prosim o preventivni kontrolu win XP vyhlasuje chyby

[ilkar]

dobry den , prosim o preventivni kontrolu win mi vyhlasuje nejruznejsi chyby typu disk nenalezen , vlozte disk atd. pri praci v prostredi win
Logfile of random's system information tool 1.06 (written by random/random)
Run by Admin at 2010-03-14 09:55:57
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 38 GB (16%) free of 234 GB
Total RAM: 3326 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:56:28, on 14.3.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\AVG\AVG9\avgfws9.exe
C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\AVG\AVG9\avgam.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\OO Software\Defrag\oodag.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\System32\Drivers\WTSRV.EXE
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\WTClient.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\WISPTIS.EXE
C:\WINDOWS\SMINST\Scheduler.exe
C:\WINDOWS\tsnpstd3.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\OO Software\Defrag\oodtray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\vsnpstd3.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Seznam.cz\postak.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Desktop Sidebar\dsidebar.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\fileuploader\FileUploader5.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Admin\Plocha\RSIT.exe
C:\Program Files\trend micro\Admin.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\pdfforge Toolbar\SearchSettings.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O2 - BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\1.1.2\pdfforgeToolbarIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\pdfforge Toolbar\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\core.2.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O3 - Toolbar: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\1.1.2\pdfforgeToolbarIE.dll
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\Sminst\Recguard.exe
O4 - HKLM\..\Run: [Reminder] C:\WINDOWS\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [Scheduler] C:\WINDOWS\SMINST\Scheduler.exe
O4 - HKLM\..\Run: [tsnpstd3] C:\WINDOWS\tsnpstd3.exe
O4 - HKLM\..\Run: [LayoutM] KLayMgr.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [WTClient] WTClient.exe
O4 - HKLM\..\Run: [OODefragTray] C:\Program Files\OO Software\Defrag\oodtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\pdfforge Toolbar\SearchSettings.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files\Seznam.cz\postak.exe" -s
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [SIDEBAR] "C:\Program Files\Desktop Sidebar\dsidebar.exe"
O4 - HKCU\..\Run: [EPSON Stylus SX200 Series (kopie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEFE.EXE /FU "C:\WINDOWS\TEMP\E_S307.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: LUMIX Simple Viewer.lnk = ?
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O9 - Extra 'Tools' menuitem: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{C8998311-8051-4708-B775-EC20AD417476}: NameServer = 10.2.255.1,10.2.255.2
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: AVG Firewall (avgfws9) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgfws9.exe
O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Program Files\Ashampoo\Ashampoo WinOptimizer 2010\Dfsdks.exe
O23 - Service: EPGService - Hauppauge Computer Works - C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\WINDOWS\System32\Drivers\WTSRV.EXE

--
End of file - 12779 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2009-12-21 61888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2009-11-15 520192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2010-03-12 1598744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{45AD732C-2CE2-4666-B366-B2214AD57A49}]
Idea2 SidebarBrowserMonitor Class - C:\Program Files\Desktop Sidebar\sbhelp.dll [2006-07-09 278528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}]
pdfforge Toolbar - C:\Program Files\pdfforge Toolbar\IE\1.1.2\pdfforgeToolbarIE.dll [2010-01-08 700416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-11-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]
C:\Program Files\pdfforge Toolbar\SearchSettings.dll [2010-01-08 1109504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-11-17 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Ukazatel S-Rank - C:\Program Files\Seznam.cz\core.2.dll [2010-03-01 1107608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-04-23 937416]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2009-11-15 520192]
{B922D405-6D13-4A2B-AE89-08A030DA4402} - pdfforge Toolbar - C:\Program Files\pdfforge Toolbar\IE\1.1.2\pdfforgeToolbarIE.dll [2010-01-08 700416]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2006-09-25 94208]
"Recguard"=C:\WINDOWS\Sminst\Recguard.exe [2006-05-12 1138688]
"Reminder"=C:\WINDOWS\Creator\Remind_XP.exe [2006-03-31 761856]
"Scheduler"=C:\WINDOWS\SMINST\Scheduler.exe [2006-04-24 888832]
"tsnpstd3"=C:\WINDOWS\tsnpstd3.exe [2007-04-21 270336]
"LayoutM"=C:\WINDOWS\KLayMgr.exe [2004-08-26 45056]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-11-24 98304]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2010-03-12 2059544]
"WTClient"=C:\WINDOWS\system32\WTClient.exe [2007-04-11 40960]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe [2009-09-12 2524416]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"snpstd3"=C:\WINDOWS\vsnpstd3.exe [2007-05-10 835584]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"NPSStartup"= []
"UDC Integration"= []
"SearchSettings"=C:\Program Files\pdfforge Toolbar\SearchSettings.exe [2010-01-08 974848]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Seznam Postak"=C:\Program Files\Seznam.cz\postak.exe [2010-03-01 451224]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"SIDEBAR"=C:\Program Files\Desktop Sidebar\dsidebar.exe [2006-07-09 1777664]
"EPSON Stylus SX200 Series (kopie 1)"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEFE.EXE [2007-12-13 188928]
"ICQ"=C:\Program Files\ICQ6.5\ICQ.exe [2009-11-16 172792]
"AutoStartNPSAgent"=C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [2009-04-16 102400]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]
C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe [2009-11-15 2292672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ashampoo Core Tuner]
C:\Program Files\Ashampoo\Ashampoo Core Tuner\ct.exe [2009-09-25 3334488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AutoStartNPSAgent]
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [2009-04-16 102400]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetRefresh]
C:\Program Files\COMPAQ\SetRefresh\\SetRefresh.exe [2003-11-20 525824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Admin^Nabídka Start^Programy^Po spuštění^Zástupce - JDownloader.lnk]
C:\PROGRA~1\JDOWNL~1\JDOWNL~1\JDOWNL~1.EXE [2009-10-26 214528]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
LUMIX Simple Viewer.lnk - C:\Program Files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe
Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-11-25 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2010-03-12 12464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-09-25 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"undockwithoutlogon"=1
"ShutdownWithoutLogon"=1
"NoDispCPL"=0
"NoDispSettingsPage"=0
"NoDispScrSavPage"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDriveAutoRun"=48

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoResolveTrack"=
"NoViewContextMenu"=
"NoFileAssociate"=
"NoFind"=
"NoRun"=
"NoClose"=
"StartMenuLogoff"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\SMINST\Scheduler.exe"="C:\WINDOWS\SMINST\Scheduler.exe:*:Enabled:Scheduler "
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe:*:Enabled:umi"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx9.exe"="C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9"
"C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx10.exe"="C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10"
"C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Launcher.exe"="C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe"
"C:\Program Files\AVG\AVG9\avgam.exe"="C:\Program Files\AVG\AVG9\avgam.exe:*:Enabled:avgam.exe"
"C:\Program Files\AVG\AVG9\avgdiagex.exe"="C:\Program Files\AVG\AVG9\avgdiagex.exe:*:Enabled:avgdiagex.exe"
"C:\Program Files\AVG\AVG9\avgupd.exe"="C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG9\avgnsx.exe"="C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\Electronic Arts\Medal of Honor Airborne\UnrealEngine3\Binaries\MOHA.exe"="C:\Program Files\Electronic Arts\Medal of Honor Airborne\UnrealEngine3\Binaries\MOHA.exe:*:Enabled:Medal of Honor Airborne"
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server"
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server"
"C:\Program Files\Activision\Call of Duty 2\CoD2SP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2SP_s.exe:*:Enabled:Call of Duty(R) 2 Singleplayer"
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:Call of Duty(R) 2 Multiplayer"
"C:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe"="C:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"C:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe"="C:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\N]
shell\AutoRun\command - N:\autorun\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\P]
shell\AutoRun\command - P:\AUTORUN.EXE

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\Q]
shell\AutoRun\command - Q:\AUTORUN.EXE

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{12c6dd76-d09f-11de-93e6-0019db86cb11}]
shell\verb\command - explorer http://www.p4c.philips.com/files/s/sa1m ... al_eng.zip

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cb53062a-7887-11dc-8aaa-0019dbc78c4d}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480


======List of files/folders created in the last 1 months======

2010-03-14 09:55:57 ----D---- C:\rsit
2010-03-14 09:55:57 ----D---- C:\Program Files\trend micro
2010-03-12 21:32:32 ----A---- C:\WINDOWS\avisplitter.ini
2010-03-12 21:32:31 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2010-03-12 21:32:31 ----A---- C:\WINDOWS\system32\huffyuv.dll
2010-03-12 21:32:30 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-03-12 21:32:30 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-03-12 21:32:28 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2010-03-12 21:32:28 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2010-03-12 20:29:16 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2010-03-11 16:00:22 ----D---- C:\Program Files\LizardTech
2010-03-11 12:55:37 ----D---- C:\Documents and Settings\Admin\Data aplikací\Search Settings
2010-03-11 12:55:30 ----D---- C:\Documents and Settings\Admin\Data aplikací\pdfforge
2010-03-11 12:48:59 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-03-10 20:49:13 ----D---- C:\Program Files\Application Updater
2010-03-10 20:49:11 ----D---- C:\Program Files\pdfforge Toolbar
2010-03-10 20:48:42 ----A---- C:\WINDOWS\system32\pdfcmnnt.dll
2010-03-10 20:48:39 ----D---- C:\Program Files\PDFCreator
2010-03-10 20:48:39 ----A---- C:\WINDOWS\system32\MSMPIDE.DLL
2010-03-10 19:52:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\PDF Writer
2010-03-10 19:52:53 ----D---- C:\Documents and Settings\Admin\Data aplikací\PDF Writer
2010-03-10 19:40:57 ----A---- C:\WINDOWS\system32\BioPdf.PdfWriter.Lib.dll
2010-03-10 19:40:56 ----D---- C:\Program Files\Common Files\Bullzip
2010-03-10 19:40:56 ----A---- C:\WINDOWS\system32\bzpdfc.dll
2010-03-10 19:40:56 ----A---- C:\WINDOWS\system32\bzFlRdr.dll
2010-03-10 19:40:56 ----A---- C:\WINDOWS\system32\bzDCT.dll
2010-03-10 19:40:53 ----A---- C:\WINDOWS\system32\bzpdf.dll
2010-03-10 19:40:48 ----D---- C:\Program Files\Bullzip
2010-03-09 18:19:22 ----A---- C:\WINDOWS\system32\DfSdkBt.exe
2010-03-09 08:05:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\vsosdk
2010-03-07 19:26:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\STDUConverter
2010-03-04 15:02:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\Seznam DVD 2008
2010-03-04 15:02:56 ----D---- C:\Program Files\Seznam DVD 2008
2010-03-01 18:35:34 ----D---- C:\WINDOWS\RegisteredPackages
2010-03-01 18:34:59 ----A---- C:\WINDOWS\system32\dxdllreg.exe
2010-02-28 20:33:39 ----D---- C:\spoolerlogs
2010-02-28 20:09:21 ----A---- C:\WINDOWS\system32\udcpm.dll
2010-02-28 20:09:19 ----RD---- C:\UDC Output Files
2010-02-28 20:09:19 ----D---- C:\Program Files\Universal Document Converter
2010-02-25 21:42:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Suite
2010-02-25 21:42:34 ----D---- C:\Documents and Settings\Admin\Data aplikací\PC Suite
2010-02-25 21:41:20 ----A---- C:\WINDOWS\system32\nmwcdcls.dll
2010-02-25 21:40:17 ----D---- C:\Program Files\MarkAny
2010-02-25 21:40:14 ----D---- C:\Program Files\PC Connectivity Solution
2010-02-25 03:00:20 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$
2010-02-18 10:34:53 ----SD---- C:\Program Files\HLSW
2010-02-18 10:34:53 ----D---- C:\Documents and Settings\Admin\Data aplikací\HLSW

