Dobrý večer, v mém minulém topicu sem zmiňoval že udělám úplný test mbam a něco mi to našlo, tak se ptám jestli to mohu smazat, děkuji.
---------------------------------------------------------------------------------------------
Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org
Verze databáze: 3930
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
10.4.2010 23:18:15
mbam-log-2010-04-10 (23-18-15).txt
Typ skenu: Úplný sken (C:\|)
Skenované objekty: 190108
Uplynulý čas: 1 hodina(y), 3 minuta(y), 14 sekunda(y)
Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 4
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 2
Infikované soubory: 4
Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované klíče registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{132fbfwf-f55t-e32s-2g78-10ecd61772r4} (Generic.Bot.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{i2ndsl15-0jo7-ak4f-1yu5-l1xdv608d046} (Generic.Bot.H) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PersonalSec (Rogue.PersonalSecurity) -> No action taken.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servises (Malware.Trace) -> No action taken.
Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované složky:
C:\Documents and Settings\All Users\Nabídka Start\PersonalSec (Rogue.PersonalSecurity) -> No action taken.
C:\Program Files\Common Files\PersonalSecUninstall (Rogue.PersonalSecurity) -> No action taken.
Infikované soubory:
C:\Documents and Settings\Domov\Plocha\Věcičky\GTA Věcičky\Programy\keygen.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Domov\Plocha\Věcičky\GTA Věcičky\Programy\Sony_vegas_9_keygen.exe (Trojan.Agent.CK) -> No action taken.
C:\Program Files\Common Files\PersonalSecUninstall\Uninstall.lnk (Rogue.PersonalSecurity) -> No action taken.
C:\Documents and Settings\Domov\Data aplikací\logs.dat (Bifrose.Trace) -> No action taken.
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
MBAM - Prosím o kontrolu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: MBAM - Prosím o kontrolu
Dobrý večer 
Všechno smažte
Pokud chcete, můžu Vám zkontrolovat log ze rsitu, klikněte mi do podpisu
Všechno smažte
Pokud chcete, můžu Vám zkontrolovat log ze rsitu, klikněte mi do podpisu
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: MBAM - Prosím o kontrolu
Tady je ten log...
---------------------------------------------------------------------------------------------
Logfile of random's system information tool 1.06 (written by random/random)
Run by Domov at 2010-04-11 00:12:53
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 42 GB (56%) free of 76 GB
Total RAM: 1023 MB (36% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 0:13:11, on 11.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
C:\program files\steam\steam.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\1.2.183.23\GoogleCrashHandler.exe
C:\GaMe\GTA IV\Rockstar Games Social Club\1_1_3_0\RGSC.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Plocha\RSIT.exe
C:\Program Files\trend micro\Domov.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [RGSC] C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra 'Tools' menuitem: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
--
End of file - 8105 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1993962763-1390067357-839522115-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1993962763-1390067357-839522115-1003.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{D55854C5-0A88-4017-A7E4-1190F32D1C74}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-03-20 341600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-09 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-04-09 79648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-01-03 1019128]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-07-20 18670592]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-12-19 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-12-19 159744]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-12-19 131072]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"PCSuiteTrayApplication"=C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE [2006-06-15 229376]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-03-16 13670504]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-03-16 110696]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-03-20 202256]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-02-26 2140880]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-03-09 26100520]
"Google Update"=C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-12-25 135664]
"RGSC"=C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe [2010-01-07 306088]
"Steam"=c:\program files\steam\steam.exe [2010-02-14 1217808]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe -autorun []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync]
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [2006-06-27 1449984]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UniblueRegistryBooster]
C:\Program Files\Uniblue\RegistryBooster\launcher.exe [2010-03-16 60208]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Domov^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2009-09-16 384512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-12-19 208896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
scecli
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoTaskMng"=1
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe"="C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\GaMe\GTA Vice City\gta-vc.exe"="C:\GaMe\GTA Vice City\gta-vc.exe:*:Enabled:gta-vc"
"C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Program Files\TeamViewer\Version5\TeamViewer.exe"="C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
======List of files/folders created in the last 1 months======
2010-04-11 00:12:53 ----D---- C:\rsit
2010-04-11 00:12:53 ----D---- C:\Program Files\trend micro
2010-04-10 21:38:24 ----D---- C:\Documents and Settings\Domov\Data aplikací\Malwarebytes
2010-04-10 21:38:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-04-10 21:38:10 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-04-10 19:19:02 ----D---- C:\Program Files\Pixelan
2010-04-10 19:18:23 ----D---- C:\Program Files\Sonic Foundry
2010-04-10 19:05:39 ----D---- C:\Program Files\Panopticum Lens Pro 3.5 For Vegas
2010-04-10 19:04:43 ----A---- C:\WINDOWS\unvise32.exe
2010-04-10 19:03:59 ----D---- C:\Program Files\Magic Bullet Editors 2.0 Vegas
2010-04-10 18:50:14 ----D---- C:\Program Files\NewBlue
2010-04-10 18:42:28 ----D---- C:\Program Files\Common Files\eSellerate
2010-04-10 15:33:52 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-10 14:18:07 ----SHD---- C:\RECYCLER
2010-04-10 14:03:37 ----A---- C:\Boot.bak
2010-04-10 14:03:27 ----RASHD---- C:\cmdcons
2010-04-10 13:57:46 ----A---- C:\Documents and Settings\Domov\Data aplikací\toolbar_log.txt
2010-04-10 03:24:19 ----D---- C:\Program Files\MP Software
2010-04-10 03:24:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Rapidshare Search Tool
2010-04-10 02:35:05 ----D---- C:\Documents and Settings\Domov\Data aplikací\DMCache
2010-04-09 18:03:57 ----D---- C:\Program Files\Common Files\Java
2010-04-09 18:03:30 ----A---- C:\WINDOWS\system32\javaws.exe
2010-04-09 18:03:30 ----A---- C:\WINDOWS\system32\javaw.exe
2010-04-09 18:03:29 ----A---- C:\WINDOWS\system32\java.exe
2010-04-07 18:24:51 ----D---- C:\Program Files\Opera
2010-04-07 18:14:50 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-04-07 17:58:41 ----D---- C:\Documents and Settings\Domov\Data aplikací\TeamViewer
