Eset smart security - Trosjký kůň v svchost.exe

[Thooty]

Dobrý den,
Nevím si rady tak píši sem, eset smart security mi pořád hlásí vir viz. screen
http://www.2i.cz/f66ca78d5e
Píše že je vir v svchost.exe a je jasné že tuto složku asi těžko můžu odstranit když je součástí systému, chtěl bych se proto zeptat jestli je radikální řešení jak tento vir dostat pryč.
Také mi to hlásí velký počet zachycených hrozeb a vždycky to jde +2 nahoru(protože je to součást systému tak to eset nemůže vymazat, proto mi to asi hlásí o 2 viry navíc v počtu zachycených hrozeb) viz.screen
http://2i.cz/c55f94be6d
Teď už snad jen log
-----------------------------------------
Logfile of random's system information tool 1.06 (written by random/random)
Run by Domov at 2010-04-08 15:48:35
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 14 GB (19%) free of 76 GB
Total RAM: 1023 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:48:52, on 8.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Opera\opera.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\program files\steam\steam.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\1.2.183.23\GoogleCrashHandler.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Plocha\RSIT.exe
C:\Program Files\trend micro\Domov.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: RadioBar Toolbar - {5B291E6C-9A74-4034-971B-A4B007A0B315} - C:\Program Files\RadioBar\toolbar.ni.dll
O2 - BHO: &Security Update - {C73FD00D-A099-405C-92B4-8997710D187D} - (no file)
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: RadioBar Toolbar - {5B291E6C-9A74-4034-971B-A4B007A0B315} - C:\Program Files\RadioBar\toolbar.ni.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [RGSC] C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra 'Tools' menuitem: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O18 - Protocol: toolbarchrome - {718733BC-AD64-4E5F-AC18-A85FBD75D54D} - C:\Program Files\RadioBar\toolbar.ni.dll
O18 - Filter hijack: text/html - {574940E0-1B7A-4881-8FA3-1E809714B156} - C:\Documents and Settings\Domov\AppData\LocalLow\Microńoft\redir.dll
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe

--
End of file - 8923 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-1390067357-839522115-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-1390067357-839522115-1003UA.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1993962763-1390067357-839522115-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1993962763-1390067357-839522115-1003.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{D55854C5-0A88-4017-A7E4-1190F32D1C74}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-03-20 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5B291E6C-9A74-4034-971B-A4B007A0B315}]
RadioBar Toolbar - C:\Program Files\RadioBar\toolbar.ni.dll [2010-01-11 451808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C73FD00D-A099-405C-92B4-8997710D187D}]
&Security Update

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-01-31 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-01-31 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440}
{5B291E6C-9A74-4034-971B-A4B007A0B315} - RadioBar Toolbar - C:\Program Files\RadioBar\toolbar.ni.dll [2010-01-11 451808]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-01-03 1019128]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-07-20 18670592]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-12-19 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-12-19 159744]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-12-19 131072]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"PCSuiteTrayApplication"=C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE [2006-06-15 229376]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-01-11 246504]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-03-16 13670504]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-03-16 110696]
"VhZkZkyIrwadny3vylp43IgDIEjqy9osQLYTjxjs7CGIFJIS6EYlAeqnUUZljBVo147r2qFAICTNtJn636R3P4i6fWptpnnUcMwuzhvFWmJocwlct0VznlTWJacNtxZCC0QveulwvLStIIexPUOrj7d8XknPfQDBPUrO8c4ZQbkYM3VtULPaNEafjxDzDVuKEjBCey0bseeZNtZuPtDn1kC4Nlucu8AR3v38lSX2c5P5tIYAY7NeWOx6YOl27CY5q"= []
"9gPWKkytob723TLhcjekKFs0XqUkMzzqT7Q2jqcVthBPHJBvmn3DLY6oEv8NlApnfBDCne6OfXriRXsKXmNCorVKkOoROec18HqOdtN9DCqwXBHdOjeyKLylRew4NIfa3KWMWMyfi1m4oKHzKf4nRqarU7JHHteKv6sjuKHoUctByVkIJ4Oac0aXIW0UwXnGpcre0b6q3JIvDloerP3ZcxDo32NBmyUXFsCkIoWFA74jMN7l2uRnr5lWTJscvyx94"= []
"nwiz"=nwiz.exe /installquiet []
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-03-20 202256]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-02-26 2140880]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-03-09 26100520]
"Google Update"=C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-12-25 135664]
"RGSC"=C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe [2010-01-07 306088]
"Steam"=c:\program files\steam\steam.exe [2010-02-14 1217808]
"VhZkZkyIrwadny3vylp43IgDIEjqy9osQLYTjxjs7CGIFJIS6EYlAeqnUUZljBVo147r2qFAICTNtJn636R3P4i6fWptpnnUcMwuzhvFWmJocwlct0VznlTWJacNtxZCC0QveulwvLStIIexPUOrj7d8XknPfQDBPUrO8c4ZQbkYM3VtULPaNEafjxDzDVuKEjBCey0bseeZNtZuPtDn1kC4Nlucu8AR3v38lSX2c5P5tIYAY7NeWOx6YOl27CY5q"= []
"LBzTfPLbZtM6wYM7ipaqLGWaMX0VtDZCeYxzOqQCVt37aQkorFOi6jEnl2zJvRvNoPwV3TVuDtWyRbXNYops6EndEsCXi9S9h998UahNRug4vZakrsN0rHXzezNUDMBBMo7rB5MyPqaIHgHgS8zu5BuvNQU611xC6yCIKFpX9BrXJAQ2Yhmb40kDkYTbqqcjy2Z3y9jHJioLNpKtcjeC1o5MLZ3gmikXsmBZZncHqi5V1O33aAvAR6RcKWoGBsMjZ"= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync]
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [2006-06-27 1449984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UniblueRegistryBooster]
C:\Program Files\Uniblue\RegistryBooster\launcher.exe [2010-03-16 60208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Domov^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2009-09-16 384512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-12-19 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
scecli