======List of files/folders modified in the last 1 months======

2010-03-14 09:56:26 ----D---- C:\WINDOWS\Temp
2010-03-14 09:55:57 ----RD---- C:\Program Files
2010-03-14 09:51:42 ----D---- C:\Program Files\fileuploader
2010-03-14 09:51:05 ----D---- C:\Documents and Settings\Admin\Data aplikací\ICQ
2010-03-14 09:50:11 ----D---- C:\WINDOWS\system32\CatRoot2
2010-03-14 09:49:42 ----D---- C:\WINDOWS\SMINST
2010-03-14 09:49:05 ----D---- C:\WINDOWS\system32
2010-03-14 09:49:05 ----AD---- C:\WINDOWS
2010-03-14 09:48:52 ----D---- C:\Program Files\WinTV
2010-03-14 09:46:39 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-03-14 09:46:23 ----D---- C:\Documents and Settings\Admin\Data aplikací\Desktop Sidebar
2010-03-14 09:45:52 ----D---- C:\WINDOWS\Prefetch
2010-03-14 06:20:52 ----AC---- C:\WINDOWS\system32\sun_debug.txt
2010-03-14 06:20:06 ----AC---- C:\WINDOWS\system32\sun_debug1.txt
2010-03-13 22:06:23 ----AC---- C:\WINDOWS\NeroDigital.ini
2010-03-13 10:44:05 ----D---- C:\WINDOWS\Debug
2010-03-13 10:42:48 ----D---- C:\Program Files\CCleaner
2010-03-13 10:36:34 ----D---- C:\Program Files\K-Lite Codec Pack
2010-03-12 20:29:35 ----D---- C:\WINDOWS\system32\drivers
2010-03-12 20:06:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\avg9
2010-03-12 18:18:42 ----HD---- C:\WINDOWS\inf
2010-03-12 13:24:51 ----D---- C:\WINDOWS\system32\config
2010-03-12 09:12:13 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$
2010-03-11 16:00:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-03-11 13:02:43 ----D---- C:\WINDOWS\system32\DirectX
2010-03-11 13:02:38 ----RSD---- C:\WINDOWS\assembly
2010-03-11 13:00:40 ----SHD---- C:\WINDOWS\Installer
2010-03-11 13:00:39 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-03-11 12:59:40 ----D---- C:\Program Files\AGEIA Technologies
2010-03-11 12:59:16 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-03-11 12:58:12 ----D---- C:\Program Files\Ubisoft
2010-03-11 12:49:01 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-03-11 12:49:01 ----D---- C:\Program Files\Movie Maker
2010-03-11 12:48:40 ----HD---- C:\WINDOWS\$hf_mig$
2010-03-10 20:49:12 ----D---- C:\WINDOWS\WinSxS
2010-03-10 19:40:56 ----D---- C:\Program Files\Common Files
2010-03-09 21:24:44 ----D---- C:\WINDOWS\system32\Setup
2010-03-09 18:23:25 ----D---- C:\ikony
2010-03-09 18:21:55 ----D---- C:\WINDOWS\system32\NtmsData
2010-03-09 18:21:48 ----D---- C:\Program Files\BitComet
2010-03-09 16:02:23 ----D---- C:\WINDOWS\i386
2010-03-09 07:13:43 ----D---- C:\Documents and Settings\Admin\Data aplikací\Vso
2010-03-08 21:41:49 ----HDC---- C:\WINDOWS\$NtUninstallKB933566$
2010-03-08 21:36:10 ----D---- C:\WINDOWS\system32\oodag
2010-03-08 21:23:38 ----D---- C:\Documents and Settings\Admin\Data aplikací\Skype
2010-03-08 19:09:39 ----AC---- C:\WINDOWS\system32\PnkBstrB.exe
2010-03-08 17:54:30 ----D---- C:\Documents and Settings\Admin\Data aplikací\skypePM
2010-03-08 17:43:37 ----A---- C:\Documents and Settings\Admin\Data aplikací\AutoGK.ini
2010-03-05 09:41:39 ----D---- C:\Program Files\Seznam.cz
2010-03-02 06:30:12 ----AC---- C:\WINDOWS\system32\MRT.exe
2010-03-01 18:30:07 ----D---- C:\Program Files\EA GAMES
2010-02-25 21:41:25 ----D---- C:\Program Files\Samsung
2010-02-25 21:41:17 ----D---- C:\Program Files\DIFX
2010-02-25 21:41:00 ----D---- C:\WINDOWS\system32\Samsung_USB_Drivers
2010-02-25 21:40:32 ----D---- C:\Documents and Settings\Admin\Data aplikací\Samsung
2010-02-25 12:50:22 ----D---- C:\foto
2010-02-25 11:14:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-02-25 11:14:49 ----D---- C:\Documents and Settings\Admin\Data aplikací\Adobe
2010-02-25 03:00:50 ----D---- C:\WINDOWS\ie8updates
2010-02-23 18:00:55 ----D---- C:\Program Files\Common Files\Adobe
2010-02-19 16:07:12 ----D---- C:\Downloads
2010-02-18 07:42:27 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-02-18 07:42:07 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2010-03-12 216200]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2010-03-12 29512]
R1 AvgTdiX;AVG Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2010-03-12 242696]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2008-07-21 24392]
R1 HWiNFO32;HWiNFO32 Kernel Driver; \??\C:\Program Files\HWiNFO32\HWiNFO32.SYS []
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2007-08-07 33052]
R2 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
R3 AnyDVD;AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [2008-12-01 103360]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-11-25 4463104]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2009-08-19 100368]
R3 Avgfwdx;Avgfwdx; C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2009-11-25 30104]
R3 E100B;Intel(R) PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2006-10-31 165760]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
R3 HCW85BDA;Hauppauge WinTV 885 Video Capture; C:\WINDOWS\system32\drivers\HCW85BDA.sys [2009-09-11 1440384]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-11-21 4399104]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-11-15 47360]
R3 PTSimBus;PenTablet Bus Enumerator; C:\WINDOWS\system32\DRIVERS\PTSimBus.sys [2007-06-07 18944]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 aqk9s4q2;aqk9s4q2; C:\WINDOWS\system32\drivers\aqk9s4q2.sys []
S3 Avgfwfd;AVG network filter service; C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2009-11-25 30104]
S3 Blfp;Broadcom Advanced Server Program Driver; C:\WINDOWS\system32\DRIVERS\baspxp32.sys [2008-06-06 98816]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 DualCoreCenter;DualCoreCenter; \??\C:\BIOSTOOLS\NTGLM7X.sys []
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 HPKBCCID;HP Keyboard Smart Card Driver; C:\WINDOWS\system32\DRIVERS\HPKBCCID.sys [2006-11-07 46976]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2006-09-25 1109568]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 PTSimHid;PenTablet Simulated HID MiniDriver; C:\WINDOWS\system32\DRIVERS\PTSimHid.sys [2007-04-23 10752]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SNPSTD3;USB PC Camera (SNPSTD3); C:\WINDOWS\system32\DRIVERS\snpstd3.sys [2007-10-16 10376576]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\WINDOWS\system32\DRIVERS\ss_bbus.sys [2009-03-20 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys [2009-03-20 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys [2009-03-20 121856]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\sscdbus.sys [2008-02-22 87936]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys [2008-02-22 14976]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\WINDOWS\system32\DRIVERS\sscdmdm.sys [2008-02-22 114304]
S3 STC2DFU;STCII DFU Adapter; C:\WINDOWS\system32\DRIVERS\Stc2Dfu.SYS [2004-10-25 7796]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 Tablet2k;Serial Tablet Port Driver; C:\WINDOWS\System32\Drivers\Tablet2k.sys []
S3 TClass2k;Tablet Class Driver; C:\WINDOWS\system32\DRIVERS\TClass2k.sys [2007-04-23 18432]
S3 UCTblHid;HID Tablet Port Driver; C:\WINDOWS\system32\DRIVERS\UCTblHid.sys [2008-09-08 14848]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 WINFLASH;WINFLASH; \??\C:\BIOSTOOLS\WinFlash.sys []
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2009-09-28 109056]
R2 Application Updater;Application Updater; C:\Program Files\Application Updater\ApplicationUpdater.exe [2010-01-08 380928]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-11-25 602112]
R2 avg9wd;AVG WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-03-12 308064]
R2 avgfws9;AVG Firewall; C:\Program Files\AVG\AVG9\avgfws9.exe [2010-03-12 2325816]
R2 EPGService;EPGService; C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe [2008-05-30 437248]
R2 FsUsbExService;FsUsbExService; C:\WINDOWS\system32\FsUsbExService.Exe [2009-04-07 233472]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-11-17 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-08-22 73728]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2008-11-25 29263712]
R2 O&O Defrag;O&O Defrag; C:\Program Files\OO Software\Defrag\oodag.exe [2009-09-12 1488128]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-02-09 75064]
R2 SQLBrowser;SQL Server Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2008-11-25 239968]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-11-24 87904]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2004-12-13 49152]
R2 WinTabService;WinTab Service; C:\WINDOWS\System32\Drivers\WTSRV.EXE [2008-06-16 69632]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-09-25 593920]
S2 PCA;PC Angel; C:\WINDOWS\SMINST\PCAngel.exe [2006-06-13 364544]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2010-01-12 68096]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 DfSdkS;Defragmentation-Service; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 2010\Dfsdks.exe [2009-08-24 406016]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-04-13 792112]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-05-16 271920]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2008-11-25 45408]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

dekuji za pomoc

[Rudy]

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

[ilkar]

dobry den combofix se nepovedlo dokoncit a to nekolikrat ani z nouzoveho rezimu vzdy na zacatku restartoval pc a pri dokoncovani testu pri zahajovani casti mazu soubory opet restartoval a nedokoncil jen jsem zjistil v nouzovem rezimu ze na pc je druhy ucet spravce pc o kterem nevim a nejde odstranit

[Rudy]

Kromě zavirování máte možná ještě hardwarový problém. Udělejte zálohu důležitých dat a spusťte checkdisk s opravou chyb.

[ilkar]

kontrola checkdisk provedena na vsech diskach bez nalezu chyb takze tam to nebude kontrola provedena jak pres externi program tak pres win

[Rudy]

OK. Zkuste použít MBAM: http://www.malwarebytes.org/mbam.php . Proveďte úplný sken. Předem nic nemažte.

[ilkar]

takze po trose patrani se combofix podarilo spustit (prejmenovani a nouzovi rezim) a na podruhe vypadl log pri tom prvnim to mazalo neco na C a na D autorun.inf log z combofix prikladam mbam bude tak rano
ComboFix 10-03-14.03 - Admin 14.03.2010 22:57:41.8.2 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3326.2929 [GMT 1:00]
Spuštěný z: C:\Documents and Settings\Admin\Plocha\combo.exe
AV: AVG Anti-Virus plus Firewall *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *enabled* {8decf618-9569-4340-b34a-d78d28969b66}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Předchozí spuštění -------
.
C:\Program Files\pdfforge Toolbar\SeARchsettings.dll
D:\Autorun.inf

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-02-14 do 2010-03-14 )))))))))))))))))))))))))))))))
.

2010-03-14 21:32:36 . 2010-03-14 21:37:58 -------- d-----w- C:\combo3375c
2010-03-14 21:26:44 . 2010-03-14 21:27:23 -------- d-----w- C:\combo
2010-03-14 08:55:57 . 2010-03-14 08:56:30 -------- d-----w- C:\rsit
2010-03-14 08:55:57 . 2010-03-14 08:56:28 -------- d-----w- C:\Program Files\trend micro
2010-03-12 20:32:31 . 2004-05-18 18:16:42 39936 ----a-w- C:\WINDOWS\system32\huffyuv.dll
2010-03-12 20:32:31 . 2004-01-25 16:18:44 217088 ----a-w- C:\WINDOWS\system32\yv12vfw.dll
2010-03-12 20:32:30 . 2009-05-29 21:37:40 205824 ----a-w- C:\WINDOWS\system32\xvidvfw.dll
2010-03-12 20:32:30 . 2009-05-29 21:31:52 881664 ----a-w- C:\WINDOWS\system32\xvidcore.dll
2010-03-12 20:32:28 . 2010-03-10 18:00:00 85504 ----a-w- C:\WINDOWS\system32\ff_vfw.dll
2010-03-12 19:29:16 . 2010-03-12 19:29:16 12464 ----a-w- C:\WINDOWS\system32\avgrsstx.dll
2010-03-11 15:00:22 . 2010-03-11 15:00:22 -------- d-----w- C:\Program Files\LizardTech
2010-03-10 19:49:13 . 2010-03-10 19:49:14 -------- d-----w- C:\Program Files\Application Updater
2010-03-10 19:49:11 . 2010-03-14 21:37:40 -------- d-----w- C:\Program Files\pdfforge Toolbar
2010-03-10 19:48:42 . 2001-10-28 15:42:30 116224 ----a-w- C:\WINDOWS\system32\pdfcmnnt.dll
2010-03-10 19:48:39 . 2010-03-10 19:49:38 -------- d-----w- C:\Program Files\PDFCreator
2010-03-10 19:48:39 . 1998-07-05 23:00:00 23552 ----a-w- C:\WINDOWS\system32\MSMPIDE.DLL
2010-03-10 18:40:57 . 2010-02-02 14:33:20 8192 ----a-w- C:\WINDOWS\system32\BioPdf.PdfWriter.Lib.dll
2010-03-10 18:40:56 . 2010-03-10 18:40:56 -------- d-----w- C:\Program Files\Common Files\Bullzip
2010-03-10 18:40:56 . 2010-01-26 07:38:34 135168 ----a-w- C:\WINDOWS\system32\bzpdfc.dll
2010-03-10 18:40:56 . 2008-10-30 21:15:44 227840 ----a-w- C:\WINDOWS\system32\bzFlRdr.dll
2010-03-10 18:40:56 . 2008-07-09 22:19:34 103424 ----a-w- C:\WINDOWS\system32\bzDCT.dll
2010-03-10 18:40:53 . 2010-01-13 18:57:58 194560 ----a-w- C:\WINDOWS\system32\bzpdf.dll
2010-03-10 18:40:48 . 2010-03-10 18:40:48 -------- d-----w- C:\Program Files\Bullzip
2010-03-09 17:19:22 . 2009-08-24 20:08:08 28160 ----a-w- C:\WINDOWS\system32\DfSdkBt.exe
2010-03-04 14:02:56 . 2010-03-04 14:22:53 -------- d-----w- C:\Program Files\Seznam DVD 2008
2010-03-01 17:35:04 . 2004-07-09 03:26:38 52096 -c--a-w- C:\WINDOWS\system32\dllcache\msdv.sys
2010-03-01 17:35:04 . 2004-07-09 03:26:38 52096 ----a-w- C:\WINDOWS\system32\drivers\msdv.sys
2010-03-01 17:35:04 . 2004-07-09 03:26:38 1230336 -c--a-w- C:\WINDOWS\system32\dllcache\msvidctl.dll
2010-03-01 17:35:02 . 2002-12-11 23:14:32 257024 -c--a-w- C:\WINDOWS\system32\dllcache\qcap.dll
2010-03-01 17:35:02 . 2002-12-11 23:14:32 13312 -c--a-w- C:\WINDOWS\system32\dllcache\msdmo.dll
2010-03-01 17:35:01 . 2003-05-30 08:00:02 132608 -c--a-w- C:\WINDOWS\system32\dllcache\devenum.dll
2010-03-01 17:34:59 . 2002-12-11 23:14:32 46592 ----a-w- C:\WINDOWS\system32\dxdllreg.exe
2010-03-01 17:34:58 . 2004-07-09 03:27:28 381952 -c--a-w- C:\WINDOWS\system32\dllcache\dsound.dll
2010-03-01 17:34:58 . 2004-07-09 03:27:28 292864 -c--a-w- C:\WINDOWS\system32\dllcache\ddraw.dll
2010-03-01 17:34:58 . 2003-05-30 08:00:02 797184 -c--a-w- C:\WINDOWS\system32\dllcache\d3dim700.dll
2010-03-01 17:34:58 . 2002-12-11 23:14:32 8192 -c--a-w- C:\WINDOWS\system32\dllcache\d3d8thk.dll
2010-03-01 17:34:58 . 2002-12-11 23:14:32 24064 -c--a-w- C:\WINDOWS\system32\dllcache\ddrawex.dll
2010-03-01 17:34:58 . 2002-08-29 02:40:00 648704 -c--a-w- C:\WINDOWS\system32\dllcache\dinput.dll
2010-02-28 19:33:39 . 2010-02-28 19:33:39 -------- d-----w- C:\spoolerlogs
2010-02-28 19:09:21 . 2007-08-14 19:57:24 5632 ----a-w- C:\WINDOWS\system32\udcpm.dll
2010-02-28 19:09:19 . 2010-02-28 19:09:21 -------- d-----w- C:\Program Files\Universal Document Converter
2010-02-28 19:09:19 . 2010-02-28 19:09:20 -------- d-----r- C:\UDC Output Files
2010-02-25 20:41:20 . 2007-05-02 15:31:52 90624 ----a-w- C:\WINDOWS\system32\nmwcdcls.dll
2010-02-25 20:41:16 . 2007-09-17 14:53:26 21632 ----a-w- C:\WINDOWS\system32\drivers\pccsmcfd.sys
2010-02-25 20:40:57 . 2009-03-20 09:01:26 90112 ----a-w- C:\WINDOWS\system32\drivers\ss_bbus.sys
2010-02-25 20:40:57 . 2009-03-20 09:01:26 14976 ----a-w- C:\WINDOWS\system32\drivers\ss_bmdfl.sys
2010-02-25 20:40:57 . 2009-03-20 09:01:26 121856 ----a-w- C:\WINDOWS\system32\drivers\ss_bmdm.sys
2010-02-25 20:40:57 . 2009-03-20 09:01:26 12160 ----a-w- C:\WINDOWS\system32\drivers\ss_bwhnt.sys
2010-02-25 20:40:57 . 2009-03-20 09:01:26 12160 ----a-w- C:\WINDOWS\system32\drivers\ss_bwh.sys
2010-02-25 20:40:57 . 2009-03-20 09:01:26 12160 ----a-w- C:\WINDOWS\system32\drivers\ss_bcmnt.sys
2010-02-25 20:40:57 . 2009-03-20 09:01:26 12160 ----a-w- C:\WINDOWS\system32\drivers\ss_bcm.sys
2010-02-25 20:40:17 . 2010-02-25 20:40:17 -------- d-----w- C:\Program Files\MarkAny
2010-02-25 20:40:14 . 2010-02-25 20:41:09 -------- d-----w- C:\Program Files\PC Connectivity Solution
2010-02-18 09:34:53 . 2010-02-18 09:34:59 -------- d-s---w- C:\Program Files\HLSW
2010-02-14 16:57:44 . 2010-02-14 16:57:44 -------- d-----w- C:\Program Files\GameSpy Arcade
2010-02-14 16:56:16 . 2010-02-14 17:00:38 1247 ----a-w- C:\WINDOWS\eReg.dat
2010-02-14 08:10:22 . 2010-03-01 17:30:07 -------- d-----w- C:\Program Files\EA GAMES

