pomalý comp i internet

Zpráva

jirka bj · #1 Příspěvek od **jirka bj** » 23 led 2010 16:29

prosím o radu programy se spouštějí pomalu internet načítá pomalu NOD hlásí zablokování nějaké neznámé stránky ale kontrola nic nenašla.Můžete pomoci?

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jiří at 2010-01-23 16:30:17
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 23 GB (37%) free of 61 GB
Total RAM: 2047 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:30:26, on 23.1.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\nvsvc32.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\windows\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\windows\System32\snmp.exe
C:\windows\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\windows\Explorer.EXE
C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
C:\Program Files\Lexmark X74-X75\lxbbbmon.exe
C:\windows\system32\CTHELPER.EXE
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\windows\system32\lexpps.exe
C:\windows\SYSTEM32\CTXFISPI.EXE
C:\Program Files\Creative\ShareDLL\CADI\NotiMan.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Jiří\Plocha\Record from web\RSIT.exe
C:\Program Files\trend micro\Jiří.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Seznam Lištička - {B71B15CE-3093-459C-B764-AEB2486F2273} - C:\Program Files\Seznam\Listicka\Toolbar.dll
O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [RCSystem] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" RCSystem * -Startup
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk.disabled
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O17 - HKLM\System\CCS\Services\Tcpip\..\{DCD31B63-AA8F-4563-8C1E-5BF2B5BE5BF7}: NameServer = 172.27.12.254
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Droppix Service - Droppix - C:\Program Files\Common Files\Droppix\DxService.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\windows\System32\TuneUpDefragService.exe

--
End of file - 6294 bytes

======Scheduled tasks folder======

C:\windows\tasks\1-Click Maintenance.job
C:\windows\tasks\Ad-Aware Update (Daily 1).job
C:\windows\tasks\Ad-Aware Update (Daily 2).job
C:\windows\tasks\Ad-Aware Update (Daily 3).job
C:\windows\tasks\Ad-Aware Update (Daily 4).job
C:\windows\tasks\Ad-Aware Update (Weekly).job
C:\windows\tasks\User_Feed_Synchronization-{09D54E5D-1A14-4D07-A0C2-C4C3976EF83F}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-09-30 329312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll [2008-09-15 1562960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{B71B15CE-3093-459C-B764-AEB2486F2273} - &Seznam Lištička - C:\Program Files\Seznam\Listicka\Toolbar.dll [2007-11-04 793960]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Lexmark X74-X75"=C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe [2002-10-14 57344]
"CTHelper"=C:\windows\system32\CTHELPER.EXE [2008-02-20 19456]
"AudioDrvEmulator"=C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe [2005-06-16 49152]
"RCSystem"=C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe [2005-06-16 49152]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-11-16 2054360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Family Tree Builder Update]
C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe [2009-01-14 113680]

C:\Documents and Settings\Jiří\Nabídka Start\Programy\Po spuštění
Adobe Gamma.lnk.disabled - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\windows\system32\WPDShServiceObj.dll [2006-10-18 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vds]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"undockwithoutlogon"=1
"ShutdownWithoutLogon"=1
"NoDispCPL"=0
"NoDispSettingsPage"=0
"NoDispScrSavPage"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"NoDrives"=
"HonorAutoRunSetting"=
"NoResolveTrack"=
"NoViewContextMenu"=
"NoFileAssociate"=
"NoFind"=
"NoRun"=
"NoClose"=
"StartMenuLogoff"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Disabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\LEXPPS.EXE"="C:\WINDOWS\system32\LEXPPS.EXE:*:Enabled:LEXPPS.EXE"
"C:\Program Files\Java\jre1.6.0_05\bin\javaw.exe"="C:\Program Files\Java\jre1.6.0_05\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe"="C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe:*:Enabled:Nero ProductSetup"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\Program Files\Logitech\Logitech Vid\Vid.exe"="C:\Program Files\Logitech\Logitech Vid\Vid.exe:*:Enabled:Logitech Vid"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======File associations======

.js - edit -
.js - open - "C:\Program Files\URUSoft\Subtitle Workshop\SubtitleWorkshop.exe" /OPEN("%1")

======List of files/folders created in the last 1 months======

2010-01-23 16:30:17 ----D---- C:\rsit
2010-01-21 16:28:55 ----A---- C:\windows\system32\tsccvid.dll
2010-01-15 06:15:29 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-01-13 18:14:00 ----HDC---- C:\windows\$NtUninstallKB955759$
2010-01-13 18:13:19 ----HDC---- C:\windows\$NtUninstallKB972270$
2010-01-12 03:03:02 ----A---- C:\windows\system32\A-UQrJepOc3z.exe
2010-01-02 20:01:47 ----D---- C:\Program Files\Common Files\Skype
2009-12-30 12:47:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Pro
2009-12-30 12:40:04 ----D---- C:\Documents and Settings\Jiří\Data aplikací\DAEMON Tools Pro

======List of files/folders modified in the last 1 months======

2010-01-23 16:30:19 ----D---- C:\windows\temp
2010-01-23 16:30:19 ----D---- C:\Program Files\trend micro
2010-01-23 07:11:05 ----D---- C:\windows\Debug
2010-01-23 06:40:24 ----D---- C:\Documents and Settings\Jiří\Data aplikací\gtk-2.0
2010-01-23 05:51:51 ----AC---- C:\windows\LEXSTAT.INI
2010-01-23 05:21:09 ----SD---- C:\windows\Tasks
2010-01-22 20:21:22 ----D---- C:\windows\system32\CatRoot2
2010-01-22 19:41:19 ----D---- C:\Program Files\Mozilla Firefox
2010-01-22 19:18:25 ----AC---- C:\windows\NeroDigital.ini
2010-01-22 18:18:07 ----SHD---- C:\System Volume Information
2010-01-22 18:15:50 ----D---- C:\windows\system32\Restore
2010-01-22 17:23:17 ----AD---- C:\WINDOWS
2010-01-22 16:36:15 ----D---- C:\windows\system32
2010-01-22 16:34:44 ----HD---- C:\windows\inf
2010-01-22 16:34:36 ----RSHDC---- C:\windows\system32\dllcache
2010-01-22 16:34:33 ----D---- C:\Program Files\Internet Explorer
2010-01-22 16:34:19 ----HD---- C:\windows\$hf_mig$
2010-01-20 21:13:18 ----RD---- C:\windows\system32\ico
2010-01-20 21:13:18 ----D---- C:\windows\system32\Windows 7 RTM Icons
2010-01-20 21:13:18 ----D---- C:\windows\system32\Windows 7 Icon-Pack by WindowsNET
2010-01-20 21:13:18 ----D---- C:\windows\system32\Neon icons
2010-01-20 19:55:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-01-20 10:27:48 ----RD---- C:\Program Files
2010-01-20 10:27:17 ----D---- C:\Program Files\Native Instruments
2010-01-20 08:41:42 ----D---- C:\Program Files\SMS posílač Treca
2010-01-20 07:05:22 ----D---- C:\Program Files\LucasArts
2010-01-18 06:11:31 ----SHD---- C:\windows\Installer
2010-01-18 06:11:30 ----SHD---- C:\Config.Msi
2010-01-18 06:11:23 ----D---- C:\windows\system32\drivers
2010-01-15 06:11:59 ----D---- C:\Documents and Settings\Jiří\Data aplikací\uTorrent
2010-01-14 03:44:11 ----HDC---- C:\windows\$NtUninstallWMFDist11$
2010-01-13 18:15:19 ----D---- C:\windows\AppPatch
2010-01-13 15:57:18 ----AC---- C:\windows\win.ini
2010-01-10 15:42:23 ----D---- C:\Documents and Settings\Jiří\Data aplikací\Skype
2010-01-10 15:32:10 ----D---- C:\Documents and Settings\Jiří\Data aplikací\skypePM
2010-01-06 07:37:41 ----D---- C:\Temp
2010-01-06 07:37:32 ----AC---- C:\windows\coolacm.ini
2010-01-05 01:45:36 ----D---- C:\Downloads
2010-01-05 01:17:46 ----AC---- C:\windows\system32\MRT.exe
2010-01-04 04:37:38 ----D---- C:\Documents and Settings
2010-01-04 04:05:23 ----A---- C:\windows\system32\oeminfo.ini
2010-01-03 14:28:56 ----HD---- C:\windows\Icons
2010-01-03 13:39:53 ----AC---- C:\windows\system32\PerfStringBackup.INI
2010-01-02 21:06:01 ----D---- C:\windows\system32\DirectX
2010-01-02 20:01:47 ----D---- C:\Program Files\Common Files
2010-01-01 19:50:40 ----SD---- C:\Documents and Settings\Jiří\Data aplikací\Microsoft
2009-12-30 16:28:40 ----A---- C:\windows\system.ini
2009-12-30 11:42:32 ----D---- C:\Documents and Settings\Jiří\Data aplikací\SMS posílač Treca
2009-12-29 11:13:26 ----RSD---- C:\windows\assembly
2009-12-29 11:02:34 ----HD---- C:\Program Files\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
R1 ElbyCDIO;ElbyCDIO Driver; C:\windows\System32\Drivers\ElbyCDIO.sys [2009-01-29 23976]
R1 epfwtdir;epfwtdir; C:\windows\system32\DRIVERS\epfwtdir.sys [2009-11-16 96408]
R1 InCDPass;InCDPass; C:\windows\system32\drivers\InCDPass.sys [2007-11-26 36776]
R1 incdrm;InCD Reader; C:\windows\system32\drivers\InCDRm.sys [2007-11-26 38440]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\windows\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 StarOpen;StarOpen; C:\windows\system32\drivers\StarOpen.sys [2009-01-22 5632]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\windows\system32\DRIVERS\tcpip6.sys [2008-06-20 225856]
R2 eamon;eamon; C:\windows\system32\DRIVERS\eamon.sys [2009-11-16 116520]
R3 CLEDX;Team H2O CLEDX service; C:\windows\system32\DRIVERS\cledx.sys [2005-05-09 33792]
R3 ctac32k;Creative AC3 Software Decoder; C:\windows\system32\drivers\ctac32k.sys [2005-08-07 501760]
R3 ctaud2k;Creative Audio Driver (WDM); C:\windows\system32\drivers\ctaud2k.sys [2005-08-07 439424]
R3 ctprxy2k;Creative Proxy Driver; C:\windows\system32\drivers\ctprxy2k.sys [2005-08-07 7168]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\windows\system32\drivers\ctsfm2k.sys [2005-08-07 142848]
R3 emupia;E-mu Plug-in Architecture Driver; C:\windows\system32\drivers\emupia2k.sys [2005-08-07 77824]
R3 ha20x2k;Creative 20X HAL Driver; C:\windows\system32\drivers\ha20x2k.sys [2005-08-07 1093632]
R3 HidUsb;Ovladač třídy standardu HID; C:\windows\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 LVPr2Mon;LVPr2Mon Driver; C:\windows\system32\Drivers\LVPr2Mon.sys [2009-10-07 25752]
R3 LVRS;Logitech RightSound Filter Driver; C:\windows\system32\DRIVERS\lvrs.sys [2009-05-01 265496]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\windows\system32\drivers\LVUSBSta.sys [2008-07-26 41752]
R3 mouhid;Ovladač myši standardu HID; C:\windows\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\windows\system32\DRIVERS\nv4_mini.sys [2009-04-30 8055584]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\windows\system32\DRIVERS\nvnetbus.sys [2006-04-14 13056]
R3 ossrv;Creative OS Services Driver; C:\windows\system32\drivers\ctoss2k.sys [2005-08-07 114688]
R3 pepifilter;Volume Adapter; C:\windows\system32\DRIVERS\lv302af.sys [2009-04-30 13976]
R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\windows\system32\DRIVERS\LV302V32.SYS [2009-04-30 2687512]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\windows\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\windows\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\windows\system32\drivers\usbaudio.sys [2008-04-14 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\windows\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\windows\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\windows\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\windows\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbprint;Třída USB Printer; C:\windows\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\windows\system32\drivers\WmBEnum.sys [2004-04-14 10144]
R3 WmXlCore;Logitech WingMan Translation Layer Driver; C:\windows\system32\drivers\WmXlCore.sys [2004-04-14 44064]
R4 InCDfs;InCD File System; C:\windows\system32\drivers\InCDFs.sys [2007-11-26 118952]
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\windows\system32\drivers\ALCXWDM.SYS []
S3 Arp1394;Protokol 1394 ARP Client; C:\windows\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 ayuzph91;ayuzph91; C:\windows\system32\drivers\ayuzph91.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BTHMODEM;Ovladač pro sériovou komunikaci protokolem Bluetooth; C:\windows\system32\DRIVERS\bthmodem.sys [2008-04-13 37888]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 CCDECODE;Dekodér Closed Caption; C:\windows\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 COMMONFX.DLL;COMMONFX.DLL; C:\windows\system32\COMMONFX.DLL [2005-08-07 87040]
S3 CT20XUT.DLL;CT20XUT.DLL; C:\windows\system32\CT20XUT.DLL [2005-08-07 158208]
S3 CTAUDFX.DLL;CTAUDFX.DLL; C:\windows\system32\CTAUDFX.DLL [2005-08-07 536576]
S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\windows\system32\drivers\ctdvda2k.sys [2005-07-13 340704]
S3 CTEAPSFX.DLL;CTEAPSFX.DLL; C:\windows\system32\CTEAPSFX.DLL [2005-08-07 157696]
S3 CTEDSPFX.DLL;CTEDSPFX.DLL; C:\windows\system32\CTEDSPFX.DLL [2005-08-07 269824]
S3 CTEDSPIO.DLL;CTEDSPIO.DLL; C:\windows\system32\CTEDSPIO.DLL [2005-08-07 115200]
S3 CTEDSPSY.DLL;CTEDSPSY.DLL; C:\windows\system32\CTEDSPSY.DLL [2005-08-07 317952]
S3 CTERFXFX.DLL;CTERFXFX.DLL; C:\windows\system32\CTERFXFX.DLL [2008-02-25 100888]
S3 CTEXFIFX.DLL;CTEXFIFX.DLL; C:\windows\system32\CTEXFIFX.DLL [2005-08-07 1157632]
S3 CTHWIUT.DLL;CTHWIUT.DLL; C:\windows\system32\CTHWIUT.DLL [2005-08-07 61952]
S3 CTSBLFX.DLL;CTSBLFX.DLL; C:\windows\system32\CTSBLFX.DLL [2005-08-07 548352]
S3 ElbyCDFL;ElbyCDFL; C:\windows\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
S3 HidBth;Miniport Bluetooth HID Microsoft; C:\windows\system32\DRIVERS\hidbth.sys [2008-04-14 25600]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\windows\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\windows\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\windows\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394 Net Driver; C:\windows\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\windows\system32\DRIVERS\NVENETFD.sys [2006-04-14 34176]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 SLIP;BDA Slip De-Framer; C:\windows\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\windows\system32\DRIVERS\ssm_bus.sys [2005-08-30 58320]
S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter; C:\windows\system32\DRIVERS\ssm_mdfl.sys [2005-08-30 8336]
S3 ssm_mdm;SAMSUNG Mobile USB Modem II 1.0 Drivers; C:\windows\system32\DRIVERS\ssm_mdm.sys [2005-08-30 94000]
S3 streamip;BDA IPSink; C:\windows\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\windows\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WmFilter;Logitech WingMan HID Filter Driver; C:\windows\system32\drivers\WmFilter.sys [2004-04-14 21280]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\windows\system32\drivers\WmVirHid.sys [2004-04-14 5600]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\windows\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\windows\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\windows\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\windows\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 6to4;Pomocná služba protokolu IPv6; C:\windows\system32\svchost.exe [2008-04-14 14336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 BthServ;Bluetooth Support Service; C:\windows\system32\svchost.exe [2008-04-14 14336]
R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.EXE [1999-12-12 44032]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
R2 InCDsrv;InCD Helper; C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe [2007-11-26 1554728]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 LexBceS;LexBce Server; C:\WINDOWS\system32\LEXBCES.EXE [2002-10-14 303104]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-02-25 73728]
R2 LVPrcSrv;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-10-07 154136]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NVSvc;NVIDIA Display Driver Service; C:\windows\system32\nvsvc32.exe [2009-04-30 168004]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-05-14 272024]
R2 SNMP;SNMP; C:\windows\System32\snmp.exe [2008-04-14 32768]
R2 UxTuneUp;TuneUp Theme Extension; C:\windows\System32\svchost.exe [2008-04-14 14336]
R3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2009-12-20 1181328]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2008-10-11 72704]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 Droppix Service;Droppix Service; C:\Program Files\Common Files\Droppix\DxService.exe [2008-09-29 221184]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-11-16 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-09-17 194032]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-09-17 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 SNMPTRAP;Zachytávání pro službu SNMP; C:\windows\System32\snmptrap.exe [2008-04-14 8704]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\windows\System32\TuneUpDefragService.exe [2009-07-16 355584]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\windows\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#2 Příspěvek od **Roli** » 23 led 2010 17:14