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoTaskMng"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire"
"C:\Documents and Settings\Domov\Dokumenty\Downloads\sdc230 (2)\sdc230\StrongDC.exe"="C:\Documents and Settings\Domov\Dokumenty\Downloads\sdc230 (2)\sdc230\StrongDC.exe:*:Enabled:StrongDC++"
"C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe"="C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"C:\Documents and Settings\Domov\Plocha\sdc230\StrongDC.exe"="C:\Documents and Settings\Domov\Plocha\sdc230\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\Hamachi\hamachi.exe"="C:\Program Files\Hamachi\hamachi.exe:*:Enabled:Hamachi Client"
"C:\Program Files\Counter-Strike Source\hl2.exe"="C:\Program Files\Counter-Strike Source\hl2.exe:*:Enabled:hl2"
"C:\sdc230\StrongDC.exe"="C:\sdc230\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Call of Duty Modern Warfare 2\iw4sp.exe"="C:\Program Files\Call of Duty Modern Warfare 2\iw4sp.exe:*:Enabled:iw4sp"
"C:\Program Files\Call of Duty Modern Warfare 2\iw4mp.exe"="C:\Program Files\Call of Duty Modern Warfare 2\iw4mp.exe:*:Enabled:iw4mp"
"C:\Program Files\Electronic Arts\Battlefield Bad Company 2 - BETA\BFBC2BetaUpdater.exe"="C:\Program Files\Electronic Arts\Battlefield Bad Company 2 - BETA\BFBC2BetaUpdater.exe:*:Enabled:Battlefield Bad Company 2 - BETA"
"C:\Program Files\Electronic Arts\Battlefield Bad Company 2 - BETA\BFBC2Game.exe"="C:\Program Files\Electronic Arts\Battlefield Bad Company 2 - BETA\BFBC2Game.exe:*:Enabled:EA Battlefield: Bad Company™ 2 - BETA"
"C:\GaMe\GTA Vice City\gta-vc.exe"="C:\GaMe\GTA Vice City\gta-vc.exe:*:Enabled:gta-vc"
"C:\Documents and Settings\Domov\Local Settings\Temp\Rar$EX00.015\utorrent.exe"="C:\Documents and Settings\Domov\Local Settings\Temp\Rar$EX00.015\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Program Files\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe"="C:\Program Files\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe:*:Enabled:Battlefield: Bad Company™ 2"
"C:\Documents and Settings\Domov\Local Settings\Temp\Rar$EX00.312\StrongDC.exe"="C:\Documents and Settings\Domov\Local Settings\Temp\Rar$EX00.312\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\River Past\Animated GIF Converter and Booster Pack\VideoCleaner.exe"="C:\Program Files\River Past\Animated GIF Converter and Booster Pack\VideoCleaner.exe:*:Enabled:River Past Animated GIF Converter"
"C:\Documents and Settings\Domov\Plocha\Věcičky\utorrent-portable\utorrent.exe"="C:\Documents and Settings\Domov\Plocha\Věcičky\utorrent-portable\utorrent.exe:*:Enabled:µTorrent"
"C:\Documents and Settings\Domov\Plocha\Věcičky\Utorrent\utorrent.exe"="C:\Documents and Settings\Domov\Plocha\Věcičky\Utorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\TeamViewer\Version5\TeamViewer.exe"="C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======File associations======

.js - open - "C:\Program Files\Adobe\Adobe Dreamweaver CS4\Dreamweaver.exe","%1"

======List of files/folders created in the last 1 months======

2010-04-08 15:48:36 ----D---- C:\Program Files\trend micro
2010-04-08 15:48:35 ----D---- C:\rsit
2010-04-07 18:24:51 ----D---- C:\Program Files\Opera
2010-04-07 18:14:50 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-04-07 18:14:49 ----A---- C:\WINDOWS\OEWABLog.txt
2010-04-07 17:58:41 ----D---- C:\Documents and Settings\Domov\Data aplikací\TeamViewer
2010-04-07 17:58:09 ----D---- C:\Program Files\TeamViewer
2010-04-07 16:46:30 ----A---- C:\WINDOWS\ntbtlog.txt
2010-04-07 16:40:16 ----A---- C:\WindowsXP-KB927891-v3-x86-ENU.exe
2010-04-07 16:37:21 ----A---- C:\windowsupdateagent30-x86.exe
2010-04-07 16:33:47 ----A---- C:\fix_svchost.bat.txt
2010-04-05 21:39:26 ----D---- C:\Documents and Settings\Domov\Data aplikací\ESET
2010-04-05 21:38:21 ----D---- C:\Program Files\ESET
2010-04-05 21:38:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2010-04-05 16:15:46 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-04-04 22:27:48 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-04 01:36:57 ----D---- C:\Program Files\Sanny Builder 3
2010-04-03 02:34:47 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-04-03 00:16:04 ----D---- C:\WINDOWS\system32\install
2010-04-02 01:08:54 ----HD---- C:\WINDOWS\system32\GroupPolicy
2010-04-01 23:15:00 ----HD---- C:\WINDOWS\PIF
2010-04-01 23:05:56 ----A---- C:\WINDOWS\.ini
2010-04-01 16:12:32 ----D---- C:\Program Files\DAEMON Tools Toolbar
2010-04-01 16:12:25 ----D---- C:\Program Files\DAEMON Tools Lite
2010-03-31 22:52:12 ----D---- C:\Keys
2010-03-29 20:04:06 ----D---- C:\Program Files\Common Files\Skype
2010-03-29 19:40:52 ----D---- C:\WINDOWS\system32\NtmsData
2010-03-26 00:32:08 ----A---- C:\Log.txt
2010-03-20 14:54:51 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2010-03-20 14:54:46 ----A---- C:\WINDOWS\system32\pndx5032.dll
2010-03-20 14:54:46 ----A---- C:\WINDOWS\system32\pndx5016.dll
2010-03-20 14:54:35 ----D---- C:\Program Files\Common Files\xing shared
2010-03-20 14:54:10 ----A---- C:\WINDOWS\system32\pncrt.dll
2010-03-20 14:54:08 ----D---- C:\Program Files\Real
2010-03-20 14:54:08 ----D---- C:\Program Files\Common Files\Real
2010-03-20 14:54:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\Real
2010-03-20 14:50:15 ----D---- C:\Documents and Settings\Domov\Data aplikací\Real
2010-03-20 01:20:39 ----D---- C:\Program Files\QuickTime
2010-03-17 19:11:36 ----A---- C:\WINDOWS\GTA-SA_Trn_Settings.ini
2010-03-16 18:51:17 ----D---- C:\Program Files\AVI-GIF
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvmctray.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvmccs.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvcpl.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvcolor.exe
2010-03-16 04:37:44 ----A---- C:\WINDOWS\system32\nvwddi.dll
2010-03-15 12:46:03 ----D---- C:\Program Files\SystemRequirementsLab
2010-03-15 00:03:18 ----D---- C:\Documents and Settings\Domov\Data aplikací\GeoVid
2010-03-15 00:02:33 ----A---- C:\WINDOWS\system32\gdiplus.dll
2010-03-15 00:02:33 ----A---- C:\WINDOWS\system32\dsetup.dll
2010-03-14 23:52:31 ----D---- C:\Program Files\FLV to AVI
2010-03-14 23:46:53 ----D---- C:\Documents and Settings\Domov\Data aplikací\Eltima Software
2010-03-14 23:46:51 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-03-14 23:36:26 ----D---- C:\Program Files\Xvid
2010-03-14 23:36:26 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-03-14 23:36:26 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-03-14 05:42:17 ----D---- C:\Documents and Settings\Domov\Data aplikací\River Past G5
2010-03-14 05:41:25 ----D---- C:\Program Files\River Past
2010-03-14 05:41:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\River Past G5
2010-03-14 02:12:46 ----D---- C:\WINDOWS\Minidump
2010-03-13 19:14:04 ----D---- C:\Documents and Settings\Domov\Data aplikací\com.adobe.ExMan
2010-03-13 01:19:30 ----A---- C:\WINDOWS\Eudcedit.ini
2010-03-11 01:02:03 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-03-11 00:59:47 ----D---- C:\Program Files\Microsoft Office

