Facebook vir potřeboval bych pomoc

Zpráva

Dedecek · #1 Příspěvek od **Dedecek** » 07 lis 2011 11:37

Logfile of random's system information tool 1.09 (written by random/random)
Run by Knejfl at 2011-11-07 11:32:56
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 657 MB (7%) free of 10 GB
Total RAM: 1023 MB (18% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:33:05, on 7.11.2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\l1rezerv.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\update.7.1\svchostdriver.exe
C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Portrait Displays\Drivers\pdisrvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\update.5.0\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Common Files\WireHelpSvc.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\update.2\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Akamai\netsession_win.exe
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Akamai\netsession_win.exe
D:\Programy\uTorrent\utorrent.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
D:\deda\HiJackThis.exe
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\WINDOWS\update.7.1\svchostdriver.exe
D:\deda\RSIT.exe
C:\Program Files\trend micro\Knejfl.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT1708250
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\Knejfl\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {EEE6C35D-6118-11DC-9C72-001320C79847} - (no file)
R3 - URLSearchHook: MAX EN Atube Toolbar - {ee78981f-3768-4f82-9241-9aa5f3712651} - (no file)
R3 - URLSearchHook: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\prxtbXfi2.dll
R3 - URLSearchHook: Free Lunch Design Toolbar - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\prxtbFre2.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngin0.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\Filmy\PROGRA~1\spybot\SPYBOT~1\SDHelper.dll
O2 - BHO: Free Lunch Design - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\prxtbFre2.dll
O2 - BHO: XfireXO - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\prxtbXfi2.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Programy\Office\Office12\GRA8E1~1.DLL
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\Knejfl\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: MAX EN Atube Toolbar - {ee78981f-3768-4f82-9241-9aa5f3712651} - (no file)
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - (no file)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O3 - Toolbar: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
O3 - Toolbar: MAX EN Atube Toolbar - {ee78981f-3768-4f82-9241-9aa5f3712651} - (no file)
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\prxtbXfi2.dll
O3 - Toolbar: Free Lunch Design Toolbar - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\prxtbFre2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [UVS10 Preload] D:\Program Files\uvPL.exe
O4 - HKLM\..\Run: [wxpdrv] C:\WINDOWS\services32.exe
O4 - HKLM\..\Run: [6112745.exe] "C:\DOCUME~1\Knejfl\LOCALS~1\Temp\6112745.exe"
O4 - HKLM\..\Run: [sysdriver32_.exe] "C:\WINDOWS\sysdriver32_.exe" rezerv
O4 - HKLM\..\Run: [6219094.exe] "C:\WINDOWS\TEMP\6219094.exe"
O4 - HKLM\..\Run: [9744444.exe] "C:\WINDOWS\TEMP\9744444.exe"
O4 - HKLM\..\Run: [l1rezerv.exe] "C:\WINDOWS\l1rezerv.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [7736673.exe] "C:\DOCUME~1\Knejfl\LOCALS~1\Temp\7736673.exe"
O4 - HKLM\..\Run: [TrojanScanner] D:\deda\Trojan Remover\Trjscan.exe /boot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [tray_ico0] C:\WINDOWS\update.tray-8-0\svchost.exe
O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ESL Wire] "D:\Filmy\EslWire\wire.exe" --tray
O4 - HKCU\..\Run: [Advanced SystemCare 3] "D:\Filmy\Advanced SystemCare 3\AWC.exe" /startup
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Akamai NetSession Interface] C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Akamai\netsession_win.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Xfire.lnk = D:\Filmy\xfire\Xfire.exe
O4 - Global Startup: GamePark klient 2.lnk = D:\deda\GamePark2\gpcl.exe
O4 - Global Startup: GameParkKlient.lnk = C:\Program Files\GamePark.cz Klient\gpcl.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\Programy\Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout všechna videa s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\Office\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\Office\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - D:\Filmy\ICQ7.1\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - D:\Filmy\ICQ7.1\ICQ.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Programy\Office\Office12\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll/206 (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Filmy\PROGRA~1\spybot\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Filmy\PROGRA~1\spybot\SPYBOT~1\SDHelper.dll
O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files\PokerStars.NET\PokerStarsUpdate.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: QIP Infium - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - D:\Programy\QIP Infium\infium.exe (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Programy\Office\Office12\GR99D3~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe (file missing)
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe (file missing)
O23 - Service: ddservice - Unknown owner - C:\WINDOWS\update.7.1\svchostdriver.exe
O23 - Service: Portrait Displays Display Tune Service (DTSRVC) - Unknown owner - C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MSSQL$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Portrait Displays SDK Service (PdiService) - Portrait Displays, Inc. - C:\Program Files\Common Files\Portrait Displays\Drivers\pdisrvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: SQLAgent$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE (file missing)
O23 - Service: srvbtcclient - Unknown owner - C:\WINDOWS\update.5.0\svchost.exe
O23 - Service: srviecheck - Unknown owner - C:\WINDOWS\update.2\svchost.exe
O23 - Service: srvsysdriver32 - Unknown owner - C:\WINDOWS\sysdriver32.exe (file missing)
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: WireHelpSvc - Unknown owner - C:\Program Files\Common Files\WireHelpSvc.exe
O23 - Service: wxpdrivers - Cronosoft - C:\WINDOWS\update.1\svchost.exe

--
End of file - 14617 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1292428093-412668190-725345543-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1292428093-412668190-725345543-1003UA.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5, {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}:6.0.02, {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16, {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17, {3112ca9c-de6d-4884-a869-9855de68056c}:3.1.20081127W, {20a82645-c095-46ed-80e3-08825760534b}:1.1, jqs@sun.com:1.0, QipCounter@qip.ru:1.0, {32a1fd71-835e-4b11-8e54-886fda0b4c89}:1.1, {5e5ab302-7f65-44cd-8211-c1d4caaccea3}:2.7.2.0, {d7ba87f4-c901-47b7-af80-18d75313aad1}:1.5.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"
prefs.js - "keyword.URL" - "http://search.conduit.com/ResultsExt.as ... 2304157&q="

"{3112ca9c-de6d-4884-a869-9855de68056c}"=C:\Documents and Settings\All Users\Data aplikací\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c}
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@idsoftware.com/QuakeLive]
"Description"=
"Path"=C:\Documents and Settings\All Users\Data aplikací\id Software\QuakeLive\npquakezero.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@ngm.nexoneu.com/NxGame]
"Description"=Nexon Game Controller 1.0.0.1
"Path"=C:\Documents and Settings\All Users\Data aplikací\NexonEU\NGM\npNxGameeu.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Webzen.com/NPGameWebStarter]
"Description"=Webzen Game Controller
"Path"=C:\Program Files\WEBZEN\WebzenGameStarter\NPGameWebStarter.dll

D:\Programy\Firefox\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

D:\Programy\Firefox\components\
binary.manifest
browsercomps.dll
nsIBitCometAgent.xpt
nsIQTScriptablePlugin.xpt

D:\Programy\Firefox\plugins\
np-mswmp.dll
np32dsw.dll
npBitCometAgent.dll
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class
ShockwavePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

D:\Programy\Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\extensions\
battlefieldplay4free@ea.com
engine@conduit.com
maps@ovi.com
{20a82645-c095-46ed-80e3-08825760534b}
{32a1fd71-835e-4b11-8e54-886fda0b4c89}
{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}
{5e5ab302-7f65-44cd-8211-c1d4caaccea3}
{d7ba87f4-c901-47b7-af80-18d75313aad1}

C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\
conduit.xml
icq-search.xml
icqplugin-1.xml
icqplugin-10.xml
icqplugin-11.xml
icqplugin-12.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.xml
qip-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16 37808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngin0.dll [2010-10-18 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll [2009-07-16 664888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - D:\Filmy\PROGRA~1\spybot\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}]
Free Lunch Design Toolbar - C:\Program Files\Free_Lunch_Design\prxtbFre2.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
XfireXO Toolbar - C:\Program Files\XfireXO\prxtbXfi2.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - D:\Programy\Office\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - C:\Documents and Settings\Knejfl\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll [2010-06-10 149968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-18 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ee78981f-3768-4f82-9241-9aa5f3712651}]
MAX EN Atube Toolbar

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2008-07-17 691656]
{855F3B16-6D32-4fe6-8A56-BBB695989046} -
{EEE6C35B-6118-11DC-9C72-001320C79847}
{ee78981f-3768-4f82-9241-9aa5f3712651} -
{D4027C7F-154A-4066-A1AD-4243D8127440}
{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - XfireXO Toolbar - C:\Program Files\XfireXO\prxtbXfi2.dll [2011-01-17 175912]
{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - Free Lunch Design Toolbar - C:\Program Files\Free_Lunch_Design\prxtbFre2.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-12-01 77824]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"HP Component Manager"=C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2004-05-12 241664]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2010-06-26 155648]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-10-16 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-10-16 13851752]
"UVS10 Preload"=D:\Program Files\uvPL.exe [2006-03-06 36864]
"wxpdrv"=C:\WINDOWS\services32.exe [2011-10-27 1198080]
"6112745.exe"=C:\DOCUME~1\Knejfl\LOCALS~1\Temp\6112745.exe []
"sysdriver32_.exe"=C:\WINDOWS\sysdriver32_.exe [2011-10-27 258048]
"6219094.exe"=C:\WINDOWS\TEMP\6219094.exe []
"9744444.exe"=C:\WINDOWS\TEMP\9744444.exe []
"l1rezerv.exe"=C:\WINDOWS\l1rezerv.exe [2011-10-27 232960]
"avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe /min []
"tray_ico"= []
"tray_ico1"= []
"tray_ico2"= []
"tray_ico3"= []
"tray_ico4"= []
"7736673.exe"=C:\DOCUME~1\Knejfl\LOCALS~1\Temp\7736673.exe []
"TrojanScanner"=D:\deda\Trojan Remover\Trjscan.exe [2011-10-30 1233856]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"tray_ico0"=C:\WINDOWS\update.tray-8-0\svchost.exe [2011-10-27 1198080]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WIAWizardMenu"=C:\WINDOWS\system32\sti_ci.dll [2004-08-17 136704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"ESL Wire"=D:\Filmy\EslWire\wire.exe [2011-09-20 1981952]
"Advanced SystemCare 3"=D:\Filmy\Advanced SystemCare 3\AWC.exe [2010-05-26 2346192]
"Google Update"=C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-07-05 136176]
"Akamai NetSession Interface"=C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Akamai\netsession_win.exe [2011-11-04 3293784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
C:\Program Files\foteky\3.0\Apps\apdproxy.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-03-18 500208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 3]
D:\Filmy\Advanced SystemCare 3\AWC.exe [2010-05-26 2346192]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avast!]
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-07-24 490952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files\Electronic Arts\EADM\Core.exe [2008-07-22 2772992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ESL Wire]
D:\Filmy\EslWire\wire.exe [2011-09-20 1981952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Fraps]
D:\FILMY\FRAPS\FRAPS.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gainward]
C:\WINDOWS\TBPanel.exe [2007-04-23 2173744]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
D:\Programy\Office\Office12\GrooveMonitor.exe [2006-10-26 31016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2004-02-12 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QIP Internet Guardian]
C:\Documents and Settings\Knejfl\Data aplikací\QipGuard\QipGuard.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe [2010-06-26 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
D:\Filmy\programy by deda\spybot\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
D:\G.DC\STEAM\Steam.exe -silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue RegistryBooster 2]
C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB Storage Toolbox]
C:\WINDOWS\UMStor\Res.EXE [2005-09-14 65536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS10 Preload]
D:\Programy\Ulead VideoS. DVD\uvPL.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program Files\Winamp\winampa.exe []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
GamePark klient 2.lnk - D:\deda\GamePark2\gpcl.exe
GameParkKlient.lnk - C:\Program Files\GamePark.cz Klient\gpcl.exe

C:\Documents and Settings\Knejfl\Nabídka Start\Programy\Po spuštění
Xfire.lnk - D:\Filmy\xfire\Xfire.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=D:\Programy\Office\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wxpdrivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\wxpdrivers]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
"EnableSecureUIAPaths"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0x91000000
"NoDriveAutoRun"=4294967295

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoResolveSearch"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Programy\uTorrent\utorrent.exe"="D:\Programy\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"D:\Filmy\airbone\uTorrent.exe"="D:\Filmy\airbone\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe"
"D:\Filmy\programy by deda\trilian\Trillian\trillian.exe"="D:\Filmy\programy by deda\trilian\Trillian\trillian.exe:*:Enabled:Trillian"
"D:\Filmy\vse\Call of Duty 2\CoD2MP_s.exe"="D:\Filmy\vse\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"D:\Filmy\vse\airbone\uTorrent.exe"="D:\Filmy\vse\airbone\uTorrent.exe:*:Enabled:µTorrent"
"D:\Filmy\programy by deda\hlsw\HLSW\hlsw.exe"="D:\Filmy\programy by deda\hlsw\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"D:\Filmy\EslWire\wire.exe"="D:\Filmy\EslWire\wire.exe:*:Enabled:ESL Wire Client"
"D:\Steam.exe"="D:\Steam.exe:*:Enabled:Steam Client"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"D:\combat arms client\Combat Arms EU\CombatArms.exe"="D:\combat arms client\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe"
"D:\combat arms client\Combat Arms EU\Engine.exe"="D:\combat arms client\Combat Arms EU\Engine.exe:*Enabled:Engine.exe"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\WINDOWS\services32.exe"="C:\WINDOWS\services32.exe:*:Enabled:C:\WINDOWS\services32.exe"
"C:\WINDOWS\update.1\svchost.exe"="C:\WINDOWS\update.1\svchost.exe:*:Enabled:C:\WINDOWS\update.1\svchost.exe"
"C:\WINDOWS\update.tray-8-0\svchost.exe"="C:\WINDOWS\update.tray-8-0\svchost.exe:*:Enabled:C:\WINDOWS\update.tray-8-0\svchost.exe"
"C:\WINDOWS\update.2\svchost.exe"="C:\WINDOWS\update.2\svchost.exe:*:Enabled:C:\WINDOWS\update.2\svchost.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Filmy\ICQ7.1\ICQ.exe"="D:\Filmy\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1"
"D:\Filmy\ICQ7.1\aolload.exe"="D:\Filmy\ICQ7.1\aolload.exe:*:Enabled:aolload.exe"
"D:\combat arms client\Combat Arms EU\CombatArms.exe"="D:\combat arms client\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe"
"D:\combat arms client\Combat Arms EU\Engine.exe"="D:\combat arms client\Combat Arms EU\Engine.exe:*Enabled:Engine.exe"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll
"VIDC.XFR1"=xfcodec.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"VIDC.FMVC"=fmcodec.dll
"MSVideo8"=VfWWDM32.dll
"VIDC.WMV3"=wmv9vcm.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.dvacm"=C:\PROGRA~1\COMMON~1\ULEADS~1\Vio\Dvacm.acm
"msacm.MPEGacm"=C:\PROGRA~1\COMMON~1\ULEADS~1\MPEG\MPEGacm.acm
"msacm.ulmp3acm"=C:\PROGRA~1\COMMON~1\ULEADS~1\MPEG\ulmp3acm.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv

======List of files/folders created in the last 1 month======

2011-11-07 11:32:56 ----DC---- C:\Program Files\trend micro
2011-11-07 11:32:56 ----D---- C:\rsit
2011-10-30 18:55:59 ----DC---- C:\Program Files\Common Files\Java
2011-10-30 18:55:46 ----AC---- C:\WINDOWS\system32\javaws.exe
2011-10-30 18:55:46 ----AC---- C:\WINDOWS\system32\javaw.exe
2011-10-30 18:55:46 ----AC---- C:\WINDOWS\system32\java.exe
2011-10-30 11:32:22 ----AC---- C:\WINDOWS\system32\ztvunrar36.dll
2011-10-30 11:32:22 ----AC---- C:\WINDOWS\system32\ztvunace26.dll
2011-10-30 11:32:22 ----AC---- C:\WINDOWS\system32\ztvcabinet.dll
2011-10-30 11:32:22 ----AC---- C:\WINDOWS\system32\unacev2.dll
2011-10-30 11:32:21 ----AC---- C:\WINDOWS\system32\UNRAR3.dll
2011-10-30 11:32:18 ----D---- C:\Documents and Settings\Knejfl\Data aplikací\Simply Super Software
2011-10-30 11:32:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\Simply Super Software
2011-10-29 14:23:19 ----DC---- C:\WINDOWS\Performance
2011-10-29 14:21:40 ----DC---- C:\Program Files\Microsoft Windows 7 Upgrade Advisor
2011-10-29 12:25:21 ----HD---- C:\Documents and Settings\All Users\Data aplikací\Common Files
2011-10-29 12:25:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\MFAData
2011-10-28 23:45:07 ----D---- C:\Documents and Settings\Knejfl\Data aplikací\.minecraft
2011-10-28 13:22:33 ----AC---- C:\WINDOWS\winlog-ids.txt
2011-10-28 13:22:33 ----AC---- C:\WINDOWS\winlog-dirs.txt
2011-10-28 10:52:22 ----D---- C:\Documents and Settings\Knejfl\Data aplikací\Opera
2011-10-27 12:21:41 ----DC---- C:\WINDOWS\ufa
2011-10-27 12:21:41 ----DC---- C:\WINDOWS\rpcminer
2011-10-27 12:21:41 ----DC---- C:\WINDOWS\phoenix
2011-10-27 12:19:47 ----AC---- C:\WINDOWS\l1rezerv.exe
2011-10-27 12:18:58 ----AC---- C:\WINDOWS\btc_client_iplist.txt
2011-10-27 12:18:11 ----HDC---- C:\WINDOWS\update.7.1
2011-10-27 12:17:31 ----HDC---- C:\WINDOWS\update.5.0
2011-10-27 12:15:58 ----HDC---- C:\WINDOWS\update.8.1
2011-10-27 12:15:03 ----AC---- C:\WINDOWS\iecheck_iplist.txt
2011-10-27 12:14:36 ----HDC---- C:\WINDOWS\update.2
2011-10-27 12:09:52 ----AC---- C:\WINDOWS\unrar.exe
2011-10-27 12:08:49 ----AC---- C:\WINDOWS\sysdriver32_.exe
2011-10-27 12:08:48 ----AC---- C:\WINDOWS\iplist.txt
2011-10-27 12:07:55 ----AC---- C:\WINDOWS\front_ip_list.txt
2011-10-27 12:07:34 ----DC---- C:\WINDOWS\av_ico
2011-10-27 12:05:47 ----HDC---- C:\WINDOWS\update.1
2011-10-27 12:05:45 ----HDC---- C:\WINDOWS\update.tray-8-0-lnk
2011-10-27 12:05:45 ----HDC---- C:\WINDOWS\update.tray-8-0
2011-10-27 11:55:11 ----AC---- C:\WINDOWS\services32.exe
2011-10-13 18:44:56 ----D---- C:\Documents and Settings\Knejfl\Data aplikací\Ubisoft
2011-10-12 16:11:25 ----DC---- C:\Program Files\Ubisoft

======List of files/folders modified in the last 1 month======

2011-11-07 11:33:05 ----DC---- C:\WINDOWS\Prefetch
2011-11-07 11:33:03 ----DC---- C:\Documents and Settings\Knejfl\Data aplikací\uTorrent
2011-11-07 11:32:56 ----DC---- C:\Program Files
2011-11-07 06:19:15 ----AC---- C:\WINDOWS\NeroDigital.ini
2011-11-07 00:01:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-11-06 21:14:44 ----DC---- C:\WINDOWS\Temp
2011-11-06 18:45:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\PMB Files
2011-11-06 15:21:53 ----DC---- C:\WINDOWS
2011-11-05 02:03:36 ----SHDC---- C:\WINDOWS\Installer
2011-11-05 02:03:36 ----HD---- C:\Config.Msi
2011-11-05 01:21:33 ----DC---- C:\Program Files\Common Files\Akamai
2011-11-02 17:52:50 ----DC---- C:\WINDOWS\system32\CatRoot2
2011-10-30 21:45:19 ----A---- C:\boot.ini
2011-10-30 18:58:29 ----ADC---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2011-10-30 18:55:59 ----DC---- C:\Program Files\Common Files
2011-10-30 18:55:46 ----DC---- C:\WINDOWS\system32
2011-10-30 18:55:43 ----DC---- C:\Program Files\Java
2011-10-30 18:55:27 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-10-29 12:49:16 ----DC---- C:\WINDOWS\system32\drivers
2011-10-28 23:32:57 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-10-28 18:24:05 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2011-10-28 12:23:37 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2011-10-27 13:10:12 ----DC---- C:\Temp
2011-10-27 12:16:53 ----DC---- C:\WINDOWS\system32\Restore
2011-10-27 12:15:56 ----SHD---- C:\System Volume Information
2011-10-27 12:15:01 ----DC---- C:\WINDOWS\system32\drivers\etc
2011-10-25 18:26:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\TrackMania
2011-10-23 07:30:50 ----HDC---- C:\Program Files\InstallShield Installation Information
2011-10-22 17:33:48 ----DC---- C:\WINDOWS\system32\DirectX
2011-10-22 17:33:45 ----RSDC---- C:\WINDOWS\assembly
2011-10-13 20:06:31 ----HDC---- C:\WINDOWS\inf
2011-10-13 20:03:20 ----DC---- C:\WINDOWS\WinSxS
2011-10-10 18:49:31 ----DC---- C:\Documents and Settings\Knejfl\Data aplikací\TS3Client

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 CLBStor;CyberLink InstantBurn UDF Reader Help Driver; C:\WINDOWS\system32\drivers\CLBStor.sys [2006-07-31 10368]
R0 hotcore3;hotcore3; C:\WINDOWS\system32\drivers\hotcore3.sys [2007-11-06 39472]
R0 nvatabus;nvatabus; C:\WINDOWS\system32\DRIVERS\nvatabus.sys [2004-12-07 87936]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2004-08-03 61056]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\WINDOWS\System32\drivers\sfsync02.sys [2005-08-10 19968]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-11-03 63488]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2008-09-15 717296]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43008]
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-03-04 79424]
R1 Pivot;Pivot; C:\WINDOWS\System32\drivers\pivot.sys [2009-03-03 17465]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-03-01 28352]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2008-06-20 225920]
R1 Uim_IM;UIM Drive Backup Image Plugin; C:\WINDOWS\System32\Drivers\Uim_IM.sys [2007-11-06 131672]
R1 UimBus;Universal Image Mounter Controller; C:\WINDOWS\system32\DRIVERS\UimBus.sys [2007-11-06 32080]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2010-08-05 281760]
R2 CLBUDFR;CyberLink UDF Filesystem; C:\WINDOWS\system32\drivers\CLBUDFR.sys [2006-07-31 180352]
R2 ESLWireAC;ESLWireAC; \??\C:\WINDOWS\system32\drivers\ESLWireACD.sys []
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2004-08-03 87424]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2010-08-05 25888]
R2 npf;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2009-11-16 50704]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2004-08-03 88448]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-25 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-25 55936]
R2 TBPanel;TBPanel; C:\WINDOWS\system32\drivers\TBPanel.sys [2007-03-16 12256]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-12-01 2300928]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-17 60800]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2011-03-26 25280]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 ipgd;ASUS NX1101 Gigabit Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\ipgdnd51.sys [2005-01-28 33536]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-17 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-10-22 9623680]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2004-11-24 33408]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2004-11-24 12928]
R3 PdiPorts;Portrait Displays low level device driver; C:\WINDOWS\System32\Drivers\PdiPorts.sys [2009-12-17 17136]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2004-08-17 12416]
S1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
S3 61883;61883 Unit Device; C:\WINDOWS\system32\DRIVERS\61883.sys [2004-08-03 48128]
S3 aq6mf1q8;aq6mf1q8; C:\WINDOWS\system32\drivers\aq6mf1q8.sys []
S3 Avc;AVC Device; C:\WINDOWS\system32\DRIVERS\avc.sys [2004-08-03 38912]
S3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
S3 BioNT_BS;BioNT_BS; \??\D:\Filmy\partition magic\bluescrn\BioNT_bs.sys []
S3 Cardex;Cardex; \??\C:\WINDOWS\system32\drivers\TBPANEL.SYS []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 EagleXNt;EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 GarenaPEngine;GarenaPEngine; \??\C:\DOCUME~1\Knejfl\LOCALS~1\Temp\KHX151.tmp []
S3 GGSAFERDriver;GGSAFER Driver; \??\D:\Filmy\Games\garena\safedrv.sys []
S3 GMSIPCI;GMSIPCI; \??\F:\INSTALL\GMSIPCI.SYS []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2004-06-21 51088]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2004-06-21 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2004-06-21 21744]
S3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2004-08-03 51328]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 nenum13E;nenum13E; \??\C:\DOCUME~1\Knejfl\LOCALS~1\Temp\nenum13E.sys []
S3 pivotmou;Pivot Mouse/Pointers Filter Driver; \??\C:\WINDOWS\system32\drivers\pivotmou.sys []
S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-04 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R2 Akamai;Akamai NetSession Interface; C:\WINDOWS\System32\svchost.exe [2004-08-17 14336]
R2 ddservice;ddservice; C:\WINDOWS\update.7.1\svchostdriver.exe [2011-10-27 376832]
R2 DTSRVC;Portrait Displays Display Tune Service; C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe [2010-01-28 80496]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-10-03 153376]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-10-16 156776]
R2 NwSapAgent;Agent SAP; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R2 PdiService;Portrait Displays SDK Service; C:\Program Files\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2009-12-17 109168]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-06-23 75136]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2011-09-22 214520]
R2 srvbtcclient;srvbtcclient; C:\WINDOWS\update.5.0\svchost.exe [2011-10-28 344576]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2005-01-31 49152]
R2 WireHelpSvc;WireHelpSvc; C:\Program Files\Common Files\WireHelpSvc.exe [2011-08-08 265120]
S2 AntiVirService;Avira AntiVir Personal – Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe []
S2 AntiVirScheduler;Avira AntiVir Personal – Free Antivirus Scheduler; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe []
S2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe []
S2 srviecheck;srviecheck; C:\WINDOWS\update.2\svchost.exe [2011-10-30 1942528]
S2 srvsysdriver32;srvsysdriver32; C:\WINDOWS\sysdriver32.exe srv []
S2 wxpdrivers;wxpdrivers; C:\WINDOWS\update.1\svchost.exe [2011-10-27 1198080]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2008-09-06 72704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; D:\Programy\Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 MSSQL$SONY_MEDIAMGR;MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe -sSONY_MEDIAMGR []
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2011-02-27 4010312]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-03-18 65536]
S3 SQLAgent$SONY_MEDIAMGR;SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE -i SONY_MEDIAMGR []
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 07 lis 2011 11:51

Zdravim, pekne dopoledne preji a vitam Vas u nas na foru

:arrow:Odinstalujte Spybot - Search & Destroy - program ma uz nejlepsi leta davno za sebou a posledni cca 3 roky neni schopen celit aktualnim hrozbam - po ukonceni leceni tam dame nejakou lepsi nahradu

Odinstalujte tez Advanced SystemCare 3 - jsou to cinske smejdy s nulovym ucinkem na PC - po ukonceni leceni tam dame neco lepsiho

Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

Ukoncete vsechny programy
Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
Zvolte moznost 2 a potvrte enterem
Utilita provede svou cinnost a da log - ten sem vlozte
Nyni znovu, ale zvolte moznost 3 a pote jeste 4 - logy opet vlozte

Dedecek · #3 Příspěvek od **Dedecek** » 07 lis 2011 12:06

RogueKiller V6.1.7 [11/05/2011] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows XP (5.1.2600 Service Pack 2) 32 bits version
Started in : Normal mode
User: Knejfl [Admin rights]
Mode: Remove -- Date : 11/07/2011 12:05:42

