Prosím o kontrolu logu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zpráva
Autor
malamala
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 27 Ún 2010 17:53

Prosím o kontrolu logu

#1 Příspěvek od malamala »

Najednou mi přestal jít Google Chrome a Eset u ukazuje různé pochybné zablokované adresy.
Díky za rady.
Logfile of random's system information tool 1.06 (written by random/random)
Run by Milan at 2010-04-09 20:18:52
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (14%) free of 76 GB
Total RAM: 758 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:19:05, on 9.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\DOCUME~1\Milan\LOCALS~1\Temp\ie4d.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\CtrlVol.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\CNAB4RPK.EXE
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\totalcmd\TOTALCMD.EXE
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\taskmgr.exe
c:\Dowl\Antivir-HIJACK\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Milan.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.flashget.com/index_en.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\sdra64.exe,
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\core.2.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
O4 - HKLM\..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe
O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKLM\..\Policies\Explorer\Run: [k41g] C:\DOCUME~1\Milan\LOCALS~1\Temp\ie4d.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: 602SQL 8 FastCGI Client - Unknown owner - c:\Program Files\webgencz\602FSVC8.EXE (file missing)
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Unknown owner - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (file missing)
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe

--
End of file - 5086 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-25 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-25 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Ukazatel S-Rank - C:\Program Files\Seznam.cz\core.2.dll [2010-03-01 1107608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2003-04-24 110592]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2003-04-24 610304]
"LaunchAp"=C:\Program Files\Launch Manager\LaunchAp.exe [2002-12-02 32768]
"HotkeyApp"=C:\Program Files\Launch Manager\HotkeyApp.exe [2003-01-09 57418]
"CtrlVol"=C:\Program Files\Launch Manager\CtrlVol.exe [2002-10-23 163840]
"Wbutton"=C:\Program Files\Launch Manager\Wbutton.exe [2003-01-09 53248]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"k41g"=C:\DOCUME~1\Milan\LOCALS~1\Temp\ie4d.exe [2010-04-09 46592]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 3]
C:\Program Files\Advanced SystemCare 3\AWC.exe [2009-04-27 2329936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG]
C:\WINDOWS\AGRSMMSG.exe [2003-02-14 88107]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\egui]
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-05-14 2029640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\Milan\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-08-01 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WLAN Monitor]
C:\Program Files\GPRS WLAN dongle\Wlan.exe [2004-05-12 2359296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Milan^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2009-05-15 384512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-02-07 139264]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoResolveSearch"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\CNAB4RPK.EXE"="C:\WINDOWS\system32\CNAB4RPK.EXE:*:Enabled:Canon LBP2900 RPC Server Process"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Dowl\Adobe Acrobat\P._Foxit_PDF_Editor_by_yd.exe"="C:\Dowl\Adobe Acrobat\P._Foxit_PDF_Editor_by_yd.exe:*:Enabled:Foxit PDF Editor, the first REAL editor for PDF files!"
"C:\Documents and Settings\Milan\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe"="C:\Documents and Settings\Milan\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b1227390-7e91-11de-a751-000e354fc2ed}]
shell\AutoRun\command - I:\WD_Windows_Tools\Setup.exe


======List of files/folders created in the last 1 months======

2010-04-09 20:18:53 ----D---- C:\Program Files\trend micro
2010-04-09 20:18:52 ----D---- C:\rsit
2010-04-09 20:11:03 ----D---- C:\WINDOWS\LastGood
2010-04-09 20:10:33 ----D---- C:\Program Files\ESET
2010-04-09 19:02:55 ----SHD---- C:\WINDOWS\system32\lowsec
2010-04-07 20:37:40 ----D---- C:\Program Files\Seznam.cz
2010-03-27 15:25:19 ----HD---- C:\Program Files\Uninstall Information
2010-03-27 15:19:54 ----D---- C:\WINDOWS\WBEM
2010-03-27 15:18:15 ----HDC---- C:\WINDOWS\ie8
2010-03-26 14:40:43 ----D---- C:\Program Files\Xenocode
2010-03-19 08:31:38 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-03-18 18:54:17 ----D---- C:\Documents and Settings\Milan\Data aplikací\Divo Games
2010-03-17 14:44:04 ----A---- C:\WINDOWS\system32\ptpusb.dll
2010-03-17 14:44:03 ----A---- C:\WINDOWS\system32\ptpusd.dll

======List of files/folders modified in the last 1 months======

2010-04-09 20:18:57 ----D---- C:\WINDOWS\Prefetch
2010-04-09 20:18:53 ----RD---- C:\Program Files
2010-04-09 20:18:53 ----D---- C:\WINDOWS\Temp
2010-04-09 20:16:56 ----D---- C:\Program Files\Mozilla Firefox
2010-04-09 20:11:18 ----SHD---- C:\WINDOWS\Installer
2010-04-09 20:11:07 ----HD---- C:\WINDOWS\inf
2010-04-09 20:11:07 ----D---- C:\WINDOWS\system32\drivers
2010-04-09 20:11:03 ----D---- C:\WINDOWS
2010-04-09 20:11:02 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-09 20:09:49 ----A---- C:\WINDOWS\WINCMD.INI
2010-04-09 20:09:34 ----D---- C:\Program Files\Mozilla Thunderbird
2010-04-09 19:03:49 ----D---- C:\WINDOWS\system32
2010-04-09 17:01:43 ----D---- C:\Program Files\Trell2010
2010-04-09 15:03:19 ----A---- C:\WINDOWS\wcx_ftp.ini
2010-04-09 12:19:18 ----D---- C:\Zajo
2010-04-09 11:11:49 ----D---- C:\Dowl
2010-04-07 19:17:03 ----D---- C:\Program Files\Advanced SystemCare 3
2010-04-06 17:10:33 ----D---- C:\totalcmd
2010-04-06 13:48:27 ----D---- C:\Alpy09-010
2010-04-05 21:19:32 ----D---- C:\RC model
2010-04-05 17:29:07 ----D---- C:\A-0bchod
2010-04-04 20:59:04 ----D---- C:\Program Files\Trell
2010-03-30 00:37:30 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-29 11:29:55 ----D---- C:\Ucto
2010-03-28 13:21:43 ----D---- C:\Documents and Settings\Milan\Data aplikací\ICQ
2010-03-27 15:25:12 ----D---- C:\WINDOWS\system32\cs-cz
2010-03-27 15:25:12 ----D---- C:\WINDOWS\Help
2010-03-27 15:25:12 ----D---- C:\Program Files\Internet Explorer
2010-03-27 15:25:11 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-03-27 15:19:46 ----D---- C:\WINDOWS\Media
2010-03-23 01:04:02 ----D---- C:\Program Files\Amara - Flash Slide Show Builder
2010-03-21 16:22:52 ----D---- C:\WINDOWS\SoftwareDistribution
2010-03-19 08:31:33 ----D---- C:\WINDOWS\SxsCaPendDel
2010-03-18 19:53:24 ----D---- C:\WINDOWS\WinSxS
2010-03-18 18:58:05 ----D---- C:\Game
2010-03-18 08:33:46 ----SD---- C:\WINDOWS\Tasks
2010-03-17 18:46:23 ----D---- C:\Documents and Settings\Milan\Data aplikací\Thinstall
2010-03-17 15:01:11 ----D---- C:\Hudba
2010-03-13 18:10:06 ----D---- C:\Web data
2010-03-12 11:46:20 ----D---- C:\Program Files\Common Files
2010-03-12 11:46:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2010-03-11 22:14:52 ----D---- C:\Documents and Settings\Milan\Data aplikací\Skype
2010-03-11 21:00:51 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-03-11 17:07:29 ----D---- C:\Documents and Settings\Milan\Data aplikací\skypePM
2010-03-11 10:54:28 ----D---- C:\Documents and Settings\Milan\Data aplikací\dvdcss
2010-03-10 11:45:46 ----D---- C:\Program Files\Movie Maker
2010-03-10 11:45:27 ----HD---- C:\WINDOWS\$hf_mig$

