problém pri spustení pc

Zpráva

zeroboyko · #1 Příspěvek od **zeroboyko** » 24 lis 2011 15:26

Dobrý deň...mám problém...počítač nabieha veľmi pomaly a niektoré aplikácie nechce spustiť...stalo sa mi to včera že sa zasekol a odvtedy nejde tak ako má...obnovenie systému sa nedá spustiť lebo vyskočí okno o chybe...windows explorer nabieha strašne pomaly až po niekoľkých minútach...prikladám log

Logfile of random's system information tool 1.09 (written by random/random)
Run by Chlapci at 2011-11-24 15:24:28
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 114 GB (75%) free of 153 GB
Total RAM: 3070 MB (80% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:24:37, on 24.11.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Chlapci\My Documents\Downloads\RSIT.exe
C:\Program Files\trend micro\Chlapci.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\JM\JMInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\System32\JMRaidSetup.exe boot
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
O4 - HKCU\..\Run: [Facebook Update] "C:\Documents and Settings\Chlapci\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 7744 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-823518204-113007714-725345543-1003Core.job
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-823518204-113007714-725345543-1003UA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-823518204-113007714-725345543-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-823518204-113007714-725345543-1003UA.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Chlapci\Application Data\Mozilla\Firefox\Profiles\623kf1kq.default

"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=1.1.11]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml

C:\Documents and Settings\Chlapci\Application Data\Mozilla\Firefox\Profiles\623kf1kq.default\extensions\
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-24 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-24 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-04-12 16132608]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"JMB36X IDE Setup"=C:\WINDOWS\JM\JMInsIDE.exe [2006-10-30 36864]
"36X Raid Configurer"=C:\WINDOWS\System32\JMRaidSetup.exe [2007-02-06 1953792]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-05-14 2029640]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2011-01-07 111208]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-01-07 13880424]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-11-04 1753192]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2008-06-19 570664]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-06-08 2221352]
"UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe []
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"LVCOMSX"=C:\WINDOWS\system32\LVCOMSX.EXE [2004-12-14 221184]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Google Update"=C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-10-21 136176]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-06-24 1840424]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"DAEMON Tools Pro Agent"=C:\Program Files\DAEMON Tools Pro\DTProAgent.exe []
"Facebook Update"=C:\Documents and Settings\Chlapci\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe [2011-11-04 137536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSU_agent]
C:\Program Files\Nokia\Nokia Software Updater\nsu3ui_agent.exe [2011-10-19 190768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Winamp\winamp.exe"="C:\Program Files\Winamp\winamp.exe:*:Enabled:Winamp"
"C:\Program Files\Common Files\Nero\Nero Web\SetupX.exe"="C:\Program Files\Common Files\Nero\Nero Web\SetupX.exe:*:Enabled:Nero ControlCenter"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\VideoLAN\VLC\vlc.exe"="C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"C:\Program Files\Ubisoft\James Cameron's AVATAR - THE GAME\bin\Avatar.exe"="C:\Program Files\Ubisoft\James Cameron's AVATAR - THE GAME\bin\Avatar.exe:*:Enabled:James Cameron's AVATAR(tm): THE GAME"
"C:\Program Files\Ubisoft\James Cameron's AVATAR - THE GAME\bin\AvatarLauncher.exe"="C:\Program Files\Ubisoft\James Cameron's AVATAR - THE GAME\bin\AvatarLauncher.exe:*:Enabled:Updater"
"C:\Documents and Settings\Chlapci\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe"="C:\Documents and Settings\Chlapci\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=lvcodec2.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll

