zničeho nic, trojan a červ

[Caroprd111]

Spusťte OTL a do spodního okna vložte následující skript.

Kód: Vybrat vše

:OTL
O32 - AutoRun File - [2009.03.02 23:06:59 | 000,000,000 | R--D | M] - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009.03.02 23:06:59 | 000,000,000 | ---D | M] - F:\autorun.inf -- [ NTFS ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TEMP:DFC5A2B2

:Reg
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\drivers\svchost.exe" =-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\drivers\svchost.exe" =-

:Files
C:\Program Files\ESET\ESET NOD32 Antivirus

:Services
ESET HTTP Server
ESET Service 

Poté klikněte na Opravit, PC se restartuje, log vložte sem.

[jakubsach]

provedl jsem to vykoplo to log, mám vložit ještě nějakej novej, restart to neprovedlo

========== OTL ==========
File not found.
File not found.
C:\WINDOWS\msdownld.tmp folder deleted successfully.
C:\WINDOWS\SET3.tmp deleted successfully.
C:\WINDOWS\SET4.tmp deleted successfully.
C:\WINDOWS\SET8.tmp deleted successfully.
ADS C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TEMP:DFC5A2B2 deleted successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\%windir%\system32\drivers\svchost.exe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\%windir%\system32\drivers\svchost.exe deleted successfully.
========== FILES ==========
C:\Program Files\ESET\ESET NOD32 Antivirus folder moved successfully.
========== SERVICES/DRIVERS ==========
Error: No service named ESET HTTP Server was found to stop!
Service\Driver key ESET HTTP Server not found.
Error: No service named ESET Service was found to stop!
Service\Driver key ESET Service not found.

OTL by OldTimer - Version 3.2.1.1 log created on 04122010_222059

[Caroprd111]

Jak to vypadá s PC

[jakubsach]

je v pohodě.
tady je rychlej scan

OTL logfile created on: 12.4.2010 22:26:37 - Run 2
OTL by OldTimer - Version 3.2.1.1 Folder = C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Dokumenty\Stažené soubory
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1 024,00 Mb Total Physical Memory | 489,00 Mb Available Physical Memory | 48,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 80,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 76,33 Gb Total Space | 30,48 Gb Free Space | 39,93% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
Drive F: | 74,53 Gb Total Space | 1,96 Gb Free Space | 2,62% Space Free | Partition Type: NTFS
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: JAKUB-B72ACBE07
Current User Name: Jakub
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010.04.11 22:59:36 | 000,561,664 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Dokumenty\Stažené soubory\OTL.exe
PRC - [2010.04.08 22:38:34 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009.11.25 01:51:40 | 000,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009.11.25 01:51:35 | 000,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009.11.25 01:51:21 | 000,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2009.11.25 01:48:48 | 000,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009.11.25 01:43:56 | 000,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2009.04.21 14:44:30 | 001,435,488 | ---- | M] (Nullsoft) -- C:\Program Files\Winamp\winamp.exe
PRC - [2008.09.04 06:02:24 | 001,295,616 | ---- | M] (O&O Software GmbH) -- C:\WINDOWS\system32\oodag.exe
PRC - [2008.09.01 00:50:20 | 000,062,848 | ---- | M] (CANON INC.) -- C:\WINDOWS\system32\CNAB4RPK.EXE
PRC - [2007.06.13 15:23:39 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006.01.02 16:41:22 | 000,045,056 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
PRC - [2005.05.11 02:46:02 | 000,200,069 | ---- | M] (Team H2O) -- C:\Program Files\Syncrosoft\POS\H2O\cledx.exe
PRC - [2002.09.20 16:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe


========== Modules (SafeList) ==========

MOD - [2010.04.11 22:59:36 | 000,561,664 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Dokumenty\Stažené soubory\OTL.exe
MOD - [2006.08.25 17:51:20 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - [2009.11.25 01:51:35 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus)
SRV - [2009.11.25 01:51:21 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV - [2009.11.25 01:48:48 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV - [2009.11.25 01:43:56 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv)
SRV - [2009.03.22 12:39:15 | 000,655,360 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2008.09.04 06:02:24 | 001,295,616 | ---- | M] (O&O Software GmbH) [Auto | Running] -- C:\WINDOWS\system32\oodag.exe -- (O&O Defrag)
SRV - [2008.07.29 19:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2002.09.20 16:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) [Auto | Running] -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default))


