Harddisk se sám od sebe plní

Zpráva

thebobdestroyer · #1 Příspěvek od **thebobdestroyer** » 21 dub 2010 18:38

Poslední dobou mi po startu vyskočí několik oken: Ve skriptu na této stránce došlo k chybě - chyba skriptu aplikace IE. Chcete na této stránce i nadále spouštět skripty? Řádek, znak, chyba, kód url: . Vyskáče většinou asi pět oken a nakonec chybová hláška: Runtime Error 401 Can't Show Non-modal Form When Modal Form Is Displayed. A nyní se začal sám od sebe zaplňovat harddisk. Nod32 ani spybot nic nenašly

Log z HijackThis:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jirka at 2010-04-21 19:21:28
Microsoft Windows 7 Ultimate Service Pack 3
System drive L: has 998 MB (2%) free of 50 GB
Total RAM: 3317 MB (60% free)

======Scheduled tasks folder======

L:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3351475916-1720942700-161379336-1148Core.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - L:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2010-04-04 61888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - L:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - L:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - G:\Office 2007\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - L:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - L:\Users\Jirka.FIBOX.000\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll [2009-07-14 150768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - L:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-10-22 256112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2006-10-23 321120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - L:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [2009-10-22 761840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - L:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-10-22 458736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2006-10-23 321120]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - L:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-10-22 256112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=L:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-05-14 2029640]
"PWRISOVM.EXE"=L:\Program Files\PowerISO\PWRISOVM.EXE [2009-03-15 180224]
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [2008-01-11 623992]
""= []
"Windows Mobile Device Center"=L:\Windows\WindowsMobile\wmdc.exe [2007-05-31 648072]
"AdobeCS4ServiceManager"=L:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"GrooveMonitor"=G:\Office 2007\Office12\GrooveMonitor.exe [2008-10-25 31072]
"QuickTime Task"=L:\Program Files\QuickTime\QTTask.exe [2009-11-11 417792]
"iTunesHelper"=L:\Program Files\iTunes\iTunesHelper.exe [2008-01-15 267048]
"Adobe Reader Speed Launcher"=L:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]
"Adobe ARM"=L:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]
"SysTrayApp"=L:\Program Files\IDT\WDM\sttray.exe [2009-07-15 458844]
"ISUSScheduler"=L:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]
"StartCCC"=L:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"Adobe_ID0ENQBO"=L:\PROGRA~1\COMMON~1\Adobe\ADOBEV~2\Server\bin\VERSIO~2.EXE [2008-08-15 378224]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=L:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-10-21 39408]
"AdobeBridge"= []
"Sidebar"=L:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"ISUSPM Startup"=L:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2004-06-16 221184]
"Google Update"=L:\Users\Jirka.FIBOX.000\AppData\Local\Google\Update\GoogleUpdate.exe [2010-04-19 136176]

L:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Acrobat Speed Launcher.lnk - L:\Windows\Installer\{AC76BA86-1029-0000-7760-000000000003}\_SC_Acrobat.exe
Adobe Acrobat Synchronizer.lnk - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
Canon LBP2900 Status Window.lnk - L:\Windows\System32\spool\drivers\w32x86\3\CNAB4LAK.EXE
McAfee Security Scan Plus.lnk - L:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe

L:\Users\Jirka.FIBOX.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
msdsvc.lnk - L:\Windows\System32\msdsvc.exe
RivaTuner.lnk - L:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTunerWrapper.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=G:\Office 2007\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"RunStartupScriptSync"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\H]
shell\AutoRun\command - H:\Autorun.exe

======File associations======

.js - edit - L:\Windows\System32\Notepad.exe %1
.js - open - "F:\ADOBE\Adobe Dreamweaver CS4\Dreamweaver.exe","%1"
.scr - open - "L:\Windows\system32\NOTEPAD.EXE" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-04-21 19:17:52 ----D---- L:\Program Files\trend micro
2010-04-21 19:17:51 ----D---- L:\rsit
2010-04-19 20:50:18 ----D---- L:\ProgramData\ALM
2010-04-19 20:40:22 ----D---- L:\Program Files\Common Files\PX Storage Engine
2010-04-19 19:08:18 ----D---- L:\AdobeTemp
2010-04-18 15:33:00 ----D---- L:\ProgramData\ATI
2010-04-18 15:29:20 ----D---- L:\Program Files\Common Files\ATI Technologies
2010-04-18 13:50:30 ----D---- L:\ProgramData\McAfee Security Scan
2010-04-18 13:50:30 ----D---- L:\ProgramData\McAfee
2010-04-18 13:50:28 ----D---- L:\Program Files\McAfee Security Scan
2010-04-14 14:44:32 ----A---- L:\Windows\system32\wintrust.dll
2010-04-14 14:43:23 ----A---- L:\Windows\system32\ntkrnlpa.exe
2010-04-14 14:43:22 ----A---- L:\Windows\system32\ntoskrnl.exe
2010-04-14 14:43:03 ----A---- L:\Windows\system32\vbscript.dll
2010-04-14 14:43:01 ----A---- L:\Windows\system32\cabview.dll
2010-04-08 19:48:54 ----D---- L:\ProgramData\licensecb
2010-04-08 19:48:54 ----D---- L:\ProgramData\CrazyBump
2010-04-08 19:42:49 ----A---- L:\Windows\system32\XAudio2_6.dll
2010-04-08 19:42:49 ----A---- L:\Windows\system32\XAPOFX1_4.dll
2010-04-08 19:42:49 ----A---- L:\Windows\system32\xactengine3_6.dll
2010-04-08 19:42:48 ----A---- L:\Windows\system32\X3DAudio1_7.dll
2010-04-08 19:39:55 ----D---- L:\Windows\system32\directx
2010-04-04 13:50:47 ----D---- L:\Program Files\Common Files\ChaosGroup
2010-03-31 21:44:57 ----A---- L:\Windows\system32\mstime.dll
2010-03-31 21:44:56 ----A---- L:\Windows\system32\wininet.dll
2010-03-31 21:44:56 ----A---- L:\Windows\system32\msfeedsbs.dll
2010-03-31 21:44:55 ----A---- L:\Windows\system32\iedkcs32.dll
2010-03-31 21:44:54 ----A---- L:\Windows\system32\mshtml.dll
2010-03-31 21:44:53 ----A---- L:\Windows\system32\urlmon.dll
2010-03-31 21:44:53 ----A---- L:\Windows\system32\ieframe.dll
2010-03-28 10:53:14 ----D---- L:\Program Files\Adobe Media Player
2010-03-22 20:28:21 ----A---- L:\Windows\system32\XAudio2_5.dll
2010-03-22 20:28:21 ----A---- L:\Windows\system32\xactengine3_5.dll
2010-03-22 20:28:21 ----A---- L:\Windows\system32\D3DX9_42.dll
2010-03-22 20:28:21 ----A---- L:\Windows\system32\d3dx11_42.dll
2010-03-22 20:28:21 ----A---- L:\Windows\system32\d3dx10_42.dll
2010-03-22 20:28:21 ----A---- L:\Windows\system32\d3dcsx_42.dll
2010-03-22 20:28:21 ----A---- L:\Windows\system32\D3DCompiler_42.dll
2010-03-22 20:28:20 ----A---- L:\Windows\system32\XAPOFX1_3.dll
2010-03-22 20:14:12 ----D---- L:\ProgramData\InstallShield