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-05-14 107256]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-05-14 94360]
R1 Hotkey;Hotkey; C:\WINDOWS\system32\drivers\Hotkey.sys [2002-10-29 8843]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 Wbutton;Wbutton; C:\WINDOWS\system32\drivers\Wbutton.sys [2002-10-23 2920]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-05-14 114472]
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-14 88192]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2003-02-14 1169792]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2002-12-17 42368]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-14 13952]
R3 cs429x;Cirrus Logic WDM Audio Codec Driver; C:\WINDOWS\system32\drivers\cwawdm.sys [2003-07-14 111168]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2006-02-07 1399615]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 NSCIRDA;NSC Infrared Device Driver; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2008-04-14 28672]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2003-04-24 270448]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 w22n51;Intel(R) PRO/Wireless 2200 Adapter Driver; C:\WINDOWS\system32\DRIVERS\w22n51.sys [2004-03-08 1657344]
R3 WBMS;Winbond Memory Stick Storage (MS) Device Driver; C:\WINDOWS\System32\Drivers\WBMS.SYS [2002-11-07 30208]
R3 WBSD;Winbond Secure Digital Storage (SD/MMC) Device Driver; C:\WINDOWS\System32\Drivers\WBSD.SYS [2002-11-28 25600]
S1 mailKmd;mailKmd; C:\WINDOWS\system32\drivers\mailKmd.sys []
S3 {6080A529-897E-4629-A488-ABA0C29B635E};Intel(R) Graphics Platform (SoftBIOS) Driver; C:\WINDOWS\system32\drivers\ialmsbw.sys [2003-04-23 113504]
S3 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91};Intel(R) Graphics Chipset (KCH) Driver; C:\WINDOWS\system32\drivers\ialmkchw.sys [2003-04-23 78752]
S3 {E2B953A6-195A-44F9-9BA3-3D5F4E32BB55};AIM 3.0 Part 01 Codec Driver CH-7009-A/CH-7011; C:\WINDOWS\system32\drivers\wA301a.sys [2003-04-23 33335]
S3 a8qohgv7;a8qohgv7; C:\WINDOWS\system32\drivers\a8qohgv7.sys []
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 PPJoyBus;Parallel Port Joystick Bus device driver; C:\WINDOWS\system32\drivers\PPJoyBus.sys [2003-08-10 11330]
S3 Scfilter;Scfilter; C:\WINDOWS\System32\Drivers\Scfilter.sys [2004-03-04 26485]
S3 SOLOMONFastUSB(R);SOLOMON FastUSB(R) Service for SOLOMON Scwi211b USB Wireless Lan; C:\WINDOWS\system32\DRIVERS\scwi211bx.sys [2004-03-26 122496]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbser;Solomon USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-14 26112]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-05-14 731840]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-07-25 153376]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe []
S3 602SQL 8 FastCGI Client;602SQL 8 FastCGI Client; c:\Program Files\webgencz\602FSVC8.EXE []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-05-14 20680]
S3 Macromedia Licensing Service;Macromedia Licensing Service; C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe [2009-12-11 68096]

-----------------EOF-----------------

Avatar uživatele
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 Bře 2009 20:48
Místo/Bydliště: Třebíč
Kontaktovat uživatele:

Re: Prosím o kontrolu logu

#2 Příspěvek od Caroprd111 »

Zdravím :)


Obrázek Stahněte OTL http://oldtimer.geekstogo.com/OTL.exe
  • Spusťte program, poté klikněte na Prohledat
  • Po dokončení, sem vložte logy OTL.Txt a Extras.txt
Obrázek

malamala
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 27 Ún 2010 17:53

Re: Prosím o kontrolu logu

#3 Příspěvek od malamala »

OTL logfile created on: 9.4.2010 20:36:14 - Run 1
OTL by OldTimer - Version 3.2.1.1 Folder = c:\Dowl
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

758,00 Mb Total Physical Memory | 304,00 Mb Available Physical Memory | 40,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 78,00% Paging File free
Paging file location(s): C:\pagefile.sys 1140 2280 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 10,09 Gb Free Space | 13,54% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MILOUS
Current User Name: Milan
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.04.09 20:35:58 | 000,561,664 | ---- | M] (OldTimer Tools) -- c:\Dowl\OTL.exe
PRC - [2010.04.09 19:03:36 | 000,046,592 | ---- | M] ( ) -- C:\Documents and Settings\Milan\Local Settings\temp\ie4d.exe
PRC - [2009.09.29 20:12:03 | 000,908,280 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009.05.14 15:47:54 | 000,731,840 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2009.05.14 15:47:08 | 002,029,640 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2008.11.07 21:20:37 | 008,502,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Thunderbird\thunderbird.exe
PRC - [2008.09.01 00:50:20 | 000,062,848 | ---- | M] (CANON INC.) -- C:\WINDOWS\system32\CNAB4RPK.EXE
PRC - [2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007.01.01 06:56:00 | 000,852,176 | ---- | M] (C. Ghisler & Co.) -- C:\totalcmd\TOTALCMD.EXE
PRC - [2003.04.24 15:51:36 | 000,110,592 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
PRC - [2003.01.09 11:41:08 | 000,057,418 | ---- | M] (Wistron) -- C:\Program Files\Launch Manager\HotkeyApp.exe
PRC - [2003.01.09 10:57:36 | 000,053,248 | ---- | M] () -- C:\Program Files\Launch Manager\WButton.exe
PRC - [2002.12.02 11:22:54 | 000,032,768 | ---- | M] () -- C:\Program Files\Launch Manager\LaunchAp.exe
PRC - [2002.10.23 18:18:38 | 000,163,840 | ---- | M] () -- C:\Program Files\Launch Manager\ctrlvol.exe


========== Modules (SafeList) ==========

MOD - [2010.04.09 20:35:58 | 000,561,664 | ---- | M] (OldTimer Tools) -- c:\Dowl\OTL.exe
MOD - [2003.04.24 15:50:48 | 000,065,536 | ---- | M] (Synaptics, Inc.) -- C:\WINDOWS\system32\SynTPFcs.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (Lavasoft Ad-Aware Service)
SRV - File not found [On_Demand | Stopped] -- -- (aspnet_state)
SRV - File not found [On_Demand | Stopped] -- -- (602SQL 8 FastCGI Client)
SRV - [2009.12.11 19:08:59 | 000,068,096 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe -- (Macromedia Licensing Service)
SRV - [2009.05.14 15:54:22 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EHttpSrv)
SRV - [2009.05.14 15:47:54 | 000,731,840 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)


========== Driver Services (SafeList) ==========

DRV - [2010.02.04 17:53:02 | 000,064,288 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\Lbd.sys -- (Lbd)
DRV - [2009.09.28 18:11:35 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.05.14 15:49:32 | 000,094,360 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2009.05.14 15:47:14 | 000,107,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009.05.14 15:41:10 | 000,114,472 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2008.04.14 02:24:38 | 000,028,672 | ---- | M] (National Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nscirda.sys -- (NSCIRDA)
DRV - [2006.09.24 15:28:46 | 000,005,248 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Boot | Running] -- C:\WINDOWS\system32\speedfan.sys -- (speedfan)
DRV - [2004.03.26 16:08:08 | 000,122,496 | ---- | M] (ATMEL) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\scwi211bx.sys -- (SOLOMONFastUSB(R)) SOLOMON FastUSB(R)
DRV - [2004.03.08 03:43:10 | 001,657,344 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\w22n51.sys -- (w22n51) Intel(R)
DRV - [2004.03.04 10:17:16 | 000,026,485 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\scfilter.sys -- (Scfilter)
DRV - [2003.08.10 10:10:17 | 000,011,330 | ---- | M] (Deon van der Westhuysen) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PPJoyBus.sys -- (PPJoyBus)
DRV - [2003.07.14 16:33:26 | 000,111,168 | ---- | M] (Applied Drivers Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\cwawdm.sys -- (cs429x)
DRV - [2003.04.24 15:08:16 | 000,270,448 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2003.04.23 09:10:12 | 000,033,335 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wa301a.sys -- ({E2B953A6-195A-44F9-9BA3-3D5F4E32BB55})
DRV - [2003.02.14 10:59:14 | 001,169,792 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2002.12.17 10:41:36 | 000,042,368 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp)
DRV - [2002.11.28 17:04:48 | 000,025,600 | ---- | M] (Winbond Electronics Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wbsd.sys -- (WBSD) Winbond Secure Digital Storage (SD/MMC)
DRV - [2002.11.07 19:48:00 | 000,030,208 | ---- | M] (Winbond Electronics Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wbms.sys -- (WBMS) Winbond Memory Stick Storage (MS)
DRV - [2002.10.29 15:25:54 | 000,008,843 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\HOTKEY.sys -- (Hotkey)
DRV - [2002.10.23 12:25:48 | 000,002,920 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Wbutton.sys -- (Wbutton)
DRV - [2002.09.30 11:07:30 | 000,017,134 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\PCANDIS5.SYS -- (PCANDIS5)
DRV - [2001.10.25 14:00:00 | 000,004,224 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\beep.sys -- (Beep)
DRV - [1996.04.03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========


FF - HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009.12.31 13:22:12 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009.09.29 20:12:09 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.18\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2009.08.01 13:54:25 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010.04.09 20:10:35 | 000,000,000 | ---D | M]

