FB vkontakte

[salee]

Zdravím
posielam log. Prosím o pomoc. Odkedy som to dostal do kompu,je spomalený , prehliadanie stránok tak isto,celkovo ide komp dosť zle. Hrozne dlho mi načítáva stránky, a na fb sa neviem ani prihlásiť.
Za každu pomoc vopred ďakujem.


Logfile of random's system information tool 1.09 (written by random/random)
Run by szalay at 2011-10-29 11:27:33
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 225 GB (95%) free of 238 GB
Total RAM: 2013 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:27:44, on 29.10.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
C:\Program Files\Lenovo\ATK Hotkey\GFNEXSrv.exe
C:\Program Files\Lenovo\ATK Hotkey\LFKAS.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Aktivity\AMonitor.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\update.5.0\svchost.exe
C:\WINDOWS\update.2\svchost.exe
C:\WINDOWS\update.5.0\svchost.exe
C:\WINDOWS\sysdriver32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lenovo\System Update\SUService.exe
C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
C:\Program Files\UltraVNC\WinVNC.exe
C:\Documents and Settings\szalay\Dokumenty\Downloads\Flash-Player.exe
C:\DOCUME~1\user\LOCALS~1\Temp\{E78E7297-F5D1-4478-B338-74C8F72EC983}\{061A431C-86E7-4DB4-92B8-36DE783865CF}\STK2135\Win2KXP\stk2135bsrv.exe
C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE
C:\Program Files\ThinkPad\Utilities\PWMEWSVC.EXE
C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\update.2\svchost.exe
C:\Program Files\Aktivity\PMonitor.exe
C:\Program Files\Aktivity\WCatcher.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
C:\Program Files\Lenovo\HOTKEY\LVOSDSVC.exe
C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Lenovo\ATK Hotkey\LCONTROL.exe
C:\Program Files\Lenovo\ATK Hotkey\LFKA.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
C:\Program Files\Lenovo\Zoom\TpScrex.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\SCHTASK.exe
C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Program Files\Aktivity\svchosta.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\ufa\ufa.exe
C:\Documents and Settings\szalay\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\szalay\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\szalay\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\WINDOWS\update.2\svchost.exe
C:\WINDOWS\update.2\svchost.exe
C:\WINDOWS\update.2\svchost.exe
C:\WINDOWS\update.2\svchost.exe
C:\Documents and Settings\szalay\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\szalay\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\szalay.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.techo.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [TVT Scheduler Proxy] C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\LVOSDSVC.exe
O4 - HKLM\..\Run: [LenovoAutoScrollUtility] C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LCONTROL] "C:\Program Files\Lenovo\ATK Hotkey\LCONTROL.exe"
O4 - HKLM\..\Run: [LFKA] "C:\Program Files\Lenovo\ATK Hotkey\LFKA.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [WinVNC] "C:\Program Files\UltraVNC\WinVNC.exe" -servicehelper
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [5918448.exe] "C:\WINDOWS\TEMP\5918448.exe"
O4 - HKLM\..\Run: [sysdriver32.exe] "C:\WINDOWS\sysdriver32.exe" rezerv
O4 - HKLM\..\Run: [sysdriver32_.exe] "C:\WINDOWS\sysdriver32_.exe" rezerv
O4 - HKLM\..\Run: [6778493.exe] "C:\WINDOWS\TEMP\6778493.exe"
O4 - HKLM\..\Run: [4316758.exe] "C:\WINDOWS\TEMP\4316758.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\szalay\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat do zařízení &Bluetooth... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat do zařízení Bluetooth - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {9E2CD2C3-4DDA-4473-B904-B8E6D0DBAB86} (ElevatedCreater Class) - http://consumersupport.lenovo.com/ot/en ... pdueng.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = techocz.local
O17 - HKLM\Software\..\Telephony: DomainName = techocz.local
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = techocz.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = techocz.local
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AMonitor (ActivityMonitor) - MiCoS Software s.r.o. - C:\Program Files\Aktivity\AMonitor.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\Lenovo\ATK Hotkey\GFNEXSrv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (file missing)
O23 - Service: ESET Service (ekrn) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ThinkPad PM Service for SL Series (IBMPMSVC) - Lenovo - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Service of LFKA (LFKAS) - Unknown owner - C:\Program Files\Lenovo\ATK Hotkey\LFKAS.exe
O23 - Service: Power Manager DBC Service - Unknown owner - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: Cisco EnergyWise Enabler (PwmEWSvc) - Unknown owner - C:\Program Files\ThinkPad\Utilities\PWMEWSVC.EXE
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: srvbtcclient - Unknown owner - C:\WINDOWS\update.5.0\svchost.exe
O23 - Service: srviecheck - Unknown owner - C:\WINDOWS\update.2\svchost.exe
O23 - Service: srvsysdriver32 - Unknown owner - C:\WINDOWS\sysdriver32.exe
O23 - Service: System Update (SUService) - Lenovo Group Limited - C:\Program Files\Lenovo\System Update\SUService.exe
O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
O23 - Service: TVT Scheduler - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
O23 - Service: VNC Server (winvnc) - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe
O23 - Service: wxpdrivers - Cronosoft - C:\Documents and Settings\szalay\Dokumenty\Downloads\Flash-Player.exe
O23 - Service: XYNTService - Unknown owner - C:\DOCUME~1\user\LOCALS~1\Temp\{E78E7297-F5D1-4478-B338-74C8F72EC983}\{061A431C-86E7-4DB4-92B8-36DE783865CF}\STK2135\Win2KXP\stk2135bsrv.exe

