Personal Shield Pro v2.20 - vírus

[Matus2540]

Zdravím , mám taký problém s programom Personal Shield Pro pozeral som niečo na google a zrazu som nejako chytil tento vírus ktorý sa mi zobrazuje ako program v PC .. Tak som sa ho snažil nejako nájsť v PC nič som nenašiel ...

Po jeho naskočení čo je hned po zapnutí PC mi nejde otvoriť žiaden program ako je Nod32 , CCleaner alebo ani Skyp , ICQ iba Mozilla mi funguje !!!

A ešte aby som nezabudol ako naskočí ten program tak mi z modrie obrazovka ...

Vidím že tu riešite problémy hned s HJT-LOG tak som ho pripravil vopred

P.S.- Dufam že sa môj problém vyrieši čo najskôr lebo začína dosť rapľovať počítač..



Logfile of random's system information tool 1.09 (written by random/random)
Run by Jozefína at 2011-09-10 10:07:47
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 67 GB (76%) free of 88 GB
Total RAM: 895 MB (78% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1275210071-492894223-725345543-1004.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1275210071-492894223-725345543-1004.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Jozefína\Application Data\Mozilla\Firefox\Profiles\1alm7l0u.default

prefs.js - "browser.startup.homepage" - "http://www.google.sk/"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.3.1&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
"smartwebprinting@hp.com"=C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=12.0.1.633]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=12.0.1.633]
"Description"=RealJukebox Netscape Plugin
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.633]
"Description"=RealPlayer(tm) HTML5VideoShim Plug-In
"Path"=C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.633]
"Description"=12.0.1.633
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

C:\Program Files\Mozilla Firefox\extensions\
adtoolbar@firefox.sk
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nppl3260.xpt
nsjsrealplayerplugin.xpt

C:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
vyhladavanie.xml
wikipedia-sk.xml
zoznam-sk.xml

C:\Documents and Settings\Jozefína\Application Data\Mozilla\Firefox\Profiles\1alm7l0u.default\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}

C:\Documents and Settings\Jozefína\Application Data\Mozilla\Firefox\Profiles\1alm7l0u.default\searchplugins\
icqplugin-1.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2011-03-23 381656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-05-16 1164680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-04 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-05-04 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-11-21 1054520]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SMSERIAL"=C:\WINDOWS\sm56hlpr.exe [2006-08-29 544768]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-08-30 7581696]
"nwiz"=nwiz.exe /install []
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-06-25 98304]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-04-30 19523616]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"CTSyncService"=C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [2009-07-08 1233195]
"VolPanel"=C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [2009-05-04 241789]
"AMBDef"=C:\WINDOWS\AMBDef.exe [2008-01-24 53248]
"UpdReg"=C:\WINDOWS\UpdReg.EXE [2000-05-11 90112]
"PRISMSTA.EXE"=PRISMSTA.EXE START []
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-11-16 2054360]
"TkBellExe"=C:\Program Files\Real\RealPlayer\update\realsched.exe [2011-03-23 273544]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2009-11-18 54576]
"bjgsophm"=C:\WINDOWS\System32\bjgsophm.exe []
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-01-15 147456]
"Registry Cleaner Scheduler"=C:\Program Files\CleanMyPC\Registry Cleaner\RCHelper.exe [2011-03-23 1401224]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"ASRockIES"=C:\Program Files\ASRock Utility\IES\AsrIes.exe [2010-07-21 8798216]
"bjgsophm"=C:\Documents and Settings\Jozefína\bjgsophm.exe []
"{2AC209CC-6069-E22D-2A64-31A86658C0F6}"=C:\Documents and Settings\Jozefína\Application Data\Izpavu\bobo.exe [2011-04-26 220672]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"iF20700PoJeO20700"=C:\Documents and Settings\All Users\Application Data\iF20700PoJeO20700\iF20700PoJeO20700 [2011-09-10 208]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-06-25 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Documents and Settings\Jozefína\Local Settings\Temp\7zS0DDE\setup\hpznui01.exe"="C:\Documents and Settings\Jozefína\Local Settings\Temp\7zS0DDE\setup\hpznui01.exe:*:Enabled:hpznui01.exe"
"C:\Program Files\CS 1.6 v48\hl.exe"="C:\Program Files\CS 1.6 v48\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Counter-Strike\hl.exe"="C:\Program Files\Counter-Strike\hl.exe:*:Disabled:Half-Life Launcher"
"C:\Program Files\Valve\hl.exe"="C:\Program Files\Valve\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe"
"C:\Program Files\HP\HP Software Update\hpwucli.exe"="C:\Program Files\HP\HP Software Update\hpwucli.exe:*:Enabled:hpwucli.exe"
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"="C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Documents and Settings\Jozefína\Local Settings\Temp\7zS0DDE\setup\hpznui01.exe"="C:\Documents and Settings\Jozefína\Local Settings\Temp\7zS0DDE\setup\hpznui01.exe:*:Enabled:hpznui01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe"
"C:\Program Files\HP\HP Software Update\hpwucli.exe"="C:\Program Files\HP\HP Software Update\hpwucli.exe:*:Enabled:hpwucli.exe"
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"="C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"VIDC.DIVX"=divx.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======List of files/folders created in the last 3 months======