[2009.08.01 14:09:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Milan\Data aplikací\Mozilla\Extensions
[2010.03.01 19:21:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\b6kdebhf.default\extensions
[2009.10.30 01:14:38 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\b6kdebhf.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009.10.30 11:26:32 | 000,000,000 | ---D | M] (Český validátor kódu) -- C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\b6kdebhf.default\extensions\{B6533577-46BD-4520-9FF8-F0513A30C2A3}
[2010.02.17 22:47:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\b6kdebhf.default\extensions\seo@profesional
[2009.08.01 14:27:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\b6kdebhf.default\extensions\temp
[2009.08.01 14:09:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\f1fodvds.default\extensions
[2010.03.01 19:21:32 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009.08.11 15:37:22 | 000,086,016 | ---- | M] (Software602 a.s.) -- C:\Program Files\Mozilla Firefox\plugins\npfiller.dll
[2009.08.03 09:08:34 | 000,072,960 | ---- | M] (Foxit Software Company) -- C:\Program Files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll
[2009.08.17 17:48:56 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2009.08.17 17:48:56 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2009.08.17 17:48:56 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2009.08.17 17:48:56 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2009.08.17 17:48:56 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2010.02.27 20:10:23 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Ukazatel S-Rank) - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\core.2.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {35065594-9169-4A34-B167-FC4865038E53} - No CLSID value found.
O4 - HKLM..\Run: [CtrlVol] C:\Program Files\Launch Manager\ctrlvol.exe ()
O4 - HKLM..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe (Wistron)
O4 - HKLM..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe ()
O4 - HKLM..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [Wbutton] C:\Program Files\Launch Manager\Wbutton.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: k41g = C:\DOCUME~1\Milan\LOCALS~1\Temp\ie4d.exe ( )
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O16 - DPF: {41564D57-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... mvadvd.cab (Reg Error: Value error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/sh ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.153.32.129 213.153.32.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\sdra64.exe) - C:\WINDOWS\system32\sdra64.exe ()
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Nebe.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Nebe.bmp
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{b1227390-7e91-11de-a751-000e354fc2ed}\Shell\AutoRun\command - "" = I:\WD_Windows_Tools\Setup.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.04.09 20:18:53 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2010.04.09 20:18:52 | 000,000,000 | ---D | C] -- C:\rsit
[2010.04.09 20:11:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2010.04.09 20:10:33 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2010.04.09 19:02:55 | 000,000,000 | -HSD | C] -- C:\WINDOWS\System32\lowsec
[2010.04.07 20:37:40 | 000,000,000 | ---D | C] -- C:\Program Files\Seznam.cz
[2010.04.07 17:52:48 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Milan\Recent
[2010.03.27 15:25:59 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Milan\PrivacIE
[2010.03.27 15:25:19 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2010.03.27 15:25:18 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Milan\IETldCache
[2010.03.27 15:19:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2010.03.27 15:18:15 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2010.03.26 14:40:43 | 000,000,000 | ---D | C] -- C:\Program Files\Xenocode
[2010.03.18 18:54:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Milan\Data aplikací\Divo Games
[2010.03.17 14:44:04 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusb.dll
[2010.03.17 14:44:03 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusd.dll
[2010.03.17 14:44:02 | 000,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbscan.sys
[2010.03.03 18:32:30 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Data aplikací\Microsoft
[2010.03.03 18:32:30 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Data aplikací\Microsoft
[2010.03.03 18:32:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Microsoft
[2010.03.03 18:32:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Microsoft
[2009.08.03 15:34:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\ESET
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010.04.09 20:09:49 | 000,002,237 | ---- | M] () -- C:\WINDOWS\WINCMD.INI
[2010.04.09 20:08:27 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.04.09 20:08:23 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.04.09 20:07:30 | 003,407,872 | -H-- | M] () -- C:\Documents and Settings\Milan\NTUSER.DAT
[2010.04.09 20:07:30 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Milan\ntuser.ini
[2010.04.09 20:07:22 | 010,126,554 | -H-- | M] () -- C:\Documents and Settings\Milan\Local Settings\Data aplikací\IconCache.db
[2010.04.09 17:01:42 | 000,000,005 | ---- | M] () -- C:\Program Files\trl.trl
[2010.04.09 15:03:19 | 000,002,856 | ---- | M] () -- C:\WINDOWS\wcx_ftp.ini
[2010.04.08 23:17:36 | 000,008,670 | ---- | M] () -- C:\WINDOWS\System32\5e55e55e55e5.toc
[2010.04.08 23:17:36 | 000,000,006 | ---- | M] () -- C:\WINDOWS\System32\5e55e55e55e5.dlf
[2010.04.08 17:47:57 | 000,094,592 | -H-- | M] () -- C:\treeinfo.wc
[2010.04.07 20:23:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010.04.07 09:08:34 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.04.05 21:18:19 | 000,000,685 | ---- | M] () -- C:\Documents and Settings\Milan\Data aplikací\DriveCalculator Preferences
[2010.03.30 00:37:30 | 000,803,412 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010.03.30 00:37:30 | 000,342,014 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.03.30 00:37:30 | 000,339,078 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2010.03.30 00:37:30 | 000,061,600 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2010.03.30 00:37:30 | 000,052,530 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.03.27 15:55:16 | 000,000,719 | ---- | M] () -- C:\Documents and Settings\Milan\Plocha\SpeedFan.lnk
[2010.03.27 15:55:15 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\initdebug.nfo
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.04.05 21:02:06 | 000,000,685 | ---- | C] () -- C:\Documents and Settings\Milan\Data aplikací\DriveCalculator Preferences
[2010.03.27 15:55:16 | 000,000,719 | ---- | C] () -- C:\Documents and Settings\Milan\Plocha\SpeedFan.lnk
[2010.03.27 15:55:14 | 000,000,045 | ---- | C] () -- C:\WINDOWS\System32\initdebug.nfo
[2010.02.26 18:47:55 | 000,000,047 | ---- | C] () -- C:\WINDOWS\DIDAKTA.INI
[2010.01.19 19:58:16 | 000,000,218 | ---- | C] () -- C:\Documents and Settings\Milan\.recently-used.xbel
[2010.01.18 14:54:12 | 000,120,200 | ---- | C] () -- C:\WINDOWS\System32\DLLDEV32i.dll
[2010.01.17 18:26:02 | 000,009,728 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2009.12.24 21:09:20 | 000,000,111 | ---- | C] () -- C:\WINDOWS\posta2.ini
[2009.11.19 14:43:07 | 000,008,843 | ---- | C] () -- C:\WINDOWS\System32\drivers\HOTKEY.sys
[2009.11.19 14:43:07 | 000,002,920 | ---- | C] () -- C:\WINDOWS\System32\drivers\WBUTTON.sys
[2009.11.17 21:13:00 | 000,000,138 | ---- | C] () -- C:\WINDOWS\thtitanc.INI
[2009.11.10 20:26:50 | 000,000,005 | ---- | C] () -- C:\Program Files\trl.trl
[2009.10.26 13:18:58 | 000,000,059 | ---- | C] () -- C:\WINDOWS\webgen.ini
[2009.10.26 13:16:10 | 000,000,029 | ---- | C] () -- C:\WINDOWS\winbase.ini
[2009.09.28 18:59:32 | 000,000,036 | ---- | C] () -- C:\WINDOWS\CONTEXT.INI
[2009.09.28 18:11:34 | 000,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009.08.23 15:37:20 | 000,819,200 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009.08.23 15:37:19 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009.08.07 22:12:06 | 000,007,168 | ---- | C] () -- C:\Documents and Settings\Milan\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.08.01 14:08:05 | 000,000,142 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009.08.01 14:02:12 | 000,002,856 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2009.08.01 13:52:45 | 000,002,237 | ---- | C] () -- C:\WINDOWS\WINCMD.INI
[2009.08.01 13:49:29 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\SynTPCoI.dll
[2009.08.01 13:38:26 | 000,001,024 | -H-- | C] () -- C:\Documents and Settings\Milan\ntuser.dat.LOG
[2009.08.01 13:38:26 | 000,000,178 | -HS- | C] () -- C:\Documents and Settings\Milan\ntuser.ini
[2009.08.01 13:38:25 | 003,407,872 | -H-- | C] () -- C:\Documents and Settings\Milan\NTUSER.DAT
[2001.10.25 14:00:00 | 000,004,224 | ---- | C] () -- C:\WINDOWS\System32\drivers\beep.sys
[1996.04.03 21:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys

========== Alternate Data Streams ==========

@Alternate Data Stream - 176 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:0A8E2C33
@Alternate Data Stream - 152 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:9F5DDD64
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:DCE70D73
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:97FD1923
< End of report >


OTL Extras logfile created on: 9.4.2010 20:36:14 - Run 1
OTL by OldTimer - Version 3.2.1.1 Folder = c:\Dowl
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

