Dobry vecer . tiez mam problem s fb virom. Notebook mi ide pustit iba v nudzovom rezime.
Logfile of random's system information tool 1.09 (written by random/random)
Run by Spravca at 2011-07-30 19:52:17
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 163 GB (74%) free of 221 GB
Total RAM: 1976 MB (78% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:52:41, on 30. 7. 2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Safe mode with network support
Running processes:
C:\windows\Explorer.EXE
C:\windows\system32\ctfmon.exe
C:\Users\Spravca\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Spravca\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Spravca\Downloads\RSIT.exe
C:\Program Files\trend micro\Spravca.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... ll&pf=cmnb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... ll&pf=cmnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... ll&pf=cmnb
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6173\SiteAdv.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (file missing)
O2 - BHO: Pomocník pri prihlasovaní v sieti Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6173\SiteAdv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (file missing)
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [MVS Splash] C:\Program Files\McAfee\Managed VirusScan\Agent\Splash.exe
O4 - HKLM\..\Run: [McAfee Managed Services Tray] C:\Program Files\McAfee\Managed VirusScan\Agent\StartMyAgtTry.Exe
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6173\SiteAdv.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\soundmax.exe /tray
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [aswAhAScr.dll] "C:\Program Files\AVAST Software\Avast\aswRegSvr.exe" "C:\Program Files\AVAST Software\Avast\AhAScr.dll"
O4 - HKCU\..\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [Google Update] "C:\Users\Spravca\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: T-Mobile Communication Centre.lnk = C:\Program Files\T-Mobile Communication Centre\TMCC.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://*.mcafee.com (HKLM)
O15 - Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://www.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://*.mcafee.com (HKLM)
O15 - ESC Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://www.mcafeeasap.com (HKLM)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\windows\system32\AEADISRV.EXE
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: EngineServer - McAfee, Inc. - C:\PROGRA~1\McAfee\MANAGE~1\VScan\ENGINE~1.EXE
O23 - Service: Mobility Manager Service (FMMService) - Flarion Technologies, Inc. - C:\PROGRA~1\T-MOBI~1\drivers\82A885~1\FMMSER~1.EXE
O23 - Service: FOFDM Upgrade (FOFDMUpgrade) - Paradoxx Software - C:\PROGRA~1\T-MOBI~1\FOFDMU~1.EXE
O23 - Service: HP Health Check Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPBOID.EXE
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard - C:\windows\system32\Hpservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McShield - McAfee, Inc. - C:\PROGRA~1\McAfee\MANAGE~1\VScan\McShield.exe
O23 - Service: McAfee Virus and Spyware Protection Service (myAgtSvc) - McAfee, Inc. - C:\Program Files\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\6173\SAService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
--
End of file - 9361 bytes
======Scheduled tasks folder======
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1477078727-1654777056-1478667540-1001Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1477078727-1654777056-1478667540-1001UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{089FD14D-132B-48FC-8861-0048AE113215}]
C:\Program Files\SiteAdvisor\6173\SiteAdv.dll [2007-08-28 910624]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v sieti Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-04 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0BF43445-2F28-4351-9252-17FE6E806AA0} - McAfee SiteAdvisor - C:\Program Files\SiteAdvisor\6173\SiteAdv.dll [2007-08-28 910624]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-07-28 288312]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-08-25 186904]
"PDF Complete"=C:\Program Files\PDF Complete\pdfsty.exe [2009-06-18 563736]
"WirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2009-07-23 498744]
"MVS Splash"=C:\Program Files\McAfee\Managed VirusScan\Agent\Splash.exe [2009-07-16 562496]
"McAfee Managed Services Tray"=C:\Program Files\McAfee\Managed VirusScan\Agent\StartMyAgtTry.Exe [2009-07-16 95552]
"SiteAdvisor"=C:\Program Files\SiteAdvisor\6173\SiteAdv.exe [2007-08-28 36640]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-09-17 1721640]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2009-08-02 141848]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2009-08-02 174104]
"Persistence"=C:\windows\system32\igfxpers.exe [2009-08-02 151064]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-05-18 1314816]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\soundmax.exe [2009-05-18 3866624]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-06-08 37296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"aswAhAScr.dll"=C:\Program Files\AVAST Software\Avast\aswRegSvr.exe C:\Program Files\AVAST Software\Avast\AhAScr.dll []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"HPADVISOR"=C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [2009-07-16 1668664]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2009-06-17 2363392]
"Google Update"=C:\Users\Spravca\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-26 136176]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
T-Mobile Communication Centre.lnk - C:\Program Files\T-Mobile Communication Centre\TMCC.exe
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2009-07-28 216576]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.siren"=sirenacm.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2011-07-30 19:52:17 ----D---- C:\rsit
2011-07-30 19:52:17 ----D---- C:\Program Files\trend micro
2011-07-30 19:00:02 ----D---- C:\ProgramData\AVAST Software
