní bod apod.Taky tam není.Jinak mě všechno běží.Při startu nic nehlásí

[Damned]

Při spuštění PC nevyžaduje tedy soubor boot.ini? Nouzový režim ti funguje?

Soubor boot.ini jsem ti přiložil. Extrahuj ho do "C:\".
Zkontroluj nastavení WU z Ovládacích panelů a tam zkontroluj a nastav si i Hlavní panel.
WU zkus z IE8, jestli najde nějakou chybu v nastavení aktualizací.

Podívej, jestli máš v Všechny programy složku Příslušenství, jestli systémové nástroje nejsou tam.

Instalace Konzoly:
-Vlož instalační CD
-Klepni na tlačítko Start a na příkaz Spustit.
-Zadej následující řetězec, kde D: je písmeno jednotky CD-ROM:

Kód: Vybrat vše

D:\i386\winnt32.exe /cmdcons

Postupuj podle pokynů na obrazovce.

[machro222]

Děkuji za bot.ini.Instalace konzoli proběhla v pořádku.Systémové nástroje tam bohužel nejsou.Teď jsem přišel na to že v ovládacích panelech ve složce nástroje pro správu také nic není.

[Damned]

Stáhni si Dial-a-fix. Otevři složku a spusť Dial-a-fix.exe

Zaškrtni Control panel applets a klikni na GO. Nástroj by měl opravit Ovládací panel.