Zdravím, tyhle zbytečnosti fixni v HJT :

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk.disabled

HJT najdeš zde :

C:\Program Files\trend micro\Jiří

Fix znamená že spustíš HJT Obrázek

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.

Smaž nepotřebné soubory

pomocí CCleaneru

návod :

položka Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

položka Registry - tady vyčistíš registry; před použitím doporučuji udělat jejich zálohu, kterou Ccleaner nabízí,

čištění registru je třeba několikrát zopakovat !

Zrychlení startu PC a programů pomůžeš také defragmentací disku buď integrovaným windows nástrojem,

nebo jinou aplikací, například tím TuneUpem co tam máš.

Pak použij Mbam z mého podpisu.

jirka bj · #3 Příspěvek od **jirka bj** » 25 led 2010 02:31

všechno jsem udělal myslím že tam ale něco bude protože mi přestal fungovat zvuk musel jsem přeinstalovat drivery a internet mi nabíhá pomalu eset pořád hlásí že zablokoval nějakou stránku při startu firefoxu

#4 Příspěvek od **Roli** » 25 led 2010 18:28

No ale nějak jsi zapomněl mi sem dát ten log z Mbam, rád bych ho totiž viděl.

jirka bj · #5 Příspěvek od **jirka bj** » 25 led 2010 19:13

omlouvám se nevěděl jsem tady to je

Malwarebytes' Anti-Malware 1.44
Verze databáze: 3631
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

25.1.2010 2:57:23
mbam-log-2010-01-25 (02-57-23).txt

Typ kontroly: Rychlá kontrola
Zkontrolované objekty: 144193
Uplynulý čas: 3 minute(s), 56 second(s)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované hodnoty registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
(Nebyly nalezeny žádné škodlivé položky)

#6 Příspěvek od **Roli** » 25 led 2010 19:19

V pohodě, stačí jen číst návody obvzláště ten další, protože tenhle softík netoleruje chyby.

Stáhni a ulož na plochu ComboFix,

spusť aplikaci pod účtem s administrátorským oprávněním a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.

jirka bj · #7 Příspěvek od **jirka bj** » 26 led 2010 03:58

zvládl jsem to ale nenainstovala se konzole pro zotavení nahlásilo to že se nepodařilo ji stahnout z microsoftu tak nevím jestli to bude stačit

ComboFix 10-01-25.02 - Jiří 26.01.2010 3:39.13.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2047.1643 [GMT 1:00]
Spuštěný z: c:\documents and settings\Jiří\Plocha\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Rezidentní štít AV je zapnutý

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\nvsvc32.exe

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_NVSvc
-------\Service_NVSvc

((((((((((((((((((((((((( Soubory vytvořené od 2009-12-26 do 2010-01-26 )))))))))))))))))))))))))))))))
.

2010-01-26 01:24 . 2010-01-26 01:26 -------- d-----w- c:\program files\Seznam.cz
2010-01-25 17:29 . 2000-05-11 00:00 90112 ------w- c:\windows\Updreg.EXE
2010-01-25 17:27 . 2005-08-07 22:10 10240 ----a-w- c:\windows\CTDCRES.DLL
2010-01-24 22:16 . 2010-01-25 17:28 -------- d-----w- c:\windows\system32\Data
2010-01-24 22:15 . 2010-01-24 22:15 -------- d-----w- C:\lxkx75
2010-01-24 20:51 . 2010-01-24 20:51 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-01-21 15:28 . 2001-09-12 01:21 98304 ----a-w- c:\windows\system32\tsccvid.dll
2010-01-15 05:15 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-15 05:15 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-01-15 05:15 . 2010-01-23 16:38 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-01-12 02:03 . 2010-01-12 02:06 118256 ----a-w- c:\windows\system32\A-UQrJepOc3z.exe
2010-01-02 19:01 . 2010-01-02 19:01 -------- d-----w- c:\program files\Common Files\Skype
2009-12-30 09:08 . 2009-12-30 11:54 691696 ----a-w- c:\windows\system32\drivers\sptd.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-26 02:43 . 2008-10-12 05:35 12 -c--a-w- c:\windows\bthservsdp.dat
2010-01-25 17:29 . 2008-04-25 13:54 81920 ----a-w- c:\windows\system32\OpenAL32.dll
2010-01-25 17:24 . 2008-04-25 13:49 -------- d-----w- c:\program files\Creative
2010-01-25 17:03 . 2009-06-03 06:16 664 ----a-w- c:\windows\system32\d3d9caps.dat
2010-01-25 16:43 . 2008-04-25 13:26 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-25 16:42 . 2008-04-25 13:54 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2010-01-25 16:42 . 2005-08-07 21:54 109080 ----a-w- c:\windows\system32\ct_oal.dll
2010-01-24 22:59 . 2009-04-20 10:20 -------- d-----w- c:\program files\trend micro
2010-01-24 20:41 . 2009-06-24 21:11 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-01-20 09:27 . 2009-08-12 19:14 -------- d-----w- c:\program files\Native Instruments
2010-01-20 07:41 . 2008-11-11 23:01 -------- d-----w- c:\program files\SMS posílač Treca
2010-01-20 06:05 . 2009-04-13 11:16 -------- d-----w- c:\program files\LucasArts
2010-01-03 12:39 . 2006-03-02 12:00 83652 ----a-w- c:\windows\system32\perfc005.dat
2010-01-03 12:39 . 2006-03-02 12:00 440316 ----a-w- c:\windows\system32\perfh005.dat
2009-12-23 00:06 . 2009-02-22 21:19 -------- d-----w- c:\program files\TuneUp Utilities 2008
2009-12-21 19:14 . 2006-03-02 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2009-12-11 17:37 . 2009-12-06 23:29 -------- d-----w- c:\program files\BlueVoda Website Builder
2009-12-11 17:36 . 2009-06-09 14:54 737280 -c--a-w- c:\windows\iun6002.exe
2009-12-11 07:46 . 2009-02-17 16:03 -------- d-----w- c:\program files\Logitech
2009-12-11 07:32 . 2009-08-08 10:43 -------- d-----w- c:\program files\Common Files\LogiShrd
2009-12-07 01:21 . 2009-12-07 01:21 -------- d-----w- c:\program files\Conduit
2009-11-24 07:03 . 2006-03-02 12:00 219648 ----a-w- c:\windows\system32\uxtheme.dll
2009-11-21 16:03 . 2006-03-02 12:00 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-11-16 08:06 . 2009-11-16 08:06 96408 ----a-w- c:\windows\system32\drivers\epfwtdir.sys
2009-11-16 08:03 . 2009-11-16 08:03 108792 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2009-11-16 07:56 . 2009-11-16 07:56 116520 ----a-w- c:\windows\system32\drivers\eamon.sys
2009-11-04 07:57 . 2008-05-07 14:05 32 -c--a-w- c:\windows\msocreg32.dat
2009-10-31 02:29 . 2009-10-31 02:29 93360 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2009-10-31 02:29 . 2009-07-08 11:10 15880 ----a-w- c:\windows\system32\lsdelete.exe
2009-10-18 11:56 . 2009-11-26 03:19 246765 ----a-w- c:\program files\VirtualDub.chm
2009-10-18 11:54 . 2009-11-26 03:19 220707 ----a-w- c:\program files\VirtualDub.vdi
2009-10-18 11:54 . 2009-11-26 03:19 2662400 ----a-w- c:\program files\VirtualDub.exe
2009-10-18 11:54 . 2009-11-26 03:19 69632 ----a-w- c:\program files\auxsetup.exe
2009-10-18 11:54 . 2009-11-26 03:19 8704 ----a-w- c:\program files\vdub.exe
2009-10-18 11:54 . 2009-11-26 03:19 73728 ----a-w- c:\program files\vdremote.dll
2009-10-18 11:54 . 2009-11-26 03:19 69632 ----a-w- c:\program files\vdicmdrv.dll
2009-10-18 11:53 . 2009-11-26 03:19 65536 ----a-w- c:\program files\vdsvrlnk.dll
2009-09-13 22:13 . 2009-11-26 03:19 18321 ----a-w- c:\program files\copying
2009-06-11 11:05 . 2009-05-11 08:49 36714528 -csha-w- c:\windows\system32\drivers\fidbox.dat
.