======List of files/folders modified in the last 1 months======

2010-04-21 19:21:56 ----D---- L:\Windows\Temp
2010-04-21 19:20:56 ----D---- L:\Windows\system32\config
2010-04-21 19:18:08 ----D---- L:\Windows\Prefetch
2010-04-21 19:17:52 ----RD---- L:\Program Files
2010-04-21 18:49:17 ----HD---- L:\ProgramData
2010-04-21 18:49:17 ----D---- L:\Windows\system32\drivers
2010-04-21 18:33:47 ----D---- L:\Users\Jirka.FIBOX.000\AppData\Roaming\foobar2000
2010-04-21 13:49:29 ----SHD---- L:\System Volume Information
2010-04-20 23:31:01 ----D---- L:\Users\Jirka.FIBOX.000\AppData\Roaming\vlc
2010-04-20 16:06:21 ----D---- L:\Windows\rescache
2010-04-20 14:35:57 ----D---- L:\Users\Jirka.FIBOX.000\AppData\Roaming\Adobe
2010-04-19 21:00:49 ----SHD---- L:\Windows\Installer
2010-04-19 20:40:43 ----D---- L:\Program Files\Adobe
2010-04-19 20:40:22 ----D---- L:\Windows\inf
2010-04-19 20:40:22 ----D---- L:\Program Files\Common Files
2010-04-19 20:35:36 ----D---- L:\Program Files\Common Files\Adobe
2010-04-19 20:06:39 ----D---- L:\Windows\winsxs
2010-04-19 20:04:19 ----D---- L:\Windows\System32
2010-04-19 20:04:19 ----D---- L:\Program Files\Internet Explorer
2010-04-19 16:27:03 ----D---- L:\Windows\Tasks
2010-04-18 19:38:19 ----A---- L:\Windows\system32\PerfStringBackup.INI
2010-04-18 15:32:11 ----D---- L:\Windows
2010-04-18 15:30:04 ----RSD---- L:\Windows\assembly
2010-04-18 15:29:44 ----D---- L:\Program Files\ATI Technologies
2010-04-18 15:29:18 ----D---- L:\Windows\system32\catroot
2010-04-18 15:28:45 ----D---- L:\Windows\system32\DriverStore
2010-04-18 15:23:00 ----SD---- L:\Users\Jirka.FIBOX.000\AppData\Roaming\Microsoft
2010-04-18 14:52:27 ----D---- L:\Windows\Minidump
2010-04-18 14:52:16 ----D---- L:\Windows\Downloaded Program Files
2010-04-14 21:48:59 ----D---- L:\Users\Jirka.FIBOX.000\AppData\Roaming\dvdcss
2010-04-14 14:44:49 ----D---- L:\ProgramData\Microsoft Help
2010-04-14 14:44:34 ----D---- L:\Windows\system32\catroot2
2010-04-12 15:08:09 ----HD---- L:\Program Files\InstallShield Installation Information
2010-04-07 19:59:31 ----D---- L:\Windows\system32\Tasks
2010-03-31 16:17:31 ----RSD---- L:\Windows\Fonts
2010-03-22 20:14:00 ----D---- L:\Program Files\Common Files\InstallShield

