FCB vir a mozna i vic :)

[seewa]

Logfile of random's system information tool 1.09 (written by random/random)
Run by Terezka at 2011-08-02 16:31:27
Microsoft Windows XP Professional Service Pack 2
System drive C: has 14 GB (45%) free of 30 GB
Total RAM: 503 MB (31% free)


======Scheduled tasks folder======

C:\WINDOWS\tasks\ASC4_PerformanceMonitor.job
C:\WINDOWS\tasks\SmartDefrag_Startup.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Terezka\Application Data\Mozilla\Firefox\Profiles\itjkznzv.default

prefs.js - "browser.startup.homepage" - "http://www.google.cz/"
prefs.js - "keyword.URL" - "http://search.yahoo.com/search?fr=green ... =685749&p="

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"wxpdrv"=C:\WINDOWS\services32.exe []
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2006-06-06 94208]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2006-06-06 118784]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2006-06-06 77824]
"l1rezerv.exe"=C:\WINDOWS\l1rezerv.exe [2011-07-23 235520]
"sysdriver32.exe"=C:\WINDOWS\sysdriver32.exe [2011-07-25 261632]
"sysdriver32_.exe"=C:\WINDOWS\sysdriver32_.exe [2011-07-25 256000]
"w_distrib.exe"=C:\WINDOWS\update.3\svchost.exe [2011-07-24 273408]
"7378150.exe"=C:\WINDOWS\TEMP\7378150.exe [2011-07-25 256000]
"Anti Trojan Elite"=C:\Program Files\Anti Trojan Elite\TJEnder.exe :NO []
"5386362.exe"=C:\WINDOWS\TEMP\5386362.exe [2011-07-27 502272]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\196473.exe]
C:\WINDOWS\TEMP\196473.exe [2011-07-21 483328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\1989557.exe]
C:\WINDOWS\TEMP\1989557.exe [2011-07-21 245760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\40626139-loader2.exe]
C:\WINDOWS\TEMP\40626139-loader2.exe [2011-07-21 245760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\62438242-loader2.exe]
C:\WINDOWS\TEMP\62438242-loader2.exe [2011-07-21 245760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\6628332.exe]
C:\DOCUME~1\Terezka\LOCALS~1\Temp\6628332.exe [2011-07-21 245760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\69611376-loader2.exe]
C:\WINDOWS\TEMP\69611376-loader2.exe [2011-07-22 249344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\7341904.exe]
C:\WINDOWS\TEMP\7341904.exe [2011-07-22 249344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\egui]
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-12 2219184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\Terezka\Local Settings\Application Data\Google\Update\GoogleUpdate.exe /c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.5\ICQ.exe [2011-07-24 124216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\l1rezerv.exe]
C:\WINDOWS\l1rezerv.exe [2011-07-23 235520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAX]
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2005-05-06 716800]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP]
C:\Program Files\Analog Devices\Core\smax4pnp.exe [2005-05-20 925696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\sysdriver32.exe]
C:\WINDOWS\sysdriver32.exe [2011-07-25 261632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\sysdriver32_.exe]
C:\WINDOWS\sysdriver32_.exe [2011-07-25 256000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\systemup]
C:\WINDOWS\systemup.exe [2011-07-21 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\tray_ico]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\tray_ico0]
C:\WINDOWS\update.tray-2-0\svchost.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\tray_ico1]
C:\WINDOWS\update.tray-3-0\svchost.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\tray_ico2]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\tray_ico3]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\tray_ico4]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Bluetooth.lnk]
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe [2006-02-15 581693]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Logitech Desktop Messenger.lnk]
C:\PROGRA~1\Logitech\DESKTO~1\8876480\Program\LOGITE~1.EXE [2011-04-29 66864]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ekrn"=2
"EhttpSrv"=3