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.startup.homepage: "www.google.com"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.04.08 22:38:40 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.04.08 22:38:40 | 000,000,000 | ---D | M]

[2009.04.05 10:54:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\Mozilla\Extensions
[2010.04.11 14:19:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\Mozilla\Firefox\Profiles\fqlqu7yq.default\extensions
[2009.09.02 22:11:30 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\Mozilla\Firefox\Profiles\fqlqu7yq.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009.05.29 19:41:02 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2007.07.26 12:05:16 | 000,001,329 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml
[2010.02.28 14:47:13 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.02.28 14:47:13 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2010.02.28 14:47:13 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010.02.28 14:47:13 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010.02.28 14:47:13 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2010.04.10 12:21:43 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\HOSTS
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Podpora odkazu pro Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [H2O] C:\Program Files\Syncrosoft\POS\H2O\cledx.exe (Team H2O)
O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\RunOnce: [WIAWizardMenu] C:\WINDOWS\System32\sti_ci.DLL (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést cíl vazby do existujícího PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést do Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést výběr do Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést výběr do existujícího PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést vybrané vazby do Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést vybrané vazby do existujícího PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Přidat do stávajícího PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Zobrazit originál - C:\Program Files\VOLNY\akcelerator\original.htm ()
O8 - Extra context menu item: Zobrazit vše jako originál - C:\Program Files\VOLNY\akcelerator\originalall.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_13)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.03.02 23:06:59 | 000,000,000 | R--D | M] - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009.03.02 23:06:59 | 000,000,000 | ---D | M] - F:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{928b6e16-fbd8-11de-a356-000c6ee59751}\Shell - "" = AutoRun
O33 - MountPoints2\{928b6e16-fbd8-11de-a356-000c6ee59751}\Shell\AutoRun\command - "" = E:\WD SmartWare.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (OODBS) - C:\WINDOWS\System32\OODBS.exe (O&O Software GmbH)
O34 - HKLM BootExecute: (d) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 14 Days ==========

[2010.04.12 22:20:59 | 000,000,000 | ---D | C] -- C:\_OTL
[2010.04.11 23:20:01 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Recent
[2010.04.11 17:48:54 | 000,000,000 | ---D | C] -- C:\rsit
[2010.04.11 15:00:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Plocha\akce
[2010.04.11 14:50:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Plocha\duben stavba
[2010.04.10 13:37:13 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.04.10 13:03:38 | 000,000,000 | ---D | C] -- C:\rafazon
[2010.04.07 23:03:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\FontCreator
[2010.04.05 14:33:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Plocha\inpirace obal
[2010.04.03 23:45:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Plocha\rw2
[2010.04.01 07:50:29 | 000,000,000 | ---D | C] -- C:\Program Files\Rising Research
[2009.04.03 22:56:56 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\pcouffin.sys
[2008.09.29 19:49:05 | 000,090,112 | R--- | C] (Axesstel) -- C:\Program Files\axesstel.dll
[2008.04.06 12:05:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Microsoft
[2006.08.06 21:16:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Microsoft
[2006.08.06 21:15:12 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Data aplikací\Microsoft
[2006.08.06 21:15:12 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Data aplikací\Microsoft