======List of files/folders created in the last 1 month======

2011-11-21 21:36:55 ----D---- C:\Program Files\The Elder Scrolls V Skyrim
2011-11-21 16:40:31 ----D---- C:\Program Files\Common Files\Windows Live
2011-11-17 09:25:07 ----D---- C:\WINDOWS\pss
2011-11-16 22:12:29 ----D---- C:\Documents and Settings\Chlapci\Application Data\Nokia
2011-11-16 22:12:28 ----D---- C:\Documents and Settings\Chlapci\Application Data\PC Suite
2011-11-16 22:12:28 ----D---- C:\Documents and Settings\All Users\Application Data\PC Suite
2011-11-16 22:12:07 ----D---- C:\Program Files\Common Files\PCSuite
2011-11-16 22:12:00 ----D---- C:\Program Files\Common Files\Nokia
2011-11-16 22:11:53 ----D---- C:\Program Files\DIFX
2011-11-16 22:11:52 ----A---- C:\WINDOWS\system32\drivers\pccsmcfd.sys
2011-11-16 22:11:44 ----D---- C:\Program Files\PC Connectivity Solution
2011-11-16 22:11:38 ----A---- C:\WINDOWS\system32\drivers\nmwcdnsuc.sys
2011-11-16 22:11:37 ----A---- C:\WINDOWS\system32\drivers\nmwcdnsu.sys
2011-11-16 22:11:35 ----A---- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys
2011-11-16 22:11:34 ----A---- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys
2011-11-16 22:11:33 ----A---- C:\WINDOWS\system32\drivers\ccdcmbo.sys
2011-11-16 22:11:32 ----A---- C:\WINDOWS\system32\drivers\ccdcmb.sys
2011-11-16 22:11:30 ----D---- C:\Program Files\Nokia
2011-11-16 22:10:37 ----D---- C:\Documents and Settings\All Users\Application Data\Installations
2011-11-16 22:09:10 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2011-11-16 22:08:21 ----N---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2011-11-16 22:08:07 ----HDC---- C:\WINDOWS\$NtUninstallWdf01009$
2011-11-16 22:06:55 ----A---- C:\WINDOWS\system32\drivers\prodigy.sys
2011-11-16 22:06:41 ----D---- C:\Program Files\NSS
2011-11-12 14:51:49 ----D---- C:\Program Files\Free M4a to MP3 Converter
2011-11-12 09:25:44 ----A---- C:\Documents and Settings\Chlapci\Application Data\cdr.ini
2011-11-12 09:25:42 ----A---- C:\WINDOWS\WM8EUTIL.exe
2011-11-12 09:25:41 ----D---- C:\Program Files\CD to MP3 Freeware
2011-11-11 07:32:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2641690$
2011-11-09 21:40:02 ----D---- C:\WINDOWS\Sun
2011-11-09 12:59:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2011-11-06 10:55:51 ----D---- C:\Mp3 Output
2011-11-06 10:55:48 ----D---- C:\Program Files\Smallvideosoft
2011-11-06 10:55:48 ----A---- C:\WINDOWS\system32\mp3Media2.dll
2011-11-06 10:50:10 ----A---- C:\WINDOWS\Infob.dat
2011-11-06 10:50:10 ----A---- C:\WINDOWS\Infoa.dat
2011-11-06 10:49:06 ----D---- C:\Program Files\Total Video Converter
2011-11-06 10:32:11 ----D---- C:\Documents and Settings\Chlapci\Application Data\Mozilla
2011-11-06 10:31:43 ----D---- C:\Program Files\Mozilla Firefox
2011-11-06 10:01:48 ----D---- C:\Downloads
2011-11-04 21:00:46 ----A---- C:\WINDOWS\system32\drivers\MSTEE.sys
2011-11-04 21:00:44 ----A---- C:\WINDOWS\system32\drivers\NdisIP.sys
2011-11-04 21:00:42 ----A---- C:\WINDOWS\system32\drivers\StreamIP.sys
2011-11-04 21:00:40 ----A---- C:\WINDOWS\system32\drivers\SLIP.sys
2011-11-04 21:00:38 ----A---- C:\WINDOWS\system32\drivers\WSTCODEC.SYS
2011-11-04 21:00:35 ----A---- C:\WINDOWS\system32\drivers\NABTSFEC.sys
2011-11-04 21:00:33 ----A---- C:\WINDOWS\system32\drivers\CCDECODE.sys
2011-11-04 21:00:27 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2011-11-04 20:59:38 ----RA---- C:\WINDOWS\system32\InstMed.exe
2011-11-04 20:59:14 ----A---- C:\WINDOWS\system32\drivers\LV561AV.SYS
2011-11-04 20:59:13 ----A---- C:\WINDOWS\system32\LVUI2RC.dll
2011-11-04 20:59:13 ----A---- C:\WINDOWS\system32\lvcoinst.ini
2011-11-04 20:59:13 ----A---- C:\WINDOWS\system32\lvcoinst.dll
2011-11-04 20:59:13 ----A---- C:\WINDOWS\system32\drivers\LVUSBSta.sys
2011-11-04 20:59:12 ----A---- C:\WINDOWS\system32\LVUI2.dll
2011-11-04 20:59:12 ----A---- C:\WINDOWS\system32\lvcodec2.dll
2011-11-04 20:58:53 ----D---- C:\Program Files\Common Files\Logitech
2011-11-04 20:57:07 ----A---- C:\WINDOWS\IsUninst.exe
2011-11-04 20:57:06 ----A---- C:\WINDOWS\_delis32.ini
2011-11-04 16:38:44 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2011-11-04 07:12:42 ----D---- C:\9378190148ebf09c5c651a3a
2011-11-03 07:37:08 ----D---- C:\34d99866d06f3bdc712d2f5a37
2011-11-02 18:55:58 ----D---- C:\Program Files\MSBuild
2011-11-02 18:55:53 ----D---- C:\WINDOWS\system32\XPSViewer
2011-11-02 18:55:47 ----D---- C:\Program Files\Reference Assemblies
2011-11-02 18:55:23 ----N---- C:\WINDOWS\system32\spmsg2.dll
2011-11-02 18:36:41 ----RSD---- C:\WINDOWS\assembly
2011-11-02 18:35:51 ----D---- C:\Program Files\Microsoft.NET
2011-11-02 18:35:47 ----D---- C:\WINDOWS\Microsoft.NET
2011-11-02 18:20:16 ----D---- C:\WINDOWS\system32\appmgmt
2011-11-02 17:18:52 ----D---- C:\Program Files\AnalogX
2011-11-02 17:10:47 ----D---- C:\Documents and Settings\Chlapci\Application Data\Audacity
2011-11-02 17:05:38 ----A---- C:\WINDOWS\system32\MSVCR71.DLL
2011-11-02 17:05:38 ----A---- C:\WINDOWS\system32\MSVCP71.DLL
2011-11-02 17:05:38 ----A---- C:\WINDOWS\system32\MFC71U.DLL
2011-11-02 17:05:38 ----A---- C:\WINDOWS\system32\MFC71.DLL
2011-11-02 17:05:38 ----A---- C:\WINDOWS\system32\ATL71.DLL
2011-11-02 17:01:09 ----D---- C:\Documents and Settings\Chlapci\Application Data\Ahead
2011-11-01 12:47:00 ----D---- C:\Documents and Settings\Chlapci\Application Data\Mp3tag
2011-11-01 12:45:07 ----D---- C:\Program Files\Mp3tag
2011-10-31 16:03:12 ----D---- C:\Documents and Settings\All Users\Application Data\Solidshield
2011-10-31 15:43:02 ----D---- C:\Program Files\Ubisoft
2011-10-31 14:46:18 ----D---- C:\!KillBox
2011-10-31 13:32:49 ----D---- C:\Program Files\DreamBoxEdit
2011-10-31 13:12:44 ----D---- C:\Documents and Settings\Chlapci\Application Data\GlobalSCAPE
2011-10-31 13:12:44 ----D---- C:\Documents and Settings\All Users\Application Data\GlobalSCAPE
2011-10-31 12:59:52 ----A---- C:\WINDOWS\UC.PIF
2011-10-31 12:59:52 ----A---- C:\WINDOWS\RAR.PIF
2011-10-31 12:59:52 ----A---- C:\WINDOWS\PKZIP.PIF
2011-10-31 12:59:52 ----A---- C:\WINDOWS\PKUNZIP.PIF
2011-10-31 12:59:52 ----A---- C:\WINDOWS\NOCLOSE.PIF
2011-10-31 12:59:52 ----A---- C:\WINDOWS\LHA.PIF
2011-10-31 12:59:52 ----A---- C:\WINDOWS\ARJ.PIF
2011-10-31 12:59:51 ----D---- C:\totalcmd
2011-10-31 12:59:51 ----D---- C:\Documents and Settings\Chlapci\Application Data\GHISLER
2011-10-31 12:34:42 ----D---- C:\Documents and Settings\Chlapci\Application Data\vlc
2011-10-31 12:18:53 ----D---- C:\Program Files\VideoLAN
2011-10-30 23:51:44 ----D---- C:\Documents and Settings\Chlapci\Application Data\Rovio
2011-10-30 23:50:11 ----D---- C:\Program Files\Rovio
2011-10-30 23:32:57 ----D---- C:\Program Files\IQ Publishing
2011-10-30 21:57:25 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2011-10-30 21:57:25 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2011-10-30 21:57:25 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2011-10-30 21:57:24 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2011-10-30 21:57:23 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2011-10-30 21:57:22 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2011-10-30 21:57:22 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2011-10-30 21:57:22 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2011-10-30 21:57:21 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2011-10-30 21:57:21 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2011-10-30 21:57:21 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2011-10-30 21:57:20 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2011-10-30 21:57:20 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2011-10-30 21:57:19 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2011-10-30 21:57:18 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2011-10-30 21:57:17 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2011-10-30 21:57:16 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2011-10-30 21:57:16 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2011-10-30 21:40:39 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2011-10-30 21:40:39 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2011-10-30 21:40:38 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2011-10-30 21:40:37 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2011-10-30 21:40:37 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2011-10-30 21:40:37 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2011-10-30 21:40:36 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2011-10-30 21:40:36 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2011-10-30 21:40:36 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2011-10-30 21:40:35 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2011-10-30 21:40:35 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2011-10-30 21:40:35 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2011-10-30 21:40:34 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2011-10-30 21:40:34 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2011-10-30 21:40:33 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2011-10-30 21:40:33 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2011-10-30 21:40:33 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2011-10-30 21:40:32 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2011-10-30 21:40:32 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2011-10-30 21:40:32 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2011-10-30 21:40:31 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2011-10-30 21:40:31 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2011-10-30 21:40:30 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2011-10-30 21:40:30 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2011-10-30 21:40:29 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2011-10-30 21:40:29 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2011-10-30 21:40:29 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2011-10-30 21:40:28 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2011-10-30 21:40:28 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2011-10-30 21:40:27 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2011-10-30 21:40:27 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2011-10-30 21:40:27 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2011-10-30 21:40:26 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2011-10-30 21:40:26 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2011-10-30 21:40:25 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2011-10-30 21:40:25 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2011-10-30 21:40:24 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2011-10-30 21:40:23 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2011-10-30 21:40:23 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2011-10-30 21:40:23 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2011-10-30 21:40:22 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2011-10-30 21:40:22 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2011-10-30 21:40:22 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2011-10-30 21:40:21 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2011-10-30 21:40:21 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2011-10-30 21:40:21 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2011-10-30 21:40:20 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2011-10-30 21:40:19 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2011-10-30 21:40:18 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2011-10-30 21:40:18 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2011-10-30 21:40:15 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2011-10-30 21:40:15 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2011-10-30 21:40:15 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2011-10-30 21:40:14 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2011-10-30 21:40:14 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2011-10-30 21:40:14 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2011-10-30 21:40:13 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2011-10-30 21:40:13 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2011-10-30 21:40:13 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2011-10-30 21:40:12 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2011-10-30 21:40:12 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2011-10-30 21:40:11 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2011-10-30 21:40:11 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2011-10-30 21:40:11 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2011-10-30 21:40:10 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2011-10-30 21:40:10 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2011-10-30 21:40:09 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2011-10-30 21:40:09 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2011-10-30 21:40:08 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2011-10-30 21:20:57 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Pro
2011-10-30 21:20:32 ----D---- C:\Documents and Settings\Chlapci\Application Data\DAEMON Tools Pro
2011-10-30 21:17:32 ----D---- C:\Program Files\DAEMON Tools Pro
2011-10-30 21:13:16 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2011-10-29 11:01:20 ----D---- C:\Program Files\SpeedFan
2011-10-27 12:25:16 ----A---- C:\WINDOWS\system32\ptpusb.dll
2011-10-27 12:25:15 ----A---- C:\WINDOWS\system32\ptpusd.dll
2011-10-27 12:25:14 ----A---- C:\WINDOWS\system32\drivers\usbscan.sys
2011-10-26 17:42:59 ----A---- C:\WINDOWS\ntbtlog.txt