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 blbdrive;blbdrive; L:\Windows\system32\DRIVERS\blbdrive.sys [2009-07-14 35328]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; L:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 DfsC;@%systemroot%\system32\drivers\dfsc.sys,-101; L:\Windows\System32\Drivers\dfsc.sys [2009-07-14 78336]
R1 discache;@%systemroot%\system32\drivers\discache.sys,-102; L:\Windows\System32\drivers\discache.sys [2009-07-14 32256]
R1 ehdrv;ehdrv; L:\Windows\system32\DRIVERS\ehdrv.sys [2009-05-14 107256]
R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; L:\Windows\system32\drivers\nsiproxy.sys [2009-07-14 16896]
R1 RDPENCDD;@%systemroot%\system32\drivers\RDPENCDD.sys,-101; L:\Windows\system32\drivers\rdpencdd.sys [2009-07-14 6656]
R1 RDPREFMP;@%systemroot%\system32\drivers\RdpRefMp.sys,-101; L:\Windows\system32\drivers\rdprefmp.sys [2009-07-14 7168]
R1 SCDEmu;SCDEmu; L:\Windows\system32\drivers\SCDEmu.sys [2009-03-15 56268]
R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; L:\Windows\system32\DRIVERS\tdx.sys [2009-07-14 74240]
R1 Wanarpv6;@%systemroot%\system32\rascfg.dll,-32012; L:\Windows\system32\DRIVERS\wanarp.sys [2009-07-14 63488]
R1 WfpLwf;WFP Lightweight Filter; L:\Windows\system32\DRIVERS\wfplwf.sys [2009-07-14 9728]
R2 adfs;adfs; L:\Windows\system32\drivers\adfs.sys [2008-08-14 74720]
R2 atksgt;atksgt; L:\Windows\system32\DRIVERS\atksgt.sys [2010-01-26 281760]
R2 eamon;eamon; L:\Windows\system32\DRIVERS\eamon.sys [2009-05-14 114472]
R2 epfwwfpr;epfwwfpr; L:\Windows\system32\DRIVERS\epfwwfpr.sys [2009-05-14 93312]
R2 Hardlock;Hardlock; L:\Windows\system32\drivers\hardlock.sys [2006-11-22 693760]
R2 Haspnt;Haspnt; \??\L:\Windows\system32\drivers\Haspnt.sys [2010-03-14 47616]
R2 lirsgt;lirsgt; L:\Windows\system32\DRIVERS\lirsgt.sys [2010-01-26 25888]
R2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver; L:\Windows\system32\DRIVERS\lltdio.sys [2009-07-14 48128]
R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; L:\Windows\system32\drivers\luafv.sys [2009-07-14 86528]
R2 PEAUTH;PEAUTH; L:\Windows\system32\drivers\peauth.sys [2009-07-14 586752]
R2 rspndr;Link-Layer Topology Discovery Responder; L:\Windows\system32\DRIVERS\rspndr.sys [2009-07-14 60928]
R2 tcpipreg;TCP/IP Registry Compatibility; L:\Windows\System32\drivers\tcpipreg.sys [2009-07-14 34816]
R3 1394ohci;Hostitelský řadič pro rozhraní OHCI standardu 1394; L:\Windows\system32\DRIVERS\1394ohci.sys [2009-07-14 163328]
R3 atikmdag;atikmdag; L:\Windows\system32\DRIVERS\atikmdag.sys [2007-06-27 2770432]
R3 bowser;@%systemroot%\system32\browser.dll,-102; L:\Windows\system32\DRIVERS\bowser.sys [2009-07-14 69632]
R3 circlass;Uživatelská infračervená zařízení; L:\Windows\system32\DRIVERS\circlass.sys [2009-07-14 37888]
R3 CompositeBus;Ovladač rozpoznávacího modulu složené sběrnice; L:\Windows\system32\DRIVERS\CompositeBus.sys [2009-07-14 31232]
R3 DXGKrnl;LDDM Graphics Subsystem; L:\Windows\System32\drivers\dxgkrnl.sys [2009-10-02 728648]
R3 e1yexpress;Intel(R) Gigabit Network Connections Driver; L:\Windows\system32\DRIVERS\e1y6232.sys [2009-10-20 223960]
R3 GEARAspiWDM;GEARAspiWDM; L:\Windows\System32\Drivers\GEARAspiWDM.sys [2006-09-19 15664]
R3 HDAudBus;Ovladač sběrnice Microsoft UAA pro zvuk High Definition Audio; L:\Windows\system32\DRIVERS\HDAudBus.sys [2009-07-14 108544]
R3 HidIr;Ovladač infračerveného portu HID Microsoft; L:\Windows\system32\DRIVERS\hidir.sys [2009-07-14 37888]
R3 HidUsb;Ovladač třídy standardu HID Microsoft; L:\Windows\system32\DRIVERS\hidusb.sys [2009-07-14 24064]
R3 intelppm;Ovladač procesoru Intel; L:\Windows\system32\DRIVERS\intelppm.sys [2009-07-14 53760]
R3 kbdhid;Ovladač klávesnice standardu HID; L:\Windows\system32\DRIVERS\kbdhid.sys [2009-07-14 28160]
R3 monitor;Služba ovladače funkce třídy monitorů Microsoft; L:\Windows\system32\DRIVERS\monitor.sys [2009-07-14 23552]
R3 mouhid;Ovladač myši standardu HID; L:\Windows\system32\DRIVERS\mouhid.sys [2009-07-14 26112]
R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; L:\Windows\System32\drivers\mpsdrv.sys [2009-07-14 60416]
R3 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; L:\Windows\system32\DRIVERS\mrxsmb10.sys [2010-02-27 221696]
R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; L:\Windows\system32\DRIVERS\mrxsmb20.sys [2010-02-27 95744]
R3 RasAgileVpn;WAN Miniport (IKEv2); L:\Windows\system32\DRIVERS\AgileVpn.sys [2009-07-14 49152]
R3 RasSstp;@%systemroot%\system32\sstpsvc.dll,-202; L:\Windows\system32\DRIVERS\rassstp.sys [2009-07-14 75264]
R3 rdpbus;Remote Desktop Device Redirector Bus Driver; L:\Windows\system32\DRIVERS\rdpbus.sys [2009-07-14 18944]
R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; L:\Windows\System32\DRIVERS\srv2.sys [2009-07-14 306688]
R3 srvnet;srvnet; L:\Windows\System32\DRIVERS\srvnet.sys [2009-12-08 113664]
R3 STHDA;IDT High Definition Audio CODEC; L:\Windows\system32\DRIVERS\stwrt.sys [2009-07-15 409088]
R3 tssecsrv;@%SystemRoot%\System32\DRIVERS\tssecsrv.sys,-101; L:\Windows\System32\DRIVERS\tssecsrv.sys [2009-07-14 30208]
R3 tunnel;Microsoft Tunnel Miniport Adapter Driver; L:\Windows\system32\DRIVERS\tunnel.sys [2009-07-14 108544]
R3 umbus;Ovladač sběrnice UMBus Enumerator; L:\Windows\system32\DRIVERS\umbus.sys [2009-07-14 39936]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; L:\Windows\system32\DRIVERS\usbccgp.sys [2009-07-14 75264]
R3 usbehci;Ovladač miniportu vylepšeného hostitelského řadiče Microsoft USB 2.0; L:\Windows\system32\DRIVERS\usbehci.sys [2009-07-14 41472]
R3 usbhub;Ovladač standardního rozbočovače USB; L:\Windows\system32\DRIVERS\usbhub.sys [2009-07-14 258560]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; L:\Windows\system32\DRIVERS\USBSTOR.SYS [2009-07-14 74752]
R3 usbuhci;Ovladač miniportu univerzálního hostitelského řadiče Microsoft USB; L:\Windows\system32\DRIVERS\usbuhci.sys [2009-07-14 24064]
R3 wbondir;Winbond CIR Transceiver; L:\Windows\system32\DRIVERS\wbondir.sys [2007-03-20 49664]
R3 WudfPf;User Mode Driver Frameworks Platform Driver; L:\Windows\system32\drivers\WudfPf.sys [2009-07-14 92672]
R3 WUDFRd;WUDFRd; L:\Windows\system32\DRIVERS\WUDFRd.sys [2009-07-14 132224]
S3 a1yvf0nn;a1yvf0nn; L:\Windows\system32\drivers\a1yvf0nn.sys []
S3 AcpiPmi;ACPI Power Meter Driver; L:\Windows\system32\DRIVERS\acpipmi.sys [2009-07-14 9728]
S3 adp94xx;adp94xx; L:\Windows\system32\DRIVERS\adp94xx.sys [2009-07-14 422976]
S3 adpahci;adpahci; L:\Windows\system32\DRIVERS\adpahci.sys [2009-07-14 297552]
S3 adpu320;adpu320; L:\Windows\system32\DRIVERS\adpu320.sys [2009-07-14 146512]
S3 agp440;Intel AGP Bus Filter; L:\Windows\system32\DRIVERS\agp440.sys [2009-07-14 53312]
S3 amdagp;AMD AGP Bus Filter Driver; L:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 amdide;amdide; L:\Windows\system32\DRIVERS\amdide.sys [2009-07-14 14912]
S3 AmdK8;Ovladač procesoru AMD K8; L:\Windows\system32\DRIVERS\amdk8.sys [2009-07-14 55296]
S3 AmdPPM;AMD Processor Driver; L:\Windows\system32\DRIVERS\amdppm.sys [2009-07-14 52736]
S3 amdsata;amdsata; L:\Windows\system32\DRIVERS\amdsata.sys [2009-07-14 79952]
S3 amdsbs;amdsbs; L:\Windows\system32\DRIVERS\amdsbs.sys [2009-07-14 159312]
S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; L:\Windows\system32\drivers\appid.sys [2009-07-14 50176]
S3 arc;arc; L:\Windows\system32\DRIVERS\arc.sys [2009-07-14 76368]
S3 arcsas;arcsas; L:\Windows\system32\DRIVERS\arcsas.sys [2009-07-14 86608]
S3 b06bdrv;Broadcom NetXtreme II VBD; L:\Windows\system32\DRIVERS\bxvbdx.sys [2009-07-14 430080]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; L:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BrFiltLo;Brother USB Mass-Storage Lower Filter Driver; L:\Windows\system32\DRIVERS\BrFiltLo.sys [2009-07-14 13568]
S3 BrFiltUp;Brother USB Mass-Storage Upper Filter Driver; L:\Windows\system32\DRIVERS\BrFiltUp.sys [2009-07-14 5248]
S3 Brserid;Brother MFC Serial Port Interface Driver (WDM); L:\Windows\System32\Drivers\Brserid.sys [2009-07-14 272128]
S3 BrSerWdm;Brother WDM Serial driver; L:\Windows\System32\Drivers\BrSerWdm.sys [2009-07-14 62336]
S3 BrUsbMdm;Brother MFC USB Fax Only Modem; L:\Windows\System32\Drivers\BrUsbMdm.sys [2009-07-14 12160]
S3 BrUsbSer;Brother MFC USB Serial WDM Driver; L:\Windows\System32\Drivers\BrUsbSer.sys [2009-07-14 11904]