--
End of file - 12223 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3139780856-1458896067-1661408358-7107Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3139780856-1458896067-1661408358-7107UA.job
C:\WINDOWS\tasks\PMTask.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-10-03 57224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-05-04 252136]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"TVT Scheduler Proxy"=C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe [2008-03-04 487424]
"TPHOTKEY"=C:\Program Files\Lenovo\HOTKEY\LVOSDSVC.exe [2010-11-29 64952]
"LenovoAutoScrollUtility"=C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe [2010-04-01 43960]
"PWRMGRTR"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor []
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2008-04-10 122880]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-04-10 524288]
"LCONTROL"=C:\Program Files\Lenovo\ATK Hotkey\LCONTROL.exe [2008-03-19 77824]
"LFKA"=C:\Program Files\Lenovo\ATK Hotkey\LFKA.exe [2008-04-15 315392]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2008-06-04 150040]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2008-06-04 170520]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2008-06-04 141848]
"WinVNC"=C:\Program Files\UltraVNC\WinVNC.exe [2006-06-18 712704]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe /hide /waitservice []
"NokiaMServer"=C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
"5918448.exe"=C:\WINDOWS\TEMP\5918448.exe [2011-10-28 258048]
"sysdriver32.exe"=C:\WINDOWS\sysdriver32.exe [2011-10-28 258048]
"sysdriver32_.exe"=C:\WINDOWS\sysdriver32_.exe [2011-10-28 258048]
"6778493.exe"=C:\WINDOWS\TEMP\6778493.exe [2011-10-28 258048]
"4316758.exe"=C:\WINDOWS\TEMP\4316758.exe [2011-10-28 1946624]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"Google Update"=C:\Documents and Settings\szalay\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-09-18 136176]
""= []
"NokiaOviSuite2"=C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2011-09-01 966712]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-05-21 212992]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\psfus]
C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll [2010-12-07 100176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tphotkey]
C:\Program Files\Lenovo\HOTKEY\tphklock.dll [2009-05-21 34080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wxpdrivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\wxpdrivers]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"Wallpaper"=\\techocz.local\dfs\sw install\wallpaper\TECHOwallpaper1280x1024.jpg
"WallpaperStyle"=2