========== Files - Modified Within 14 Days ==========

[2010.04.12 22:15:20 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.04.12 22:14:36 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.04.12 22:14:28 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.04.12 22:14:18 | 1073,319,936 | -HS- | M] () -- C:\hiberfil.sys
[2010.04.12 22:14:15 | 001,117,375 | ---- | M] () -- C:\WINDOWS\System32\oodbs.lor
[2010.04.11 23:45:13 | 014,942,208 | ---- | M] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\ntuser.dat
[2010.04.11 23:45:07 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\ntuser.ini
[2010.04.11 23:23:23 | 000,000,544 | ---- | M] () -- C:\WINDOWS\zipgenius.xml
[2010.04.11 15:07:56 | 000,002,561 | ---- | M] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Plocha\Microsoft Office Word 2003 (2).lnk
[2010.04.10 14:28:54 | 000,005,281 | ---- | M] () -- C:\WINDOWS\wincmd.ini
[2010.04.10 13:46:54 | 000,000,020 | ---- | M] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\defogger_reenable
[2010.04.10 13:32:36 | 000,000,048 | ---- | M] () -- C:\WINDOWS\rafazon.bat
[2010.04.10 12:22:10 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010.04.08 22:40:58 | 000,000,146 | ---- | M] () -- C:\WINDOWS\fcp5.cfg
[2010.04.06 22:49:37 | 001,476,184 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.04.05 22:44:36 | 000,034,768 | ---- | M] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Local Settings\Data aplikací\GDIPFONTCACHEV1.DAT
[2010.04.04 21:06:38 | 000,000,269 | ---- | M] () -- C:\WINDOWS\LEXICON.INI
[2010.04.03 14:23:58 | 000,002,780 | ---- | M] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\mainhst.zgh
[2010.04.01 23:12:53 | 000,042,496 | ---- | M] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Plocha\Jak na MYSPACE.doc

========== Files Created - No Company Name ==========

[2010.04.10 13:46:43 | 000,000,020 | ---- | C] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\defogger_reenable
[2010.04.10 13:20:06 | 1073,319,936 | -HS- | C] () -- C:\hiberfil.sys
[2010.04.10 13:03:39 | 000,000,048 | ---- | C] () -- C:\WINDOWS\rafazon.bat
[2010.04.07 23:03:40 | 000,000,146 | ---- | C] () -- C:\WINDOWS\fcp5.cfg
[2010.04.01 23:12:53 | 000,042,496 | ---- | C] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Plocha\Jak na MYSPACE.doc
[2010.02.21 12:08:41 | 000,000,121 | ---- | C] () -- C:\WINDOWS\disckeys.ini
[2009.10.23 23:21:19 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009.10.09 19:51:38 | 000,035,328 | ---- | C] () -- C:\WINDOWS\System32\SYNSOACC.dll
[2009.09.29 20:50:26 | 014,942,208 | ---- | C] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\ntuser.dat
[2009.09.09 18:15:26 | 000,000,118 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2009.08.22 18:32:41 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\wiaserva.log
[2009.07.24 22:41:49 | 000,000,269 | ---- | C] () -- C:\WINDOWS\LEXICON.INI
[2009.07.20 17:23:11 | 000,000,054 | ---- | C] () -- C:\WINDOWS\Musician.INI
[2009.06.17 21:58:34 | 000,001,160 | ---- | C] () -- C:\WINDOWS\ARCHPR.INI
[2009.06.12 18:12:58 | 000,001,024 | ---- | C] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\.rnd
[2009.06.09 20:03:54 | 000,000,034 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2009.06.07 13:42:25 | 000,005,281 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2009.06.02 20:59:20 | 000,044,098 | ---- | C] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\usrlgo.bmp
[2009.05.29 17:10:48 | 000,000,074 | ---- | C] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\default.pls
[2009.05.08 19:53:54 | 000,035,328 | ---- | C] () -- C:\WINDOWS\System32\cygz.dll
[2009.05.08 19:53:54 | 000,035,328 | ---- | C] () -- C:\WINDOWS\cygz.dll
[2009.04.19 21:58:40 | 000,000,082 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2009.04.11 21:02:29 | 000,002,780 | ---- | C] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\mainhst.zgh
[2009.04.10 22:21:18 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009.04.03 22:57:10 | 000,000,034 | ---- | C] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\pcouffin.log
[2009.04.03 22:56:56 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\pcouffin.cat
[2009.04.03 22:56:56 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\pcouffin.inf
[2009.04.02 19:30:23 | 000,003,572 | ---- | C] () -- C:\WINDOWS\System32\CNAB4UN.INI
[2009.04.01 18:56:02 | 000,000,532 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI
[2009.04.01 18:54:50 | 000,000,021 | ---- | C] () -- C:\WINDOWS\PS_setup.ini
[2009.03.30 22:36:36 | 000,000,390 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009.03.29 12:51:36 | 000,003,289 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2009.03.29 12:51:29 | 000,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2009.03.29 12:18:55 | 000,146,944 | ---- | C] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.03.28 13:39:07 | 000,001,024 | -H-- | C] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\ntuser.dat.LOG
[2009.03.28 13:39:07 | 000,000,178 | -HS- | C] () -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\ntuser.ini
[2008.10.07 09:13:30 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2008.10.07 09:13:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2008.09.29 19:49:05 | 000,118,784 | R--- | C] () -- C:\Program Files\MSP_Uninstall.exe
[2005.10.14 12:56:50 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\VorbisEnc.dll
[2005.10.14 12:56:50 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\xvid.dll
[2005.10.14 12:56:50 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2005.10.14 12:56:50 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2005.10.14 12:56:50 | 000,155,136 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2005.10.14 12:56:50 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2005.10.14 11:56:50 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2005.10.14 11:56:50 | 000,765,952 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll

========== LOP Check ==========

[2010.03.03 19:03:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Active Shield
[2009.03.30 21:57:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ashampoo
[2009.03.31 20:12:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\DAEMON Tools Lite
[2009.03.28 14:00:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ESET
[2009.12.31 00:42:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Musicnotes
[2009.03.31 19:29:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\NCH Swift Sound
[2009.06.12 21:32:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\page
[2009.04.05 13:10:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\PC Drivers HeadQuarters
[2009.08.21 16:05:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Propellerhead Software
[2009.04.01 18:56:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\SSScanAppDataDir
[2009.04.01 18:56:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\SSScanWizard
[2009.10.09 19:50:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Steinberg
[2009.07.07 20:02:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TEMP
[2009.03.29 21:38:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\ACD Systems
[2009.10.02 19:53:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\AMPSoft
[2009.06.12 21:34:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\Ashampoo
[2010.02.13 20:03:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\avidemux
[2009.04.05 16:06:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\BSplayer Pro
[2010.03.30 08:11:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\Canon
[2009.03.31 20:13:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\DAEMON Tools
[2009.03.31 20:13:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\DAEMON Tools Lite
[2010.02.19 18:39:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\DAEMON Tools Pro
[2010.04.09 23:59:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\FontCreator
[2010.02.13 01:08:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\FreeAudioPack
[2009.04.05 13:13:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\GetRightToGo
[2009.03.31 19:29:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\NCH Swift Sound
[2009.03.28 14:52:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\Opera
[2009.08.21 16:11:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\Propellerhead Software
[2009.04.01 18:56:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\ScanSoft
[2009.10.09 19:52:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\Steinberg
[2009.05.05 20:09:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\Teeworlds
[2009.09.28 16:17:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\Uniblue
[2009.04.03 22:57:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\Vso
[2009.05.04 20:28:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\ZipGenius

========== Purity Check ==========



========== Files - Unicode (All) ==========
[2009.06.12 18:26:29 | 000,000,000 | ---D | M](C:\Documents and Settings\All Users.WINDOWS\data aplikac??) -- C:\Documents and Settings\All Users.WINDOWS\data aplikacￃﾭ
[2009.06.12 18:26:29 | 000,000,000 | ---D | M](C:\Documents and Settings\All Users.WINDOWS\data aplikac??) -- C:\Documents and Settings\All Users.WINDOWS\data aplikacￃﾭ
[2009.06.12 18:26:28 | 000,000,000 | ---D | M](C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\data aplikac??) -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\data aplikacￃﾭ
[2009.06.12 18:26:28 | 000,000,000 | ---D | M](C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\data aplikac??) -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\data aplikacￃﾭ
(C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\data aplikac??) -- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\data aplikacￃﾭ
(C:\Documents and Settings\All Users.WINDOWS\data aplikac??) -- C:\Documents and Settings\All Users.WINDOWS\data aplikacￃﾭ
< End of report >

[Caroprd111]

Poprosím o nový log z RSIT.

[jakubsach]

pří tom vytváření logu mi to hodilo hlášku že se vydavatelem nepodařilo ověřit složku jakub.exe - nebo nějak tak...