S3 BthEnum;Ovladač pro Bluetooth Request Block; L:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BTHMODEM;Bluetooth Serial Communications Driver; L:\Windows\system32\DRIVERS\bthmodem.sys [2009-07-14 56320]
S3 BthPan;Zařízení Bluetooth (síť PAN); L:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; L:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; L:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 CmBatt;Microsoft ACPI Control Method Battery Driver; L:\Windows\system32\DRIVERS\CmBatt.sys [2009-07-14 14080]
S3 Compbatt;Compbatt; L:\Windows\system32\DRIVERS\compbatt.sys [2009-07-14 19024]
S3 ebdrv;Broadcom NetXtreme II 10 GigE VBD; L:\Windows\system32\DRIVERS\evbdx.sys [2009-07-14 3100160]
S3 elxstor;elxstor; L:\Windows\system32\DRIVERS\elxstor.sys [2009-07-14 453712]
S3 ErrDev;Microsoft Hardware Error Device Driver; L:\Windows\system32\DRIVERS\errdev.sys [2009-07-14 7168]
S3 exfat;exFAT File System Driver; L:\Windows\system32\drivers\exfat.sys [2009-07-14 142336]
S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; L:\Windows\system32\drivers\filetrace.sys [2009-07-14 28160]
S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; L:\Windows\System32\drivers\FsDepends.sys [2009-07-14 46160]
S3 gagp30kx;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms; L:\Windows\system32\DRIVERS\gagp30kx.sys [2009-07-14 57936]
S3 hcw85cir;Hauppauge Consumer Infrared Receiver; L:\Windows\system32\drivers\hcw85cir.sys [2009-07-14 26624]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; L:\Windows\system32\drivers\HdAudio.sys [2009-07-14 304128]
S3 HidBatt;HID UPS Battery Driver; L:\Windows\system32\DRIVERS\HidBatt.sys [2009-07-14 21504]
S3 HidBth;Microsoft Bluetooth HID Miniport; L:\Windows\system32\DRIVERS\hidbth.sys [2009-07-14 91136]
S3 HpSAMD;HpSAMD; L:\Windows\system32\DRIVERS\HpSAMD.sys [2009-07-14 67152]
S3 iaStorV;iaStorV; L:\Windows\system32\DRIVERS\iaStorV.sys [2009-07-14 332352]
S3 iirsp;iirsp; L:\Windows\system32\DRIVERS\iirsp.sys [2009-07-14 41040]
S3 intelide;intelide; L:\Windows\system32\DRIVERS\intelide.sys [2009-07-14 15424]
S3 IPMIDRV;IPMIDRV; L:\Windows\system32\DRIVERS\IPMIDrv.sys [2009-07-14 65536]
S3 isapnp;isapnp; L:\Windows\system32\DRIVERS\isapnp.sys [2009-07-14 46656]
S3 iScsiPrt;iScsiPort Driver; L:\Windows\system32\DRIVERS\msiscsi.sys [2009-07-14 186960]
S3 LSI_FC;LSI_FC; L:\Windows\system32\DRIVERS\lsi_fc.sys [2009-07-14 95824]
S3 LSI_SAS;LSI_SAS; L:\Windows\system32\DRIVERS\lsi_sas.sys [2009-07-14 89168]
S3 LSI_SAS2;LSI_SAS2; L:\Windows\system32\DRIVERS\lsi_sas2.sys [2009-07-14 54864]
S3 LSI_SCSI;LSI_SCSI; L:\Windows\system32\DRIVERS\lsi_scsi.sys [2009-07-14 96848]
S3 megasas;megasas; L:\Windows\system32\DRIVERS\megasas.sys [2009-07-14 30800]
S3 MegaSR;MegaSR; L:\Windows\system32\DRIVERS\MegaSR.sys [2009-07-14 235584]
S3 mpio;mpio; L:\Windows\system32\DRIVERS\mpio.sys [2009-07-14 130624]
S3 msahci;msahci; L:\Windows\system32\DRIVERS\msahci.sys [2009-07-14 27712]
S3 msdsm;msdsm; L:\Windows\system32\DRIVERS\msdsm.sys [2009-07-14 115792]
S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; L:\Windows\System32\drivers\mshidkmdf.sys [2009-07-14 4096]
S3 MsRPC;MsRPC; L:\Windows\system32\drivers\MsRPC.sys [2009-07-14 162896]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; L:\Windows\system32\drivers\MSTEE.sys [2009-07-14 6144]
S3 MTConfig;Microsoft Input Configuration Driver; L:\Windows\system32\DRIVERS\MTConfig.sys [2009-07-14 12288]
S3 NativeWifiP;NativeWiFi Filter; L:\Windows\system32\DRIVERS\nwifi.sys [2009-07-14 267264]
S3 NdisCap;NDIS Capture LightWeight Filter; L:\Windows\system32\DRIVERS\ndiscap.sys [2009-07-14 27136]
S3 nfrd960;nfrd960; L:\Windows\system32\DRIVERS\nfrd960.sys [2009-07-14 44624]
S3 nv_agp;NVIDIA nForce AGP Bus Filter; L:\Windows\system32\DRIVERS\nv_agp.sys [2009-07-14 105024]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; L:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
S3 nvraid;nvraid; L:\Windows\system32\DRIVERS\nvraid.sys [2009-07-14 117312]
S3 nvstor;nvstor; L:\Windows\system32\DRIVERS\nvstor.sys [2009-07-14 142416]
S3 ohci1394;1394 OHCI Compliant Host Controller (Legacy); L:\Windows\system32\DRIVERS\ohci1394.sys [2009-07-14 62464]
S3 P17;SB Live! 24-bit; L:\Windows\system32\drivers\P17.sys [2007-02-05 1122304]
S3 ql2300;ql2300; L:\Windows\system32\DRIVERS\ql2300.sys [2009-07-14 1383488]
S3 ql40xx;ql40xx; L:\Windows\system32\DRIVERS\ql40xx.sys [2009-07-14 106064]
S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; L:\Windows\system32\drivers\qwavedrv.sys [2009-07-14 31744]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); L:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; L:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sbp2port;sbp2port; L:\Windows\system32\DRIVERS\sbp2port.sys [2009-07-14 85568]
S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; L:\Windows\System32\DRIVERS\scfilter.sys [2009-07-14 26624]
S3 sermouse;Serial Mouse Driver; L:\Windows\system32\DRIVERS\sermouse.sys [2009-07-14 19968]
S3 sffdisk;SFF Storage Class Driver; L:\Windows\system32\DRIVERS\sffdisk.sys [2009-07-14 11264]
S3 sffp_mmc;SFF Storage Protocol Driver for MMC; L:\Windows\system32\DRIVERS\sffp_mmc.sys [2009-07-14 12288]
S3 sffp_sd;SFF Storage Protocol Driver for SDBus; L:\Windows\system32\DRIVERS\sffp_sd.sys [2009-07-14 12800]
S3 sisagp;SIS AGP Bus Filter; L:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 SiSRaid2;SiSRaid2; L:\Windows\system32\DRIVERS\SiSRaid2.sys [2009-07-14 40016]
S3 SiSRaid4;SiSRaid4; L:\Windows\system32\DRIVERS\sisraid4.sys [2009-07-14 77888]
S3 Smb;@%SystemRoot%\system32\tcpipcfg.dll,-50005; L:\Windows\system32\DRIVERS\smb.sys [2009-07-14 71168]
S3 SRS_SSCFilter;SRS Labs Audio Sandbox (WDM); L:\Windows\system32\drivers\srs_sscfilter_i386.sys [2007-07-26 39808]
S3 stexstor;stexstor; L:\Windows\system32\DRIVERS\stexstor.sys [2009-07-14 21072]
S3 storvsc;storvsc; L:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 TCPIP6;Microsoft IPv6 Protocol Driver; L:\Windows\system32\DRIVERS\tcpip.sys [2009-07-14 1285712]
S3 uagp35;Microsoft AGPv3.5 Filter; L:\Windows\system32\DRIVERS\uagp35.sys [2009-07-14 55888]
S3 uliagpkx;Uli AGP Bus Filter; L:\Windows\system32\DRIVERS\uliagpkx.sys [2009-07-14 57424]
S3 UmPass;Microsoft UMPass Driver; L:\Windows\system32\DRIVERS\umpass.sys [2009-07-14 8192]
S3 usb_rndisx;Adaptér USB RNDIS; L:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-14 15872]
S3 USBAAPL;Apple Mobile USB Driver; L:\Windows\System32\Drivers\usbaapl.sys [2009-08-28 40448]
S3 usbcir;eHome Infrared Receiver (USBCIR); L:\Windows\system32\DRIVERS\usbcir.sys [2009-07-14 86016]
S3 usbohci;Ovladač miniportu otevřeného hostitelského řadiče Microsoft USB; L:\Windows\system32\DRIVERS\usbohci.sys [2009-07-14 20480]
S3 usbprint;Microsoft USB PRINTER Class; L:\Windows\system32\DRIVERS\usbprint.sys [2009-07-14 19968]
S3 vga;vga; L:\Windows\system32\DRIVERS\vgapnp.sys [2009-07-14 26112]
S3 vhdmp;vhdmp; L:\Windows\system32\DRIVERS\vhdmp.sys [2009-07-14 159824]
S3 viaagp;VIA AGP Bus Filter; L:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; L:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; L:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; L:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 vsmraid;vsmraid; L:\Windows\system32\DRIVERS\vsmraid.sys [2009-07-14 141904]
S3 vwifibus;@%SystemRoot%\System32\drivers\vwifibus.sys,-257; L:\Windows\System32\drivers\vwifibus.sys [2009-07-14 19968]
S3 WacomPen;Wacom Serial Pen HID Driver; L:\Windows\system32\DRIVERS\wacompen.sys [2009-07-14 21632]
S3 Wd;Wd; L:\Windows\system32\DRIVERS\wd.sys [2009-07-14 19024]
S3 WIMMount;WIMMount; L:\Windows\system32\drivers\wimmount.sys [2009-07-14 19008]
S3 WinUsb;WinUsb; L:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]
S3 WmiAcpi;Microsoft Windows Management Interface for ACPI; L:\Windows\system32\DRIVERS\wmiacpi.sys [2009-07-14 11264]
S3 yukonw7;Ovladač NDIS6.2 Miniport pro řadič Marvell Yukon Ethernet Controller; L:\Windows\system32\DRIVERS\yk62x86.sys [2009-07-14 311296]
S4 crcdisk;Crcdisk Filter Driver; L:\Windows\system32\DRIVERS\crcdisk.sys [2009-07-14 22096]
S4 ws2ifsl;@%systemroot%\System32\drivers\ws2ifsl.sys,-1000; L:\Windows\system32\drivers\ws2ifsl.sys [2009-07-14 16384]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AfterFLICS;AfterFLICS; c:\Program Files\AFLICS\AfterFLICS.exe [2006-12-03 98306]