------- Sigcheck -------

[-] 2009-12-21 . BE6EEBEF636773A8E7A82214E81C563A . 5942784 . . [8.00.6001.18876] . . c:\windows\system32\mshtml.dll
[-] 2009-12-21 . BE6EEBEF636773A8E7A82214E81C563A . 5942784 . . [8.00.6001.18876] . . c:\windows\system32\dllcache\mshtml.dll
[-] 2009-12-21 . E6B64C6C729BBC38AB7CC92CE33F97A5 . 5945856 . . [8.00.6001.22967] . . c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\mshtml.dll
[7] 2009-12-21 . 8BE0CC683F604CA2DA29589DA96D6FD1 . 5942784 . . [8.00.6001.18876] . . c:\windows\SoftwareDistribution\Download\74557895d1084621d47d79d64136b233\SP3GDR\mshtml.dll
[7] 2009-12-21 . BD424F12E808F3AA345C4816F7124F7C . 5945856 . . [8.00.6001.22967] . . c:\windows\SoftwareDistribution\Download\74557895d1084621d47d79d64136b233\SP3QFE\mshtml.dll
[7] 2009-10-29 . 00EC3DE6B7C581CC2675CCD549B692D7 . 5940736 . . [8.00.6001.18854] . . c:\windows\ie8updates\KB978207-IE8\mshtml.dll
[7] 2009-10-29 . FC883BC594F028EF5D77B645AE91C914 . 5944320 . . [8.00.6001.22945] . . c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\mshtml.dll
[7] 2009-10-22 . B459C87AA60BADADF3F0887737889CFF . 5939712 . . [8.00.6001.18852] . . c:\windows\ie8updates\KB976325-IE8\mshtml.dll
[7] 2009-10-22 . 3E902BD4D0EFB9E73C515DD3DEB6003B . 5943296 . . [8.00.6001.22942] . . c:\windows\$hf_mig$\KB976749-IE8\SP3QFE\mshtml.dll
[7] 2009-08-29 . 8097658FEC4E7E65C8A63E6B7B2B0921 . 5940224 . . [8.00.6001.18828] . . c:\windows\ie8updates\KB976749-IE8\mshtml.dll
[7] 2009-08-29 . F343C3CE6026ADE482D48B2D4F881A1D . 5942272 . . [8.00.6001.22918] . . c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\mshtml.dll
[7] 2009-07-19 . D6DA6137433E02999C1229DC692250CD . 5937152 . . [8.00.6001.18812] . . c:\windows\ie8updates\KB974455-IE8\mshtml.dll
[7] 2009-07-19 . 54E07F3B4EEF71607437367BA1922F6A . 5938176 . . [8.00.6001.22902] . . c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\mshtml.dll
[7] 2009-05-13 . 53FF3AE6C6C6F7888E845C6A755D5C09 . 5936128 . . [8.00.6001.22873] . . c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\mshtml.dll
[7] 2009-05-13 . 3BABDB8AAEED25E0EFE23561C1A2BCE1 . 5936128 . . [8.00.6001.18783] . . c:\windows\ie8updates\KB972260-IE8\mshtml.dll
[7] 2009-03-08 . D469A0EBA2EF5C6BEE8065B7E3196E5E . 5937152 . . [8.00.6001.18702] . . c:\windows\ie8updates\KB969897-IE8\mshtml.dll
[7] 2008-12-13 . A3F482D8B827DDFBDA3F47B922DF5020 . 3593216 . . [7.00.6000.16788] . . c:\windows\ie8\mshtml.dll
[7] 2008-12-13 . E32432E44F926075122F5B17E224ABF5 . 3594752 . . [7.00.6000.20973] . . c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
[7] 2008-10-17 . 00439C27E013BE9DC0A6DDE4B626B6DC . 3593216 . . [7.00.6000.16762] . . c:\windows\ie7updates\KB960714-IE7\mshtml.dll
[7] 2008-10-16 . B5F7E24595A3F05ACE4F1152542FB07F . 3595264 . . [7.00.6000.20935] . . c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
[7] 2008-08-27 . 2ECA71D805E010713BE4EA0E86827410 . 3593216 . . [7.00.6000.16735] . . c:\windows\ie7updates\KB958215-IE7\mshtml.dll
[7] 2008-08-26 . F1877EA1F348638E803DED6BEFB20637 . 3594752 . . [7.00.6000.20900] . . c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
[7] 2008-06-24 . 221718BE0A0DE22548C3BF125F19F49A . 3592192 . . [7.00.6000.16705] . . c:\windows\ie7updates\KB956390-IE7\mshtml.dll
[7] 2008-06-23 . B552ADA48C2BA853872AFFCAC88A6513 . 3594240 . . [7.00.6000.20861] . . c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
[7] 2008-04-23 . 4B0ED25CBE16A4BECE1CCB7F8F7C8112 . 3591680 . . [7.00.6000.16674] . . c:\windows\ie7updates\KB953838-IE7\mshtml.dll
[7] 2008-04-23 . 223F1E24EBBF6D6FB67999179DD2D75E . 3593728 . . [7.00.6000.20815] . . c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
[7] 2008-04-14 . DAF9947DE2A6EA20AE524B7C50487E57 . 3066880 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\mshtml.dll
[7] 2008-03-01 . 03093130102A79634BD562406EAE1F2F . 3591680 . . [7.00.6000.16640] . . c:\windows\ie7updates\KB950759-IE7\mshtml.dll
[7] 2008-03-01 . AA61A6FAA4D691A6ED38FC1099EDE19B . 3593216 . . [7.00.6000.20772] . . c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
[-] 2008-02-16 . 73A134971A7D8D6759062BBAD73460D9 . 3080704 . . [6.00.2900.3314] . . c:\windows\ie7\mshtml.dll
[-] 2008-02-16 . 5BB152929C0F6824D59E49E06947495B . 3087872 . . [6.00.2900.3314] . . c:\windows\$hf_mig$\KB947864\SP2QFE\mshtml.dll
[7] 2007-12-08 . E753D2EE81F01E9EA352FF2056A67622 . 3592192 . . [7.00.6000.16608] . . c:\windows\ie7updates\KB947864-IE7\mshtml.dll
[7] 2007-12-07 . DBDDA1D78F879B4562DF99805490FC97 . 3593216 . . [7.00.6000.20733] . . c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll
[7] 2007-08-13 . C6EC2493346ED8888A549F59210A8ED3 . 3578368 . . [7.00.5730.13] . . c:\windows\ie7updates\KB944533-IE7\mshtml.dll
[-] 2006-03-02 . 43E8D8091527AA91EB0B2A553447B3D8 . 3070464 . . [6.00.2900.2853] . . c:\windows\$NtUninstallKB947864$\mshtml.dll
[-] 2006-02-20 . CDD766C610E7DE86CCE91CD339C79BCF . 3073024 . . [6.00.2900.2853] . . c:\windows\$hf_mig$\KB911164\SP2QFE\mshtml.dll

[-] 2009-12-21 . FF4241C74E0C0A5AFFFE05F584213ECB . 916480 . . [8.00.6001.18876] . . c:\windows\system32\wininet.dll
[-] 2009-12-21 . FF4241C74E0C0A5AFFFE05F584213ECB . 916480 . . [8.00.6001.18876] . . c:\windows\system32\dllcache\wininet.dll
[-] 2009-12-21 . 5E1F666B8955FD77E65D65C4C4D882A3 . 916480 . . [8.00.6001.22967] . . c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\wininet.dll
[7] 2009-12-21 . 75A4A1378971D84FF6A7D766F4A7BC59 . 916480 . . [8.00.6001.18876] . . c:\windows\SoftwareDistribution\Download\74557895d1084621d47d79d64136b233\SP3GDR\wininet.dll
[7] 2009-12-21 . 9256DA4AEE5E2C20FC6C126BDBC11997 . 916480 . . [8.00.6001.22967] . . c:\windows\SoftwareDistribution\Download\74557895d1084621d47d79d64136b233\SP3QFE\wininet.dll
[7] 2009-10-29 . F651D2A69B7037D6063BC697CF296D8C . 916480 . . [8.00.6001.18854] . . c:\windows\ie8updates\KB978207-IE8\wininet.dll
[7] 2009-10-29 . 4941ADD731725AF468342E42B71F776C . 916480 . . [8.00.6001.22945] . . c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\wininet.dll
[7] 2009-08-29 . 37CFE7928711C8157CF4D191F0EF5F69 . 916480 . . [8.00.6001.18828] . . c:\windows\ie8updates\KB976325-IE8\wininet.dll
[7] 2009-08-29 . F658908845F3EB727FEF4769ED0E52FE . 916480 . . [8.00.6001.22918] . . c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\wininet.dll
[7] 2009-07-03 . 0B1AA91DFEDB1298FF7D93EBA45F8DB5 . 915456 . . [8.00.6001.22896] . . c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\wininet.dll
[7] 2009-07-03 . FCD887F2BA15CD8D95F8D70766D42739 . 915456 . . [8.00.6001.18806] . . c:\windows\ie8updates\KB974455-IE8\wininet.dll
[7] 2009-05-13 . 0C20BF283DE5BA50060240383B8AA41C . 915456 . . [8.00.6001.22873] . . c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\wininet.dll
[7] 2009-05-13 . 9122013C5668D967C4AE7F52252898DE . 915456 . . [8.00.6001.18783] . . c:\windows\ie8updates\KB972260-IE8\wininet.dll
[7] 2009-03-08 . 6CE32F7778061CCC5814D5E0F282D369 . 914944 . . [8.00.6001.18702] . . c:\windows\ie8updates\KB969897-IE8\wininet.dll
[7] 2008-10-16 . 84801E4617B5AFB065DD58438850587D . 826368 . . [7.00.6000.16762] . . c:\windows\ie8\wininet.dll
[7] 2008-10-16 . A72D6CC0F715D415003478294C4ECB2A . 827904 . . [7.00.6000.20935] . . c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
[7] 2008-08-26 . A74381B8D7024B2D8BB5691A93F825B8 . 827904 . . [7.00.6000.20900] . . c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
[7] 2008-08-26 . 0930F57122FF74739E3684D0016877F1 . 826368 . . [7.00.6000.16735] . . c:\windows\ie7updates\KB958215-IE7\wininet.dll
[7] 2008-06-23 . 01EF5E10F55A5AE4D49C93C25879921E . 826368 . . [7.00.6000.16705] . . c:\windows\ie7updates\KB956390-IE7\wininet.dll
[7] 2008-06-23 . 57BE3F6CA8282AC863C16862C1B65964 . 827904 . . [7.00.6000.20861] . . c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
[7] 2008-04-23 . 03727BB0DE4D4902F951D3BD7D0AC4FE . 827392 . . [7.00.6000.20815] . . c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
[7] 2008-04-23 . B2F04AA876DC2E15B59B509DE727F415 . 826368 . . [7.00.6000.16674] . . c:\windows\ie7updates\KB953838-IE7\wininet.dll
[7] 2008-04-14 . 3FE5E65A7ED9EC98AEE9167CA07812D3 . 667136 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\wininet.dll
[7] 2008-03-01 . 4B0D8A282E0BEF3E52B8B6449D8473DD . 826368 . . [7.00.6000.16640] . . c:\windows\ie7updates\KB950759-IE7\wininet.dll
[7] 2008-03-01 . 46A1A52EB6C86344C6EBF65B17404C90 . 827392 . . [7.00.6000.20772] . . c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
[-] 2008-02-16 . 8F14F3E4F2B1BCDDADAC195302D808F4 . 667136 . . [6.00.2900.3314] . . c:\windows\$hf_mig$\KB947864\SP2QFE\wininet.dll
[-] 2008-02-16 . 4FA922C587E036A5BF7F23777A24FC6F . 660480 . . [6.00.2900.3314] . . c:\windows\ie7\wininet.dll
[7] 2007-12-07 . E9B04B01D5A1ECC47B2E4364D171CF23 . 824832 . . [7.00.6000.16608] . . c:\windows\ie7updates\KB947864-IE7\wininet.dll
[7] 2007-12-07 . 32CC73F851F377B035A5B8216CAC63CE . 825344 . . [7.00.6000.20733] . . c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll
[7] 2007-08-13 . A4A0FC92358F39538A6494C42EF99FE9 . 818688 . . [7.00.5730.13] . . c:\windows\ie7updates\KB944533-IE7\wininet.dll
[7] 2006-03-02 . 50D263E3454E8357D13BB598129185AD . 657408 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB947864$\wininet.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Lexmark X74-X75"="c:\program files\Lexmark X74-X75\lxbbbmgr.exe" [2002-10-14 57344]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-11-16 2054360]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-04-30 13750272]
"AudioDrvEmulator"="c:\program files\Creative\Shared Files\Module Loader\DLLML.exe" [2005-06-16 49152]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-09-30 198160]
"CTDVDDET"="c:\program files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE" [2003-06-18 45056]
"RCSystem"="c:\program files\Creative\Shared Files\Module Loader\DLLML.exe" [2005-06-16 49152]
"VolPanel"="c:\program files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe" [2005-07-11 122880]
"CTHelper"="CTHELPER.EXE" [2008-02-20 19456]
"CTxfiHlp"="CTXFIHLP.EXE" [2005-08-07 18944]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoFileAssociate"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\documents and settings\All Users\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler\tu_logonui.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 13:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Family Tree Builder Update]
2009-01-14 13:49 113680 ----a-w- c:\program files\MyHeritage\Bin\FTBCheckUpdates.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SUPERAntiSpyware"=c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"NvMediaCenter"=RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
"nwiz"=nwiz.exe /install
"CTxfiHlp"=CTXFIHLP.EXE
"Lexmark X74-X75"="c:\program files\Lexmark X74-X75\lxbbbmgr.exe"
"SMail"="c:\program files\Seznam\Postak\Postak.exe"
"LGODDFU"="c:\program files\lg_fwupdate\fwupdate.exe" blrun
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"Family Tree Builder Update"=c:\program files\MyHeritage\Bin\FTBCheckUpdates.exe
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" -osboot
"UpdReg"=c:\windows\UpdReg.EXE
"CTDVDDET"="c:\program files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE"
"Ad-Watch"=c:\program files\Lavasoft\Ad-Aware\AAWTray.exe
"H2O"=c:\program files\SyncroSoft\Pos\H2O\cledx.exe
"LogitechQuickCamRibbon"="c:\program files\Logitech\Logitech WebCam Software\LWS.exe" /hide
"VolPanel"="c:\program files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe" /r
"NvCplDaemon"=RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\WINDOWS\\system32\\LEXPPS.EXE"=
"c:\\Program Files\\Java\\jre1.6.0_05\\bin\\javaw.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Common Files\\Ahead\\Nero Web\\SetupX.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\Logitech\\Logitech Vid\\Vid.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"21072:TCP"= 21072:TCP:*:Disabled:BitComet 21072 TCP
"21072:UDP"= 21072:UDP:*:Disabled:BitComet 21072 UDP
"9420:TCP"= 9420:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface
"26659:TCP"= 26659:TCP:*:Disabled:BitComet 26659 TCP
"26659:UDP"= 26659:UDP:*:Disabled:BitComet 26659 UDP