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
"EnableSecureUIAPaths"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"ForceActiveDesktopOn"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Aktivity\AMonitor.exe"="C:\Program Files\Aktivity\AMonitor.exe:*:Enabled:AMonitor"
"C:\Program Files\Aktivity\ActMon.exe"="C:\Program Files\Aktivity\ActMon.exe:*:Enabled:ActMon"
"C:\Program Files\Aktivity\WCatcher.exe"="C:\Program Files\Aktivity\WCatcher.exe:*:Enabled:WCatcher"
"C:\Program Files\Aktivity\SvcHosta.exe"="C:\Program Files\Aktivity\SvcHosta.exe:*:Enabled:SvcHosta"
"C:\Program Files\Aktivity\PMonitor.exe"="C:\Program Files\Aktivity\PMonitor.exe:*:Enabled:PMonitor"
"C:\Program Files\Aktivity\Crypter.exe"="C:\Program Files\Aktivity\Crypter.exe:*:Enabled:Crypter"
"C:\Program Files\Aktivity\Updater.exe"="C:\Program Files\Aktivity\Updater.exe:*:Enabled:Updater"
"C:\Documents and Settings\szalay\Dokumenty\Downloads\Flash-Player.exe"="C:\Documents and Settings\szalay\Dokumenty\Downloads\Flash-Player.exe:*:Enabled:C:\Documents and Settings\szalay\Dokumenty\Downloads\Flash-Player.exe"
"C:\WINDOWS\update.1\svchost.exe"="C:\WINDOWS\update.1\svchost.exe:*:Enabled:C:\WINDOWS\update.1\svchost.exe"
"C:\WINDOWS\update.2\svchost.exe"="C:\WINDOWS\update.2\svchost.exe:*:Enabled:C:\WINDOWS\update.2\svchost.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Aktivity\AMonitor.exe"="C:\Program Files\Aktivity\AMonitor.exe:*:Enabled:AMonitor"
"C:\Program Files\Aktivity\ActMon.exe"="C:\Program Files\Aktivity\ActMon.exe:*:Enabled:ActMon"
"C:\Program Files\Aktivity\WCatcher.exe"="C:\Program Files\Aktivity\WCatcher.exe:*:Enabled:WCatcher"
"C:\Program Files\Aktivity\SvcHosta.exe"="C:\Program Files\Aktivity\SvcHosta.exe:*:Enabled:SvcHosta"
"C:\Program Files\Aktivity\PMonitor.exe"="C:\Program Files\Aktivity\PMonitor.exe:*:Enabled:PMonitor"
"C:\Program Files\Aktivity\Crypter.exe"="C:\Program Files\Aktivity\Crypter.exe:*:Enabled:Crypter"
"C:\Program Files\Aktivity\Updater.exe"="C:\Program Files\Aktivity\Updater.exe:*:Enabled:Updater"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.scr - open - C:\WINDOWS\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2011-10-29 11:27:33 ----D---- C:\rsit
2011-10-29 11:27:33 ----D---- C:\Program Files\trend micro
2011-10-28 23:33:48 ----D---- C:\WINDOWS\ufa
2011-10-28 23:33:48 ----D---- C:\WINDOWS\rpcminer
2011-10-28 23:33:48 ----D---- C:\WINDOWS\phoenix
2011-10-28 23:32:10 ----A---- C:\WINDOWS\btc_client_iplist.txt
2011-10-28 23:31:00 ----HD---- C:\WINDOWS\update.5.0
2011-10-28 21:31:37 ----A---- C:\WINDOWS\unrar.exe
2011-10-28 21:31:12 ----A---- C:\WINDOWS\iecheck_iplist.txt
2011-10-28 21:30:51 ----HD---- C:\WINDOWS\update.2
2011-10-28 21:30:32 ----A---- C:\WINDOWS\iplist.txt
2011-10-28 21:30:27 ----A---- C:\WINDOWS\sysdriver32_.exe
2011-10-28 21:30:13 ----A---- C:\WINDOWS\sysdriver32.exe
2011-10-28 21:29:54 ----A---- C:\WINDOWS\front_ip_list.txt
2011-10-28 21:20:44 ----HD---- C:\WINDOWS\update.1
2011-10-28 21:20:41 ----HD---- C:\WINDOWS\update.tray-2-0-lnk
2011-10-28 21:20:41 ----HD---- C:\WINDOWS\update.tray-2-0