2010-04-07 17:58:09 ----D---- C:\Program Files\TeamViewer
2010-04-05 21:39:26 ----D---- C:\Documents and Settings\Domov\Data aplikací\ESET
2010-04-05 21:38:21 ----D---- C:\Program Files\ESET
2010-04-05 21:38:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2010-04-05 16:15:46 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-04-04 01:36:57 ----D---- C:\Program Files\Sanny Builder 3
2010-04-03 02:34:47 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-04-03 00:16:04 ----D---- C:\WINDOWS\system32\install
2010-04-02 01:08:54 ----HD---- C:\WINDOWS\system32\GroupPolicy
2010-04-01 23:15:00 ----HD---- C:\WINDOWS\PIF
2010-04-01 23:05:56 ----A---- C:\WINDOWS\.ini
2010-03-31 22:52:12 ----D---- C:\Keys
2010-03-29 20:04:06 ----D---- C:\Program Files\Common Files\Skype
2010-03-29 19:40:52 ----D---- C:\WINDOWS\system32\NtmsData
2010-03-20 14:54:51 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2010-03-20 14:54:46 ----A---- C:\WINDOWS\system32\pndx5032.dll
2010-03-20 14:54:46 ----A---- C:\WINDOWS\system32\pndx5016.dll
2010-03-20 14:54:35 ----D---- C:\Program Files\Common Files\xing shared
2010-03-20 14:54:10 ----A---- C:\WINDOWS\system32\pncrt.dll
2010-03-20 14:54:08 ----D---- C:\Program Files\Real
2010-03-20 14:54:08 ----D---- C:\Program Files\Common Files\Real
2010-03-20 14:54:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\Real
2010-03-20 14:50:15 ----D---- C:\Documents and Settings\Domov\Data aplikací\Real
2010-03-20 01:20:39 ----D---- C:\Program Files\QuickTime
2010-03-17 19:11:36 ----A---- C:\WINDOWS\GTA-SA_Trn_Settings.ini
2010-03-16 18:51:17 ----D---- C:\Program Files\AVI-GIF
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvmctray.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvmccs.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvcpl.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvcolor.exe
2010-03-16 04:37:44 ----A---- C:\WINDOWS\system32\nvwddi.dll
2010-03-15 12:46:03 ----D---- C:\Program Files\SystemRequirementsLab
2010-03-15 00:03:18 ----D---- C:\Documents and Settings\Domov\Data aplikací\GeoVid
2010-03-15 00:02:33 ----A---- C:\WINDOWS\system32\gdiplus.dll
2010-03-15 00:02:33 ----A---- C:\WINDOWS\system32\dsetup.dll
2010-03-14 23:52:31 ----D---- C:\Program Files\FLV to AVI
2010-03-14 23:46:53 ----D---- C:\Documents and Settings\Domov\Data aplikací\Eltima Software
2010-03-14 23:46:51 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-03-14 23:36:26 ----D---- C:\Program Files\Xvid
2010-03-14 23:36:26 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-03-14 23:36:26 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-03-14 05:42:17 ----D---- C:\Documents and Settings\Domov\Data aplikací\River Past G5
2010-03-14 05:41:25 ----D---- C:\Program Files\River Past
2010-03-14 05:41:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\River Past G5
2010-03-14 02:12:46 ----D---- C:\WINDOWS\Minidump
2010-03-13 19:14:04 ----D---- C:\Documents and Settings\Domov\Data aplikací\com.adobe.ExMan
2010-03-13 01:19:30 ----A---- C:\WINDOWS\Eudcedit.ini
======List of files/folders modified in the last 1 months======
2010-04-11 00:12:53 ----RD---- C:\Program Files
2010-04-11 00:11:33 ----D---- C:\Documents and Settings\Domov\Data aplikací\Skype
2010-04-11 00:11:23 ----D---- C:\WINDOWS\Temp
2010-04-11 00:11:13 ----D---- C:\WINDOWS
2010-04-11 00:10:27 ----D---- C:\Program Files\Steam
2010-04-11 00:10:21 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-11 00:10:03 ----D---- C:\WINDOWS\system32\drivers
2010-04-11 00:08:53 ----SD---- C:\WINDOWS\Tasks
2010-04-10 22:09:39 ----D---- C:\Documents and Settings
2010-04-10 21:54:10 ----D---- C:\WINDOWS\Prefetch
2010-04-10 19:18:43 ----D---- C:\WINDOWS\system32
2010-04-10 18:42:28 ----D---- C:\Program Files\Common Files
2010-04-10 17:03:41 ----D---- C:\Documents and Settings\Domov\Data aplikací\skypePM
2010-04-10 17:01:01 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-10 16:57:58 ----SHD---- C:\System Volume Information
2010-04-10 16:57:58 ----D---- C:\WINDOWS\system32\Restore
2010-04-10 15:35:03 ----RD---- C:\WINDOWS\Web
2010-04-10 15:34:59 ----SHD---- C:\WINDOWS\Installer
2010-04-10 15:34:59 ----D---- C:\Config.Msi
2010-04-10 15:34:22 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-10 14:10:57 ----A---- C:\WINDOWS\system.ini
2010-04-10 14:09:33 ----D---- C:\WINDOWS\system32\config
2010-04-10 14:07:50 ----D---- C:\WINDOWS\AppPatch
2010-04-10 14:03:37 ----RASH---- C:\boot.ini
2010-04-10 13:57:49 ----D---- C:\Program Files\RadioBar
2010-04-09 18:03:05 ----AC---- C:\WINDOWS\system32\deploytk.dll
2010-04-07 23:30:19 ----D---- C:\Documents and Settings\Domov\Data aplikací\Sony
2010-04-06 19:26:23 ----RSD---- C:\WINDOWS\Fonts
2010-04-05 21:39:03 ----HD---- C:\WINDOWS\inf
2010-04-04 20:30:30 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-04 20:29:44 ----D---- C:\GaMe
2010-04-04 02:10:51 ----D---- C:\WINDOWS\system
2010-04-03 21:33:46 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-04-02 01:23:50 ----D---- C:\WINDOWS\security
2010-04-02 01:12:08 ----D---- C:\Program Files\CCleaner
2010-04-02 00:56:25 ----D---- C:\WINDOWS\Registration
2010-04-01 03:02:11 ----D---- C:\Program Files\Internet Explorer
2010-04-01 03:01:52 ----D---- C:\WINDOWS\ie8updates
2010-04-01 03:01:07 ----HD---- C:\WINDOWS\$hf_mig$
2010-03-29 19:40:52 ----D---- C:\WINDOWS\repair
2010-03-29 19:25:24 ----D---- C:\Program Files\Uniblue
2010-03-28 16:40:11 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-20 01:23:21 ----D---- C:\Documents and Settings\Domov\Data aplikací\Apple Computer
2010-03-18 19:32:48 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-03-18 19:32:14 ----D---- C:\WINDOWS\Help
2010-03-18 19:31:22 ----D---- C:\Program Files\NVIDIA Corporation
2010-03-17 19:06:00 ----D---- C:\Fraps
2010-03-16 21:55:56 ----D---- C:\Documents and Settings\Domov\Data aplikací\HLSW
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\OpenCL.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuda.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcodins.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcod.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvapi.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2010-03-14 17:37:38 ----RSD---- C:\WINDOWS\assembly
2010-03-14 05:31:38 ----D---- C:\Documents and Settings\Domov\Data aplikací\Publish Providers
2010-03-14 02:13:49 ----D---- C:\WINDOWS\Debug
2010-03-13 19:21:53 ----D---- C:\Documents and Settings\Domov\Data aplikací\Adobe
2010-03-13 01:23:43 ----A---- C:\WINDOWS\win.ini
2010-03-12 12:26:36 ----A---- C:\WINDOWS\system32\nvuninst.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-02-26 114984]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2010-02-26 55232]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-02-26 139192]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2010-02-26 134488]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2010-02-26 32584]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-07-20 5795328]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-03-16 10232352]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2010-01-28 58600]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-06-05 142336]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-01-13 25280]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-12-19 5854688]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 Nokia USB Generic;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2006-05-29 8704]
S3 Nokia USB Modem;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2006-05-29 13312]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2006-05-29 127488]