¤¤¤ Bad processes: 9 ¤¤¤
[SUSP PATH] l1rezerv.exe -- C:\WINDOWS\l1rezerv.exe -> KILLED [TermProc]
[HJ NAME] svchost.exe -- C:\WINDOWS\update.5.0\svchost.exe -> KILLED [TermProc]
[SVCHOST] svchost.exe -- C:\WINDOWS\update.2\svchost.exe -> KILLED [TermProc]
[SUSP PATH] netsession_win.exe -- C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Akamai\netsession_win.exe -> KILLED [TermProc]
[SUSP PATH] netsession_win.exe -- C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Akamai\netsession_win.exe -> KILLED [TermProc]
[SERVICE] srvbtcclient -- C:\WINDOWS\update.5.0\svchost.exe srv -> STOPPED
[SERVICE] srviecheck -- C:\WINDOWS\update.2\svchost.exe srv -> STOPPED
[SERVICE] srvsysdriver32 -- C:\WINDOWS\sysdriver32.exe srv -> STOPPED
[SERVICE] wxpdrivers -- C:\WINDOWS\update.1\svchost.exe srv -> STOPPED

¤¤¤ Registry Entries: 30 ¤¤¤
[SUSP PATH] HKCU\[...]\Run : Akamai NetSession Interface (C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Akamai\netsession_win.exe) -> DELETED
[SUSP PATH] HKLM\[...]\Run : wxpdrv (C:\WINDOWS\services32.exe) -> DELETED
[SUSP PATH] HKLM\[...]\Run : 6112745.exe ("C:\DOCUME~1\Knejfl\LOCALS~1\Temp\6112745.exe") -> DELETED
[SUSP PATH] HKLM\[...]\Run : sysdriver32_.exe ("C:\WINDOWS\sysdriver32_.exe" rezerv) -> DELETED
[SUSP PATH] HKLM\[...]\Run : 6219094.exe ("C:\WINDOWS\TEMP\6219094.exe") -> DELETED
[SUSP PATH] HKLM\[...]\Run : 9744444.exe ("C:\WINDOWS\TEMP\9744444.exe") -> DELETED
[SUSP PATH] HKLM\[...]\Run : l1rezerv.exe ("C:\WINDOWS\l1rezerv.exe") -> DELETED
[SUSP PATH] HKLM\[...]\Run : 7736673.exe ("C:\DOCUME~1\Knejfl\LOCALS~1\Temp\7736673.exe") -> DELETED
[HJ NAME] HKLM\[...]\Run : tray_ico0 (C:\WINDOWS\update.tray-8-0\svchost.exe) -> DELETED
[BLACKLIST] HKLM\[...]\services : srvbtcclient (C:\WINDOWS\update.5.0\svchost.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\services : srviecheck (C:\WINDOWS\update.2\svchost.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\services : srvsysdriver32 (C:\WINDOWS\sysdriver32.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\services : wxpdrivers (wxpdrivers.sys) -> DELETED
[BLACKLIST] HKLM\[...]\services : srvbtcclient (C:\WINDOWS\update.5.0\svchost.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\services : srviecheck (C:\WINDOWS\update.2\svchost.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\services : srvsysdriver32 (C:\WINDOWS\sysdriver32.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\services : wxpdrivers (C:\WINDOWS\update.1\svchost.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\services : srvbtcclient (C:\WINDOWS\update.5.0\svchost.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\services : srviecheck (C:\WINDOWS\update.2\svchost.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\services : srvsysdriver32 (C:\WINDOWS\sysdriver32.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\services : wxpdrivers (C:\WINDOWS\update.1\svchost.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\Root : LEGACY_SRVBTCCLIENT () -> DELETED
[BLACKLIST] HKLM\[...]\Root : LEGACY_SRVIECHECK () -> DELETED
[BLACKLIST] HKLM\[...]\Root : LEGACY_SRVSYSDRIVER32 () -> DELETED
[BLACKLIST] HKLM\[...]\Root : LEGACY_WXPDRIVERS () -> DELETED
[HJ] HKLM\[...]\System : EnableLUA (0) -> REPLACED ()
[HJ] HKLM\[...]\Security Center : AntiVirusDisableNotify (1) -> REPLACED ()
[HJ] HKLM\[...]\Security Center : FirewallDisableNotify (1) -> REPLACED ()
[HJ] HKLM\[...]\Security Center : UpdatesDisableNotify (1) -> REPLACED ()
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED ()

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
127.0.0.1 localhost
127.0.0.1 facebook.com
127.0.0.1 www.facebook.com
127.0.0.1 af-za.facebook.com
127.0.0.1 az-az.facebook.com
127.0.0.1 id-id.facebook.com
127.0.0.1 ms-my.facebook.com
127.0.0.1 bs-ba.facebook.com
127.0.0.1 ca-es.facebook.com
127.0.0.1 cs-cz.facebook.com
127.0.0.1 cy-gb.facebook.com
127.0.0.1 da-dk.facebook.com
127.0.0.1 de-de.facebook.com
127.0.0.1 et-ee.facebook.com
127.0.0.1 en-gb.facebook.com
127.0.0.1 es-la.facebook.com
127.0.0.1 eo-eo.facebook.com
127.0.0.1 eu-es.facebook.com
127.0.0.1 tl-ph.facebook.com
127.0.0.1 fo-fo.facebook.com
[...]

Finished : << RKreport[1].txt >>
RKreport[1].txt

RogueKiller V6.1.7 [11/05/2011] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows XP (5.1.2600 Service Pack 2) 32 bits version
Started in : Normal mode
User: Knejfl [Admin rights]
Mode: HOSTSFix -- Date : 11/07/2011 12:06:43

¤¤¤ Bad processes: 4 ¤¤¤
[SERVICE] srvbtcclient -- C:\WINDOWS\update.5.0\svchost.exe srv -> STOPPED
[SERVICE] srviecheck -- C:\WINDOWS\update.2\svchost.exe srv -> STOPPED
[SERVICE] srvsysdriver32 -- C:\WINDOWS\sysdriver32.exe srv -> STOPPED
[SERVICE] wxpdrivers -- C:\WINDOWS\update.1\svchost.exe srv -> STOPPED

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
127.0.0.1 localhost
127.0.0.1 facebook.com
127.0.0.1 www.facebook.com
127.0.0.1 af-za.facebook.com
127.0.0.1 az-az.facebook.com
127.0.0.1 id-id.facebook.com
127.0.0.1 ms-my.facebook.com
127.0.0.1 bs-ba.facebook.com
127.0.0.1 ca-es.facebook.com
127.0.0.1 cs-cz.facebook.com
127.0.0.1 cy-gb.facebook.com
127.0.0.1 da-dk.facebook.com
127.0.0.1 de-de.facebook.com
127.0.0.1 et-ee.facebook.com
127.0.0.1 en-gb.facebook.com
127.0.0.1 es-la.facebook.com
127.0.0.1 eo-eo.facebook.com
127.0.0.1 eu-es.facebook.com
127.0.0.1 tl-ph.facebook.com
127.0.0.1 fo-fo.facebook.com
[...]

¤¤¤ Resetted HOSTS: ¤¤¤
127.0.0.1 localhost

Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

RogueKiller V6.1.7 [11/05/2011] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows XP (5.1.2600 Service Pack 2) 32 bits version
Started in : Normal mode
User: Knejfl [Admin rights]
Mode: ProxyFix -- Date : 11/07/2011 12:06:52

¤¤¤ Bad processes: 4 ¤¤¤
[SERVICE] srvbtcclient -- C:\WINDOWS\update.5.0\svchost.exe srv -> STOPPED
[SERVICE] srviecheck -- C:\WINDOWS\update.2\svchost.exe srv -> STOPPED
[SERVICE] srvsysdriver32 -- C:\WINDOWS\sysdriver32.exe srv -> STOPPED
[SERVICE] wxpdrivers -- C:\WINDOWS\update.1\svchost.exe srv -> STOPPED

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ Registry Entries: 0 ¤¤¤

Finished : << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt

#4 Příspěvek od **vyosek** » 07 lis 2011 12:08

Super, jdeme dale

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK

Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Pokud mate Win XP spustte pod uctem Spravce\Administratora
Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