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa]
C:\WINDOWS\system32\antiwpa.dll [2006-07-22 5376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-06-06 139264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wxpdrivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\wxpdrivers]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
"EnableSecureUIAPaths"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255
"NoSMHelp"=1
"ForceClassicControlPanel"=1
"NoResolveTrack"=1
"NoResolveSearch"=1
"NoSMConfigurePrograms"=1
"MemCheckBoxInRunDlg"=1
"NoSharedDocuments"=1
"NoActiveDesktop"=1
"NoStartMenuMFUprogramsList"=1
"NoInstrumentation"=1
"NoSMBalloonTip"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"MemCheckBoxInRunDlg"=1
"NoStartMenuPinnedList"=1
"StartMenuFavorites"=0
"Start_ShowHelp"=0
"Start_ShowMyComputer"=1
"Start_ShowMyDocs"=1
"Start_ShowMyMusic"=0
"Start_ShowMyPics"=1
"Start_ShowNetConn"=1
"Start_ShowPrinters"=1
"Start_ShowRun"=1
"Start_ShowSearch"=0
"NoStartMenuMFUprogramsList"=1
"ClassicViewState"=1
"HideRunAsVerb"=1
"ShowSuperHidden"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Documents and Settings\Terezka\My Documents\Stažené soubory\Flash-Player.exe"="C:\Documents and Settings\Terezka\My Documents\Stažené soubory\Flash-Player.exe:*:Enabled:C:\Documents and Settings\Terezka\My Documents\Stažené soubory\Flash-Player.exe"
"C:\WINDOWS\update.1\svchost.exe"="C:\WINDOWS\update.1\svchost.exe:*:Enabled:C:\WINDOWS\update.1\svchost.exe"
"C:\WINDOWS\update.tray-2-0\svchost.exe"="C:\WINDOWS\update.tray-2-0\svchost.exe:*:Enabled:C:\WINDOWS\update.tray-2-0\svchost.exe"
"C:\WINDOWS\update.2\svchost.exe"="C:\WINDOWS\update.2\svchost.exe:*:Enabled:C:\WINDOWS\update.2\svchost.exe"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"
"C:\WINDOWS\update.3\svchost.exe"="C:\WINDOWS\update.3\svchost.exe:*:Enabled:C:\WINDOWS\update.3\svchost.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=lvcodec2.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux2"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux3"=wdmaud.drv

======List of files/folders created in the last 1 month======

2011-08-02 16:31:29 ----D---- C:\Program Files\trend micro
2011-08-02 16:31:27 ----D---- C:\rsit
2011-07-26 20:39:24 ----D---- C:\Documents and Settings\Terezka\Application Data\IObit
2011-07-26 20:15:17 ----D---- C:\Documents and Settings\Terezka\Application Data\SUPERAntiSpyware.com
2011-07-26 20:15:17 ----D---- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2011-07-26 20:03:50 ----D---- C:\Documents and Settings\All Users\Application Data\IObit
2011-07-26 20:02:08 ----D---- C:\Program Files\IObit
2011-07-26 19:53:14 ----D---- C:\Program Files\Anti Trojan Elite
2011-07-26 06:18:20 ----HD---- C:\WINDOWS\update.5.0
2011-07-24 15:03:46 ----A---- C:\WINDOWS\w_distrib_iplist.txt
2011-07-24 15:03:13 ----HD---- C:\WINDOWS\update.3
2011-07-24 12:00:25 ----D---- C:\Program Files\ICQ7.5
2011-07-24 00:02:26 ----D---- C:\Documents and Settings\Terezka\Application Data\ICQ
2011-07-23 23:54:18 ----A---- C:\WINDOWS\sysdriver32.exe
2011-07-23 09:06:09 ----HD---- C:\WINDOWS\update.2
2011-07-23 08:54:46 ----D---- C:\Program Files\ESET NOD32
2011-07-22 22:59:11 ----D---- C:\Program Files\AVAST Software
2011-07-22 22:59:11 ----D---- C:\Documents and Settings\All Users\Application Data\AVAST Software
2011-07-22 22:38:56 ----A---- C:\Uninstall.dat
2011-07-22 22:22:21 ----HD---- C:\Documents and Settings\All Users\Application Data\Common Files
2011-07-22 22:19:02 ----A---- C:\WINDOWS\system32\drivers\Cat.DB
2011-07-22 22:18:33 ----D---- C:\Program Files\PC Tools Security
2011-07-22 22:18:33 ----D---- C:\Program Files\Common Files\PC Tools
2011-07-22 22:18:33 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2011-07-22 22:16:26 ----D---- C:\Documents and Settings\All Users\Application Data\PC Tools
2011-07-22 22:11:17 ----D---- C:\Documents and Settings\All Users\Application Data\MFAData
2011-07-22 21:52:41 ----D---- C:\Program Files\ESET
2011-07-22 21:52:41 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2011-07-22 20:21:33 ----D---- C:\WINDOWS\pss
2011-07-22 19:26:26 ----D---- C:\Config.Msi
2011-07-22 18:45:39 ----A---- C:\WINDOWS\ntbtlog.txt
2011-07-22 18:44:17 ----HD---- C:\WINDOWS\PIF
2011-07-22 10:39:18 ----D---- C:\WINDOWS\system32\LogFiles
2011-07-21 17:43:26 ----SHD---- C:\WINDOWS\assembly
2011-07-21 17:26:59 ----D---- C:\WINDOWS\ufa
2011-07-21 17:26:59 ----D---- C:\WINDOWS\rpcminer
2011-07-21 17:26:59 ----D---- C:\WINDOWS\phoenix
2011-07-21 17:26:02 ----A---- C:\WINDOWS\ddh_iplist.txt
2011-07-21 17:25:58 ----A---- C:\WINDOWS\l1rezerv.exe
2011-07-21 17:25:35 ----A---- C:\WINDOWS\systemup.exe
2011-07-21 17:22:45 ----A---- C:\WINDOWS\iecheck_iplist.txt
2011-07-21 17:21:39 ----A---- C:\WINDOWS\btc_client_iplist.txt
2011-07-21 17:21:11 ----A---- C:\WINDOWS\unrar.exe
2011-07-21 17:21:05 ----A---- C:\WINDOWS\iplist.txt
2011-07-21 17:21:02 ----A---- C:\WINDOWS\sysdriver32_.exe
2011-07-21 17:20:31 ----A---- C:\WINDOWS\front_ip_list.txt
2011-07-21 17:19:48 ----D---- C:\WINDOWS\av_ico
2011-07-21 16:28:29 ----A---- C:\WINDOWS\winlog-ids.txt
2011-07-21 16:28:29 ----A---- C:\WINDOWS\winlog-dirs.txt