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-14 21:11:01 . 2009-11-14 18:44:04 -------- d-----w- C:\Program Files\WinTV
2010-03-14 20:41:18 . 2009-11-15 09:33:45 -------- d-----w- C:\Program Files\DAEMON Tools Toolbar
2010-03-14 17:11:59 . 2006-03-02 12:00:00 509208 ----a-w- C:\WINDOWS\system32\perfh005.dat
2010-03-14 17:11:59 . 2006-03-02 12:00:00 109850 ----a-w- C:\WINDOWS\system32\perfc005.dat
2010-03-14 09:16:13 . 2009-12-23 11:29:11 -------- d-----w- C:\Program Files\fileuploader
2010-03-13 09:42:48 . 2009-11-13 15:49:09 -------- d-----w- C:\Program Files\CCleaner
2010-03-13 09:36:34 . 2009-11-13 19:59:38 -------- d-----w- C:\Program Files\K-Lite Codec Pack
2010-03-12 19:29:17 . 2009-11-25 16:44:09 242696 ----a-w- C:\WINDOWS\system32\drivers\avgtdix.sys
2010-03-12 19:29:16 . 2009-11-25 16:44:04 29512 ----a-w- C:\WINDOWS\system32\drivers\avgmfx86.sys
2010-03-12 19:28:36 . 2009-11-25 16:44:05 216200 ----a-w- C:\WINDOWS\system32\drivers\avgldx86.sys
2010-03-12 19:28:35 . 2009-11-25 16:44:09 52872 ----a-w- C:\WINDOWS\system32\drivers\avgrkx86.sys
2010-03-11 15:00:22 . 2007-07-31 13:05:18 -------- d--h--w- C:\Program Files\InstallShield Installation Information
2010-03-11 12:00:39 . 2009-12-28 14:07:48 -------- d-----w- C:\Program Files\Common Files\Wise Installation Wizard
2010-03-11 11:59:40 . 2009-12-28 14:08:02 -------- d-----w- C:\Program Files\AGEIA Technologies
2010-03-11 11:58:12 . 2009-11-15 18:46:15 -------- d-----w- C:\Program Files\Ubisoft
2010-03-09 17:21:48 . 2009-11-23 20:50:11 -------- d-----w- C:\Program Files\BitComet
2010-03-08 18:10:07 . 2010-02-09 14:10:36 137464 ----a-w- C:\WINDOWS\system32\drivers\PnkBstrK.sys
2010-03-08 18:09:39 . 2009-11-15 16:57:44 214520 -c--a-w- C:\WINDOWS\system32\PnkBstrB.exe
2010-03-05 08:41:39 . 2009-11-13 15:51:25 -------- d-----w- C:\Program Files\Seznam.cz
2010-02-25 20:41:25 . 2009-12-29 10:46:33 -------- d-----w- C:\Program Files\Samsung
2010-02-25 20:41:17 . 2009-12-29 10:47:20 -------- d-----w- C:\Program Files\DIFX
2010-02-23 17:00:55 . 2007-07-31 14:26:26 -------- d-----w- C:\Program Files\Common Files\Adobe
2010-02-18 06:42:27 . 2009-11-24 18:16:45 -------- d-----w- C:\Program Files\Malwarebytes' Anti-Malware
2010-02-10 17:55:51 . 2009-12-21 15:54:00 -------- d-----w- C:\Program Files\GamePark
2010-02-10 17:53:41 . 2010-02-10 17:53:41 794408 ----a-w- C:\WINDOWS\system32\pbsvc.exe
2010-02-10 17:13:48 . 2005-10-14 10:56:50 165376 ----a-w- C:\WINDOWS\system32\unrar.dll
2010-02-10 14:46:37 . 2009-11-14 16:03:15 -------- d-----w- C:\Program Files\Common Files\snpstd3
2010-02-09 19:16:55 . 2010-02-09 19:16:31 -------- d-----w- C:\Program Files\totalcmd
2010-02-09 14:10:08 . 2010-02-09 14:10:08 75064 ----a-w- C:\WINDOWS\system32\PnkBstrA.exe
2010-02-07 19:21:04 . 2010-02-07 19:21:04 -------- d-----w- C:\Program Files\MarkAnyContentSAFER
2010-02-07 19:17:44 . 2007-10-25 16:26:10 5632 ----a-w- C:\WINDOWS\system32\drivers\StarOpen.sys
2010-02-04 11:50:54 . 2010-02-04 11:50:51 -------- d-----w- C:\Program Files\Codec Pack - All In 1
2010-02-04 11:49:37 . 2010-02-04 11:50:54 737280 ----a-w- C:\WINDOWS\iun6002.exe
2010-02-03 15:47:50 . 2010-02-03 15:47:49 -------- d-----w- C:\Program Files\MediaInfo
2010-01-27 16:13:04 . 2010-01-27 16:13:01 -------- d-----w- C:\Program Files\FreeCommander
2010-01-21 18:28:18 . 2009-11-17 19:37:30 -------- d-----w- C:\Program Files\Avidemux 2.5
2010-01-21 15:36:57 . 2009-12-27 20:05:22 -------- d-----w- C:\Program Files\ASF-AVI-RM-WMV Repair
2010-01-12 11:06:57 . 2010-01-12 11:06:57 -------- d-----w- C:\WINDOWS\Fonts\Fonts
2010-01-07 15:07:14 . 2009-11-24 18:16:47 38224 ----a-w- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-01-07 15:07:04 . 2009-11-24 18:16:45 19160 -c--a-w- C:\WINDOWS\system32\drivers\mbam.sys
2010-01-01 19:44:22 . 2007-07-31 03:47:07 86327 -c--a-w- C:\WINDOWS\pchealth\helpctr\OfflineCache\index.dat
2010-01-01 19:44:22 . 2007-07-31 03:47:05 2740 -c--a-w- C:\WINDOWS\pchealth\helpctr\PackageStore\SkuStore.bin
2009-12-31 16:50:03 . 2006-03-02 12:00:00 353792 ----a-w- C:\WINDOWS\system32\drivers\srv.sys
2009-12-28 14:20:51 . 2009-12-28 14:20:51 107888 -c--a-w- C:\WINDOWS\system32\CmdLineExt.dll
2009-12-21 19:08:42 . 2006-03-02 12:00:00 916480 ----a-w- C:\WINDOWS\system32\wininet.dll
2009-12-17 07:42:35 . 2007-07-31 03:44:10 343552 -c--a-w- C:\WINDOWS\system32\mspaint.exe
.

Kód: Vybrat vše

<pre>
C:\Program Files\JDownloader\JDownloader\downloads\pinacle studio 14\proDAHe 30\heroglyph-2 6 30  CrePak 1-2 .exe
</pre>

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}]
2010-01-08 02:17:38 700416 ----a-w- C:\Program Files\pdfforge Toolbar\IE\1.1.2\pdfforgeToolbarIE.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{B922D405-6D13-4A2B-AE89-08A030DA4402}"= "C:\Program Files\pdfforge Toolbar\IE\1.1.2\pdfforgeToolbarIE.dll" [2010-01-08 02:17:38 700416]

[HKEY_CLASSES_ROOT\clsid\{b922d405-6d13-4a2b-ae89-08a030da4402}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Seznam Postak"="C:\Program Files\Seznam.cz\postak.exe" [2010-03-01 12:15:28 451224]
"RocketDock"="C:\Program Files\RocketDock\RocketDock.exe" [2007-09-02 12:58:52 495616]
"SIDEBAR"="C:\Program Files\Desktop Sidebar\dsidebar.exe" [2006-07-09 20:58:00 1777664]
"ICQ"="C:\Program Files\ICQ6.5\ICQ.exe" [2009-11-16 15:36:19 172792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Persistence"="C:\WINDOWS\system32\igfxpers.exe" [2006-09-25 08:12:00 94208]
"Recguard"="C:\WINDOWS\Sminst\Recguard.exe" [2006-05-12 10:50:16 1138688]
"Reminder"="C:\WINDOWS\Creator\Remind_XP.exe" [2006-03-31 12:44:26 761856]
"Scheduler"="C:\WINDOWS\SMINST\Scheduler.exe" [2006-04-24 08:42:06 888832]
"tsnpstd3"="C:\WINDOWS\tsnpstd3.exe" [2007-04-21 08:37:02 270336]
"WTClient"="WTClient.exe" [2007-04-11 15:27:00 40960]
"snpstd3"="C:\WINDOWS\vsnpstd3.exe" [2007-05-10 12:18:26 835584]
"NPSStartup"="" [N/A]
"UDC Integration"="" [N/A]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-11-24 20:24:38 98304]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 03:22:17 15360]

C:\Documents and Settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2010-1-11 113664]
LUMIX Simple Viewer.lnk - C:\Program Files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe [2009-12-23 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoFileAssociate"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 21:41:34 304128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-03-12 19:29:16 12464 ----a-w- C:\WINDOWS\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ OODBS\0autocheck autochk *

[HKLM\~\startupfolder\C:^Documents and Settings^Admin^Nabídka Start^Programy^Po spuštění^Zástupce - JDownloader.lnk]
path=C:\Documents and Settings\Admin\Nabídka Start\Programy\Po spuštění\Zástupce - JDownloader.lnk
backup=C:\WINDOWS\pss\Zástupce - JDownloader.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Windows Search.lnk]
path=C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Windows Search.lnk
backup=C:\WINDOWS\pss\Windows Search.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2009-12-11 14:57:56 948672 ----a-r- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-12-22 00:57:28 35760 ----a-w- C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]
2009-11-15 10:00:44 2292672 -c--a-w- C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ashampoo Core Tuner]
2009-09-25 14:03:22 3334488 -c--a-w- C:\Program Files\Ashampoo\Ashampoo Core Tuner\ct.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AutoStartNPSAgent]
2009-04-16 08:41:18 102400 ----a-w- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LayoutM]
2004-08-26 13:17:18 45056 -c--a-w- C:\WINDOWS\KLayMgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
2009-09-11 23:34:00 2524416 ----a-w- C:\Program Files\OO Software\Defrag\oodtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchSettings]
2010-01-08 00:36:58 974848 ----a-w- C:\Program Files\pdfforge Toolbar\SearchSettings.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetRefresh]
2003-11-20 16:01:08 525824 -c--a-w- C:\Program Files\COMPAQ\SetRefresh\SetRefresh.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\WINDOWS\\SMINST\\Scheduler.exe"=
"C:\\Program Files\\ICQ6.5\\ICQ.exe"=
"C:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\RM.exe"=
"C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\Studio.exe"=
"C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\umi.exe"=
"C:\\WINDOWS\\system32\\PnkBstrA.exe"=
"C:\\WINDOWS\\system32\\PnkBstrB.exe"=
"C:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx9.exe"=
"C:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx10.exe"=
"C:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Launcher.exe"=
"C:\\Program Files\\BitComet\\BitComet.exe"=
"C:\\Program Files\\AVG\\AVG9\\avgam.exe"=
"C:\\Program Files\\AVG\\AVG9\\avgdiagex.exe"=
"C:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"C:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
"C:\\Program Files\\Electronic Arts\\Medal of Honor Airborne\\UnrealEngine3\\Binaries\\MOHA.exe"=
"C:\\Program Files\\Samsung\\Samsung New PC Studio\\npsasvr.exe"=
"C:\\Program Files\\Samsung\\Samsung New PC Studio\\npsvsvr.exe"=
"C:\\Program Files\\Activision\\Call of Duty 2\\CoD2SP_s.exe"=
"C:\\Program Files\\Activision\\Call of Duty 2\\CoD2MP_s.exe"=
"C:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW.exe"=
"C:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaWmp.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"12802:TCP"= 12802:TCP:BitComet 12802 TCP
"12802:UDP"= 12802:UDP:BitComet 12802 UDP

R0 AvgRkx86;avgrkx86.sys;C:\WINDOWS\system32\drivers\avgrkx86.sys [25.11.2009 17:44:09 52872]
R1 AvgTdiX;AVG Network Redirector;C:\WINDOWS\system32\drivers\avgtdix.sys [25.11.2009 17:44:09 242696]
R3 Avgfwdx;Avgfwdx;C:\WINDOWS\system32\drivers\avgfwdx.sys [25.11.2009 17:43:42 30104]
R3 PTSimBus;PenTablet Bus Enumerator;C:\WINDOWS\system32\drivers\PTSimBus.sys [15.12.2009 17:51:14 18944]
S0 sptd;sptd;C:\WINDOWS\system32\drivers\sptd.sys [15.11.2009 10:25:46 721904]
S1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\drivers\avgldx86.sys [25.11.2009 17:44:05 216200]
S1 HWiNFO32;HWiNFO32 Kernel Driver;C:\Program Files\HWiNFO32\HWiNFO32.SYS [15.11.2009 17:10:27 19064]
S2 Application Updater;Application Updater;C:\Program Files\Application Updater\ApplicationUpdater.exe [8.1.2010 0:51:02 380928]
S2 avg9wd;AVG WatchDog;C:\Program Files\AVG\AVG9\avgwdsvc.exe [12.3.2010 20:29:10 308064]
S2 avgfws9;AVG Firewall;C:\Program Files\AVG\AVG9\avgfws9.exe [12.3.2010 20:28:37 2325816]
S2 EPGService;EPGService;C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe [24.12.2009 16:26:33 437248]
S2 FsUsbExService;FsUsbExService;C:\WINDOWS\system32\FsUsbExService.Exe [29.12.2009 11:47:16 233472]
S3 Avgfwfd;AVG network filter service;C:\WINDOWS\system32\drivers\avgfwdx.sys [25.11.2009 17:43:42 30104]
S3 DfSdkS;Defragmentation-Service;C:\Program Files\Ashampoo\Ashampoo WinOptimizer 2010\DfSdkS.exe [9.3.2010 18:19:22 406016]
S3 DualCoreCenter;DualCoreCenter;C:\BIOSTools\NTGLM7X.sys [27.11.2009 14:21:12 28160]
S3 FsUsbExDisk;FsUsbExDisk;C:\WINDOWS\system32\FsUsbExDisk.Sys [29.12.2009 11:47:16 36608]
S3 HCW85BDA;Hauppauge WinTV 885 Video Capture;C:\WINDOWS\system32\drivers\HCW85BDA.sys [14.11.2009 19:41:57 1440384]
S3 HPKBCCID;HP Keyboard Smart Card Driver;C:\WINDOWS\system32\drivers\HPKBCCID.sys [14.11.2009 21:01:21 46976]
S3 PTSimHid;PenTablet Simulated HID MiniDriver;C:\WINDOWS\system32\drivers\PTSimHid.sys [15.12.2009 17:51:14 10752]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);C:\WINDOWS\system32\drivers\ss_bbus.sys [25.2.2010 21:40:57 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);C:\WINDOWS\system32\drivers\ss_bmdfl.sys [25.2.2010 21:40:57 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;C:\WINDOWS\system32\drivers\ss_bmdm.sys [25.2.2010 21:40:57 121856]
S3 STC2DFU;STCII DFU Adapter;C:\WINDOWS\system32\drivers\Stc2Dfu.sys [25.10.2004 0:04:00 7796]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-08-22 13:11:14 451872 -c--a-w- C:\Program Files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
FF - ProfilePath - C:\Documents and Settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\c9j45zyk.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - plugin: C:\Program Files\Mozilla Firefox\plugins\npdjvu.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
FF - user.js: browser.blink_allowed - true
FF - user.js: network.prefetch-next - true
FF - user.js: nglayout.initialpaint.delay - 250
FF - user.js: layout.spellcheckDefault - 1
FF - user.js: browser.urlbar.autoFill - false
FF - user.js: browser.search.openintab - false
FF - user.js: browser.tabs.closeButtons - 1
FF - user.js: browser.tabs.opentabfor.middleclick - true
FF - user.js: browser.tabs.tabMinWidth - 100
FF - user.js: browser.urlbar.hideGoButton - false
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
C:\Program Files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
C:\Program Files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

[Rudy]