2011-07-30 19:00:02 ----D---- C:\Program Files\AVAST Software
2011-07-30 18:53:12 ----A---- C:\windows\ntbtlog.txt
2011-07-30 14:44:56 ----HD---- C:\ProgramData\Common Files
2011-07-30 14:44:04 ----D---- C:\ProgramData\MFAData
2011-07-29 17:57:25 ----D---- C:\Users\Spravca\AppData\Roaming\ESET
2011-07-29 17:52:43 ----D---- C:\Program Files\ESET
2011-07-29 17:19:40 ----D---- C:\Users\Spravca\AppData\Roaming\Malwarebytes
2011-07-29 17:19:34 ----D---- C:\ProgramData\Malwarebytes
2011-07-29 17:19:31 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-07-29 16:30:02 ----D---- C:\ProgramData\Comodo
2011-07-29 16:29:39 ----D---- C:\ProgramData\Comodo Downloader
2011-07-29 16:19:17 ----D---- C:\Program Files\COMODO
2011-07-29 16:01:50 ----HD---- C:\VritualRoot
2011-07-29 15:42:31 ----HD---- C:\windows\update.tray-5-0
2011-07-27 09:14:54 ----HD---- C:\windows\update.tray-3-0-lnk
2011-07-27 09:14:54 ----HD---- C:\windows\update.tray-3-0
2011-07-26 17:53:18 ----D---- C:\ProgramData\Uniblue
2011-07-20 22:10:23 ----D---- C:\windows\phoenix
2011-07-20 22:09:30 ----HD---- C:\windows\update.2
2011-07-20 22:09:10 ----HD---- C:\windows\update.5.0
2011-07-20 22:05:56 ----D---- C:\windows\av_ico
2011-07-20 22:04:57 ----HD---- C:\windows\update.1
2011-07-20 22:04:53 ----HD---- C:\windows\update.tray-9-0-lnk
2011-07-20 22:04:53 ----HD---- C:\windows\update.tray-9-0
2011-07-14 09:54:16 ----D---- C:\windows\system32\SPReview
2011-07-13 23:22:55 ----A---- C:\windows\system32\KernelBase.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-07-13 23:22:50 ----A---- C:\windows\system32\fsquirt.exe
2011-07-13 23:22:50 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2011-07-13 23:22:50 ----A---- C:\windows\system32\drivers\bthport.sys
2011-07-13 23:22:49 ----A---- C:\windows\system32\kernel32.dll
2011-07-13 23:22:49 ----A---- C:\windows\system32\conhost.exe
2011-07-13 23:22:48 ----A---- C:\windows\system32\winsrv.dll
2011-07-13 23:22:44 ----A---- C:\windows\system32\win32k.sys
2011-07-10 19:33:51 ----D---- C:\Program Files\AMR to MP3 Converter
2011-07-08 17:20:08 ----A---- C:\windows\system32\wininet.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\urlmon.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\SetIEInstalledDate.exe
2011-07-08 17:20:08 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2011-07-08 17:20:08 ----A---- C:\windows\system32\msrating.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\msls31.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\mshtmler.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\msfeedssync.exe
2011-07-08 17:20:08 ----A---- C:\windows\system32\msfeedsbs.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\jsproxy.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\iertutil.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\ieakeng.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\IEAdvpack.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\wextract.exe
2011-07-08 17:20:07 ----A---- C:\windows\system32\webcheck.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\vbscript.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\url.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\pngfilt.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\occache.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\mshtmled.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\mshtml.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\mshta.exe
2011-07-08 17:20:07 ----A---- C:\windows\system32\msfeeds.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\licmgr10.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\jscript9.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\inseng.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\iexpress.exe
2011-07-08 17:20:07 ----A---- C:\windows\system32\ieUnatt.exe
2011-07-08 17:20:07 ----A---- C:\windows\system32\ieui.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\iesysprep.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\iesetup.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\iernonce.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\ieframe.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\iedkcs32.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\ieapfltr.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\ieapfltr.dat
2011-07-08 17:20:07 ----A---- C:\windows\system32\ieakui.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\ieaksie.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\ie4uinit.exe
2011-07-08 17:20:07 ----A---- C:\windows\system32\icardie.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\dxtrans.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\dxtmsft.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\admparse.dll
2011-07-08 17:20:06 ----A---- C:\windows\system32\jscript.dll
2011-07-08 17:20:06 ----A---- C:\windows\system32\imgutil.dll
2011-07-08 17:20:06 ----A---- C:\windows\system32\iepeers.dll
======List of files/folders modified in the last 1 month======
2011-07-31 04:51:39 ----D---- C:\windows\system32\config
2011-07-31 04:51:36 ----D---- C:\windows\winsxs
2011-07-31 04:51:36 ----D---- C:\windows\system32\DriverStore
2011-07-31 04:51:36 ----D---- C:\windows\system32\catroot2
2011-07-31 04:51:30 ----D---- C:\windows\Tasks
2011-07-31 04:51:30 ----D---- C:\windows\TAPI
2011-07-31 04:51:30 ----D---- C:\windows\system32\wfp
2011-07-31 04:51:30 ----D---- C:\windows\system32\wbem
2011-07-31 04:51:30 ----D---- C:\windows\system32\sysprep
2011-07-31 04:51:30 ----D---- C:\windows\system32\sppui
2011-07-31 04:51:30 ----D---- C:\windows\system32\sk-SK
2011-07-31 04:51:30 ----D---- C:\windows\system32\Setup
2011-07-31 04:51:30 ----D---- C:\windows\system32\oobe
2011-07-31 04:51:30 ----D---- C:\windows\system32\migwiz
2011-07-31 04:51:30 ----D---- C:\windows\system32\migration
2011-07-31 04:51:30 ----D---- C:\windows\system32\manifeststore
2011-07-31 04:51:30 ----D---- C:\windows\system32\es-ES
2011-07-31 04:51:30 ----D---- C:\windows\system32\en-US
2011-07-31 04:51:30 ----D---- C:\windows\system32\en
2011-07-31 04:51:29 ----RSD---- C:\windows\Fonts