2011-09-10 00:51:54 ----A---- C:\WINDOWS\system32\drivers\IesDrv.sys
2011-09-10 00:46:11 ----A---- C:\WINDOWS\ntbtlog.txt
2011-09-10 00:39:26 ----D---- C:\Program Files\trend micro
2011-09-10 00:39:24 ----D---- C:\rsit
2011-09-09 11:42:38 ----D---- C:\WINDOWS\Minidump
2011-09-09 09:01:08 ----D---- C:\Documents and Settings\Jozefína\Application Data\Izpavu
2011-09-09 09:01:08 ----D---- C:\Documents and Settings\Jozefína\Application Data\Axibuf
2011-09-09 09:00:43 ----D---- C:\Documents and Settings\All Users\Application Data\iF20700PoJeO20700
2011-09-08 20:14:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2607712$
2011-08-25 11:45:00 ----D---- C:\Documents and Settings\Jozefína\Application Data\FileZilla
2011-08-24 14:07:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2570791$
2011-08-20 17:07:16 ----D---- C:\Program Files\Counter-Strike
2011-08-17 23:20:35 ----A---- C:\WINDOWS\system32\ptpusb.dll
2011-08-17 23:20:28 ----A---- C:\WINDOWS\system32\ptpusd.dll
2011-08-17 17:48:40 ----D---- C:\Documents and Settings\Jozefína\Application Data\WindowsApplication1
2011-08-16 14:49:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-08-16 14:49:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-08-16 14:48:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-08-16 14:46:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-08-16 14:46:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
2011-07-20 11:34:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2011-07-20 11:32:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2555917$
2011-07-03 12:59:42 ----D---- C:\Phenomedia
2011-07-03 12:23:00 ----D---- C:\Phenomedia AG
2011-07-02 20:31:18 ----D---- C:\WINDOWS\Sun
2011-06-30 13:02:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2541763$
2011-06-30 12:38:04 ----D---- C:\Program Files\ICQ6Toolbar
2011-06-30 12:37:56 ----D---- C:\Documents and Settings\All Users\Application Data\ICQ
2011-06-30 12:36:49 ----D---- C:\Program Files\ICQ7.5
2011-06-24 10:41:48 ----D---- C:\Documents and Settings\Jozefína\Application Data\HpUpdate
2011-06-21 14:30:23 ----D---- C:\Program Files\Common Files\Java
2011-06-21 14:30:10 ----A---- C:\WINDOWS\system32\javaws.exe
2011-06-21 14:30:10 ----A---- C:\WINDOWS\system32\javaw.exe
2011-06-21 14:30:10 ----A---- C:\WINDOWS\system32\java.exe
2011-06-19 10:33:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2476490$
2011-06-19 10:33:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2503665$
2011-06-19 10:33:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2011-06-19 10:33:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276$
2011-06-19 10:30:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893$