======List of files/folders modified in the last 1 months======

2010-04-08 15:48:44 ----D---- C:\WINDOWS\Temp
2010-04-08 15:48:36 ----RD---- C:\Program Files
2010-04-08 15:47:06 ----SD---- C:\WINDOWS\Tasks
2010-04-08 15:42:18 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-08 15:34:01 ----D---- C:\Documents and Settings\Domov\Data aplikací\Skype
2010-04-08 15:32:53 ----D---- C:\Documents and Settings\Domov\Data aplikací\skypePM
2010-04-08 15:31:58 ----D---- C:\WINDOWS\Prefetch
2010-04-08 15:31:50 ----D---- C:\Program Files\Steam
2010-04-08 15:30:20 ----SHD---- C:\System Volume Information
2010-04-08 15:30:20 ----D---- C:\WINDOWS\system32\Restore
2010-04-07 23:30:19 ----D---- C:\Documents and Settings\Domov\Data aplikací\Sony
2010-04-07 19:38:33 ----D---- C:\WINDOWS\system32
2010-04-07 18:25:02 ----SHD---- C:\WINDOWS\Installer
2010-04-07 18:24:59 ----D---- C:\Config.Msi
2010-04-07 18:14:50 ----D---- C:\WINDOWS
2010-04-07 18:12:15 ----D---- C:\Documents and Settings
2010-04-06 19:26:23 ----RSD---- C:\WINDOWS\Fonts
2010-04-05 21:39:03 ----HD---- C:\WINDOWS\inf
2010-04-05 21:39:03 ----D---- C:\WINDOWS\system32\drivers
2010-04-04 22:28:10 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-04 20:30:30 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-04 20:29:44 ----D---- C:\GaMe
2010-04-04 18:41:49 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-04 15:52:21 ----A---- C:\WINDOWS\system.ini
2010-04-04 02:10:51 ----D---- C:\WINDOWS\system
2010-04-03 21:33:46 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-04-02 01:23:50 ----D---- C:\WINDOWS\security
2010-04-02 01:12:08 ----D---- C:\Program Files\CCleaner
2010-04-02 00:56:25 ----D---- C:\WINDOWS\Registration
2010-04-01 03:02:11 ----D---- C:\Program Files\Internet Explorer
2010-04-01 03:01:52 ----D---- C:\WINDOWS\ie8updates
2010-04-01 03:01:07 ----HD---- C:\WINDOWS\$hf_mig$
2010-03-29 20:04:06 ----D---- C:\Program Files\Common Files
2010-03-29 19:40:52 ----D---- C:\WINDOWS\repair
2010-03-29 19:25:24 ----D---- C:\Program Files\Uniblue
2010-03-28 16:40:11 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-20 01:23:21 ----D---- C:\Documents and Settings\Domov\Data aplikací\Apple Computer
2010-03-18 19:32:48 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-03-18 19:32:14 ----D---- C:\WINDOWS\Help
2010-03-18 19:31:22 ----D---- C:\Program Files\NVIDIA Corporation
2010-03-17 19:06:00 ----D---- C:\Fraps
2010-03-16 21:55:56 ----D---- C:\Documents and Settings\Domov\Data aplikací\HLSW
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\OpenCL.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuda.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcodins.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcod.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvapi.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2010-03-14 17:37:38 ----RSD---- C:\WINDOWS\assembly
2010-03-14 05:31:38 ----D---- C:\Documents and Settings\Domov\Data aplikací\Publish Providers
2010-03-14 02:13:49 ----D---- C:\WINDOWS\Debug
2010-03-13 19:21:53 ----D---- C:\Documents and Settings\Domov\Data aplikací\Adobe
2010-03-13 01:23:43 ----A---- C:\WINDOWS\win.ini
2010-03-12 12:26:36 ----A---- C:\WINDOWS\system32\nvuninst.exe
2010-03-11 01:02:05 ----D---- C:\Program Files\Movie Maker
2010-03-10 22:11:15 ----D---- C:\WINDOWS\pss

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-02-26 114984]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2010-02-26 55232]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-02-26 139192]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2010-02-26 134488]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2010-02-26 32584]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-07-20 5795328]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-03-16 10232352]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2010-01-28 58600]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-06-05 142336]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 a7syt4wg;a7syt4wg; C:\WINDOWS\system32\drivers\a7syt4wg.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-01-13 25280]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-12-19 5854688]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 Nokia USB Generic;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2006-05-29 8704]
S3 Nokia USB Modem;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2006-05-29 13312]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2006-05-29 127488]
S3 PLCMP532;PLCMP532 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PLCMP532.sys []
S3 PLCND532;PLCND532 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PLCND532.sys [2007-08-08 26656]
S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-02-26 810120]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-01-31 153376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-03-16 154216]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-03-03 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-04-03 215160]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
R3 ServiceLayer;ServiceLayer; C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe [2006-06-05 174080]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-02-26 33560]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-12-24 655624]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
Předem děkuji za radu jak vyřešit tento problém

[Caroprd111]

Zdravím

Odstraňte log z "Code" a já se na to podívám.

[Thooty]

Najde se teda nějaké řešení nebo ne?...

[Caroprd111]

Doporučuji odinstalovat (pokud nepoužíváte) toolbary (lišty) v Přidat nebo odebrat programy.


Doporučuji odinstalovat (odstranit):
C:\Documents and Settings\Domov\Dokumenty\Downloads\sdc230 (2)\sdc230\StrongDC.exe
C:\Documents and Settings\Domov\Plocha\sdc230\StrongDC.exe
C:\sdc230\StrongDC.exe
C:\Documents and Settings\Domov\Local Settings\Temp\Rar$EX00.015\utorrent.exe
C:\Documents and Settings\Domov\Local Settings\Temp\Rar$EX00.312\StrongDC.exe
C:\Documents and Settings\Domov\Plocha\Věcičky\utorrent-portable\utorrent.exe
C:\Documents and Settings\Domov\Plocha\Věcičky\Utorrent\utorrent.exe

P2P sítě a jejich klienti jsou potenciálním bezpečnostním rizikem, prakticky neustále jsou zdrojem virů, zbytečně se vystavujete riziku.



Stáhněte a uložte, nejlépe na plochu http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypněte všechny rezidentní bezpečnostní programy - firewally, antiviry, antispywary
• Spusťte aplikaci pod účtem s oprávněním Administrátora (Správce), ihned po startu se zobrazí stránka s licenčními podmínkami, pokračujte stisknutím tlačítka "Ano"
• Dále postupujte dle pokynů, během scanu nespouštějte jiné aplikace a neklikejte do zobrazujícího se okna
• Scan by měl trvat okolo 5 - 10 minut, po dokončení Combofix zobrazí log C:\ComboFix.txt , který sem vložte.
• Během skenování může být počítač restartován.

[Thooty]

Tady je ten log z ComboFixu a chci se omluvit že sem tak naléhal....
------------------------------------------------------------------------------------------
ComboFix 10-04-09.06 - Domov 10.04.2010 14:05:47.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1023.693 [GMT 2:00]
Spuštěný z: c:\documents and settings\Domov\Plocha\ComboFix.exe
AV: ESET Smart Security 4.2 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
* Rezidentní štít AV je zapnutý

.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Domov\Dokumenty\cc_20100314_011548.reg
c:\documents and settings\Domov\Dokumenty\cc_20100329_191438.reg
C:\install.exe
c:\program files\\setup.exe
c:\program files\Setup.exe
c:\windows\explorer.backup
c:\windows\system32\detoured.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-03-10 do 2010-04-10 )))))))))))))))))))))))))))))))
.