2011-07-31 04:51:29 ----D---- C:\windows\system32\drivers\UMDF
2011-07-31 04:51:29 ----D---- C:\windows\system32\drivers\etc
2011-07-31 04:51:29 ----D---- C:\windows\system32\drivers\en-US
2011-07-31 04:51:29 ----D---- C:\windows\system32\Dism
2011-07-31 04:51:29 ----D---- C:\windows\system32\da-DK
2011-07-31 04:51:29 ----D---- C:\windows\system32\cs-CZ
2011-07-31 04:51:29 ----D---- C:\windows\system32\Boot
2011-07-31 04:51:29 ----D---- C:\windows\system32\AdvancedInstallers
2011-07-31 04:51:29 ----D---- C:\windows\servicing
2011-07-31 04:51:29 ----D---- C:\windows\rescache
2011-07-31 04:51:29 ----D---- C:\windows\PolicyDefinitions
2011-07-31 04:51:29 ----D---- C:\windows\ehome
2011-07-31 04:51:29 ----D---- C:\windows\AppPatch
2011-07-31 04:51:29 ----D---- C:\Program Files\Windows Sidebar
2011-07-31 04:51:29 ----D---- C:\Program Files\Windows Portable Devices
2011-07-31 04:51:29 ----D---- C:\Program Files\Windows Photo Viewer
2011-07-31 04:51:29 ----D---- C:\Program Files\Windows Media Player
2011-07-31 04:51:29 ----D---- C:\Program Files\Windows Mail
2011-07-31 04:51:29 ----D---- C:\Program Files\Windows Journal
2011-07-31 04:51:29 ----D---- C:\Program Files\Windows Defender
2011-07-31 04:51:29 ----D---- C:\Program Files\Internet Explorer
2011-07-31 04:51:29 ----D---- C:\Program Files\DVD Maker
2011-07-31 04:50:51 ----D---- C:\windows\system32\Tasks
2011-07-31 04:50:51 ----D---- C:\windows\system32\spp
2011-07-31 04:50:50 ----D---- C:\windows\system32\Speech
2011-07-31 04:50:50 ----D---- C:\windows\system32\NDF
2011-07-31 04:50:50 ----D---- C:\windows\system32\MUI
2011-07-31 04:50:48 ----D---- C:\windows\system32\CodeIntegrity
2011-07-31 04:50:47 ----D---- C:\windows\security
2011-07-31 04:50:39 ----D---- C:\windows\AppCompat
2011-07-31 04:50:39 ----D---- C:\Users\Spravca\AppData\Roaming\vlc
2011-07-31 04:50:39 ----D---- C:\Users\Spravca\AppData\Roaming\GHISLER
2011-07-31 04:50:38 ----D---- C:\Program Files\T-Mobile Communication Centre
2011-07-31 04:50:38 ----D---- C:\Program Files\PDF Complete
2011-07-31 04:50:35 ----D---- C:\Program Files\LSI SoftModem
2011-07-31 04:50:35 ----D---- C:\Program Files\FreeCell Wizard
2011-07-31 04:50:35 ----D---- C:\Program Files\Common Files\microsoft shared
2011-07-31 04:50:35 ----D---- C:\Program Files\Common Files\LightScribe
2011-07-31 04:49:43 ----D---- C:\windows\registration
2011-07-31 04:44:20 ----D---- C:\windows\system32\catroot
2011-07-31 04:44:00 ----D---- C:\windows\Microsoft.NET
2011-07-31 04:42:58 ----RSD---- C:\windows\assembly
2011-07-31 04:42:36 ----D---- C:\ProgramData\McAfee
2011-07-31 04:42:17 ----D---- C:\Program Files\McAfee
2011-07-31 04:42:12 ----RHD---- C:\MSOCache
2011-07-30 19:52:17 ----RD---- C:\Program Files
2011-07-30 19:28:45 ----D---- C:\windows\System32
2011-07-30 19:28:45 ----D---- C:\windows\inf
2011-07-30 19:28:45 ----A---- C:\windows\system32\PerfStringBackup.INI
2011-07-30 19:10:48 ----D---- C:\Windows
2011-07-30 19:00:10 ----D---- C:\windows\system32\drivers
2011-07-30 19:00:02 ----HD---- C:\ProgramData
2011-07-30 18:53:42 ----SHD---- C:\System Volume Information
2011-07-30 15:03:11 ----D---- C:\windows\Temp
2011-07-30 14:40:54 ----D---- C:\windows\Panther
2011-07-30 14:17:19 ----D---- C:\windows\debug
2011-07-30 13:42:41 ----A---- C:\ProgramData\HPWALog.txt
2011-07-30 13:29:28 ----D---- C:\Users\Spravca\AppData\Roaming\SiteAdvisor
2011-07-30 07:54:14 ----D---- C:\windows\Prefetch
2011-07-29 08:16:12 ----D---- C:\ProgramData\PDFC
2011-07-28 19:26:40 ----D---- C:\email
2011-07-27 19:16:26 ----D---- C:\windows\system32\LogFiles
2011-07-20 10:42:18 ----D---- C:\windows\tracing
2011-07-14 09:59:37 ----A---- C:\windows\system32\msclmd.dll
2011-07-14 08:47:26 ----A---- C:\windows\system32\MRT.exe
2011-07-14 08:47:23 ----SHD---- C:\windows\Installer
2011-07-14 08:47:23 ----SHD---- C:\Config.Msi
2011-07-14 08:47:18 ----D---- C:\ProgramData\Microsoft Help
2011-07-08 17:20:59 ----D---- C:\windows\Logs
2011-07-08 17:16:15 ----D---- C:\Program Files\Microsoft Office
2011-07-06 22:44:04 ----D---- C:\Users\Spravca\AppData\Roaming\Skype
2011-07-06 22:31:27 ----D---- C:\Users\Spravca\AppData\Roaming\skypePM
2011-07-05 23:35:59 ----D---- C:\totalcmd
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
R0 hpdskflt;HP Filter; C:\windows\system32\DRIVERS\hpdskflt.sys [2009-07-08 25656]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-08-07 330264]
R0 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 PxHelp20;PxHelp20; C:\windows\System32\Drivers\PxHelp20.sys [2009-07-09 45200]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 storvsc;storvsc; C:\windows\system32\drivers\storvsc.sys [2010-11-20 28032]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 mfetdik;McAfee Inc. mfetdik; C:\windows\system32\drivers\mfetdik.sys [2009-05-16 55336]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 Accelerometer;HP Accelerometer; C:\windows\system32\DRIVERS\Accelerometer.sys [2009-07-08 33848]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 15872]
R3 NETw5s32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 32 Bit; C:\windows\system32\DRIVERS\NETw5s32.sys [2010-01-13 6755840]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-09-17 245424]
S1 mfehidk;McAfee Inc. mfehidk; C:\windows\system32\drivers\mfehidk.sys [2009-05-16 214024]
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\ADIHdAud.sys [2009-05-18 381440]
S3 AgereSoftModem;Agere Systems Soft Modem; C:\windows\system32\DRIVERS\AGRSM.sys [2009-07-27 1161664]
S3 amdagp;AMD AGP Bus Filter Driver; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 atikmdag;atikmdag; C:\windows\system32\drivers\atikmdag.sys [2009-07-14 4194816]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BthEnum;Bluetooth Request Block Driver; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Bluetooth Port Driver; C:\windows\System32\Drivers\BTHport.sys [2011-04-28 393728]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2009-07-01 86056]
S3 btwavdt;Bluetooth AVDT; C:\windows\system32\DRIVERS\btwavdt.sys [2009-07-01 108072]
S3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-08 29472]