758,00 Mb Total Physical Memory | 304,00 Mb Available Physical Memory | 40,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 78,00% Paging File free
Paging file location(s): C:\pagefile.sys 1140 2280 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 10,09 Gb Free Space | 13,54% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MILOUS
Current User Name: Milan
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\WINDOWS\system32\CNAB4RPK.EXE" = C:\WINDOWS\system32\CNAB4RPK.EXE:*:Enabled:Canon LBP2900 RPC Server Process -- (CANON INC.)
"C:\totalcmd\TOTALCMD.EXE" = C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows -- (C. Ghisler & Co.)
"C:\Program Files\ICQ6.5\ICQ.exe" = C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"C:\Dowl\Adobe Acrobat\P._Foxit_PDF_Editor_by_yd.exe" = C:\Dowl\Adobe Acrobat\P._Foxit_PDF_Editor_by_yd.exe:*:Enabled:Foxit PDF Editor, the first REAL editor for PDF files! -- (Foxit Software Company)
"C:\Documents and Settings\Milan\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe" = C:\Documents and Settings\Milan\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome -- (Google Inc.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{23E797E9-F852-4AEA-93F0-772ED2B9D9F9}" = OpenOffice.org 3.1
"{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java(TM) 6 Update 15
"{29D52AA0-F621-4ED8-8F65-A1BEA7B112E3}" = 602SQL 8.1
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{6FA1D6BE-12DF-4C6F-98F5-A2EFFB9893E3}" = ESET NOD32 Antivirus
"{7FE1B36E-A269-451D-85F4-43FBC63778F3}" = 602XML Filler
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Extreme Graphics 2 Driver
"{8B3E5A90-1F6E-4FAF-B84F-C306C8A80809}" = AeroFly Professional Deluxe
"{98478D17-E992-4CBC-AB20-0436B98C38D4}" = USB GPRS / WLAN dongle
"{D0846526-66DD-4DC9-A02C-98F9A2806812}" = Launch Manager V1.0.8
"{F58E04CD-6E76-43C8-AAF1-482225C2910E}" = Xml Viewer
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop CS4_is1" = Adobe Photoshop CS4
"Agere Systems Soft Modem" = Agere Systems AC'97 Modem
"Aleo Flash Intro Banner Maker_is1" = Aleo Flash Intro Banner Maker 2.8.111
"Amara - Flash Slide Show Builder" = Amara - Flash Slide Show Builder
"BSPlayer1" = BSPlayer
"Canon LBP2900" = Canon LBP2900
"CCleaner" = CCleaner (remove only)
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"DHTML News Ticker Wizard" = DHTML News Ticker Wizard 1.0
"DUN1" = Domácí učitel němčiny 1 (odstranění)
"ESE Hidden Directory_is1" = ESE Hidden Directory 1.2B
"Foxit Reader" = Foxit Reader
"HijackThis" = HijackThis 2.0.2
"ie8" = Windows Internet Explorer 8
"Mozilla Firefox (3.5.3)" = Mozilla Firefox (3.5.3)
"Mozilla Thunderbird (2.0.0.18)" = Mozilla Thunderbird (2.0.0.18)
"Nero - Burning Rom!UninstallKey" = Nero OEM
"SpeedFan" = SpeedFan (remove only)
"ST6UNST #1" = Didakta - Němčina 1
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"szn-software-postak" = Seznam Pošťák 2 (Všichni uživatelé tohoto počítače.)
"WinRAR archiver" = WinRAR
"Xenofex2" = Alien Skin Xenofex 2
"Xvid_is1" = Xvid 1.2.2 final uninstall
"ZonerPhotoStudio10_CZ_is1" = Zoner Photo Studio 10

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2.3.2010 4:05:52 | Computer Name = MILOUS | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 2.3.2010 17:34:48 | Computer Name = MILOUS | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 2.3.2010 19:07:12 | Computer Name = MILOUS | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 3.3.2010 2:40:06 | Computer Name = MILOUS | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 3.3.2010 9:10:30 | Computer Name = MILOUS | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 3.3.2010 10:18:12 | Computer Name = MILOUS | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 3.3.2010 12:24:03 | Computer Name = MILOUS | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 3.3.2010 12:45:33 | Computer Name = MILOUS | Source = crypt32 | ID = 131080
Description = Načtení automatické aktualizace pořadového čísla kořenového seznamu
jiného výrobce z: <http://www.download.windowsupdate.com/m ... ootseq.txt>
se nezdařilo. Chyba: Daná operace se vrátila, protože vypršel časový limit.

Error - 3.3.2010 13:42:59 | Computer Name = MILOUS | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 3.3.2010 15:22:49 | Computer Name = MILOUS | Source = Lavasoft Ad-Aware Service | ID = 0
Description =

[ System Events ]
Error - 1.4.2010 3:46:59 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 2.4.2010 2:40:52 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 3.4.2010 3:12:51 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 5.4.2010 3:06:06 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 6.4.2010 2:47:15 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 7.4.2010 3:08:48 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 8.4.2010 2:28:01 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 9.4.2010 2:12:29 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 9.4.2010 13:11:48 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 9.4.2010 14:09:50 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2


< End of report >

Avatar uživatele
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 Bře 2009 20:48
Místo/Bydliště: Třebíč
Kontaktovat uživatele:

Re: Prosím o kontrolu logu

#4 Příspěvek od Caroprd111 »

Obrázek Spusťte OTL a do spodního okna vložte následující skript.

Kód: Vybrat vše

:OTL
PRC - [2010.04.09 19:03:36 | 000,046,592 | ---- | M] ( ) -- C:\Documents and Settings\Milan\Local Settings\temp\ie4d.exe
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {35065594-9169-4A34-B167-FC4865038E53} - No CLSID value found.
[2010.04.09 19:02:55 | 000,000,000 | -HSD | C] -- C:\WINDOWS\System32\lowsec
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
@Alternate Data Stream - 176 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:0A8E2C33
@Alternate Data Stream - 152 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:9F5DDD64
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:DCE70D73
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:97FD1923

:Files
C:\WINDOWS\system32\sdra64.exe 
C:\Documents and Settings\Milan\Local Settings\temp

:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\WINDOWS\system32\userinit.exe"
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"k41g"=-

:Commands
[PURITY] 
[EMPTYTEMP] 
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
[CREATERESTOREPOINT]
[REBOOT] 
Poté klikněte na Opravit, PC se restartuje, log vložte sem.


Obrázek Tohle otestujte na http://www.virustotal.com/cs/
C:\WINDOWS\system32\drivers\beep.sys

(Soubor nehledejte, jenom vložíte tučně označenou cestu, v případě hlášky "Soubor již byl testován" dejte otestovat znovu. Výsledek analýzy sem v podobě odkazu vložte.)
Obrázek

malamala
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 27 Ún 2010 17:53

Re: Prosím o kontrolu logu

#5 Příspěvek od malamala »