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [8.7.2009 6:07 64288]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [30.12.2009 10:08 691696]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [16.11.2009 9:03 108792]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [16.11.2009 9:06 96408]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [5.1.2010 7:56 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5.1.2010 7:56 74480]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [16.11.2009 9:04 735960]
R3 CLEDX;Team H2O CLEDX service;c:\windows\system32\drivers\cledx.sys [11.8.2009 20:57 33792]
S3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\system32\drivers\CT20XUT.SYS --> c:\windows\system32\drivers\CT20XUT.SYS [?]
S3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS --> c:\windows\system32\drivers\CT20XUT.SYS [?]
S3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\system32\drivers\CTEXFIFX.SYS --> c:\windows\system32\drivers\CTEXFIFX.SYS [?]
S3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS --> c:\windows\system32\drivers\CTEXFIFX.SYS [?]
S3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\system32\drivers\CTHWIUT.SYS --> c:\windows\system32\drivers\CTHWIUT.SYS [?]
S3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS --> c:\windows\system32\drivers\CTHWIUT.SYS [?]
S3 Droppix Service;Droppix Service;c:\program files\Common Files\Droppix\DxService.exe [17.3.2009 4:17 221184]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [24.9.2009 12:17 1181328]
S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [5.1.2010 7:56 7408]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-02-25 10:12 451872 -c--a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'

2010-01-26 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2008\OneClickStarter.exe [2008-02-29 07:09]

2010-01-25 c:\windows\Tasks\Ad-Aware Update (Daily 1).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 22:20]

2010-01-25 c:\windows\Tasks\Ad-Aware Update (Daily 2).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 22:20]

2010-01-25 c:\windows\Tasks\Ad-Aware Update (Daily 3).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 22:20]

2010-01-25 c:\windows\Tasks\Ad-Aware Update (Daily 4).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 22:20]

2010-01-25 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 22:20]

2010-01-26 c:\windows\Tasks\User_Feed_Synchronization-{09D54E5D-1A14-4D07-A0C2-C4C3976EF83F}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
mSearch Bar =
uInternet Settings,ProxyOverride = <local>
IE: {{0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - c:\program files\Seznam.cz\listicka.dll
TCP: {DCD31B63-AA8F-4563-8C1E-5BF2B5BE5BF7} = 172.27.12.254
FF - ProfilePath - c:\documents and settings\Jiří\Data aplikací\Mozilla\Firefox\Profiles\lw1qpff2.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www3.iamwired.net/websearch.php?src=tops&search=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/|http://www.jango.com/mus ... om/account
FF - prefs.js: keyword.URL - hxxp://www3.iamwired.net/websearch.php?src=tops&search=
FF - component: c:\program files\Mozilla Firefox\extensions\{1ac94af4-60f5-5e43-9277-fcb7fe08bb52}\components\44-UiLS_mmd9q8.dll
FF - component: c:\program files\Real\RealPlayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.notify.interval - 600000
FF - user.js: content.switch.threshold - 1000000
FF - user.js: nglayout.initialpaint.delay - 600
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-26 03:46
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys splh.sys >>UNKNOWN [0x8AB82938]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xb810cf28
\Driver\ACPI -> ACPI.sys @ 0xb7e74cb8
\Driver\atapi -> atapi.sys @ 0xb7e2fb40
IoDeviceObjectType -> DeleteProcedure -> ntkrnlpa.exe @ 0x80579022
ParseProcedure -> ntkrnlpa.exe @ 0x80577c84
\Device\Harddisk0\DR0 -> DeleteProcedure -> ntkrnlpa.exe @ 0x80579022
ParseProcedure -> ntkrnlpa.exe @ 0x80577c84
NDIS: Realtek RTL8139 Family PCI Fast Ethernet NIC -> SendCompleteHandler -> NDIS.sys @ 0xb7d39bd4
PacketIndicateHandler -> NDIS.sys @ 0xb7d45a21
SendHandler -> NDIS.sys @ 0xb7d39d44
user & kernel MBR OK

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(624)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\windows\system32\WININET.dll

- - - - - - - > 'explorer.exe'(5672)
c:\windows\system32\WININET.dll
c:\windows\TEMP\logishrd\LVPrcInj01.dll
c:\windows\system32\ctagent.dll
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\LEXBCES.EXE
c:\windows\system32\LEXPPS.EXE
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Nero\Nero 7\InCD\InCDsrv.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\windows\System32\snmp.exe
c:\program files\Lexmark X74-X75\lxbbbmon.exe
c:\windows\system32\CTHELPER.EXE
c:\windows\system32\CTXFIHLP.EXE
c:\windows\SYSTEM32\CTXFISPI.EXE
c:\program files\Creative\ShareDLL\CADI\NotiMan.exe
.
**************************************************************************
.
Celkový čas: 2010-01-26 03:51:29 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-01-26 02:51

Před spuštěním: Volných bajtů: 21 320 437 760
Po spuštění: Volných bajtů: 21 411 360 768

Current=3 Default=3 Failed=2 LastKnownGood=5 Sets=2,3,4,5
- - End Of File - - 258BF5498B7852E703B43A9D3D96D723

#8 Příspěvek od **Roli** » 26 led 2010 17:53

jirka bj píše:zvládl jsem to ale nenainstovala se konzole pro zotavení nahlásilo to že se nepodařilo ji stahnout z microsoftu tak nevím jestli to bude stačit

Nevadí.

Než budeme pokračovat tohle :

c:\windows\system32\mshtml.dll
c:\windows\system32\wininet.dll
c:\windows\system32\A-UQrJepOc3z.exe

postupně otestuj na VIRUSTOTAL

(po načtení stránky klikni na tlačítko Procházet, najdi cestu k výše zmíněnému souboru a klikni na tlačítko Odeslat soubor

trvá to okolo deseti minut pak mi sem zkopíruj link, to je ten řádek nahoře v prohlížeči)

jirka bj · #9 Příspěvek od **jirka bj** » 28 led 2010 17:54

Tady jsou
http://www.virustotal.com/cs/analisis/c ... 1264697381
http://www.virustotal.com/cs/analisis/5 ... 1264687708
ten třetí nebyl nalezen
eset mi pořád dokola vyjíždí hlášku- adresa byla zablokována
URL adresa "gw.primavega.com/svVIo3p/ipaddr.asp"
IP adresa 174.137.182.102:80
nevím vůbec jak se toho zbavit

jirka bj · #10 Příspěvek od **jirka bj** » 28 led 2010 18:58

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jirka at 2010-01-28 18:57:23
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 21 GB (35%) free of 61 GB
Total RAM: 2047 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:57:36, on 28.1.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\WINDOWS\CTHELPER.EXE
C:\Program Files\Lexmark X74-X75\lxbbbmon.exe
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Jirka\Plocha\RSIT.exe
C:\Program Files\trend micro\Jirka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 4590641328
O17 - HKLM\System\CCS\Services\Tcpip\..\{792D15CD-F957-4702-8269-1D913C0C4FCC}: NameServer = 213.180.32.2,213.180.33.225
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

--
End of file - 4368 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-12-05 8523776]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-12-05 81920]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2008-04-04 88584]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-11-16 2054360]
"Lexmark X74-X75"=C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe [2002-10-14 57344]
"AudioDrvEmulator"=C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe [2005-06-16 49152]
"CTHelper"=C:\WINDOWS\CTHELPER.EXE [2005-08-07 16384]
"CTxfiHlp"=C:\WINDOWS\system32\CTXFIHLP.EXE [2005-08-07 18944]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\LEXPPS.EXE"="C:\WINDOWS\system32\LEXPPS.EXE:*:Enabled:LEXPPS.EXE"
"C:\Program Files\uTorrent\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\uTorrent\utorrent.exe:*:Enabled:µTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
shell\AutoRun\command - E:\Ctrun\Start.exe