R2 Apple Mobile Device;Apple Mobile Device; L:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]
R2 Ati External Event Utility;Ati External Event Utility; L:\Windows\system32\Ati2evxx.exe [2007-06-27 606208]
R2 AudioEndpointBuilder;@%SystemRoot%\system32\audiosrv.dll,-204; L:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Bonjour Service;Bonjour Service; L:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 Canon Driver Information Assist Service;Canon Driver Information Assist Service; L:\Program Files\Canon\DIAS\CnxDIAS.exe [2008-11-28 3481448]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; L:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DCPFLICS;DCPFLICS; L:\Program Files\DCPFLICS\DCPFLICS.exe [2007-10-24 139268]
R2 DPS;@%systemroot%\system32\dps.dll,-500; L:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; L:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-05-14 731840]
R2 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 gpsvc;@gpapi.dll,-112; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; L:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 mi-raysat_3dsmax2010_32;mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit; C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe [2009-03-12 86016]
R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; L:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Power;@%SystemRoot%\system32\umpo.dll,-100; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 SBSDWSCService;SBSD Security Center Service; L:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 STacSV;Audio Service; L:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_0cbbaac32f0ea3a1\STacSV.exe [2009-07-15 221266]
R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 UxSms;@%SystemRoot%\system32\dwm.exe,-2000; L:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 WinDefend;@%ProgramFiles%\Windows Defender\MsMpRes.dll,-103; L:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 WSearch;@%systemroot%\system32\SearchIndexer.exe,-103; L:\Windows\system32\SearchIndexer.exe [2009-07-14 428032]
R2 wudfsvc;@%SystemRoot%\system32\wudfsvc.dll,-1000; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 FLEXnet Licensing Service;FLEXnet Licensing Service; L:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-09-24 655624]
R3 iPod Service;iPod Service; L:\Program Files\iPod\bin\iPodService.exe [2008-01-15 504104]
R3 netprofm;@%SystemRoot%\system32\netprofm.dll,-202; L:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; L:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; L:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 wcncsvc;@%SystemRoot%\system32\wcncsvc.dll,-3; L:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 WdiServiceHost;@%systemroot%\system32\wdi.dll,-502; L:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 WdiSystemHost;@%systemroot%\system32\wdi.dll,-500; L:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 WinHttpAutoProxySvc;@%SystemRoot%\system32\winhttp.dll,-100; L:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 WPDBusEnum;@%SystemRoot%\system32\wpdbusenum.dll,-100; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; L:\Windows\system32\sppsvc.exe [2009-07-14 3179520]
S3 AbSoftMgr4;AbSoftMgr4; L:\Program Files\Common Files\AB Studio Shared\AbSoftMgr4.exe [2008-06-16 630784]
S3 Adobe Version Cue CS4;Adobe Version Cue CS4; L:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016]
S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Autodesk Licensing Service;Autodesk Licensing Service; L:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2010-02-20 85096]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; L:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 clr_optimization_v2.0.50727_32;Microsoft .NET Framework NGEN v2.0.50727_X86; L:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2009-06-10 66384]
S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; L:\Windows\System32\lsass.exe [2009-07-14 22528]
S3 ehRecvr;@%SystemRoot%\ehome\ehrecvr.exe,-101; L:\Windows\ehome\ehRecvr.exe [2009-07-14 557056]
S3 ehSched;@%SystemRoot%\ehome\ehsched.exe,-101; L:\Windows\ehome\ehsched.exe [2009-07-14 94720]
S3 EhttpSrv;ESET HTTP Server; L:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-05-14 20680]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; L:\Windows\system32\fxssvc.exe [2009-07-14 522752]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; L:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2009-06-10 42856]
S3 gusvc;Google Software Updater; L:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-10-21 182768]
S3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; L:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; L:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 IDriverT;InstallDriver Table Manager; L:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8193; L:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2009-06-10 878416]
S3 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 IPBusEnum;@%systemroot%\system32\IPBusEnum.dll,-102; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 KeyIso;@keyiso.dll,-100; L:\Windows\system32\lsass.exe [2009-07-14 22528]
S3 KtmRm;@comres.dll,-2946; L:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; L:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 McComponentHostService;McAfee Security Scan Component Host Service; L:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; G:\Office 2007\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 odserv;Microsoft Office Diagnostics Service; L:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; L:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; L:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; L:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; L:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 pla;@%systemroot%\system32\pla.dll,-500; L:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; L:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; L:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SDRSVC;@%SystemRoot%\system32\sdrsvc.dll,-107; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; L:\Windows\System32\snmptrap.exe [2009-07-14 12800]
S3 sppuinotify;@%SystemRoot%\system32\sppuinotify.dll,-103; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; L:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 TBS;@%SystemRoot%\system32\tbssvc.dll,-100; L:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; L:\Windows\servicing\TrustedInstaller.exe [2009-07-14 204800]
S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; L:\Windows\system32\UI0Detect.exe [2009-07-14 35840]
S3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; L:\Windows\system32\lsass.exe [2009-07-14 22528]
S3 vds;@%SystemRoot%\system32\vds.exe,-100; L:\Windows\System32\vds.exe [2009-07-14 452608]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; L:\Windows\system32\wbengine.exe [2009-07-14 1202688]
S3 WbioSrvc;@%systemroot%\system32\wbiosrvc.dll,-100; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WcsPlugInService;@%SystemRoot%\system32\WcsPlugInService.dll,-200; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Wecsvc;@%SystemRoot%\system32\wecsvc.dll,-200; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wercplsupport;@%SystemRoot%\System32\wercplsupport.dll,-101; L:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WerSvc;@%SystemRoot%\System32\wersvc.dll,-100; L:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WinRM;@%Systemroot%\system32\wsmsvc.dll,-101; L:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Wlansvc;@%SystemRoot%\System32\wlansvc.dll,-257; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WMPNetworkSvc;@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101; L:\Program Files\Windows Media Player\wmpnetwk.exe [2009-07-14 1121280]
S3 WPCSvc;@%SystemRoot%\system32\wpcsvc.dll,-100; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WwanSvc;@%SystemRoot%\System32\wwansvc.dll,-257; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 Mcx2Svc;@%SystemRoot%\ehome\ehres.dll,-15501; L:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 NetTcpPortSharing;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8201; L:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 128848]