Dedecek · #5 Příspěvek od **Dedecek** » 07 lis 2011 12:38

ComboFix 11-11-07.02 - Knejfl 07.11.2011 12:22:58.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.1023.620 [GMT 1:00]
Spuštěný z: c:\documents and settings\Knejfl\Plocha\ComboFix.exe
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Knejfl\WINDOWS
c:\program files\Common Files\WireHelpSvc.exe
c:\windows\autorun.inf
c:\windows\av_ico
c:\windows\av_ico\ico_avira_start.ico
c:\windows\btc_client_iplist.txt
c:\windows\d.ini
c:\windows\front_ip_list.txt
c:\windows\geoiplist
c:\windows\geoiplist.rar
c:\windows\iecheck_iplist.txt
c:\windows\info1
c:\windows\iplist.txt
c:\windows\iun6002.exe
c:\windows\l1rezerv.exe
c:\windows\loader2.exe_ok
c:\windows\phoenix
c:\windows\phoenix.rar
c:\windows\phoenix\kernels\phatk\__init__.py
c:\windows\phoenix\kernels\phatk\__init__.pyc
c:\windows\phoenix\kernels\phatk\8009f06348d8f0de907ee554689a6b75.elf
c:\windows\phoenix\kernels\phatk\BFIPatcher.py
c:\windows\phoenix\kernels\phatk\BFIPatcher.pyc
c:\windows\phoenix\kernels\phatk\kernel.cl
c:\windows\phoenix\kernels\poclbm\__init__.py
c:\windows\phoenix\kernels\poclbm\__init__.pyc
c:\windows\phoenix\kernels\poclbm\25718de2380b67e81ffd84fe52a1fe0c.elf
c:\windows\phoenix\kernels\poclbm\98060bb7f4ea561eee85156965e7b833.elf
c:\windows\phoenix\kernels\poclbm\BFIPatcher.py
c:\windows\phoenix\kernels\poclbm\BFIPatcher.pyc
c:\windows\phoenix\kernels\poclbm\kernel.cl
c:\windows\phoenix\phoenix.exe
c:\windows\rpcminer
c:\windows\rpcminer.rar
c:\windows\rpcminer\bitcoinminercuda_10.cubin
c:\windows\rpcminer\bitcoinminercuda_11.cubin
c:\windows\rpcminer\bitcoinminercuda_20.cubin
c:\windows\rpcminer\bitcoinmineropencl.cl
c:\windows\rpcminer\cudart32_32_16.dll
c:\windows\rpcminer\curllib.dll
c:\windows\rpcminer\libeay32.dll
c:\windows\rpcminer\libsasl.dll
c:\windows\rpcminer\openldap.dll
c:\windows\rpcminer\rpcminer-4way.exe
c:\windows\rpcminer\rpcminer-cpu.exe
c:\windows\rpcminer\rpcminer-cuda.exe
c:\windows\rpcminer\rpcminer-opencl.exe
c:\windows\rpcminer\ssleay32.dll
c:\windows\services32.exe
c:\windows\sysdriver32_.exe
c:\windows\system32\drivers\etc\HSTS~1
c:\windows\system32\skinboxer43.dll
c:\windows\ufa.rar
c:\windows\update.1
c:\windows\update.1\svchost.exe
c:\windows\update.1\svchost.exe.vir
c:\windows\update.2
c:\windows\update.2\svchost.exe
c:\windows\update.5.0
c:\windows\update.5.0\1601.exe
c:\windows\update.5.0\svchost.exe
c:\windows\update.7.1
c:\windows\update.7.1\svchostdriver.exe
c:\windows\update.tray-8-0-lnk
c:\windows\update.tray-8-0-lnk\svchost.exe
c:\windows\update.tray-8-0
c:\windows\update.tray-8-0\svchost.exe
c:\windows\winlog-dirs.txt
c:\windows\winlog-ids.txt
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_DDSERVICE
-------\Legacy_SRVBTCCLIENT
-------\Legacy_SRVIECHECK
-------\Legacy_SRVSYSDRIVER32
-------\Legacy_WXPDRIVERS
-------\Service_ddservice
-------\Service_srvbtcclient
-------\Service_srviecheck
-------\Service_srvsysdriver32
-------\Service_wxpdrivers
-------\Legacy_WireHelpSvc
-------\Service_WireHelpSvc
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-10-07 do 2011-11-07 )))))))))))))))))))))))))))))))
.
.
2011-11-07 11:04 . 2011-11-07 11:06 111872 -c--a-w- c:\windows\system32\drivers\TrueSight.sys
2011-11-07 10:32 . 2011-11-07 10:33 -------- d-----w- C:\rsit
2011-11-07 10:32 . 2011-11-07 10:33 -------- dc----w- c:\program files\trend micro
2011-11-03 00:28 . 2011-11-05 01:03 -------- dc----w- c:\documents and settings\Knejfl\Local Settings\Data aplikací\Akamai
2011-10-30 17:55 . 2011-10-30 17:55 -------- dc----w- c:\program files\Common Files\Java
2011-10-30 10:32 . 2006-06-19 12:01 69632 -c--a-w- c:\windows\system32\ztvcabinet.dll
2011-10-30 10:32 . 2006-05-25 14:52 162304 -c--a-w- c:\windows\system32\ztvunrar36.dll
2011-10-30 10:32 . 2005-08-26 00:50 77312 -c--a-w- c:\windows\system32\ztvunace26.dll
2011-10-30 10:32 . 2002-03-06 00:00 75264 -c--a-w- c:\windows\system32\unacev2.dll
2011-10-30 10:32 . 2003-02-02 19:06 153088 -c--a-w- c:\windows\system32\UNRAR3.dll
2011-10-30 10:32 . 2011-10-30 10:32 -------- d-----w- c:\documents and settings\Knejfl\Data aplikací\Simply Super Software
2011-10-30 10:32 . 2011-10-30 10:32 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Simply Super Software
2011-10-29 13:23 . 2011-10-29 13:23 -------- dc----w- c:\windows\Performance
2011-10-29 13:23 . 2011-10-29 13:23 -------- dc----w- c:\documents and settings\Knejfl\Local Settings\Data aplikací\Microsoft Corporation
2011-10-29 13:21 . 2011-10-29 13:21 -------- dc----w- c:\program files\Microsoft Windows 7 Upgrade Advisor
2011-10-29 11:25 . 2011-10-29 11:25 -------- d--h--w- c:\documents and settings\All Users\Data aplikací\Common Files
2011-10-29 11:25 . 2011-10-30 02:38 -------- d-----w- c:\documents and settings\All Users\Data aplikací\MFAData
2011-10-28 22:45 . 2011-10-28 22:45 -------- d-----w- c:\documents and settings\Knejfl\Data aplikací\.minecraft
2011-10-27 11:21 . 2011-10-27 11:21 -------- dc----w- c:\windows\ufa
2011-10-27 11:15 . 2011-10-27 11:15 -------- dc-h--w- c:\windows\update.8.1
2011-10-27 11:09 . 2011-10-27 11:23 246272 -c--a-w- c:\windows\unrar.exe
2011-10-27 11:07 . 2011-10-27 11:07 -------- d-----w- c:\documents and settings\LocalService\Nabídka Start
2011-10-13 17:44 . 2011-10-13 17:48 -------- d-----w- c:\documents and settings\Knejfl\Data aplikací\Ubisoft
2011-10-12 15:11 . 2011-10-12 15:11 -------- dc----w- c:\program files\Ubisoft
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-06 20:15 . 2011-05-16 12:19 414368 -c--a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-21 21:34 . 2008-09-07 20:16 60416 -c--a-w- c:\windows\ALCFDRTM.VER
2011-10-03 04:06 . 2010-05-27 17:47 472808 -c--a-w- c:\windows\system32\deployJava1.dll
2011-10-03 01:37 . 2011-07-19 20:45 73728 -c--a-w- c:\windows\system32\javacpl.cpl
2011-09-22 19:43 . 2009-03-15 11:18 137464 -c--a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-09-22 19:42 . 2009-05-19 16:56 214520 -c--a-w- c:\windows\system32\PnkBstrB.xtr
2011-09-22 19:42 . 2009-03-15 11:18 214520 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-08-26 22:21 . 2011-08-26 22:21 42392 -c--a-w- c:\windows\system32\xfcodec.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{5e5ab302-7f65-44cd-8211-c1d4caaccea3}"= "c:\program files\XfireXO\prxtbXfi2.dll" [2011-01-17 175912]
"{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}"= "c:\program files\Free_Lunch_Design\prxtbFre2.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
.
[HKEY_CLASSES_ROOT\clsid\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-10-18 10:26 3908192 -c--a-w- c:\program files\ConduitEngine\ConduitEngin0.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}]
2011-01-17 14:54 175912 -c--a-w- c:\program files\Free_Lunch_Design\prxtbFre2.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
2011-01-17 14:54 175912 -c--a-w- c:\program files\XfireXO\prxtbXfi2.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{5e5ab302-7f65-44cd-8211-c1d4caaccea3}"= "c:\program files\XfireXO\prxtbXfi2.dll" [2011-01-17 175912]
"{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}"= "c:\program files\Free_Lunch_Design\prxtbFre2.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
.
[HKEY_CLASSES_ROOT\clsid\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3}"= "c:\program files\XfireXO\prxtbXfi2.dll" [2011-01-17 175912]
"{57CC715D-37CA-44E4-9EC2-8C2CBDDB25EC}"= "c:\program files\Free_Lunch_Design\prxtbFre2.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
.
[HKEY_CLASSES_ROOT\clsid\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ESL Wire"="d:\filmy\EslWire\wire.exe" [2011-09-20 1981952]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-17 15360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-12-01 77824]
"HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2004-05-12 241664]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-06-26 155648]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-10-16 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-10-16 13851752]
"UVS10 Preload"="d:\program files\uvPL.exe" [2006-03-06 36864]
"TrojanScanner"="d:\deda\Trojan Remover\Trjscan.exe" [2011-10-30 1233856]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"WIAWizardMenu"="c:\windows\system32\sti_ci.dll" [2004-08-17 136704]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]
.
c:\documents and settings\Knejfl\Nabídka Start\Programy\Po spuštění\
Xfire.lnk - d:\filmy\xfire\Xfire.exe [2011-8-26 3510680]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
GamePark klient 2.lnk - d:\deda\GamePark2\gpcl.exe [2011-8-7 409088]
GameParkKlient.lnk - c:\program files\GamePark.cz Klient\gpcl.exe [2011-5-22 399872]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableSecureUIAPaths"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\C\0autocheck autochk *\0d:\filmy\PARTIT~1\bluescrn\bluescrn.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
2011-03-18 19:38 500208 -c----w- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2008-07-24 15:02 490952 ----a-w- c:\program files\DAEMON Tools Lite\daemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
2008-07-22 11:34 2772992 -c--a-w- c:\program files\Electronic Arts\EADM\Core.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ESL Wire]
2011-09-20 09:00 1981952 ----a-w- d:\filmy\EslWire\wire.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gainward]
2007-04-23 11:18 2173744 -c--a-w- c:\windows\TBPanel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2006-10-26 22:47 31016 ----a-w- d:\programy\Office\Office12\GrooveMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2004-02-12 11:38 49152 -c--a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2001-07-09 09:50 155648 -c----w- c:\windows\system32\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-06-26 15:13 155648 -c--a-w- c:\program files\QuickTime\qttask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2011-06-09 12:06 254696 -c--a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB Storage Toolbox]
2005-09-14 18:44 65536 -c----w- c:\windows\UMStor\Res.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000001
"DisableThumbnailCache"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"d:\\Programy\\uTorrent\\utorrent.exe"=
"d:\\Filmy\\airbone\\uTorrent.exe"=
"c:\\Program Files\\BitComet\\BitComet.exe"=
"d:\\Filmy\\programy by deda\\trilian\\Trillian\\trillian.exe"=
"d:\\Filmy\\vse\\Call of Duty 2\\CoD2MP_s.exe"=
"d:\\Filmy\\vse\\airbone\\uTorrent.exe"=
"d:\\Filmy\\programy by deda\\hlsw\\HLSW\\hlsw.exe"=
"d:\\Filmy\\EslWire\\wire.exe"=
"d:\\Steam.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"d:\combat arms client\Combat Arms EU\CombatArms.exe"= d:\combat arms client\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe
"d:\combat arms client\Combat Arms EU\Engine.exe"= d:\combat arms client\Combat Arms EU\Engine.exe:*Enabled:Engine.exe
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"8844:TCP"= 8844:TCP:BitComet 8844 TCP
"8844:UDP"= 8844:UDP:BitComet 8844 UDP
"8394:TCP"= 8394:TCP:League of Legends Launcher
"8394:UDP"= 8394:UDP:League of Legends Launcher
"8375:TCP"= 8375:TCP:League of Legends Launcher
"8375:UDP"= 8375:UDP:League of Legends Launcher
"8376:TCP"= 8376:TCP:League of Legends Launcher
"8376:UDP"= 8376:UDP:League of Legends Launcher
"6928:TCP"= 6928:TCP:League of Legends Launcher
"6928:UDP"= 6928:UDP:League of Legends Launcher
"6949:TCP"= 6949:TCP:League of Legends Launcher
"6949:UDP"= 6949:UDP:League of Legends Launcher
"6988:TCP"= 6988:TCP:League of Legends Launcher
"6988:UDP"= 6988:UDP:League of Legends Launcher
"6893:TCP"= 6893:TCP:League of Legends Launcher
"6893:UDP"= 6893:UDP:League of Legends Launcher
"6982:TCP"= 6982:TCP:League of Legends Launcher
"6982:UDP"= 6982:UDP:League of Legends Launcher
"58646:TCP"= 58646:TCP:Pando Media Booster
"58646:UDP"= 58646:UDP:Pando Media Booster
"57130:TCP"= 57130:TCP:Pando Media Booster
"57130:UDP"= 57130:UDP:Pando Media Booster
"58024:TCP"= 58024:TCP:Pando Media Booster
"58024:UDP"= 58024:UDP:Pando Media Booster
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)
.
R0 CLBStor;CyberLink InstantBurn UDF Reader Help Driver;c:\windows\system32\drivers\CLBStor.sys [30.3.2011 15:18 10368]
R0 hotcore3;hotcore3;c:\windows\system32\drivers\hotcore3.sys [8.12.2010 17:30 39472]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [15.9.2008 8:14 717296]
R2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe -k Akamai [17.8.2004 14:49 14336]
R2 CLBUDFR;CyberLink UDF Filesystem;c:\windows\system32\drivers\CLBUDFR.sys [30.3.2011 15:18 180352]
R2 ESLWireAC;ESLWireAC;c:\windows\system32\drivers\ESLWireACD.sys [19.11.2010 20:42 862496]
R2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [16.11.2009 17:33 50704]
R2 PdiService;Portrait Displays SDK Service;c:\program files\Common Files\Portrait Displays\Drivers\pdisrvc.exe [24.12.2010 21:48 109168]
R3 ipgd;ASUS NX1101 Gigabit Ethernet Adapter Driver;c:\windows\system32\drivers\ipgdnd51.sys [9.9.2008 17:25 33536]
S2 AntiVirScheduler;Avira AntiVir Personal – Free Antivirus Scheduler;"c:\program files\Avira\AntiVir PersonalEdition Classic\sched.exe" --> c:\program files\Avira\AntiVir PersonalEdition Classic\sched.exe [?]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe --> c:\program files\ICQ6Toolbar\ICQ Service.exe [?]
S3 BioNT_BS;BioNT_BS;\??\d:\filmy\partition magic\bluescrn\BioNT_bs.sys --> d:\filmy\partition magic\bluescrn\BioNT_bs.sys [?]
S3 EagleXNt;EagleXNt;\??\c:\windows\system32\drivers\EagleXNt.sys --> c:\windows\system32\drivers\EagleXNt.sys [?]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\Knejfl\LOCALS~1\Temp\KHX151.tmp --> c:\docume~1\Knejfl\LOCALS~1\Temp\KHX151.tmp [?]
S3 GGSAFERDriver;GGSAFER Driver;\??\d:\filmy\Games\garena\safedrv.sys --> d:\filmy\Games\garena\safedrv.sys [?]
S3 nenum13E;nenum13E;\??\c:\docume~1\Knejfl\LOCALS~1\Temp\nenum13E.sys --> c:\docume~1\Knejfl\LOCALS~1\Temp\nenum13E.sys [?]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 TrueSight;TrueSight;c:\windows\system32\drivers\TrueSight.sys [7.11.2011 12:04 111872]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - BITS
*NewlyCreated* - IP6FW
*NewlyCreated* - WUAUSERV
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT1708250
uDefault_Search_URL = hxxp://search.qip.ru
uSearchAssistant = hxxp://search.qip.ru/ie
IE: Download all links using BitComet
IE: Download all videos using BitComet
IE: Download link using &BitComet
IE: E&xportovat do aplikace Microsoft Excel - d:\programy\Office\Office12\EXCEL.EXE/3000
IE: Stáhnout odkaz s použitím BitCometu - c:\program files\BitComet\BitComet.exe/AddLink.htm
IE: Stáhnout všechna videa s použitím BitCometu - c:\program files\BitComet\BitComet.exe/AddVideo.htm
IE: Stáhnout všechny odkazy s použitím BitCometu - c:\program files\BitComet\BitComet.exe/AddAllLink.htm
IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - d:\filmy\ICQ7.1\ICQ.exe
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2304157&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2304157&q=
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{EEE6C35D-6118-11DC-9C72-001320C79847} - (no file)
URLSearchHooks-{ee78981f-3768-4f82-9241-9aa5f3712651} - (no file)
BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
BHO-{ee78981f-3768-4f82-9241-9aa5f3712651} - (no file)
BHO-{EEE6C35C-6118-11DC-9C72-001320C79847} - (no file)
Toolbar-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
Toolbar-{ee78981f-3768-4f82-9241-9aa5f3712651} - (no file)
Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
WebBrowser-{EE78981F-3768-4F82-9241-9AA5F3712651} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKLM-Run-avgnt - c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
HKLM-Run-tray_ico - (no file)
HKLM-Run-tray_ico1 - (no file)
HKLM-Run-tray_ico2 - (no file)
HKLM-Run-tray_ico3 - (no file)
HKLM-Run-tray_ico4 - (no file)
MSConfigStartUp-Adobe Photo Downloader - c:\program files\foteky\3.0\Apps\apdproxy.exe
MSConfigStartUp-Advanced SystemCare 3 - d:\filmy\Advanced SystemCare 3\AWC.exe
MSConfigStartUp-avast! - c:\progra~1\ALWILS~1\Avast4\ashDisp.exe
MSConfigStartUp-Fraps - d:\filmy\FRAPS\FRAPS.EXE
MSConfigStartUp-QIP Internet Guardian - c:\documents and settings\Knejfl\Data aplikací\QipGuard\QipGuard.exe
MSConfigStartUp-Skype - c:\program files\Skype\Phone\Skype.exe
MSConfigStartUp-SpybotSD TeaTimer - d:\filmy\programy by deda\spybot\Spybot - Search & Destroy\TeaTimer.exe
MSConfigStartUp-Steam - d:\g.dc\STEAM\Steam.exe
MSConfigStartUp-Uniblue RegistryBooster 2 - c:\program files\Uniblue\RegistryBooster 2\RegistryBooster.exe
MSConfigStartUp-UVS10 Preload - d:\programy\Ulead VideoS. DVD\uvPL.exe
MSConfigStartUp-WinampAgent - c:\program files\Winamp\winampa.exe
AddRemove-AceGain_LiveUpdate - c:\windows\iun6002.exe
AddRemove-AntiVir PersonalEdition Classic - c:\program files\Avira\AntiVir PersonalEdition Classic\setup.exe
AddRemove-Battlecraft Vietnam1.0 BETA - c:\windows\iun6002.exe
AddRemove-MDT - c:\windows\iun6002.exe
AddRemove-P2P_MAX_EN_Atube Toolbar - c:\progra~1\P2P_MA~1\UNWISE.EXE
AddRemove-Quake III Arena - d:\filmy\quake\quake 3 arena deda beda leda lebeda kakada sakada\QIII.isu
AddRemove-Virtual DJ Pro Full - Atomix Productions - d:\deda\VIRTUA~1.0PR\VIRTUA~1\UNWISE.EXE
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-11-07 12:31
Windows 5.1.2600 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet004\Services\Akamai]
"ServiceDll"="c:\program files\common files\akamai/netsession_win_d71b4a3.dll"
.
[HKEY_LOCAL_MACHINE\System\ControlSet004\Services\GarenaPEngine]
"ImagePath"="\??\c:\docume~1\Knejfl\LOCALS~1\Temp\KHX151.tmp"
.
[HKEY_LOCAL_MACHINE\System\ControlSet004\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1292428093-412668190-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID]
@Denied: (Full) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-1292428093-412668190-725345543-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
[HKEY_LOCAL_MACHINE\System\ControlSet004\Enum\ACPI\PNP0F13\3&2411e6fe&0\LogConf]
@DACL=(02 0000)
"BasicConfigVector"=hex(a):48,00,00,00,0f,00,00,00,00,00,00,00,00,00,00,00,00,
00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,01,00,01,00,01,00,00,00,00,02,\
"BootConfig"=hex(8):01,00,00,00,0f,00,00,00,00,00,00,00,01,00,01,00,01,00,00,
00,02,01,01,00,0c,00,00,00,0c,00,00,00,ff,ff,ff,ff
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(2452)
c:\windows\system32\ieframe.dll
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\program files\Common Files\Portrait Displays\Shared\DTSRVC.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\wscntfy.exe
c:\windows\SOUNDMAN.EXE
c:\windows\system32\RUNDLL32.EXE
.
**************************************************************************
.
Celkový čas: 2011-11-07 12:37:14 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-11-07 11:36
.
Před spuštěním: 613 294 080
Po spuštění: 534 556 672
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=AlwaysOff /fastdetect /usepmtimer
.
- - End Of File - - 85CB2493BB0A5CB020B3A030175960D2