======List of files/folders modified in the last 1 month======

2011-11-24 15:24:37 ----D---- C:\WINDOWS\Temp
2011-11-24 15:24:30 ----D---- C:\Program Files\trend micro
2011-11-24 15:24:12 ----D---- C:\WINDOWS\Prefetch
2011-11-24 15:15:46 ----D---- C:\Documents and Settings
2011-11-23 14:28:30 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-11-23 07:15:32 ----A---- C:\WINDOWS\NeroDigital.ini
2011-11-22 18:53:52 ----SHD---- C:\WINDOWS\Installer
2011-11-22 18:53:52 ----D---- C:\WINDOWS\system32
2011-11-22 14:36:20 ----D---- C:\WINDOWS
2011-11-21 22:08:04 ----D---- C:\Documents and Settings\Chlapci\Application Data\uTorrent
2011-11-21 21:43:33 ----HD---- C:\WINDOWS\inf
2011-11-21 21:42:31 ----D---- C:\WINDOWS\system32\CatRoot2
2011-11-21 21:42:19 ----D---- C:\WINDOWS\system32\DirectX
2011-11-21 21:36:55 ----RD---- C:\Program Files
2011-11-21 16:40:31 ----D---- C:\Program Files\Common Files
2011-11-21 16:40:07 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2011-11-19 11:28:44 ----D---- C:\WINDOWS\security
2011-11-17 09:26:46 ----RASH---- C:\boot.ini
2011-11-17 09:26:46 ----A---- C:\WINDOWS\win.ini
2011-11-17 09:26:46 ----A---- C:\WINDOWS\system.ini
2011-11-16 23:57:13 ----D---- C:\WINDOWS\WinSxS
2011-11-16 23:14:54 ----SD---- C:\Documents and Settings\Chlapci\Application Data\Microsoft
2011-11-16 22:34:05 ----D---- C:\WINDOWS\system32\drivers
2011-11-16 22:12:21 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-11-16 22:10:55 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-11-11 07:32:08 ----A---- C:\WINDOWS\imsins.BAK
2011-11-11 06:40:48 ----HD---- C:\WINDOWS\$hf_mig$
2011-11-09 12:59:00 ----A---- C:\WINDOWS\system32\MRT.exe
2011-11-06 10:49:12 ----RSD---- C:\WINDOWS\Fonts
2011-11-04 20:59:46 ----D---- C:\WINDOWS\twain_32
2011-11-04 20:56:20 ----D---- C:\Program Files\Common Files\InstallShield
2011-11-04 20:53:18 ----SD---- C:\WINDOWS\Tasks
2011-11-04 16:56:08 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2011-11-04 16:54:55 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-11-04 16:51:47 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-11-04 16:38:58 ----D---- C:\WINDOWS\system32\CatRoot
2011-11-04 07:13:18 ----D---- C:\WINDOWS\system32\en-us
2011-11-02 18:55:31 ----D---- C:\WINDOWS\system32\spool
2011-11-02 18:35:48 ----D---- C:\WINDOWS\system32\mui
2011-11-02 17:56:47 ----HD---- C:\Program Files\InstallShield Installation Information
2011-11-02 17:25:17 ----D---- C:\Documents and Settings\Chlapci\Application Data\Winamp
2011-10-30 21:55:07 ----D---- C:\Temp
2011-10-30 21:54:03 ----D---- C:\JM
2011-10-26 18:26:01 ----D---- C:\Documents and Settings\Chlapci\Application Data\Skype
2011-10-26 18:24:47 ----D---- C:\Documents and Settings\Chlapci\Application Data\skypePM
2011-10-25 06:20:50 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 JGOGO;JMicron Hot-Plug Driver; C:\WINDOWS\System32\DRIVERS\JGOGO.sys [2006-02-07 6912]
R0 JRAID;JRAID; C:\WINDOWS\System32\DRIVERS\jraid.sys [2007-02-16 44928]
R0 ohci1394;NEC FireWarden OHCI Compliant IEEE 1394 Host Controller; C:\WINDOWS\System32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2011-03-04 45648]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2011-03-18 25240]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2011-10-30 685816]
R1 ehdrv;ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [2009-05-14 107256]
R1 epfwtdir;epfwtdir; C:\WINDOWS\System32\DRIVERS\epfwtdir.sys [2009-05-14 94360]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-13 36352]
R2 eamon;eamon; C:\WINDOWS\System32\DRIVERS\eamon.sys [2009-05-14 114472]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\System32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-23 4402176]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\DRIVERS\LVUSBSta.sys [2004-10-11 22016]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2002-08-29 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-01-08 9888672]
R3 PID_0928;Labtec WebCam(PID_0928); C:\WINDOWS\system32\DRIVERS\LV561AV.SYS [2004-10-11 211712]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\System32\DRIVERS\Rtenicxp.sys [2007-03-01 90496]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 a9gw5026;a9gw5026; C:\WINDOWS\system32\drivers\a9gw5026.sys []
S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-05-18 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-05-18 23168]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\WINDOWS\system32\drivers\nmwcdnsu.sys [2011-05-18 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\WINDOWS\system32\drivers\nmwcdnsuc.sys [2011-05-18 8576]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 PRODIGY;PRODIGY; C:\WINDOWS\System32\Drivers\PRODIGY.SYS [2006-08-29 32377]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-05-18 8192]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-05-18 8192]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2005-01-28 18944]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-05-14 731840]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-10-24 153376]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-06-08 877864]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2011-01-07 156776]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-05-14 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#2 Příspěvek od **Rudy** » 24 lis 2011 19:16