S3 PLCMP532;PLCMP532 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PLCMP532.sys []
S3 PLCND532;PLCND532 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PLCND532.sys [2007-08-08 26656]
S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys []
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-02-26 810120]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-09 153376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-03-16 154216]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-03-03 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-04-03 215160]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
R3 ServiceLayer;ServiceLayer; C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe [2006-06-05 174080]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-02-26 33560]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-12-24 655624]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
---------------------------------------------------------------------------------------------
Logfile of random's system information tool 1.06 (written by random/random)
Run by Domov at 2010-04-11 00:12:53
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 42 GB (56%) free of 76 GB
Total RAM: 1023 MB (36% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 0:13:11, on 11.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
C:\program files\steam\steam.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\1.2.183.23\GoogleCrashHandler.exe
C:\GaMe\GTA IV\Rockstar Games Social Club\1_1_3_0\RGSC.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Plocha\RSIT.exe
C:\Program Files\trend micro\Domov.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [RGSC] C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra 'Tools' menuitem: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
--
End of file - 8105 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1993962763-1390067357-839522115-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1993962763-1390067357-839522115-1003.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{D55854C5-0A88-4017-A7E4-1190F32D1C74}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-03-20 341600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-09 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-04-09 79648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-01-03 1019128]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-07-20 18670592]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-12-19 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-12-19 159744]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-12-19 131072]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"PCSuiteTrayApplication"=C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE [2006-06-15 229376]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-03-16 13670504]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-03-16 110696]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-03-20 202256]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-02-26 2140880]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-03-09 26100520]
"Google Update"=C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-12-25 135664]
"RGSC"=C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe [2010-01-07 306088]
"Steam"=c:\program files\steam\steam.exe [2010-02-14 1217808]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe -autorun []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync]
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [2006-06-27 1449984]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UniblueRegistryBooster]
C:\Program Files\Uniblue\RegistryBooster\launcher.exe [2010-03-16 60208]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Domov^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2009-09-16 384512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-12-19 208896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
scecli
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoTaskMng"=1
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe"="C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\GaMe\GTA Vice City\gta-vc.exe"="C:\GaMe\GTA Vice City\gta-vc.exe:*:Enabled:gta-vc"
"C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Program Files\TeamViewer\Version5\TeamViewer.exe"="C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
======List of files/folders created in the last 1 months======
2010-04-11 00:12:53 ----D---- C:\rsit
2010-04-11 00:12:53 ----D---- C:\Program Files\trend micro
2010-04-10 21:38:24 ----D---- C:\Documents and Settings\Domov\Data aplikací\Malwarebytes
2010-04-10 21:38:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-04-10 21:38:10 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-04-10 19:19:02 ----D---- C:\Program Files\Pixelan
2010-04-10 19:18:23 ----D---- C:\Program Files\Sonic Foundry
2010-04-10 19:05:39 ----D---- C:\Program Files\Panopticum Lens Pro 3.5 For Vegas
2010-04-10 19:04:43 ----A---- C:\WINDOWS\unvise32.exe
2010-04-10 19:03:59 ----D---- C:\Program Files\Magic Bullet Editors 2.0 Vegas
2010-04-10 18:50:14 ----D---- C:\Program Files\NewBlue
2010-04-10 18:42:28 ----D---- C:\Program Files\Common Files\eSellerate
2010-04-10 15:33:52 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-10 14:18:07 ----SHD---- C:\RECYCLER
2010-04-10 14:03:37 ----A---- C:\Boot.bak
2010-04-10 14:03:27 ----RASHD---- C:\cmdcons
2010-04-10 13:57:46 ----A---- C:\Documents and Settings\Domov\Data aplikací\toolbar_log.txt
2010-04-10 03:24:19 ----D---- C:\Program Files\MP Software
2010-04-10 03:24:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Rapidshare Search Tool
2010-04-10 02:35:05 ----D---- C:\Documents and Settings\Domov\Data aplikací\DMCache
2010-04-09 18:03:57 ----D---- C:\Program Files\Common Files\Java
2010-04-09 18:03:30 ----A---- C:\WINDOWS\system32\javaws.exe
2010-04-09 18:03:30 ----A---- C:\WINDOWS\system32\javaw.exe
2010-04-09 18:03:29 ----A---- C:\WINDOWS\system32\java.exe
2010-04-07 18:24:51 ----D---- C:\Program Files\Opera
2010-04-07 18:14:50 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-04-07 17:58:41 ----D---- C:\Documents and Settings\Domov\Data aplikací\TeamViewer
2010-04-07 17:58:09 ----D---- C:\Program Files\TeamViewer
2010-04-05 21:39:26 ----D---- C:\Documents and Settings\Domov\Data aplikací\ESET
2010-04-05 21:38:21 ----D---- C:\Program Files\ESET
2010-04-05 21:38:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2010-04-05 16:15:46 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-04-04 01:36:57 ----D---- C:\Program Files\Sanny Builder 3
2010-04-03 02:34:47 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-04-03 00:16:04 ----D---- C:\WINDOWS\system32\install
2010-04-02 01:08:54 ----HD---- C:\WINDOWS\system32\GroupPolicy
2010-04-01 23:15:00 ----HD---- C:\WINDOWS\PIF
2010-04-01 23:05:56 ----A---- C:\WINDOWS\.ini
2010-03-31 22:52:12 ----D---- C:\Keys
2010-03-29 20:04:06 ----D---- C:\Program Files\Common Files\Skype
2010-03-29 19:40:52 ----D---- C:\WINDOWS\system32\NtmsData
2010-03-20 14:54:51 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2010-03-20 14:54:46 ----A---- C:\WINDOWS\system32\pndx5032.dll
2010-03-20 14:54:46 ----A---- C:\WINDOWS\system32\pndx5016.dll
2010-03-20 14:54:35 ----D---- C:\Program Files\Common Files\xing shared
2010-03-20 14:54:10 ----A---- C:\WINDOWS\system32\pncrt.dll
2010-03-20 14:54:08 ----D---- C:\Program Files\Real
2010-03-20 14:54:08 ----D---- C:\Program Files\Common Files\Real
2010-03-20 14:54:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\Real
2010-03-20 14:50:15 ----D---- C:\Documents and Settings\Domov\Data aplikací\Real