All processes killed
========== OTL ==========
No active process named ie4d.exe was found!
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{35065594-9169-4A34-B167-FC4865038E53} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{35065594-9169-4A34-B167-FC4865038E53}\ not found.
Folder move failed. C:\WINDOWS\System32\lowsec scheduled to be moved on reboot.
C:\WINDOWS\msdownld.tmp folder deleted successfully.
C:\WINDOWS\SET3.tmp deleted successfully.
C:\WINDOWS\SET4.tmp deleted successfully.
C:\WINDOWS\SET8.tmp deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\crysetup.exe deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\custom.ini deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\cwautil.sys deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\CWAWDM.CAT deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\cwawdm.inf deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\cwawdm.sys deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\data1.cab deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\data1.hdr deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\data2.cab deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\engine32.cab deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\layout.bin deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.boot deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.exe deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.ini deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.inx deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.iss deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\SETUP1.DLL deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\Setup2.dll deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp folder deleted successfully.
C:\fsc.tmp\sound folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\US\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\US\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\US\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\US\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\US folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TH\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TH\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TH\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TH\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TH folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TC\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TC\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TC\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TC\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TC folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\Source\synaptics_touchpad_v7_5_5_0_wxp.exe deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\Source folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SE\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SE\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SE\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SE\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SE folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SC\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SC\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SC\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SC\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SC folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NO\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NO\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NO\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NO\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NO folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NL\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NL\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NL\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NL\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NL folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\LS\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\LS\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\LS\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\LS\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\LS folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\KR\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\KR\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\KR\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\KR\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\KR folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\JP\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\JP\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\JP\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\JP\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\JP folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\IT\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\IT\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\IT\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\IT\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\IT folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\GR\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\GR\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\GR\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\GR\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\GR folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FR\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FR\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FR\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FR\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FR folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FI\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FI\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FI\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FI\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FI folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\DK\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\DK\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\DK\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\DK\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\DK folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\BP\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\BP\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\BP\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\BP\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\BP folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\data1.cab deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\data1.hdr deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\data2.cab deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\DriverLanguageMap.xml deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\ikernel.ex_ deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\InstNT.exe deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\layout.bin deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NewUI.ini deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\Setup.exe deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\Setup.ini deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\setup.inx deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\setup.iss deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynCntxt.rtf deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynCOM.dll deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynCtrl.dll deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynHid.inf deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynISDLL.dll deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynMood.exe deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTP.cat deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTP.inf deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTP.ini deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTP.sys deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTPAPI.dll deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTPCoI.dll deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTPCOM.dll deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTPCpl.dll deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTPEnh.exe deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTPEnh.ini deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTPFcs.dll deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTPLpr.exe deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynUnst.ini deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynZMetr.exe deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\Tutorial.exe deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\W_DisMUX.ini deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp folder deleted successfully.
C:\fsc.tmp\driver\touchpad folder deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\WBMS.INF deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\WBMS.SYS deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\WBMSICON.ICO deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\wbmsxp.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\WBSCR.INF deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\wbscr.sys deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\wbscrxp.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\WBSD.INF deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\wbsd.sys deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\WBSDICON.ICO deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\wbsdxp.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp folder deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbms.inf deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbms.pdr deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbmsicon.ico deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbmsme.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\WBSCR.INF deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\WBSCR.SYS deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbscrme.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbsd.inf deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbsd.pdr deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbsdicon.ico deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbsdme.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe folder deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\wbms.inf deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\wbms.pdr deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\wbmsicon.ico deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\WBSCR.INF deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\WBSCR.SYS deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\wbscrme.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\wbsd.inf deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\wbsd.pdr deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\wbsdicon.ico deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98 folder deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\WBMS.INF deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\wbms.sys deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\wbms2k.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\WBMSICON.ICO deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\WBSCR.INF deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\wbscr.sys deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\wbscr2k.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\wbsd.inf deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\wbsd.sys deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\wbsd2k.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\wbsdicon.ico deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K folder deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Source\winbond_storage_sc_mmc_v2_0_2002_1107_wxp.exe deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Source folder deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\data1.cab deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\data1.hdr deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\data2.cab deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\ikernel.ex_ deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\layout.bin deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\RemoveHW.dll deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Setup.bmp deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Setup.exe deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Setup.ini deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Setup.inx deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\setup.iss deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\SmartIODLL.dll deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\UpdateDriverForPnP.dll deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\_Isuser.dll deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp folder deleted successfully.
C:\fsc.tmp\driver\storage folder deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\Source\crystal_sound_ac97_v6_13_10_6109_wxp.exe deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\Source folder deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\crysetup.exe deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\custom.ini deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\cwautil.sys deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\CWAWDM.CAT deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\cwawdm.inf deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\cwawdm.sys deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\data1.cab deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\data1.hdr deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\data2.cab deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\engine32.cab deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\layout.bin deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.boot deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.exe deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.ini deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.inx deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.iss deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\SETUP1.DLL deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\Setup2.dll deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp folder deleted successfully.
C:\fsc.tmp\driver\sound folder deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\Source\intel_wlan_2200_v8_0_12_20000_wxp.exe deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\Source folder deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\SetupWLD.EXE deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\SetupWLD.INI deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\W22MLRES.DLL deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\W22n51.cat deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\w22n51.INF deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\w22n51.sys deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\W22NCPA.DLL deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\WLDMLRES.DLL deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp folder deleted successfully.
C:\fsc.tmp\driver\network\broadcom_lan_v3_51_0_0_wxp\Source\broadcom_lan_v3_51_0_0_wxp.exe deleted successfully.
C:\fsc.tmp\driver\network\broadcom_lan_v3_51_0_0_wxp\Source folder deleted successfully.
C:\fsc.tmp\driver\network\broadcom_lan_v3_51_0_0_wxp\BCM4SBXP.CAT deleted successfully.
C:\fsc.tmp\driver\network\broadcom_lan_v3_51_0_0_wxp\BCM4SBXP.INF deleted successfully.
C:\fsc.tmp\driver\network\broadcom_lan_v3_51_0_0_wxp\BCM4SBXP.SYS deleted successfully.
C:\fsc.tmp\driver\network\broadcom_lan_v3_51_0_0_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\network\broadcom_lan_v3_51_0_0_wxp folder deleted successfully.
C:\fsc.tmp\driver\network folder deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\Source\agere_modem_ac97_v2_1_25_0_wxp.exe deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\Source folder deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\AGRMDwxp.cat deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\AGRMDwxp.inf deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\AGRSM.sys deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\agrsmdel.exe deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\AGRSMhom.exe deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\AGRSMMsg.exe deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\AGSETUP.INI deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\agsetup1.dll deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\agsetup2.dll deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\hom1033.ini deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\LtMoh.exe deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\LTMOH.INI deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\mohapi.dll deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\mohhelp.chm deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\setup.exe deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp folder deleted successfully.
C:\fsc.tmp\driver\modem folder deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a302.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a302.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a302.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a303.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a303.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a303.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a304.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a304.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a304.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a305.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a305.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a305.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a306.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a306.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a306.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a307.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a307.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a307.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a308.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a308.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a308.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a309.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a309.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a309.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a310.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a310.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a310.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a311.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a311.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a311.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a313.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a313.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a313.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a314.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a314.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a314.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\hccutils.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\hkcmd.exe deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\i830mnt5.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmcoin.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmdd5.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmdev5.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmdnt5.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmgdev.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmgicd.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmkchw.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmnt5.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmnt5.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmrem.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmrnt5.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmsbw.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxcfg.exe deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxcpl.cpl deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxdev.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxdgps.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxdiag.exe deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxdo.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxeud.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxexps.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxext.exe deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhara.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxharb.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhchs.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhcht.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhcsy.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhdan.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhdeu.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhell.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxheng.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhenu.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhesp.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhfin.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhfra.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhfrc.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhheb.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhhun.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhita.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhjpn.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhk.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhkor.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhnld.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhnor.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhplk.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhptb.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhptg.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhrus.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhsve.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhtha.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhtrk.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxpph.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrara.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrarb.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrchs.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrcht.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrcsy.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrdan.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrdeu.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrell.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxreng.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrenu.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxresp.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxress.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrfin.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrfra.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrfrc.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrheb.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrhun.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrita.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrjpn.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrkor.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrnld.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrnor.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrplk.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrptb.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrptg.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrrus.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrsve.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrtha.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrtrk.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxsrvc.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxtray.exe deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ikch8xx.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ikch8xx.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\isb8xx.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\isb8xx.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\oemdspif.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\vch.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\Vch.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\Vch.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\wa301a.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\wa301a.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\wa301a.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\wa301b.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\wa301b.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\wa301b.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000 folder deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Support\shpshftr.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Support\SignTime.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Support folder deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Source\intel_video_8285x_g_gme_v6_13_10_3514_wxp.exe deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Source folder deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\data1.cab deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\data1.hdr deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\data2.cab deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\ikernel.ex_ deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Install.cfg deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\layout.bin deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Setup.exe deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Setup.ini deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\setup.inx deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\setup.iss deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp folder deleted successfully.
C:\fsc.tmp\driver\display folder deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\815.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\830.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\845.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\845g.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\850.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\850860.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\852.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\855.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\860.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\e727505.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\E7500.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2aud.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2br.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2brm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2corm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2idem.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2smb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich3core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich3corm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich3ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich3idem.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich3smb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich3usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich4core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich4ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich4usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\p64h2.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\usb2ndrv.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp folder deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\830.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\845.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\845g.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\850.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\850860.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\852.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\855.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\860.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\e727505.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich2corm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich3core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich3corm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich3ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich3idem.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich3smb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich3usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich4core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich4ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich4usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\p64h2.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\usb2ndrv.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme folder deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\810.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\815.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\820.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\830.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\840.CAT deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\845.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\845G.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\850.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\850860.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\852.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\855.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\860.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\e727505.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich2core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich2corm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich2ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich2idem.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich2smb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich2usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich3core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich3corm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich3ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich3idem.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich3smb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich3usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich4core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich4ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich4usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ichxsmb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\IFWH.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\P64H.CAT deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\p64h2.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\P64HRES.CAT deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\usb2ndrv.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se folder deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\815.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\830.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\845.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\845g.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\850.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\850860.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\852.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\855.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\860.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\e727505.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\E7500.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2aud.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2br.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2brm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2corm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2idem.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2smb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich3core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich3corm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich3ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich3idem.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich3smb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich3usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich4core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich4ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich4idem.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich4usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\p64h2.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\usb2ndrv.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000 folder deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\SW1\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\SW1\IRSC.exe deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\SW1 folder deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\Source\intel_chipset_8285x_g_gme_v4_30_1006_wxp.exe deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\Source folder deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\CP1\ir_supplement_v1_02_wxp.exe deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\CP1 folder deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\data1.cab deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\data1.hdr deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\data2.cab deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\devlist.ini deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\ikernel.ex_ deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\infupd.bmp deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\layout.bin deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\readme.txt deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\Setup.exe deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\Setup.ini deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\setup.inx deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\setup.iss deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp folder deleted successfully.
C:\fsc.tmp\driver\chipset folder deleted successfully.
C:\fsc.tmp\driver folder deleted successfully.
C:\fsc.tmp folder deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:0A8E2C33 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:9F5DDD64 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:DCE70D73 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:97FD1923 deleted successfully.