2011-10-28 21:09:18 ----A---- C:\WINDOWS\winlog-ids.txt
2011-10-28 21:09:18 ----A---- C:\WINDOWS\winlog-dirs.txt
2011-10-28 21:09:13 ----A---- C:\WINDOWS\services32.exe
2011-10-23 18:25:00 ----D---- C:\WINDOWS\system32\appmgmt
2011-10-23 18:17:01 ----A---- C:\Program Files\Common Files\AskToolbarInstaller.exe
2011-10-23 18:16:58 ----D---- C:\Program Files\VDownloader
2011-10-23 18:04:47 ----D---- C:\Documents and Settings\szalay\Data aplikací\DVDVideoSoft
2011-10-23 18:04:39 ----D---- C:\Documents and Settings\szalay\Data aplikací\DVDVideoSoftIEHelpers
2011-10-22 13:03:15 ----D---- C:\Program Files\Return to Castle Wolfenstein
2011-10-21 20:03:22 ----A---- C:\WINDOWS\system32\javaws.exe
2011-10-21 20:03:22 ----A---- C:\WINDOWS\system32\javaw.exe
2011-10-21 20:03:22 ----A---- C:\WINDOWS\system32\java.exe
2011-10-14 14:30:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\Micos
2011-10-14 14:30:09 ----A---- C:\WINDOWS\SetupAct.exe
2011-10-14 14:30:09 ----A---- C:\WINDOWS\Activities.ini
2011-10-14 14:30:07 ----A---- C:\WINDOWS\system32\VersionOS.txt
2011-10-14 14:30:05 ----D---- C:\Program Files\Aktivity
2011-10-12 21:53:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2011-10-12 21:47:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2567053$
2011-10-12 21:47:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2011-10-12 17:20:57 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2011-10-12 17:20:54 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2011-10-12 17:20:47 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2011-10-10 10:17:54 ----D---- C:\Program Files\MSECache
2011-10-08 22:14:55 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2011-10-08 22:14:35 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2011-10-08 22:14:06 ----D---- C:\Program Files\MSXML 4.0
2011-10-07 13:54:38 ----A---- C:\WINDOWS\ricdb.ini
2011-10-07 10:45:18 ----D---- C:\Documents and Settings\szalay\Data aplikací\Nokia Ovi Suite
2011-10-07 10:45:17 ----D---- C:\Documents and Settings\szalay\Data aplikací\Nokia
2011-10-07 10:43:51 ----N---- C:\WINDOWS\system32\spmsg.dll
2011-10-07 10:43:47 ----HDC---- C:\WINDOWS\$NtUninstallWudf01009$
2011-10-07 10:39:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Suite
2011-10-07 10:39:56 ----D---- C:\Documents and Settings\szalay\Data aplikací\PC Suite
2011-10-07 10:38:37 ----D---- C:\Program Files\Common Files\Nokia
2011-10-07 10:38:17 ----D---- C:\Program Files\DIFX
2011-10-07 10:38:16 ----A---- C:\WINDOWS\system32\drivers\pccsmcfd.sys
2011-10-07 10:38:10 ----D---- C:\Program Files\PC Connectivity Solution
2011-10-07 10:37:58 ----A---- C:\WINDOWS\system32\nmwcdcls.dll
2011-10-07 10:37:20 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2011-10-07 10:36:54 ----D---- C:\WINDOWS\system32\LogFiles
2011-10-07 10:36:54 ----D---- C:\WINDOWS\system32\drivers\UMDF
2011-10-07 10:36:47 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2011-10-07 10:35:56 ----D---- C:\Program Files\Nokia
2011-10-07 10:35:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\NokiaInstallerCache