Log sice není kompletní, nicméně proveďte toto: Otevřte poznámkový blok a zkopírujte do něj:

Folder::
C:\Program Files\pdfforge Toolbar

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{B922D405-6D13-4A2B-AE89-08A030DA4402}"=-
[-HKEY_CLASSES_ROOT\clsid\{b922d405-6d13-4a2b-ae89-08a030da4402}]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchSettings]

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[ilkar]

takze MBAM je ciste combofix opet v nouzovem rezimu
Malwarebytes' Anti-Malware 1.44
Verze databáze: 3868
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

15.3.2010 6:03:09
mbam-log-2010-03-15 (06-03-09).txt

Typ kontroly: Kompletní kontrola (C:\|D:\|E:\|F:\|N:\|)
Zkontrolované objekty: 928220
Uplynulý čas: 2 hour(s), 9 minute(s), 16 second(s)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované hodnoty registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
(Nebyly nalezeny žádné škodlivé položky)

combofix

ComboFix 10-03-14.04 - Admin 15.03.2010 6:09.10.2 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3326.2929 [GMT 1:00]
Spuštěný z: c:\documents and settings\Admin\Plocha\combo.exe
Použité ovládací přepínače :: c:\documents and settings\Admin\Plocha\CFScript.txt
AV: AVG Anti-Virus plus Firewall *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *enabled* {8decf618-9569-4340-b34a-d78d28969b66}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\pdfforge Toolbar
c:\program files\pdfforge Toolbar\FF\components\config.ini
c:\program files\pdfforge Toolbar\FF\components\IFBHOHelperWidgiToolbar.xpt
c:\program files\pdfforge Toolbar\FF\components\IFBHOWidgiToolbar.xpt
c:\program files\pdfforge Toolbar\FF\components\pdfforgeToolbarFF.dll
c:\program files\pdfforge Toolbar\FF\chrome.manifest
c:\program files\pdfforge Toolbar\FF\chrome\content\chevron.js
c:\program files\pdfforge Toolbar\FF\chrome\content\chevron.xul
c:\program files\pdfforge Toolbar\FF\chrome\content\login.js
c:\program files\pdfforge Toolbar\FF\chrome\content\login.xul
c:\program files\pdfforge Toolbar\FF\chrome\content\parser.js
c:\program files\pdfforge Toolbar\FF\chrome\content\RssTickerWidget.js
c:\program files\pdfforge Toolbar\FF\chrome\content\searchbox.js
c:\program files\pdfforge Toolbar\FF\chrome\content\searchbox.xul
c:\program files\pdfforge Toolbar\FF\chrome\content\widgicomm.js
c:\program files\pdfforge Toolbar\FF\chrome\content\widgihandling.js
c:\program files\pdfforge Toolbar\FF\chrome\content\widgichevron.js
c:\program files\pdfforge Toolbar\FF\chrome\content\widgilisteners.js
c:\program files\pdfforge Toolbar\FF\chrome\content\widgitoolbarplugin.js
c:\program files\pdfforge Toolbar\FF\chrome\content\widgitoolbarplugin.xul
c:\program files\pdfforge Toolbar\FF\chrome\content\widgiui.js
c:\program files\pdfforge Toolbar\FF\chrome\locale\EN-US\searchbox.dtd
c:\program files\pdfforge Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.dtd
c:\program files\pdfforge Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.properties
c:\program files\pdfforge Toolbar\FF\chrome\locale\EN-US\yahoo-search.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\amazon.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\ebay.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\chevron.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\icon_settings.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\pdfc_branding.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\pdfc_branding_hover.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\pdfc_icon.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\pdfc_portal_logo.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\search-button-hover.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\search-button.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\search-chevron-hover.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\search-chevron.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\search_amazon.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\search_ebay.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\search_yahoo.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\searchbox.css
c:\program files\pdfforge Toolbar\FF\chrome\skin\separator.gif
c:\program files\pdfforge Toolbar\FF\chrome\skin\widgitoolbarplugin.css
c:\program files\pdfforge Toolbar\FF\install.rdf
c:\program files\pdfforge Toolbar\IE\1.1.2\config.ini
c:\program files\pdfforge Toolbar\IE\1.1.2\pdfforgeToolbarIE.dll
c:\program files\pdfforge Toolbar\Res\amazon.gif
c:\program files\pdfforge Toolbar\Res\ebay.gif
c:\program files\pdfforge Toolbar\Res\icon_settings.gif
c:\program files\pdfforge Toolbar\Res\pdfc_branding.gif
c:\program files\pdfforge Toolbar\Res\pdfc_branding_hover.gif
c:\program files\pdfforge Toolbar\Res\pdfc_icon.gif
c:\program files\pdfforge Toolbar\Res\pdfc_portal_logo.gif
c:\program files\pdfforge Toolbar\Res\search-button-hover.gif
c:\program files\pdfforge Toolbar\Res\search-button.gif
c:\program files\pdfforge Toolbar\Res\search-chevron-hover.gif
c:\program files\pdfforge Toolbar\Res\search-chevron.gif
c:\program files\pdfforge Toolbar\Res\search_amazon.gif
c:\program files\pdfforge Toolbar\Res\search_ebay.gif
c:\program files\pdfforge Toolbar\Res\search_yahoo.gif
c:\program files\pdfforge Toolbar\Res\widgets.xml
c:\program files\pdfforge Toolbar\SearchSettings.exe
c:\program files\pdfforge Toolbar\SearchSettingsRes409.dll
c:\program files\pdfforge Toolbar\sscfg.ini
c:\program files\pdfforge Toolbar\SSFF\components\IFBHOSearch.xpt
c:\program files\pdfforge Toolbar\SSFF\components\IFBHOSearchHelperEngine.xpt
c:\program files\pdfforge Toolbar\SSFF\components\IFHelperPreferences.xpt
c:\program files\pdfforge Toolbar\SSFF\components\SearchSettingsFF.dll
c:\program files\pdfforge Toolbar\SSFF\components\sscfg.ini
c:\program files\pdfforge Toolbar\SSFF\chrome.manifest
c:\program files\pdfforge Toolbar\SSFF\chrome\content\plugin.js
c:\program files\pdfforge Toolbar\SSFF\chrome\content\plugin.xul
c:\program files\pdfforge Toolbar\SSFF\chrome\content\protection.js
c:\program files\pdfforge Toolbar\SSFF\chrome\content\utils.js
c:\program files\pdfforge Toolbar\SSFF\chrome\locale\en-US\searchsettingsplugin.dtd
c:\program files\pdfforge Toolbar\SSFF\chrome\locale\en-US\searchsettingsplugin.properties
c:\program files\pdfforge Toolbar\SSFF\chrome\skin\yahoo.xml
c:\program files\pdfforge Toolbar\SSFF\install.rdf
c:\program files\pdfforge Toolbar\WidgiHelper.exe

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-02-15 do 2010-03-15 )))))))))))))))))))))))))))))))
.

2010-03-14 21:32 . 2010-03-14 21:37 -------- d-----w- C:\combo3375c
2010-03-14 21:26 . 2010-03-14 21:27 -------- d-----w- C:\combo
2010-03-14 08:55 . 2010-03-14 08:56 -------- d-----w- C:\rsit
2010-03-14 08:55 . 2010-03-14 08:56 -------- d-----w- c:\program files\trend micro
2010-03-12 20:32 . 2004-05-18 18:16 39936 ----a-w- c:\windows\system32\huffyuv.dll
2010-03-12 20:32 . 2004-01-25 16:18 217088 ----a-w- c:\windows\system32\yv12vfw.dll
2010-03-12 20:32 . 2009-05-29 21:37 205824 ----a-w- c:\windows\system32\xvidvfw.dll
2010-03-12 20:32 . 2009-05-29 21:31 881664 ----a-w- c:\windows\system32\xvidcore.dll
2010-03-12 20:32 . 2010-03-10 18:00 85504 ----a-w- c:\windows\system32\ff_vfw.dll
2010-03-12 19:29 . 2010-03-12 19:29 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-03-11 15:00 . 2010-03-11 15:00 -------- d-----w- c:\program files\LizardTech
2010-03-10 19:49 . 2010-03-10 19:49 -------- d-----w- c:\program files\Application Updater
2010-03-10 19:48 . 2001-10-28 15:42 116224 ----a-w- c:\windows\system32\pdfcmnnt.dll
2010-03-10 19:48 . 2010-03-10 19:49 -------- d-----w- c:\program files\PDFCreator
2010-03-10 19:48 . 1998-07-05 23:00 23552 ----a-w- c:\windows\system32\MSMPIDE.DLL
2010-03-10 18:40 . 2010-02-02 14:33 8192 ----a-w- c:\windows\system32\BioPdf.PdfWriter.Lib.dll
2010-03-10 18:40 . 2010-03-10 18:40 -------- d-----w- c:\program files\Common Files\Bullzip
2010-03-10 18:40 . 2010-01-26 07:38 135168 ----a-w- c:\windows\system32\bzpdfc.dll
2010-03-10 18:40 . 2008-10-30 21:15 227840 ----a-w- c:\windows\system32\bzFlRdr.dll
2010-03-10 18:40 . 2008-07-09 22:19 103424 ----a-w- c:\windows\system32\bzDCT.dll
2010-03-10 18:40 . 2010-01-13 18:57 194560 ----a-w- c:\windows\system32\bzpdf.dll
2010-03-10 18:40 . 2010-03-10 18:40 -------- d-----w- c:\program files\Bullzip
2010-03-09 17:19 . 2009-08-24 20:08 28160 ----a-w- c:\windows\system32\DfSdkBt.exe
2010-03-04 14:02 . 2010-03-04 14:22 -------- d-----w- c:\program files\Seznam DVD 2008
2010-03-01 17:35 . 2004-07-09 03:26 52096 -c--a-w- c:\windows\system32\dllcache\msdv.sys
2010-03-01 17:35 . 2004-07-09 03:26 52096 ----a-w- c:\windows\system32\drivers\msdv.sys
2010-03-01 17:35 . 2004-07-09 03:26 1230336 -c--a-w- c:\windows\system32\dllcache\msvidctl.dll
2010-03-01 17:35 . 2002-12-11 23:14 257024 -c--a-w- c:\windows\system32\dllcache\qcap.dll
2010-03-01 17:35 . 2002-12-11 23:14 13312 -c--a-w- c:\windows\system32\dllcache\msdmo.dll
2010-03-01 17:35 . 2003-05-30 08:00 132608 -c--a-w- c:\windows\system32\dllcache\devenum.dll
2010-03-01 17:34 . 2002-12-11 23:14 46592 ----a-w- c:\windows\system32\dxdllreg.exe
2010-03-01 17:34 . 2004-07-09 03:27 381952 -c--a-w- c:\windows\system32\dllcache\dsound.dll
2010-03-01 17:34 . 2004-07-09 03:27 292864 -c--a-w- c:\windows\system32\dllcache\ddraw.dll
2010-03-01 17:34 . 2003-05-30 08:00 797184 -c--a-w- c:\windows\system32\dllcache\d3dim700.dll
2010-03-01 17:34 . 2002-12-11 23:14 8192 -c--a-w- c:\windows\system32\dllcache\d3d8thk.dll
2010-03-01 17:34 . 2002-12-11 23:14 24064 -c--a-w- c:\windows\system32\dllcache\ddrawex.dll
2010-03-01 17:34 . 2002-08-29 02:40 648704 -c--a-w- c:\windows\system32\dllcache\dinput.dll
2010-02-28 19:33 . 2010-02-28 19:33 -------- d-----w- C:\spoolerlogs
2010-02-28 19:09 . 2007-08-14 19:57 5632 ----a-w- c:\windows\system32\udcpm.dll
2010-02-28 19:09 . 2010-02-28 19:09 -------- d-----w- c:\program files\Universal Document Converter
2010-02-28 19:09 . 2010-02-28 19:09 -------- d-----r- C:\UDC Output Files
2010-02-25 20:41 . 2007-05-02 15:31 90624 ----a-w- c:\windows\system32\nmwcdcls.dll
2010-02-25 20:41 . 2007-09-17 14:53 21632 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2010-02-25 20:40 . 2009-03-20 09:01 90112 ----a-w- c:\windows\system32\drivers\ss_bbus.sys
2010-02-25 20:40 . 2009-03-20 09:01 14976 ----a-w- c:\windows\system32\drivers\ss_bmdfl.sys
2010-02-25 20:40 . 2009-03-20 09:01 121856 ----a-w- c:\windows\system32\drivers\ss_bmdm.sys
2010-02-25 20:40 . 2009-03-20 09:01 12160 ----a-w- c:\windows\system32\drivers\ss_bwhnt.sys
2010-02-25 20:40 . 2009-03-20 09:01 12160 ----a-w- c:\windows\system32\drivers\ss_bwh.sys
2010-02-25 20:40 . 2009-03-20 09:01 12160 ----a-w- c:\windows\system32\drivers\ss_bcmnt.sys
2010-02-25 20:40 . 2009-03-20 09:01 12160 ----a-w- c:\windows\system32\drivers\ss_bcm.sys
2010-02-25 20:40 . 2010-02-25 20:40 -------- d-----w- c:\program files\MarkAny
2010-02-25 20:40 . 2010-02-25 20:41 -------- d-----w- c:\program files\PC Connectivity Solution
2010-02-18 09:34 . 2010-02-18 09:34 -------- d-s---w- c:\program files\HLSW
2010-02-14 16:57 . 2010-02-14 16:57 -------- d-----w- c:\program files\GameSpy Arcade
2010-02-14 16:56 . 2010-02-14 17:00 1247 ----a-w- c:\windows\eReg.dat
2010-02-14 08:10 . 2010-03-01 17:30 -------- d-----w- c:\program files\EA GAMES

