Spyware Doctor - spomaleny PC

[tweety10]

Kamarat ma poziadal o odvirenie PC, ma tu Spyware Doctora, sam som s nim uz mal problemy, je mi jasne, ze to nieje ziadny antispyware ale naopak nejaka chronta. Pocitac je absolutne spomaleny, obcas blokuje niektore prehliadace, obcas odpaja bezdrotove pripojenie k netu. Dole pri hodinach ma vlastnu ikonu, sam si ze vraj stahuje updates na seba sameho a podobne.

LOG z RSIT

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrator at 2010-02-01 09:10:08
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 175 GB (77%) free of 228 GB
Total RAM: 2043 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:14:59, on 1.2.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16981)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\ThreatFire\TFTray.exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Panasonic\PHOTOfunSTUDIO\PhAutoRun.exe
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ThreatFire\TFService.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Administrator\My Documents\Preberanie\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Administrator.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gmail.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: (no name) - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - (no file)
O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [ThreatFire] C:\Program Files\ThreatFire\TFTray.exe
O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: PHOTOfunSTUDIO.lnk = C:\Program Files\Panasonic\PHOTOfunSTUDIO\PhAutoRun.exe
O9 - Extra button: HP Clipbook - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: HP Smart Select - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Browser Defender Update Service - Threat Expert Ltd. - C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: ThreatFire - PC Tools - C:\Program Files\ThreatFire\TFService.exe

--
End of file - 10558 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-1229272821-1801674531-500Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-1229272821-1801674531-500UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll [2007-03-02 1298024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{053F9267-DC04-4294-A72C-58F732D338C0}]
HP Print Clips - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll [2007-03-02 177768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-12-09 333192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-11-07 1088296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}]
PC Tools Browser Guard BHO - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll [2009-10-08 395216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-01-19 279664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-01-19 812528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-12-09 333192]
{5AA2BA46-9913-4dc7-9620-69AB0FA17AE7}
{472734EA-242A-422B-ADF8-83D1E48CC825} - PC Tools Browser Guard - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll [2009-10-08 395216]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-01-19 279664]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2008-04-04 1044480]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2008-03-24 884736]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-01-21 61440]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-06-20 1310720]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2008-05-14 177456]
"IntelZeroConfig"=C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe [2008-08-20 1368064]
"IntelWireless"=C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2008-08-20 1191936]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2008-04-15 488752]
"ThreatFire"=C:\Program Files\ThreatFire\TFTray.exe [2010-01-15 378128]
"Google Quick Search Box"=C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe [2009-04-13 68592]
"ISTray"=C:\Program Files\Spyware Doctor\pctsTray.exe [2009-09-22 1243088]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-31 68856]
"Google Update"=C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-04-22 133104]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCROReminder]
C:\Program Files\ByteCrusher\RegistryOptimax\BCRO.exe [2008-12-19 1996288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-03-11 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2008-11-07 21633320]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ThreatFire]
C:\Program Files\ThreatFire\TFTray.exe [2010-01-15 378128]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Start Menu^Programs^Startup^OpenOffice.org 3.0.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2008-10-13 393216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [2007-03-11 210520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~1\MICROS~2\Office\OSA9.EXE [1999-02-17 65588]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
PHOTOfunSTUDIO.lnk - C:\Program Files\Panasonic\PHOTOfunSTUDIO\PhAutoRun.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-05-08 126976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
WgaLogon.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-07-12 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
nwprovau

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.dll"="C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.dll:*:Enabled:Google Talk Plugin"
"C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe"="C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-02-01 09:10:09 ----D---- C:\Program Files\trend micro
2010-02-01 09:10:08 ----D---- C:\rsit
2010-01-14 16:03:35 ----A---- C:\WINDOWS\PhEdit.INI
2010-01-14 08:24:13 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-01-14 08:24:00 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-01-10 18:01:44 ----D---- C:\Documents and Settings\Administrator\Application Data\Panasonic
2010-01-10 17:58:36 ----A---- C:\WINDOWS\system32\PICSDK2.dll
2010-01-10 17:58:36 ----A---- C:\WINDOWS\system32\PICSDK.ini
2010-01-10 17:58:36 ----A---- C:\WINDOWS\system32\PICSDK.dll
2010-01-10 17:58:36 ----A---- C:\WINDOWS\system32\PICEntry.dll
2010-01-10 17:58:36 ----A---- C:\WINDOWS\system32\EpPicPrt.dll
2010-01-10 17:58:36 ----A---- C:\WINDOWS\system32\EPPicMgr.dll
2010-01-10 17:57:58 ----D---- C:\Program Files\Panasonic
2010-01-08 18:52:47 ----D---- C:\WINDOWS\Minidump