2010-03-20 01:20:39 ----D---- C:\Program Files\QuickTime
2010-03-17 19:11:36 ----A---- C:\WINDOWS\GTA-SA_Trn_Settings.ini
2010-03-16 18:51:17 ----D---- C:\Program Files\AVI-GIF
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvmctray.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvmccs.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvcpl.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvcolor.exe
2010-03-16 04:37:44 ----A---- C:\WINDOWS\system32\nvwddi.dll
2010-03-15 12:46:03 ----D---- C:\Program Files\SystemRequirementsLab
2010-03-15 00:03:18 ----D---- C:\Documents and Settings\Domov\Data aplikací\GeoVid
2010-03-15 00:02:33 ----A---- C:\WINDOWS\system32\gdiplus.dll
2010-03-15 00:02:33 ----A---- C:\WINDOWS\system32\dsetup.dll
2010-03-14 23:52:31 ----D---- C:\Program Files\FLV to AVI
2010-03-14 23:46:53 ----D---- C:\Documents and Settings\Domov\Data aplikací\Eltima Software
2010-03-14 23:46:51 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-03-14 23:36:26 ----D---- C:\Program Files\Xvid
2010-03-14 23:36:26 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-03-14 23:36:26 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-03-14 05:42:17 ----D---- C:\Documents and Settings\Domov\Data aplikací\River Past G5
2010-03-14 05:41:25 ----D---- C:\Program Files\River Past
2010-03-14 05:41:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\River Past G5
2010-03-14 02:12:46 ----D---- C:\WINDOWS\Minidump
2010-03-13 19:14:04 ----D---- C:\Documents and Settings\Domov\Data aplikací\com.adobe.ExMan
2010-03-13 01:19:30 ----A---- C:\WINDOWS\Eudcedit.ini
======List of files/folders modified in the last 1 months======
2010-04-11 00:12:53 ----RD---- C:\Program Files
2010-04-11 00:11:33 ----D---- C:\Documents and Settings\Domov\Data aplikací\Skype
2010-04-11 00:11:23 ----D---- C:\WINDOWS\Temp
2010-04-11 00:11:13 ----D---- C:\WINDOWS
2010-04-11 00:10:27 ----D---- C:\Program Files\Steam
2010-04-11 00:10:21 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-11 00:10:03 ----D---- C:\WINDOWS\system32\drivers
2010-04-11 00:08:53 ----SD---- C:\WINDOWS\Tasks
2010-04-10 22:09:39 ----D---- C:\Documents and Settings
2010-04-10 21:54:10 ----D---- C:\WINDOWS\Prefetch
2010-04-10 19:18:43 ----D---- C:\WINDOWS\system32
2010-04-10 18:42:28 ----D---- C:\Program Files\Common Files
2010-04-10 17:03:41 ----D---- C:\Documents and Settings\Domov\Data aplikací\skypePM
2010-04-10 17:01:01 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-10 16:57:58 ----SHD---- C:\System Volume Information
2010-04-10 16:57:58 ----D---- C:\WINDOWS\system32\Restore
2010-04-10 15:35:03 ----RD---- C:\WINDOWS\Web
2010-04-10 15:34:59 ----SHD---- C:\WINDOWS\Installer
2010-04-10 15:34:59 ----D---- C:\Config.Msi
2010-04-10 15:34:22 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-10 14:10:57 ----A---- C:\WINDOWS\system.ini
2010-04-10 14:09:33 ----D---- C:\WINDOWS\system32\config
2010-04-10 14:07:50 ----D---- C:\WINDOWS\AppPatch
2010-04-10 14:03:37 ----RASH---- C:\boot.ini
2010-04-10 13:57:49 ----D---- C:\Program Files\RadioBar
2010-04-09 18:03:05 ----AC---- C:\WINDOWS\system32\deploytk.dll
2010-04-07 23:30:19 ----D---- C:\Documents and Settings\Domov\Data aplikací\Sony
2010-04-06 19:26:23 ----RSD---- C:\WINDOWS\Fonts
2010-04-05 21:39:03 ----HD---- C:\WINDOWS\inf
2010-04-04 20:30:30 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-04 20:29:44 ----D---- C:\GaMe
2010-04-04 02:10:51 ----D---- C:\WINDOWS\system
2010-04-03 21:33:46 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-04-02 01:23:50 ----D---- C:\WINDOWS\security
2010-04-02 01:12:08 ----D---- C:\Program Files\CCleaner
2010-04-02 00:56:25 ----D---- C:\WINDOWS\Registration
2010-04-01 03:02:11 ----D---- C:\Program Files\Internet Explorer
2010-04-01 03:01:52 ----D---- C:\WINDOWS\ie8updates
2010-04-01 03:01:07 ----HD---- C:\WINDOWS\$hf_mig$
2010-03-29 19:40:52 ----D---- C:\WINDOWS\repair
2010-03-29 19:25:24 ----D---- C:\Program Files\Uniblue
2010-03-28 16:40:11 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-20 01:23:21 ----D---- C:\Documents and Settings\Domov\Data aplikací\Apple Computer
2010-03-18 19:32:48 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-03-18 19:32:14 ----D---- C:\WINDOWS\Help
2010-03-18 19:31:22 ----D---- C:\Program Files\NVIDIA Corporation
2010-03-17 19:06:00 ----D---- C:\Fraps
2010-03-16 21:55:56 ----D---- C:\Documents and Settings\Domov\Data aplikací\HLSW
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\OpenCL.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuda.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcodins.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcod.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvapi.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2010-03-14 17:37:38 ----RSD---- C:\WINDOWS\assembly
2010-03-14 05:31:38 ----D---- C:\Documents and Settings\Domov\Data aplikací\Publish Providers
2010-03-14 02:13:49 ----D---- C:\WINDOWS\Debug
2010-03-13 19:21:53 ----D---- C:\Documents and Settings\Domov\Data aplikací\Adobe
2010-03-13 01:23:43 ----A---- C:\WINDOWS\win.ini
2010-03-12 12:26:36 ----A---- C:\WINDOWS\system32\nvuninst.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-02-26 114984]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2010-02-26 55232]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-02-26 139192]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2010-02-26 134488]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2010-02-26 32584]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-07-20 5795328]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-03-16 10232352]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2010-01-28 58600]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-06-05 142336]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-01-13 25280]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-12-19 5854688]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 Nokia USB Generic;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2006-05-29 8704]
S3 Nokia USB Modem;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2006-05-29 13312]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2006-05-29 127488]
S3 PLCMP532;PLCMP532 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PLCMP532.sys []
S3 PLCND532;PLCND532 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PLCND532.sys [2007-08-08 26656]
S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys []
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-02-26 810120]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-09 153376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-03-16 154216]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-03-03 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-04-03 215160]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
R3 ServiceLayer;ServiceLayer; C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe [2006-06-05 174080]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-02-26 33560]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-12-24 655624]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Re: MBAM - Prosím o kontrolu
Vy jste spouštěl combofix?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: MBAM - Prosím o kontrolu
Ano, protože už sem tu řešil jeden problém s vašim kolegou
http://www.viry.cz/forum/viewtopic.php?f=13&t=99850
http://www.viry.cz/forum/viewtopic.php?f=13&t=99850
Re: MBAM - Prosím o kontrolu
To jste tam klidně mohl zůstat, netřeba zakládat nový topic
Po smazání mbamem to vypadá jak? Ten internet se Vám spomalil až po odvirování, nebo to bylo i předtím?