2010-04-10 01:24 . 2010-04-10 01:24 -------- d-----w- c:\program files\MP Software
2010-04-09 16:03 . 2010-04-09 16:03 -------- d-----w- c:\program files\Common Files\Java
2010-04-08 13:48 . 2010-04-08 13:48 -------- d-----w- c:\program files\trend micro
2010-04-08 13:48 . 2010-04-08 13:48 -------- d-----w- C:\rsit
2010-04-07 16:24 . 2010-04-07 16:24 -------- d-----w- c:\program files\Opera
2010-04-07 16:14 . 2008-04-14 03:22 221184 ----a-w- c:\windows\system32\wmpns.dll
2010-04-07 16:13 . 2010-04-07 16:13 -------- d-sh--w- c:\documents and settings\Test\IETldCache
2010-04-07 15:58 . 2010-04-07 15:58 -------- d-----w- c:\program files\TeamViewer
2010-04-07 14:47 . 2010-04-07 14:47 -------- d-sh--w- c:\documents and settings\Administrator\IETldCache
2010-04-05 19:38 . 2010-04-05 19:38 -------- d-----w- c:\program files\ESET
2010-04-05 14:15 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2010-04-04 20:27 . 2010-04-10 12:05 -------- d-----w- c:\windows\system32\CatRoot2
2010-04-03 23:36 . 2010-04-04 22:02 -------- d-----w- c:\program files\Sanny Builder 3
2010-04-02 22:16 . 2010-04-02 22:16 -------- d-----w- c:\windows\system32\install
2010-04-01 23:08 . 2010-04-01 23:08 -------- d--h--w- c:\windows\system32\GroupPolicy
2010-04-01 21:15 . 2010-04-01 21:15 -------- d--h--w- c:\windows\PIF
2010-04-01 14:12 . 2010-04-10 11:57 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2010-04-01 14:12 . 2010-04-01 14:12 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-03-31 20:52 . 2010-03-31 20:52 -------- d-----w- C:\Keys
2010-03-29 18:04 . 2010-03-29 18:04 -------- d-----w- c:\program files\Common Files\Skype
2010-03-29 17:40 . 2010-04-01 22:57 -------- d-----w- c:\windows\system32\NtmsData
2010-03-20 12:54 . 2010-03-20 12:54 -------- d-----w- c:\program files\Common Files\xing shared
2010-03-20 12:54 . 2010-03-20 12:54 -------- d-----w- c:\program files\Common Files\Real
2010-03-20 12:54 . 2010-03-20 12:54 -------- d-----w- c:\program files\Real
2010-03-19 23:20 . 2010-03-19 23:21 -------- d-----w- c:\program files\QuickTime
2010-03-16 16:51 . 2010-03-16 16:59 -------- d-----w- c:\program files\AVI-GIF
2010-03-16 02:37 . 2010-03-16 02:37 278120 ----a-w- c:\windows\system32\nvmccs.dll
2010-03-16 02:37 . 2010-03-16 02:37 154216 ----a-w- c:\windows\system32\nvsvc32.exe
2010-03-16 02:37 . 2010-03-16 02:37 145000 ----a-w- c:\windows\system32\nvcolor.exe
2010-03-16 02:37 . 2010-03-16 02:37 13670504 ----a-w- c:\windows\system32\nvcpl.dll
2010-03-16 02:37 . 2010-03-16 02:37 110696 ----a-w- c:\windows\system32\nvmctray.dll
2010-03-16 02:37 . 2010-03-16 02:37 81920 ----a-w- c:\windows\system32\nvwddi.dll
2010-03-15 10:46 . 2010-03-15 10:46 -------- d-----w- c:\program files\SystemRequirementsLab
2010-03-14 22:02 . 2005-06-07 14:11 60416 ----a-w- c:\windows\system32\dsetup.dll
2010-03-14 22:02 . 2004-08-18 14:00 1712128 ----a-w- c:\windows\system32\gdiplus.dll
2010-03-14 21:52 . 2010-03-14 21:52 -------- d-----w- c:\program files\FLV to AVI
2010-03-14 21:36 . 2010-03-14 21:36 -------- d-----w- c:\program files\Xvid
2010-03-14 21:36 . 2009-06-07 15:24 180224 ----a-w- c:\windows\system32\xvidvfw.dll
2010-03-14 21:36 . 2009-06-07 15:16 819200 ----a-w- c:\windows\system32\xvidcore.dll
2010-03-14 03:41 . 2010-03-14 03:41 -------- d-----w- c:\program files\River Past
2010-03-13 17:14 . 2010-03-13 17:14 -------- d-----w- c:\documents and settings\Domov\Library