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-14 23:02 . 2009-11-14 18:44 -------- d-----w- c:\program files\WinTV
2010-03-14 20:41 . 2009-11-15 09:33 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2010-03-14 17:11 . 2006-03-02 12:00 509208 ----a-w- c:\windows\system32\perfh005.dat
2010-03-14 17:11 . 2006-03-02 12:00 109850 ----a-w- c:\windows\system32\perfc005.dat
2010-03-14 09:16 . 2009-12-23 11:29 -------- d-----w- c:\program files\fileuploader
2010-03-13 09:42 . 2009-11-13 15:49 -------- d-----w- c:\program files\CCleaner
2010-03-13 09:36 . 2009-11-13 19:59 -------- d-----w- c:\program files\K-Lite Codec Pack
2010-03-12 19:29 . 2009-11-25 16:44 242696 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-03-12 19:29 . 2009-11-25 16:44 29512 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-03-12 19:28 . 2009-11-25 16:44 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-03-12 19:28 . 2009-11-25 16:44 52872 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2010-03-11 15:00 . 2007-07-31 13:05 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-03-11 12:00 . 2009-12-28 14:07 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-03-11 11:59 . 2009-12-28 14:08 -------- d-----w- c:\program files\AGEIA Technologies
2010-03-11 11:58 . 2009-11-15 18:46 -------- d-----w- c:\program files\Ubisoft
2010-03-09 17:21 . 2009-11-23 20:50 -------- d-----w- c:\program files\BitComet
2010-03-08 18:10 . 2010-02-09 14:10 137464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-03-08 18:09 . 2009-11-15 16:57 214520 -c--a-w- c:\windows\system32\PnkBstrB.exe
2010-03-05 08:41 . 2009-11-13 15:51 -------- d-----w- c:\program files\Seznam.cz
2010-02-25 20:41 . 2009-12-29 10:46 -------- d-----w- c:\program files\Samsung
2010-02-25 20:41 . 2009-12-29 10:47 -------- d-----w- c:\program files\DIFX
2010-02-23 17:00 . 2007-07-31 14:26 -------- d-----w- c:\program files\Common Files\Adobe
2010-02-18 06:42 . 2009-11-24 18:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-10 17:55 . 2009-12-21 15:54 -------- d-----w- c:\program files\GamePark
2010-02-10 17:53 . 2010-02-10 17:53 794408 ----a-w- c:\windows\system32\pbsvc.exe
2010-02-10 17:13 . 2005-10-14 10:56 165376 ----a-w- c:\windows\system32\unrar.dll
2010-02-10 14:46 . 2009-11-14 16:03 -------- d-----w- c:\program files\Common Files\snpstd3
2010-02-09 19:16 . 2010-02-09 19:16 -------- d-----w- c:\program files\totalcmd
2010-02-09 14:10 . 2010-02-09 14:10 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-02-07 19:21 . 2010-02-07 19:21 -------- d-----w- c:\program files\MarkAnyContentSAFER
2010-02-07 19:17 . 2007-10-25 16:26 5632 ----a-w- c:\windows\system32\drivers\StarOpen.sys
2010-02-04 11:50 . 2010-02-04 11:50 -------- d-----w- c:\program files\Codec Pack - All In 1
2010-02-04 11:49 . 2010-02-04 11:50 737280 ----a-w- c:\windows\iun6002.exe
2010-02-03 15:47 . 2010-02-03 15:47 -------- d-----w- c:\program files\MediaInfo
2010-01-27 16:13 . 2010-01-27 16:13 -------- d-----w- c:\program files\FreeCommander
2010-01-21 18:28 . 2009-11-17 19:37 -------- d-----w- c:\program files\Avidemux 2.5
2010-01-21 15:36 . 2009-12-27 20:05 -------- d-----w- c:\program files\ASF-AVI-RM-WMV Repair
2010-01-12 11:06 . 2010-01-12 11:06 -------- d-----w- c:\windows\Fonts\Fonts
2010-01-07 15:07 . 2009-11-24 18:16 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-07 15:07 . 2009-11-24 18:16 19160 -c--a-w- c:\windows\system32\drivers\mbam.sys
2010-01-01 19:44 . 2007-07-31 03:47 86327 -c--a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-01-01 19:44 . 2007-07-31 03:47 2740 -c--a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2009-12-31 16:50 . 2006-03-02 12:00 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-28 14:20 . 2009-12-28 14:20 107888 -c--a-w- c:\windows\system32\CmdLineExt.dll
2009-12-21 19:08 . 2006-03-02 12:00 916480 ------w- c:\windows\system32\wininet.dll
2009-12-17 07:42 . 2007-07-31 03:44 343552 -c--a-w- c:\windows\system32\mspaint.exe
.

Kód: Vybrat vše

<pre>
c:\program files\JDownloader\JDownloader\downloads\pinacle studio 14\proDAHe 30\heroglyph-2 6 30  CrePak 1-2 .exe
</pre>

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Seznam Postak"="c:\program files\Seznam.cz\postak.exe" [2010-03-01 451224]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"SIDEBAR"="c:\program files\Desktop Sidebar\dsidebar.exe" [2006-07-09 1777664]
"ICQ"="c:\program files\ICQ6.5\ICQ.exe" [2009-11-16 172792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Persistence"="c:\windows\system32\igfxpers.exe" [2006-09-25 94208]
"Recguard"="c:\windows\Sminst\Recguard.exe" [2006-05-12 1138688]
"Reminder"="c:\windows\Creator\Remind_XP.exe" [2006-03-31 761856]
"Scheduler"="c:\windows\SMINST\Scheduler.exe" [2006-04-24 888832]
"tsnpstd3"="c:\windows\tsnpstd3.exe" [2007-04-21 270336]
"WTClient"="WTClient.exe" [2007-04-11 40960]
"snpstd3"="c:\windows\vsnpstd3.exe" [2007-05-10 835584]
"NPSStartup"="" [N/A]
"UDC Integration"="" [N/A]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-11-24 98304]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2010-1-11 113664]
LUMIX Simple Viewer.lnk - c:\program files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe [2009-12-23 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoFileAssociate"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-03-12 19:29 12464 ----a-w- c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ OODBS\0autocheck autochk *

[HKLM\~\startupfolder\C:^Documents and Settings^Admin^Nabídka Start^Programy^Po spuštění^Zástupce - JDownloader.lnk]
path=c:\documents and settings\Admin\Nabídka Start\Programy\Po spuštění\Zástupce - JDownloader.lnk
backup=c:\windows\pss\Zástupce - JDownloader.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Windows Search.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Windows Search.lnk
backup=c:\windows\pss\Windows Search.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2009-12-11 14:57 948672 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-12-22 00:57 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]
2009-11-15 10:00 2292672 -c--a-w- c:\program files\SlySoft\AnyDVD\AnyDVDtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ashampoo Core Tuner]
2009-09-25 14:03 3334488 -c--a-w- c:\program files\Ashampoo\Ashampoo Core Tuner\ct.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AutoStartNPSAgent]
2009-04-16 08:41 102400 ----a-w- c:\program files\Samsung\Samsung New PC Studio\NPSAgent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LayoutM]
2004-08-26 13:17 45056 -c--a-w- c:\windows\KLayMgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
2009-09-11 23:34 2524416 ----a-w- c:\program files\OO Software\Defrag\oodtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetRefresh]
2003-11-20 16:01 525824 -c--a-w- c:\program files\COMPAQ\SetRefresh\SetRefresh.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\SMINST\\Scheduler.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\umi.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx9.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx10.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Launcher.exe"=
"c:\\Program Files\\BitComet\\BitComet.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgam.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgdiagex.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
"c:\\Program Files\\Electronic Arts\\Medal of Honor Airborne\\UnrealEngine3\\Binaries\\MOHA.exe"=
"c:\\Program Files\\Samsung\\Samsung New PC Studio\\npsasvr.exe"=
"c:\\Program Files\\Samsung\\Samsung New PC Studio\\npsvsvr.exe"=
"c:\\Program Files\\Activision\\Call of Duty 2\\CoD2SP_s.exe"=
"c:\\Program Files\\Activision\\Call of Duty 2\\CoD2MP_s.exe"=
"c:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW.exe"=
"c:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaWmp.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"12802:TCP"= 12802:TCP:BitComet 12802 TCP
"12802:UDP"= 12802:UDP:BitComet 12802 UDP

R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [25.11.2009 17:44 52872]
R1 AvgTdiX;AVG Network Redirector;c:\windows\system32\drivers\avgtdix.sys [25.11.2009 17:44 242696]
R3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [25.11.2009 17:43 30104]
R3 PTSimBus;PenTablet Bus Enumerator;c:\windows\system32\drivers\PTSimBus.sys [15.12.2009 17:51 18944]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [15.11.2009 10:25 721904]
S1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [25.11.2009 17:44 216200]
S1 HWiNFO32;HWiNFO32 Kernel Driver;c:\program files\HWiNFO32\HWiNFO32.SYS [15.11.2009 17:10 19064]
S2 Application Updater;Application Updater;c:\program files\Application Updater\ApplicationUpdater.exe [8.1.2010 0:51 380928]
S2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [12.3.2010 20:29 308064]
S2 avgfws9;AVG Firewall;c:\program files\AVG\AVG9\avgfws9.exe [12.3.2010 20:28 2325816]
S2 EPGService;EPGService;c:\progra~1\WinTV\EPG Services\System\EPGService.exe [24.12.2009 16:26 437248]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [29.12.2009 11:47 233472]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [25.11.2009 17:43 30104]
S3 DfSdkS;Defragmentation-Service;c:\program files\Ashampoo\Ashampoo WinOptimizer 2010\DfSdkS.exe [9.3.2010 18:19 406016]
S3 DualCoreCenter;DualCoreCenter;c:\biostools\NTGLM7X.sys [27.11.2009 14:21 28160]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [29.12.2009 11:47 36608]
S3 HCW85BDA;Hauppauge WinTV 885 Video Capture;c:\windows\system32\drivers\HCW85BDA.sys [14.11.2009 19:41 1440384]
S3 HPKBCCID;HP Keyboard Smart Card Driver;c:\windows\system32\drivers\HPKBCCID.sys [14.11.2009 21:01 46976]
S3 PTSimHid;PenTablet Simulated HID MiniDriver;c:\windows\system32\drivers\PTSimHid.sys [15.12.2009 17:51 10752]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [25.2.2010 21:40 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [25.2.2010 21:40 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [25.2.2010 21:40 121856]
S3 STC2DFU;STCII DFU Adapter;c:\windows\system32\drivers\Stc2Dfu.sys [25.10.2004 0:04 7796]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-08-22 13:11 451872 -c--a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
FF - ProfilePath - c:\documents and settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\c9j45zyk.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdjvu.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
FF - user.js: browser.blink_allowed - true
FF - user.js: network.prefetch-next - true
FF - user.js: nglayout.initialpaint.delay - 250
FF - user.js: layout.spellcheckDefault - 1
FF - user.js: browser.urlbar.autoFill - false
FF - user.js: browser.search.openintab - false
FF - user.js: browser.tabs.closeButtons - 1
FF - user.js: browser.tabs.opentabfor.middleclick - true
FF - user.js: browser.tabs.tabMinWidth - 100
FF - user.js: browser.urlbar.hideGoButton - false
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-15 06:18
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG12.00.00.01PROFESSIONAL"="6A327343422E4205F58C863DDF486184757977787DACA1B6E014C7DA925F1400C88F4F26A1A4A30E66E7125AF1BA538D8AAA7039A1ADD4EE50CEA14B05AFF1AFAB1981F9590D3B4A3C13AF3E47A78D1C7BFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC7933A6171C11EC38DE3DBA7FD869164D6794C038D530D6EB3452454A47566A30B35FE5636D7043BAB82A19C638644DC12DCE4AD045C505331C2419C7BD17640EB0B2D47DFECCE66824E4FE385899134041F8E16F51969AA17CCF395908A9881D8E83E9C995CD80892DCBC3D612210F19C73C5ADE1546023EE049EB4FD812DF60E9A0DBC25D0FDADF39542E6BA8CBEC6A0E522BD50D7D6AA09F2BFA6B87EE380B3F2AE359264206DA11430CB4067E9D0245C5527C5BF44417726533658F6E2508F31842F0E32AD3235F35AAE1B7B2D46402774FF247FAC320F840E5E60E52FC75CF32B762AE9F5B92B696DF18ECF48A48BE99A7CAB8F2E2F03551EA9047F358237D170DF8C10F783709AB02F17B68FA9958366489BDD25EF10D08197522BD17978B388BF57E784B54B00A6CFA5DC0277790A690A8092338404B23D01BA9AF598CEE5C820BE6F03560E89E00B42E48D2B60C1CBE177185352C1EB7F0FD8BDA876F7D1CC3E2249F5E05532620942EDA855DD49902B6EEA85D3A982E610D9BE8C9E0F3E5A69802C1B121F3343303C3EA0C2759F7F35D21557E2231450BA951158F38F17B86BA70275E48B2AF26DC777D7505E8E130D4C7E4AA52C00CDA2D46AD0BFC79F2C0CE0233D6BFDB53E7F3F52C97983B58D85C4BC4B6E80867C3E03915B1EDF23539CDF060538320ACEC8C1024093AE62E12A434F8BA3CA611BA050FC43D7B2980D42197394F4114212D60BA262776EB8B04D32F961553A51539CBCC462ECC4C66002BF45E885A3065A21B0F87928B296CDA0411C867EC6DD4BDDB9FBA433AEECCA83E2F84836650844DDF49B12DECE61FC944CD4D94F64E834951535306D2896E41240DF306B0355EB1C14BA22043CC4A81950075C61879AB60BA5C583ED476D7BF17FA881CB604A3D7CB99EA59E8E8E2BEEEE4A9EBA805298F1BD1247A39F46AA0480832942B43DDC9785D2F06EDAA353BB9DE6235336BADE169ED288D28A95DE1DA687503F4E06519BAE22B9D166A62B853F3AE177A0C3D6A1111E50E7E9A3A05E7F36B3E2EAD6A57F79A295557605EFB0E4D31CA71A8AFBDF03CF4D4CEB45D12FA28BF62A6DBEE1E079B0C2A60A96ECDB0BA204D42E8B3F55B1801805FC5F9131322334CDD86C988B61CC85D8DC8B0F9F4AB44604755C8B1196DC87327821617A62798218DA827B5C87B6872742114528937FD89135CC49163AD9FD3D5020AB09BA0D9C79EA183C96F3909B05B7DDC2A0E18BD906951"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(880)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2010-03-15 06:19:41
ComboFix-quarantined-files.txt 2010-03-15 05:19

Před spuštěním: Volných bajtů: 37 381 976 064
Po spuštění: Volných bajtů: 37 342 183 424

- - End Of File - - 19D4919F3BF1F6E7313019B37F5B55E0

[Rudy]

Ještě jednou spusťte CF tímto skriptem:

RenV::
c:\program files\JDownloader\JDownloader\downloads\pinacle studio 14\proDAHe 30\heroglyph-2 6 30 CrePak 1-2 .exe

[ilkar]

takze zde by mel byt novy log z combofixe ale netusim zda je cely , pred zobrazenim se system znovu restartoval
ComboFix 10-03-14.04 - Admin 15.03.2010 21:27:36.11.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3326.2667 [GMT 1:00]
Spuštěný z: C:\Documents and Settings\Admin\Plocha\combo.exe
Použité ovládací přepínače :: C:\Documents and Settings\Admin\Plocha\CFScript.txt
AV: AVG Anti-Virus plus Firewall *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *enabled* {8decf618-9569-4340-b34a-d78d28969b66}
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-02-15 do 2010-03-15 )))))))))))))))))))))))))))))))
.