Zdravím!
Poprosím o log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

zeroboyko · #3 Příspěvek od **zeroboyko** » 24 lis 2011 20:25

ComboFix 11-11-24.01 - Chlapci 24.11.2011 20:06:47.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.421.1033.18.3070.2402 [GMT 1:00]
Running from: c:\documents and settings\Chlapci\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Chlapci\Application Data\Toolbar4
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\tsoc.log
.
Infected copy of c:\windows\system32\mshtml.dll was found and disinfected
Restored copy from - c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mshtml.dll
.
.
((((((((((((((((((((((((( Files Created from 2011-10-24 to 2011-11-24 )))))))))))))))))))))))))))))))
.
.
2011-11-24 14:15 . 2011-11-24 14:15 -------- d-----w- c:\documents and settings\Administrator
2011-11-21 20:46 . 2011-11-21 20:46 -------- d-----w- c:\documents and settings\Chlapci\Local Settings\Application Data\Skyrim
2011-11-21 20:36 . 2011-11-21 20:46 -------- d-----w- c:\program files\The Elder Scrolls V Skyrim
2011-11-21 15:40 . 2011-11-21 15:40 -------- d-----w- c:\program files\Common Files\Windows Live
2011-11-16 21:29 . 2011-11-16 21:29 73728 ----a-r- c:\documents and settings\Chlapci\Application Data\Microsoft\Installer\{F8E3A0F8-53A4-4FD8-9986-C90A3EA7C3B6}\NewShortcut47_74B9CE5DF1F4447F982DCA29A461B529.exe
2011-11-16 21:29 . 2011-11-16 21:29 73728 ----a-r- c:\documents and settings\Chlapci\Application Data\Microsoft\Installer\{F8E3A0F8-53A4-4FD8-9986-C90A3EA7C3B6}\NewShortcut46_74B9CE5DF1F4447F982DCA29A461B529.exe
2011-11-16 21:29 . 2011-11-16 21:29 53248 ----a-r- c:\documents and settings\Chlapci\Application Data\Microsoft\Installer\{F8E3A0F8-53A4-4FD8-9986-C90A3EA7C3B6}\ARPPRODUCTICON.exe
2011-11-16 21:29 . 2011-11-16 21:29 49152 ----a-r- c:\documents and settings\Chlapci\Application Data\Microsoft\Installer\{F8E3A0F8-53A4-4FD8-9986-C90A3EA7C3B6}\Uninstall_QA_OTI_H_FE5D756F71E147C4972AD6775344B40B.exe
2011-11-16 21:29 . 2011-11-16 21:29 49152 ----a-r- c:\documents and settings\Chlapci\Application Data\Microsoft\Installer\{F8E3A0F8-53A4-4FD8-9986-C90A3EA7C3B6}\NewShortcut2_1C7B7089989A424FB39D41A32581C775.exe
2011-11-16 21:29 . 2011-11-16 21:29 -------- d-----w- c:\documents and settings\Chlapci\Local Settings\Application Data\Nokia
2011-11-16 21:12 . 2011-11-21 15:34 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Nokia
2011-11-16 21:12 . 2011-11-16 21:13 -------- d-----w- c:\documents and settings\Chlapci\Application Data\PC Suite
2011-11-16 21:12 . 2011-11-16 21:12 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Suite
2011-11-16 21:12 . 2011-11-16 21:12 -------- d-----w- c:\program files\Common Files\PCSuite
2011-11-16 21:12 . 2011-11-16 21:12 -------- d-----w- c:\program files\Common Files\Nokia
2011-11-16 21:11 . 2011-11-16 21:11 -------- d-----w- c:\program files\DIFX
2011-11-16 21:11 . 2008-08-26 09:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2011-11-16 21:11 . 2011-11-16 21:11 -------- d-----w- c:\program files\PC Connectivity Solution
2011-11-16 21:11 . 2011-05-18 09:09 8576 ----a-w- c:\windows\system32\drivers\nmwcdnsuc.sys
2011-11-16 21:11 . 2011-05-18 09:09 137600 ----a-w- c:\windows\system32\drivers\nmwcdnsu.sys
2011-11-16 21:11 . 2011-05-18 09:12 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys
2011-11-16 21:11 . 2011-05-18 09:12 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys
2011-11-16 21:11 . 2011-05-18 09:12 23168 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys
2011-11-16 21:11 . 2011-05-18 09:12 18176 ----a-w- c:\windows\system32\drivers\ccdcmb.sys
2011-11-16 21:11 . 2011-11-17 09:13 -------- d-----w- c:\program files\Nokia
2011-11-16 21:10 . 2011-11-16 21:27 -------- d-----w- c:\documents and settings\All Users\Application Data\Installations
2011-11-16 21:09 . 2008-04-13 23:15 26112 -c--a-w- c:\windows\system32\dllcache\usbser.sys
2011-11-16 21:09 . 2008-04-13 23:15 26112 ----a-w- c:\windows\system32\drivers\usbser.sys
2011-11-16 21:08 . 2008-11-07 17:55 16928 ------w- c:\windows\system32\spmsgXP_2k3.dll
2011-11-16 21:06 . 2006-08-29 14:56 32377 ----a-w- c:\windows\system32\drivers\prodigy.sys
2011-11-16 21:06 . 2011-11-16 21:06 -------- d-----w- c:\program files\NSS
2011-11-12 13:51 . 2011-11-12 13:51 -------- d-----w- c:\program files\Free M4a to MP3 Converter
2011-11-12 08:25 . 2001-03-23 15:29 880912 ----a-w- c:\windows\WM8EUTIL.exe
2011-11-12 08:25 . 2011-11-12 08:32 -------- d-----w- c:\program files\CD to MP3 Freeware
2011-11-09 20:40 . 2011-11-09 20:40 -------- d-----w- c:\windows\Sun
2011-11-06 09:55 . 2011-11-06 09:57 -------- d-----w- C:\Mp3 Output
2011-11-06 09:55 . 2011-11-06 09:55 -------- d-----w- c:\program files\Smallvideosoft
2011-11-06 09:55 . 2009-06-08 14:33 8676883 ----a-w- c:\windows\system32\mp3Media2.dll
2011-11-06 09:49 . 2011-11-06 09:55 -------- d-----w- c:\program files\Total Video Converter
2011-11-06 09:38 . 2011-11-06 09:40 -------- d-----w- c:\documents and settings\Chlapci\dwhelper
2011-11-06 09:34 . 2011-11-17 08:53 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-06 09:32 . 2011-11-06 09:32 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Mozilla
2011-11-06 09:01 . 2011-11-06 09:01 -------- d-----w- C:\Downloads
2011-11-04 19:59 . 2004-12-14 18:16 53248 ----a-r- c:\windows\system32\InstMed.exe
2011-11-04 19:59 . 2004-10-11 17:22 211712 ----a-w- c:\windows\system32\drivers\LV561AV.SYS
2011-11-04 19:59 . 2004-10-11 17:21 372736 ----a-w- c:\windows\system32\LVUI2RC.dll
2011-11-04 19:59 . 2004-10-11 17:18 22016 ----a-w- c:\windows\system32\drivers\LVUSBSta.sys
2011-11-04 19:59 . 2004-10-11 17:14 106496 ----a-w- c:\windows\system32\lvcoinst.dll
2011-11-04 19:59 . 2004-10-11 17:18 204800 ----a-w- c:\windows\system32\LVUI2.dll
2011-11-04 19:59 . 2004-10-11 17:16 204800 ----a-w- c:\windows\system32\lvcodec2.dll
2011-11-04 19:58 . 2011-11-04 19:58 -------- d-----w- c:\program files\Common Files\Logitech
2011-11-04 19:57 . 1998-10-29 15:45 306688 ----a-w- c:\windows\IsUninst.exe
2011-11-04 19:56 . 2001-09-05 03:18 77824 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2011-11-04 19:56 . 2001-09-05 03:18 225280 ----a-w- c:\program files\Common Files\InstallShield\IScript\iscript.dll
2011-11-04 19:56 . 2001-09-05 03:14 176128 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2011-11-04 19:56 . 2001-09-05 03:13 32768 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
2011-11-04 19:56 . 2001-09-05 12:24 610436 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe
2011-11-04 19:53 . 2011-11-04 19:53 -------- d-----w- c:\documents and settings\Chlapci\Local Settings\Application Data\Facebook
2011-11-04 06:12 . 2011-11-04 06:12 -------- d-----w- C:\9378190148ebf09c5c651a3a
2011-11-03 06:37 . 2011-11-03 06:37 -------- d-----w- C:\34d99866d06f3bdc712d2f5a37
2011-11-02 17:55 . 2011-11-02 17:55 -------- d-----w- c:\program files\MSBuild
2011-11-02 17:55 . 2011-11-04 06:13 -------- d-----w- c:\windows\system32\XPSViewer
2011-11-02 17:55 . 2011-11-02 17:55 -------- d-----w- c:\program files\Reference Assemblies
2011-11-02 17:55 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2011-11-02 17:55 . 2006-06-29 12:07 14048 ------w- c:\windows\system32\spmsg2.dll
2011-11-02 17:35 . 2011-11-02 17:35 -------- d-----w- c:\program files\Microsoft.NET
2011-11-02 16:18 . 2011-11-02 16:18 -------- d-----w- c:\program files\AnalogX
2011-11-02 16:10 . 2011-11-02 16:16 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Audacity
2011-11-02 16:05 . 2003-03-19 06:19 1060864 ----a-w- c:\windows\system32\MFC71.DLL
2011-11-02 16:05 . 2003-03-19 06:12 1047552 ----a-w- c:\windows\system32\MFC71U.DLL
2011-11-02 16:05 . 2003-03-19 05:14 499712 ----a-w- c:\windows\system32\MSVCP71.DLL
2011-11-02 16:05 . 2003-03-19 04:05 89088 ----a-w- c:\windows\system32\ATL71.DLL
2011-11-02 16:05 . 2003-02-21 13:42 348160 ----a-w- c:\windows\system32\MSVCR71.DLL
2011-11-02 16:01 . 2011-11-02 16:01 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Ahead