======List of files/folders created in the last 1 months======

2010-01-28 18:57:23 ----D---- C:\rsit
2010-01-28 04:15:54 ----A---- C:\WINDOWS\system32\TUProgSt.exe
2010-01-28 04:15:52 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2010-01-28 04:15:51 ----A---- C:\WINDOWS\system32\TuneUpDefragService.exe
2010-01-28 04:13:48 ----D---- C:\Documents and Settings\Jirka\Data aplikací\TuneUp Software
2010-01-28 04:13:20 ----D---- C:\Program Files\TuneUp Utilities 2009
2010-01-28 04:12:47 ----SHD---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\{55A29068-F2CE-456C-9148-C869879E2357}
2010-01-28 04:06:47 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-28 03:27:00 ----A---- C:\WINDOWS\system32\BASSMOD.dll
2010-01-28 03:25:50 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TuneUp Software
2010-01-28 02:55:01 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Google
2010-01-28 02:47:05 ----D---- C:\Documents and Settings\Jirka\Data aplikací\WinRAR
2010-01-28 02:29:51 ----D---- C:\Documents and Settings\Jirka\Data aplikací\uTorrent
2010-01-28 01:43:13 ----D---- C:\Program Files\Common Files\DivX Shared
2010-01-28 01:43:12 ----D---- C:\Program Files\DivX
2010-01-28 01:36:42 ----A---- C:\WINDOWS\iun6002.exe
2010-01-28 01:36:37 ----D---- C:\WINDOWS\system32\languages
2010-01-27 19:03:35 ----RA---- C:\WINDOWS\system32\ctdvinst.dll
2010-01-27 19:03:35 ----RA---- C:\WINDOWS\system32\ctcoinst.dll
2010-01-27 19:03:34 ----RA---- C:\WINDOWS\system32\piaproxy.dll
2010-01-27 19:03:34 ----RA---- C:\WINDOWS\system32\CTHWIUT.DLL
2010-01-27 19:03:34 ----RA---- C:\WINDOWS\system32\ctemupia.dll
2010-01-27 19:03:34 ----RA---- C:\WINDOWS\system32\ctdproxy.dll
2010-01-27 19:03:34 ----RA---- C:\WINDOWS\system32\CT20XUT.DLL
2010-01-27 19:03:33 ----RA---- C:\WINDOWS\system32\ctsblfx.dll
2010-01-27 19:03:33 ----RA---- C:\WINDOWS\system32\CTEXFIFX.dll
2010-01-27 19:03:33 ----RA---- C:\WINDOWS\system32\cteapsfx.dll
2010-01-27 19:03:32 ----RA---- C:\WINDOWS\system32\ctaudfx.dll
2010-01-27 19:03:32 ----RA---- C:\WINDOWS\system32\commonfx.dll
2010-01-27 18:30:38 ----A---- C:\WINDOWS\CTWave32.INI
2010-01-27 18:26:10 ----A---- C:\WINDOWS\sfbm.INI
2010-01-27 17:04:15 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Macromedia
2010-01-27 17:04:15 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Adobe
2010-01-27 16:24:57 ----A---- C:\WINDOWS\system32\VSM Manager.dll
2010-01-27 16:24:57 ----A---- C:\WINDOWS\system32\REX Shared Library.dll
2010-01-27 16:24:57 ----A---- C:\WINDOWS\system32\EASIMME.dll
2010-01-27 16:24:57 ----A---- C:\WINDOWS\system32\EASIDS.dll
2010-01-27 16:14:34 ----A---- C:\WINDOWS\CoolPlay.ini
2010-01-27 16:10:42 ----N---- C:\WINDOWS\Ctregrun.exe
2010-01-27 15:11:12 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2010-01-27 15:11:11 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2010-01-27 15:09:44 ----A---- C:\WINDOWS\CTXFIRES.DLL
2010-01-27 15:06:21 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Creative
2010-01-27 15:05:55 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Creative
2010-01-27 14:51:06 ----A---- C:\WINDOWS\LEXSTAT.INI
2010-01-27 14:50:12 ----A---- C:\WINDOWS\system32\wiafbdrv.dll
2010-01-27 14:50:04 ----A---- C:\WINDOWS\unin0405.exe
2010-01-27 14:07:53 ----D---- C:\Program Files\Recuva
2010-01-27 14:02:49 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ESET
2010-01-27 13:32:19 ----D---- C:\WINDOWS\Prefetch
2010-01-27 13:30:31 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-01-27 13:30:27 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-01-27 13:30:23 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-01-27 13:30:19 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-01-27 13:30:15 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-01-27 13:30:12 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-01-27 13:30:07 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-01-27 13:30:03 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-01-27 13:29:58 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-01-27 13:29:54 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-01-27 13:29:50 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2010-01-27 13:29:46 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-01-27 13:29:42 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-01-27 13:29:39 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2010-01-27 13:29:35 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2010-01-27 13:29:30 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2010-01-27 13:29:25 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-01-27 13:29:21 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2010-01-27 13:29:17 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-01-27 13:29:12 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-01-27 13:29:07 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-01-27 13:29:03 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-01-27 13:28:59 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-01-27 13:28:55 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-01-27 13:28:52 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-01-27 13:28:48 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-01-27 13:28:43 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2010-01-27 13:28:40 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-01-27 13:28:36 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2010-01-27 13:28:32 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-01-27 13:28:28 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-01-27 13:28:24 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-01-27 13:28:17 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-01-27 13:28:12 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-01-27 13:28:07 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$
2010-01-27 13:28:04 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-01-27 13:28:00 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-01-27 13:27:56 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-01-27 13:27:52 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-01-27 13:27:47 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-01-27 13:27:43 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-01-27 13:27:39 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2010-01-27 13:27:36 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-01-27 13:27:32 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-01-27 13:27:28 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-01-27 13:27:24 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-01-27 13:07:56 ----HDC---- C:\WINDOWS\$NtUninstallKB978207$
2010-01-27 12:42:20 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2010-01-27 12:41:36 ----A---- C:\WINDOWS\system32\MRT.exe
2010-01-27 12:40:37 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-01-27 12:40:17 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2010-01-27 12:39:44 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2010-01-27 12:36:38 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Mozilla
2010-01-27 12:25:28 ----A---- C:\WINDOWS\system32\wpa.bak
2010-01-27 12:24:09 ----N---- C:\WINDOWS\system32\tzchange.exe
2010-01-27 12:13:36 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-01-27 12:11:12 ----A---- C:\WINDOWS\system32\wups2.dll
2010-01-27 12:11:12 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2010-01-27 12:11:12 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2010-01-27 12:11:12 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2010-01-26 09:39:45 ----A---- C:\WINDOWS\system32\nvudisp.exe
2010-01-26 09:39:29 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2010-01-26 08:28:45 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Identities
2010-01-26 08:28:39 ----SD---- C:\Documents and Settings\Jirka\Data aplikací\Microsoft
2010-01-26 08:28:39 ----ASH---- C:\Documents and Settings\Jirka\Data aplikací\desktop.ini
2010-01-26 06:12:01 ----A---- C:\WINDOWS\system32\h323log.txt
2010-01-26 06:08:23 ----A---- C:\WINDOWS\system32\hidserv.dll
2010-01-26 06:08:21 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-01-26 06:07:04 ----A---- C:\WINDOWS\system32\usbui.dll
2010-01-26 06:04:25 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-01-26 06:04:23 ----A---- C:\WINDOWS\ODBCINST.INI
2010-01-26 06:04:19 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2010-01-26 06:04:19 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2010-01-26 06:04:19 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2010-01-26 06:04:17 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2010-01-26 06:04:17 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2010-01-26 06:04:17 ----RA---- C:\WINDOWS\system32\kbdur.dll
2010-01-26 06:04:17 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2010-01-26 06:04:17 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2010-01-26 06:04:17 ----RA---- C:\WINDOWS\system32\kbdru.dll
2010-01-26 06:04:17 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2010-01-26 06:04:17 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2010-01-26 06:04:17 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2010-01-26 06:04:17 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2010-01-26 06:04:17 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2010-01-26 06:04:17 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2010-01-26 06:04:15 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2010-01-26 06:04:15 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2010-01-26 06:04:15 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2010-01-26 06:04:15 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2010-01-26 06:04:15 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2010-01-26 06:04:15 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2010-01-26 06:04:15 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2010-01-26 06:04:14 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2010-01-26 06:04:14 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2010-01-26 06:04:14 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2010-01-26 06:04:14 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2010-01-26 06:04:14 ----RA---- C:\WINDOWS\system32\kbdest.dll
2010-01-26 06:04:11 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2010-01-26 06:04:11 ----A---- C:\WINDOWS\system32\kbdsl.dll
2010-01-26 06:04:11 ----A---- C:\WINDOWS\system32\kbdro.dll
2010-01-26 06:04:11 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2010-01-26 06:04:11 ----A---- C:\WINDOWS\system32\kbdpl.dll
2010-01-26 06:04:11 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2010-01-26 06:04:11 ----A---- C:\WINDOWS\system32\kbdhu.dll
2010-01-26 06:04:11 ----A---- C:\WINDOWS\system32\kbdcr.dll
2010-01-26 06:04:10 ----A---- C:\WINDOWS\system32\kbdycl.dll
2010-01-26 06:04:10 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2010-01-26 06:04:10 ----A---- C:\WINDOWS\system32\irclass.dll
2010-01-26 06:04:09 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-01-26 06:04:09 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-01-26 06:04:09 ----A---- C:\WINDOWS\system32\dgsetup.dll
2010-01-26 06:04:09 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-01-26 06:04:07 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2010-01-26 06:04:07 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-01-26 06:04:07 ----A---- C:\WINDOWS\system32\batt.dll
2010-01-26 06:04:06 ----A---- C:\WINDOWS\system32\storprop.dll
2010-01-26 06:04:06 ----A---- C:\WINDOWS\notepad.exe
2010-01-26 06:03:58 ----ASH---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\desktop.ini
2010-01-26 06:03:56 ----RA---- C:\WINDOWS\SET21.tmp
2010-01-26 06:03:54 ----RA---- C:\WINDOWS\SET8.tmp
2010-01-26 06:03:52 ----RA---- C:\WINDOWS\SET4.tmp
2010-01-26 06:03:50 ----RA---- C:\WINDOWS\SET3.tmp
2010-01-26 06:03:39 ----SD---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Microsoft
2010-01-26 05:21:14 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-01-26 05:20:59 ----A---- C:\WINDOWS\control.ini
2010-01-26 05:20:59 ----A---- C:\AUTOEXEC.BAT
2010-01-26 05:20:38 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-01-26 05:19:50 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-01-26 05:19:43 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-01-26 05:19:37 ----HD---- C:\Program Files\WindowsUpdate
2010-01-26 05:19:01 ----A---- C:\WINDOWS\system32\atrace.dll
2010-01-26 05:18:59 ----A---- C:\WINDOWS\system32\desktop.ini
2010-01-26 05:18:59 ----A---- C:\WINDOWS\desktop.ini
2010-01-26 05:18:53 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2010-01-26 05:18:52 ----A---- C:\WINDOWS\system32\acctres.dll
2010-01-26 05:18:51 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-01-26 05:18:45 ----A---- C:\WINDOWS\system32\wuweb.dll
2010-01-26 05:18:44 ----A---- C:\WINDOWS\system32\wups.dll
2010-01-26 05:18:44 ----A---- C:\WINDOWS\system32\wucltui.dll
2010-01-26 05:18:44 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-01-26 05:18:44 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2010-01-26 05:18:44 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-01-26 05:18:44 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2010-01-26 05:18:44 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-01-26 05:18:44 ----A---- C:\WINDOWS\system32\wuapi.dll
2010-01-26 05:18:44 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2010-01-26 05:18:44 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2010-01-26 05:18:43 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-01-26 05:18:43 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-01-26 05:18:38 ----A---- C:\WINDOWS\system32\safrslv.dll
2010-01-26 05:18:38 ----A---- C:\WINDOWS\system32\safrdm.dll
2010-01-26 05:18:38 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2010-01-26 05:18:38 ----A---- C:\WINDOWS\system32\racpldlg.dll
2010-01-26 05:18:34 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-01-26 05:18:34 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-01-26 05:18:34 ----A---- C:\WINDOWS\system32\srclient.dll
2010-01-26 05:18:34 ----A---- C:\WINDOWS\system32\fltmc.exe
2010-01-26 05:18:34 ----A---- C:\WINDOWS\system32\fltlib.dll
2010-01-26 05:18:33 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2010-01-26 05:18:33 ----A---- C:\WINDOWS\system32\msconf.dll
2010-01-26 05:18:33 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2010-01-26 05:18:33 ----A---- C:\WINDOWS\system32\mnmdd.dll
2010-01-26 05:18:33 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2010-01-26 05:18:33 ----A---- C:\WINDOWS\system32\ils.dll
2010-01-26 05:18:30 ----A---- C:\WINDOWS\system32\msoert2.dll
2010-01-26 05:18:30 ----A---- C:\WINDOWS\system32\msoeacct.dll
2010-01-26 05:18:29 ----A---- C:\WINDOWS\system32\inetres.dll
2010-01-26 05:18:29 ----A---- C:\WINDOWS\system32\inetcomm.dll
2010-01-26 05:18:27 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-01-26 05:18:27 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-01-26 05:18:27 ----A---- C:\WINDOWS\system32\mstask.dll
2010-01-26 05:18:26 ----A---- C:\WINDOWS\system32\isign32.dll
2010-01-26 05:18:26 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-01-26 05:18:26 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-01-26 05:18:26 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-01-26 05:18:05 ----D---- C:\Program Files\ComPlus Applications
2010-01-26 05:18:03 ----A---- C:\WINDOWS\vbaddin.ini
2010-01-26 05:18:03 ----A---- C:\WINDOWS\vb.ini
2010-01-26 05:17:24 ----A---- C:\WINDOWS\system32\write.exe
2010-01-26 05:17:19 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-01-26 05:17:19 ----A---- C:\WINDOWS\system32\hticons.dll
2010-01-26 05:17:19 ----A---- C:\WINDOWS\system32\avwav.dll
2010-01-26 05:17:19 ----A---- C:\WINDOWS\system32\avtapi.dll
2010-01-26 05:17:19 ----A---- C:\WINDOWS\system32\avmeter.dll
2010-01-26 05:17:18 ----A---- C:\WINDOWS\system32\winchat.exe
2010-01-26 05:17:13 ----A---- C:\WINDOWS\system32\getuname.dll
2010-01-26 05:17:12 ----A---- C:\WINDOWS\system32\winmine.exe
2010-01-26 05:17:12 ----A---- C:\WINDOWS\system32\sol.exe
2010-01-26 05:17:12 ----A---- C:\WINDOWS\system32\charmap.exe
2010-01-26 05:17:12 ----A---- C:\WINDOWS\system32\calc.exe
2010-01-26 05:17:11 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-01-26 05:17:11 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-01-26 05:17:11 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-01-26 05:17:11 ----A---- C:\WINDOWS\system32\tskill.exe
2010-01-26 05:17:11 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-01-26 05:17:11 ----A---- C:\WINDOWS\system32\tscon.exe
2010-01-26 05:17:11 ----A---- C:\WINDOWS\system32\shadow.exe
2010-01-26 05:17:11 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-01-26 05:17:11 ----A---- C:\WINDOWS\system32\reset.exe
2010-01-26 05:17:11 ----A---- C:\WINDOWS\system32\regini.exe
2010-01-26 05:17:11 ----A---- C:\WINDOWS\system32\mshearts.exe
2010-01-26 05:17:11 ----A---- C:\WINDOWS\system32\freecell.exe
2010-01-26 05:17:10 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-01-26 05:17:10 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-01-26 05:17:10 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-01-26 05:17:10 ----A---- C:\WINDOWS\system32\msg.exe
2010-01-26 05:17:10 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-01-26 05:17:10 ----A---- C:\WINDOWS\system32\logoff.exe
2010-01-26 05:17:10 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-01-26 05:17:09 ----A---- C:\WINDOWS\system32\stclient.dll
2010-01-26 05:17:09 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-01-26 05:17:09 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-01-26 05:17:09 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-01-26 05:17:09 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-01-26 05:17:09 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-01-26 05:17:09 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-01-26 05:17:09 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-01-26 05:17:05 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-01-26 05:17:04 ----A---- C:\WINDOWS\system32\sndrec32.exe
2010-01-26 05:17:04 ----A---- C:\WINDOWS\system32\accwiz.exe
2010-01-26 05:17:03 ----A---- C:\WINDOWS\system32\mspaint.exe
2010-01-26 05:17:03 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-01-26 05:17:03 ----A---- C:\WINDOWS\system32\hypertrm.dll
2010-01-26 05:17:02 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-01-26 05:17:02 ----A---- C:\WINDOWS\system32\spider.exe
2010-01-26 05:17:02 ----A---- C:\WINDOWS\system32\clipbrd.exe
2010-01-26 05:17:01 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2010-01-26 05:17:01 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-01-26 05:17:01 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-01-26 05:17:01 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-01-26 05:17:01 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-01-26 05:17:01 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-01-26 05:17:01 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-01-26 05:17:01 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-01-26 05:17:01 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-01-26 05:17:00 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-01-26 05:17:00 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-01-26 05:17:00 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-01-26 05:17:00 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-01-26 05:17:00 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-01-26 05:17:00 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-01-26 05:17:00 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-01-26 05:17:00 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-01-26 05:17:00 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-01-26 05:16:59 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-01-26 05:16:59 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-01-26 05:16:59 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-01-26 05:16:59 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-01-26 05:16:58 ----A---- C:\WINDOWS\system32\colbact.dll
2010-01-26 05:16:58 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-01-26 05:16:58 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-01-26 05:16:58 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-01-26 05:16:58 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-01-26 05:16:57 ----A---- C:\WINDOWS\system32\comuid.dll
2010-01-26 05:16:57 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-01-26 05:16:57 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-01-26 05:16:52 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-01-26 05:16:52 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-01-26 05:16:52 ----A---- C:\WINDOWS\system32\licwmi.dll
2010-01-26 05:16:52 ----A---- C:\WINDOWS\system32\cmprops.dll
2010-01-26 04:46:16 ----SH---- C:\boot.ini
2010-01-26 04:45:59 ----D---- C:\WINDOWS\setup.pss
2010-01-26 04:15:51 ----SHD---- C:\RECYCLER
2010-01-26 03:51:30 ----A---- C:\ComboFix.txt
2010-01-26 03:33:03 ----D---- C:\WINDOWS\ERDNT
2010-01-26 03:31:05 ----D---- C:\Qoobox
2010-01-26 02:24:59 ----D---- C:\Program Files\Seznam.cz
2010-01-24 23:16:28 ----D---- C:\WINDOWS\system32\Data
2010-01-24 23:15:13 ----D---- C:\lxkx75
2010-01-24 21:51:31 ----D---- C:\Program Files\SUPERAntiSpyware
2010-01-15 06:15:29 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-01-13 18:14:00 ----HDC---- C:\WINDOWS\$NtUninstallKB955759_0$
2010-01-13 18:13:19 ----HDC---- C:\WINDOWS\$NtUninstallKB972270_0$
2010-01-02 20:01:47 ----D---- C:\Program Files\Common Files\Skype