======List of files/folders modified in the last 1 month======

2011-10-29 11:27:44 ----D---- C:\WINDOWS\Prefetch
2011-10-29 11:27:33 ----RD---- C:\Program Files
2011-10-29 11:12:16 ----D---- C:\Documents and Settings\szalay\Data aplikací\Skype
2011-10-29 08:38:51 ----D---- C:\WINDOWS\Temp
2011-10-29 08:34:45 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-10-29 08:23:05 ----A---- C:\WINDOWS\hpbafd.ini
2011-10-28 23:33:48 ----D---- C:\WINDOWS
2011-10-28 21:32:49 ----SHD---- C:\System Volume Information
2011-10-28 21:32:49 ----D---- C:\WINDOWS\system32\Restore
2011-10-28 21:31:12 ----D---- C:\WINDOWS\system32\drivers\etc
2011-10-28 21:20:54 ----A---- C:\boot.ini
2011-10-27 16:41:33 ----D---- C:\WINDOWS\security
2011-10-23 19:02:14 ----D---- C:\Program Files\Common Files
2011-10-23 18:25:00 ----SHD---- C:\WINDOWS\Installer
2011-10-23 18:25:00 ----D---- C:\WINDOWS\system32
2011-10-23 18:24:58 ----SD---- C:\WINDOWS\Tasks
2011-10-23 18:14:36 ----RSD---- C:\WINDOWS\assembly
2011-10-21 20:03:20 ----D---- C:\Program Files\Java
2011-10-13 09:19:35 ----D---- C:\WINDOWS\Microsoft.NET
2011-10-13 08:11:50 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-10-12 21:53:55 ----HD---- C:\WINDOWS\inf
2011-10-12 21:53:38 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-10-12 21:53:22 ----D---- C:\WINDOWS\WinSxS
2011-10-12 21:47:37 ----A---- C:\WINDOWS\system32\MRT.exe
2011-10-12 21:47:33 ----A---- C:\WINDOWS\imsins.BAK
2011-10-12 21:47:28 ----D---- C:\WINDOWS\system32\drivers
2011-10-12 21:47:26 ----HD---- C:\WINDOWS\$hf_mig$
2011-10-12 21:47:12 ----D---- C:\Program Files\Internet Explorer
2011-10-12 21:34:10 ----D---- C:\WINDOWS\system32\CatRoot2
2011-10-10 10:23:53 ----SD---- C:\Documents and Settings\szalay\Data aplikací\Microsoft
2011-10-10 10:18:07 ----RSD---- C:\WINDOWS\Fonts
2011-10-10 10:18:04 ----D---- C:\Program Files\Microsoft Office
2011-10-10 10:18:03 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-10-07 14:29:00 ----D---- C:\WINDOWS\system32\CatRoot
2011-10-07 10:43:56 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-10-07 10:38:16 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-10-07 10:37:27 ----D---- C:\Program Files\Windows Media Player
2011-10-03 10:31:24 ----A---- C:\WINDOWS\system32\mshtml.dll
2011-10-03 02:50:34 ----A---- C:\WINDOWS\system32\deployJava1.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\WINDOWS\system32\DRIVERS\iaStor.sys [2011-03-11 354840]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2010-12-21 94872]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 lenovo.smi;Lenovo System Interface Driver; C:\WINDOWS\system32\DRIVERS\smiif32.sys [2010-09-07 13680]
R1 TPHKDRV;TPHKDRV; C:\WINDOWS\system32\DRIVERS\TPHKDRV.sys [2008-05-12 17844]
R1 TPPWRIF;TPPWRIF; C:\WINDOWS\System32\drivers\Tppwrif.sys [2011-04-19 12144]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\Lenovo\ATK Hotkey\ASMMAP.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-12-21 141264]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2006-06-18 12672]
R2 rimmptsk;rimmptsk; C:\WINDOWS\system32\DRIVERS\rimmptsk.sys [2008-02-15 46592]
R2 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\WINDOWS\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2010-05-19 13952]
R2 smihlp;SMI Helper Driver (smihlp); \??\C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys []
R2 vnccom;vnccom; C:\WINDOWS\System32\Drivers\vnccom.SYS [2004-06-26 6016]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 BTDriver;Ovladač virtuálních komunikací Bluetooth; C:\WINDOWS\system32\DRIVERS\btport.sys [2008-02-04 37160]
R3 BTKRNL;Enumenátor sběrnice Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2010-09-23 993576]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDAU32.sys [2008-06-12 764416]
R3 DCamUSBGene;Integrated Camera; C:\WINDOWS\system32\DRIVERS\usbstk.sys [2008-07-31 173584]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2008-03-25 985472]