2011-11-01 20:16 . 2011-11-01 20:16 -------- d-----w- c:\documents and settings\Chlapci\Local Settings\Application Data\Mozilla
2011-11-01 11:47 . 2011-11-21 15:32 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Mp3tag
2011-11-01 11:45 . 2011-11-01 11:45 -------- d-----w- c:\program files\Mp3tag
2011-10-31 15:03 . 2011-10-31 15:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Solidshield
2011-10-31 14:43 . 2011-10-31 14:43 -------- d-----w- c:\program files\Ubisoft
2011-10-31 13:46 . 2011-10-31 13:46 -------- d-----w- C:\!KillBox
2011-10-31 13:19 . 2011-10-31 13:19 -------- d-----w- c:\documents and settings\Chlapci\Local Settings\Application Data\GHISLER
2011-10-31 12:32 . 2011-10-31 12:32 -------- d-----w- c:\program files\DreamBoxEdit
2011-10-31 12:12 . 2011-10-31 12:12 -------- d-----w- c:\documents and settings\Chlapci\Local Settings\Application Data\GlobalSCAPE
2011-10-31 12:12 . 2011-10-31 12:12 -------- d-----w- c:\documents and settings\Chlapci\Application Data\GlobalSCAPE
2011-10-31 12:12 . 2011-10-31 12:12 -------- d-----w- c:\documents and settings\All Users\Application Data\GlobalSCAPE
2011-10-31 11:59 . 2010-12-17 06:56 545 ----a-w- c:\windows\UC.PIF
2011-10-31 11:59 . 2010-12-17 06:56 545 ----a-w- c:\windows\RAR.PIF
2011-10-31 11:59 . 2010-12-17 06:56 545 ----a-w- c:\windows\NOCLOSE.PIF
2011-10-31 11:59 . 2010-12-17 06:56 545 ----a-w- c:\windows\LHA.PIF
2011-10-31 11:59 . 2010-12-17 06:56 545 ----a-w- c:\windows\ARJ.PIF
2011-10-31 11:59 . 2011-10-31 12:00 -------- d-----w- c:\documents and settings\Chlapci\Application Data\GHISLER
2011-10-31 11:59 . 2011-10-31 11:59 -------- d-----w- C:\totalcmd
2011-10-31 11:34 . 2011-11-20 12:51 -------- d-----w- c:\documents and settings\Chlapci\Application Data\vlc
2011-10-31 11:18 . 2011-10-31 11:18 -------- d-----w- c:\program files\VideoLAN
2011-10-30 22:51 . 2011-10-30 22:51 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Rovio
2011-10-30 22:50 . 2011-10-30 22:50 -------- d-----w- c:\program files\Rovio
2011-10-30 22:32 . 2011-10-30 22:32 -------- d-----w- c:\program files\IQ Publishing
2011-10-30 20:40 . 2009-03-09 14:27 453456 ----a-w- c:\windows\system32\d3dx10_41.dll
2011-10-30 20:20 . 2011-10-30 20:21 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Pro
2011-10-30 20:20 . 2011-10-30 20:20 -------- d-----w- c:\documents and settings\Chlapci\Application Data\DAEMON Tools Pro
2011-10-30 20:17 . 2011-10-30 20:24 -------- d-----w- c:\program files\DAEMON Tools Pro
2011-10-30 20:13 . 2011-10-30 20:13 685816 ----a-w- c:\windows\system32\drivers\sptd.sys
2011-10-29 10:01 . 2011-10-29 15:47 -------- d-----w- c:\program files\SpeedFan
2011-10-27 11:25 . 2001-08-17 20:36 5632 ----a-w- c:\windows\system32\ptpusb.dll
2011-10-27 11:25 . 2008-04-14 03:42 159232 ----a-w- c:\windows\system32\ptpusd.dll
2011-10-27 11:25 . 2008-04-13 22:15 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2011-10-27 11:25 . 2008-04-13 22:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-24 17:19 . 2011-10-24 17:19 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-10-24 17:19 . 2011-10-24 17:19 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-10-20 19:34 . 2011-10-20 19:34 315392 ----a-w- c:\windows\HideWin.exe
2011-10-20 19:33 . 2011-10-20 19:29 15600 ----a-w- c:\windows\gdrv.sys
2011-10-10 14:22 . 2011-10-20 18:12 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-09-28 07:06 . 2002-08-29 12:00 599040 ----a-w- c:\windows\system32\crypt32.dll
2011-09-26 09:41 . 2011-09-26 09:41 611328 ------w- c:\windows\system32\uiautomationcore.dll
2011-09-26 09:41 . 2002-08-29 12:00 220160 ----a-w- c:\windows\system32\oleacc.dll
2011-09-26 09:41 . 2002-08-29 12:00 20480 ----a-w- c:\windows\system32\oleaccrc.dll
2011-09-06 13:20 . 2002-08-29 12:00 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-09-29 07:32 . 2011-11-06 09:31 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424]
"Facebook Update"="c:\documents and settings\Chlapci\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe" [2011-11-04 137536]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-04-12 16132608]
"JMB36X IDE Setup"="c:\windows\JM\JMInsIDE.exe" [2006-10-30 36864]
"36X Raid Configurer"="c:\windows\System32\JMRaidSetup.exe" [2007-02-06 1953792]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-05-14 2029640]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2011-01-07 111208]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-01-07 13880424]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-11-04 1753192]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2008-06-19 570664]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-06-08 2221352]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2004-12-14 221184]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSU_agent]
2011-10-19 13:53 190768 ----a-w- c:\program files\Nokia\Nokia Software Updater\nsu3ui_agent.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Winamp\\winamp.exe"=
"c:\\Program Files\\Common Files\\Nero\\Nero Web\\SetupX.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\Ubisoft\\James Cameron's AVATAR - THE GAME\\bin\\Avatar.exe"=
"c:\\Program Files\\Ubisoft\\James Cameron's AVATAR - THE GAME\\bin\\AvatarLauncher.exe"=
"c:\\Documents and Settings\\Chlapci\\Local Settings\\Application Data\\Facebook\\Video\\Skype\\FacebookVideoCalling.exe"=
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [30.10.2011 21:13 685816]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [14.5.2009 14:47 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [14.5.2009 14:49 94360]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [14.5.2009 14:47 731840]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [16.11.2011 22:11 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [16.11.2011 22:11 8576]
S3 PRODIGY;PRODIGY;c:\windows\system32\drivers\prodigy.sys [16.11.2011 22:06 32377]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
.
Contents of the 'Scheduled Tasks' folder
.
2011-11-23 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-823518204-113007714-725345543-1003Core.job
- c:\documents and settings\Chlapci\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe [2011-11-04 19:53]
.
2011-11-24 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-823518204-113007714-725345543-1003UA.job
- c:\documents and settings\Chlapci\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe [2011-11-04 19:53]
.
2011-11-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-823518204-113007714-725345543-1003Core.job
- c:\documents and settings\Chlapci\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-10-21 06:24]
.
2011-11-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-823518204-113007714-725345543-1003UA.job
- c:\documents and settings\Chlapci\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-10-21 06:24]
.
.
------- Supplementary Scan -------
.
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 195.34.133.21 212.186.211.21
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Chlapci\Application Data\Mozilla\Firefox\Profiles\623kf1kq.default\
.
- - - - ORPHANS REMOVED - - - -
.
HKCU-Run-DAEMON Tools Pro Agent - c:\program files\DAEMON Tools Pro\DTProAgent.exe
HKLM-Run-UnlockerAssistant - c:\program files\Unlocker\UnlockerAssistant.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-11-24 20:20
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(2840)
c:\windows\system32\WININET.dll
c:\program files\RocketDock\RocketDock.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\windows\system32\IoctlSvc.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\wdfmgr.exe
c:\program files\Common Files\Nero\Lib\NMIndexingService.exe
.
**************************************************************************
.
Completion time: 2011-11-24 20:23:54 - machine was rebooted
ComboFix-quarantined-files.txt 2011-11-24 19:23
.
Pre-Run: 122 148 175 872 bytes free
Post-Run: 131 657 011 200 bytes free
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn
.
- - End Of File - - F69CF4425FA45113422AF019D2DF9FE4