======List of files/folders modified in the last 1 months======

2010-02-01 09:14:59 ----D---- C:\WINDOWS\Temp
2010-02-01 09:10:09 ----RD---- C:\Program Files
2010-02-01 09:09:54 ----D---- C:\Program Files\Spyware Doctor
2010-02-01 09:07:17 ----D---- C:\Program Files\Mozilla Firefox
2010-02-01 09:06:49 ----HD---- C:\WINDOWS\inf
2010-02-01 09:06:48 ----D---- C:\WINDOWS\system32\CatRoot2
2010-02-01 09:04:19 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2010-01-30 23:00:38 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-25 19:22:17 ----D---- C:\WINDOWS\system32\config
2010-01-23 10:26:31 ----D---- C:\WINDOWS
2010-01-23 10:22:43 ----D---- C:\WINDOWS\system32
2010-01-23 09:56:11 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-01-23 09:56:08 ----D---- C:\WINDOWS\system32\en-US
2010-01-23 09:56:08 ----D---- C:\Program Files\Internet Explorer
2010-01-23 09:55:48 ----D---- C:\WINDOWS\ie7updates
2010-01-22 15:49:36 ----HD---- C:\WINDOWS\$hf_mig$
2010-01-21 11:53:20 ----D---- C:\Program Files\ThreatFire
2010-01-21 08:16:49 ----D---- C:\WINDOWS\system32\drivers
2010-01-19 14:48:27 ----SHD---- C:\WINDOWS\Installer
2010-01-19 14:48:24 ----SD---- C:\WINDOWS\Tasks
2010-01-19 14:48:09 ----D---- C:\Program Files\Google
2010-01-16 15:22:04 ----A---- C:\WINDOWS\WINCMD.INI
2010-01-16 15:18:51 ----A---- C:\WINDOWS\wcx_ftp.ini
2010-01-14 11:17:49 ----D---- C:\WINDOWS\AppPatch
2010-01-14 08:24:19 ----A---- C:\WINDOWS\imsins.BAK
2010-01-10 19:47:23 ----HD---- C:\Config.Msi
2010-01-10 17:58:22 ----RSD---- C:\WINDOWS\Fonts
2010-01-10 17:57:53 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-10 17:57:43 ----D---- C:\WINDOWS\WinSxS
2010-01-05 11:00:29 ----A---- C:\WINDOWS\system32\wininet.dll
2010-01-05 11:00:28 ----A---- C:\WINDOWS\system32\webcheck.dll
2010-01-05 11:00:28 ----A---- C:\WINDOWS\system32\urlmon.dll
2010-01-05 11:00:28 ----A---- C:\WINDOWS\system32\url.dll
2010-01-05 11:00:28 ----A---- C:\WINDOWS\system32\pngfilt.dll
2010-01-05 11:00:28 ----A---- C:\WINDOWS\system32\occache.dll
2010-01-05 11:00:28 ----A---- C:\WINDOWS\system32\mstime.dll
2010-01-05 11:00:27 ----A---- C:\WINDOWS\system32\msrating.dll
2010-01-05 11:00:27 ----A---- C:\WINDOWS\system32\mshtmled.dll
2010-01-05 11:00:26 ----A---- C:\WINDOWS\system32\mshtml.dll
2010-01-05 11:00:25 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2010-01-05 11:00:24 ----A---- C:\WINDOWS\system32\msfeeds.dll
2010-01-05 11:00:24 ----A---- C:\WINDOWS\system32\jsproxy.dll
2010-01-05 11:00:24 ----A---- C:\WINDOWS\system32\iertutil.dll
2010-01-05 11:00:24 ----A---- C:\WINDOWS\system32\iernonce.dll
2010-01-05 11:00:24 ----A---- C:\WINDOWS\system32\iepeers.dll
2010-01-05 11:00:23 ----A---- C:\WINDOWS\system32\ieframe.dll
2010-01-05 11:00:21 ----A---- C:\WINDOWS\system32\ieencode.dll
2010-01-05 11:00:21 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2010-01-05 11:00:21 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2010-01-05 11:00:21 ----A---- C:\WINDOWS\system32\ieaksie.dll
2010-01-05 11:00:21 ----A---- C:\WINDOWS\system32\ieakeng.dll
2010-01-05 11:00:21 ----A---- C:\WINDOWS\system32\icardie.dll
2010-01-05 11:00:21 ----A---- C:\WINDOWS\system32\extmgr.dll
2010-01-05 11:00:21 ----A---- C:\WINDOWS\system32\dxtrans.dll
2010-01-05 11:00:20 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2010-01-05 11:00:20 ----A---- C:\WINDOWS\system32\corpol.dll
2010-01-05 11:00:20 ----A---- C:\WINDOWS\system32\advpack.dll
2010-01-05 01:17:46 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-11-25 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-11-25 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-11-25 94160]