#6 Příspěvek od **vyosek** » 07 lis 2011 12:49

Pokud nemate, tak presunte Combofix na plochu

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

KillAll::

Folder::
c:\documents and settings\Knejfl\Local Settings\Data aplikací\Akamai
c:\windows\ufa
c:\windows\update.8.1
d:\deda\Trojan Remover
C:\Program Files\Common Files\Akamai
C:\Program Files\ICQ6Toolbar
d:\filmy\Advanced SystemCare 3
d:\filmy\programy by deda\spybot\Spybot - Search & Destroy

File::
c:\windows\unrar.exe
C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\conduit.xml
C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icq-search.xml
C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-1.xml
C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-10.xml
C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-11.xml
C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-12.xml
C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-2.xml
C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-3.xml
C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-4.xml
C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-5.xml
C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-6.xml
C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-7.xml
C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-8.xml
C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-9.xml
C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin.xml
C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\qip-search.xml
c:\program files\Free_Lunch_Design\prxtbFre2.dll
c:\program files\XfireXO\prxtbXfi2.dll
c:\documents and settings\Knejfl\Nabídka Start\Programy\Po spuštění\Xfire.lnk
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\GamePark klient 2.lnk
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\GameParkKlient.lnk

Driver::
Akamai
ICQ Service
nenum13E


Registry::
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{5e5ab302-7f65-44cd-8211-c1d4caaccea3}"=-
"{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}"=-
[-HKEY_CLASSES_ROOT\clsid\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
[-HKEY_CLASSES_ROOT\clsid\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{5e5ab302-7f65-44cd-8211-c1d4caaccea3}"=-
"{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}"=-
[-HKEY_CLASSES_ROOT\clsid\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
[-HKEY_CLASSES_ROOT\clsid\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3}"=-
"{57CC715D-37CA-44E4-9EC2-8C2CBDDB25EC}"=-
[-HKEY_CLASSES_ROOT\clsid\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
[-HKEY_CLASSES_ROOT\clsid\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=-
"TrojanScanner"=-
"SunJavaUpdateSched"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000000
"DisableThumbnailCache"=dword:00000000
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
"Akamai"=-

NetSvc::
Akamai

RegLock::
[HKEY_USERS\S-1-5-21-1292428093-412668190-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID]
[HKEY_LOCAL_MACHINE\System\ControlSet004\Enum\ACPI\PNP0F13\3&2411e6fe&0\LogConf]

RegNull::
[HKEY_USERS\S-1-5-21-1292428093-412668190-725345543-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]

Collect::
c:\docume~1\Knejfl\LOCALS~1\Temp\nenum13E.sys

DDS::
uStart Page = hxxp://search.conduit.com?SearchSource= ... =CT1708250
uDefault_Search_URL = hxxp://search.qip.ru
uSearchAssistant = hxxp://search.qip.ru/ie

Firefox::
FF - ProfilePath - c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.as ... ource=3&q={searchTerms}
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.as ... 2304157&q=

Reboot::

Ulozte vytvoreny TXT jako CFScript.txt
Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