zeroboyko · #4 Příspěvek od **zeroboyko** » 24 lis 2011 20:30

všetko sa zdá okej ale windows explorer (tento počítač) stále nechce nabehnúť

#5 Příspěvek od **Rudy** » 24 lis 2011 20:45

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

Collect::
c:\documents and settings\Chlapci\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"=-

AtJob::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Obrázek

zeroboyko · #6 Příspěvek od **zeroboyko** » 24 lis 2011 21:11

ComboFix 11-11-24.01 - Chlapci 24.11.2011 20:52:26.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.421.1033.18.3070.2464 [GMT 1:00]
Running from: c:\documents and settings\Chlapci\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Chlapci\Desktop\CFScript.txt.txt
AV: ESET NOD32 Antivirus 4.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
file zipped: c:\documents and settings\Chlapci\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Chlapci\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe
.
.
((((((((((((((((((((((((( Files Created from 2011-10-24 to 2011-11-24 )))))))))))))))))))))))))))))))
.
.
2011-11-24 14:15 . 2011-11-24 14:15 -------- d-----w- c:\documents and settings\Administrator
2011-11-21 20:46 . 2011-11-21 20:46 -------- d-----w- c:\documents and settings\Chlapci\Local Settings\Application Data\Skyrim
2011-11-21 20:36 . 2011-11-21 20:46 -------- d-----w- c:\program files\The Elder Scrolls V Skyrim
2011-11-21 15:40 . 2011-11-21 15:40 -------- d-----w- c:\program files\Common Files\Windows Live
2011-11-16 21:29 . 2011-11-16 21:29 73728 ----a-r- c:\documents and settings\Chlapci\Application Data\Microsoft\Installer\{F8E3A0F8-53A4-4FD8-9986-C90A3EA7C3B6}\NewShortcut47_74B9CE5DF1F4447F982DCA29A461B529.exe
2011-11-16 21:29 . 2011-11-16 21:29 73728 ----a-r- c:\documents and settings\Chlapci\Application Data\Microsoft\Installer\{F8E3A0F8-53A4-4FD8-9986-C90A3EA7C3B6}\NewShortcut46_74B9CE5DF1F4447F982DCA29A461B529.exe
2011-11-16 21:29 . 2011-11-16 21:29 53248 ----a-r- c:\documents and settings\Chlapci\Application Data\Microsoft\Installer\{F8E3A0F8-53A4-4FD8-9986-C90A3EA7C3B6}\ARPPRODUCTICON.exe
2011-11-16 21:29 . 2011-11-16 21:29 49152 ----a-r- c:\documents and settings\Chlapci\Application Data\Microsoft\Installer\{F8E3A0F8-53A4-4FD8-9986-C90A3EA7C3B6}\Uninstall_QA_OTI_H_FE5D756F71E147C4972AD6775344B40B.exe
2011-11-16 21:29 . 2011-11-16 21:29 49152 ----a-r- c:\documents and settings\Chlapci\Application Data\Microsoft\Installer\{F8E3A0F8-53A4-4FD8-9986-C90A3EA7C3B6}\NewShortcut2_1C7B7089989A424FB39D41A32581C775.exe
2011-11-16 21:29 . 2011-11-16 21:29 -------- d-----w- c:\documents and settings\Chlapci\Local Settings\Application Data\Nokia
2011-11-16 21:12 . 2011-11-21 15:34 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Nokia
2011-11-16 21:12 . 2011-11-16 21:13 -------- d-----w- c:\documents and settings\Chlapci\Application Data\PC Suite
2011-11-16 21:12 . 2011-11-16 21:12 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Suite
2011-11-16 21:12 . 2011-11-16 21:12 -------- d-----w- c:\program files\Common Files\PCSuite
2011-11-16 21:12 . 2011-11-16 21:12 -------- d-----w- c:\program files\Common Files\Nokia
2011-11-16 21:11 . 2011-11-16 21:11 -------- d-----w- c:\program files\DIFX
2011-11-16 21:11 . 2008-08-26 09:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2011-11-16 21:11 . 2011-11-16 21:11 -------- d-----w- c:\program files\PC Connectivity Solution
2011-11-16 21:11 . 2011-05-18 09:09 8576 ----a-w- c:\windows\system32\drivers\nmwcdnsuc.sys
2011-11-16 21:11 . 2011-05-18 09:09 137600 ----a-w- c:\windows\system32\drivers\nmwcdnsu.sys
2011-11-16 21:11 . 2011-05-18 09:12 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys
2011-11-16 21:11 . 2011-05-18 09:12 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys
2011-11-16 21:11 . 2011-05-18 09:12 23168 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys
2011-11-16 21:11 . 2011-05-18 09:12 18176 ----a-w- c:\windows\system32\drivers\ccdcmb.sys
2011-11-16 21:11 . 2011-11-17 09:13 -------- d-----w- c:\program files\Nokia
2011-11-16 21:10 . 2011-11-16 21:27 -------- d-----w- c:\documents and settings\All Users\Application Data\Installations
2011-11-16 21:09 . 2008-04-13 23:15 26112 -c--a-w- c:\windows\system32\dllcache\usbser.sys
2011-11-16 21:09 . 2008-04-13 23:15 26112 ----a-w- c:\windows\system32\drivers\usbser.sys
2011-11-16 21:08 . 2008-11-07 17:55 16928 ------w- c:\windows\system32\spmsgXP_2k3.dll
2011-11-16 21:06 . 2006-08-29 14:56 32377 ----a-w- c:\windows\system32\drivers\prodigy.sys
2011-11-16 21:06 . 2011-11-16 21:06 -------- d-----w- c:\program files\NSS
2011-11-12 13:51 . 2011-11-12 13:51 -------- d-----w- c:\program files\Free M4a to MP3 Converter
2011-11-12 08:25 . 2001-03-23 15:29 880912 ----a-w- c:\windows\WM8EUTIL.exe
2011-11-12 08:25 . 2011-11-12 08:32 -------- d-----w- c:\program files\CD to MP3 Freeware
2011-11-09 20:40 . 2011-11-09 20:40 -------- d-----w- c:\windows\Sun
2011-11-06 09:55 . 2011-11-06 09:57 -------- d-----w- C:\Mp3 Output
2011-11-06 09:55 . 2011-11-06 09:55 -------- d-----w- c:\program files\Smallvideosoft
2011-11-06 09:55 . 2009-06-08 14:33 8676883 ----a-w- c:\windows\system32\mp3Media2.dll
2011-11-06 09:49 . 2011-11-06 09:55 -------- d-----w- c:\program files\Total Video Converter
2011-11-06 09:38 . 2011-11-06 09:40 -------- d-----w- c:\documents and settings\Chlapci\dwhelper
2011-11-06 09:34 . 2011-11-17 08:53 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-06 09:32 . 2011-11-06 09:32 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Mozilla
2011-11-06 09:01 . 2011-11-06 09:01 -------- d-----w- C:\Downloads
2011-11-04 19:59 . 2004-12-14 18:16 53248 ----a-r- c:\windows\system32\InstMed.exe
2011-11-04 19:59 . 2004-10-11 17:22 211712 ----a-w- c:\windows\system32\drivers\LV561AV.SYS
2011-11-04 19:59 . 2004-10-11 17:21 372736 ----a-w- c:\windows\system32\LVUI2RC.dll
2011-11-04 19:59 . 2004-10-11 17:18 22016 ----a-w- c:\windows\system32\drivers\LVUSBSta.sys
2011-11-04 19:59 . 2004-10-11 17:14 106496 ----a-w- c:\windows\system32\lvcoinst.dll
2011-11-04 19:59 . 2004-10-11 17:18 204800 ----a-w- c:\windows\system32\LVUI2.dll
2011-11-04 19:59 . 2004-10-11 17:16 204800 ----a-w- c:\windows\system32\lvcodec2.dll
2011-11-04 19:58 . 2011-11-04 19:58 -------- d-----w- c:\program files\Common Files\Logitech
2011-11-04 19:57 . 1998-10-29 15:45 306688 ----a-w- c:\windows\IsUninst.exe
2011-11-04 19:56 . 2001-09-05 03:18 77824 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2011-11-04 19:56 . 2001-09-05 03:18 225280 ----a-w- c:\program files\Common Files\InstallShield\IScript\iscript.dll
2011-11-04 19:56 . 2001-09-05 03:14 176128 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2011-11-04 19:56 . 2001-09-05 03:13 32768 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
2011-11-04 19:56 . 2001-09-05 12:24 610436 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe
2011-11-04 19:53 . 2011-11-04 19:53 -------- d-----w- c:\documents and settings\Chlapci\Local Settings\Application Data\Facebook
2011-11-04 06:12 . 2011-11-04 06:12 -------- d-----w- C:\9378190148ebf09c5c651a3a
2011-11-03 06:37 . 2011-11-03 06:37 -------- d-----w- C:\34d99866d06f3bdc712d2f5a37
2011-11-02 17:55 . 2011-11-02 17:55 -------- d-----w- c:\program files\MSBuild
2011-11-02 17:55 . 2011-11-04 06:13 -------- d-----w- c:\windows\system32\XPSViewer
2011-11-02 17:55 . 2011-11-02 17:55 -------- d-----w- c:\program files\Reference Assemblies
2011-11-02 17:55 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2011-11-02 17:55 . 2006-06-29 12:07 14048 ------w- c:\windows\system32\spmsg2.dll
2011-11-02 17:35 . 2011-11-02 17:35 -------- d-----w- c:\program files\Microsoft.NET
2011-11-02 16:18 . 2011-11-02 16:18 -------- d-----w- c:\program files\AnalogX
2011-11-02 16:10 . 2011-11-02 16:16 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Audacity