R2 NwlnkIpx;NWLink IPX/SPX/NetBIOS Compatible Transport Protocol; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-14 88320]
R2 NwlnkNb;NWLink NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2008-04-14 63232]
R2 NwlnkSpx;NWLink SPX/SPXII Protocol; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2008-04-14 55936]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2008-08-04 11904]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2008-04-11 338944]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2007-07-13 94976]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2008-03-21 1203776]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-05-09 2880512]
R3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-14 13952]
R3 HBtnKey;HBtnKey; C:\WINDOWS\system32\DRIVERS\cpqbttn.sys [2008-04-28 9344]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\WINDOWS\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 NETw5x32;Intel(R) Wireless WiFi Link Adapter Driver for Windows XP 32 Bit ; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2008-04-28 3626112]
R3 NWRDR;NetWare Rdr; C:\WINDOWS\system32\DRIVERS\nwrdr.sys [2008-04-14 163584]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2008-10-09 1810856]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2008-06-20 225696]
R3 TfNetMon;TfNetMon; \??\C:\WINDOWS\system32\drivers\TfNetMon.sys []
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2008-04-04 296320]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-03-07 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-03-07 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-03-07 21568]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nm;Network Monitor Driver; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-14 40320]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2008-05-02 17536]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2008-05-02 20864]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2008-05-02 8064]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2008-05-02 8064]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-07-12 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-07-12 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\WINDOWS\system32\agrsmsvc.exe [2008-03-18 13312]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-05-08 536576]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 Browser Defender Update Service;Browser Defender Update Service; C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe [2009-10-08 112592]
R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2008-08-20 860160]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 NWCWorkstation;Client Service for NetWare; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2008-08-20 466944]
R2 S24EventMonitor;Intel® PROSet/Wireless WiFi Service; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [2008-08-20 905216]
R2 sdAuxService;PC Tools Auxiliary Service; C:\Program Files\Spyware Doctor\pctsAuxs.exe [2009-09-23 358600]
R2 sdCoreService;PC Tools Security Service; C:\Program Files\Spyware Doctor\pctsSvc.exe [2009-09-23 1141200]
R2 ThreatFire;ThreatFire; C:\Program Files\ThreatFire\TFService.exe [2010-01-15 70928]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-04-03 193840]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2008-05-01 165192]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-19 135664]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-13 182768]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[JaRon]