S3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2009-07-01 18344]
S3 Dot4;MS IEEE-1284.4 Driver; C:\windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\windows\system32\drivers\Dot4Prt.sys [2010-11-20 16384]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 FlrnUSB;Leadtek USB Network Interface; C:\windows\system32\DRIVERS\LtkUSB.sys [2011-06-09 41907]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2009-07-28 5924864]
S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI; C:\windows\system32\drivers\IntcHdmi.sys [2009-05-26 122368]
S3 MfeAVFK;McAfee Inc. MfeAVFK; C:\windows\system32\drivers\MfeAVFK.sys [2009-05-16 79816]
S3 MfeBOPK;McAfee Inc. MfeBOPK; C:\windows\system32\drivers\MfeBOPK.sys [2009-05-16 35272]
S3 MfeRKDK;McAfee Inc. MfeRKDK; C:\windows\system32\drivers\MfeRKDK.sys [2009-05-16 34248]
S3 NETw1v32;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 32 Bit; C:\windows\system32\DRIVERS\NETw1v32.sys [2009-07-21 5958656]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168]
S3 NWUSBModem;Novatel Wireless USB Modem Driver; C:\windows\system32\DRIVERS\nwusbmdm.sys [2011-06-09 166144]
S3 NWUSBPort;Novatel Wireless USB Status Port Driver; C:\windows\system32\DRIVERS\nwusbser.sys [2011-06-09 166144]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; C:\windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\windows\system32\DRIVERS\snp2uvc.sys [2009-07-02 1765168]
S3 TPM;TPM; C:\windows\system32\drivers\tpm.sys [2009-07-14 30720]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;USB Scanner Driver; C:\windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
S2 AEADIFilters;Andrea ADI Filters Service; C:\windows\system32\AEADISRV.EXE [2008-07-15 90112]
S2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-07-27 14336]
S2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-30 582944]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\windows\System32\svchost.exe [2009-07-14 20992]
S2 EngineServer;EngineServer; C:\PROGRA~1\McAfee\MANAGE~1\VScan\ENGINE~1.EXE [2009-06-03 14144]
S2 FMMService;Mobility Manager Service; C:\PROGRA~1\T-MOBI~1\drivers\82A885~1\FMMSER~1.EXE [2011-06-09 40960]
S2 FOFDMUpgrade;FOFDM Upgrade; C:\PROGRA~1\T-MOBI~1\FOFDMU~1.EXE [2009-04-06 180224]
S2 HP Health Check Service;HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2011-02-23 125496]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-01-25 92216]
S2 hpsrv;HP Service; C:\windows\system32\Hpservice.exe [2009-07-08 26168]
S2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-08-25 354840]
S2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-06-17 73728]
S2 McShield;McShield; C:\PROGRA~1\McAfee\MANAGE~1\VScan\McShield.exe [2009-06-03 144704]
S2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
S2 myAgtSvc;McAfee Virus and Spyware Protection Service; C:\Program Files\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe [2009-07-16 221024]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 20992]
S2 pdfcDispatcher;PDF Document Manager; C:\Program Files\PDF Complete\pdfsvc.exe [2009-06-18 635416]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 20992]
S2 SiteAdvisor Service;SiteAdvisor Service; C:\Program Files\SiteAdvisor\6173\SAService.exe [2009-09-20 341280]
S2 yksvc;Marvell Yukon Service; C:\windows\System32\svchost.exe [2009-07-14 20992]
S3 AppMgmt;@appmgmts.dll,-3250; C:\windows\system32\svchost.exe [2009-07-14 20992]
S3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
S3 HP Port Resolver;HP Port Resolver; C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPBPRO.EXE [2005-05-20 81920]
S3 HP Status Server;HP Status Server; C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPBOID.EXE [2004-10-16 73728]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2011-01-25 791608]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\windows\System32\svchost.exe [2009-07-14 20992]
S3 RoxMediaDB10;RoxMediaDB10; c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-13 1120752]
S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2009-04-30 74392]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2010-06-22 1343400]
-----------------EOF-----------------
facebook virus
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: facebook virus
isiel som na programy a sucasti. nasiel som tam 2 programy od mcafee, dal som odinstalovat alebo zmenit ale ani pri jednom z nich sa nic nestalo.
Re: facebook virus
Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org
Verzia databázy: 7328
Windows 6.1.7601 Service Pack 1 (Safe Mode)
Internet Explorer 9.0.8112.16421
30. 7. 2011 20:35:19
mbam-log-2011-07-30 (20-35-19).txt
Typ kontroly: Rýchla kontrola
Objektov kontrolovaných: 160136
Uplynutý čas: 2 min, 47 sek
Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 0
Infikované súbory: 0
Infikované služby pamäte:
(Škodlivé položky neboli zistené)
Infikované moduly pamäte:
(Škodlivé položky neboli zistené)
Infikované registračné kľúče:
(Škodlivé položky neboli zistené)
Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)
Infikované položky registračných dát:
(Škodlivé položky neboli zistené)
Infikované priečinky:
(Škodlivé položky neboli zistené)
Infikované súbory:
(Škodlivé položky neboli zistené)
www.malwarebytes.org
Verzia databázy: 7328
Windows 6.1.7601 Service Pack 1 (Safe Mode)
Internet Explorer 9.0.8112.16421
30. 7. 2011 20:35:19
mbam-log-2011-07-30 (20-35-19).txt
Typ kontroly: Rýchla kontrola
Objektov kontrolovaných: 160136
Uplynutý čas: 2 min, 47 sek
Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 0
Infikované súbory: 0
Infikované služby pamäte:
(Škodlivé položky neboli zistené)
Infikované moduly pamäte:
(Škodlivé položky neboli zistené)
Infikované registračné kľúče:
(Škodlivé položky neboli zistené)
Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)
Infikované položky registračných dát:
(Škodlivé položky neboli zistené)
Infikované priečinky:
(Škodlivé položky neboli zistené)
Infikované súbory:
(Škodlivé položky neboli zistené)
Re: facebook virus
Nyní použijeme větší kalibr tak že pozorně čti, protože tenhle softík netoleruje chyby.