2011-11-02 16:05 . 2003-03-19 06:19 1060864 ----a-w- c:\windows\system32\MFC71.DLL
2011-11-02 16:05 . 2003-03-19 06:12 1047552 ----a-w- c:\windows\system32\MFC71U.DLL
2011-11-02 16:05 . 2003-03-19 05:14 499712 ----a-w- c:\windows\system32\MSVCP71.DLL
2011-11-02 16:05 . 2003-03-19 04:05 89088 ----a-w- c:\windows\system32\ATL71.DLL
2011-11-02 16:05 . 2003-02-21 13:42 348160 ----a-w- c:\windows\system32\MSVCR71.DLL
2011-11-02 16:01 . 2011-11-02 16:01 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Ahead
2011-11-01 20:16 . 2011-11-01 20:16 -------- d-----w- c:\documents and settings\Chlapci\Local Settings\Application Data\Mozilla
2011-11-01 11:47 . 2011-11-21 15:32 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Mp3tag
2011-11-01 11:45 . 2011-11-01 11:45 -------- d-----w- c:\program files\Mp3tag
2011-10-31 15:03 . 2011-10-31 15:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Solidshield
2011-10-31 14:43 . 2011-10-31 14:43 -------- d-----w- c:\program files\Ubisoft
2011-10-31 13:46 . 2011-10-31 13:46 -------- d-----w- C:\!KillBox
2011-10-31 13:19 . 2011-10-31 13:19 -------- d-----w- c:\documents and settings\Chlapci\Local Settings\Application Data\GHISLER
2011-10-31 12:32 . 2011-10-31 12:32 -------- d-----w- c:\program files\DreamBoxEdit
2011-10-31 12:12 . 2011-10-31 12:12 -------- d-----w- c:\documents and settings\Chlapci\Local Settings\Application Data\GlobalSCAPE
2011-10-31 12:12 . 2011-10-31 12:12 -------- d-----w- c:\documents and settings\Chlapci\Application Data\GlobalSCAPE
2011-10-31 12:12 . 2011-10-31 12:12 -------- d-----w- c:\documents and settings\All Users\Application Data\GlobalSCAPE
2011-10-31 11:59 . 2010-12-17 06:56 545 ----a-w- c:\windows\UC.PIF
2011-10-31 11:59 . 2010-12-17 06:56 545 ----a-w- c:\windows\RAR.PIF
2011-10-31 11:59 . 2010-12-17 06:56 545 ----a-w- c:\windows\NOCLOSE.PIF
2011-10-31 11:59 . 2010-12-17 06:56 545 ----a-w- c:\windows\LHA.PIF
2011-10-31 11:59 . 2010-12-17 06:56 545 ----a-w- c:\windows\ARJ.PIF
2011-10-31 11:59 . 2011-10-31 12:00 -------- d-----w- c:\documents and settings\Chlapci\Application Data\GHISLER
2011-10-31 11:59 . 2011-10-31 11:59 -------- d-----w- C:\totalcmd
2011-10-31 11:34 . 2011-11-20 12:51 -------- d-----w- c:\documents and settings\Chlapci\Application Data\vlc
2011-10-31 11:18 . 2011-10-31 11:18 -------- d-----w- c:\program files\VideoLAN
2011-10-30 22:51 . 2011-10-30 22:51 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Rovio
2011-10-30 22:50 . 2011-10-30 22:50 -------- d-----w- c:\program files\Rovio
2011-10-30 22:32 . 2011-10-30 22:32 -------- d-----w- c:\program files\IQ Publishing
2011-10-30 20:40 . 2009-03-09 14:27 453456 ----a-w- c:\windows\system32\d3dx10_41.dll
2011-10-30 20:20 . 2011-10-30 20:21 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Pro
2011-10-30 20:20 . 2011-10-30 20:20 -------- d-----w- c:\documents and settings\Chlapci\Application Data\DAEMON Tools Pro
2011-10-30 20:17 . 2011-10-30 20:24 -------- d-----w- c:\program files\DAEMON Tools Pro
2011-10-30 20:13 . 2011-10-30 20:13 685816 ----a-w- c:\windows\system32\drivers\sptd.sys
2011-10-29 10:01 . 2011-10-29 15:47 -------- d-----w- c:\program files\SpeedFan
2011-10-27 11:25 . 2001-08-17 20:36 5632 ----a-w- c:\windows\system32\ptpusb.dll
2011-10-27 11:25 . 2008-04-14 03:42 159232 ----a-w- c:\windows\system32\ptpusd.dll
2011-10-27 11:25 . 2008-04-13 22:15 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2011-10-27 11:25 . 2008-04-13 22:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-24 17:19 . 2011-10-24 17:19 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-10-24 17:19 . 2011-10-24 17:19 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-10-20 19:34 . 2011-10-20 19:34 315392 ----a-w- c:\windows\HideWin.exe
2011-10-20 19:33 . 2011-10-20 19:29 15600 ----a-w- c:\windows\gdrv.sys
2011-10-10 14:22 . 2011-10-20 18:12 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-09-28 07:06 . 2002-08-29 12:00 599040 ----a-w- c:\windows\system32\crypt32.dll
2011-09-26 09:41 . 2011-09-26 09:41 611328 ------w- c:\windows\system32\uiautomationcore.dll
2011-09-26 09:41 . 2002-08-29 12:00 220160 ----a-w- c:\windows\system32\oleacc.dll
2011-09-26 09:41 . 2002-08-29 12:00 20480 ----a-w- c:\windows\system32\oleaccrc.dll
2011-09-06 13:20 . 2002-08-29 12:00 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-09-29 07:32 . 2011-11-06 09:31 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-11-24_19.19.42 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-11-24 20:05 . 2011-11-24 20:05 16384 c:\windows\Temp\Perflib_Perfdata_500.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-04-12 16132608]
"JMB36X IDE Setup"="c:\windows\JM\JMInsIDE.exe" [2006-10-30 36864]
"36X Raid Configurer"="c:\windows\System32\JMRaidSetup.exe" [2007-02-06 1953792]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-05-14 2029640]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2011-01-07 111208]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-01-07 13880424]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-11-04 1753192]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2008-06-19 570664]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-06-08 2221352]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2004-12-14 221184]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSU_agent]
2011-10-19 13:53 190768 ----a-w- c:\program files\Nokia\Nokia Software Updater\nsu3ui_agent.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Winamp\\winamp.exe"=
"c:\\Program Files\\Common Files\\Nero\\Nero Web\\SetupX.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\Ubisoft\\James Cameron's AVATAR - THE GAME\\bin\\Avatar.exe"=
"c:\\Program Files\\Ubisoft\\James Cameron's AVATAR - THE GAME\\bin\\AvatarLauncher.exe"=
"c:\\Documents and Settings\\Chlapci\\Local Settings\\Application Data\\Facebook\\Video\\Skype\\FacebookVideoCalling.exe"=
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [30.10.2011 21:13 685816]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [14.5.2009 14:47 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [14.5.2009 14:49 94360]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [14.5.2009 14:47 731840]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [16.11.2011 22:11 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [16.11.2011 22:11 8576]
S3 PRODIGY;PRODIGY;c:\windows\system32\drivers\prodigy.sys [16.11.2011 22:06 32377]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
.
Contents of the 'Scheduled Tasks' folder
.
2011-11-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-823518204-113007714-725345543-1003Core.job
- c:\documents and settings\Chlapci\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-10-21 06:24]
.
2011-11-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-823518204-113007714-725345543-1003UA.job
- c:\documents and settings\Chlapci\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-10-21 06:24]
.
.
------- Supplementary Scan -------
.
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 195.34.133.21 212.186.211.21
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Chlapci\Application Data\Mozilla\Firefox\Profiles\623kf1kq.default\
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-11-24 21:05
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(1488)
c:\windows\system32\WININET.dll
c:\program files\RocketDock\RocketDock.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\IoctlSvc.exe
c:\windows\system32\wdfmgr.exe
c:\program files\Common Files\Nero\Lib\NMIndexingService.exe
.
**************************************************************************
.
Completion time: 2011-11-24 21:08:47 - machine was rebooted
ComboFix-quarantined-files.txt 2011-11-24 20:08
ComboFix2.txt 2011-11-24 19:23
.
Pre-Run: 131 760 291 840 bytes free
Post-Run: 18 adresárov, 131 744 124 928 voľných bajtov
.
- - End Of File - - 7FDA6FB0CFBE1117CC6C98FA0988B0F1
Upload was successful