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-10 12:10 . 2010-02-14 18:25 -------- d-----w- c:\program files\Steam
2010-04-10 11:57 . 2010-03-02 17:34 -------- d-----w- c:\program files\RadioBar
2010-04-09 16:03 . 2010-01-31 15:59 411368 -c--a-w- c:\windows\system32\deploytk.dll
2010-04-04 18:30 . 2009-12-22 12:40 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-04-03 19:33 . 2010-01-08 07:23 215160 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-04-03 15:54 . 2010-01-08 07:24 138544 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-04-01 23:12 . 2010-02-23 11:26 -------- d-----w- c:\program files\CCleaner
2010-03-29 17:25 . 2010-02-23 12:02 -------- d-----w- c:\program files\Uniblue
2010-03-28 14:40 . 2001-10-25 12:00 83630 ----a-w- c:\windows\system32\perfc005.dat
2010-03-28 14:40 . 2001-10-25 12:00 440310 ----a-w- c:\windows\system32\perfh005.dat
2010-03-21 16:24 . 2009-12-22 10:50 1324 ----a-w- c:\windows\system32\d3d9caps.dat
2010-03-18 17:31 . 2010-01-07 16:52 -------- d-----w- c:\program files\NVIDIA Corporation
2010-03-16 06:51 . 2010-03-02 10:46 61440 ----a-w- c:\windows\system32\OpenCL.dll
2010-03-16 06:51 . 2010-03-02 10:46 11640832 ----a-w- c:\windows\system32\nvcompiler.dll
2010-03-16 06:51 . 2009-12-22 21:17 10232352 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2010-03-16 06:51 . 2009-09-27 23:12 4075520 ----a-w- c:\windows\system32\nvcuda.dll
2010-03-16 06:51 . 2009-09-27 23:12 2646632 ----a-w- c:\windows\system32\nvcuvenc.dll
2010-03-16 06:51 . 2009-09-27 23:12 2183470 ----a-w- c:\windows\system32\nvdata.bin
2010-03-16 06:51 . 2009-09-27 23:12 215656 ----a-w- c:\windows\system32\nvcodins.dll
2010-03-16 06:51 . 2009-09-27 23:12 215656 ----a-w- c:\windows\system32\nvcod.dll
2010-03-16 06:51 . 2009-09-27 23:12 2030184 ----a-w- c:\windows\system32\nvcuvid.dll
2010-03-16 06:51 . 2009-09-27 23:12 14757888 ----a-w- c:\windows\system32\nvoglnt.dll
2010-03-16 06:51 . 2009-09-27 23:12 1097728 ----a-w- c:\windows\system32\nvapi.dll
2010-03-16 06:51 . 2008-04-14 03:21 6432128 ----a-w- c:\windows\system32\nv4_disp.dll
2010-03-12 10:26 . 2010-01-07 17:04 600680 ----a-w- c:\windows\system32\nvuninst.exe
2010-03-05 21:09 . 2010-01-08 17:34 -------- d-----w- c:\program files\Activision
2010-03-05 19:05 . 2010-01-08 07:23 682280 -c--a-w- c:\windows\system32\pbsvc.exe
2010-03-05 07:34 . 2010-03-05 07:34 -------- d-----w- c:\program files\ICQ6Toolbar
2010-03-03 17:45 . 2010-01-08 07:23 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-03-03 09:18 . 2010-01-27 10:55 -------- d-----w- c:\program files\Electronic Arts
2010-02-26 04:41 . 2010-02-26 04:41 55232 ----a-w- c:\windows\system32\drivers\epfwtdi.sys
2010-02-26 04:41 . 2010-02-26 04:41 32584 ----a-w- c:\windows\system32\drivers\epfwndis.sys
2010-02-26 04:41 . 2010-02-26 04:41 134488 ----a-w- c:\windows\system32\drivers\epfw.sys
2010-02-26 04:41 . 2010-02-26 04:41 114984 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2010-02-26 04:39 . 2010-02-26 04:39 139192 ----a-w- c:\windows\system32\drivers\eamon.sys
2010-02-25 06:18 . 2004-08-17 14:49 916480 ----a-w- c:\windows\system32\wininet.dll
2010-02-23 11:50 . 2010-02-23 11:48 -------- d-----w- c:\program files\Driver Checker
2010-02-23 11:42 . 2010-02-23 11:42 -------- d-----w- c:\program files\iXi Tools
2010-02-23 11:27 . 2009-12-24 10:46 -------- d-----w- c:\program files\Common Files\Akamai
2010-02-19 22:52 . 2010-02-19 22:52 2434856 ----a-w- c:\windows\system32\pbsvc_bc2.exe
2010-02-15 22:10 . 2010-02-15 22:10 -------- d-----w- c:\program files\OpenAL
2010-02-15 22:10 . 2010-02-15 22:10 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2010-02-15 22:10 . 2010-02-15 22:10 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2010-02-14 15:50 . 2010-02-14 03:35 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-02-13 18:26 . 2010-02-13 18:17 -------- d-----w- c:\program files\Safari
2010-02-13 18:18 . 2010-02-13 18:18 65124 ---ha-w- c:\windows\system32\mlfcache.dat
2010-02-13 18:16 . 2010-02-13 18:16 -------- d-----w- c:\program files\Bonjour
2010-02-13 18:16 . 2010-02-13 18:16 -------- d-----w- c:\program files\Common Files\Apple
2010-02-13 18:16 . 2010-02-13 18:16 -------- d-----w- c:\program files\Apple Software Update
2010-02-11 10:30 . 2010-02-11 10:30 -------- d-----w- c:\program files\OpenOffice.org 3
2010-02-11 10:29 . 2010-02-11 10:29 -------- d-----w- c:\program files\readmes
2010-02-11 10:29 . 2010-02-11 10:29 -------- d-----w- c:\program files\licenses
2010-02-04 09:01 . 2010-03-01 12:56 74072 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2010-02-04 09:01 . 2010-03-01 12:56 528216 ----a-w- c:\windows\system32\XAudio2_6.dll
2010-02-04 09:01 . 2010-03-01 12:56 238936 ----a-w- c:\windows\system32\xactengine3_6.dll
2010-02-04 09:01 . 2010-03-01 12:56 22360 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2010-01-28 14:25 . 2010-01-07 17:04 58600 ----a-w- c:\windows\system32\drivers\nvhda32.sys
2010-01-28 14:24 . 2010-01-07 17:04 19456 ----a-w- c:\windows\system32\nvhdap32.dll
2010-01-27 10:53 . 2010-01-27 10:53 1180 -c--a-w- c:\windows\system32\ealregsnapshot1.reg
2010-01-27 04:07 . 2010-01-07 17:04 219752 ----a-w- c:\windows\system32\nvcohda.dll
2010-01-27 04:07 . 2010-01-07 17:04 592488 -c--a-w- c:\windows\system32\nvuhda.exe
2010-01-13 16:19 . 2009-09-23 08:41 25280 -c--a-w- c:\windows\system32\drivers\hamachi.sys
2009-09-18 14:34 . 2009-09-18 14:34 336 -c--a-w- c:\program files\setup.ini
2009-09-18 14:34 . 2009-09-18 14:34 1822848 ----a-w- c:\program files\instmsiw.exe
2009-09-18 14:34 . 2009-09-18 14:34 1709160 ----a-w- c:\program files\instmsia.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\\Phone\Skype.exe" [2010-03-09 26100520]
"Google Update"="c:\documents and settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" [2009-12-25 135664]
"RGSC"="c:\game\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe" [2010-01-07 306088]
"Steam"="c:\program files\steam\steam.exe" [2010-02-14 1217808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2009-07-20 18670592]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-12-19 135168]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-12-19 159744]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-12-19 131072]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-03-16 13670504]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-03-16 110696]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-03-20 202256]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2010-02-26 2140880]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoTaskMng"= 1 (0x1)

[HKLM\~\startupfolder\C:^Documents and Settings^Domov^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
path=c:\documents and settings\Domov\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.1.lnk
backup=c:\windows\pss\OpenOffice.org 3.1.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2010-04-01 09:16 357696 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync]
2006-06-27 15:21 1449984 ----a-w- c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UniblueRegistryBooster]
2010-03-16 14:25 60208 ----a-w- c:\program files\Uniblue\RegistryBooster\Launcher.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\GaMe\\GTA IV\\Rockstar Games Social Club\\RGSCLauncher.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Activision\\Call of Duty 2\\CoD2MP_s.exe"=
"c:\\Program Files\\HLSW\\hlsw.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\GaMe\\GTA Vice City\\gta-vc.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\TeamViewer\\Version5\\TeamViewer.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [14.2.2010 5:35 691696]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [26.2.2010 6:41 114984]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [26.2.2010 6:41 810120]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [5.3.2010 9:34 246520]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [7.1.2010 19:04 58600]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [22.12.2009 14:42 1684736]
S3 PLCMP532;PLCMP532 NDIS Protocol Driver;c:\windows\system32\Drivers\PLCMP532.sys --> c:\windows\system32\Drivers\PLCMP532.sys [?]
S3 PLCND532;PLCND532 NDIS Protocol Driver;c:\windows\system32\drivers\PLCND532.sys [8.8.2007 15:40 26656]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{132FBFWF-F55T-E32S-2G78-10ECD61772R4}]
2010-04-02 22:15 405504 ------w- c:\windows\system32\install\server.exe
.
Obsah adresáře 'Naplánované úlohy'

2010-02-13 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2010-04-10 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1993962763-1390067357-839522115-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 21:09]

2010-04-10 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1993962763-1390067357-839522115-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 21:09]