Po smazání mbamem to vypadá jak? Ten internet se Vám spomalil až po odvirování, nebo to bylo i předtím?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: MBAM - Prosím o kontrolu
Ten internet se zpomalil po odvirování, ale vypadá to že internet zas jede jak má
Re: MBAM - Prosím o kontrolu
Ještě Vás poprosím o log ze rsitu
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: MBAM - Prosím o kontrolu
Logfile of random's system information tool 1.06 (written by random/random)
Run by Domov at 2010-04-11 18:11:53
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 42 GB (55%) free of 76 GB
Total RAM: 1023 MB (30% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:11:59, on 11.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
C:\program files\steam\steam.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\1.2.183.23\GoogleCrashHandler.exe
C:\GaMe\GTA IV\Rockstar Games Social Club\1_1_3_0\RGSC.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Plocha\RSIT.exe
C:\Program Files\trend micro\Domov.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [RGSC] C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra 'Tools' menuitem: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
--
End of file - 8058 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1993962763-1390067357-839522115-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1993962763-1390067357-839522115-1003.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{D55854C5-0A88-4017-A7E4-1190F32D1C74}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-03-20 341600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-09 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-04-09 79648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-01-03 1019128]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-07-20 18670592]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-12-19 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-12-19 159744]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-12-19 131072]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"PCSuiteTrayApplication"=C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE [2006-06-15 229376]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-03-16 13670504]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-03-16 110696]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-03-20 202256]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-02-26 2140880]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-03-09 26100520]
"Google Update"=C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-12-25 135664]
"RGSC"=C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe [2010-01-07 306088]
"Steam"=c:\program files\steam\steam.exe [2010-02-14 1217808]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe -autorun []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync]
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [2006-06-27 1449984]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UniblueRegistryBooster]
C:\Program Files\Uniblue\RegistryBooster\launcher.exe [2010-03-16 60208]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Domov^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2009-09-16 384512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-12-19 208896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
scecli
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoTaskMng"=1
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe"="C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\GaMe\GTA Vice City\gta-vc.exe"="C:\GaMe\GTA Vice City\gta-vc.exe:*:Enabled:gta-vc"
"C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Program Files\TeamViewer\Version5\TeamViewer.exe"="C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
======List of files/folders created in the last 1 months======
2010-04-11 18:11:53 ----D---- C:\rsit
2010-04-11 00:12:53 ----D---- C:\Program Files\trend micro
2010-04-10 21:38:24 ----D---- C:\Documents and Settings\Domov\Data aplikací\Malwarebytes
2010-04-10 21:38:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-04-10 21:38:10 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-04-10 19:19:02 ----D---- C:\Program Files\Pixelan
2010-04-10 19:18:23 ----D---- C:\Program Files\Sonic Foundry
2010-04-10 19:05:39 ----D---- C:\Program Files\Panopticum Lens Pro 3.5 For Vegas
2010-04-10 19:04:43 ----A---- C:\WINDOWS\unvise32.exe
2010-04-10 19:03:59 ----D---- C:\Program Files\Magic Bullet Editors 2.0 Vegas
2010-04-10 18:50:14 ----D---- C:\Program Files\NewBlue
2010-04-10 18:42:28 ----D---- C:\Program Files\Common Files\eSellerate
2010-04-10 15:33:52 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-10 14:18:07 ----SHD---- C:\RECYCLER
2010-04-10 14:03:37 ----A---- C:\Boot.bak
2010-04-10 14:03:27 ----RASHD---- C:\cmdcons
2010-04-10 13:57:46 ----A---- C:\Documents and Settings\Domov\Data aplikací\toolbar_log.txt
2010-04-10 03:24:19 ----D---- C:\Program Files\MP Software
2010-04-10 03:24:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Rapidshare Search Tool
2010-04-10 02:35:05 ----D---- C:\Documents and Settings\Domov\Data aplikací\DMCache
2010-04-09 18:03:57 ----D---- C:\Program Files\Common Files\Java
2010-04-09 18:03:30 ----A---- C:\WINDOWS\system32\javaws.exe
2010-04-09 18:03:30 ----A---- C:\WINDOWS\system32\javaw.exe
2010-04-09 18:03:29 ----A---- C:\WINDOWS\system32\java.exe
2010-04-07 18:24:51 ----D---- C:\Program Files\Opera
2010-04-07 18:14:50 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-04-07 17:58:41 ----D---- C:\Documents and Settings\Domov\Data aplikací\TeamViewer
2010-04-07 17:58:09 ----D---- C:\Program Files\TeamViewer
2010-04-05 21:39:26 ----D---- C:\Documents and Settings\Domov\Data aplikací\ESET
2010-04-05 21:38:21 ----D---- C:\Program Files\ESET
2010-04-05 21:38:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2010-04-05 16:15:46 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-04-04 01:36:57 ----D---- C:\Program Files\Sanny Builder 3
2010-04-03 02:34:47 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-04-03 00:16:04 ----D---- C:\WINDOWS\system32\install
2010-04-02 01:08:54 ----HD---- C:\WINDOWS\system32\GroupPolicy
2010-04-01 23:15:00 ----HD---- C:\WINDOWS\PIF
2010-04-01 23:05:56 ----A---- C:\WINDOWS\.ini
2010-03-31 22:52:12 ----D---- C:\Keys
2010-03-29 20:04:06 ----D---- C:\Program Files\Common Files\Skype
2010-03-29 19:40:52 ----D---- C:\WINDOWS\system32\NtmsData
2010-03-20 14:54:51 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2010-03-20 14:54:46 ----A---- C:\WINDOWS\system32\pndx5032.dll
2010-03-20 14:54:46 ----A---- C:\WINDOWS\system32\pndx5016.dll
2010-03-20 14:54:35 ----D---- C:\Program Files\Common Files\xing shared
2010-03-20 14:54:10 ----A---- C:\WINDOWS\system32\pncrt.dll
2010-03-20 14:54:08 ----D---- C:\Program Files\Real
2010-03-20 14:54:08 ----D---- C:\Program Files\Common Files\Real
2010-03-20 14:54:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\Real
2010-03-20 14:50:15 ----D---- C:\Documents and Settings\Domov\Data aplikací\Real
2010-03-20 01:20:39 ----D---- C:\Program Files\QuickTime
2010-03-17 19:11:36 ----A---- C:\WINDOWS\GTA-SA_Trn_Settings.ini
2010-03-16 18:51:17 ----D---- C:\Program Files\AVI-GIF