malamala
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 27 Ún 2010 17:53

Re: Prosím o kontrolu logu

#6 Příspěvek od malamala »

========== FILES ==========
File move failed. C:\WINDOWS\system32\sdra64.exe scheduled to be moved on reboot.
C:\Documents and Settings\Milan\Local Settings\temp\sznpkg folder moved successfully.
C:\Documents and Settings\Milan\Local Settings\temp\plugtmp folder moved successfully.
C:\Documents and Settings\Milan\Local Settings\temp\hsperfdata_Milan folder moved successfully.
C:\Documents and Settings\Milan\Local Settings\temp\.jpf-shadow folder moved successfully.
C:\Documents and Settings\Milan\Local Settings\temp folder moved successfully.
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\"Userinit"|"C:\WINDOWS\system32\userinit.exe" /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\\k41g deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Milan
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 3836917 bytes
->Java cache emptied: 90977 bytes
->FireFox cache emptied: 122812285 bytes
->Google Chrome cache emptied: 140982249 bytes
->Flash cache emptied: 564 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 109666 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 4262493892 bytes

Total Files Cleaned = 4 321,00 mb


[EMPTYFLASH]

User: All Users

User: Default User

User: LocalService

User: Milan
->Flash cache emptied: 0 bytes

User: NetworkService

Total Flash Files Cleaned = 0,00 mb

Restore points cleared and new OTL Restore Point set!
Error starting restore point: System Restore is disabled.
Error closing restore point: System Restore is disabled.

OTL by OldTimer - Version 3.2.1.1 log created on 04092010_210631

Files\Folders moved on Reboot...
Folder move failed. C:\WINDOWS\System32\lowsec scheduled to be moved on reboot.
File move failed. C:\WINDOWS\system32\sdra64.exe scheduled to be moved on reboot.

Registry entries deleted on Reboot...

malamala
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 27 Ún 2010 17:53

Re: Prosím o kontrolu logu

#7 Příspěvek od malamala »


Avatar uživatele
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 Bře 2009 20:48
Místo/Bydliště: Třebíč
Kontaktovat uživatele:

Re: Prosím o kontrolu logu

#8 Příspěvek od Caroprd111 »

Obrázek Stáhněte a uložte, nejlépe na plochu http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  • Vypněte všechny rezidentní bezpečnostní programy - firewally, antiviry, antispywary
  • Spusťte aplikaci pod účtem s oprávněním Administrátora (Správce), ihned po startu se zobrazí stránka s licenčními podmínkami, pokračujte stisknutím tlačítka "Ano"
  • Dále postupujte dle pokynů, během scanu nespouštějte jiné aplikace a neklikejte do zobrazujícího se okna :!:
  • Scan by měl trvat okolo 5 - 10 minut, po dokončení Combofix zobrazí log C:\ComboFix.txt , který sem vložte.
  • Během skenování může být počítač restartován.
Obrázek

malamala
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 27 Ún 2010 17:53

Re: Prosím o kontrolu logu

#9 Příspěvek od malamala »

ComboFix 10-04-08.06 - Milan 09.04.2010 21:33:38.3.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.758.416 [GMT 2:00]
Spuštěný z: c:\dowl\Antivir-HIJACK\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Vytvořen nový Bod Obnovení
* Rezidentní štít AV je zapnutý


VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\lowsec
c:\windows\system32\lowsec\local.ds
c:\windows\system32\lowsec\user.ds

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-03-09 do 2010-04-09 )))))))))))))))))))))))))))))))
.

2010-04-09 19:06 . 2010-04-09 19:06 -------- d-----w- C:\_OTL
2010-04-09 18:18 . 2010-04-09 18:19 -------- d-----w- c:\program files\trend micro
2010-04-09 18:18 . 2010-04-09 18:19 -------- d-----w- C:\rsit
2010-04-09 18:10 . 2010-04-09 18:10 -------- d-----w- c:\program files\ESET
2010-04-09 17:09 . 2010-04-09 17:09 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2010-04-09 17:03 . 2010-04-09 17:03 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2010-04-07 18:37 . 2010-04-07 19:25 -------- d-----w- c:\program files\Seznam.cz
2010-03-27 13:25 . 2010-03-27 13:25 -------- d-sh--w- c:\documents and settings\Milan\PrivacIE
2010-03-27 13:25 . 2010-03-27 13:25 -------- d-sh--w- c:\documents and settings\Milan\IETldCache
2010-03-27 13:18 . 2010-03-27 13:19 -------- dc-h--w- c:\windows\ie8
2010-03-26 12:40 . 2010-03-26 12:40 -------- d-----w- c:\program files\Xenocode
2010-03-17 12:44 . 2001-10-24 11:25 5632 ----a-w- c:\windows\system32\ptpusb.dll
2010-03-17 12:44 . 2008-04-14 07:51 159232 ----a-w- c:\windows\system32\ptpusd.dll
2010-03-17 12:44 . 2008-04-13 23:15 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2010-03-17 12:44 . 2008-04-13 23:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-09 19:22 . 2009-08-01 11:54 -------- d-----w- c:\program files\Mozilla Thunderbird
2010-04-09 15:01 . 2009-12-20 12:54 -------- d-----w- c:\program files\Trell2010
2010-04-09 15:01 . 2009-11-10 18:26 5 ----a-w- c:\program files\trl.trl
2010-04-07 17:17 . 2009-08-01 12:35 -------- d-----w- c:\program files\Advanced SystemCare 3
2010-04-04 18:59 . 2009-08-01 11:57 -------- d-----w- c:\program files\Trell
2010-03-29 22:37 . 2001-10-25 12:00 61600 ----a-w- c:\windows\system32\perfc005.dat
2010-03-29 22:37 . 2001-10-25 12:00 339078 ----a-w- c:\windows\system32\perfh005.dat
2010-03-22 23:04 . 2010-01-20 23:44 -------- d-----w- c:\program files\Amara - Flash Slide Show Builder
2010-03-09 13:32 . 2009-08-01 12:32 -------- d-----w- c:\program files\HE32
2010-03-03 22:25 . 2010-03-03 22:25 -------- d-----w- c:\program files\Common Files\Alhademic Group
2010-03-03 21:11 . 2010-03-03 19:21 -------- d-----w- c:\program files\Lavasoft
2010-03-03 19:23 . 2010-03-03 19:23 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-03-03 19:23 . 2010-03-03 19:45 15880 ----a-w- c:\windows\system32\lsdelete.exe
2010-02-26 16:47 . 2010-02-26 16:47 253952 ------w- c:\windows\Setup1.exe
2010-02-26 16:47 . 2010-02-26 16:47 73728 ----a-w- c:\windows\ST6UNST.EXE
2010-02-26 12:43 . 2010-02-26 12:43 -------- d-----w- c:\program files\Webteh
2010-02-20 14:44 . 2010-02-20 08:09 -------- d-----w- c:\program files\Trell2010-zaloha20_2_2010
2010-02-12 10:30 . 2009-09-09 17:26 -------- d-----w- c:\program files\Microsoft Silverlight
2010-02-11 17:44 . 2009-08-01 12:07 -------- d-----w- c:\program files\Atreides700
2010-02-04 15:53 . 2010-03-03 19:23 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-01-25 16:41 . 2010-01-25 16:41 0 ----a-w- C:\pxplay.exe
2010-01-25 16:41 . 2010-01-25 16:41 0 ----a-w- C:\pxdown.exe
2010-01-22 09:53 . 2009-09-28 16:41 266 ---h--r- c:\windows\system32\ttri.dat
.