2010-04-10 c:\windows\Tasks\User_Feed_Synchronization-{D55854C5-0A88-4017-A7E4-1190F32D1C74}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 03:31]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: {{14CD42DD-ABCD-3586-DCAB-40E3693E3737} - c:\program files\Get Styles\ct.htm
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
WebBrowser-{5B291E6C-9A74-4034-971B-A4B007A0B315} - (no file)
HKCU-Run-VhZkZkyIrwadny3vylp43IgDIEjqy9osQLYTjxjs7CGIFJIS6EYlAeqnUUZljBVo147r2qFAICTNtJn636R3P4i6fWptpnnUcMwuzhvFWmJocwlct0VznlTWJacNtxZCC0QveulwvLStIIexPUOrj7d8XknPfQDBPUrO8c4ZQbkYM3VtULPaNEafjxDzDVuKEjBCey0bseeZNtZuPtDn1kC4Nlucu8AR3v38lSX2c5P5tIYAY7NeWOx6YOl27CY5q - (no file)
HKCU-Run-LBzTfPLbZtM6wYM7ipaqLGWaMX0VtDZCeYxzOqQCVt37aQkorFOi6jEnl2zJvRvNoPwV3TVuDtWyRbXNYops6EndEsCXi9S9h998UahNRug4vZakrsN0rHXzezNUDMBBMo7rB5MyPqaIHgHgS8zu5BuvNQU611xC6yCIKFpX9BrXJAQ2Yhmb40kDkYTbqqcjy2Z3y9jHJioLNpKtcjeC1o5MLZ3gmikXsmBZZncHqi5V1O33aAvAR6RcKWoGBsMjZ - (no file)
HKLM-Run-VhZkZkyIrwadny3vylp43IgDIEjqy9osQLYTjxjs7CGIFJIS6EYlAeqnUUZljBVo147r2qFAICTNtJn636R3P4i6fWptpnnUcMwuzhvFWmJocwlct0VznlTWJacNtxZCC0QveulwvLStIIexPUOrj7d8XknPfQDBPUrO8c4ZQbkYM3VtULPaNEafjxDzDVuKEjBCey0bseeZNtZuPtDn1kC4Nlucu8AR3v38lSX2c5P5tIYAY7NeWOx6YOl27CY5q - (no file)
HKLM-Run-9gPWKkytob723TLhcjekKFs0XqUkMzzqT7Q2jqcVthBPHJBvmn3DLY6oEv8NlApnfBDCne6OfXriRXsKXmNCorVKkOoROec18HqOdtN9DCqwXBHdOjeyKLylRew4NIfa3KWMWMyfi1m4oKHzKf4nRqarU7JHHteKv6sjuKHoUctByVkIJ4Oac0aXIW0UwXnGpcre0b6q3JIvDloerP3ZcxDo32NBmyUXFsCkIoWFA74jMN7l2uRnr5lWTJscvyx94 - (no file)
HKLM-Run-nwiz - nwiz.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-10 14:11
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys spem.sys >>UNKNOWN [0x8677A938]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xf7873f28
\Driver\ACPI -> ACPI.sys @ 0xf76dbcb8
\Driver\atapi -> atapi.sys @ 0xf7670b40
IoDeviceObjectType -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0598
ParseProcedure -> ntoskrnl.exe @ 0x8056ea15
\Device\Harddisk0\DR0 -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0598
ParseProcedure -> ntoskrnl.exe @ 0x8056ea15
NDIS: Realtek PCIe FE Family Controller -> SendCompleteHandler -> NDIS.sys @ 0xf7579bb0
PacketIndicateHandler -> NDIS.sys @ 0xf7586a21
SendHandler -> NDIS.sys @ 0xf756487b
user & kernel MBR OK

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-1993962763-1390067357-839522115-1003\Software\SecuROM\License information*]
"datasecu"=hex:50,dd,f2,25,db,8c,a2,38,b7,fc,34,69,27,51,7e,b3,ae,13,51,1e,28,
73,a5,96,9c,20,57,3c,5b,18,16,33,cc,eb,9c,51,46,a9,78,99,5d,6b,9d,be,b2,b6,\
"rkeysecu"=hex:fb,55,b3,85,bd,b9,cb,b8,f6,de,2d,58,fe,49,a1,22
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1020)
c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll

- - - - - - - > 'explorer.exe'(3388)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 6\PCSCM.dll
c:\windows\system32\ConnAPI.DLL
c:\program files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\windows\RTHDCPL.EXE
c:\progra~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
c:\windows\system32\RUNDLL32.EXE
c:\program files\Skype\Phone\Skype.exe
c:\documents and settings\Domov\Local Settings\Data aplikací\Google\Update\1.2.183.23\GoogleCrashHandler.exe
c:\game\GTA IV\Rockstar Games Social Club\1_1_3_0\RGSC.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\program files\Common Files\PCSuite\Services\ServiceLayer.exe
c:\program files\Skype\Plugin Manager\skypePM.exe
c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
.
**************************************************************************
.
Celkový čas: 2010-04-10 14:17:00 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-04-10 12:16

Před spuštěním: Volných bajtů: 44 758 937 600
Po spuštění: Volných bajtů: 44 758 351 872

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - D025CA806BAB1257429F23A18014AC9A

[Caroprd111]

Odinstalujte všechny emulátory virtuálních mechanik.

Stáhněte SPTD http://www.duplexsecure.com/en/downloads

• Vyberte verzi podle svého operačního systému (64 & 32b). Uložte na plochu a spusťte.
• zvolte možnost Uninstall a restartujte PC.

Stáhněte a spusťte http://www.jpshortstuff.247fixes.com/Defogger.exe

• Klikněte na "Disable" a restartujte PC.

Stáhněte MBR na plochu http://www2.gmer.net/mbr/mbr.exe

Start > Spustit (Win + R)

• Vyskočí okénko, zkopírujte do něj:

Kód: Vybrat vše

"%userprofile%\plocha\mbr" -t

• Klikněte na OK

• Vytvoří se log s názvem mbr.log, vložte ho sem.

[Thooty]

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
kernel: MBR read successfully
user & kernel MBR OK

[Caroprd111]

Jak to vypadá s PC

[Thooty]

No nevím jak by to mělo vypadat, tady je screen z karantény Eset smart security ještě v 14:40 hlásil dalšího trojského koně... přitom tam ta složka není takže se to možná smazalo.
http://2i.cz/2i/i/4bc08786/35589ed5b192 ... d80b.f.jpg
jinak svchost je když dám správce úloh spuštěn 7x nevím zda to je tak správně viz.screen
http://2i.cz/2i/i/4bc088fd/0d343f8ceea8 ... 27f4.f.jpg
Jinak všechno šlape tak jak má i počítač se konečně nespomaluje.
(A ještě taková maličkost, je to trochu od věci ale zmizel mi panel jazyků což de vidět i ze screenů nevíte jak ho navrátit?:D)

[Caroprd111]

Zkuste Dial-a-fix http://www.viry.cz/forum/viewtopic.php?f=46&t=24295


C:\WINDOWS\System32\svchost.exe je v pořádku.


Poprosím o nový log z RSIT.