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvmctray.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvmccs.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvcpl.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvcolor.exe
2010-03-16 04:37:44 ----A---- C:\WINDOWS\system32\nvwddi.dll
2010-03-15 12:46:03 ----D---- C:\Program Files\SystemRequirementsLab
2010-03-15 00:03:18 ----D---- C:\Documents and Settings\Domov\Data aplikací\GeoVid
2010-03-15 00:02:33 ----A---- C:\WINDOWS\system32\gdiplus.dll
2010-03-15 00:02:33 ----A---- C:\WINDOWS\system32\dsetup.dll
2010-03-14 23:52:31 ----D---- C:\Program Files\FLV to AVI
2010-03-14 23:46:53 ----D---- C:\Documents and Settings\Domov\Data aplikací\Eltima Software
2010-03-14 23:46:51 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-03-14 23:36:26 ----D---- C:\Program Files\Xvid
2010-03-14 23:36:26 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-03-14 23:36:26 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-03-14 05:42:17 ----D---- C:\Documents and Settings\Domov\Data aplikací\River Past G5
2010-03-14 05:41:25 ----D---- C:\Program Files\River Past
2010-03-14 05:41:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\River Past G5
2010-03-14 02:12:46 ----D---- C:\WINDOWS\Minidump
2010-03-13 19:14:04 ----D---- C:\Documents and Settings\Domov\Data aplikací\com.adobe.ExMan
2010-03-13 01:19:30 ----A---- C:\WINDOWS\Eudcedit.ini
======List of files/folders modified in the last 1 months======
2010-04-11 18:11:59 ----D---- C:\WINDOWS\Temp
2010-04-11 18:10:43 ----SD---- C:\WINDOWS\Tasks
2010-04-11 18:03:58 ----D---- C:\Documents and Settings\Domov\Data aplikací\Skype
2010-04-11 17:17:11 ----D---- C:\WINDOWS\Prefetch
2010-04-11 15:48:04 ----D---- C:\Program Files\Steam
2010-04-11 05:39:29 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-11 03:17:08 ----D---- C:\Documents and Settings\Domov\Data aplikací\skypePM
2010-04-11 03:15:31 ----D---- C:\Program Files\WinRAR
2010-04-11 01:50:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-11 01:49:45 ----D---- C:\GaMe
2010-04-11 00:12:53 ----RD---- C:\Program Files
2010-04-11 00:11:13 ----D---- C:\WINDOWS
2010-04-11 00:10:03 ----D---- C:\WINDOWS\system32\drivers
2010-04-10 22:09:39 ----D---- C:\Documents and Settings
2010-04-10 19:18:43 ----D---- C:\WINDOWS\system32
2010-04-10 18:42:28 ----D---- C:\Program Files\Common Files
2010-04-10 17:01:01 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-10 16:57:58 ----SHD---- C:\System Volume Information
2010-04-10 16:57:58 ----D---- C:\WINDOWS\system32\Restore
2010-04-10 15:35:03 ----RD---- C:\WINDOWS\Web
2010-04-10 15:34:59 ----SHD---- C:\WINDOWS\Installer
2010-04-10 15:34:59 ----D---- C:\Config.Msi
2010-04-10 15:34:22 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-10 14:10:57 ----A---- C:\WINDOWS\system.ini
2010-04-10 14:09:33 ----D---- C:\WINDOWS\system32\config
2010-04-10 14:07:50 ----D---- C:\WINDOWS\AppPatch
2010-04-10 14:03:37 ----RASH---- C:\boot.ini
2010-04-10 13:57:49 ----D---- C:\Program Files\RadioBar
2010-04-09 18:03:05 ----AC---- C:\WINDOWS\system32\deploytk.dll
2010-04-07 23:30:19 ----D---- C:\Documents and Settings\Domov\Data aplikací\Sony
2010-04-06 19:26:23 ----RSD---- C:\WINDOWS\Fonts
2010-04-05 21:39:03 ----HD---- C:\WINDOWS\inf
2010-04-04 02:10:51 ----D---- C:\WINDOWS\system
2010-04-03 21:33:46 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-04-02 01:23:50 ----D---- C:\WINDOWS\security
2010-04-02 01:12:08 ----D---- C:\Program Files\CCleaner
2010-04-02 00:56:25 ----D---- C:\WINDOWS\Registration
2010-04-01 03:02:11 ----D---- C:\Program Files\Internet Explorer
2010-04-01 03:01:52 ----D---- C:\WINDOWS\ie8updates
2010-04-01 03:01:07 ----HD---- C:\WINDOWS\$hf_mig$
2010-03-29 19:40:52 ----D---- C:\WINDOWS\repair
2010-03-29 19:25:24 ----D---- C:\Program Files\Uniblue
2010-03-28 16:40:11 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-20 01:23:21 ----D---- C:\Documents and Settings\Domov\Data aplikací\Apple Computer
2010-03-18 19:32:48 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-03-18 19:32:14 ----D---- C:\WINDOWS\Help
2010-03-18 19:31:22 ----D---- C:\Program Files\NVIDIA Corporation
2010-03-17 19:06:00 ----D---- C:\Fraps
2010-03-16 21:55:56 ----D---- C:\Documents and Settings\Domov\Data aplikací\HLSW
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\OpenCL.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuda.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcodins.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcod.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvapi.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2010-03-14 17:37:38 ----RSD---- C:\WINDOWS\assembly
2010-03-14 05:31:38 ----D---- C:\Documents and Settings\Domov\Data aplikací\Publish Providers
2010-03-14 02:13:49 ----D---- C:\WINDOWS\Debug
2010-03-13 19:21:53 ----D---- C:\Documents and Settings\Domov\Data aplikací\Adobe
2010-03-13 01:23:43 ----A---- C:\WINDOWS\win.ini
2010-03-12 12:26:36 ----A---- C:\WINDOWS\system32\nvuninst.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-02-26 114984]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2010-02-26 55232]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-02-26 139192]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2010-02-26 134488]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2010-02-26 32584]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-07-20 5795328]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-03-16 10232352]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2010-01-28 58600]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-06-05 142336]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-01-13 25280]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-12-19 5854688]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 Nokia USB Generic;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2006-05-29 8704]
S3 Nokia USB Modem;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2006-05-29 13312]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2006-05-29 127488]
S3 PLCMP532;PLCMP532 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PLCMP532.sys []
S3 PLCND532;PLCND532 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PLCND532.sys [2007-08-08 26656]
S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys []
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-02-26 810120]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-09 153376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-03-16 154216]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-03-03 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-04-03 215160]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
R3 ServiceLayer;ServiceLayer; C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe [2006-06-05 174080]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-02-26 33560]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-12-24 655624]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Run by Domov at 2010-04-11 18:11:53
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 42 GB (55%) free of 76 GB
Total RAM: 1023 MB (30% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:11:59, on 11.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
C:\program files\steam\steam.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\1.2.183.23\GoogleCrashHandler.exe