-----------------EOF-----------------

#2 Příspěvek od **Rudy** » 21 dub 2010 18:43

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

thebobdestroyer · #3 Příspěvek od **thebobdestroyer** » 21 dub 2010 20:07

log z mbam:

Malwarebytes' Anti-Malware 1.45
http://www.malwarebytes.org

Verze databáze: 4016

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

21.4.2010 20:55:58
mbam-log-2010-04-21 (20-55-58).txt

Typ skenu: Úplný sken (L:\|)
Skenované objekty: 315401
Uplynulý čas: 46 minuta(y), 7 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 1
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 1
Infikované soubory: 2

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{500bca15-57a7-4eaf-8143-8c619470b13d} (Worm.Allaple) -> No action taken.

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
L:\resycled (Trojan.DNSChanger) -> No action taken.

Infikované soubory:
L:\Users\Jirka.FIBOX\AppData\Local\Temp\a.exe (Trojan.Dropper) -> No action taken.
L:\Users\Jirka.FIBOX\AppData\Local\Temp\c.exe (Trojan.Dropper) -> No action taken.

#4 Příspěvek od **Rudy** » 21 dub 2010 20:16

Vše smažte.

thebobdestroyer · #5 Příspěvek od **thebobdestroyer** » 21 dub 2010 20:32

Problémy po startu počítače s pop-upi s chybou skriptu se stále objevují poté objevuje Run-time error 401: can´t show non modal form when modal is dysplayed(po téhle hlášce už žadné pop-upi nevyskakují) a problém s diskem přetrvává. V tento počítač se tváří jako zaplněný ale když ho otevřu, označim všechny soubory tak ukazuje zaplňených pouhých 27gb z 50gb

#6 Příspěvek od **Rudy** » 21 dub 2010 20:33

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

thebobdestroyer · #7 Příspěvek od **thebobdestroyer** » 21 dub 2010 21:04

Problémy přetrvávají ale po combo fix se místo na disku cca o 5gb

výpis logu z combofix:

ComboFix 10-04-21.01 - Jirka 21.04.2010 21:44:57.1.4 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.3317.2380 [GMT 2:00]
Spuštěný z: l:\users\Jirka.FIBOX.000\Documents\Downloads\ComboFix.exe
SP: Spybot - Search and Destroy *disabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
* Rezidentní štít AV je zapnutý

.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

l:\programdata\Microsoft\Network\Downloader\qmgr0.dat
l:\programdata\Microsoft\Network\Downloader\qmgr1.dat
l:\recycler\S-1-5-21-2729021619-7756123925-861629095-1461
l:\users\Jirka.FIBOX.000\AppData\Roaming\Microsoft\Internet Explorer\qiPSearchbar.dll
l:\users\Jirka.FIBOX.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RivaTuner.lnk
l:\windows\system32\%appdata%

----- BITS: Možné infikované stránky -----

hxxp://fibox-srv:8530
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-03-21 do 2010-04-21 )))))))))))))))))))))))))))))))
.