Dedecek · #7 Příspěvek od **Dedecek** » 07 lis 2011 13:15

ComboFix 11-11-07.02 - Knejfl 07.11.2011 13:00:24.2.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.1023.606 [GMT 1:00]
Spuštěný z: c:\documents and settings\Knejfl\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Knejfl\Plocha\CFScript.txt
AV: Avira AntiVir PersonalEdition *Disabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
FILE ::
"c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\GamePark klient 2.lnk"
"c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\GameParkKlient.lnk"
"c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\conduit.xml"
"c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icq-search.xml"
"c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-1.xml"
"c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-10.xml"
"c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-11.xml"
"c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-12.xml"
"c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-2.xml"
"c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-3.xml"
"c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-4.xml"
"c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-5.xml"
"c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-6.xml"
"c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-7.xml"
"c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-8.xml"
"c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin-9.xml"
"c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\icqplugin.xml"
"c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\qip-search.xml"
"c:\documents and settings\Knejfl\Nabídka Start\Programy\Po spuštění\Xfire.lnk"
"c:\program files\Free_Lunch_Design\prxtbFre2.dll"
"c:\program files\XfireXO\prxtbXfi2.dll"
"c:\windows\unrar.exe"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Common Files\Akamai
c:\program files\Common Files\Akamai\AdminTool.exe
c:\program files\Common Files\Akamai\appregistry.dat
c:\program files\Common Files\Akamai\client.ini
c:\program files\Common Files\Akamai\client.ini.json
c:\program files\Common Files\Akamai\ControlPanel.exe
c:\program files\Common Files\Akamai\CplTasks.xml
c:\program files\Common Files\Akamai\data.dat
c:\program files\Common Files\Akamai\euc_state.json
c:\program files\Common Files\Akamai\guid.ini
c:\program files\Common Files\Akamai\installer.txt
c:\program files\Common Files\Akamai\installer_no_upload_silent.exe
c:\program files\Common Files\Akamai\Languages\csy.dll
c:\program files\Common Files\Akamai\Languages\dan.dll
c:\program files\Common Files\Akamai\Languages\deu.dll
c:\program files\Common Files\Akamai\Languages\esp.dll
c:\program files\Common Files\Akamai\Languages\fin.dll
c:\program files\Common Files\Akamai\Languages\fra.dll
c:\program files\Common Files\Akamai\Languages\chs.dll
c:\program files\Common Files\Akamai\Languages\cht.dll
c:\program files\Common Files\Akamai\Languages\ita.dll
c:\program files\Common Files\Akamai\Languages\jpn.dll
c:\program files\Common Files\Akamai\Languages\kor.dll
c:\program files\Common Files\Akamai\Languages\nld.dll
c:\program files\Common Files\Akamai\Languages\nor.dll
c:\program files\Common Files\Akamai\Languages\plk.dll
c:\program files\Common Files\Akamai\Languages\ptb.dll
c:\program files\Common Files\Akamai\Languages\ptg.dll
c:\program files\Common Files\Akamai\Languages\rus.dll
c:\program files\Common Files\Akamai\Languages\sve.dll
c:\program files\Common Files\Akamai\Languages\trk.dll
c:\program files\Common Files\Akamai\Logs\debug.log
c:\program files\Common Files\Akamai\Logs\debug.log.111031_173104.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111031_183105.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111031_193105.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111031_201309.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111031_201526.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111031_202246.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111031_202437.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111031_203704.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111031_203912.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111031_204828.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111031_205036.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111031_210011.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111031_220012.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111031_230013.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_000013.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_010013.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_020014.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_030015.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_040016.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_050016.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_060016.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_070017.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_080018.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_090018.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_100018.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_110019.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_120019.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_130019.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_140020.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_150020.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_160021.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_170021.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_180022.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_190022.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_200023.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_210023.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_220024.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111101_230024.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_000024.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_010025.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_020025.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_030026.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_040026.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_050027.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_060027.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_070027.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_080028.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_090028.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_100028.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_110029.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_120030.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_130030.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_140031.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_150031.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_160032.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_170033.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_180034.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_190034.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_200035.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_210036.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_220037.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111102_230037.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_000037.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_002741.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_002815.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_002919.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_002951.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_012951.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_022952.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_032953.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_042954.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_052955.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_062956.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_072957.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_082958.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_092958.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_102959.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_112959.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_122959.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_133000.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_143001.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_153002.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_163003.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_173003.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_183004.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_193004.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_203004.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_213005.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_223006.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111103_233006.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_003006.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_013007.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_023007.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_033008.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_043009.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_053009.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_063010.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_073011.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_083011.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_093012.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_103012.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_113013.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_123013.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_133014.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_143015.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_153015.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_163015.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_173016.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_183016.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_193017.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_203018.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_213019.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_223020.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111104_233020.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_002100.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_002133.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_012133.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_022133.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_032133.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_042133.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_052134.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_062135.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_072136.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_082136.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_092137.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_102138.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_112139.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_122140.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_132141.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_142142.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_152143.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_162143.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_172143.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_182144.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_192144.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_202144.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_212145.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_222145.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111105_232146.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_002147.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_012148.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_022148.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_032149.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_042149.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_052150.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_062150.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_072151.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_082152.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_092152.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_102152.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_112153.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_122153.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_132154.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_142155.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_152155.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_162156.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_172155.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_182155.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_192156.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_202157.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_212158.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_222158.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111106_232159.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111107_002200.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111107_012201.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111107_022201.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111107_032202.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111107_042202.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111107_052202.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111107_062203.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111107_072204.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111107_082204.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111107_092205.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111107_102205.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111107_112206.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111107_112948.sent
c:\program files\Common Files\Akamai\Logs\debug.log.111107_113054.sent
c:\program files\Common Files\Akamai\netsession_win_d71b4a3.dll
c:\program files\Common Files\Akamai\readme.txt
c:\program files\Common Files\Akamai\root.pem
c:\program files\Common Files\Akamai\rswinui.exe
c:\program files\Common Files\Akamai\stubgraded
c:\program files\Common Files\Akamai\uninstall.exe
c:\program files\Common Files\Akamai\vcredist_x86.exe
c:\program files\Free_Lunch_Design\prxtbFre2.dll
c:\program files\XfireXO\prxtbXfi2.dll
c:\windows\ufa
c:\windows\ufa\ufa.exe
c:\windows\unrar.exe
c:\windows\update.8.1
d:\deda\Trojan Remover
d:\deda\Trojan Remover\rmt.dta
d:\deda\Trojan Remover\rmt.dta.bak
d:\deda\Trojan Remover\Rmvtrjan.exe
d:\deda\Trojan Remover\Sschk.exe
d:\deda\Trojan Remover\trjhelp.chm
d:\deda\Trojan Remover\Trjscan.exe
d:\deda\Trojan Remover\Trjscan.exe.bak
d:\deda\Trojan Remover\Trojan.Remover.v6.8.2.2600 patch.exe
d:\deda\Trojan Remover\Trshlex.dll
d:\deda\Trojan Remover\trunins.exe
d:\deda\Trojan Remover\trupd.exe
d:\deda\Trojan Remover\unins000.dat
d:\deda\Trojan Remover\unins000.exe
d:\deda\Trojan Remover\unins000.msg
d:\filmy\programy by deda\spybot\Spybot - Search & Destroy
d:\filmy\programy by deda\spybot\Spybot - Search & Destroy\SDHelper.dll
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_AKAMAI
-------\Legacy_ICQ_SERVICE
-------\Legacy_NENUM13E
-------\Service_Akamai
-------\Service_ICQ Service
-------\Service_nenum13E
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-10-07 do 2011-11-07 )))))))))))))))))))))))))))))))
.
.
2011-11-07 11:04 . 2011-11-07 11:06 111872 -c--a-w- c:\windows\system32\drivers\TrueSight.sys
2011-11-07 10:32 . 2011-11-07 10:33 -------- d-----w- C:\rsit
2011-11-07 10:32 . 2011-11-07 10:33 -------- dc----w- c:\program files\trend micro
2011-11-03 00:28 . 2011-11-05 01:03 -------- dc----w- c:\documents and settings\Knejfl\Local Settings\Data aplikací\Akamai
2011-10-30 17:55 . 2011-10-30 17:55 -------- dc----w- c:\program files\Common Files\Java
2011-10-30 10:32 . 2006-06-19 12:01 69632 -c--a-w- c:\windows\system32\ztvcabinet.dll
2011-10-30 10:32 . 2006-05-25 14:52 162304 -c--a-w- c:\windows\system32\ztvunrar36.dll
2011-10-30 10:32 . 2005-08-26 00:50 77312 -c--a-w- c:\windows\system32\ztvunace26.dll
2011-10-30 10:32 . 2002-03-06 00:00 75264 -c--a-w- c:\windows\system32\unacev2.dll
2011-10-30 10:32 . 2003-02-02 19:06 153088 -c--a-w- c:\windows\system32\UNRAR3.dll
2011-10-30 10:32 . 2011-10-30 10:32 -------- d-----w- c:\documents and settings\Knejfl\Data aplikací\Simply Super Software
2011-10-30 10:32 . 2011-10-30 10:32 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Simply Super Software
2011-10-29 13:23 . 2011-10-29 13:23 -------- dc----w- c:\windows\Performance
2011-10-29 13:23 . 2011-10-29 13:23 -------- dc----w- c:\documents and settings\Knejfl\Local Settings\Data aplikací\Microsoft Corporation
2011-10-29 13:21 . 2011-10-29 13:21 -------- dc----w- c:\program files\Microsoft Windows 7 Upgrade Advisor
2011-10-29 11:25 . 2011-10-29 11:25 -------- d--h--w- c:\documents and settings\All Users\Data aplikací\Common Files
2011-10-29 11:25 . 2011-10-30 02:38 -------- d-----w- c:\documents and settings\All Users\Data aplikací\MFAData
2011-10-28 22:45 . 2011-10-28 22:45 -------- d-----w- c:\documents and settings\Knejfl\Data aplikací\.minecraft
2011-10-27 11:07 . 2011-10-27 11:07 -------- d-----w- c:\documents and settings\LocalService\Nabídka Start
2011-10-13 17:44 . 2011-10-13 17:48 -------- d-----w- c:\documents and settings\Knejfl\Data aplikací\Ubisoft
2011-10-12 15:11 . 2011-10-12 15:11 -------- dc----w- c:\program files\Ubisoft
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-06 20:15 . 2011-05-16 12:19 414368 -c--a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-21 21:34 . 2008-09-07 20:16 60416 -c--a-w- c:\windows\ALCFDRTM.VER
2011-10-03 04:06 . 2010-05-27 17:47 472808 -c--a-w- c:\windows\system32\deployJava1.dll
2011-10-03 01:37 . 2011-07-19 20:45 73728 -c--a-w- c:\windows\system32\javacpl.cpl
2011-09-22 19:43 . 2009-03-15 11:18 137464 -c--a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-09-22 19:42 . 2009-05-19 16:56 214520 -c--a-w- c:\windows\system32\PnkBstrB.xtr
2011-09-22 19:42 . 2009-03-15 11:18 214520 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-08-26 22:21 . 2011-08-26 22:21 42392 -c--a-w- c:\windows\system32\xfcodec.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-11-07_11.31.08 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-11-07 12:09 . 2011-11-07 12:09 16384 c:\windows\Temp\Perflib_Perfdata_748.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ESL Wire"="d:\filmy\EslWire\wire.exe" [2011-09-20 1981952]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-17 15360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-12-01 77824]
"HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2004-05-12 241664]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-10-16 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-10-16 13851752]
"UVS10 Preload"="d:\program files\uvPL.exe" [2006-03-06 36864]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"WIAWizardMenu"="c:\windows\system32\sti_ci.dll" [2004-08-17 136704]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]
.
c:\documents and settings\Knejfl\Nabídka Start\Programy\Po spuštění\
Xfire.lnk - d:\filmy\xfire\Xfire.exe [2011-8-26 3510680]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
GamePark klient 2.lnk - d:\deda\GamePark2\gpcl.exe [2011-8-7 409088]
GameParkKlient.lnk - c:\program files\GamePark.cz Klient\gpcl.exe [2011-5-22 399872]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableSecureUIAPaths"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\C\0autocheck autochk *\0d:\filmy\PARTIT~1\bluescrn\bluescrn.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ESL Wire]
2011-09-20 09:00 1981952 ----a-w- d:\filmy\EslWire\wire.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gainward]
2007-04-23 11:18 2173744 -c--a-w- c:\windows\TBPanel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB Storage Toolbox]
2005-09-14 18:44 65536 -c----w- c:\windows\UMStor\Res.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"d:\\Programy\\uTorrent\\utorrent.exe"=
"d:\\Filmy\\airbone\\uTorrent.exe"=
"c:\\Program Files\\BitComet\\BitComet.exe"=
"d:\\Filmy\\programy by deda\\trilian\\Trillian\\trillian.exe"=
"d:\\Filmy\\vse\\Call of Duty 2\\CoD2MP_s.exe"=
"d:\\Filmy\\vse\\airbone\\uTorrent.exe"=
"d:\\Filmy\\programy by deda\\hlsw\\HLSW\\hlsw.exe"=
"d:\\Filmy\\EslWire\\wire.exe"=
"d:\\Steam.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"d:\combat arms client\Combat Arms EU\CombatArms.exe"= d:\combat arms client\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe
"d:\combat arms client\Combat Arms EU\Engine.exe"= d:\combat arms client\Combat Arms EU\Engine.exe:*Enabled:Engine.exe
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"8844:TCP"= 8844:TCP:BitComet 8844 TCP
"8844:UDP"= 8844:UDP:BitComet 8844 UDP
"8394:TCP"= 8394:TCP:League of Legends Launcher
"8394:UDP"= 8394:UDP:League of Legends Launcher
"8375:TCP"= 8375:TCP:League of Legends Launcher
"8375:UDP"= 8375:UDP:League of Legends Launcher
"8376:TCP"= 8376:TCP:League of Legends Launcher
"8376:UDP"= 8376:UDP:League of Legends Launcher
"6928:TCP"= 6928:TCP:League of Legends Launcher
"6928:UDP"= 6928:UDP:League of Legends Launcher
"6949:TCP"= 6949:TCP:League of Legends Launcher
"6949:UDP"= 6949:UDP:League of Legends Launcher
"6988:TCP"= 6988:TCP:League of Legends Launcher
"6988:UDP"= 6988:UDP:League of Legends Launcher
"6893:TCP"= 6893:TCP:League of Legends Launcher
"6893:UDP"= 6893:UDP:League of Legends Launcher
"6982:TCP"= 6982:TCP:League of Legends Launcher
"6982:UDP"= 6982:UDP:League of Legends Launcher
"58646:TCP"= 58646:TCP:Pando Media Booster
"58646:UDP"= 58646:UDP:Pando Media Booster
"57130:TCP"= 57130:TCP:Pando Media Booster
"57130:UDP"= 57130:UDP:Pando Media Booster
"58024:TCP"= 58024:TCP:Pando Media Booster
"58024:UDP"= 58024:UDP:Pando Media Booster
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)
.
R0 CLBStor;CyberLink InstantBurn UDF Reader Help Driver;c:\windows\system32\drivers\CLBStor.sys [30.3.2011 15:18 10368]
R0 hotcore3;hotcore3;c:\windows\system32\drivers\hotcore3.sys [8.12.2010 17:30 39472]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [15.9.2008 8:14 717296]
R2 CLBUDFR;CyberLink UDF Filesystem;c:\windows\system32\drivers\CLBUDFR.sys [30.3.2011 15:18 180352]
R2 ESLWireAC;ESLWireAC;c:\windows\system32\drivers\ESLWireACD.sys [19.11.2010 20:42 862496]
R2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [16.11.2009 17:33 50704]
R2 PdiService;Portrait Displays SDK Service;c:\program files\Common Files\Portrait Displays\Drivers\pdisrvc.exe [24.12.2010 21:48 109168]
R3 ipgd;ASUS NX1101 Gigabit Ethernet Adapter Driver;c:\windows\system32\drivers\ipgdnd51.sys [9.9.2008 17:25 33536]
S2 AntiVirScheduler;Avira AntiVir Personal – Free Antivirus Scheduler;"c:\program files\Avira\AntiVir PersonalEdition Classic\sched.exe" --> c:\program files\Avira\AntiVir PersonalEdition Classic\sched.exe [?]
S3 BioNT_BS;BioNT_BS;\??\d:\filmy\partition magic\bluescrn\BioNT_bs.sys --> d:\filmy\partition magic\bluescrn\BioNT_bs.sys [?]
S3 EagleXNt;EagleXNt;\??\c:\windows\system32\drivers\EagleXNt.sys --> c:\windows\system32\drivers\EagleXNt.sys [?]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\Knejfl\LOCALS~1\Temp\KHX151.tmp --> c:\docume~1\Knejfl\LOCALS~1\Temp\KHX151.tmp [?]
S3 GGSAFERDriver;GGSAFER Driver;\??\d:\filmy\Games\garena\safedrv.sys --> d:\filmy\Games\garena\safedrv.sys [?]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 TrueSight;TrueSight;c:\windows\system32\drivers\TrueSight.sys [7.11.2011 12:04 111872]
.
.
------- Doplňkový sken -------
.
uSearchAssistant = hxxp://search.qip.ru/ie
IE: Download all links using BitComet
IE: Download all videos using BitComet
IE: Download link using &BitComet
IE: E&xportovat do aplikace Microsoft Excel - d:\programy\Office\Office12\EXCEL.EXE/3000
IE: Stáhnout odkaz s použitím BitCometu - c:\program files\BitComet\BitComet.exe/AddLink.htm
IE: Stáhnout všechna videa s použitím BitCometu - c:\program files\BitComet\BitComet.exe/AddVideo.htm
IE: Stáhnout všechny odkazy s použitím BitCometu - c:\program files\BitComet\BitComet.exe/AddAllLink.htm
IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - d:\filmy\ICQ7.1\ICQ.exe
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\documents and settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-Akamai - c:\program files\Common Files\Akamai\uninstall.exe
AddRemove-Trojan Remover_is1 - d:\deda\Trojan Remover\unins000.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-11-07 13:09
Windows 5.1.2600 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet004\Services\GarenaPEngine]
"ImagePath"="\??\c:\docume~1\Knejfl\LOCALS~1\Temp\KHX151.tmp"
.
[HKEY_LOCAL_MACHINE\System\ControlSet004\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(2988)
c:\windows\system32\ieframe.dll
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\program files\Common Files\Portrait Displays\Shared\DTSRVC.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\SOUNDMAN.EXE
c:\windows\system32\RUNDLL32.EXE
.
**************************************************************************
.
Celkový čas: 2011-11-07 13:14:14 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-11-07 12:14
ComboFix2.txt 2011-11-07 11:37
.
Před spuštěním: 481 349 632
Po spuštění: 450 301 952
.
- - End Of File - - 30621D6360F7A36BF971DAFBF8C381FB

#8 Příspěvek od **vyosek** » 07 lis 2011 13:22

Chcete zustat u antiviru Aviry nebo dame Avast - je cesky a zrejme asi jeden z nejlepsich free resenich

Dedecek · #9 Příspěvek od **Dedecek** » 07 lis 2011 13:24

jo tak asi bude lepší ten avast

#10 Příspěvek od **vyosek** » 07 lis 2011 13:31

Fajn, takze jdem uklizet a aktualizovat a udelat malou udrzbu PC

Odinstalujte Combofix

Prejmenujte ComboFix na Uninstall
Spustte jej
Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Projedte PC temito utilitami, at se zbavime zbytku antiviru co tam mate

http://dlpro.antivir.com/package/remova ... n32-en.exe

Stahnete Ccleaner (viz muj podpis)
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

Nainstalujte Avast Free http://www.avast.com/cs-cz/free-antivirus-download

Uvolnete nejake volne misto na disku, alespon tak na 4 giga - system se jinak dusi

Z logu je patrno, ze nemate aktualni verzi Windows - chybi Vam ServicePack 3 - doinstalujte jej

Vice info mate zde http://www.viry.cz/forum/viewtopic.php?f=46&t=86100

Dejte novy log z RSIT a napiste co PC

Dedecek · #11 Příspěvek od **Dedecek** » 07 lis 2011 16:05

JO vypadá to že pc už je v pořádku nebo alespoň je na tom líp než předtím děkuji za pomoc zde je ten new log z RSIT

Logfile of random's system information tool 1.09 (written by random/random)
Run by Knejfl at 2011-11-07 16:03:36
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 1 GB (11%) free of 10 GB
Total RAM: 1023 MB (34% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:03:57, on 7.11.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Portrait Displays\Drivers\pdisrvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Knejfl\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
D:\deda\RSIT.exe
C:\Program Files\trend micro\Knejfl.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\Knejfl\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Programy\Office\Office12\GRA8E1~1.DLL
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\Knejfl\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [UVS10 Preload] D:\Program Files\uvPL.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
O4 - HKCU\..\Run: [ESL Wire] "D:\Filmy\EslWire\wire.exe" --tray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Xfire.lnk = D:\Filmy\xfire\Xfire.exe
O4 - Global Startup: GamePark klient 2.lnk = D:\deda\GamePark2\gpcl.exe
O4 - Global Startup: GameParkKlient.lnk = C:\Program Files\GamePark.cz Klient\gpcl.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\Programy\Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\Office\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\Office\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - D:\Filmy\ICQ7.1\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - D:\Filmy\ICQ7.1\ICQ.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Programy\Office\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files\PokerStars.NET\PokerStarsUpdate.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Programy\Office\Office12\GR99D3~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe (file missing)
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Portrait Displays Display Tune Service (DTSRVC) - Unknown owner - C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MSSQL$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Portrait Displays SDK Service (PdiService) - Portrait Displays, Inc. - C:\Program Files\Common Files\Portrait Displays\Drivers\pdisrvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: SQLAgent$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE (file missing)
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 9203 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5, {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}:6.0.02, {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16, {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17, {3112ca9c-de6d-4884-a869-9855de68056c}:3.1.20081127W, {20a82645-c095-46ed-80e3-08825760534b}:1.1, jqs@sun.com:1.0, QipCounter@qip.ru:1.0, {32a1fd71-835e-4b11-8e54-886fda0b4c89}:1.1, {5e5ab302-7f65-44cd-8211-c1d4caaccea3}:2.7.2.0, {d7ba87f4-c901-47b7-af80-18d75313aad1}:1.5.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"

"{3112ca9c-de6d-4884-a869-9855de68056c}"=C:\Documents and Settings\All Users\Data aplikací\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c}
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@idsoftware.com/QuakeLive]
"Description"=
"Path"=C:\Documents and Settings\All Users\Data aplikací\id Software\QuakeLive\npquakezero.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@ngm.nexoneu.com/NxGame]
"Description"=Nexon Game Controller 1.0.0.1
"Path"=C:\Documents and Settings\All Users\Data aplikací\NexonEU\NGM\npNxGameeu.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Webzen.com/NPGameWebStarter]
"Description"=Webzen Game Controller
"Path"=C:\Program Files\WEBZEN\WebzenGameStarter\NPGameWebStarter.dll

D:\Programy\Firefox\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

D:\Programy\Firefox\components\
binary.manifest
browsercomps.dll
nsIBitCometAgent.xpt
nsIQTScriptablePlugin.xpt