2010-03-15 16:34:13 . 2010-03-15 16:34:13 -------- d-----w- C:\Program Files\City Interactive
2010-03-15 16:31:59 . 2010-03-15 20:24:14 -------- d-----w- C:\Program Files\DAEMON Tools Lite
2010-03-15 11:35:46 . 2010-03-15 11:35:49 -------- d-----w- C:\Program Files\Guitar Pro 5
2010-03-14 21:32:36 . 2010-03-14 21:37:58 -------- d-----w- C:\combo3375c
2010-03-14 21:26:44 . 2010-03-14 21:27:23 -------- d-----w- C:\combo
2010-03-14 08:55:57 . 2010-03-14 08:56:30 -------- d-----w- C:\rsit
2010-03-14 08:55:57 . 2010-03-14 08:56:28 -------- d-----w- C:\Program Files\trend micro
2010-03-12 20:32:31 . 2004-05-18 18:16:42 39936 ----a-w- C:\WINDOWS\system32\huffyuv.dll
2010-03-12 20:32:31 . 2004-01-25 16:18:44 217088 ----a-w- C:\WINDOWS\system32\yv12vfw.dll
2010-03-12 20:32:30 . 2009-05-29 21:37:40 205824 ----a-w- C:\WINDOWS\system32\xvidvfw.dll
2010-03-12 20:32:30 . 2009-05-29 21:31:52 881664 ----a-w- C:\WINDOWS\system32\xvidcore.dll
2010-03-12 20:32:28 . 2010-03-10 18:00:00 85504 ----a-w- C:\WINDOWS\system32\ff_vfw.dll
2010-03-12 19:29:16 . 2010-03-12 19:29:16 12464 ----a-w- C:\WINDOWS\system32\avgrsstx.dll
2010-03-11 15:00:22 . 2010-03-11 15:00:22 -------- d-----w- C:\Program Files\LizardTech
2010-03-10 19:49:13 . 2010-03-10 19:49:14 -------- d-----w- C:\Program Files\Application Updater
2010-03-10 19:48:42 . 2001-10-28 15:42:30 116224 ----a-w- C:\WINDOWS\system32\pdfcmnnt.dll
2010-03-10 19:48:39 . 2010-03-10 19:49:38 -------- d-----w- C:\Program Files\PDFCreator
2010-03-10 19:48:39 . 1998-07-05 23:00:00 23552 ----a-w- C:\WINDOWS\system32\MSMPIDE.DLL
2010-03-10 18:40:57 . 2010-02-02 14:33:20 8192 ----a-w- C:\WINDOWS\system32\BioPdf.PdfWriter.Lib.dll
2010-03-10 18:40:56 . 2010-03-10 18:40:56 -------- d-----w- C:\Program Files\Common Files\Bullzip
2010-03-10 18:40:56 . 2010-01-26 07:38:34 135168 ----a-w- C:\WINDOWS\system32\bzpdfc.dll
2010-03-10 18:40:56 . 2008-10-30 21:15:44 227840 ----a-w- C:\WINDOWS\system32\bzFlRdr.dll
2010-03-10 18:40:56 . 2008-07-09 22:19:34 103424 ----a-w- C:\WINDOWS\system32\bzDCT.dll
2010-03-10 18:40:53 . 2010-01-13 18:57:58 194560 ----a-w- C:\WINDOWS\system32\bzpdf.dll
2010-03-10 18:40:48 . 2010-03-10 18:40:48 -------- d-----w- C:\Program Files\Bullzip
2010-03-09 17:19:22 . 2009-08-24 20:08:08 28160 ----a-w- C:\WINDOWS\system32\DfSdkBt.exe
2010-03-04 14:02:56 . 2010-03-04 14:22:53 -------- d-----w- C:\Program Files\Seznam DVD 2008
2010-03-01 17:35:04 . 2004-07-09 03:26:38 52096 -c--a-w- C:\WINDOWS\system32\dllcache\msdv.sys
2010-03-01 17:35:04 . 2004-07-09 03:26:38 52096 ----a-w- C:\WINDOWS\system32\drivers\msdv.sys
2010-03-01 17:35:04 . 2004-07-09 03:26:38 1230336 -c--a-w- C:\WINDOWS\system32\dllcache\msvidctl.dll
2010-03-01 17:35:02 . 2002-12-11 23:14:32 257024 -c--a-w- C:\WINDOWS\system32\dllcache\qcap.dll
2010-03-01 17:35:02 . 2002-12-11 23:14:32 13312 -c--a-w- C:\WINDOWS\system32\dllcache\msdmo.dll
2010-03-01 17:35:01 . 2003-05-30 08:00:02 132608 -c--a-w- C:\WINDOWS\system32\dllcache\devenum.dll
2010-03-01 17:34:59 . 2002-12-11 23:14:32 46592 ----a-w- C:\WINDOWS\system32\dxdllreg.exe
2010-03-01 17:34:58 . 2004-07-09 03:27:28 381952 -c--a-w- C:\WINDOWS\system32\dllcache\dsound.dll
2010-03-01 17:34:58 . 2004-07-09 03:27:28 292864 -c--a-w- C:\WINDOWS\system32\dllcache\ddraw.dll
2010-03-01 17:34:58 . 2003-05-30 08:00:02 797184 -c--a-w- C:\WINDOWS\system32\dllcache\d3dim700.dll
2010-03-01 17:34:58 . 2002-12-11 23:14:32 8192 -c--a-w- C:\WINDOWS\system32\dllcache\d3d8thk.dll
2010-03-01 17:34:58 . 2002-12-11 23:14:32 24064 -c--a-w- C:\WINDOWS\system32\dllcache\ddrawex.dll
2010-03-01 17:34:58 . 2002-08-29 02:40:00 648704 -c--a-w- C:\WINDOWS\system32\dllcache\dinput.dll
2010-02-28 19:33:39 . 2010-02-28 19:33:39 -------- d-----w- C:\spoolerlogs
2010-02-28 19:09:21 . 2007-08-14 19:57:24 5632 ----a-w- C:\WINDOWS\system32\udcpm.dll
2010-02-28 19:09:19 . 2010-02-28 19:09:21 -------- d-----w- C:\Program Files\Universal Document Converter
2010-02-28 19:09:19 . 2010-02-28 19:09:20 -------- d-----r- C:\UDC Output Files
2010-02-25 20:41:20 . 2007-05-02 15:31:52 90624 ----a-w- C:\WINDOWS\system32\nmwcdcls.dll
2010-02-25 20:41:16 . 2007-09-17 14:53:26 21632 ----a-w- C:\WINDOWS\system32\drivers\pccsmcfd.sys
2010-02-25 20:40:57 . 2009-03-20 09:01:26 90112 ----a-w- C:\WINDOWS\system32\drivers\ss_bbus.sys
2010-02-25 20:40:57 . 2009-03-20 09:01:26 14976 ----a-w- C:\WINDOWS\system32\drivers\ss_bmdfl.sys
2010-02-25 20:40:57 . 2009-03-20 09:01:26 121856 ----a-w- C:\WINDOWS\system32\drivers\ss_bmdm.sys
2010-02-25 20:40:57 . 2009-03-20 09:01:26 12160 ----a-w- C:\WINDOWS\system32\drivers\ss_bwhnt.sys
2010-02-25 20:40:57 . 2009-03-20 09:01:26 12160 ----a-w- C:\WINDOWS\system32\drivers\ss_bwh.sys
2010-02-25 20:40:57 . 2009-03-20 09:01:26 12160 ----a-w- C:\WINDOWS\system32\drivers\ss_bcmnt.sys
2010-02-25 20:40:57 . 2009-03-20 09:01:26 12160 ----a-w- C:\WINDOWS\system32\drivers\ss_bcm.sys
2010-02-25 20:40:17 . 2010-02-25 20:40:17 -------- d-----w- C:\Program Files\MarkAny
2010-02-25 20:40:14 . 2010-02-25 20:41:09 -------- d-----w- C:\Program Files\PC Connectivity Solution
2010-02-14 16:57:44 . 2010-02-14 16:57:44 -------- d-----w- C:\Program Files\GameSpy Arcade
2010-02-14 16:56:16 . 2010-02-14 17:00:38 1247 ----a-w- C:\WINDOWS\eReg.dat
2010-02-14 08:10:22 . 2010-03-01 17:30:07 -------- d-----w- C:\Program Files\EA GAMES

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-15 20:25:24 . 2009-11-14 18:44:04 -------- d-----w- C:\Program Files\WinTV
2010-03-15 16:32:18 . 2009-11-15 09:33:45 -------- d-----w- C:\Program Files\DAEMON Tools Toolbar
2010-03-15 16:32:09 . 2009-11-15 09:25:46 691696 ----a-w- C:\WINDOWS\system32\drivers\sptd.sys
2010-03-14 17:11:59 . 2006-03-02 12:00:00 509208 ----a-w- C:\WINDOWS\system32\perfh005.dat
2010-03-14 17:11:59 . 2006-03-02 12:00:00 109850 ----a-w- C:\WINDOWS\system32\perfc005.dat
2010-03-14 09:16:13 . 2009-12-23 11:29:11 -------- d-----w- C:\Program Files\fileuploader
2010-03-13 09:42:48 . 2009-11-13 15:49:09 -------- d-----w- C:\Program Files\CCleaner
2010-03-13 09:36:34 . 2009-11-13 19:59:38 -------- d-----w- C:\Program Files\K-Lite Codec Pack
2010-03-12 19:29:17 . 2009-11-25 16:44:09 242696 ----a-w- C:\WINDOWS\system32\drivers\avgtdix.sys
2010-03-12 19:29:16 . 2009-11-25 16:44:04 29512 ----a-w- C:\WINDOWS\system32\drivers\avgmfx86.sys
2010-03-12 19:28:36 . 2009-11-25 16:44:05 216200 ----a-w- C:\WINDOWS\system32\drivers\avgldx86.sys
2010-03-12 19:28:35 . 2009-11-25 16:44:09 52872 ----a-w- C:\WINDOWS\system32\drivers\avgrkx86.sys
2010-03-11 15:00:22 . 2007-07-31 13:05:18 -------- d--h--w- C:\Program Files\InstallShield Installation Information
2010-03-11 12:00:39 . 2009-12-28 14:07:48 -------- d-----w- C:\Program Files\Common Files\Wise Installation Wizard
2010-03-11 11:59:40 . 2009-12-28 14:08:02 -------- d-----w- C:\Program Files\AGEIA Technologies
2010-03-11 11:58:12 . 2009-11-15 18:46:15 -------- d-----w- C:\Program Files\Ubisoft
2010-03-09 17:21:48 . 2009-11-23 20:50:11 -------- d-----w- C:\Program Files\BitComet
2010-03-08 18:10:07 . 2010-02-09 14:10:36 137464 ----a-w- C:\WINDOWS\system32\drivers\PnkBstrK.sys
2010-03-08 18:09:39 . 2009-11-15 16:57:44 214520 -c--a-w- C:\WINDOWS\system32\PnkBstrB.exe
2010-03-05 08:41:39 . 2009-11-13 15:51:25 -------- d-----w- C:\Program Files\Seznam.cz
2010-02-25 20:41:25 . 2009-12-29 10:46:33 -------- d-----w- C:\Program Files\Samsung
2010-02-25 20:41:17 . 2009-12-29 10:47:20 -------- d-----w- C:\Program Files\DIFX
2010-02-23 17:00:55 . 2007-07-31 14:26:26 -------- d-----w- C:\Program Files\Common Files\Adobe
2010-02-18 06:42:27 . 2009-11-24 18:16:45 -------- d-----w- C:\Program Files\Malwarebytes' Anti-Malware
2010-02-10 17:55:51 . 2009-12-21 15:54:00 -------- d-----w- C:\Program Files\GamePark
2010-02-10 17:53:41 . 2010-02-10 17:53:41 794408 ----a-w- C:\WINDOWS\system32\pbsvc.exe
2010-02-10 17:13:48 . 2005-10-14 10:56:50 165376 ----a-w- C:\WINDOWS\system32\unrar.dll
2010-02-10 14:46:37 . 2009-11-14 16:03:15 -------- d-----w- C:\Program Files\Common Files\snpstd3
2010-02-09 19:16:55 . 2010-02-09 19:16:31 -------- d-----w- C:\Program Files\totalcmd
2010-02-09 14:10:08 . 2010-02-09 14:10:08 75064 ----a-w- C:\WINDOWS\system32\PnkBstrA.exe
2010-02-07 19:21:04 . 2010-02-07 19:21:04 -------- d-----w- C:\Program Files\MarkAnyContentSAFER
2010-02-07 19:17:44 . 2007-10-25 16:26:10 5632 ----a-w- C:\WINDOWS\system32\drivers\StarOpen.sys
2010-02-04 11:50:54 . 2010-02-04 11:50:51 -------- d-----w- C:\Program Files\Codec Pack - All In 1
2010-02-04 11:49:37 . 2010-02-04 11:50:54 737280 ----a-w- C:\WINDOWS\iun6002.exe
2010-02-03 15:47:50 . 2010-02-03 15:47:49 -------- d-----w- C:\Program Files\MediaInfo
2010-01-27 16:13:04 . 2010-01-27 16:13:01 -------- d-----w- C:\Program Files\FreeCommander
2010-01-21 18:28:18 . 2009-11-17 19:37:30 -------- d-----w- C:\Program Files\Avidemux 2.5
2010-01-21 15:36:57 . 2009-12-27 20:05:22 -------- d-----w- C:\Program Files\ASF-AVI-RM-WMV Repair
2010-01-12 11:06:57 . 2010-01-12 11:06:57 -------- d-----w- C:\WINDOWS\Fonts\Fonts
2010-01-07 15:07:14 . 2009-11-24 18:16:47 38224 ----a-w- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-01-07 15:07:04 . 2009-11-24 18:16:45 19160 -c--a-w- C:\WINDOWS\system32\drivers\mbam.sys
2010-01-01 19:44:22 . 2007-07-31 03:47:07 86327 -c--a-w- C:\WINDOWS\pchealth\helpctr\OfflineCache\index.dat
2010-01-01 19:44:22 . 2007-07-31 03:47:05 2740 -c--a-w- C:\WINDOWS\pchealth\helpctr\PackageStore\SkuStore.bin
2009-12-31 16:50:03 . 2006-03-02 12:00:00 353792 ----a-w- C:\WINDOWS\system32\drivers\srv.sys
2009-12-28 14:20:51 . 2009-12-28 14:20:51 107888 -c--a-w- C:\WINDOWS\system32\CmdLineExt.dll
2009-12-21 19:08:42 . 2006-03-02 12:00:00 916480 ------w- C:\WINDOWS\system32\wininet.dll
2009-12-17 07:42:35 . 2007-07-31 03:44:10 343552 -c--a-w- C:\WINDOWS\system32\mspaint.exe
.

Kód: Vybrat vše

<pre>
C:\Program Files\JDownloader\JDownloader\downloads\pinacle studio 14\proDAHe 30\heroglyph-2 6 30  CrePak 1-2 .exe
</pre>

((((((((((((((((((((((((((((( SnapShot@2010-03-14_22.05.42 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-03-15 20:25:06 . 2010-03-15 20:25:06 16384 C:\WINDOWS\temp\Perflib_Perfdata_574.dat
+ 2007-07-31 05:38:40 . 2010-03-15 20:24:18 361728 C:\WINDOWS\system32\FNTCACHE.DAT
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Seznam Postak"="C:\Program Files\Seznam.cz\postak.exe" [2010-03-01 12:15:28 451224]
"RocketDock"="C:\Program Files\RocketDock\RocketDock.exe" [2007-09-02 12:58:52 495616]
"SIDEBAR"="C:\Program Files\Desktop Sidebar\dsidebar.exe" [2006-07-09 20:58:00 1777664]
"ICQ"="C:\Program Files\ICQ6.5\ICQ.exe" [2009-11-16 15:36:19 172792]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 11:57:08 369200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Persistence"="C:\WINDOWS\system32\igfxpers.exe" [2006-09-25 08:12:00 94208]
"Recguard"="C:\WINDOWS\Sminst\Recguard.exe" [2006-05-12 10:50:16 1138688]
"Reminder"="C:\WINDOWS\Creator\Remind_XP.exe" [2006-03-31 12:44:26 761856]
"Scheduler"="C:\WINDOWS\SMINST\Scheduler.exe" [2006-04-24 08:42:06 888832]
"tsnpstd3"="C:\WINDOWS\tsnpstd3.exe" [2007-04-21 08:37:02 270336]
"WTClient"="WTClient.exe" [2007-04-11 15:27:00 40960]
"snpstd3"="C:\WINDOWS\vsnpstd3.exe" [2007-05-10 12:18:26 835584]
"NPSStartup"="" [N/A]
"UDC Integration"="" [N/A]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-11-24 20:24:38 98304]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 03:22:17 15360]

C:\Documents and Settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2010-1-11 113664]
LUMIX Simple Viewer.lnk - C:\Program Files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe [2009-12-23 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoFileAssociate"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 21:41:34 304128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-03-12 19:29:16 12464 ----a-w- C:\WINDOWS\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ OODBS\0autocheck autochk *