C:\GaMe\GTA IV\Rockstar Games Social Club\1_1_3_0\RGSC.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Domov\Plocha\RSIT.exe
C:\Program Files\trend micro\Domov.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [RGSC] C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra 'Tools' menuitem: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
--
End of file - 8058 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1993962763-1390067357-839522115-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1993962763-1390067357-839522115-1003.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{D55854C5-0A88-4017-A7E4-1190F32D1C74}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-03-20 341600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-09 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-04-09 79648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-01-03 1019128]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-07-20 18670592]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-12-19 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-12-19 159744]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-12-19 131072]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"PCSuiteTrayApplication"=C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE [2006-06-15 229376]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-03-16 13670504]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-03-16 110696]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-03-20 202256]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-02-26 2140880]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-03-09 26100520]
"Google Update"=C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-12-25 135664]
"RGSC"=C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe [2010-01-07 306088]
"Steam"=c:\program files\steam\steam.exe [2010-02-14 1217808]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe -autorun []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync]
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [2006-06-27 1449984]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UniblueRegistryBooster]
C:\Program Files\Uniblue\RegistryBooster\launcher.exe [2010-03-16 60208]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Domov^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2009-09-16 384512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-12-19 208896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
scecli
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoTaskMng"=1
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe"="C:\GaMe\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\GaMe\GTA Vice City\gta-vc.exe"="C:\GaMe\GTA Vice City\gta-vc.exe:*:Enabled:gta-vc"
"C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Program Files\TeamViewer\Version5\TeamViewer.exe"="C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
======List of files/folders created in the last 1 months======
2010-04-11 18:11:53 ----D---- C:\rsit
2010-04-11 00:12:53 ----D---- C:\Program Files\trend micro
2010-04-10 21:38:24 ----D---- C:\Documents and Settings\Domov\Data aplikací\Malwarebytes
2010-04-10 21:38:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-04-10 21:38:10 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-04-10 19:19:02 ----D---- C:\Program Files\Pixelan
2010-04-10 19:18:23 ----D---- C:\Program Files\Sonic Foundry
2010-04-10 19:05:39 ----D---- C:\Program Files\Panopticum Lens Pro 3.5 For Vegas
2010-04-10 19:04:43 ----A---- C:\WINDOWS\unvise32.exe
2010-04-10 19:03:59 ----D---- C:\Program Files\Magic Bullet Editors 2.0 Vegas
2010-04-10 18:50:14 ----D---- C:\Program Files\NewBlue
2010-04-10 18:42:28 ----D---- C:\Program Files\Common Files\eSellerate
2010-04-10 15:33:52 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-10 14:18:07 ----SHD---- C:\RECYCLER
2010-04-10 14:03:37 ----A---- C:\Boot.bak
2010-04-10 14:03:27 ----RASHD---- C:\cmdcons
2010-04-10 13:57:46 ----A---- C:\Documents and Settings\Domov\Data aplikací\toolbar_log.txt
2010-04-10 03:24:19 ----D---- C:\Program Files\MP Software
2010-04-10 03:24:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Rapidshare Search Tool
2010-04-10 02:35:05 ----D---- C:\Documents and Settings\Domov\Data aplikací\DMCache
2010-04-09 18:03:57 ----D---- C:\Program Files\Common Files\Java
2010-04-09 18:03:30 ----A---- C:\WINDOWS\system32\javaws.exe
2010-04-09 18:03:30 ----A---- C:\WINDOWS\system32\javaw.exe
2010-04-09 18:03:29 ----A---- C:\WINDOWS\system32\java.exe
2010-04-07 18:24:51 ----D---- C:\Program Files\Opera
2010-04-07 18:14:50 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-04-07 17:58:41 ----D---- C:\Documents and Settings\Domov\Data aplikací\TeamViewer
2010-04-07 17:58:09 ----D---- C:\Program Files\TeamViewer
2010-04-05 21:39:26 ----D---- C:\Documents and Settings\Domov\Data aplikací\ESET
2010-04-05 21:38:21 ----D---- C:\Program Files\ESET
2010-04-05 21:38:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2010-04-05 16:15:46 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-04-04 01:36:57 ----D---- C:\Program Files\Sanny Builder 3
2010-04-03 02:34:47 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-04-03 00:16:04 ----D---- C:\WINDOWS\system32\install
2010-04-02 01:08:54 ----HD---- C:\WINDOWS\system32\GroupPolicy
2010-04-01 23:15:00 ----HD---- C:\WINDOWS\PIF
2010-04-01 23:05:56 ----A---- C:\WINDOWS\.ini
2010-03-31 22:52:12 ----D---- C:\Keys
2010-03-29 20:04:06 ----D---- C:\Program Files\Common Files\Skype
2010-03-29 19:40:52 ----D---- C:\WINDOWS\system32\NtmsData
2010-03-20 14:54:51 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2010-03-20 14:54:46 ----A---- C:\WINDOWS\system32\pndx5032.dll
2010-03-20 14:54:46 ----A---- C:\WINDOWS\system32\pndx5016.dll
2010-03-20 14:54:35 ----D---- C:\Program Files\Common Files\xing shared
2010-03-20 14:54:10 ----A---- C:\WINDOWS\system32\pncrt.dll
2010-03-20 14:54:08 ----D---- C:\Program Files\Real
2010-03-20 14:54:08 ----D---- C:\Program Files\Common Files\Real
2010-03-20 14:54:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\Real
2010-03-20 14:50:15 ----D---- C:\Documents and Settings\Domov\Data aplikací\Real
2010-03-20 01:20:39 ----D---- C:\Program Files\QuickTime
2010-03-17 19:11:36 ----A---- C:\WINDOWS\GTA-SA_Trn_Settings.ini
2010-03-16 18:51:17 ----D---- C:\Program Files\AVI-GIF
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvmctray.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvmccs.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvcpl.dll
2010-03-16 04:37:50 ----A---- C:\WINDOWS\system32\nvcolor.exe
2010-03-16 04:37:44 ----A---- C:\WINDOWS\system32\nvwddi.dll
2010-03-15 12:46:03 ----D---- C:\Program Files\SystemRequirementsLab
2010-03-15 00:03:18 ----D---- C:\Documents and Settings\Domov\Data aplikací\GeoVid
2010-03-15 00:02:33 ----A---- C:\WINDOWS\system32\gdiplus.dll
2010-03-15 00:02:33 ----A---- C:\WINDOWS\system32\dsetup.dll
2010-03-14 23:52:31 ----D---- C:\Program Files\FLV to AVI
2010-03-14 23:46:53 ----D---- C:\Documents and Settings\Domov\Data aplikací\Eltima Software
2010-03-14 23:46:51 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-03-14 23:36:26 ----D---- C:\Program Files\Xvid