======List of files/folders modified in the last 1 months======

2010-01-28 18:57:35 ----D---- C:\Program Files\trend micro
2010-01-28 18:57:23 ----D---- C:\WINDOWS\temp
2010-01-28 14:34:17 ----D---- C:\WINDOWS
2010-01-28 13:02:05 ----SHD---- C:\WINDOWS\Installer
2010-01-28 12:59:35 ----RD---- C:\Program Files
2010-01-28 12:59:35 ----D---- C:\WINDOWS\system32
2010-01-28 12:59:30 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-28 04:15:55 ----D---- C:\Config.Msi
2010-01-28 04:15:54 ----SD---- C:\WINDOWS\Tasks
2010-01-28 03:22:14 ----D---- C:\Program Files\WinRAR
2010-01-28 02:55:01 ----D---- C:\Program Files\Google
2010-01-28 02:28:53 ----D---- C:\Program Files\uTorrent
2010-01-28 02:04:21 ----D---- C:\WINDOWS\system32\drivers
2010-01-28 01:43:20 ----D---- C:\WINDOWS\WinSxS
2010-01-28 01:43:13 ----D---- C:\Program Files\Common Files
2010-01-28 01:36:39 ----D---- C:\Program Files\Codec Pack - All In 1
2010-01-28 01:15:44 ----A---- C:\WINDOWS\win.ini
2010-01-27 19:03:37 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-01-27 19:03:21 ----D---- C:\WINDOWS\system32\CatRoot
2010-01-27 19:03:19 ----HD---- C:\WINDOWS\inf
2010-01-27 18:54:07 ----D---- C:\Program Files\Creative
2010-01-27 18:54:00 ----D---- C:\WINDOWS\system
2010-01-27 18:36:51 ----A---- C:\WINDOWS\system32\ct_oal.dll
2010-01-27 17:14:40 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-27 15:03:08 ----D---- C:\WINDOWS\security
2010-01-27 15:03:08 ----D---- C:\WINDOWS\RegisteredPackages
2010-01-27 14:50:43 ----D---- C:\Program Files\Lexmark X74-X75
2010-01-27 14:06:31 ----D---- C:\WINDOWS\Debug
2010-01-27 13:51:37 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-01-27 13:51:32 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-01-27 13:51:24 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-01-27 13:51:18 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2010-01-27 13:32:01 ----D---- C:\WINDOWS\system32\Setup
2010-01-27 13:32:01 ----D---- C:\WINDOWS\AppPatch
2010-01-27 13:32:00 ----RSD---- C:\WINDOWS\Fonts
2010-01-27 13:32:00 ----D---- C:\WINDOWS\system32\wbem
2010-01-27 13:29:51 ----D---- C:\Program Files\Outlook Express
2010-01-27 13:25:30 ----D---- C:\WINDOWS\Help
2010-01-27 13:25:30 ----D---- C:\Program Files\Windows Media Player
2010-01-27 13:25:24 ----D---- C:\WINDOWS\network diagnostic
2010-01-27 13:25:24 ----D---- C:\WINDOWS\ime
2010-01-27 13:25:17 ----D---- C:\WINDOWS\system32\usmt
2010-01-27 13:25:17 ----D---- C:\WINDOWS\system32\cs-cz
2010-01-27 13:25:16 ----D---- C:\WINDOWS\system32\cs
2010-01-27 13:25:16 ----D---- C:\WINDOWS\system32\bits
2010-01-27 13:25:16 ----D---- C:\WINDOWS\PeerNet
2010-01-27 13:25:16 ----D---- C:\WINDOWS\l2schemas
2010-01-27 13:25:16 ----D---- C:\Program Files\Movie Maker
2010-01-27 13:25:16 ----D---- C:\Program Files\Internet Explorer
2010-01-27 13:24:09 ----D---- C:\WINDOWS\system32\Restore
2010-01-27 13:24:09 ----D---- C:\WINDOWS\system32\npp
2010-01-27 13:24:08 ----D---- C:\WINDOWS\msagent
2010-01-27 13:24:07 ----D---- C:\WINDOWS\srchasst
2010-01-27 13:24:07 ----D---- C:\Program Files\netmeeting
2010-01-27 13:24:06 ----D---- C:\WINDOWS\system32\Com
2010-01-27 13:24:04 ----D---- C:\Program Files\Windows NT
2010-01-27 13:24:02 ----D---- C:\Program Files\Common Files\System
2010-01-27 13:23:48 ----D---- C:\WINDOWS\system32\oobe
2010-01-27 13:21:54 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2010-01-27 13:20:35 ----D---- C:\WINDOWS\EHome
2010-01-27 13:08:14 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
2010-01-27 13:07:35 ----HDC---- C:\WINDOWS\$NtUninstallKB974318_0$
2010-01-27 13:07:03 ----HD---- C:\WINDOWS\$hf_mig$
2010-01-27 13:06:36 ----D---- C:\WINDOWS\WBEM
2010-01-27 13:06:30 ----D---- C:\WINDOWS\Media
2010-01-27 13:06:24 ----HDC---- C:\WINDOWS\ie8
2010-01-27 12:42:55 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_0$
2010-01-27 12:42:34 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-01-27 12:42:16 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_0$
2010-01-27 12:41:30 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_0$
2010-01-27 12:41:05 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-01-27 12:40:42 ----HDC---- C:\WINDOWS\$NtUninstallKB951748_0$
2010-01-27 12:40:33 ----HDC---- C:\WINDOWS\$NtUninstallKB970238_0$
2010-01-27 12:40:26 ----HDC---- C:\WINDOWS\$NtUninstallKB971486_0$
2010-01-27 12:39:39 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$
2010-01-27 12:39:35 ----HDC---- C:\WINDOWS\$NtUninstallKB975467_0$
2010-01-27 12:39:29 ----HDC---- C:\WINDOWS\$NtUninstallKB968389_0$
2010-01-27 12:36:31 ----D---- C:\Program Files\Mozilla Firefox
2010-01-27 12:13:11 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2010-01-27 12:11:17 ----D---- C:\WINDOWS\SoftwareDistribution
2010-01-27 12:10:48 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-01-26 09:59:51 ----D---- C:\Program Files\Common Files\Logitech
2010-01-26 09:59:50 ----D---- C:\Program Files\Logitech
2010-01-26 09:58:27 ----D---- C:\WINDOWS\system32\DirectX
2010-01-26 09:39:45 ----D---- C:\WINDOWS\nview
2010-01-26 09:39:10 ----D---- C:\NVIDIA
2010-01-26 09:09:13 ----D---- C:\Documents and Settings
2010-01-26 06:04:20 ----A---- C:\WINDOWS\system.ini
2010-01-26 05:58:00 ----D---- C:\WINDOWS\system32\1029
2010-01-26 05:57:49 ----D---- C:\WINDOWS\twain_32
2010-01-26 05:57:21 ----D---- C:\WINDOWS\system32\ras
2010-01-26 05:56:54 ----D---- C:\WINDOWS\system32\icsxml
2010-01-26 05:56:27 ----D---- C:\WINDOWS\system32\ias
2010-01-26 05:56:23 ----D---- C:\WINDOWS\system32\1033
2010-01-26 05:55:21 ----D---- C:\WINDOWS\UbiSoft
2010-01-26 05:55:21 ----D---- C:\WINDOWS\system32\XPSViewer
2010-01-26 05:55:20 ----D---- C:\WINDOWS\system32\Windows 7 RTM Icons
2010-01-26 05:55:20 ----D---- C:\WINDOWS\system32\Windows 7 Icon-Pack by WindowsNET
2010-01-26 05:55:20 ----D---- C:\WINDOWS\system32\Windows 7 Icon Pack
2010-01-26 05:55:19 ----D---- C:\WINDOWS\system32\URTTEMP
2010-01-26 05:55:17 ----D---- C:\WINDOWS\system32\Neon icons
2010-01-26 05:55:16 ----RD---- C:\WINDOWS\system32\ico
2010-01-26 05:55:16 ----D---- C:\WINDOWS\system32\IOSUBSYS
2010-01-26 05:55:15 ----D---- C:\WINDOWS\system32\en-US
2010-01-26 05:55:07 ----HD---- C:\WINDOWS\ShellNew
2010-01-26 05:55:05 ----D---- C:\WINDOWS\Replay Media Catcher
2010-01-26 05:55:05 ----D---- C:\WINDOWS\repair
2010-01-26 05:55:04 ----RD---- C:\WINDOWS\Offline Web Pages
2010-01-26 05:55:03 ----D---- C:\WINDOWS\Logs
2010-01-26 05:54:58 ----HDC---- C:\WINDOWS\ie7
2010-01-26 05:54:56 ----RSD---- C:\WINDOWS\assembly
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB975025_0$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB974571_0$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB974392_0$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB974112_0$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973869_0$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973815_0$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973507_0$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973354_0$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973346$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB971657_0$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB971633_0$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB971557_0$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB970653-v3$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB969947_0$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB969898$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB969059_0$
2010-01-26 05:54:55 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB967715_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB961501_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB960859_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB960225_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB959426_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB958687_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB958644_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB957097_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956844_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956802_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB955069_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB953839$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB951376$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB951072-v2$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB951066_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB950762_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB948881$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB948590$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB947864$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB946026$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB945553$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB944653$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB944338$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB943485$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB943460$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB943055$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB941693$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB941644$
2010-01-26 05:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB941568$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB941202$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB938828$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB938127$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB936021$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB935840$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB935839$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB933729$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB932168$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB931784$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB931261$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB930916$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB930178$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB929123$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB928843$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB928255$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB927891$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB927802$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB927779$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB926436$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB926255$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB926239$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB925902$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB925398_WMP64$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB924667$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB924496$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB924270$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB923980$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB923414$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB923191$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB922819$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB922582$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB920872$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB920685$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB920683$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB920670$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB920213$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB919007$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB918439$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB918118$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB916595$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB915800-v4$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB915800$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB914440$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB914389$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB914388$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB913580$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB911927$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB911564$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB911562$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB911280$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB910437$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB908531$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB908519$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB905749$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB905414$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB904942$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB902400$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB901214$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB901017$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB900725$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB900485$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB899591$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB899587$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB896428$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB896423$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB896358$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB894391$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB893756$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB891781$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB890859$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB890046$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB888302$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB887472$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB886185$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB885836$
2010-01-26 05:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB873339$
2010-01-26 05:25:44 ----SHD---- C:\System Volume Information
2010-01-26 05:23:58 ----D---- C:\WINDOWS\system32\config
2010-01-26 05:20:35 ----D---- C:\WINDOWS\Registration
2010-01-26 05:19:53 ----RD---- C:\WINDOWS\Web
2010-01-26 05:17:56 ----D---- C:\WINDOWS\system32\MsDtc
2010-01-26 05:17:24 ----D---- C:\WINDOWS\Cursors
2010-01-25 18:50:13 ----D---- C:\Temp
2010-01-24 21:41:35 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-01-20 10:27:17 ----D---- C:\Program Files\Native Instruments
2010-01-20 08:41:42 ----D---- C:\Program Files\SMS posílač Treca
2010-01-20 07:05:22 ----D---- C:\Program Files\LucasArts
2010-01-05 01:45:36 ----D---- C:\Downloads
2010-01-03 14:28:56 ----HD---- C:\WINDOWS\Icons