2010-04-21 19:53 . 2010-04-21 19:56 -------- d-----w- l:\users\Jirka.FIBOX.000\AppData\Local\temp
2010-04-21 19:53 . 2010-04-21 19:53 -------- d-----w- l:\users\JIRKAF~1~000\AppData\Local\temp
2010-04-21 19:53 . 2010-04-21 19:53 -------- d-----w- l:\users\Default\AppData\Local\temp
2010-04-21 18:04 . 2010-04-21 18:04 -------- d-----w- l:\users\Jirka.FIBOX.000\AppData\Roaming\Malwarebytes
2010-04-21 18:03 . 2010-03-29 13:24 38224 ----a-w- l:\windows\system32\drivers\mbamswissarmy.sys
2010-04-21 18:03 . 2010-04-21 18:03 -------- d-----w- l:\programdata\Malwarebytes
2010-04-21 18:03 . 2010-03-29 13:24 20824 ----a-w- l:\windows\system32\drivers\mbam.sys
2010-04-21 17:17 . 2010-04-21 17:21 -------- d-----w- l:\program files\trend micro
2010-04-21 17:17 . 2010-04-21 17:22 -------- d-----w- L:\rsit
2010-04-19 18:50 . 2010-04-19 18:50 -------- d-----w- l:\programdata\ALM
2010-04-19 18:40 . 2010-04-19 18:40 -------- d-----w- l:\program files\Common Files\PX Storage Engine
2010-04-19 17:08 . 2010-04-19 17:54 -------- d-----w- L:\AdobeTemp
2010-04-18 17:21 . 2010-04-18 17:21 -------- d-----w- l:\users\Bara.FIBOX\AppData\Roaming\DeepBurner
2010-04-18 17:11 . 2010-04-18 17:21 -------- d-----w- l:\users\Bara.FIBOX\AppData\Roaming\vlc
2010-04-18 16:46 . 2010-04-18 16:46 142448 ----a-w- l:\users\Bara.FIBOX\AppData\Local\GDIPFONTCACHEV1.DAT
2010-04-18 16:45 . 2010-04-18 16:45 -------- d-----w- l:\users\Bara.FIBOX\AppData\Roaming\ATI
2010-04-18 16:45 . 2010-04-18 16:45 -------- d-----w- l:\users\Bara.FIBOX\AppData\Local\ATI
2010-04-18 13:33 . 2010-04-18 13:33 -------- d-----w- l:\programdata\ATI
2010-04-18 13:29 . 2010-04-18 13:29 -------- d-----w- l:\program files\Common Files\ATI Technologies
2010-04-18 11:50 . 2010-04-18 11:50 -------- d-----w- l:\programdata\McAfee Security Scan
2010-04-18 11:50 . 2010-04-18 11:50 -------- d-----w- l:\programdata\McAfee
2010-04-18 11:50 . 2010-04-18 11:50 -------- d-----w- l:\program files\McAfee Security Scan
2010-04-14 12:44 . 2009-12-29 06:55 172032 ----a-w- l:\windows\system32\wintrust.dll
2010-04-14 12:43 . 2010-02-27 12:07 3954568 ----a-w- l:\windows\system32\ntkrnlpa.exe
2010-04-14 12:43 . 2010-02-27 12:07 3899280 ----a-w- l:\windows\system32\ntoskrnl.exe
2010-04-14 12:43 . 2010-03-08 21:33 427520 ----a-w- l:\windows\system32\vbscript.dll
2010-04-14 12:43 . 2010-01-09 06:52 132608 ----a-w- l:\windows\system32\cabview.dll
2010-04-14 12:42 . 2010-02-27 07:32 221696 ----a-w- l:\windows\system32\drivers\mrxsmb10.sys
2010-04-14 12:42 . 2010-02-27 07:32 95744 ----a-w- l:\windows\system32\drivers\mrxsmb20.sys
2010-04-14 12:42 . 2010-02-27 07:32 123392 ----a-w- l:\windows\system32\drivers\mrxsmb.sys
2010-04-08 17:48 . 2010-04-08 17:48 -------- d-----w- l:\users\Jirka.FIBOX.000\AppData\Local\licensecb
2010-04-08 17:48 . 2010-04-08 17:48 -------- d-----w- l:\programdata\licensecb
2010-04-08 17:48 . 2010-04-08 17:48 -------- d-----w- l:\programdata\CrazyBump
2010-04-08 17:42 . 2010-02-04 08:01 74072 ----a-w- l:\windows\system32\XAPOFX1_4.dll
2010-04-08 17:42 . 2010-02-04 08:01 528216 ----a-w- l:\windows\system32\XAudio2_6.dll
2010-04-08 17:42 . 2010-02-04 08:01 238936 ----a-w- l:\windows\system32\xactengine3_6.dll
2010-04-08 17:42 . 2010-02-04 08:01 22360 ----a-w- l:\windows\system32\X3DAudio1_7.dll
2010-04-08 17:39 . 2010-04-08 17:39 -------- d-----w- l:\users\Jirka.FIBOX.000\AppData\Local\CrazyBump
2010-04-04 11:50 . 2010-04-07 18:00 -------- d-----w- l:\program files\Common Files\ChaosGroup
2010-03-31 19:44 . 2010-02-23 07:56 977920 ----a-w- l:\windows\system32\wininet.dll
2010-03-28 08:53 . 2010-03-28 08:53 -------- d-----w- l:\program files\Adobe Media Player