Stáhni a ulož na plochu ComboFix,
spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.
Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,
pak ještě jednou klik na ANO a už to jede.
Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.
Při skenovaní může být PC i restartováno nelekat se.
Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,
protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.
Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt
(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.
V případě nejasností je ZDE obrázkový návod.
Stáhni a ulož na plochu ComboFix,
spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.
Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,
pak ještě jednou klik na ANO a už to jede.
Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.
Při skenovaní může být PC i restartováno nelekat se.
Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,
protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.
Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt
(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.
V případě nejasností je ZDE obrázkový návod.
Re: facebook virus
vypol som firewall, ale okrem toho mcafee ktoreho antivirova kontrola je vypnuta som nenasiel ziadny antivir pretoze vzdy ked nejaky otec stiahol tak mu ho virus zablokoval a on nasledne ten antivir odstranil. jedine co mi tu ostava je ten Malware ale s tym asi netreba nic robit. je to v poriadku? pytam sa aby nahodou potom nejaka chyba nenabehla.
Re: facebook virus
ComboFix 11-07-31.01 - Spravca . 07. 2011 21:32:30.1.2 - x86 NETWORK
Microsoft Windows 7 Professional 6.1.7601.1.1250.421.1051.18.1976.1398 [GMT 2:00]
Running from: c:\users\Spravca\Downloads\ComboFix.exe
AV: McAfee® Total Protection™ for Small Business *Disabled/Outdated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: McAfee® Total Protection™ for Small Business *Disabled/Outdated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\$NtUninstallKB50661$
c:\windows\$NtUninstallKB50661$\1310225410\{1B372133-BFFA-4dba-9CCF-5474BED6A9F6}
c:\windows\$NtUninstallKB50661$\1310225410\click.tlb
c:\windows\$NtUninstallKB50661$\1310225410\L\xadqgnnk
c:\windows\$NtUninstallKB50661$\1310225410\loader.tlb
c:\windows\$NtUninstallKB50661$\1310225410\U\@00000001
c:\windows\$NtUninstallKB50661$\1310225410\U\@000000c0
c:\windows\$NtUninstallKB50661$\1310225410\U\@000000cb
c:\windows\$NtUninstallKB50661$\1310225410\U\@000000cf
c:\windows\$NtUninstallKB50661$\1310225410\U\@80000000
c:\windows\$NtUninstallKB50661$\1310225410\U\@800000c0
c:\windows\$NtUninstallKB50661$\1310225410\U\@800000cb
c:\windows\$NtUninstallKB50661$\1310225410\U\@800000cf
c:\windows\$NtUninstallKB50661$\2530957522
c:\windows\iun6002.exe
c:\windows\phoenix
c:\windows\update.1
c:\windows\update.2
c:\windows\update.5.0
.
.
((((((((((((((((((((((((( Files Created from 2011-06-28 to 2011-07-30 )))))))))))))))))))))))))))))))
.
.
2011-07-30 19:27 . 2011-07-30 19:27 -------- d-----w- C:\32788R22FWJFW
2011-07-30 18:30 . 2010-11-29 15:42 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-30 18:30 . 2010-11-29 15:42 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-07-30 17:52 . 2011-07-30 17:52 -------- d-----w- C:\rsit
2011-07-30 17:52 . 2011-07-30 17:52 -------- d-----w- c:\program files\trend micro
2011-07-30 17:00 . 2011-07-30 17:12 -------- d-----w- c:\program files\AVAST Software
2011-07-30 17:00 . 2011-07-30 17:10 -------- d-----w- c:\programdata\AVAST Software
2011-07-30 12:45 . 2011-07-30 12:45 -------- d-----w- c:\users\Spravca\AppData\Local\COMODO
2011-07-30 12:44 . 2011-07-30 12:44 -------- d--h--w- c:\programdata\Common Files
2011-07-30 12:44 . 2011-07-31 02:18 -------- d-----w- c:\programdata\MFAData
2011-07-29 15:57 . 2011-07-29 15:57 -------- d-----w- c:\users\Spravca\AppData\Local\ESET
2011-07-29 15:52 . 2011-07-29 15:52 -------- d-----w- c:\program files\ESET
2011-07-29 15:19 . 2011-07-29 15:19 -------- d-----w- c:\users\Spravca\AppData\Roaming\Malwarebytes
2011-07-29 15:19 . 2011-07-29 15:19 -------- d-----w- c:\programdata\Malwarebytes
2011-07-29 15:19 . 2011-07-30 18:30 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-07-29 14:30 . 2011-07-29 14:36 -------- d-----w- c:\programdata\Comodo
2011-07-29 14:29 . 2011-07-31 02:18 -------- d-----w- c:\programdata\Comodo Downloader
2011-07-29 14:19 . 2011-07-30 12:47 -------- d-----w- c:\program files\COMODO
2011-07-29 14:01 . 2011-07-29 14:01 -------- d-----w- C:\VritualRoot
2011-07-29 13:42 . 2011-07-30 11:48 -------- d--h--w- c:\windows\update.tray-5-0
2011-07-27 07:14 . 2011-07-30 12:40 -------- d--h--w- c:\windows\update.tray-3-0-lnk
2011-07-27 07:14 . 2011-07-30 11:48 -------- d--h--w- c:\windows\update.tray-3-0
2011-07-26 15:53 . 2011-07-26 15:53 -------- d-----w- c:\programdata\Uniblue
2011-07-21 10:34 . 2011-07-26 15:18 -------- d-----w- c:\users\Spravca\AppData\Local\ElevatedDiagnostics
2011-07-20 20:05 . 2011-07-31 02:18 -------- d-----w- c:\windows\av_ico
2011-07-20 20:04 . 2011-07-30 12:40 -------- d--h--w- c:\windows\update.tray-9-0-lnk
2011-07-20 20:04 . 2011-07-30 11:48 -------- d--h--w- c:\windows\update.tray-9-0
2011-07-14 07:54 . 2011-07-31 02:50 -------- d-----w- c:\windows\system32\SPReview
2011-07-10 17:33 . 2011-07-10 17:33 -------- d-----w- c:\program files\AMR to MP3 Converter
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-14 07:59 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2011-06-09 13:50 . 2011-06-09 13:51 166144 ----a-w- c:\windows\system32\drivers\nwusbser.sys
2011-06-09 13:50 . 2011-06-09 13:51 166144 ----a-w- c:\windows\system32\drivers\nwusbmdm.sys
2011-06-09 13:50 . 2011-06-09 13:50 41907 ----a-w- c:\windows\system32\drivers\LtkUSB.sys