------- Sigcheck -------

[7] 2001-10-25 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys
[-] 2001-10-25 12:00 . F8729F4E4926DC3A668F821CE26EBE50 . 4224 . . [------] . . c:\windows\system32\drivers\beep.sys
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2003-04-24 110592]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2003-04-24 610304]
"LaunchAp"="c:\program files\Launch Manager\LaunchAp.exe" [2002-12-02 32768]
"HotkeyApp"="c:\program files\Launch Manager\HotkeyApp.exe" [2003-01-09 57418]
"CtrlVol"="c:\program files\Launch Manager\CtrlVol.exe" [2002-10-23 163840]
"Wbutton"="c:\program files\Launch Manager\Wbutton.exe" [2003-01-09 53248]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-05-14 2029640]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^Milan^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
backup=c:\windows\pss\OpenOffice.org 3.1.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 3]
2009-04-27 13:12 2329936 ----a-w- c:\program files\Advanced SystemCare 3\AWC.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG]
2003-02-14 08:59 88107 ----a-w- c:\windows\AGRSMMSG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2009-08-01 12:14 133104 ----atw- c:\documents and settings\Milan\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
2001-07-09 09:50 155648 ----a-r- c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WLAN Monitor]
2004-05-12 10:42 2359296 ----a-w- c:\program files\GPRS WLAN dongle\Wlan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\CNAB4RPK.EXE"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Dowl\\Adobe Acrobat\\P._Foxit_PDF_Editor_by_yd.exe"=

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [3.3.2010 21:23 64288]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [14.5.2009 15:47 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [14.5.2009 15:49 94360]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [14.5.2009 15:47 731840]
R3 WBMS;Winbond Memory Stick Storage (MS) Device Driver;c:\windows\system32\drivers\wbms.sys [1.8.2009 13:42 30208]
R3 WBSD;Winbond Secure Digital Storage (SD/MMC) Device Driver;c:\windows\system32\drivers\wbsd.sys [1.8.2009 13:42 25600]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [28.9.2009 18:11 721904]
S1 mailKmd;mailKmd; [x]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;"c:\program files\Lavasoft\Ad-Aware\AAWService.exe" --> c:\program files\Lavasoft\Ad-Aware\AAWService.exe [?]
S3 602SQL 8 FastCGI Client;602SQL 8 FastCGI Client;c:\program files\webgencz\602FSVC8.EXE --> c:\program files\webgencz\602FSVC8.EXE [?]
S3 PPJoyBus;Parallel Port Joystick Bus device driver;c:\windows\system32\drivers\PPJoyBus.sys [8.8.2002 17:27 11330]
S3 Scfilter;Scfilter;c:\windows\system32\drivers\scfilter.sys [6.11.2009 11:22 26485]
S3 SOLOMONFastUSB(R);SOLOMON FastUSB(R) Service for SOLOMON Scwi211b USB Wireless Lan;c:\windows\system32\drivers\scwi211bx.sys [6.11.2009 11:22 122496]
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
uInternet Connection Wizard,ShellNext = hxxp://www.flashget.com/index_en.htm
FF - ProfilePath - c:\documents and settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\b6kdebhf.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - plugin: c:\program files\Mozilla Firefox\plugins\npfiller.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll

---- NASTAVENÍ FIREFOXU ----
FF - user.js: browser.cache.memory.capacity - 16000
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - fales
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 750000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 750000
FF - user.js: dom.disable_window_status_change - true
FF - user.js: network.http.max-connections - 32
FF - user.js: network.http.max-connections-per-server - 8
FF - user.js: network.http.max-persistent-connections-per-proxy - 8
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 750
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

MSConfigStartUp-Skype - c:\program files\Skype\Phone\Skype.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-09 21:41
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe catchme.sys CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x82D56AC8]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xf776ef28
\Driver\ACPI -> ACPI.sys @ 0xf76c1cb8
\Driver\atapi -> atapi.sys @ 0xf7635852
IoDeviceObjectType -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0598
ParseProcedure -> ntoskrnl.exe @ 0x8056ea15
\Device\Harddisk0\DR0 -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0598
ParseProcedure -> ntoskrnl.exe @ 0x8056ea15
NDIS: Intel(R) PRO/Wireless 2200BG Network Connection -> SendCompleteHandler -> NDIS.sys @ 0xf7541bb0
PacketIndicateHandler -> NDIS.sys @ 0xf7530a0d
SendHandler -> NDIS.sys @ 0xf7544b40
user & kernel MBR OK

**************************************************************************
.
Celkový čas: 2010-04-09 21:45:59
ComboFix-quarantined-files.txt 2010-04-09 19:45

Před spuštěním: Volných bajtů: 17 148 157 952
Po spuštění: Volných bajtů: 17 116 278 784

- - End Of File - - 66FE0FC27FC106B2071AC0453F329311

Avatar uživatele
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 Bře 2009 20:48
Místo/Bydliště: Třebíč
Kontaktovat uživatele:

Re: Prosím o kontrolu logu

#10 Příspěvek od Caroprd111 »

Obrázek Pokud nemáte, přesuňte Combofix na plochu
  • Otevřete si Poznámkový blok a zkopírujte do něj text z bílého okénka.

Kód: Vybrat vše

FCopy::
c:\windows\system32\dllcache\beep.sys | c:\windows\system32\drivers\beep.sys
  • Uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
  • Po uložení uchopte vámi vytvořený skript levým myšítkem a přesuňte ho nad ikonu Combofixu, kde ho upustíte:

    Obrázek
  • Po aplikaci na Vás vypadne další log,vložte ho sem
Může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci



Obrázek Doporučuji odinstalovat Advanced SystemCare 3.
Obrázek

malamala
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 27 Ún 2010 17:53

Re: Prosím o kontrolu logu

#11 Příspěvek od malamala »

ComboFix 10-04-08.06 - Milan 09.04.2010 22:02:11.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.758.316 [GMT 2:00]
Spuštěný z: c:\dowl\Antivir-HIJACK\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Milan\Plocha\CFScript.txt
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Vytvořen nový Bod Obnovení

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
--------------- FCopy ---------------

c:\windows\system32\dllcache\beep.sys --> c:\windows\system32\drivers\beep.sys
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-03-09 do 2010-04-09 )))))))))))))))))))))))))))))))
.