R3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2008-03-25 210560]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-05-21 6018464]
R3 IBMPMDRV;IBMPMDRV; C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys [2008-05-14 22312]
R3 MTsensor;ATK0101 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\A0101X32.sys [2007-08-24 5760]
R3 NETwNx32;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETwNx32.sys [2010-10-18 6913920]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\WINDOWS\system32\DRIVERS\psadd.sys [2007-02-19 21376]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2008-04-14 5888]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2007-10-03 102656]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-14 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2008-04-10 177632]
R3 TcUsb;TC USB Kernel Driver; C:\WINDOWS\System32\Drivers\tcusb.sys [2009-12-08 52112]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 vncdrv;vncdrv; C:\WINDOWS\system32\DRIVERS\vncdrv.sys [2004-06-26 4736]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2008-03-25 731264]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2010-09-16 51752]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ActivityMonitor;AMonitor; C:\Program Files\Aktivity\AMonitor.exe [2011-07-26 983152]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\Lenovo\ATK Hotkey\GFNEXSrv.exe [2007-10-30 94208]
R2 btwdins;Bluetooth Service; C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe [2010-09-22 349528]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2010-10-19 866576]
R2 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
R2 IBMPMSVC;ThinkPad PM Service for SL Series; C:\WINDOWS\system32\ibmpmsvc.exe [2008-05-14 36128]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2011-10-03 161664]
R2 LFKAS;Service of LFKA; C:\Program Files\Lenovo\ATK Hotkey\LFKAS.exe [2008-03-19 208896]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 Power Manager DBC Service;Power Manager DBC Service; C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE [2011-04-19 69632]
R2 PwmEWSvc;Cisco EnergyWise Enabler; C:\Program Files\ThinkPad\Utilities\PWMEWSVC.EXE [2011-04-19 143360]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2010-10-19 477456]
R2 S24EventMonitor;Intel(R) PROSet/Wireless WiFi Service; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [2010-10-19 966656]
R2 srvbtcclient;srvbtcclient; C:\WINDOWS\update.5.0\svchost.exe [2011-10-28 344576]
R2 srviecheck;srviecheck; C:\WINDOWS\update.2\svchost.exe [2011-10-28 1946624]
R2 srvsysdriver32;srvsysdriver32; C:\WINDOWS\sysdriver32.exe [2011-10-28 258048]
R2 SUService;System Update; C:\Program Files\Lenovo\System Update\SUService.exe [2011-07-25 28672]
R2 ThinkVantage Registry Monitor Service;ThinkVantage Registry Monitor Service; C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe [2007-09-26 644408]
R2 TVT Scheduler;TVT Scheduler; C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe [2008-03-04 1122304]
R2 winvnc;VNC Server; C:\Program Files\UltraVNC\WinVNC.exe [2006-06-18 712704]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 wxpdrivers;wxpdrivers; C:\Documents and Settings\szalay\Dokumenty\Downloads\Flash-Player.exe [2011-10-28 1201152]
R2 XYNTService;XYNTService; C:\DOCUME~1\user\LOCALS~1\Temp\{E78E7297-F5D1-4478-B338-74C8F72EC983}\{061A431C-86E7-4DB4-92B8-36DE783865CF}\STK2135\Win2KXP\stk2135bsrv.exe [2009-03-27 86016]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
S2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe []
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe []
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-02-08 136120]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Rudy]

Máte FB vir. Nejprve proveďte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

[salee]

posielam mbam log.