[Thooty]

Logfile of random's system information tool 1.06 (written by random/random)
Run by Domov at 2010-04-10 15:36:13
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 42 GB (56%) free of 76 GB
Total RAM: 1023 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:36:17, on 10.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
C:\program files\steam\steam.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\1.2.183.23\GoogleCrashHandler.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Domov\Plocha\RSIT.exe
C:\Program Files\trend micro\Domov.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [RGSC] C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra 'Tools' menuitem: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe

--
End of file - 7961 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1993962763-1390067357-839522115-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1993962763-1390067357-839522115-1003.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{D55854C5-0A88-4017-A7E4-1190F32D1C74}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-03-20 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-04-09 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-01-03 1019128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-07-20 18670592]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-12-19 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-12-19 159744]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-12-19 131072]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"PCSuiteTrayApplication"=C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE [2006-06-15 229376]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-03-16 13670504]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-03-16 110696]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-03-20 202256]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-02-26 2140880]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-03-09 26100520]
"Google Update"=C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-12-25 135664]
"RGSC"=C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe [2010-01-07 306088]
"Steam"=c:\program files\steam\steam.exe [2010-02-14 1217808]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe -autorun []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync]
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [2006-06-27 1449984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UniblueRegistryBooster]
C:\Program Files\Uniblue\RegistryBooster\launcher.exe [2010-03-16 60208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Domov^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2009-09-16 384512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-12-19 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
scecli

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoTaskMng"=1
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe"="C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\GaMe\GTA Vice City\gta-vc.exe"="C:\GaMe\GTA Vice City\gta-vc.exe:*:Enabled:gta-vc"
"C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Program Files\TeamViewer\Version5\TeamViewer.exe"="C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-04-10 15:33:52 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-10 14:18:07 ----SHD---- C:\RECYCLER
2010-04-10 14:03:37 ----A---- C:\Boot.bak
2010-04-10 14:03:27 ----RASHD---- C:\cmdcons
2010-04-10 14:02:15 ----A---- C:\WINDOWS\NIRCMD.exe
2010-04-10 14:02:15 ----A---- C:\WINDOWS\MBR.exe
2010-04-10 14:02:12 ----A---- C:\WINDOWS\SWREG.exe
2010-04-10 14:02:12 ----A---- C:\WINDOWS\PEV.exe
2010-04-10 14:02:11 ----A---- C:\WINDOWS\zip.exe
2010-04-10 14:02:11 ----A---- C:\WINDOWS\sed.exe
2010-04-10 14:02:11 ----A---- C:\WINDOWS\grep.exe
2010-04-10 14:02:10 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-04-10 14:02:10 ----A---- C:\WINDOWS\SWSC.exe
2010-04-10 14:01:39 ----D---- C:\WINDOWS\ERDNT
2010-04-10 14:00:18 ----D---- C:\Qoobox
2010-04-10 13:57:46 ----A---- C:\Documents and Settings\Domov\Data aplikací\toolbar_log.txt
2010-04-10 03:24:19 ----D---- C:\Program Files\MP Software
2010-04-10 03:24:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Rapidshare Search Tool
2010-04-10 02:35:05 ----D---- C:\Documents and Settings\Domov\Data aplikací\DMCache
2010-04-09 18:03:57 ----D---- C:\Program Files\Common Files\Java
2010-04-09 18:03:30 ----A---- C:\WINDOWS\system32\javaws.exe
2010-04-09 18:03:30 ----A---- C:\WINDOWS\system32\javaw.exe
2010-04-09 18:03:29 ----A---- C:\WINDOWS\system32\java.exe
2010-04-08 15:48:36 ----D---- C:\Program Files\trend micro
2010-04-08 15:48:35 ----D---- C:\rsit
2010-04-07 18:24:51 ----D---- C:\Program Files\Opera
2010-04-07 18:14:50 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-04-07 17:58:41 ----D---- C:\Documents and Settings\Domov\Data aplikací\TeamViewer
2010-04-07 17:58:09 ----D---- C:\Program Files\TeamViewer
2010-04-05 21:39:26 ----D---- C:\Documents and Settings\Domov\Data aplikací\ESET
2010-04-05 21:38:21 ----D---- C:\Program Files\ESET
2010-04-05 21:38:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2010-04-05 16:15:46 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-04-04 01:36:57 ----D---- C:\Program Files\Sanny Builder 3
2010-04-03 02:34:47 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-04-03 00:16:04 ----D---- C:\WINDOWS\system32\install
2010-04-02 01:08:54 ----HD---- C:\WINDOWS\system32\GroupPolicy
2010-04-01 23:15:00 ----HD---- C:\WINDOWS\PIF
2010-04-01 23:05:56 ----A---- C:\WINDOWS\.ini
2010-03-31 22:52:12 ----D---- C:\Keys
2010-03-29 20:04:06 ----D---- C:\Program Files\Common Files\Skype
2010-03-29 19:40:52 ----D---- C:\WINDOWS\system32\NtmsData
2010-03-20 14:54:51 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2010-03-20 14:54:46 ----A---- C:\WINDOWS\system32\pndx5032.dll
2010-03-20 14:54:46 ----A---- C:\WINDOWS\system32\pndx5016.dll
2010-03-20 14:54:35 ----D---- C:\Program Files\Common Files\xing shared
2010-03-20 14:54:10 ----A---- C:\WINDOWS\system32\pncrt.dll
2010-03-20 14:54:08 ----D---- C:\Program Files\Real
2010-03-20 14:54:08 ----D---- C:\Program Files\Common Files\Real
2010-03-20 14:54:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\Real
2010-03-20 14:50:15 ----D---- C:\Documents and Settings\Domov\Data aplikací\Real
2010-03-20 01:20:39 ----D---- C:\Program Files\QuickTime
2010-03-17 19:11:36 ----A---- C:\WINDOWS\GTA-SA_Trn_Settings.ini
2010-03-16 18:51:17 ----D---- C:\Program Files\AVI-GIF
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvmctray.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvmccs.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvcpl.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvcolor.exe
2010-03-16 04:37:44 ----A---- C:\WINDOWS\system32\nvwddi.dll
2010-03-15 12:46:03 ----D---- C:\Program Files\SystemRequirementsLab
2010-03-15 00:03:18 ----D---- C:\Documents and Settings\Domov\Data aplikací\GeoVid
2010-03-15 00:02:33 ----A---- C:\WINDOWS\system32\gdiplus.dll
2010-03-15 00:02:33 ----A---- C:\WINDOWS\system32\dsetup.dll
2010-03-14 23:52:31 ----D---- C:\Program Files\FLV to AVI
2010-03-14 23:46:53 ----D---- C:\Documents and Settings\Domov\Data aplikací\Eltima Software
2010-03-14 23:46:51 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-03-14 23:36:26 ----D---- C:\Program Files\Xvid
2010-03-14 23:36:26 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-03-14 23:36:26 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-03-14 05:42:17 ----D---- C:\Documents and Settings\Domov\Data aplikací\River Past G5
2010-03-14 05:41:25 ----D---- C:\Program Files\River Past
2010-03-14 05:41:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\River Past G5
2010-03-14 02:12:46 ----D---- C:\WINDOWS\Minidump
2010-03-13 19:14:04 ----D---- C:\Documents and Settings\Domov\Data aplikací\com.adobe.ExMan
2010-03-13 01:19:30 ----A---- C:\WINDOWS\Eudcedit.ini
2010-03-11 01:02:03 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-03-11 00:59:47 ----D---- C:\Program Files\Microsoft Office