počas CF mi stále vyhadzovalo nejakú chybu s programom "grep.exe"

#7 Příspěvek od **Rudy** » 24 lis 2011 22:07

Vše smazáno. Nastala nějaká změna?

zeroboyko · #8 Příspěvek od **zeroboyko** » 24 lis 2011 22:16

no windows elplorer stále nereaguje...keď ho otvorím počítač sa zasekne a musím ho natvrtdo reštartovať...

#9 Příspěvek od **Rudy** » 24 lis 2011 22:54

Zkuste obnovu systému k datu, kdy korketně fungoval.

zeroboyko · #10 Příspěvek od **zeroboyko** » 25 lis 2011 07:06

nemám k dispozícii žiadne body obnovenia :/

zeroboyko · #11 Příspěvek od **zeroboyko** » 25 lis 2011 07:25

nechal som PC postáť a prieskumník nabehol aasi po 5-10 minutach...ostatné ide všetko v pohode

zeroboyko · #12 Příspěvek od **zeroboyko** » 25 lis 2011 15:01

a dalej som zistil že pc zamrzne ked dám načítať napr nejaké video na youtube...nieco s flash playerom

#13 Příspěvek od **Rudy** » 25 lis 2011 18:32

Zkuste opravu systému XPManagerem: http://www.viry.cz/forum/viewtopic.php?f=46&t=17549 , nebo z instal. média.

zeroboyko · #14 Příspěvek od **zeroboyko** » 25 lis 2011 19:17

počas inštalacie mi vyskoší že msiexec.exe že sa vyskytol problem a preto operacia konči....

#15 Příspěvek od **Rudy** » 25 lis 2011 19:46

Asi je poškozen WindowsInstaller, zkuste ho obnovit: http://www.microsoft.com/downloads/cs-c ... 56122e08e8 .

VIRY.CZ

problém pri spustení pc

problém pri spustení pc

Re: problém pri spustení pc

Re: problém pri spustení pc

Re: problém pri spustení pc

Re: problém pri spustení pc

Re: problém pri spustení pc

Re: problém pri spustení pc

Re: problém pri spustení pc

Re: problém pri spustení pc

Re: problém pri spustení pc

Re: problém pri spustení pc

Re: problém pri spustení pc

Re: problém pri spustení pc

Re: problém pri spustení pc

Re: problém pri spustení pc