[HKLM\~\startupfolder\C:^Documents and Settings^Admin^Nabídka Start^Programy^Po spuštění^Zástupce - JDownloader.lnk]
path=C:\Documents and Settings\Admin\Nabídka Start\Programy\Po spuštění\Zástupce - JDownloader.lnk
backup=C:\WINDOWS\pss\Zástupce - JDownloader.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Windows Search.lnk]
path=C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Windows Search.lnk
backup=C:\WINDOWS\pss\Windows Search.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2009-12-11 14:57:56 948672 ----a-r- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-12-22 00:57:28 35760 ----a-w- C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]
2009-11-15 10:00:44 2292672 -c--a-w- C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ashampoo Core Tuner]
2009-09-25 14:03:22 3334488 -c--a-w- C:\Program Files\Ashampoo\Ashampoo Core Tuner\ct.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AutoStartNPSAgent]
2009-04-16 08:41:18 102400 ----a-w- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LayoutM]
2004-08-26 13:17:18 45056 -c--a-w- C:\WINDOWS\KLayMgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
2009-09-11 23:34:00 2524416 ----a-w- C:\Program Files\OO Software\Defrag\oodtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetRefresh]
2003-11-20 16:01:08 525824 -c--a-w- C:\Program Files\COMPAQ\SetRefresh\SetRefresh.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\WINDOWS\\SMINST\\Scheduler.exe"=
"C:\\Program Files\\ICQ6.5\\ICQ.exe"=
"C:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\RM.exe"=
"C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\Studio.exe"=
"C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\umi.exe"=
"C:\\WINDOWS\\system32\\PnkBstrA.exe"=
"C:\\WINDOWS\\system32\\PnkBstrB.exe"=
"C:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx9.exe"=
"C:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx10.exe"=
"C:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Launcher.exe"=
"C:\\Program Files\\BitComet\\BitComet.exe"=
"C:\\Program Files\\AVG\\AVG9\\avgam.exe"=
"C:\\Program Files\\AVG\\AVG9\\avgdiagex.exe"=
"C:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"C:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
"C:\\Program Files\\Electronic Arts\\Medal of Honor Airborne\\UnrealEngine3\\Binaries\\MOHA.exe"=
"C:\\Program Files\\Samsung\\Samsung New PC Studio\\npsasvr.exe"=
"C:\\Program Files\\Samsung\\Samsung New PC Studio\\npsvsvr.exe"=
"C:\\Program Files\\Activision\\Call of Duty 2\\CoD2SP_s.exe"=
"C:\\Program Files\\Activision\\Call of Duty 2\\CoD2MP_s.exe"=
"C:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW.exe"=
"C:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaWmp.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"12802:TCP"= 12802:TCP:BitComet 12802 TCP
"12802:UDP"= 12802:UDP:BitComet 12802 UDP

R0 AvgRkx86;avgrkx86.sys;C:\WINDOWS\system32\drivers\avgrkx86.sys [25.11.2009 17:44:09 52872]
R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\drivers\avgldx86.sys [25.11.2009 17:44:05 216200]
R1 AvgTdiX;AVG Network Redirector;C:\WINDOWS\system32\drivers\avgtdix.sys [25.11.2009 17:44:09 242696]
R1 HWiNFO32;HWiNFO32 Kernel Driver;C:\Program Files\HWiNFO32\HWiNFO32.SYS [15.11.2009 17:10:27 19064]
R2 Application Updater;Application Updater;C:\Program Files\Application Updater\ApplicationUpdater.exe [8.1.2010 0:51:02 380928]
R2 avg9wd;AVG WatchDog;C:\Program Files\AVG\AVG9\avgwdsvc.exe [12.3.2010 20:29:10 308064]
R2 avgfws9;AVG Firewall;C:\Program Files\AVG\AVG9\avgfws9.exe [12.3.2010 20:28:37 2325816]
R2 EPGService;EPGService;C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe [24.12.2009 16:26:33 437248]
R2 FsUsbExService;FsUsbExService;C:\WINDOWS\system32\FsUsbExService.Exe [29.12.2009 11:47:16 233472]
R3 Avgfwdx;Avgfwdx;C:\WINDOWS\system32\drivers\avgfwdx.sys [25.11.2009 17:43:42 30104]
R3 FsUsbExDisk;FsUsbExDisk;C:\WINDOWS\system32\FsUsbExDisk.Sys [29.12.2009 11:47:16 36608]
R3 HCW85BDA;Hauppauge WinTV 885 Video Capture;C:\WINDOWS\system32\drivers\HCW85BDA.sys [14.11.2009 19:41:57 1440384]
R3 PTSimBus;PenTablet Bus Enumerator;C:\WINDOWS\system32\drivers\PTSimBus.sys [15.12.2009 17:51:14 18944]
S0 sptd;sptd;C:\WINDOWS\system32\drivers\sptd.sys [15.11.2009 10:25:46 691696]
S3 Avgfwfd;AVG network filter service;C:\WINDOWS\system32\drivers\avgfwdx.sys [25.11.2009 17:43:42 30104]
S3 DfSdkS;Defragmentation-Service;C:\Program Files\Ashampoo\Ashampoo WinOptimizer 2010\DfSdkS.exe [9.3.2010 18:19:22 406016]
S3 DualCoreCenter;DualCoreCenter;C:\BIOSTools\NTGLM7X.sys [27.11.2009 14:21:12 28160]
S3 HPKBCCID;HP Keyboard Smart Card Driver;C:\WINDOWS\system32\drivers\HPKBCCID.sys [14.11.2009 21:01:21 46976]
S3 PTSimHid;PenTablet Simulated HID MiniDriver;C:\WINDOWS\system32\drivers\PTSimHid.sys [15.12.2009 17:51:14 10752]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);C:\WINDOWS\system32\drivers\ss_bbus.sys [25.2.2010 21:40:57 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);C:\WINDOWS\system32\drivers\ss_bmdfl.sys [25.2.2010 21:40:57 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;C:\WINDOWS\system32\drivers\ss_bmdm.sys [25.2.2010 21:40:57 121856]
S3 STC2DFU;STCII DFU Adapter;C:\WINDOWS\system32\drivers\Stc2Dfu.sys [25.10.2004 0:04:00 7796]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-08-22 13:11:14 451872 -c--a-w- C:\Program Files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
FF - ProfilePath - C:\Documents and Settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\c9j45zyk.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - plugin: C:\Program Files\Mozilla Firefox\plugins\npdjvu.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
FF - user.js: browser.blink_allowed - true
FF - user.js: network.prefetch-next - true
FF - user.js: nglayout.initialpaint.delay - 250
FF - user.js: layout.spellcheckDefault - 1
FF - user.js: browser.urlbar.autoFill - false
FF - user.js: browser.search.openintab - false
FF - user.js: browser.tabs.closeButtons - 1
FF - user.js: browser.tabs.opentabfor.middleclick - true
FF - user.js: browser.tabs.tabMinWidth - 100
FF - user.js: browser.urlbar.hideGoButton - false
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
C:\Program Files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
C:\Program Files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
C:\Program Files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.

[Rudy]

Nastala nějaká změna?

[ilkar]

zde je kompletni log z nouzoveho co se tyce zmen tak zatim nevim celi den sem na pc nebyl uvidime
ComboFix 10-03-15.02 - Admin 15.03.2010 22:09:44.13.2 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3326.2925 [GMT 1:00]
Spuštěný z: c:\documents and settings\Admin\Plocha\combo.exe
Použité ovládací přepínače :: c:\documents and settings\Admin\Plocha\CFScript.txt
AV: AVG Anti-Virus plus Firewall *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *enabled* {8decf618-9569-4340-b34a-d78d28969b66}
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-02-15 do 2010-03-15 )))))))))))))))))))))))))))))))
.

2010-03-14 16:43 . 2009-11-13 15:35 -------- d--h--w- c:\documents and settings\Administrator\Šablony
2010-03-14 16:43 . 2009-11-13 15:35 -------- d--h--r- c:\documents and settings\Administrator\Data aplikací
2010-03-14 16:43 . 2009-11-13 15:35 -------- d-----r- c:\documents and settings\Administrator\Nabídka Start
2010-03-14 16:43 . 2007-07-31 05:39 -------- d--h--w- c:\documents and settings\Administrator\Okolní tiskárny
2010-03-14 16:43 . 2007-07-31 05:39 -------- d--h--w- c:\documents and settings\Administrator\Okolní síť
2010-03-14 16:43 . 2007-07-31 05:39 -------- d-----w- c:\documents and settings\Administrator\Plocha
2010-03-14 16:43 . 2007-07-31 05:39 -------- d-----w- c:\documents and settings\Administrator\Oblíbené položky
2010-03-14 16:43 . 2007-07-31 05:39 -------- d-----w- c:\documents and settings\Administrator\Dokumenty
2010-03-14 16:43 . 2010-03-14 16:43 -------- d-----w- c:\documents and settings\Administrator
2010-03-14 08:55 . 2010-03-14 08:56 -------- d-----w- C:\rsit
2010-03-14 08:55 . 2010-03-14 08:56 -------- d-----w- c:\program files\trend micro
2010-03-12 20:32 . 2004-05-18 18:16 39936 ----a-w- c:\windows\system32\huffyuv.dll
2010-03-12 20:32 . 2004-01-25 16:18 217088 ----a-w- c:\windows\system32\yv12vfw.dll
2010-03-12 20:32 . 2009-05-29 21:37 205824 ----a-w- c:\windows\system32\xvidvfw.dll
2010-03-12 20:32 . 2009-05-29 21:31 881664 ----a-w- c:\windows\system32\xvidcore.dll
2010-03-12 20:32 . 2010-03-10 18:00 85504 ----a-w- c:\windows\system32\ff_vfw.dll
2010-03-12 19:29 . 2010-03-12 19:29 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-03-11 15:00 . 2010-03-11 15:00 -------- d-----w- c:\program files\LizardTech
2010-03-10 19:49 . 2010-03-10 19:49 -------- d-----w- c:\program files\Application Updater
2010-03-10 19:48 . 2001-10-28 15:42 116224 ----a-w- c:\windows\system32\pdfcmnnt.dll
2010-03-10 19:48 . 2010-03-10 19:49 -------- d-----w- c:\program files\PDFCreator
2010-03-10 19:48 . 1998-07-05 23:00 23552 ----a-w- c:\windows\system32\MSMPIDE.DLL
2010-03-10 18:40 . 2010-02-02 14:33 8192 ----a-w- c:\windows\system32\BioPdf.PdfWriter.Lib.dll
2010-03-10 18:40 . 2010-03-10 18:40 -------- d-----w- c:\program files\Common Files\Bullzip
2010-03-10 18:40 . 2010-01-26 07:38 135168 ----a-w- c:\windows\system32\bzpdfc.dll
2010-03-10 18:40 . 2008-10-30 21:15 227840 ----a-w- c:\windows\system32\bzFlRdr.dll
2010-03-10 18:40 . 2008-07-09 22:19 103424 ----a-w- c:\windows\system32\bzDCT.dll
2010-03-10 18:40 . 2010-01-13 18:57 194560 ----a-w- c:\windows\system32\bzpdf.dll
2010-03-10 18:40 . 2010-03-10 18:40 -------- d-----w- c:\program files\Bullzip
2010-03-09 17:19 . 2009-08-24 20:08 28160 ----a-w- c:\windows\system32\DfSdkBt.exe
2010-03-04 14:02 . 2010-03-04 14:22 -------- d-----w- c:\program files\Seznam DVD 2008
2010-03-01 17:35 . 2004-07-09 03:26 52096 -c--a-w- c:\windows\system32\dllcache\msdv.sys
2010-03-01 17:35 . 2004-07-09 03:26 52096 ----a-w- c:\windows\system32\drivers\msdv.sys
2010-03-01 17:35 . 2004-07-09 03:26 1230336 -c--a-w- c:\windows\system32\dllcache\msvidctl.dll
2010-03-01 17:35 . 2002-12-11 23:14 257024 -c--a-w- c:\windows\system32\dllcache\qcap.dll
2010-03-01 17:35 . 2002-12-11 23:14 13312 -c--a-w- c:\windows\system32\dllcache\msdmo.dll
2010-03-01 17:35 . 2003-05-30 08:00 132608 -c--a-w- c:\windows\system32\dllcache\devenum.dll
2010-03-01 17:34 . 2002-12-11 23:14 46592 ----a-w- c:\windows\system32\dxdllreg.exe
2010-03-01 17:34 . 2004-07-09 03:27 381952 -c--a-w- c:\windows\system32\dllcache\dsound.dll
2010-03-01 17:34 . 2004-07-09 03:27 292864 -c--a-w- c:\windows\system32\dllcache\ddraw.dll
2010-03-01 17:34 . 2003-05-30 08:00 797184 -c--a-w- c:\windows\system32\dllcache\d3dim700.dll
2010-03-01 17:34 . 2002-12-11 23:14 8192 -c--a-w- c:\windows\system32\dllcache\d3d8thk.dll
2010-03-01 17:34 . 2002-12-11 23:14 24064 -c--a-w- c:\windows\system32\dllcache\ddrawex.dll
2010-03-01 17:34 . 2002-08-29 02:40 648704 -c--a-w- c:\windows\system32\dllcache\dinput.dll
2010-02-28 19:33 . 2010-02-28 19:33 -------- d-----w- C:\spoolerlogs
2010-02-28 19:09 . 2007-08-14 19:57 5632 ----a-w- c:\windows\system32\udcpm.dll
2010-02-28 19:09 . 2010-02-28 19:09 -------- d-----w- c:\program files\Universal Document Converter
2010-02-28 19:09 . 2010-02-28 19:09 -------- d-----r- C:\UDC Output Files
2010-02-25 20:41 . 2007-05-02 15:31 90624 ----a-w- c:\windows\system32\nmwcdcls.dll
2010-02-25 20:41 . 2007-09-17 14:53 21632 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2010-02-25 20:40 . 2009-03-20 09:01 90112 ----a-w- c:\windows\system32\drivers\ss_bbus.sys
2010-02-25 20:40 . 2009-03-20 09:01 14976 ----a-w- c:\windows\system32\drivers\ss_bmdfl.sys
2010-02-25 20:40 . 2009-03-20 09:01 121856 ----a-w- c:\windows\system32\drivers\ss_bmdm.sys
2010-02-25 20:40 . 2009-03-20 09:01 12160 ----a-w- c:\windows\system32\drivers\ss_bwhnt.sys
2010-02-25 20:40 . 2009-03-20 09:01 12160 ----a-w- c:\windows\system32\drivers\ss_bwh.sys
2010-02-25 20:40 . 2009-03-20 09:01 12160 ----a-w- c:\windows\system32\drivers\ss_bcmnt.sys
2010-02-25 20:40 . 2009-03-20 09:01 12160 ----a-w- c:\windows\system32\drivers\ss_bcm.sys
2010-02-25 20:40 . 2010-02-25 20:40 -------- d-----w- c:\program files\MarkAny
2010-02-25 20:40 . 2010-02-25 20:41 -------- d-----w- c:\program files\PC Connectivity Solution
2010-02-14 16:57 . 2010-02-14 16:57 -------- d-----w- c:\program files\GameSpy Arcade
2010-02-14 16:56 . 2010-02-14 17:00 1247 ----a-w- c:\windows\eReg.dat
2010-02-14 08:10 . 2010-03-01 17:30 -------- d-----w- c:\program files\EA GAMES