D:\Programy\Firefox\plugins\
np-mswmp.dll
np32dsw.dll
npBitCometAgent.dll
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class
ShockwavePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

D:\Programy\Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\extensions\
battlefieldplay4free@ea.com
engine@conduit.com
maps@ovi.com
{20a82645-c095-46ed-80e3-08825760534b}
{32a1fd71-835e-4b11-8e54-886fda0b4c89}
{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}
{5e5ab302-7f65-44cd-8211-c1d4caaccea3}
{d7ba87f4-c901-47b7-af80-18d75313aad1}

C:\Documents and Settings\Knejfl\Data aplikací\Mozilla\Firefox\Profiles\9kovnllx.default\searchplugins\
conduit.xml
icq-search.xml
icqplugin-1.xml
icqplugin-10.xml
icqplugin-11.xml
icqplugin-12.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.xml
qip-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16 37808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - D:\Programy\Office\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - C:\Documents and Settings\Knejfl\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll [2010-06-10 149968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-18 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2008-07-17 691656]
{855F3B16-6D32-4fe6-8A56-BBB695989046} -
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-12-01 77824]
"HP Component Manager"=C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2004-05-12 241664]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-10-16 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-10-16 13851752]
"UVS10 Preload"=D:\Program Files\uvPL.exe [2006-03-06 36864]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-09-06 3722416]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WIAWizardMenu"=C:\WINDOWS\system32\sti_ci.dll [2008-04-14 136704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ESL Wire"=D:\Filmy\EslWire\wire.exe [2011-09-20 1981952]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ESL Wire]
D:\Filmy\EslWire\wire.exe [2011-09-20 1981952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gainward]
C:\WINDOWS\TBPanel.exe [2007-04-23 2173744]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB Storage Toolbox]
C:\WINDOWS\UMStor\Res.EXE [2005-09-14 65536]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
GamePark klient 2.lnk - D:\deda\GamePark2\gpcl.exe
GameParkKlient.lnk - C:\Program Files\GamePark.cz Klient\gpcl.exe

C:\Documents and Settings\Knejfl\Nabídka Start\Programy\Po spuštění
Xfire.lnk - D:\Filmy\xfire\Xfire.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=D:\Programy\Office\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableSecureUIAPaths"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoResolveSearch"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Programy\uTorrent\utorrent.exe"="D:\Programy\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"D:\Filmy\airbone\uTorrent.exe"="D:\Filmy\airbone\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe"
"D:\Filmy\programy by deda\trilian\Trillian\trillian.exe"="D:\Filmy\programy by deda\trilian\Trillian\trillian.exe:*:Enabled:Trillian"
"D:\Filmy\vse\Call of Duty 2\CoD2MP_s.exe"="D:\Filmy\vse\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"D:\Filmy\vse\airbone\uTorrent.exe"="D:\Filmy\vse\airbone\uTorrent.exe:*:Enabled:µTorrent"
"D:\Filmy\programy by deda\hlsw\HLSW\hlsw.exe"="D:\Filmy\programy by deda\hlsw\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"D:\Filmy\EslWire\wire.exe"="D:\Filmy\EslWire\wire.exe:*:Enabled:ESL Wire Client"
"D:\Steam.exe"="D:\Steam.exe:*:Enabled:Steam Client"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"D:\combat arms client\Combat Arms EU\CombatArms.exe"="D:\combat arms client\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe"
"D:\combat arms client\Combat Arms EU\Engine.exe"="D:\combat arms client\Combat Arms EU\Engine.exe:*Enabled:Engine.exe"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Filmy\ICQ7.1\ICQ.exe"="D:\Filmy\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1"
"D:\Filmy\ICQ7.1\aolload.exe"="D:\Filmy\ICQ7.1\aolload.exe:*:Enabled:aolload.exe"
"D:\combat arms client\Combat Arms EU\CombatArms.exe"="D:\combat arms client\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe"
"D:\combat arms client\Combat Arms EU\Engine.exe"="D:\combat arms client\Combat Arms EU\Engine.exe:*Enabled:Engine.exe"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll
"VIDC.XFR1"=xfcodec.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"VIDC.FMVC"=fmcodec.dll
"MSVideo8"=VfWWDM32.dll
"VIDC.WMV3"=wmv9vcm.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.dvacm"=C:\PROGRA~1\COMMON~1\ULEADS~1\Vio\Dvacm.acm
"msacm.MPEGacm"=C:\PROGRA~1\COMMON~1\ULEADS~1\MPEG\MPEGacm.acm
"msacm.ulmp3acm"=C:\PROGRA~1\COMMON~1\ULEADS~1\MPEG\ulmp3acm.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv

======List of files/folders created in the last 1 month======

2011-11-07 16:03:36 ----D---- C:\rsit
2011-11-07 15:58:11 ----AC---- C:\WINDOWS\OEWABLog.txt
2011-11-07 15:57:17 ----DC---- C:\WINDOWS\Prefetch
2011-11-07 15:48:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2011-11-07 15:48:17 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2011-11-07 15:47:47 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2011-11-07 15:47:20 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2011-11-07 15:46:51 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2011-11-07 15:46:28 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2011-11-07 15:46:06 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2011-11-07 15:45:35 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2011-11-07 15:45:01 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2011-11-07 15:44:31 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2011-11-07 15:44:12 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2011-11-07 15:43:40 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2$
2011-11-07 15:43:08 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2011-11-07 15:42:46 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2011-11-07 15:42:24 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2011-11-07 15:42:03 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2011-11-07 15:41:42 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2011-11-07 15:41:13 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2011-11-07 15:40:19 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2011-11-07 15:39:16 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2011-11-07 15:38:46 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2011-11-07 15:38:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2011-11-07 15:37:47 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2011-11-07 15:36:53 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2011-11-07 15:36:29 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2011-11-07 15:35:57 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2011-11-07 15:35:25 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2011-11-07 15:34:59 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2011-11-07 15:34:34 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2011-11-07 15:34:12 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2011-11-07 15:33:40 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2011-11-07 15:33:17 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2011-11-07 15:32:55 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-11-07 15:32:31 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2011-11-07 15:32:11 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2011-11-07 15:31:40 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2011-11-07 15:31:07 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2011-11-07 15:31:02 ----DC---- C:\WINDOWS\LastGood.Tmp
2011-11-07 15:29:33 ----AC---- C:\WINDOWS\setuplog.txt
2011-11-07 15:28:38 ----C---- C:\WINDOWS\system32\smtpapi.dll
2011-11-07 15:28:38 ----C---- C:\WINDOWS\system32\rwnh.dll
2011-11-07 15:28:38 ----C---- C:\WINDOWS\system32\drivers\irbus.sys
2011-11-07 15:28:38 ----C---- C:\WINDOWS\system32\comsdupd.exe
2011-11-07 15:28:34 ----C---- C:\WINDOWS\system32\ati3d1ag.dll
2011-11-07 15:28:34 ----C---- C:\WINDOWS\system32\ati2dvag.dll
2011-11-07 15:28:34 ----C---- C:\WINDOWS\system32\ati2dvaa.dll
2011-11-07 15:28:34 ----C---- C:\WINDOWS\system32\ati2cqag.dll
2011-11-07 15:28:34 ----C---- C:\WINDOWS\system32\aaclient.dll
2011-11-07 15:28:33 ----C---- C:\WINDOWS\system32\bitsprx4.dll
2011-11-07 15:28:33 ----C---- C:\WINDOWS\system32\azroles.dll
2011-11-07 15:28:33 ----C---- C:\WINDOWS\system32\ativvaxx.dll
2011-11-07 15:28:33 ----C---- C:\WINDOWS\system32\ativtmxx.dll
2011-11-07 15:28:33 ----C---- C:\WINDOWS\system32\ati3duag.dll
2011-11-07 15:28:32 ----C---- C:\WINDOWS\system32\credssp.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\eapsvc.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\eapqec.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\eappprxy.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\eapphost.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\eappgnui.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\eappcfg.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\eapp3hst.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\eapolqec.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\dot3ui.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\dot3svc.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\dot3msm.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\dot3gpclnt.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\dot3dlg.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\dot3cfg.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\dot3api.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\dimsroam.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\dimsntfy.dll
2011-11-07 15:28:31 ----C---- C:\WINDOWS\system32\dhcpqec.dll
2011-11-07 15:28:30 ----C---- C:\WINDOWS\system32\hsfcisp2.dll
2011-11-07 15:28:27 ----C---- C:\WINDOWS\system32\l2gpstore.dll
2011-11-07 15:28:27 ----C---- C:\WINDOWS\system32\kmsvc.dll
2011-11-07 15:28:27 ----C---- C:\WINDOWS\system32\kbdpash.dll
2011-11-07 15:28:27 ----C---- C:\WINDOWS\system32\kbdnepr.dll
2011-11-07 15:28:27 ----C---- C:\WINDOWS\system32\kbdiultn.dll
2011-11-07 15:28:27 ----C---- C:\WINDOWS\system32\kbdbhc.dll
2011-11-07 15:28:26 ----C---- C:\WINDOWS\system32\onex.dll
2011-11-07 15:28:26 ----C---- C:\WINDOWS\system32\napstat.exe
2011-11-07 15:28:26 ----C---- C:\WINDOWS\system32\napmontr.dll
2011-11-07 15:28:26 ----C---- C:\WINDOWS\system32\napipsec.dll
2011-11-07 15:28:26 ----C---- C:\WINDOWS\system32\mtxparhd.dll
2011-11-07 15:28:26 ----C---- C:\WINDOWS\system32\msshavmsg.dll
2011-11-07 15:28:26 ----C---- C:\WINDOWS\system32\mssha.dll
2011-11-07 15:28:26 ----C---- C:\WINDOWS\system32\mmcperf.exe
2011-11-07 15:28:26 ----C---- C:\WINDOWS\system32\mmcfxcommon.dll
2011-11-07 15:28:26 ----C---- C:\WINDOWS\system32\mmcex.dll
2011-11-07 15:28:26 ----C---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2011-11-07 15:28:26 ----C---- C:\WINDOWS\system32\mdmxsdk.dll
2011-11-07 15:28:25 ----C---- C:\WINDOWS\system32\slextspk.dll
2011-11-07 15:28:25 ----C---- C:\WINDOWS\system32\slcoinst.dll
2011-11-07 15:28:25 ----C---- C:\WINDOWS\system32\setupn.exe
2011-11-07 15:28:25 ----C---- C:\WINDOWS\system32\s3gnb.dll
2011-11-07 15:28:25 ----C---- C:\WINDOWS\system32\rhttpaa.dll
2011-11-07 15:28:25 ----C---- C:\WINDOWS\system32\rasqec.dll
2011-11-07 15:28:25 ----C---- C:\WINDOWS\system32\qutil.dll
2011-11-07 15:28:25 ----C---- C:\WINDOWS\system32\qcliprov.dll
2011-11-07 15:28:25 ----C---- C:\WINDOWS\system32\qagentrt.dll
2011-11-07 15:28:25 ----C---- C:\WINDOWS\system32\qagent.dll
2011-11-07 15:28:24 ----C---- C:\WINDOWS\system32\tspkg.dll
2011-11-07 15:28:24 ----C---- C:\WINDOWS\system32\tsgqec.dll
2011-11-07 15:28:24 ----C---- C:\WINDOWS\system32\slserv.exe
2011-11-07 15:28:24 ----C---- C:\WINDOWS\system32\slrundll.exe
2011-11-07 15:28:24 ----C---- C:\WINDOWS\system32\slgen.dll
2011-11-07 15:28:23 ----C---- C:\WINDOWS\system32\wlanapi.dll
2011-11-07 15:28:23 ----C---- C:\WINDOWS\slrundll.exe
2011-11-07 15:28:22 ----DC---- C:\WINDOWS\l2schemas
2011-11-07 15:28:20 ----DC---- C:\WINDOWS\system32\cs
2011-11-07 15:28:20 ----DC---- C:\WINDOWS\system32\bits
2011-11-07 15:25:04 ----DC---- C:\WINDOWS\network diagnostic
2011-11-07 15:25:04 ----C---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2011-11-07 15:25:04 ----C---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2011-11-07 15:25:04 ----C---- C:\WINDOWS\system32\drivers\amdagp.sys
2011-11-07 15:25:04 ----C---- C:\WINDOWS\system32\drivers\alim1541.sys
2011-11-07 15:25:04 ----C---- C:\WINDOWS\system32\drivers\agpcpq.sys
2011-11-07 15:25:04 ----C---- C:\WINDOWS\system32\drivers\agp440.sys
2011-11-07 15:25:04 ----C---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2011-11-07 15:25:04 ----C---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2011-11-07 15:25:04 ----C---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2011-11-07 15:25:04 ----C---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2011-11-07 15:25:04 ----C---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2011-11-07 15:25:04 ----C---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2011-11-07 15:25:04 ----C---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\bthpan.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\bthmodem.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\bthenum.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\atintuxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\atinttxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\atinraxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2011-11-07 15:25:03 ----C---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\rndismpx.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\rfcomm.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\recagent.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\mutohpen.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\hidir.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\hidbth.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\bthusb.sys
2011-11-07 15:25:02 ----C---- C:\WINDOWS\system32\drivers\bthprint.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\watv10nt.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\watv06nt.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\wacompen.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\viaagp.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\vchnt5.dll
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\usbvideo.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\usb8023x.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\uagp35.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\smbali.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\slnthal.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\slntamr.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\slnt7554.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\sisagp.sys
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\siint5.dll
2011-11-07 15:25:01 ----C---- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2011-11-07 15:23:57 ----AC---- C:\WINDOWS\003022_.tmp
2011-11-07 15:21:51 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2011-11-07 14:47:27 ----AC---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-11-07 14:47:27 ----AC---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-11-07 14:47:24 ----AC---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-11-07 14:47:24 ----AC---- C:\WINDOWS\system32\drivers\aswSnx.sys
2011-11-07 14:47:24 ----AC---- C:\WINDOWS\system32\drivers\aswRdr.sys
2011-11-07 14:47:24 ----AC---- C:\WINDOWS\system32\drivers\aswmon2.sys
2011-11-07 14:47:24 ----AC---- C:\WINDOWS\system32\drivers\aswmon.sys
2011-11-07 14:47:24 ----AC---- C:\WINDOWS\system32\drivers\aavmker4.sys
2011-11-07 14:47:05 ----AC---- C:\WINDOWS\system32\aswBoot.exe
2011-11-07 14:47:05 ----AC---- C:\WINDOWS\avastSS.scr
2011-11-07 14:46:49 ----DC---- C:\Program Files\AVAST Software
2011-11-07 14:46:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2011-11-07 13:53:10 ----SHD---- C:\RECYCLER
2011-11-07 12:22:15 ----A---- C:\Boot.bak
2011-11-07 12:22:13 ----RASHD---- C:\cmdcons
2011-11-07 12:04:57 ----AC---- C:\WINDOWS\system32\drivers\TrueSight.sys
2011-11-07 11:32:56 ----DC---- C:\Program Files\trend micro
2011-10-30 18:55:59 ----DC---- C:\Program Files\Common Files\Java
2011-10-30 18:55:46 ----AC---- C:\WINDOWS\system32\javaws.exe
2011-10-30 18:55:46 ----AC---- C:\WINDOWS\system32\javaw.exe
2011-10-30 18:55:46 ----AC---- C:\WINDOWS\system32\java.exe
2011-10-30 11:32:22 ----AC---- C:\WINDOWS\system32\ztvunrar36.dll
2011-10-30 11:32:22 ----AC---- C:\WINDOWS\system32\ztvunace26.dll
2011-10-30 11:32:22 ----AC---- C:\WINDOWS\system32\ztvcabinet.dll
2011-10-30 11:32:22 ----AC---- C:\WINDOWS\system32\unacev2.dll
2011-10-30 11:32:21 ----AC---- C:\WINDOWS\system32\UNRAR3.dll
2011-10-30 11:32:18 ----D---- C:\Documents and Settings\Knejfl\Data aplikací\Simply Super Software
2011-10-30 11:32:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\Simply Super Software
2011-10-29 14:23:19 ----DC---- C:\WINDOWS\Performance
2011-10-29 14:21:40 ----DC---- C:\Program Files\Microsoft Windows 7 Upgrade Advisor
2011-10-29 12:25:21 ----HD---- C:\Documents and Settings\All Users\Data aplikací\Common Files
2011-10-29 12:25:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\MFAData
2011-10-28 23:45:07 ----D---- C:\Documents and Settings\Knejfl\Data aplikací\.minecraft
2011-10-28 10:52:22 ----D---- C:\Documents and Settings\Knejfl\Data aplikací\Opera