======List of files/folders modified in the last 3 months======

2011-09-10 10:03:46 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-09-10 10:02:38 ----D---- C:\WINDOWS\Temp
2011-09-10 09:55:23 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2011-09-10 00:57:01 ----D---- C:\WINDOWS\system32\CatRoot2
2011-09-10 00:57:01 ----D---- C:\WINDOWS\system32
2011-09-10 00:56:44 ----D---- C:\WINDOWS\Prefetch
2011-09-10 00:51:54 ----D---- C:\WINDOWS\system32\drivers
2011-09-10 00:46:11 ----D---- C:\WINDOWS
2011-09-10 00:39:26 ----RD---- C:\Program Files
2011-09-09 14:43:28 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-09-09 09:05:50 ----D---- C:\Documents and Settings\Jozefína\Application Data\Skype
2011-09-09 09:05:40 ----D---- C:\Documents and Settings\Jozefína\Application Data\HPAppData
2011-09-08 23:26:54 ----D---- C:\Documents and Settings\Jozefína\Application Data\ICQ
2011-09-08 23:03:08 ----D---- C:\Program Files\Mozilla Firefox
2011-09-08 20:15:04 ----HD---- C:\WINDOWS\inf
2011-09-08 17:29:54 ----HD---- C:\WINDOWS\$hf_mig$
2011-09-03 12:17:37 ----A---- C:\WINDOWS\system32\crypt32.dll
2011-09-03 00:21:24 ----SD---- C:\WINDOWS\Tasks
2011-09-01 21:06:12 ----RSD---- C:\WINDOWS\assembly
2011-09-01 21:01:40 ----D---- C:\WINDOWS\Microsoft.NET
2011-09-01 17:13:31 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-08-31 14:41:32 ----HD---- C:\Config.Msi
2011-08-31 14:41:09 ----SHD---- C:\WINDOWS\Installer
2011-08-31 14:40:59 ----D---- C:\WINDOWS\WinSxS
2011-08-30 12:06:57 ----D---- C:\Program Files\Microsoft.NET
2011-08-24 14:07:24 ----A---- C:\WINDOWS\imsins.BAK
2011-08-23 15:32:49 ----D---- C:\WINDOWS\system32\XPSViewer
2011-08-23 15:32:48 ----RSD---- C:\WINDOWS\Fonts
2011-08-23 15:32:15 ----D---- C:\WINDOWS\system32\CatRoot
2011-08-19 17:15:42 ----A---- C:\WINDOWS\NeroDigital.ini
2011-08-16 14:48:54 ----D---- C:\WINDOWS\system32\en-us
2011-08-16 14:48:54 ----D---- C:\Program Files\Internet Explorer
2011-08-16 14:46:47 ----A---- C:\WINDOWS\system32\MRT.exe
2011-07-22 18:35:31 ----A---- C:\WINDOWS\system32\mshtml.dll
2011-07-08 15:49:22 ----N---- C:\WINDOWS\system32\tzchange.exe
2011-07-03 15:52:16 ----HD---- C:\Program Files\InstallShield Installation Information
2011-06-30 14:21:35 ----RD---- C:\Program Files\Skype
2011-06-30 14:20:55 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2011-06-30 14:20:47 ----D---- C:\Program Files\Common Files
2011-06-30 12:31:55 ----D---- C:\Documents and Settings\Jozefína\Application Data\skypePM
2011-06-24 10:41:50 ----D---- C:\Program Files\HP
2011-06-21 20:45:58 ----N---- C:\WINDOWS\system32\pngfilt.dll
2011-06-21 20:45:58 ----N---- C:\WINDOWS\system32\occache.dll
2011-06-21 20:45:58 ----N---- C:\WINDOWS\system32\mstime.dll
2011-06-21 20:45:58 ----N---- C:\WINDOWS\system32\msrating.dll
2011-06-21 20:45:58 ----A---- C:\WINDOWS\system32\wininet.dll
2011-06-21 20:45:58 ----A---- C:\WINDOWS\system32\webcheck.dll
2011-06-21 20:45:58 ----A---- C:\WINDOWS\system32\urlmon.dll
2011-06-21 20:45:58 ----A---- C:\WINDOWS\system32\url.dll
2011-06-21 20:45:58 ----A---- C:\WINDOWS\system32\mshtmled.dll
2011-06-21 20:45:58 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2011-06-21 20:45:57 ----N---- C:\WINDOWS\system32\jsproxy.dll
2011-06-21 20:45:57 ----N---- C:\WINDOWS\system32\iernonce.dll
2011-06-21 20:45:57 ----N---- C:\WINDOWS\system32\iedkcs32.dll
2011-06-21 20:45:57 ----N---- C:\WINDOWS\system32\ieaksie.dll
2011-06-21 20:45:57 ----N---- C:\WINDOWS\system32\ieakeng.dll
2011-06-21 20:45:57 ----N---- C:\WINDOWS\system32\extmgr.dll
2011-06-21 20:45:57 ----A---- C:\WINDOWS\system32\msfeeds.dll
2011-06-21 20:45:57 ----A---- C:\WINDOWS\system32\iertutil.dll
2011-06-21 20:45:57 ----A---- C:\WINDOWS\system32\iepeers.dll
2011-06-21 20:45:57 ----A---- C:\WINDOWS\system32\ieframe.dll
2011-06-21 20:45:57 ----A---- C:\WINDOWS\system32\ieencode.dll
2011-06-21 20:45:57 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2011-06-21 20:45:57 ----A---- C:\WINDOWS\system32\icardie.dll
2011-06-21 20:45:57 ----A---- C:\WINDOWS\system32\dxtrans.dll
2011-06-21 20:45:57 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2011-06-21 20:45:57 ----A---- C:\WINDOWS\system32\corpol.dll
2011-06-21 20:45:57 ----A---- C:\WINDOWS\system32\advpack.dll
2011-06-21 14:30:08 ----D---- C:\Program Files\Java
2011-06-21 13:46:21 ----N---- C:\WINDOWS\system32\ie4uinit.exe
2011-06-21 13:46:21 ----A---- C:\WINDOWS\system32\ieudinit.exe
2011-06-21 10:50:00 ----A---- C:\WINDOWS\win.ini
2011-06-21 10:47:48 ----D---- C:\WINDOWS\twain_32
2011-06-20 19:44:52 ----A---- C:\WINDOWS\system32\winsrv.dll
2011-06-20 13:27:40 ----N---- C:\WINDOWS\system32\ieakui.dll
2011-06-19 09:08:14 ----D---- C:\Documents and Settings\All Users\Application Data\Real
2011-06-19 09:07:29 ----D---- C:\Documents and Settings\Jozefína\Application Data\Real