2010-04-09 19:06 . 2010-04-09 19:06 -------- d-----w- C:\_OTL
2010-04-09 18:18 . 2010-04-09 18:19 -------- d-----w- c:\program files\trend micro
2010-04-09 18:18 . 2010-04-09 18:19 -------- d-----w- C:\rsit
2010-04-09 18:10 . 2010-04-09 18:10 -------- d-----w- c:\program files\ESET
2010-04-09 17:09 . 2010-04-09 17:09 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2010-04-09 17:03 . 2010-04-09 17:03 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2010-04-07 18:37 . 2010-04-07 19:25 -------- d-----w- c:\program files\Seznam.cz
2010-03-27 13:25 . 2010-03-27 13:25 -------- d-sh--w- c:\documents and settings\Milan\PrivacIE
2010-03-27 13:25 . 2010-03-27 13:25 -------- d-sh--w- c:\documents and settings\Milan\IETldCache
2010-03-27 13:18 . 2010-03-27 13:19 -------- dc-h--w- c:\windows\ie8
2010-03-26 12:40 . 2010-03-26 12:40 -------- d-----w- c:\program files\Xenocode
2010-03-17 12:44 . 2001-10-24 11:25 5632 ----a-w- c:\windows\system32\ptpusb.dll
2010-03-17 12:44 . 2008-04-14 07:51 159232 ----a-w- c:\windows\system32\ptpusd.dll
2010-03-17 12:44 . 2008-04-13 23:15 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2010-03-17 12:44 . 2008-04-13 23:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-09 19:50 . 2009-08-01 11:54 -------- d-----w- c:\program files\Mozilla Thunderbird
2010-04-09 15:01 . 2009-12-20 12:54 -------- d-----w- c:\program files\Trell2010
2010-04-09 15:01 . 2009-11-10 18:26 5 ----a-w- c:\program files\trl.trl
2010-04-07 17:17 . 2009-08-01 12:35 -------- d-----w- c:\program files\Advanced SystemCare 3
2010-04-04 18:59 . 2009-08-01 11:57 -------- d-----w- c:\program files\Trell
2010-03-29 22:37 . 2001-10-25 12:00 61600 ----a-w- c:\windows\system32\perfc005.dat
2010-03-29 22:37 . 2001-10-25 12:00 339078 ----a-w- c:\windows\system32\perfh005.dat
2010-03-22 23:04 . 2010-01-20 23:44 -------- d-----w- c:\program files\Amara - Flash Slide Show Builder
2010-03-09 13:32 . 2009-08-01 12:32 -------- d-----w- c:\program files\HE32
2010-03-03 22:25 . 2010-03-03 22:25 -------- d-----w- c:\program files\Common Files\Alhademic Group
2010-03-03 21:11 . 2010-03-03 19:21 -------- d-----w- c:\program files\Lavasoft
2010-03-03 19:23 . 2010-03-03 19:23 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-03-03 19:23 . 2010-03-03 19:45 15880 ----a-w- c:\windows\system32\lsdelete.exe
2010-02-26 16:47 . 2010-02-26 16:47 253952 ------w- c:\windows\Setup1.exe
2010-02-26 16:47 . 2010-02-26 16:47 73728 ----a-w- c:\windows\ST6UNST.EXE
2010-02-26 12:43 . 2010-02-26 12:43 -------- d-----w- c:\program files\Webteh
2010-02-20 14:44 . 2010-02-20 08:09 -------- d-----w- c:\program files\Trell2010-zaloha20_2_2010
2010-02-12 10:30 . 2009-09-09 17:26 -------- d-----w- c:\program files\Microsoft Silverlight
2010-02-11 17:44 . 2009-08-01 12:07 -------- d-----w- c:\program files\Atreides700
2010-02-04 15:53 . 2010-03-03 19:23 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-01-25 16:41 . 2010-01-25 16:41 0 ----a-w- C:\pxplay.exe
2010-01-25 16:41 . 2010-01-25 16:41 0 ----a-w- C:\pxdown.exe
2010-01-22 09:53 . 2009-09-28 16:41 266 ---h--r- c:\windows\system32\ttri.dat
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2003-04-24 110592]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2003-04-24 610304]
"LaunchAp"="c:\program files\Launch Manager\LaunchAp.exe" [2002-12-02 32768]
"HotkeyApp"="c:\program files\Launch Manager\HotkeyApp.exe" [2003-01-09 57418]
"CtrlVol"="c:\program files\Launch Manager\CtrlVol.exe" [2002-10-23 163840]
"Wbutton"="c:\program files\Launch Manager\Wbutton.exe" [2003-01-09 53248]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-05-14 2029640]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^Milan^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
backup=c:\windows\pss\OpenOffice.org 3.1.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 3]
2009-04-27 13:12 2329936 ----a-w- c:\program files\Advanced SystemCare 3\AWC.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG]
2003-02-14 08:59 88107 ----a-w- c:\windows\AGRSMMSG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2009-08-01 12:14 133104 ----atw- c:\documents and settings\Milan\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
2001-07-09 09:50 155648 ----a-r- c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WLAN Monitor]
2004-05-12 10:42 2359296 ----a-w- c:\program files\GPRS WLAN dongle\Wlan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\CNAB4RPK.EXE"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Dowl\\Adobe Acrobat\\P._Foxit_PDF_Editor_by_yd.exe"=

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [3.3.2010 21:23 64288]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [14.5.2009 15:47 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [14.5.2009 15:49 94360]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [14.5.2009 15:47 731840]
R3 WBMS;Winbond Memory Stick Storage (MS) Device Driver;c:\windows\system32\drivers\wbms.sys [1.8.2009 13:42 30208]
R3 WBSD;Winbond Secure Digital Storage (SD/MMC) Device Driver;c:\windows\system32\drivers\wbsd.sys [1.8.2009 13:42 25600]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [28.9.2009 18:11 721904]
S1 mailKmd;mailKmd; [x]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;"c:\program files\Lavasoft\Ad-Aware\AAWService.exe" --> c:\program files\Lavasoft\Ad-Aware\AAWService.exe [?]
S3 602SQL 8 FastCGI Client;602SQL 8 FastCGI Client;c:\program files\webgencz\602FSVC8.EXE --> c:\program files\webgencz\602FSVC8.EXE [?]
S3 PPJoyBus;Parallel Port Joystick Bus device driver;c:\windows\system32\drivers\PPJoyBus.sys [8.8.2002 17:27 11330]
S3 Scfilter;Scfilter;c:\windows\system32\drivers\scfilter.sys [6.11.2009 11:22 26485]
S3 SOLOMONFastUSB(R);SOLOMON FastUSB(R) Service for SOLOMON Scwi211b USB Wireless Lan;c:\windows\system32\drivers\scwi211bx.sys [6.11.2009 11:22 122496]
.
.
------- Doplňkový sken -------
.
uInternet Connection Wizard,ShellNext = hxxp://www.flashget.com/index_en.htm
FF - ProfilePath - c:\documents and settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\b6kdebhf.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - plugin: c:\program files\Mozilla Firefox\plugins\npfiller.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll

---- NASTAVENÍ FIREFOXU ----
FF - user.js: browser.cache.memory.capacity - 16000
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - fales
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 750000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 750000
FF - user.js: dom.disable_window_status_change - true
FF - user.js: network.http.max-connections - 32
FF - user.js: network.http.max-connections-per-server - 8
FF - user.js: network.http.max-persistent-connections-per-proxy - 8
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 750
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-09 22:10
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe catchme.sys CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x82D56AC8]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xf776ef28
\Driver\ACPI -> ACPI.sys @ 0xf76c1cb8
\Driver\atapi -> atapi.sys @ 0xf7635852
IoDeviceObjectType -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0598
ParseProcedure -> ntoskrnl.exe @ 0x8056ea15
\Device\Harddisk0\DR0 -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0598
ParseProcedure -> ntoskrnl.exe @ 0x8056ea15
NDIS: Intel(R) PRO/Wireless 2200BG Network Connection -> SendCompleteHandler -> NDIS.sys @ 0xf7541bb0
PacketIndicateHandler -> NDIS.sys @ 0xf7530a0d
SendHandler -> NDIS.sys @ 0xf7544b40
user & kernel MBR OK

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(3212)
c:\windows\system32\webcheck.dll
c:\windows\system32\IEFRAME.dll
.
Celkový čas: 2010-04-09 22:14:25
ComboFix-quarantined-files.txt 2010-04-09 20:14
ComboFix2.txt 2010-04-09 19:46

Před spuštěním: Volných bajtů: 17 086 033 920
Po spuštění: Volných bajtů: 17 053 573 120

- - End Of File - - A1B84EA875C66B5072489955F00814E4

Avatar uživatele
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 Bře 2009 20:48
Místo/Bydliště: Třebíč
Kontaktovat uživatele:

Re: Prosím o kontrolu logu

#12 Příspěvek od Caroprd111 »

Obrázek Odinstalujte všechny emulátory virtuálních mechanik.

Obrázek Stáhněte SPTD http://www.duplexsecure.com/en/downloads
  • Vyberte verzi podle svého operačního systému (64 & 32b). Uložte na plochu a spusťte.
  • zvolte možnost Uninstall a restartujte PC.

Obrázek Stáhněte a spusťte http://www.jpshortstuff.247fixes.com/Defogger.exe
  • Klikněte na "Disable" a restartujte PC.

Obrázek Stáhněte MBR na plochu http://www2.gmer.net/mbr/mbr.exe

Obrázek Start > Spustit (Win + R)
  • Vyskočí okénko, zkopírujte do něj:

Kód: Vybrat vše

"%userprofile%\plocha\mbr" -t
  • Klikněte na OK
  • Vytvoří se log s názvem mbr.log, vložte ho sem.
Obrázek

malamala
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 27 Ún 2010 17:53

Re: Prosím o kontrolu logu

#13 Příspěvek od malamala »

Caroprd111 napsal:Obrázek Odinstalujte všechny emulátory virtuálních mechanik.

Obrázek Stáhněte SPTD http://www.duplexsecure.com/en/downloads
  • Vyberte verzi podle svého operačního systému (64 & 32b). Uložte na plochu a spusťte.
  • zvolte možnost Uninstall a restartujte PC.

Obrázek Stáhněte a spusťte http://www.jpshortstuff.247fixes.com/Defogger.exe
  • Klikněte na "Disable" a restartujte PC.

Obrázek Stáhněte MBR na plochu http://www2.gmer.net/mbr/mbr.exe

Obrázek Start > Spustit (Win + R)
  • Vyskočí okénko, zkopírujte do něj:

Kód: Vybrat vše

"%userprofile%\plocha\mbr" -t
  • Klikněte na OK
  • Vytvoří se log s názvem mbr.log, vložte ho sem.
Virtuální mechanice se odinstalovat nějak nechce :-(

Avatar uživatele
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 Bře 2009 20:48
Místo/Bydliště: Třebíč
Kontaktovat uživatele:

Re: Prosím o kontrolu logu

#14 Příspěvek od Caroprd111 »

Jak to myslíte :???:
Obrázek

malamala
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 27 Ún 2010 17:53

Re: Prosím o kontrolu logu

#15 Příspěvek od malamala »

v polovině odinstalace skončí a dála nepokračuje :(

Odpovědět