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jakub at 2010-04-12 22:46:11
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 31 GB (40%) free of 78 GB
Total RAM: 1024 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:46:45, on 12.4.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17023)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\CNAB4RPK.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Dokumenty\Stažené soubory\RSIT.exe
C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Dokumenty\Stažené soubory\Jakub.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [NeroFilterCheck] "C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést cíl vazby do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést vybrané vazby do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést vybrané vazby do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Převést výběr do Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Převést výběr do existujícího PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Přidat do stávajícího PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Zobrazit originál - C:\Program Files\VOLNY\akcelerator\original.htm
O8 - Extra context menu item: Zobrazit vše jako originál - C:\Program Files\VOLNY\akcelerator\originalAll.htm
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{B6A43005-71F7-4573-99E9-BB127039AF78}: NameServer = 160.218.43.200 160.218.10.200
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 7684 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2007-05-11 321120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-05-16 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-05-16 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2007-05-11 321120]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2003-09-12 335872]
"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2006-01-02 45056]
"NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-12-03 2213160]
"H2O"=C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe [2005-05-11 200069]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WIAWizardMenu"=C:\WINDOWS\system32\sti_ci.dll [2004-08-17 136704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-05-03 61440]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{928b6e16-fbd8-11de-a356-000c6ee59751}]
shell\AutoRun\command - "E:\WD SmartWare.exe" autoplay=true


======List of files/folders created in the last 1 months======

2010-04-12 22:20:59 ----D---- C:\_OTL
2010-04-11 17:48:54 ----D---- C:\rsit
2010-04-10 13:37:13 ----SHD---- C:\RECYCLER
2010-04-10 13:03:39 ----A---- C:\WINDOWS\rafazon.bat
2010-04-10 13:03:38 ----AD---- C:\rafazon
2010-04-07 23:03:31 ----D---- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\FontCreator
2010-04-01 07:50:29 ----D---- C:\Program Files\Rising Research

======List of files/folders modified in the last 1 months======

2010-04-12 22:45:43 ----D---- C:\WINDOWS\Prefetch
2010-04-12 22:45:27 ----A---- C:\WINDOWS\ModemLog_Axesstel USB Modem.txt
2010-04-12 22:24:26 ----D---- C:\Program Files\Mozilla Firefox
2010-04-12 22:22:48 ----D---- C:\WINDOWS\temp
2010-04-12 22:21:00 ----D---- C:\WINDOWS
2010-04-12 22:21:00 ----D---- C:\Program Files\ESET
2010-04-11 23:45:15 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-11 23:45:10 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-11 23:05:32 ----D---- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\vlc
2010-04-11 22:51:23 ----D---- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\Adobe
2010-04-11 21:42:51 ----HD---- C:\WINDOWS\inf
2010-04-10 21:02:19 ----SHD---- C:\System Volume Information
2010-04-10 21:02:19 ----D---- C:\WINDOWS\system32\Restore
2010-04-10 14:28:54 ----A---- C:\WINDOWS\wincmd.ini