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;VIA OHCI Compliant IEEE 1394 Host Controller; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S1 AmdPPM;AMD HwPState Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
S1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
S1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-11-16 96408]
S2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-11-16 116520]
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2008-01-24 4127488]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
S3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-06-25 4125696]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2008-10-29 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2008-10-29 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2008-10-29 21568]
S3 IesDrv;IesDrv; \??\C:\WINDOWS\system32\Drivers\IesDrv.sys []
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-04-30 6032928]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-08-30 3685152]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-02-28 34048]
S3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-02-28 13056]
S3 PRISM;IEEE 802.11 11Mbps Wireless LAN Driver; C:\WINDOWS\system32\DRIVERS\PRISMNDS.sys [2002-03-11 51200]
S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-10-30 117888]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2006-08-29 930308]
S3 StillCam;Still Serial Digital Camera Driver; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-08-17 6784]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbstor;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-06-25 602112]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 CTAudSvcService;Creative Audio Service; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [2009-02-23 307200]
S2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
S2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 HPSLPSVC;HP Network Devices Support; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-11-21 247608]
S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-05-04 153376]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-08-30 143426]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2011-03-22 79360]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-11-16 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-15 774144]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-01-15 266240]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Sound Blaster X-Fi MB Licensing Service;Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [2011-03-22 79360]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Rudy]

Restartujte do nouz. režimu a dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

[Matus2540]

Zdravím no nejako sa mi ho podarilo odstrániť keď som nainštaloval ComboFix tak sa mi už nezobrazoval v normálnom spustení systému žiaden Personal Shield Pro v2.20 tak som spustil len tak Nod32 že keď to pracuje ako vírus ako som sa dočítal tak by to malo nájsť a našlo mi 12 infikácii tak som ich zmazal a od vtedy mi to nenaskakuje a upozorňujem že ten odkaz na ComboFix čo si mi tak ten program mi išiel 30min a nič nerobilo sa mi zobrazila nejaká modrá tabuľka a koniec!!

[Rudy]

Můžete nastartovat alespoň do nouz. režimu?