2010-03-14 23:36:26 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-03-14 23:36:26 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-03-14 05:42:17 ----D---- C:\Documents and Settings\Domov\Data aplikací\River Past G5
2010-03-14 05:41:25 ----D---- C:\Program Files\River Past
2010-03-14 05:41:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\River Past G5
2010-03-14 02:12:46 ----D---- C:\WINDOWS\Minidump
2010-03-13 19:14:04 ----D---- C:\Documents and Settings\Domov\Data aplikací\com.adobe.ExMan
2010-03-13 01:19:30 ----A---- C:\WINDOWS\Eudcedit.ini
======List of files/folders modified in the last 1 months======
2010-04-11 18:11:59 ----D---- C:\WINDOWS\Temp
2010-04-11 18:10:43 ----SD---- C:\WINDOWS\Tasks
2010-04-11 18:03:58 ----D---- C:\Documents and Settings\Domov\Data aplikací\Skype
2010-04-11 17:17:11 ----D---- C:\WINDOWS\Prefetch
2010-04-11 15:48:04 ----D---- C:\Program Files\Steam
2010-04-11 05:39:29 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-11 03:17:08 ----D---- C:\Documents and Settings\Domov\Data aplikací\skypePM
2010-04-11 03:15:31 ----D---- C:\Program Files\WinRAR
2010-04-11 01:50:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-11 01:49:45 ----D---- C:\GaMe
2010-04-11 00:12:53 ----RD---- C:\Program Files
2010-04-11 00:11:13 ----D---- C:\WINDOWS
2010-04-11 00:10:03 ----D---- C:\WINDOWS\system32\drivers
2010-04-10 22:09:39 ----D---- C:\Documents and Settings
2010-04-10 19:18:43 ----D---- C:\WINDOWS\system32
2010-04-10 18:42:28 ----D---- C:\Program Files\Common Files
2010-04-10 17:01:01 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-10 16:57:58 ----SHD---- C:\System Volume Information
2010-04-10 16:57:58 ----D---- C:\WINDOWS\system32\Restore
2010-04-10 15:35:03 ----RD---- C:\WINDOWS\Web
2010-04-10 15:34:59 ----SHD---- C:\WINDOWS\Installer
2010-04-10 15:34:59 ----D---- C:\Config.Msi
2010-04-10 15:34:22 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-10 14:10:57 ----A---- C:\WINDOWS\system.ini
2010-04-10 14:09:33 ----D---- C:\WINDOWS\system32\config
2010-04-10 14:07:50 ----D---- C:\WINDOWS\AppPatch
2010-04-10 14:03:37 ----RASH---- C:\boot.ini
2010-04-10 13:57:49 ----D---- C:\Program Files\RadioBar
2010-04-09 18:03:05 ----AC---- C:\WINDOWS\system32\deploytk.dll
2010-04-07 23:30:19 ----D---- C:\Documents and Settings\Domov\Data aplikací\Sony
2010-04-06 19:26:23 ----RSD---- C:\WINDOWS\Fonts
2010-04-05 21:39:03 ----HD---- C:\WINDOWS\inf
2010-04-04 02:10:51 ----D---- C:\WINDOWS\system
2010-04-03 21:33:46 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-04-02 01:23:50 ----D---- C:\WINDOWS\security
2010-04-02 01:12:08 ----D---- C:\Program Files\CCleaner
2010-04-02 00:56:25 ----D---- C:\WINDOWS\Registration
2010-04-01 03:02:11 ----D---- C:\Program Files\Internet Explorer
2010-04-01 03:01:52 ----D---- C:\WINDOWS\ie8updates
2010-04-01 03:01:07 ----HD---- C:\WINDOWS\$hf_mig$
2010-03-29 19:40:52 ----D---- C:\WINDOWS\repair
2010-03-29 19:25:24 ----D---- C:\Program Files\Uniblue
2010-03-28 16:40:11 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-20 01:23:21 ----D---- C:\Documents and Settings\Domov\Data aplikací\Apple Computer
2010-03-18 19:32:48 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-03-18 19:32:14 ----D---- C:\WINDOWS\Help
2010-03-18 19:31:22 ----D---- C:\Program Files\NVIDIA Corporation
2010-03-17 19:06:00 ----D---- C:\Fraps
2010-03-16 21:55:56 ----D---- C:\Documents and Settings\Domov\Data aplikací\HLSW
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\OpenCL.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcuda.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcodins.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvcod.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nvapi.dll
2010-03-16 08:51:59 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2010-03-14 17:37:38 ----RSD---- C:\WINDOWS\assembly
2010-03-14 05:31:38 ----D---- C:\Documents and Settings\Domov\Data aplikací\Publish Providers
2010-03-14 02:13:49 ----D---- C:\WINDOWS\Debug
2010-03-13 19:21:53 ----D---- C:\Documents and Settings\Domov\Data aplikací\Adobe
2010-03-13 01:23:43 ----A---- C:\WINDOWS\win.ini
2010-03-12 12:26:36 ----A---- C:\WINDOWS\system32\nvuninst.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-02-26 114984]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2010-02-26 55232]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 cpuz132;cpuz132; \??\C:\WINDOWS\system32\drivers\cpuz132_x32.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-02-26 139192]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2010-02-26 134488]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2010-02-26 32584]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-07-20 5795328]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-03-16 10232352]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2010-01-28 58600]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-06-05 142336]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-01-13 25280]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-12-19 5854688]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 Nokia USB Generic;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2006-05-29 8704]
S3 Nokia USB Modem;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2006-05-29 13312]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2006-05-29 127488]
S3 PLCMP532;PLCMP532 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PLCMP532.sys []
S3 PLCND532;PLCND532 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PLCND532.sys [2007-08-08 26656]
S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys []
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-02-26 810120]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-09 153376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-03-16 154216]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-03-03 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-04-03 215160]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
R3 ServiceLayer;ServiceLayer; C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe [2006-06-05 174080]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-02-26 33560]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-12-24 655624]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Re: MBAM - Prosím o kontrolu
Používáte Icq toolbar? Pokud ne, odinstalujte ho přes CCleaner - záložka nástroje - odinstalovat můžete vypnout spouštění programů po startu a v případě potřeby spouštět ručně, počítač bude nabíhat rychleji .V ccleaneru - nástroje - start - můžete zakázat
AdobeCS4ServiceManager]
[Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
[Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
[TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe
[SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
[Google Update] "C:\Documents and Settings\Domov\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
[Steam] "c:\program files\steam\steam.exe" -silent
Nemáte firewall,k čemu je užitečný se dozvíte zde http://www.viry.cz/forum/viewtopic.php?f=41&t=20980 Jsou s počítačem ještě nějaké problémy?Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: MBAM - Prosím o kontrolu
Firewall mám základní kdyžtak si stáhnu ten Kerio, jinak jde všechno jak má, děkuji všem za pomoc
Re: MBAM - Prosím o kontrolu
není zač
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Přispějete na provoz fóra?