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-11-16 96408]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-11-16 116520]
R3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\system32\drivers\ctac32k.sys [2005-08-07 501760]
R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2005-08-07 439424]
R3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\system32\drivers\ctprxy2k.sys [2005-08-07 7168]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\drivers\ctsfm2k.sys [2005-08-07 142848]
R3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\system32\drivers\emupia2k.sys [2005-08-07 77824]
R3 ha20x2k;Creative 20X HAL Driver; C:\WINDOWS\system32\drivers\ha20x2k.sys [2005-08-07 1093632]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-12-05 7435392]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2005-08-07 114688]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2008-01-24 19336]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2008-01-24 28168]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2008-01-24 14728]
R3 WmXlCore;Logitech Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2008-01-24 48904]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 CT20XUT;CT20XUT; C:\WINDOWS\system32\drivers\CT20XUT.SYS []
S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\WINDOWS\system32\drivers\ctdvda2k.sys [2005-07-13 340704]
S3 CTEXFIFX;CTEXFIFX; C:\WINDOWS\system32\drivers\CTEXFIFX.SYS []
S3 CTHWIUT;CTHWIUT; C:\WINDOWS\system32\drivers\CTHWIUT.SYS []
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
R2 LexBceS;LexBce Server; C:\WINDOWS\system32\LEXBCES.EXE [2002-10-14 303104]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-12-05 155716]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:\WINDOWS\System32\TUProgSt.exe [2010-01-28 604488]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-10-11 38912]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-11-16 20680]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2010-01-28 361288]

-----------------EOF-----------------

#11 Příspěvek od **Roli** » 28 led 2010 22:03

Pokud jsi tak ještě neučinil, přesuň Combofix na plochu

otevři si Poznámkový blok

do něj zkopíruj skript z následujícího okna:

Kód: Vybrat vše

File::  
c:\windows\system32\A-UQrJepOc3z.exe
C:\WINDOWS\SET21.tmp
C:\WINDOWS\SET8.tmp
C:\WINDOWS\SET4.tmp
C:\WINDOWS\SET3.tmp

FireFox::
FF - ProfilePath - c:\documents and settings\Jiří\Data aplikací\Mozilla\Firefox\Profiles\lw1qpff2.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www3.iamwired.net/websearch.php?src=tops&search=
FF - prefs.js: keyword.URL - hxxp://www3.iamwired.net/websearch.php?src=tops&search=

ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:

Obrázek

Po aplikaci na Tebe vypadne další log, zkopíruj ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,

v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci

jirka bj · #12 Příspěvek od **jirka bj** » 29 led 2010 11:14

ComboFix 10-01-28.05 - Jirka 29.01.2010 11:07:12.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2047.1389 [GMT 1:00]
Spuštěný z: c:\documents and settings\Jirka\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Jirka\Plocha\CFScript.txt
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\recycler\S-1-5-21-73586283-1123561945-839522115-1004

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-12-28 do 2010-01-29 )))))))))))))))))))))))))))))))
.

2010-01-29 10:04 . 2010-01-29 10:03 390144 ----a-w- c:\windows\system32\CF27841.exe
2010-01-29 09:35 . 2001-10-19 13:40 1683792 ----a-w- c:\windows\system32\wmvcore2.dll
2010-01-29 09:35 . 2001-10-19 13:40 438608 ----a-w- c:\windows\system32\wmv8dmod.dll
2010-01-29 09:35 . 2001-10-19 13:40 665424 ----a-w- c:\windows\system32\wmv8dmoe.dll
2010-01-29 09:35 . 2001-10-19 13:39 572752 ----a-w- c:\windows\system32\wmvdmoe.dll
2010-01-29 09:33 . 2010-01-29 09:51 -------- d-----w- c:\program files\coolpro2
2010-01-28 20:20 . 2010-01-28 20:20 -------- d-----w- c:\program files\ASIO4ALL v2
2010-01-28 20:08 . 2010-01-28 20:08 -------- d-----w- c:\documents and settings\Šimon
2010-01-28 18:18 . 2005-05-26 14:34 2297552 ----a-w- c:\windows\system32\d3dx9_26.dll
2010-01-28 17:57 . 2010-01-28 17:57 -------- d-----w- C:\rsit
2010-01-28 03:15 . 2010-01-28 03:15 604488 ----a-w- c:\windows\system32\TUProgSt.exe
2010-01-28 03:15 . 2009-11-16 11:25 29000 ----a-w- c:\windows\system32\uxtuneup.dll
2010-01-28 03:15 . 2010-01-28 03:15 361288 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2010-01-28 03:13 . 2010-01-28 03:15 -------- d-----w- c:\program files\TuneUp Utilities 2009
2010-01-28 02:36 . 2010-01-28 02:36 -------- d-----w- c:\windows\system32\Windows 7's icons
2010-01-28 00:43 . 2010-01-28 00:43 -------- d-----w- c:\program files\Common Files\DivX Shared
2010-01-28 00:43 . 2010-01-28 02:47 -------- d-----w- c:\program files\DivX
2010-01-28 00:36 . 2010-01-28 00:35 737280 ----a-w- c:\windows\iun6002.exe
2010-01-28 00:36 . 2010-01-28 00:36 -------- d-----w- c:\windows\system32\languages
2010-01-27 15:24 . 2002-09-19 16:33 114688 ----a-w- c:\windows\system32\EASIMME.dll
2010-01-27 15:24 . 2002-08-13 10:34 53248 ----a-w- c:\windows\system32\VSM Manager.dll
2010-01-27 15:24 . 2002-08-13 10:34 258048 ----a-w- c:\windows\system32\REX Shared Library.dll
2010-01-27 15:24 . 2002-08-13 10:34 126976 ----a-w- c:\windows\system32\EASIDS.dll
2010-01-27 15:10 . 1999-10-10 17:00 41984 ------w- c:\windows\Ctregrun.exe
2010-01-27 14:11 . 2010-01-27 17:36 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2010-01-27 14:11 . 2010-01-27 18:04 81920 ----a-w- c:\windows\system32\OpenAL32.dll
2010-01-27 14:09 . 2005-08-07 22:10 3072 ----a-w- c:\windows\CTXFIRES.DLL
2010-01-27 13:50 . 2008-04-13 18:45 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2010-01-27 13:50 . 2008-04-13 18:45 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2010-01-27 13:50 . 2001-10-24 11:25 87040 -c--a-w- c:\windows\system32\dllcache\wiafbdrv.dll
2010-01-27 13:50 . 2001-10-24 11:25 87040 ----a-w- c:\windows\system32\wiafbdrv.dll
2010-01-27 13:50 . 1997-04-18 10:46 297984 ----a-w- c:\windows\unin0405.exe
2010-01-27 13:50 . 2010-01-27 13:50 -------- d-----w- c:\documents and settings\Jirka\WINDOWS
2010-01-27 13:07 . 2010-01-27 13:07 -------- d-----w- c:\program files\Recuva
2010-01-27 12:15 . 2010-01-27 12:15 -------- d-sh--w- c:\documents and settings\Jirka\IECompatCache
2010-01-27 12:13 . 2010-01-27 12:13 -------- d-sh--w- c:\documents and settings\Jirka\PrivacIE
2010-01-27 12:13 . 2010-01-27 12:13 -------- d-sh--w- c:\documents and settings\Jirka\IETldCache
2010-01-27 12:07 . 2009-12-11 08:38 69120 -c----w- c:\windows\system32\dllcache\iecompat.dll
2010-01-27 12:06 . 2009-12-21 19:08 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2010-01-27 12:06 . 2009-12-21 19:08 594432 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2010-01-27 12:06 . 2009-12-21 19:08 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2010-01-27 12:06 . 2009-12-21 19:08 1985536 -c----w- c:\windows\system32\dllcache\iertutil.dll
2010-01-27 12:06 . 2009-12-21 19:08 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2010-01-27 12:06 . 2009-12-21 19:08 11070464 -c----w- c:\windows\system32\dllcache\ieframe.dll
2010-01-27 11:38 . 2004-08-03 21:29 25471 ------w- c:\windows\system32\drivers\watv10nt.sys
2010-01-27 11:38 . 2004-08-03 21:29 22271 ------w- c:\windows\system32\drivers\watv06nt.sys
2010-01-27 11:38 . 2004-08-03 21:29 11935 ------w- c:\windows\system32\drivers\wadv11nt.sys
2010-01-27 11:38 . 2004-08-03 21:29 11871 ------w- c:\windows\system32\drivers\wadv09nt.sys
2010-01-27 11:38 . 2004-08-03 21:29 11807 ------w- c:\windows\system32\drivers\wadv07nt.sys
2010-01-27 11:38 . 2004-08-03 21:29 11295 ------w- c:\windows\system32\drivers\wadv08nt.sys
2010-01-27 11:36 . 2010-01-27 11:36 0 ----a-w- c:\windows\nsreg.dat
2010-01-27 11:24 . 2008-06-14 17:35 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2010-01-27 11:24 . 2008-06-14 17:35 272128 ------w- c:\windows\system32\drivers\bthport.sys
2010-01-27 11:24 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2010-01-27 11:18 . 2008-05-08 14:02 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2010-01-27 11:18 . 2008-10-24 11:21 455296 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2010-01-27 11:18 . 2008-12-11 10:57 333952 -c----w- c:\windows\system32\dllcache\srv.sys
2010-01-27 11:18 . 2009-07-10 13:28 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2010-01-27 11:17 . 2008-04-11 19:06 691712 -c----w- c:\windows\system32\dllcache\inetcomm.dll
2010-01-27 11:17 . 2008-10-15 16:38 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2010-01-27 11:16 . 2008-04-21 21:15 216576 -c----w- c:\windows\system32\dllcache\wordpad.exe
2010-01-27 11:13 . 2009-01-07 17:20 26144 ----a-w- c:\windows\system32\spupdsvc.exe
2010-01-27 11:11 . 2009-08-06 18:24 44768 ----a-w- c:\windows\system32\wups2.dll
2010-01-27 11:10 . 2010-01-27 11:10 -------- d-s---w- c:\documents and settings\Jirka\UserData
2010-01-26 08:39 . 2007-12-05 00:41 356352 ----a-w- c:\windows\system32\nvudisp.exe
2010-01-26 08:39 . 2007-12-05 01:53 356352 ----a-w- c:\windows\system32\NVUNINST.EXE
2010-01-26 08:33 . 2005-04-14 15:42 16496 ------w- c:\windows\system32\drivers\NVXBAR.SYS
2010-01-26 08:32 . 2005-04-14 15:42 141582 ------w- c:\windows\system32\drivers\NVCAP.SYS
2010-01-26 07:28 . 2010-01-29 10:07 -------- d-----w- c:\documents and settings\Jirka\Plocha
2010-01-26 07:28 . 2010-01-29 10:07 -------- d--h--r- c:\documents and settings\Jirka\Data aplikací
2010-01-26 07:28 . 2010-01-29 06:13 -------- d-----r- c:\documents and settings\Jirka\Dokumenty
2010-01-26 07:28 . 2010-01-27 12:13 -------- d-----r- c:\documents and settings\Jirka\Oblíbené položky
2010-01-26 07:28 . 2010-01-26 05:03 -------- d--h--w- c:\documents and settings\Jirka\Okolní tiskárny
2010-01-26 07:28 . 2010-01-26 05:03 -------- d--h--w- c:\documents and settings\Jirka\Okolní síť
2010-01-26 07:28 . 2010-01-26 05:03 -------- d-----r- c:\documents and settings\Jirka\Nabídka Start
2010-01-26 07:28 . 2010-01-26 04:17 -------- d--h--w- c:\documents and settings\Jirka\Šablony
2010-01-26 07:28 . 2010-01-29 08:09 -------- d-----w- c:\documents and settings\Jirka
2010-01-26 05:09 . 2008-04-13 16:39 142592 ----a-w- c:\windows\system32\drivers\aec.sys
2010-01-26 05:09 . 2008-04-13 18:45 56576 ----a-w- c:\windows\system32\drivers\swmidi.sys
2010-01-26 05:09 . 2008-04-13 18:45 52864 ----a-w- c:\windows\system32\drivers\dmusic.sys
2010-01-26 05:09 . 2008-04-13 18:39 7552 ----a-w- c:\windows\system32\drivers\mskssrv.sys
2010-01-26 05:07 . 2008-04-14 02:14 58496 ----a-w- c:\windows\system32\drivers\redbook.sys
2010-01-26 05:07 . 2001-08-17 21:46 6400 ----a-w- c:\windows\system32\drivers\enum1394.sys
2010-01-26 05:07 . 2004-08-03 22:31 20992 ----a-w- c:\windows\system32\drivers\RTL8139.sys
2010-01-26 05:07 . 2008-04-14 03:22 75264 ----a-w- c:\windows\system32\usbui.dll
2010-01-26 04:44 . 2010-01-27 18:43 -------- d-----w- c:\documents and settings\Dája.BLUE-D72F6A8600
2010-01-26 04:24 . 2010-01-26 04:24 -------- d-sh--w- c:\documents and settings\LocalService.NT AUTHORITY
2010-01-26 04:24 . 2010-01-26 04:24 -------- d-----w- c:\documents and settings\LocalService.NT AUTHORITY\Data aplikací
2010-01-26 04:24 . 2010-01-26 04:24 -------- d-----w- c:\documents and settings\NetworkService.NT AUTHORITY\Data aplikací
2010-01-26 04:24 . 2010-01-26 04:24 -------- d-sh--w- c:\documents and settings\NetworkService.NT AUTHORITY
2010-01-26 04:23 . 2006-03-02 12:00 31360 -c--a-w- c:\windows\system32\dllcache\weitekp9.sys
2010-01-26 04:21 . 2006-03-02 12:00 10096640 -c--a-w- c:\windows\system32\dllcache\hwxcht.dll
2010-01-26 04:19 . 2010-01-27 14:02 -------- d-sh--w- c:\documents and settings\All Users.WINDOWS\DRM
2010-01-26 04:19 . 2006-03-02 12:00 99840 -c--a-w- c:\windows\system32\dllcache\helphost.exe
2010-01-26 04:19 . 2006-03-02 12:00 7168 -c--a-w- c:\windows\system32\dllcache\hcappres.dll
2010-01-26 04:19 . 2006-03-02 12:00 35328 -c--a-w- c:\windows\system32\dllcache\notiflag.exe
2010-01-26 04:19 . 2006-03-02 12:00 21504 -c--a-w- c:\windows\system32\dllcache\brpinfo.dll
2010-01-26 04:19 . 2006-03-02 12:00 11264 -c--a-w- c:\windows\system32\dllcache\atrace.dll
2010-01-26 04:19 . 2006-03-02 12:00 11264 ----a-w- c:\windows\system32\atrace.dll
2010-01-26 04:17 . 2006-03-02 12:00 5632 -c--a-w- c:\windows\system32\dllcache\write.exe
2010-01-26 04:16 . 2008-06-12 14:24 956928 ----a-w- c:\windows\system32\msdtctm.dll
2010-01-26 01:24 . 2010-01-26 01:26 -------- d-----w- c:\program files\Seznam.cz
2010-01-24 22:16 . 2010-01-27 18:03 -------- d-----w- c:\windows\system32\Data
2010-01-24 22:15 . 2010-01-24 22:15 -------- d-----w- C:\lxkx75
2010-01-24 20:51 . 2010-01-24 20:51 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-01-02 19:01 . 2010-01-02 19:01 -------- d-----w- c:\program files\Common Files\Skype