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-15 20:52 . 2009-11-14 18:44 -------- d-----w- c:\program files\WinTV
2010-03-15 20:24 . 2010-03-15 16:31 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-03-15 16:34 . 2010-03-15 16:34 -------- d-----w- c:\program files\City Interactive
2010-03-15 16:32 . 2009-11-15 09:33 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2010-03-15 16:32 . 2009-11-15 09:25 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-03-15 11:35 . 2010-03-15 11:35 -------- d-----w- c:\program files\Guitar Pro 5
2010-03-14 17:11 . 2006-03-02 12:00 509208 ----a-w- c:\windows\system32\perfh005.dat
2010-03-14 17:11 . 2006-03-02 12:00 109850 ----a-w- c:\windows\system32\perfc005.dat
2010-03-14 09:16 . 2009-12-23 11:29 -------- d-----w- c:\program files\fileuploader
2010-03-13 09:42 . 2009-11-13 15:49 -------- d-----w- c:\program files\CCleaner
2010-03-13 09:36 . 2009-11-13 19:59 -------- d-----w- c:\program files\K-Lite Codec Pack
2010-03-12 19:29 . 2009-11-25 16:44 242696 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-03-12 19:29 . 2009-11-25 16:44 29512 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-03-12 19:28 . 2009-11-25 16:44 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-03-12 19:28 . 2009-11-25 16:44 52872 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2010-03-11 15:00 . 2007-07-31 13:05 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-03-11 12:00 . 2009-12-28 14:07 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-03-11 11:59 . 2009-12-28 14:08 -------- d-----w- c:\program files\AGEIA Technologies
2010-03-11 11:58 . 2009-11-15 18:46 -------- d-----w- c:\program files\Ubisoft
2010-03-09 17:21 . 2009-11-23 20:50 -------- d-----w- c:\program files\BitComet
2010-03-08 18:10 . 2010-02-09 14:10 137464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-03-08 18:09 . 2009-11-15 16:57 214520 -c--a-w- c:\windows\system32\PnkBstrB.exe
2010-03-05 08:41 . 2009-11-13 15:51 -------- d-----w- c:\program files\Seznam.cz
2010-02-25 20:41 . 2009-12-29 10:46 -------- d-----w- c:\program files\Samsung
2010-02-25 20:41 . 2009-12-29 10:47 -------- d-----w- c:\program files\DIFX
2010-02-23 17:00 . 2007-07-31 14:26 -------- d-----w- c:\program files\Common Files\Adobe
2010-02-18 06:42 . 2009-11-24 18:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-10 17:55 . 2009-12-21 15:54 -------- d-----w- c:\program files\GamePark
2010-02-10 17:53 . 2010-02-10 17:53 794408 ----a-w- c:\windows\system32\pbsvc.exe
2010-02-10 17:13 . 2005-10-14 10:56 165376 ----a-w- c:\windows\system32\unrar.dll
2010-02-10 14:46 . 2009-11-14 16:03 -------- d-----w- c:\program files\Common Files\snpstd3
2010-02-09 19:16 . 2010-02-09 19:16 -------- d-----w- c:\program files\totalcmd
2010-02-09 14:10 . 2010-02-09 14:10 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-02-07 19:21 . 2010-02-07 19:21 -------- d-----w- c:\program files\MarkAnyContentSAFER
2010-02-07 19:17 . 2007-10-25 16:26 5632 ----a-w- c:\windows\system32\drivers\StarOpen.sys
2010-02-04 11:50 . 2010-02-04 11:50 -------- d-----w- c:\program files\Codec Pack - All In 1
2010-02-04 11:49 . 2010-02-04 11:50 737280 ----a-w- c:\windows\iun6002.exe
2010-02-03 15:47 . 2010-02-03 15:47 -------- d-----w- c:\program files\MediaInfo
2010-01-27 16:13 . 2010-01-27 16:13 -------- d-----w- c:\program files\FreeCommander
2010-01-21 18:28 . 2009-11-17 19:37 -------- d-----w- c:\program files\Avidemux 2.5
2010-01-21 15:36 . 2009-12-27 20:05 -------- d-----w- c:\program files\ASF-AVI-RM-WMV Repair
2010-01-12 11:06 . 2010-01-12 11:06 -------- d-----w- c:\windows\Fonts\Fonts
2010-01-07 15:07 . 2009-11-24 18:16 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-07 15:07 . 2009-11-24 18:16 19160 -c--a-w- c:\windows\system32\drivers\mbam.sys
2010-01-01 19:44 . 2007-07-31 03:47 86327 -c--a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-01-01 19:44 . 2007-07-31 03:47 2740 -c--a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2009-12-31 16:50 . 2006-03-02 12:00 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-28 14:20 . 2009-12-28 14:20 107888 -c--a-w- c:\windows\system32\CmdLineExt.dll
2009-12-21 19:08 . 2006-03-02 12:00 916480 ------w- c:\windows\system32\wininet.dll
2009-12-17 07:42 . 2007-07-31 03:44 343552 -c--a-w- c:\windows\system32\mspaint.exe
.

Kód: Vybrat vše

<pre>
c:\program files\JDownloader\JDownloader\downloads\pinacle studio 14\proDAHe 30\heroglyph-2 6 30  CrePak 1-2 .exe
</pre>

((((((((((((((((((((((((((((( SnapShot@2010-03-14_22.05.42 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-07-31 05:38 . 2010-03-15 20:24 361728 c:\windows\system32\FNTCACHE.DAT
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Seznam Postak"="c:\program files\Seznam.cz\postak.exe" [2010-03-01 451224]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"SIDEBAR"="c:\program files\Desktop Sidebar\dsidebar.exe" [2006-07-09 1777664]
"ICQ"="c:\program files\ICQ6.5\ICQ.exe" [2009-11-16 172792]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Persistence"="c:\windows\system32\igfxpers.exe" [2006-09-25 94208]
"Recguard"="c:\windows\Sminst\Recguard.exe" [2006-05-12 1138688]
"Reminder"="c:\windows\Creator\Remind_XP.exe" [2006-03-31 761856]
"Scheduler"="c:\windows\SMINST\Scheduler.exe" [2006-04-24 888832]
"tsnpstd3"="c:\windows\tsnpstd3.exe" [2007-04-21 270336]
"WTClient"="WTClient.exe" [2007-04-11 40960]
"snpstd3"="c:\windows\vsnpstd3.exe" [2007-05-10 835584]
"NPSStartup"="" [N/A]
"UDC Integration"="" [N/A]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-11-24 98304]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2010-1-11 113664]
LUMIX Simple Viewer.lnk - c:\program files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe [2009-12-23 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoFileAssociate"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-03-12 19:29 12464 ----a-w- c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ OODBS\0autocheck autochk *

[HKLM\~\startupfolder\C:^Documents and Settings^Admin^Nabídka Start^Programy^Po spuštění^Zástupce - JDownloader.lnk]
path=c:\documents and settings\Admin\Nabídka Start\Programy\Po spuštění\Zástupce - JDownloader.lnk
backup=c:\windows\pss\Zástupce - JDownloader.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Windows Search.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Windows Search.lnk
backup=c:\windows\pss\Windows Search.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2009-12-11 14:57 948672 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-12-22 00:57 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]
2009-11-15 10:00 2292672 -c--a-w- c:\program files\SlySoft\AnyDVD\AnyDVDtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ashampoo Core Tuner]
2009-09-25 14:03 3334488 -c--a-w- c:\program files\Ashampoo\Ashampoo Core Tuner\ct.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AutoStartNPSAgent]
2009-04-16 08:41 102400 ----a-w- c:\program files\Samsung\Samsung New PC Studio\NPSAgent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LayoutM]
2004-08-26 13:17 45056 -c--a-w- c:\windows\KLayMgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
2009-09-11 23:34 2524416 ----a-w- c:\program files\OO Software\Defrag\oodtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetRefresh]
2003-11-20 16:01 525824 -c--a-w- c:\program files\COMPAQ\SetRefresh\SetRefresh.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\SMINST\\Scheduler.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\umi.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx9.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx10.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Launcher.exe"=
"c:\\Program Files\\BitComet\\BitComet.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgam.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgdiagex.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
"c:\\Program Files\\Electronic Arts\\Medal of Honor Airborne\\UnrealEngine3\\Binaries\\MOHA.exe"=
"c:\\Program Files\\Samsung\\Samsung New PC Studio\\npsasvr.exe"=
"c:\\Program Files\\Samsung\\Samsung New PC Studio\\npsvsvr.exe"=
"c:\\Program Files\\Activision\\Call of Duty 2\\CoD2SP_s.exe"=
"c:\\Program Files\\Activision\\Call of Duty 2\\CoD2MP_s.exe"=
"c:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW.exe"=
"c:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaWmp.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"12802:TCP"= 12802:TCP:BitComet 12802 TCP
"12802:UDP"= 12802:UDP:BitComet 12802 UDP

R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [25.11.2009 17:44 52872]
R1 AvgTdiX;AVG Network Redirector;c:\windows\system32\drivers\avgtdix.sys [25.11.2009 17:44 242696]
R3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [25.11.2009 17:43 30104]
R3 PTSimBus;PenTablet Bus Enumerator;c:\windows\system32\drivers\PTSimBus.sys [15.12.2009 17:51 18944]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [15.11.2009 10:25 691696]
S1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [25.11.2009 17:44 216200]
S1 HWiNFO32;HWiNFO32 Kernel Driver;c:\program files\HWiNFO32\HWiNFO32.SYS [15.11.2009 17:10 19064]
S2 Application Updater;Application Updater;c:\program files\Application Updater\ApplicationUpdater.exe [8.1.2010 0:51 380928]
S2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [12.3.2010 20:29 308064]
S2 avgfws9;AVG Firewall;c:\program files\AVG\AVG9\avgfws9.exe [12.3.2010 20:28 2325816]
S2 EPGService;EPGService;c:\progra~1\WinTV\EPG Services\System\EPGService.exe [24.12.2009 16:26 437248]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [29.12.2009 11:47 233472]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [25.11.2009 17:43 30104]
S3 DfSdkS;Defragmentation-Service;c:\program files\Ashampoo\Ashampoo WinOptimizer 2010\DfSdkS.exe [9.3.2010 18:19 406016]
S3 DualCoreCenter;DualCoreCenter;c:\biostools\NTGLM7X.sys [27.11.2009 14:21 28160]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [29.12.2009 11:47 36608]
S3 HCW85BDA;Hauppauge WinTV 885 Video Capture;c:\windows\system32\drivers\HCW85BDA.sys [14.11.2009 19:41 1440384]
S3 HPKBCCID;HP Keyboard Smart Card Driver;c:\windows\system32\drivers\HPKBCCID.sys [14.11.2009 21:01 46976]
S3 PTSimHid;PenTablet Simulated HID MiniDriver;c:\windows\system32\drivers\PTSimHid.sys [15.12.2009 17:51 10752]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [25.2.2010 21:40 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [25.2.2010 21:40 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [25.2.2010 21:40 121856]
S3 STC2DFU;STCII DFU Adapter;c:\windows\system32\drivers\Stc2Dfu.sys [25.10.2004 0:04 7796]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-08-22 13:11 451872 -c--a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
FF - ProfilePath - c:\documents and settings\Admin\Data aplikací\Mozilla\Firefox\Profiles\c9j45zyk.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdjvu.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
FF - user.js: browser.blink_allowed - true
FF - user.js: network.prefetch-next - true
FF - user.js: nglayout.initialpaint.delay - 250
FF - user.js: layout.spellcheckDefault - 1
FF - user.js: browser.urlbar.autoFill - false
FF - user.js: browser.search.openintab - false
FF - user.js: browser.tabs.closeButtons - 1
FF - user.js: browser.tabs.opentabfor.middleclick - true
FF - user.js: browser.tabs.tabMinWidth - 100
FF - user.js: browser.urlbar.hideGoButton - false
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-15 22:17
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG12.00.00.01PROFESSIONAL"="6A327343422E4205F58C863DDF486184757977787DACA1B6E014C7DA925F1400C88F4F26A1A4A30E66E7125AF1BA538D8AAA7039A1ADD4EE50CEA14B05AFF1AFAB1981F9590D3B4A3C13AF3E47A78D1C7BFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC7933A6171C11EC38DE3DBA7FD869164D6794C038D530D6EB3452454A47566A30B35FE5636D7043BAB82A19C638644DC12DCE4AD045C505331C2419C7BD17640EB0B2D47DFECCE66824E4FE385899134041F8E16F51969AA17CCF395908A9881D8E83E9C995CD80892DCBC3D612210F19C73C5ADE1546023EE049EB4FD812DF60E9A0DBC25D0FDADF39542E6BA8CBEC6A0E522BD50D7D6AA09F2BFA6B87EE380B3F2AE359264206DA11430CB4067E9D0245C5527C5BF44417726533658F6E2508F31842F0E32AD3235F35AAE1B7B2D46402774FF247FAC320F840E5E60E52FC75CF32B762AE9F5B92B696DF18ECF48A48BE99A7CAB8F2E2F03551EA9047F358237D170DF8C10F783709AB02F17B68FA9958366489BDD25EF10D08197522BD17978B388BF57E784B54B00A6CFA5DC0277790A690A8092338404B23D01BA9AF598CEE5C820BE6F03560E89E00B42E48D2B60C1CBE177185352C1EB7F0FD8BDA876F7D1CC3E2249F5E05532620942EDA855DD49902B6EEA85D3A982E610D9BE8C9E0F3E5A69802C1B121F3343303C3EA0C2759F7F35D21557E2231450BA951158F38F17B86BA70275E48B2AF26DC777D7505E8E130D4C7E4AA52C00CDA2D46AD0BFC79F2C0CE0233D6BFDB53E7F3F52C97983B58D85C4BC4B6E80867C3E03915B1EDF23539CDF060538320ACEC8C1024093AE62E12A434F8BA3CA611BA050FC43D7B2980D42197394F4114212D60BA262776EB8B04D32F961553A51539CBCC462ECC4C66002BF45E885A3065A21B0F87928B296CDA0411C867EC6DD4BDDB9FBA433AEECCA83E2F84836650844DDF49B12DECE61FC944CD4D94F64E834951535306D2896E41240DF306B0355EB1C14BA22043CC4A81950075C61879AB60BA5C583ED476D7BF17FA881CB604A3D7CB99EA59E8E8E2BEEEE4A9EBA805298F1BD1247A39F46AA0480832942B43DDC9785D2F06EDAA353BB9DE6235336BADE169ED288D28A95DE1DA687503F4E06519BAE22B9D166A62B853F3AE177A0C3D6A1111E50E7E9A3A05E7F36B3E2EAD6A57F79A295557605EFB0E4D31CA71A8AFBDF03CF4D4CEB45D12FA28BF62A6DBEE1E079B0C2A60A96ECDB0BA204D42E8B3F55B1801805FC5F9131322334CDD86C988B61CC85D8DC8B0F9F4AB44604755C8B1196DC87327821617A62798218DA827B5C87B6872742114528937FD89135CC49163AD9FD3D5020AB09BA0D9C79EA183C96F3909B05B7DDC2A0E18BD906951"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(888)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(1312)
c:\program files\Windows Desktop Search\deskbar.dll
c:\program files\Windows Desktop Search\cs-cz\dbres.dll.mui
c:\program files\Windows Desktop Search\dbres.dll
c:\program files\Windows Desktop Search\wordwheel.dll
c:\program files\Windows Desktop Search\cs-cz\msnlExtRes.dll.mui
c:\program files\Windows Desktop Search\msnlExtRes.dll
.
Celkový čas: 2010-03-15 22:19:30
ComboFix-quarantined-files.txt 2010-03-15 21:19
ComboFix2.txt 2010-03-15 05:19

Před spuštěním: Volných bajtů: 34 641 367 040
Po spuštění: Volných bajtů: 34 605 441 024

- - End Of File - - 0F0154316DDCE19ACC4EC66D3D03115E

[ilkar]

zda se ze zatim je vse v poradku jen pocitac je tak o tretinu pomalejsi nez pred tim zvlaste pri spousteni systemu

[Rudy]

Zkuste obnovu systému k datu, kdy korektně fungoval.