2011-05-24 10:44 . 2011-06-29 05:18 293376 ----a-w- c:\windows\system32\umpnpmgr.dll
2011-05-04 04:34 . 2011-06-29 05:18 1549312 ----a-w- c:\windows\system32\tquery.dll
2011-05-04 04:32 . 2011-06-29 05:18 666624 ----a-w- c:\windows\system32\mssvp.dll
2011-05-04 04:32 . 2011-06-29 05:18 337408 ----a-w- c:\windows\system32\mssph.dll
2011-05-04 04:32 . 2011-06-29 05:18 1401344 ----a-w- c:\windows\system32\mssrch.dll
2011-05-04 04:32 . 2011-06-29 05:18 197120 ----a-w- c:\windows\system32\mssphtb.dll
2011-05-04 04:32 . 2011-06-29 05:18 59392 ----a-w- c:\windows\system32\msscntrs.dll
2011-05-04 04:28 . 2011-06-29 05:18 427520 ----a-w- c:\windows\system32\SearchIndexer.exe
2011-05-04 04:28 . 2011-06-29 05:18 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe
2011-05-04 04:28 . 2011-06-29 05:18 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe
2011-05-04 02:52 . 2011-03-16 17:55 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-05-03 04:30 . 2011-06-16 05:18 741376 ----a-w- c:\windows\system32\inetcomm.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HPADVISOR"="c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2009-07-16 1668664]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-06-17 2363392]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-07-27 288312]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-08-25 186904]
"PDF Complete"="c:\program files\PDF Complete\pdfsty.exe" [2009-06-18 563736]
"WirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
"MVS Splash"="c:\program files\McAfee\Managed VirusScan\Agent\Splash.exe" [2009-07-16 562496]
"McAfee Managed Services Tray"="c:\program files\McAfee\Managed VirusScan\Agent\StartMyAgtTry.Exe" [2009-07-16 95552]
"SiteAdvisor"="c:\program files\SiteAdvisor\6173\SiteAdv.exe" [2007-08-28 36640]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-09-17 1721640]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-08-02 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-08-02 174104]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-08-02 151064]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2009-05-18 1314816]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-06-08 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-11-29 443728]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-30 795936]
T-Mobile Communication Centre.lnk - c:\program files\T-Mobile Communication Centre\TMCC.exe [2011-6-9 749568]
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2009-4-3 525664]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-01-25 92216]
R2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2009-07-08 26168]
R2 myAgtSvc;McAfee Virus and Spyware Protection Service;c:\program files\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe [2009-07-16 221024]
R2 pdfcDispatcher;PDF Document Manager;c:\program files\PDF Complete\pdfsvc.exe [2009-06-18 635416]
R2 yksvc;Marvell Yukon Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
R3 FlrnUSB;Leadtek USB Network Interface;c:\windows\system32\DRIVERS\LtkUSB.sys [2011-06-09 41907]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2009-05-25 122368]
R3 NETw1v32;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw1v32.sys [2009-07-20 5958656]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 RoxMediaDB10;RoxMediaDB10;c:\program files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-13 1120752]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-22 1343400]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S3 NETw5s32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 32 Bit;c:\windows\system32\DRIVERS\NETw5s32.sys [2010-01-13 6755840]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-07-20 313856]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
yksvcs REG_MULTI_SZ yksvc
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-06-17 19:11 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2011-07-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1477078727-1654777056-1478667540-1001Core.job
- c:\users\Spravca\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-26 18:38]
.
2011-07-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1477078727-1654777056-1478667540-1001UA.job
- c:\users\Spravca\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-26 18:38]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.sk/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=sk_SK&c=92&bd=all&pf=cmnb
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Trusted Zone: //about.htm/
Trusted Zone: //Exclude.htm/
Trusted Zone: //LanguageSelection.htm/
Trusted Zone: //Message.htm/
Trusted Zone: //MyAgttryCmd.htm/
Trusted Zone: //MyAgttryNag.htm/
Trusted Zone: //MyNotification.htm/
Trusted Zone: //NOCLessUpdate.htm/
Trusted Zone: //quarantine.htm/
Trusted Zone: //ScanNow.htm/
Trusted Zone: //strings.vbs/
Trusted Zone: //Template.htm/
Trusted Zone: //Update.htm/
Trusted Zone: //VirFound.htm/
Trusted Zone: mcafee.com\*
Trusted Zone: mcafeeasap.com\betavscan
Trusted Zone: mcafeeasap.com\vs
Trusted Zone: mcafeeasap.com\www
TCP: DhcpNameServer = 192.168.1.1
.
- - - - ORPHANS REMOVED - - - -
.
HKLM-RunOnce-aswAhAScr.dll - c:\program files\AVAST Software\Avast\aswRegSvr.exe
AddRemove-Look@LAN_1.0 - c:\windows\iun6002.exe
AddRemove-LSI Soft Modem - c:\windows\agrsmdel
AddRemove-MVS - c:\program files\McAfee\Managed VirusScan\Agent\myinx
AddRemove-{E92D47A1-D27D-430A-8368-0BAFD956507D} - c:\program files\InstallShield Installation Information\{E92D47A1-D27D-430A-8368-0BAFD956507D}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-07-30 21:38:26
ComboFix-quarantined-files.txt 2011-07-30 19:38
.
Pre-Run: 171 064 414 208 bytes free
Post-Run: 171 300 352 000 bytes free
.