2010-04-10 13:16:27 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\FLEXnet
2010-04-10 13:15:20 ----D---- C:\Documents and Settings
2010-04-10 12:31:57 ----D---- C:\WINDOWS\system32\drivers
2010-04-10 12:30:20 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-10 12:22:10 ----N---- C:\WINDOWS\system.ini
2010-04-10 12:19:14 ----D---- C:\WINDOWS\system32\config
2010-04-10 12:18:00 ----SD---- C:\WINDOWS\Tasks
2010-04-10 12:15:56 ----D---- C:\WINDOWS\AppPatch
2010-04-10 12:15:56 ----AD---- C:\WINDOWS\system32
2010-04-10 12:15:53 ----D---- C:\Program Files\Common Files
2010-04-10 00:05:40 ----RD---- C:\Program Files
2010-04-09 19:09:35 ----D---- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\dvdcss
2010-04-08 23:40:20 ----SHD---- C:\WINDOWS\Installer
2010-04-08 23:39:22 ----D---- C:\Config.Msi
2010-04-08 23:39:11 ----D---- C:\Program Files\Common Files\ACD Systems
2010-04-05 22:39:45 ----RSD---- C:\WINDOWS\Fonts
2010-04-04 21:06:38 ----A---- C:\WINDOWS\LEXICON.INI
2010-04-03 16:53:01 ----D---- C:\WINDOWS\system32\oodag
2010-03-30 22:42:22 ----D---- C:\WINDOWS\system32\cs-cz
2010-03-30 22:42:22 ----D---- C:\Program Files\Internet Explorer
2010-03-30 22:42:10 ----D---- C:\WINDOWS\ie7updates
2010-03-30 22:12:02 ----HD---- C:\WINDOWS\$hf_mig$
2010-03-30 08:11:21 ----D---- C:\Documents and Settings\Jakub.JAKUB-B72ACBE07\Data aplikací\Canon
2010-03-28 12:08:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-19 00:44:24 ----A---- C:\WINDOWS\NeroDigital.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2004-08-17 41216]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-09-15 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-09-15 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-09-15 94160]
R2 DriverAS;Active Shield Kernel Part; \??\C:\Program Files\Active Shield 5\ActiveShield.sys []
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-05-03 1540608]
R3 Axtmvflt;Axesstel USB Filter Service; C:\WINDOWS\system32\DRIVERS\Axtmvflt.sys [2007-06-27 3456]
R3 Axtmvmdm;Axesstel USB Modem; C:\WINDOWS\system32\DRIVERS\Axtmvmdm.sys [2007-06-27 40064]
R3 Axtmvprt;Axesstel Diagnostic Port; C:\WINDOWS\System32\Drivers\Axtmvprt.sys [2007-09-20 38784]
R3 CLEDX;Team H2O CLEDX service; C:\WINDOWS\system32\DRIVERS\cledx.sys [2005-05-09 33792]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2003-01-16 40960]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-10-25 9600]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-04-03 47360]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-07-15 578368]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-04 31616]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys []
S1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys []
S3 aamydvuc;aamydvuc; C:\WINDOWS\system32\drivers\aamydvuc.sys []
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 NCHSSVAD;SoundTap Recorder; C:\WINDOWS\system32\drivers\nchssvad.sys [2009-03-31 27136]
S3 NTSIM;NTSIM; \??\C:\WINDOWS\system32\ntsim.sys []
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S4 dwshd;dwshd; C:\WINDOWS\System32\drivers\dwshd.sys []
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-03-31 717296]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-05-03 413696]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-05-16 152984]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-12-03 869672]
R2 O&O Defrag;O&O Defrag; C:\WINDOWS\system32\oodag.exe [2008-09-04 1295616]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2006-05-03 520192]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-03-22 655360]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-12-13 447784]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Caroprd111]