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-29 06:09 . 2008-04-25 13:32 -------- d-----w- c:\program files\Codec Pack - All In 1
2010-01-29 06:08 . 2009-02-16 23:40 -------- d-----w- c:\program files\Ashampoo
2010-01-28 18:09 . 2009-04-13 11:16 -------- d-----w- c:\program files\LucasArts
2010-01-28 17:57 . 2009-04-20 10:20 -------- d-----w- c:\program files\trend micro
2010-01-28 11:59 . 2006-03-02 12:00 46016 ----a-w- c:\windows\system32\perfc005.dat
2010-01-28 11:59 . 2006-03-02 12:00 309716 ----a-w- c:\windows\system32\perfh005.dat
2010-01-28 01:55 . 2009-01-27 23:21 -------- d-----w- c:\program files\Google
2010-01-28 01:28 . 2009-08-09 20:20 -------- d-----w- c:\program files\uTorrent
2010-01-27 17:54 . 2008-04-25 13:49 -------- d-----w- c:\program files\Creative
2010-01-27 17:36 . 2005-08-07 21:54 109080 ----a-w- c:\windows\system32\ct_oal.dll
2010-01-27 16:14 . 2008-04-25 13:26 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-27 13:50 . 2008-10-22 15:34 -------- d-----w- c:\program files\Lexmark X74-X75
2010-01-27 12:26 . 2010-01-26 04:20 76487 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-01-27 12:26 . 2010-01-26 04:20 2684 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2010-01-26 08:59 . 2009-02-17 16:03 -------- d-----w- c:\program files\Common Files\Logitech
2010-01-26 08:59 . 2009-02-17 16:03 -------- d-----w- c:\program files\Logitech
2010-01-26 05:21 . 2010-01-26 04:20 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2010-01-26 04:18 . 2010-01-26 04:18 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2010-01-24 20:41 . 2009-06-24 21:11 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-01-20 09:27 . 2009-08-12 19:14 -------- d-----w- c:\program files\Native Instruments
2009-12-22 05:36 . 2009-12-22 05:36 81920 ------w- c:\windows\system32\ieencode.dll
2009-12-21 19:08 . 2006-03-02 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2009-12-11 17:37 . 2009-12-06 23:29 -------- d-----w- c:\program files\BlueVoda Website Builder
2009-12-11 07:32 . 2009-08-08 10:43 -------- d-----w- c:\program files\Common Files\LogiShrd
2009-11-21 16:03 . 2006-03-02 12:00 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-11-16 08:06 . 2009-11-16 08:06 96408 ----a-w- c:\windows\system32\drivers\epfwtdir.sys
2009-11-16 08:03 . 2009-11-16 08:03 108792 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2009-11-16 07:56 . 2009-11-16 07:56 116520 ----a-w- c:\windows\system32\drivers\eamon.sys
2009-11-14 00:47 . 2009-11-14 00:47 90112 ----a-w- c:\windows\system32\dpl100.dll
2009-11-14 00:47 . 2009-11-14 00:47 856064 ----a-w- c:\windows\system32\divx_xx0c.dll
2009-11-14 00:47 . 2009-11-14 00:47 856064 ----a-w- c:\windows\system32\divx_xx07.dll
2009-11-14 00:47 . 2009-11-14 00:47 847872 ----a-w- c:\windows\system32\divx_xx0a.dll
2009-11-14 00:47 . 2009-11-14 00:47 843776 ----a-w- c:\windows\system32\divx_xx16.dll
2009-11-14 00:47 . 2009-11-14 00:47 839680 ----a-w- c:\windows\system32\divx_xx11.dll
2009-11-14 00:47 . 2009-11-14 00:47 696320 ----a-w- c:\windows\system32\DivX.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-01-05 2002160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DevconDefaultDB"="c:\windows\READREG" [X]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-05 8523776]
"nwiz"="nwiz.exe" [2007-12-05 1626112]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-12-05 81920]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2008-04-04 88584]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-11-16 2054360]
"Lexmark X74-X75"="c:\program files\Lexmark X74-X75\lxbbbmgr.exe" [2002-10-14 57344]
"AudioDrvEmulator"="c:\program files\Creative\Shared Files\Module Loader\DLLML.exe" [2005-06-16 49152]
"CTHelper"="CTHELPER.EXE" [2005-08-07 16384]
"CTxfiHlp"="CTXFIHLP.EXE" [2005-08-07 18944]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\LEXPPS.EXE"=
"c:\\Program Files\\uTorrent\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [16.11.2009 9:03 108792]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [16.11.2009 9:06 96408]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [5.1.2010 7:56 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5.1.2010 7:56 74480]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [16.11.2009 9:04 735960]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [5.1.2010 7:56 7408]
S3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS --> c:\windows\system32\drivers\CT20XUT.SYS [?]
S3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS --> c:\windows\system32\drivers\CTEXFIFX.SYS [?]
S3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS --> c:\windows\system32\drivers\CTHWIUT.SYS [?]

--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - SASDIFSV
*NewlyCreated* - SASENUM
*NewlyCreated* - SASKUTIL
*NewlyCreated* - WMIAPSRV

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'

2010-01-29 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-11-16 15:54]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
TCP: {792D15CD-F957-4702-8269-1D913C0C4FCC} = 213.180.32.2,213.180.33.225
FF - ProfilePath - c:\documents and settings\Jirka\Data aplikací\Mozilla\Firefox\Profiles\bswtr6vw.default\
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz
FF - component: c:\program files\Mozilla Firefox\extensions\{1ac94af4-60f5-5e43-9277-fcb7fe08bb52}\components\44-UiLS_mmd9q8.dll

---- NASTAVENÍ FIREFOXU ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-29 11:09
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
CTHelper = CTHELPER.EXE?
CTxfiHlp = CTXFIHLP.EXE?

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(488)
c:\windows\system32\webcheck.dll
.
Celkový čas: 2010-01-29 11:11:14
ComboFix-quarantined-files.txt 2010-01-29 10:11
tady je ten log
jinak jste zlatej že se o nás tak staráte

ComboFix2.txt 2010-01-26 02:51

Před spuštěním: Volných bajtů: 17 348 161 536
Po spuštění: Volných bajtů: 17 630 257 152

WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

- - End Of File - - 44BEEDB39B232F9B430588829AB71E44

#13 Příspěvek od **Roli** » 29 led 2010 20:02

Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.

Pak dej vědět jaký je stav PC.

VIRY.CZ

pomalý comp i internet

pomalý comp i internet

Re: pomalý comp i internet

Re: pomalý comp i internet

Re: pomalý comp i internet

Re: pomalý comp i internet

Re: pomalý comp i internet

Re: pomalý comp i internet

Re: pomalý comp i internet

Re: pomalý comp i internet

Re: pomalý comp i internet

Re: pomalý comp i internet

Re: pomalý comp i internet

Re: pomalý comp i internet