- - End Of File - - 01C3B37D3FD8A03CA9EFDD75B6BAAAE3
Microsoft Windows 7 Professional 6.1.7601.1.1250.421.1051.18.1976.1398 [GMT 2:00]
Running from: c:\users\Spravca\Downloads\ComboFix.exe
AV: McAfee® Total Protection™ for Small Business *Disabled/Outdated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: McAfee® Total Protection™ for Small Business *Disabled/Outdated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\$NtUninstallKB50661$
c:\windows\$NtUninstallKB50661$\1310225410\{1B372133-BFFA-4dba-9CCF-5474BED6A9F6}
c:\windows\$NtUninstallKB50661$\1310225410\click.tlb
c:\windows\$NtUninstallKB50661$\1310225410\L\xadqgnnk
c:\windows\$NtUninstallKB50661$\1310225410\loader.tlb
c:\windows\$NtUninstallKB50661$\1310225410\U\@00000001
c:\windows\$NtUninstallKB50661$\1310225410\U\@000000c0
c:\windows\$NtUninstallKB50661$\1310225410\U\@000000cb
c:\windows\$NtUninstallKB50661$\1310225410\U\@000000cf
c:\windows\$NtUninstallKB50661$\1310225410\U\@80000000
c:\windows\$NtUninstallKB50661$\1310225410\U\@800000c0
c:\windows\$NtUninstallKB50661$\1310225410\U\@800000cb
c:\windows\$NtUninstallKB50661$\1310225410\U\@800000cf
c:\windows\$NtUninstallKB50661$\2530957522
c:\windows\iun6002.exe
c:\windows\phoenix
c:\windows\update.1
c:\windows\update.2
c:\windows\update.5.0
.
.
((((((((((((((((((((((((( Files Created from 2011-06-28 to 2011-07-30 )))))))))))))))))))))))))))))))
.
.
2011-07-30 19:27 . 2011-07-30 19:27 -------- d-----w- C:\32788R22FWJFW
2011-07-30 18:30 . 2010-11-29 15:42 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-30 18:30 . 2010-11-29 15:42 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-07-30 17:52 . 2011-07-30 17:52 -------- d-----w- C:\rsit
2011-07-30 17:52 . 2011-07-30 17:52 -------- d-----w- c:\program files\trend micro
2011-07-30 17:00 . 2011-07-30 17:12 -------- d-----w- c:\program files\AVAST Software
2011-07-30 17:00 . 2011-07-30 17:10 -------- d-----w- c:\programdata\AVAST Software
2011-07-30 12:45 . 2011-07-30 12:45 -------- d-----w- c:\users\Spravca\AppData\Local\COMODO
2011-07-30 12:44 . 2011-07-30 12:44 -------- d--h--w- c:\programdata\Common Files
2011-07-30 12:44 . 2011-07-31 02:18 -------- d-----w- c:\programdata\MFAData
2011-07-29 15:57 . 2011-07-29 15:57 -------- d-----w- c:\users\Spravca\AppData\Local\ESET
2011-07-29 15:52 . 2011-07-29 15:52 -------- d-----w- c:\program files\ESET
2011-07-29 15:19 . 2011-07-29 15:19 -------- d-----w- c:\users\Spravca\AppData\Roaming\Malwarebytes
2011-07-29 15:19 . 2011-07-29 15:19 -------- d-----w- c:\programdata\Malwarebytes
2011-07-29 15:19 . 2011-07-30 18:30 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-07-29 14:30 . 2011-07-29 14:36 -------- d-----w- c:\programdata\Comodo
2011-07-29 14:29 . 2011-07-31 02:18 -------- d-----w- c:\programdata\Comodo Downloader
2011-07-29 14:19 . 2011-07-30 12:47 -------- d-----w- c:\program files\COMODO
2011-07-29 14:01 . 2011-07-29 14:01 -------- d-----w- C:\VritualRoot
2011-07-29 13:42 . 2011-07-30 11:48 -------- d--h--w- c:\windows\update.tray-5-0
2011-07-27 07:14 . 2011-07-30 12:40 -------- d--h--w- c:\windows\update.tray-3-0-lnk
2011-07-27 07:14 . 2011-07-30 11:48 -------- d--h--w- c:\windows\update.tray-3-0
2011-07-26 15:53 . 2011-07-26 15:53 -------- d-----w- c:\programdata\Uniblue
2011-07-21 10:34 . 2011-07-26 15:18 -------- d-----w- c:\users\Spravca\AppData\Local\ElevatedDiagnostics
2011-07-20 20:05 . 2011-07-31 02:18 -------- d-----w- c:\windows\av_ico
2011-07-20 20:04 . 2011-07-30 12:40 -------- d--h--w- c:\windows\update.tray-9-0-lnk
2011-07-20 20:04 . 2011-07-30 11:48 -------- d--h--w- c:\windows\update.tray-9-0
2011-07-14 07:54 . 2011-07-31 02:50 -------- d-----w- c:\windows\system32\SPReview
2011-07-10 17:33 . 2011-07-10 17:33 -------- d-----w- c:\program files\AMR to MP3 Converter
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-14 07:59 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2011-06-09 13:50 . 2011-06-09 13:51 166144 ----a-w- c:\windows\system32\drivers\nwusbser.sys
2011-06-09 13:50 . 2011-06-09 13:51 166144 ----a-w- c:\windows\system32\drivers\nwusbmdm.sys
2011-06-09 13:50 . 2011-06-09 13:50 41907 ----a-w- c:\windows\system32\drivers\LtkUSB.sys
2011-05-24 10:44 . 2011-06-29 05:18 293376 ----a-w- c:\windows\system32\umpnpmgr.dll
2011-05-04 04:34 . 2011-06-29 05:18 1549312 ----a-w- c:\windows\system32\tquery.dll
2011-05-04 04:32 . 2011-06-29 05:18 666624 ----a-w- c:\windows\system32\mssvp.dll
2011-05-04 04:32 . 2011-06-29 05:18 337408 ----a-w- c:\windows\system32\mssph.dll
2011-05-04 04:32 . 2011-06-29 05:18 1401344 ----a-w- c:\windows\system32\mssrch.dll
2011-05-04 04:32 . 2011-06-29 05:18 197120 ----a-w- c:\windows\system32\mssphtb.dll
2011-05-04 04:32 . 2011-06-29 05:18 59392 ----a-w- c:\windows\system32\msscntrs.dll
2011-05-04 04:28 . 2011-06-29 05:18 427520 ----a-w- c:\windows\system32\SearchIndexer.exe
2011-05-04 04:28 . 2011-06-29 05:18 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe
2011-05-04 04:28 . 2011-06-29 05:18 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe
2011-05-04 02:52 . 2011-03-16 17:55 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-05-03 04:30 . 2011-06-16 05:18 741376 ----a-w- c:\windows\system32\inetcomm.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HPADVISOR"="c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2009-07-16 1668664]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-06-17 2363392]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-07-27 288312]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-08-25 186904]
"PDF Complete"="c:\program files\PDF Complete\pdfsty.exe" [2009-06-18 563736]
"WirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
"MVS Splash"="c:\program files\McAfee\Managed VirusScan\Agent\Splash.exe" [2009-07-16 562496]
"McAfee Managed Services Tray"="c:\program files\McAfee\Managed VirusScan\Agent\StartMyAgtTry.Exe" [2009-07-16 95552]
"SiteAdvisor"="c:\program files\SiteAdvisor\6173\SiteAdv.exe" [2007-08-28 36640]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-09-17 1721640]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-08-02 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-08-02 174104]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-08-02 151064]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2009-05-18 1314816]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-06-08 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-11-29 443728]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-30 795936]
T-Mobile Communication Centre.lnk - c:\program files\T-Mobile Communication Centre\TMCC.exe [2011-6-9 749568]
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2009-4-3 525664]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-01-25 92216]
R2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2009-07-08 26168]
R2 myAgtSvc;McAfee Virus and Spyware Protection Service;c:\program files\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe [2009-07-16 221024]
R2 pdfcDispatcher;PDF Document Manager;c:\program files\PDF Complete\pdfsvc.exe [2009-06-18 635416]
R2 yksvc;Marvell Yukon Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
R3 FlrnUSB;Leadtek USB Network Interface;c:\windows\system32\DRIVERS\LtkUSB.sys [2011-06-09 41907]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2009-05-25 122368]
R3 NETw1v32;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw1v32.sys [2009-07-20 5958656]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 RoxMediaDB10;RoxMediaDB10;c:\program files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-13 1120752]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-22 1343400]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S3 NETw5s32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 32 Bit;c:\windows\system32\DRIVERS\NETw5s32.sys [2010-01-13 6755840]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-07-20 313856]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
yksvcs REG_MULTI_SZ yksvc
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-06-17 19:11 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2011-07-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1477078727-1654777056-1478667540-1001Core.job
- c:\users\Spravca\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-26 18:38]
.
2011-07-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1477078727-1654777056-1478667540-1001UA.job
- c:\users\Spravca\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-26 18:38]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.sk/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=sk_SK&c=92&bd=all&pf=cmnb
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Trusted Zone: //about.htm/
Trusted Zone: //Exclude.htm/
Trusted Zone: //LanguageSelection.htm/
Trusted Zone: //Message.htm/
Trusted Zone: //MyAgttryCmd.htm/
Trusted Zone: //MyAgttryNag.htm/
Trusted Zone: //MyNotification.htm/
Trusted Zone: //NOCLessUpdate.htm/
Trusted Zone: //quarantine.htm/
Trusted Zone: //ScanNow.htm/
Trusted Zone: //strings.vbs/
Trusted Zone: //Template.htm/
Trusted Zone: //Update.htm/
Trusted Zone: //VirFound.htm/
Trusted Zone: mcafee.com\*
Trusted Zone: mcafeeasap.com\betavscan
Trusted Zone: mcafeeasap.com\vs
Trusted Zone: mcafeeasap.com\www
TCP: DhcpNameServer = 192.168.1.1
.
- - - - ORPHANS REMOVED - - - -
.
HKLM-RunOnce-aswAhAScr.dll - c:\program files\AVAST Software\Avast\aswRegSvr.exe
AddRemove-Look@LAN_1.0 - c:\windows\iun6002.exe
AddRemove-LSI Soft Modem - c:\windows\agrsmdel
AddRemove-MVS - c:\program files\McAfee\Managed VirusScan\Agent\myinx
AddRemove-{E92D47A1-D27D-430A-8368-0BAFD956507D} - c:\program files\InstallShield Installation Information\{E92D47A1-D27D-430A-8368-0BAFD956507D}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-07-30 21:38:26
ComboFix-quarantined-files.txt 2011-07-30 19:38
.
Pre-Run: 171 064 414 208 bytes free
Post-Run: 171 300 352 000 bytes free
.
- - End Of File - - 01C3B37D3FD8A03CA9EFDD75B6BAAAE3
Re: facebook virus
Pokud jsi tak ještě neučinil, přesuň Combofix na plochu
otevři si Poznámkový blok
do něj zkopíruj skript z následujícího okna:
ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,
po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:
Po aplikaci na Tebe vypadne další log, zkopíruj ho sem
Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,
v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci
otevři si Poznámkový blok
do něj zkopíruj skript z následujícího okna:
Kód: Vybrat vše
KillAll::
Folder::
c:\windows\update.tray-5-0
c:\windows\update.tray-3-0-lnk
c:\windows\update.tray-3-0
c:\windows\av_ico
c:\windows\update.tray-9-0-lnk
c:\windows\update.tray-9-0
RegLock::
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:
Po aplikaci na Tebe vypadne další log, zkopíruj ho sem
Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,
v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci
Re: facebook virus
po dokonceni a restartovani som to zkopiroval ale ked chcem zapnut prehliadac tak mi napise ze polozka bola presunuta premenovana alebo zmazana. a pyta sa ma to ci ju chcem odstranit. Co mam robit?? pisem z 2.pc
Re: facebook virus
ani google chrome ani IE
Re: facebook virus
cely cas som v nudzovom rezime. mam aj tak skusit?
Přispějete na provoz fóra?