Stáhněte a použijte http://oldtimer.geekstogo.com/TFC.exe


Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe

• Spusťte.
• Klikněte na "CleanUp!". Potvrďte hlášky stiskem "Yes" (Bude následovat restart)

Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478

• Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.
  
  Záložka Čistič
• Dejte analyzovat, po dokončení dejte Spustit Ccleaner.
  
  Záložka Registry
• Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
  OK Zavřít

Doinstalujte SP3 http://www.viry.cz/forum/viewtopic.php?f=46&t=86100


V logu nevidím firewall, doinstalujte Přehled: http://www.viry.cz/forum/viewtopic.php?f=41&t=6523

[jakubsach]

Děkuji za pomoc snad to bude již ok , myslím že si tu havět nosím z práce na flashdisku. nevím zda neexistuje lepší anitivir zdarma, než ten avast.Když tam dám flasku a chci z ní něco okopírovat do pc tak by to přesi nělo zabránit proniknutí viru? Firewall si neinstaluju protože doma mám tak pomalej net asi jako přes telefon před 12ti lety(kolem prům. 60kb/s) a pak už to fakt nejde...

[Caroprd111]

Flash disky můžeme prověřit.


Vložte do PC všechny flash disky, které používáte.

Stáhněte na plochu UsbFix http://pagesperso-orange.fr/NosTools/Ch ... UsbFix.exe

• Spusťte, poté zvolte jazyk E - Enter
• Zvolte 1 - Enter
• Po dokončení na Vás vyskočí log, vložte mi ho sem, případně ho najdete v C:\UsbFix.txt

[jakubsach]

############################## | UsbFix V6.104 |

User : Jakub (Administrators) # JAKUB-B72ACBE07
Update on 14/04/2010 by El Desaparecido , C_XX & Chimay8
Start at: 22:08:32 | 14.4.2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

AMD Athlon(TM) XP 2200+
Systém Microsoft Windows XP Professional (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 7.0.5730.13
Windows Firewall Status : Enabled
AV : avast! antivirus 4.8.1368 [VPS 100414-1] 4.8.1368 [ Enabled | Updated ]
AV : ESET Smart Security 4.0 4.0 [ (!) Disabled | (!) Outdated ]
FW : COMODO Firewall Pro[ (!) Disabled ]3.0

A:\ -> Disketová jednotka 3 1/2"
C:\ -> Místní pevný disk # 76,33 Go (20,63 Go free) [Místní disk] # NTFS
D:\ -> Disk CD-ROM
F:\ -> Místní pevný disk # 74,53 Go (1,56 Go free) [Data] # NTFS
H:\ -> Vyměnitelný disk # 7,47 Go (5,86 Go free) [A-DATA UFD] # NTFS

################## | Files # Infected Folders |


################## | Registry |

[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"

################## | Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{928b6e16-fbd8-11de-a356-000c6ee59751}
Shell\AutoRun\command ="E:\WD SmartWare.exe" autoplay=true

################## | Vaccin |

# C:\autorun.inf -> Autorun.inf created by Flash_Disinfector (sUBs).
# F:\autorun.inf -> Autorun.inf created by Flash_Disinfector (sUBs).

################## | ! End of report # UsbFix V6.104 ! |

[Caroprd111]

Flash disky jsou v pořádku.

[jakubsach]

Dobrý den včera se mi objevili problémy s flashkou, v práci jsem si na ní nakopíroval pár souboru- nějaký album v mp3 ale i normální složky s obrázky a videem (ne s filmy pro dospělé..)Odpoledne jsem si přetáhnul jeden soubor do PC a věčer když jsem to chtěl dokončit mi najednou začla psát že soubory jsou nejsou přístupné - poškozeny nebo nečitelné, nikdy se mi to ještě nestalo, ukazuje to že všechny soubory ze včerejška jsou prázdné....divné že , ještě to psalo něco o cmd.exe..

[Caroprd111]

Vložte do PC všechny flash disky, které používáte.

Stáhněte na plochu UsbFix http://pagesperso-orange.fr/NosTools/Ch ... UsbFix.exe

• Spusťte, poté zvolte jazyk E - Enter
• Zvolte 1 - Enter
• Po dokončení na Vás vyskočí log, vložte mi ho sem, případně ho najdete v C:\UsbFix.txt

Poprosím o log z RSIT.

[jakubsach]

############################## | UsbFix V6.104 |

User : Jakub (Administrators) # JAKUB-B72ACBE07
Update on 14/04/2010 by El Desaparecido , C_XX & Chimay8
Start at: 8:31:24 | 17.4.2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

AMD Athlon(TM) XP 2200+
Systém Microsoft Windows XP Professional (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 7.0.5730.13
Windows Firewall Status : Enabled
AV : avast! antivirus 4.8.1368 [VPS 100416-0] 4.8.1368 [ Enabled | Updated ]
AV : ESET Smart Security 4.0 4.0 [ (!) Disabled | (!) Outdated ]
FW : COMODO Firewall Pro[ (!) Disabled ]3.0

A:\ -> Disketová jednotka 3 1/2"
C:\ -> Místní pevný disk # 76,33 Go (22,36 Go free) [Místní disk] # NTFS
D:\ -> Disk CD-ROM
F:\ -> Místní pevný disk # 74,53 Go (1,53 Go free) [Data] # NTFS
H:\ -> Vyměnitelný disk # 7,47 Go (2,3 Go free) [A-DATA UFD] # NTFS

################## | Files # Infected Folders |


################## | Registry |

[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"

################## | Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{928b6e16-fbd8-11de-a356-000c6ee59751}
Shell\AutoRun\command ="E:\WD SmartWare.exe" autoplay=true

################## | Vaccin |

# C:\autorun.inf -> Autorun.inf created by Flash_Disinfector (sUBs).
# F:\autorun.inf -> Autorun.inf created by Flash_Disinfector (sUBs).

################## | ! End of report # UsbFix V6.104 ! |

[Caroprd111]

Poprosím o log z RSIT.