======List of files/folders modified in the last 1 month======

2011-11-07 16:00:34 ----DC---- C:\WINDOWS\system32
2011-11-07 16:00:30 ----DC---- C:\WINDOWS\Temp
2011-11-07 15:59:33 ----DC---- C:\WINDOWS\Debug
2011-11-07 15:59:26 ----DC---- C:\WINDOWS
2011-11-07 15:58:11 ----DC---- C:\WINDOWS\system32\CatRoot2
2011-11-07 15:56:37 ----RSDC---- C:\WINDOWS\Fonts
2011-11-07 15:56:37 ----DC---- C:\WINDOWS\system32\wbem
2011-11-07 15:56:37 ----DC---- C:\WINDOWS\system32\Setup
2011-11-07 15:56:37 ----DC---- C:\WINDOWS\AppPatch
2011-11-07 15:56:36 ----DC---- C:\WINDOWS\system32\drivers
2011-11-07 15:52:21 ----DC---- C:\WINDOWS\security
2011-11-07 15:52:20 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-11-07 15:49:20 ----DC---- C:\Program Files
2011-11-07 15:48:59 ----HDC---- C:\WINDOWS\inf
2011-11-07 15:48:55 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-11-07 15:48:55 ----DC---- C:\WINDOWS\system32\CatRoot
2011-11-07 15:47:39 ----DC---- C:\Program Files\Outlook Express
2011-11-07 15:32:24 ----DC---- C:\Program Files\Messenger
2011-11-07 15:31:59 ----DC---- C:\WINDOWS\WinSxS
2011-11-07 15:28:39 ----DC---- C:\WINDOWS\ehome
2011-11-07 15:28:38 ----DC---- C:\WINDOWS\system32\inetsrv
2011-11-07 15:28:38 ----DC---- C:\WINDOWS\ime
2011-11-07 15:28:38 ----DC---- C:\WINDOWS\Help
2011-11-07 15:28:23 ----DC---- C:\WINDOWS\system32\cs-CZ
2011-11-07 15:28:22 ----DC---- C:\WINDOWS\system32\usmt
2011-11-07 15:28:22 ----DC---- C:\Program Files\movie maker
2011-11-07 15:28:21 ----SHDC---- C:\WINDOWS\Installer
2011-11-07 15:28:20 ----DC---- C:\WINDOWS\PeerNet
2011-11-07 15:26:06 ----DC---- C:\WINDOWS\ServicePackFiles
2011-11-07 15:26:02 ----DC---- C:\WINDOWS\system32\Restore
2011-11-07 15:26:01 ----DC---- C:\WINDOWS\system32\npp
2011-11-07 15:26:01 ----DC---- C:\WINDOWS\msagent
2011-11-07 15:26:00 ----DC---- C:\WINDOWS\srchasst
2011-11-07 15:26:00 ----DC---- C:\Program Files\NetMeeting
2011-11-07 15:25:59 ----DC---- C:\WINDOWS\system32\Com
2011-11-07 15:25:58 ----DC---- C:\Program Files\Windows NT
2011-11-07 15:25:58 ----DC---- C:\Program Files\Windows Media Player
2011-11-07 15:25:57 ----DC---- C:\Program Files\Common Files\System
2011-11-07 15:25:46 ----DC---- C:\WINDOWS\system32\oobe
2011-11-07 15:25:45 ----DC---- C:\WINDOWS\system
2011-11-07 15:08:33 ----D---- C:\Documents and Settings\Knejfl\Data aplikací\Desktopicon
2011-11-07 14:47:13 ----D---- C:\Config.Msi
2011-11-07 14:23:06 ----AC---- C:\WINDOWS\NeroDigital.ini
2011-11-07 13:53:08 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-11-07 13:38:36 ----SHD---- C:\System Volume Information
2011-11-07 13:09:34 ----A---- C:\WINDOWS\system.ini
2011-11-07 13:09:19 ----DC---- C:\WINDOWS\system32\drivers\etc
2011-11-07 13:09:18 ----DC---- C:\Program Files\Common Files
2011-11-07 13:07:41 ----DC---- C:\WINDOWS\system32\config
2011-11-07 13:06:34 ----DC---- C:\Program Files\XfireXO
2011-11-07 13:06:34 ----DC---- C:\Program Files\Free_Lunch_Design
2011-11-07 12:35:18 ----SDC---- C:\WINDOWS\Tasks
2011-11-07 12:22:15 ----RASH---- C:\boot.ini
2011-11-07 12:00:03 ----DC---- C:\Documents and Settings\Knejfl\Data aplikací\uTorrent
2011-11-06 18:45:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\PMB Files
2011-10-30 18:58:29 ----ADC---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2011-10-30 18:55:43 ----DC---- C:\Program Files\Java
2011-10-28 18:24:05 ----HDC---- C:\WINDOWS\$NtUninstallKB967715_0$
2011-10-28 12:23:37 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2011-10-27 13:10:12 ----DC---- C:\Temp
2011-10-23 07:30:50 ----HDC---- C:\Program Files\InstallShield Installation Information
2011-10-22 17:33:48 ----DC---- C:\WINDOWS\system32\DirectX
2011-10-22 17:33:45 ----RSDC---- C:\WINDOWS\assembly
2011-10-10 18:49:31 ----DC---- C:\Documents and Settings\Knejfl\Data aplikací\TS3Client

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 CLBStor;CyberLink InstantBurn UDF Reader Help Driver; C:\WINDOWS\system32\drivers\CLBStor.sys [2006-07-31 10368]
R0 hotcore3;hotcore3; C:\WINDOWS\system32\drivers\hotcore3.sys [2007-11-06 39472]
R0 nvatabus;nvatabus; C:\WINDOWS\system32\DRIVERS\nvatabus.sys [2004-12-07 87936]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\WINDOWS\System32\drivers\sfsync02.sys [2005-08-10 19968]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-11-03 63488]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2008-09-15 717296]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-09-06 30808]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43008]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-09-06 34392]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-09-06 442200]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-09-06 320856]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-09-06 52568]
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-03-04 79424]
R1 Pivot;Pivot; C:\WINDOWS\System32\drivers\pivot.sys [2009-03-03 17465]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-03-01 28352]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2008-06-20 225856]
R1 Uim_IM;UIM Drive Backup Image Plugin; C:\WINDOWS\System32\Drivers\Uim_IM.sys [2007-11-06 131672]
R1 UimBus;Universal Image Mounter Controller; C:\WINDOWS\system32\DRIVERS\UimBus.sys [2007-11-06 32080]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-09-06 20568]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-09-06 110552]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2010-08-05 281760]
R2 CLBUDFR;CyberLink UDF Filesystem; C:\WINDOWS\system32\drivers\CLBUDFR.sys [2006-07-31 180352]
R2 ESLWireAC;ESLWireAC; \??\C:\WINDOWS\system32\drivers\ESLWireACD.sys []
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-14 88192]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2010-08-05 25888]
R2 npf;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2009-11-16 50704]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-14 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-25 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-25 55936]
R2 TBPanel;TBPanel; C:\WINDOWS\system32\drivers\TBPanel.sys [2007-03-16 12256]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-12-01 2300928]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2011-03-26 25280]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ipgd;ASUS NX1101 Gigabit Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\ipgdnd51.sys [2005-01-28 33536]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-10-22 9623680]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2004-11-24 33408]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2004-11-24 12928]
R3 PdiPorts;Portrait Displays low level device driver; C:\WINDOWS\System32\Drivers\PdiPorts.sys [2009-12-17 17136]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-14 12288]
S1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 61883;61883 Unit Device; C:\WINDOWS\system32\DRIVERS\61883.sys [2008-04-14 48128]
S3 absx78r9;absx78r9; C:\WINDOWS\system32\drivers\absx78r9.sys []
S3 Avc;AVC Device; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-14 38912]
S3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
S3 BioNT_BS;BioNT_BS; \??\D:\Filmy\partition magic\bluescrn\BioNT_bs.sys []
S3 Cardex;Cardex; \??\C:\WINDOWS\system32\drivers\TBPANEL.SYS []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 EagleXNt;EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 GarenaPEngine;GarenaPEngine; \??\C:\DOCUME~1\Knejfl\LOCALS~1\Temp\KHX151.tmp []
S3 GGSAFERDriver;GGSAFER Driver; \??\D:\Filmy\Games\garena\safedrv.sys []
S3 GMSIPCI;GMSIPCI; \??\F:\INSTALL\GMSIPCI.SYS []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2004-06-21 51088]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2004-06-21 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2004-06-21 21744]
S3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2008-04-14 51200]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 pivotmou;Pivot Mouse/Pointers Filter Driver; \??\C:\WINDOWS\system32\drivers\pivotmou.sys []
S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 TrueSight;TrueSight; \??\c:\windows\system32\drivers\TrueSight.sys []
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-09-06 44768]
R2 DTSRVC;Portrait Displays Display Tune Service; C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe [2010-01-28 80496]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-10-03 153376]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-10-16 156776]
R2 NwSapAgent;Agent SAP; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 PdiService;Portrait Displays SDK Service; C:\Program Files\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2009-12-17 109168]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-06-23 75136]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2011-09-22 214520]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2005-01-31 49152]
S2 AntiVirService;Avira AntiVir Personal – Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe []
S2 AntiVirScheduler;Avira AntiVir Personal – Free Antivirus Scheduler; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe []
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2008-09-06 72704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; D:\Programy\Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 MSSQL$SONY_MEDIAMGR;MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe -sSONY_MEDIAMGR []
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2011-02-27 4010312]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-03-18 65536]
S3 SQLAgent$SONY_MEDIAMGR;SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE -i SONY_MEDIAMGR []
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#12 Příspěvek od **vyosek** » 07 lis 2011 16:14

Spustte HJT a provedeme fixnuti polozek

HJT najdete zde C:\Program Files\trend micro\Knejfl.exe
Otevre se Vam okno, kliknete na Do a system scan only
V dalsim okne najdete radky které jsem Vam vypsal nize, vedle nich je ctverecek, do ktereho udelate zatrzitko
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\Knejfl\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\Knejfl\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
Kliknete na Fix checked (vlevo dole)
HJT se Vas zepta zda opravdu ANO, s tim souhlasite a je hotovo

Odinstalujte DAEMON Tools Toolbar

Muzete nahradit toho Spybota jak jsem psal

Nahrady za Spybota:
- Spyware Terminator - info o nem http://www.viry.cz/forum/viewtopic.php?f=29&t=44730
- SuperAntiSpyare - info o nem http://www.viry.cz/forum/viewtopic.php?f=29&t=51359
Samozrejme pouzivejte jen jeden z nich
Osobne doporucuji SuperAntiSpyware

Jeste bych daval pozor na to volne misto na disku (System drive C: has 1 GB (11%) free of 10 GB), stale je to dost malo

Jinak log vypada OK

VIRY.CZ

Facebook vir potřeboval bych pomoc

Facebook vir potřeboval bych pomoc

Re: Facebook vir potřeboval bych pomoc

Re: Facebook vir potřeboval bych pomoc

Re: Facebook vir potřeboval bych pomoc

Re: Facebook vir potřeboval bych pomoc

Re: Facebook vir potřeboval bych pomoc

Re: Facebook vir potřeboval bych pomoc

Re: Facebook vir potřeboval bych pomoc

Re: Facebook vir potřeboval bych pomoc

Re: Facebook vir potřeboval bych pomoc

Re: Facebook vir potřeboval bych pomoc

Re: Facebook vir potřeboval bych pomoc