Malwarebytes' Anti-Malware
www.malwarebytes.org

Verze databáze:

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

29.10.2011 12:18:14
mbam-log-2011-10-29 (12-18-06).txt

Typ: Rychlá kontrola
Kontrolované objekty: 205407
Uplynulý čas: 3 minut, 26 sekund

Infikované procesy v paměti: 10
Infikované moduly v paměti: 0
Infikované klíče v registru: 10
Infikované hodnoty v registru: 7
Infikované datové položky v registru: 4
Infikované složky: 1
Infikované soubory: 28

Infikované procesy v paměti:
c:\WINDOWS\update.5.0\svchost.exe (Trojan.Downloader) -> 568 -> No action taken.
c:\WINDOWS\update.5.0\svchost.exe (Trojan.Downloader) -> 2192 -> No action taken.
c:\WINDOWS\sysdriver32.exe (Trojan.Agent) -> 3012 -> No action taken.
c:\WINDOWS\update.2\svchost.exe (Backdoor.Agent) -> 2096 -> No action taken.
c:\WINDOWS\update.2\svchost.exe (Backdoor.Agent) -> 2268 -> No action taken.
c:\WINDOWS\update.2\svchost.exe (Backdoor.Agent) -> 5688 -> No action taken.
c:\WINDOWS\update.2\svchost.exe (Backdoor.Agent) -> 1648 -> No action taken.
c:\WINDOWS\update.2\svchost.exe (Backdoor.Agent) -> 2368 -> No action taken.
c:\WINDOWS\update.2\svchost.exe (Backdoor.Agent) -> 4400 -> No action taken.
c:\documents and settings\szalay\dokumenty\downloads\flash-player.exe (Trojan.Agent) -> 3428 -> No action taken.

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srvbtcclient (Trojan.Downloader) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srvsysdriver32 (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srviecheck (Backdoor.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\sysdriver32.exe (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\systeminfog (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\SERVICES32.EXE (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wxpdrivers (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\wxpdrivers (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SRVSYSDRIVER32 (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WXPDRIVERS (Trojan.Agent) -> No action taken.

Infikované hodnoty v registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sysdriver32.exe (Trojan.Agent) -> Value: sysdriver32.exe -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\5918448.exe (Trojan.Agent) -> Value: 5918448.exe -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sysdriver32_.exe (Trojan.Agent) -> Value: sysdriver32_.exe -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\6778493.exe (Trojan.Agent) -> Value: 6778493.exe -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\4316758.exe (Trojan.Agent) -> Value: 4316758.exe -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Services32.exe\close (Trojan.Agent) -> Value: close -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wxpDrivers\ImagePath (Trojan.Agent) -> Value: ImagePath -> No action taken.

Infikované datové položky v registru:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ForceActiveDesktopOn (PUM.Hijack.Desktop) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Infikované složky:
c:\WINDOWS\rpcminer (Trojan.BCMiner) -> No action taken.