======List of files/folders modified in the last 1 month======

2011-08-02 16:31:34 ----D---- C:\WINDOWS\Prefetch
2011-08-02 16:31:29 ----RD---- C:\Program Files
2011-08-02 16:11:30 ----D---- C:\WINDOWS\system32
2011-08-02 16:11:30 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-08-02 16:06:40 ----D---- C:\WINDOWS\system32\drivers
2011-08-02 16:05:42 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-07-30 21:05:35 ----D---- C:\WINDOWS\system32\CatRoot2
2011-07-27 16:06:17 ----D---- C:\WINDOWS\Temp
2011-07-26 20:32:01 ----SHD---- C:\WINDOWS\Installer
2011-07-26 20:30:59 ----D---- C:\WINDOWS\WinSxS
2011-07-26 20:30:58 ----D---- C:\Program Files\Common Files
2011-07-26 20:26:39 ----D---- C:\Program Files\Spybot - Search & Destroy
2011-07-26 20:05:28 ----SD---- C:\WINDOWS\Tasks
2011-07-26 06:18:20 ----D---- C:\WINDOWS
2011-07-26 00:22:37 ----D---- C:\Documents and Settings
2011-07-23 08:48:37 ----A---- C:\WINDOWS\win.ini
2011-07-23 08:48:37 ----A---- C:\WINDOWS\system.ini
2011-07-23 08:48:37 ----A---- C:\boot.ini
2011-07-22 23:10:14 ----SHD---- C:\System Volume Information
2011-07-22 22:59:30 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-07-22 21:57:16 ----HD---- C:\WINDOWS\inf
2011-07-22 21:35:18 ----D---- C:\WINDOWS\system32\Restore
2011-07-22 17:44:39 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-07-08 18:31:29 ----D---- C:\Program Files\Mozilla Firefox

[vyosek]

Zdravim a pekny vecer preji

Vzhledem k tomu, ze pouzivate nelegalni SW se nedivim, ze jste navstevnikem naseho fora
Dle pravidel fora (viz zde a a zde bod c.3 ) se vsak nelegalnim SW nezabyvame, jelikoz nelegalni programy jsou vetsinou zdrojem haveti. Navic tim porusujete i autorska prava , pachate trestny cin a ten jako takovy nebude nasim forem podporovan. Uvedomte si, ze jste na bezpecnostnim foru - podpora warezu by byla zcela proti logice fora

A jelikoz se jedna o nelegalni samotny operacni system windows, tak to tu asi uzavrem. Nebo mate jiny napad ci zduvodneni proc nelegalni system

[seewa]

Dobrý večer, důvod k tomu opravdu nemám, počítač je mojí 15ti leté švagrové, která mě poprosila o pomoc s vyčištěním počítače...

[vyosek]

Bohuzel, nase pravidla fora, ale i legislativa ČR, hovori jasne..Rozumne zduvodneni jste nepodal, takze myslim ze jsme zde hotovi...

[vyosek]