odinstaluj Ask Toolbar + docisti PC s MBAM

[tweety10]

LOG z MBAM (to co naslo mam dat zmazat?)

Malwarebytes' Anti-Malware 1.44
Verze databáze: 3670
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

1.2.2010 9:41:35
mbam-log-2010-02-01 (09-41-25).txt

Typ kontroly: Rychlá kontrola
Zkontrolované objekty: 113399
Uplynulý čas: 7 minute(s), 20 second(s)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 6
Infikované hodnoty registru: 1
Infikované datové položky registru: 1
Infikované adresáře: 41
Infikované soubory: 84

Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5aa2ba46-9913-4dc7-9620-69ab0fa17ae7} (Adware.ALOT) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5aa2ba46-9913-4dc7-9620-69ab0fa17ae7} (Adware.ALOT) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{14ceeaff-96dd-4101-ae37-d5ecdc23c3f6} (Adware.ALOT) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\alotToolbar (Adware.ALOT) -> No action taken.
HKEY_CURRENT_USER\Software\alot (Adware.ALOT) -> No action taken.

Infikované hodnoty registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{5aa2ba46-9913-4dc7-9620-69ab0fa17ae7} (Adware.ALOT) -> No action taken.

Infikované datové položky registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Infikované adresáře:
C:\Documents and Settings\Administrator\Application Data\alot (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\BrowserSearch (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_0 (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_1 (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_2 (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_3 (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_4 (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_5 (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_6 (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\configurator (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\contextMenu (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\ErrorSearch (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\postInstallLayout (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\products (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\BrowserSearch (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\BrowserSearch\images (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_0 (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_0\images (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_1 (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_1\images (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_2 (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_2\images (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_3 (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_3\images (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_4 (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_4\images (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_5 (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_5\images (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_6 (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_6\images (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\contextMenu (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\contextMenu\images (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared\images (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\TimerManager (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\toolbarContextMenu (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\ToolbarSearch (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Updater (Adware.ALOT) -> No action taken.
C:\Program Files\alot (Adware.ALOT) -> No action taken.
C:\Program Files\alot\bin (Adware.ALOT) -> No action taken.

Infikované soubory:
C:\Documents and Settings\Administrator\Application Data\alot\Tem3CF.tmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\toolbar.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\toolbar.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\BrowserSearch\BrowserSearch.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\BrowserSearch\BrowserSearch.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_0\Button_0.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_0\Button_0.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_1\Button_1.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_1\Button_1.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_2\Button_2.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_2\Button_2.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_3\Button_3.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_3\Button_3.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_4\Button_4.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_4\Button_4.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_5\Button_5.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_5\Button_5.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_6\Button_6.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Button_6\Button_6.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\configurator\configurator.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\configurator\configurator.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\contextMenu\contextMenu.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\contextMenu\contextMenu.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\ErrorSearch\ErrorSearch.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\ErrorSearch\ErrorSearch.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\postInstallLayout\postInstallLayout.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\postInstallLayout\postInstallLayout.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\products\products.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\products\products.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\BrowserSearch\alot_search_defend.html (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\BrowserSearch\images\favicon.ico (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_0\images\alot_logo_button.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_0\images\alot_logo_button.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_1\images\alot_image_search.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_1\images\alot_image_search.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_1\images\alot_news_search.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_1\images\alot_news_search.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_1\images\alot_search_button.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_1\images\alot_search_button.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_1\images\alot_shop_search.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_1\images\alot_shop_search.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_1\images\alot_videos_search.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_1\images\alot_videos_search.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_1\images\alot_web_search.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_1\images\alot_web_search.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_2\images\default_2097_music_videos.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_2\images\default_2097_music_videos.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_3\images\default_1365_music_news.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_3\images\default_1365_music_news.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_4\images\default_1363_alot_widget_radio.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_4\images\default_1363_alot_widget_radio.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_5\images\clear.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_5\images\default_1007_alot_weather_widget.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_5\images\default_1007_alot_weather_widget.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_6\images\2460_icon.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Button_6\images\2460_icon.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\contextMenu\images\alot_icon.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\contextMenu\images\alot_icon.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\contextMenu\images\alot_logo_button.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\contextMenu\images\alot_logo_button.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared\domains.dat (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared\images\alot_brand.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared\images\alot_configure.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared\images\alot_configure.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared\images\alot_splitter.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared\images\discover.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared\images\intro_popup.png (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared\images\spinner.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared\images\widget_bottom.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared\images\widget_btnclose0.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared\images\widget_btnclose1.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared\images\widget_caption.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared\images\widget_error_bg.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared\images\widget_error_close.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Resources\Shared\images\widget_error_icon.bmp (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\TimerManager\TimerManager.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\TimerManager\TimerManager.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\toolbarContextMenu\toolbarContextMenu.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\toolbarContextMenu\toolbarContextMenu.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\ToolbarSearch\ToolbarSearch.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\ToolbarSearch\ToolbarSearch.xml.backup (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Updater\Updater.xml (Adware.ALOT) -> No action taken.
C:\Documents and Settings\Administrator\Application Data\alot\Updater\Updater.xml.backup (Adware.ALOT) -> No action taken.
C:\Program Files\alot\alotUninst.exe (Adware.ALOT) -> No action taken.

[JaRon]

ano zmazat

[tweety10]

Vsetko sa vymazalo, potom poziadalo o restart, dal som OK, nasledne este vyhodilo LOG, ale nestihol som ho skopriovat a PC sa restartol... Po restarte dole stale je ikonka PC Tools Spyware Doctor, prosim poradte dalsie kroky, teraz musim ist prec, podvecer budem pokracovat v odvirovani.

[JaRon]

podla tohto:
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
by malo ist o legalny SW - ak ho nechces, kludne odinstaluj
PC by mal byt cisty, ak mas pochybnosti, mozes este prescanovat s CureIT

[tweety10]

Tak, konecne siel bezne odinstalovat. Dakujem za pomoc

[JaRon]

za malo