======List of files/folders modified in the last 1 months======

2010-04-10 15:36:13 ----D---- C:\WINDOWS\Temp
2010-04-10 15:35:03 ----RD---- C:\WINDOWS\Web
2010-04-10 15:35:03 ----RD---- C:\Program Files
2010-04-10 15:34:59 ----SHD---- C:\WINDOWS\Installer
2010-04-10 15:34:59 ----D---- C:\Config.Msi
2010-04-10 15:34:29 ----D---- C:\WINDOWS\system32
2010-04-10 15:34:22 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-10 15:33:24 ----D---- C:\WINDOWS
2010-04-10 15:24:05 ----D---- C:\Documents and Settings\Domov\Data aplikací\Skype
2010-04-10 14:56:14 ----D---- C:\Program Files\Steam
2010-04-10 14:55:13 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-10 14:54:39 ----SD---- C:\WINDOWS\Tasks
2010-04-10 14:50:39 ----D---- C:\WINDOWS\system32\drivers
2010-04-10 14:10:57 ----A---- C:\WINDOWS\system.ini
2010-04-10 14:09:33 ----D---- C:\WINDOWS\system32\config
2010-04-10 14:07:50 ----D---- C:\WINDOWS\AppPatch
2010-04-10 14:07:44 ----D---- C:\Program Files\Common Files
2010-04-10 14:03:37 ----RASH---- C:\boot.ini
2010-04-10 13:57:49 ----D---- C:\Program Files\RadioBar
2010-04-10 03:21:49 ----D---- C:\Documents and Settings\Domov\Data aplikací\skypePM
2010-04-09 18:03:05 ----AC---- C:\WINDOWS\system32\deploytk.dll
2010-04-08 15:31:58 ----D---- C:\WINDOWS\Prefetch
2010-04-08 15:30:20 ----SHD---- C:\System Volume Information
2010-04-08 15:30:20 ----D---- C:\WINDOWS\system32\Restore
2010-04-07 23:30:19 ----D---- C:\Documents and Settings\Domov\Data aplikací\Sony
2010-04-07 18:12:15 ----D---- C:\Documents and Settings
2010-04-06 19:26:23 ----RSD---- C:\WINDOWS\Fonts
2010-04-05 21:39:03 ----HD---- C:\WINDOWS\inf
2010-04-04 20:30:30 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-04 20:29:44 ----D---- C:\GaMe
2010-04-04 18:41:49 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-04 02:10:51 ----D---- C:\WINDOWS\system
2010-04-03 21:33:46 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-04-02 01:23:50 ----D---- C:\WINDOWS\security
2010-04-02 01:12:08 ----D---- C:\Program Files\CCleaner
2010-04-02 00:56:25 ----D---- C:\WINDOWS\Registration
2010-04-01 03:02:11 ----D---- C:\Program Files\Internet Explorer
2010-04-01 03:01:52 ----D---- C:\WINDOWS\ie8updates
2010-04-01 03:01:07 ----HD---- C:\WINDOWS\$hf_mig$
2010-03-29 19:40:52 ----D---- C:\WINDOWS\repair
2010-03-29 19:25:24 ----D---- C:\Program Files\Uniblue
2010-03-28 16:40:11 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-20 01:23:21 ----D---- C:\Documents and Settings\Domov\Data aplikací\Apple Computer
2010-03-18 19:32:48 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-03-18 19:32:14 ----D---- C:\WINDOWS\Help
2010-03-18 19:31:22 ----D---- C:\Program Files\NVIDIA Corporation
2010-03-17 19:06:00 ----D---- C:\Fraps
2010-03-16 21:55:56 ----D---- C:\Documents and Settings\Domov\Data aplikací\HLSW
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\OpenCL.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuda.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcodins.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcod.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvapi.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2010-03-14 17:37:38 ----RSD---- C:\WINDOWS\assembly
2010-03-14 05:31:38 ----D---- C:\Documents and Settings\Domov\Data aplikací\Publish Providers
2010-03-14 02:13:49 ----D---- C:\WINDOWS\Debug
2010-03-13 19:21:53 ----D---- C:\Documents and Settings\Domov\Data aplikací\Adobe
2010-03-13 01:23:43 ----A---- C:\WINDOWS\win.ini
2010-03-12 12:26:36 ----A---- C:\WINDOWS\system32\nvuninst.exe
2010-03-11 01:02:05 ----D---- C:\Program Files\Movie Maker

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-02-26 114984]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2010-02-26 55232]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-02-26 139192]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2010-02-26 134488]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2010-02-26 32584]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-07-20 5795328]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-03-16 10232352]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2010-01-28 58600]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-06-05 142336]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-01-13 25280]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-12-19 5854688]
S3 mbr;mbr; \??\C:\DOCUME~1\Domov\LOCALS~1\Temp\mbr.sys []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 Nokia USB Generic;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2006-05-29 8704]
S3 Nokia USB Modem;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2006-05-29 13312]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2006-05-29 127488]
S3 PLCMP532;PLCMP532 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PLCMP532.sys []
S3 PLCND532;PLCND532 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PLCND532.sys [2007-08-08 26656]
S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys []
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-02-26 810120]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-09 153376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-03-16 154216]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-03-03 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-04-03 215160]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
R3 ServiceLayer;ServiceLayer; C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe [2006-06-05 174080]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-02-26 33560]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-12-24 655624]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

A hrozně moc vám děkuji že ste mi pomohl

[Caroprd111]

Odinstalujte ComboFix přes:
Start >> Spustit, zkopírujte do okénka:

ComboFix /Uninstall

stiskněte Enter


Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

• Spusťte, pro potvrzení volby mačkejte klávesu A, Enter
• Po použití program vymažte. Pozor,antiviry ho mohou falešně označit za vir.

Stáhněte a použijte http://oldtimer.geekstogo.com/TFC.exe


Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe

• Spusťte.
• Klikněte na "CleanUp!". Potvrďte hlášky stiskem "Yes" (Bude následovat restart)

Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478

• Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.
  
  Záložka Čistič
• Dejte analyzovat, po dokončení dejte Spustit Ccleaner.
  
  Záložka Registry
• Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
  OK Zavřít

[Thooty]

Hrozně moc vám děkuji za všechno, ta poslední operace mi dokonce uvolnila 30GB na disku.

[Caroprd111]

Nemáte zač

[Thooty]

Jěště jedna věc, zdálo se mi že mi internet jede nějak pomalu tak sem skusil to co v jedné diskuzi tady na fóru pomocí Malwarebytes zjistit jestli nemám náhodou v počítači malware a něco to našlo, tak se chci zeptat jestli to můžu odstranit.
Log zde
---------------------------------------------------------------------------------------------

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Verze databáze: 3930

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

10.4.2010 21:47:03
mbam-log-2010-04-10 (21-47-03).txt

Typ skenu: Rychlý sken
Skenované objekty: 116695
Uplynulý čas: 7 minuta(y), 14 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 4
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 2
Infikované soubory: 3

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{132fbfwf-f55t-e32s-2g78-10ecd61772r4} (Generic.Bot.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{i2ndsl15-0jo7-ak4f-1yu5-l1xdv608d046} (Generic.Bot.H) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PersonalSec (Rogue.PersonalSecurity) -> No action taken.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servises (Malware.Trace) -> No action taken.

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
C:\Documents and Settings\All Users\Nabídka Start\PersonalSec (Rogue.PersonalSecurity) -> No action taken.
C:\Program Files\Common Files\PersonalSecUninstall (Rogue.PersonalSecurity) -> No action taken.

Infikované soubory:
C:\Program Files\Common Files\PersonalSecUninstall\Uninstall.lnk (Rogue.PersonalSecurity) -> No action taken.
C:\Documents and Settings\Domov\Data aplikací\logs.dat (Bifrose.Trace) -> No action taken.
C:\Documents and Settings\Test\Data aplikací\logs.dat (Bifrose.Trace) -> No action taken.