Infikované soubory:
c:\WINDOWS\update.5.0\svchost.exe (Trojan.Downloader) -> No action taken.
c:\WINDOWS\sysdriver32.exe (Trojan.Agent) -> No action taken.
c:\WINDOWS\Temp\5918448.exe (Trojan.Agent) -> No action taken.
c:\WINDOWS\sysdriver32_.exe (Trojan.Agent) -> No action taken.
c:\WINDOWS\Temp\6778493.exe (Trojan.Agent) -> No action taken.
c:\WINDOWS\Temp\484564.exe (Trojan.Downloader) -> No action taken.
c:\WINDOWS\Temp\6556_myunrar2.exe (Trojan.Dropper) -> No action taken.
c:\WINDOWS\Temp\4162551.exe (Trojan.Agent) -> No action taken.
c:\WINDOWS\Temp\4316758.exe (Trojan.Agent) -> No action taken.
c:\WINDOWS\Temp\6313084.exe (Trojan.Agent) -> No action taken.
c:\WINDOWS\Temp\7115868.exe (Trojan.Agent) -> No action taken.
c:\WINDOWS\Temp\7476119.exe (Trojan.Agent) -> No action taken.
c:\WINDOWS\update.2\svchost.exe (Backdoor.Agent) -> No action taken.
c:\WINDOWS\rpcminer\bitcoinmineropencl.cl (Trojan.BCMiner) -> No action taken.
c:\WINDOWS\rpcminer\bitcoinminercuda_10.cubin (Trojan.BCMiner) -> No action taken.
c:\WINDOWS\rpcminer\bitcoinminercuda_11.cubin (Trojan.BCMiner) -> No action taken.
c:\WINDOWS\rpcminer\bitcoinminercuda_20.cubin (Trojan.BCMiner) -> No action taken.
c:\WINDOWS\rpcminer\cudart32_32_16.dll (Trojan.BCMiner) -> No action taken.
c:\WINDOWS\rpcminer\curllib.dll (Trojan.BCMiner) -> No action taken.
c:\WINDOWS\rpcminer\libeay32.dll (Trojan.BCMiner) -> No action taken.
c:\WINDOWS\rpcminer\libsasl.dll (Trojan.BCMiner) -> No action taken.
c:\WINDOWS\rpcminer\openldap.dll (Trojan.BCMiner) -> No action taken.
c:\WINDOWS\rpcminer\rpcminer-4way.exe (Trojan.BCMiner) -> No action taken.
c:\WINDOWS\rpcminer\rpcminer-cpu.exe (Trojan.BCMiner) -> No action taken.
c:\WINDOWS\rpcminer\rpcminer-cuda.exe (Trojan.BCMiner) -> No action taken.
c:\WINDOWS\rpcminer\rpcminer-opencl.exe (Trojan.BCMiner) -> No action taken.
c:\WINDOWS\rpcminer\ssleay32.dll (Trojan.BCMiner) -> No action taken.
c:\documents and settings\szalay\dokumenty\downloads\flash-player.exe (Trojan.Agent) -> No action taken.

[Rudy]

Vše smažte, restartujte PC a dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

[salee]

prosím Vás ako vypnem rezidentný štít? Neviem vypnuť ano bránu firewallu.

[salee]

neviem sa dostať ani k nodu 32. Nechce mi ho spustiť a tým pádom ho neviem ani vypnuť.

[Rudy]

prosím Vás ako vypnem rezidentný štít? Neviem vypnuť ano bránu firewallu.

V nastavení antiviru a firewall přes centrum zabezpečení.

neviem sa dostať ani k nodu 32. Nechce mi ho spustiť a tým pádom ho neviem ani vypnuť.

Restartujte do nouz. režimu a spusťte CF tam.

[salee]

kompik odkedy som vyčistil trošku bordel už ide omnoho lepšie. Aj stránky idu veľmi dobre,len fb nie a nie načítať. Bránu firewall neviem vypnuť. Nod32 mi zmizol a to s núdzovým režimom netuším ako sa robí

[salee]

a čítal som tu na fóre že firemné kompíky moc neriešite takže asi to nebudem mocť vyriešit cez Vás.

[Rudy]

a čítal som tu na fóre že firemné kompíky moc neriešite takže asi to nebudem mocť vyriešit cez Vás.

To opravdu ne. Nesuplujeme zdrama práci někoho, kdo je za to placen.