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-21 19:33 . 2009-11-22 13:38 -------- d-----w- l:\users\Jirka.FIBOX.000\AppData\Roaming\vlc
2010-04-21 19:01 . 2009-11-22 13:12 -------- d-----w- l:\users\Jirka.FIBOX.000\AppData\Roaming\foobar2000
2010-04-19 18:35 . 2009-09-17 14:38 -------- d-----w- l:\program files\Common Files\Adobe
2010-04-18 17:38 . 2009-07-14 08:44 625676 ----a-w- l:\windows\system32\perfh005.dat
2010-04-18 17:38 . 2009-07-14 08:44 119794 ----a-w- l:\windows\system32\perfc005.dat
2010-04-18 13:29 . 2010-03-14 12:00 -------- d-----w- l:\program files\ATI Technologies
2010-04-18 13:29 . 2010-04-18 13:29 10134 ----a-r- l:\users\Jirka.FIBOX.000\AppData\Roaming\Microsoft\Installer\{E8D6CB10-8DDC-22CA-C421-789C7A865F0F}\ARPPRODUCTICON.exe
2010-04-18 13:29 . 2010-04-18 13:29 10134 ----a-r- l:\users\Jirka.FIBOX.000\AppData\Roaming\Microsoft\Installer\{18D78B2E-7160-ABD1-0963-446FB828D1C3}\ARPPRODUCTICON.exe
2010-04-18 13:29 . 2010-04-18 13:29 10134 ----a-r- l:\users\Jirka.FIBOX.000\AppData\Roaming\Microsoft\Installer\{1F649FD8-7201-FD89-F792-1B7D0C36A57C}\ARPPRODUCTICON.exe
2010-04-18 13:29 . 2010-04-18 13:29 9158 ----a-r- l:\users\Jirka.FIBOX.000\AppData\Roaming\Microsoft\Installer\{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}\ARPPRODUCTICON.exe
2010-04-18 13:23 . 2010-04-18 13:23 10134 ----a-r- l:\users\Jirka.FIBOX.000\AppData\Roaming\Microsoft\Installer\{580D6A69-F3F7-CB21-A5F5-3451A38CA1C2}\ARPPRODUCTICON.exe
2010-04-14 19:48 . 2009-11-23 18:25 -------- d-----w- l:\users\Jirka.FIBOX.000\AppData\Roaming\dvdcss
2010-04-14 12:44 . 2009-10-01 18:58 -------- d-----w- l:\programdata\Microsoft Help
2010-04-12 13:08 . 2009-09-11 19:43 -------- d--h--w- l:\program files\InstallShield Installation Information
2010-04-07 18:00 . 2010-04-04 11:50 -------- d-----w- l:\program files\Common Files\ChaosGroup
2010-03-31 14:21 . 2009-11-22 12:59 142448 ----a-w- l:\users\Jirka.FIBOX.000\AppData\Local\GDIPFONTCACHEV1.DAT
2010-03-24 18:17 . 2010-03-24 08:04 952768 ----a-w- l:\programdata\Adobe\Reader\9.3\ARM\8801\AdobeARM.exe
2010-03-24 18:17 . 2010-03-24 08:04 70584 ----a-w- l:\programdata\Adobe\Reader\9.3\ARM\8801\AdobeExtractFiles.dll
2010-03-24 18:17 . 2010-03-24 08:04 326056 ----a-w- l:\programdata\Adobe\Reader\9.3\ARM\8801\ReaderUpdater.exe
2010-03-24 18:17 . 2010-03-24 08:04 326056 ----a-w- l:\programdata\Adobe\Reader\9.3\ARM\8801\AcrobatUpdater.exe
2010-03-22 18:14 . 2010-03-22 18:14 -------- d-----w- l:\programdata\InstallShield
2010-03-22 18:14 . 2009-09-28 08:55 -------- d-----w- l:\program files\Common Files\InstallShield
2010-03-21 20:24 . 2009-10-22 15:42 -------- d-----w- l:\program files\Spybot - Search & Destroy
2010-03-19 12:43 . 2010-03-19 12:43 -------- d-----w- l:\program files\Barvy
2010-03-18 20:19 . 2010-03-18 20:19 -------- d-----w- l:\users\Jirka.FIBOX.000\AppData\Roaming\Download Manager
2010-03-18 20:03 . 2010-03-18 20:03 -------- d-----w- l:\users\Jirka.FIBOX.000\AppData\Roaming\com.adobe.ExMan
2010-03-18 17:05 . 2009-10-09 12:23 -------- d-----w- l:\program files\Microsoft Silverlight
2010-03-16 12:47 . 2010-03-16 12:47 -------- d-----w- l:\programdata\Solidshield
2010-03-14 21:59 . 2010-03-14 21:59 -------- d-----w- l:\users\Jirka.FIBOX.000\AppData\Roaming\AB Studio
2010-03-14 21:58 . 2010-03-14 21:53 6656 ----a-w- l:\windows\system32\haspvdd.dll
2010-03-14 21:58 . 2010-03-14 21:53 47616 ----a-w- l:\windows\system32\drivers\Haspnt.sys
2010-03-14 21:58 . 2010-03-14 21:53 383 ----a-w- l:\windows\system32\haspdos.sys
2010-03-14 21:57 . 2010-03-14 21:53 -------- d-----w- l:\programdata\AB Studio
2010-03-14 21:53 . 2010-03-14 21:53 -------- d-----w- l:\programdata\System
2010-03-14 21:53 . 2010-03-14 21:51 -------- d-----w- l:\program files\Common Files\AB Studio Shared
2010-03-14 12:01 . 2010-03-14 12:01 -------- d-----w- l:\program files\ATI
2010-03-14 08:08 . 2010-03-13 22:19 -------- d-----w- l:\program files\Intel
2010-03-13 22:31 . 2010-03-13 22:31 -------- d-----w- l:\program files\IDT
2010-03-07 12:13 . 2010-03-03 14:25 12496 ----a-w- l:\windows\MSPuzzle.dat
2010-03-07 11:39 . 2010-01-03 18:24 -------- d-----w- l:\program files\Common Files\Adobe AIR
2010-03-07 11:38 . 2010-01-03 18:24 38784 ----a-w- l:\users\Default\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-03-07 11:38 . 2010-01-03 18:12 38784 ----a-w- l:\users\Jirka.FIBOX.000\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-03-03 17:10 . 2009-09-17 15:11 -------- d-----w- l:\programdata\FLEXnet
2010-03-03 14:24 . 2009-07-14 04:52 -------- d-----w- l:\program files\Microsoft Games
2010-03-03 14:23 . 2010-03-03 14:21 -------- d-----w- l:\program files\Microsoft Entertainment Pack - The Puzzle Collection
2010-02-28 14:09 . 2009-12-24 15:54 -------- d-----w- l:\users\Jirka.FIBOX.000\AppData\Roaming\DeepBurner
2010-02-27 14:05 . 2010-02-27 14:05 -------- d-----w- l:\users\Jirka.FIBOX.000\AppData\Roaming\InstallShield Installation Information
2010-02-27 13:52 . 2010-01-26 17:05 -------- d-----w- l:\program files\Common Files\Wise Installation Wizard
2010-02-27 13:50 . 2010-02-27 14:05 331776 ----a-w- l:\users\Jirka.FIBOX.000\AppData\Roaming\InstallShield Installation Information\{BFA90209-7AFF-4DB6-8E4B-E57305751AD7}\SetupUT3.exe
2010-02-24 08:16 . 2009-11-22 15:06 181632 ------w- l:\windows\system32\MpSigStub.exe
2010-02-02 07:45 . 2010-03-18 13:35 2048 ----a-w- l:\windows\system32\tzres.dll
2010-01-28 17:09 . 2010-01-28 17:09 182784 ----a-w- l:\windows\system32\Ncs2Setp.dll
2010-01-28 16:52 . 2010-01-28 16:52 734328 ----a-w- l:\windows\system32\ncs2dmix.dll
2010-01-28 16:52 . 2010-01-28 16:52 518264 ----a-w- l:\windows\system32\accesor.dll
2010-01-28 16:32 . 2010-01-28 16:32 128120 ----a-w- l:\windows\system32\ncs2instutility.dll
2010-01-28 16:16 . 2010-01-28 16:16 1718904 ----a-w- l:\windows\system32\ncscolib.dll
2010-01-27 12:52 . 2010-03-14 08:08 256712 ----a-w- l:\windows\system32\PROUnstl.exe
2010-01-26 17:06 . 2009-11-02 14:12 281760 ----a-w- l:\windows\system32\drivers\atksgt.sys
2010-01-26 17:06 . 2009-11-02 14:12 25888 ----a-w- l:\windows\system32\drivers\lirsgt.sys
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- l:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- l:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="l:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-10-21 39408]
"Sidebar"="l:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"ISUSPM Startup"="l:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-06-16 221184]
"Google Update"="l:\users\Jirka.FIBOX.000\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-04-19 136176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="l:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-05-14 2029640]
"PWRISOVM.EXE"="l:\program files\PowerISO\PWRISOVM.EXE" [2009-03-15 180224]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2008-01-11 623992]
"Windows Mobile Device Center"="l:\windows\WindowsMobile\wmdc.exe" [2007-05-31 648072]
"AdobeCS4ServiceManager"="l:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"GrooveMonitor"="g:\office 2007\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"QuickTime Task"="l:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]
"iTunesHelper"="l:\program files\iTunes\iTunesHelper.exe" [2008-01-15 267048]
"Adobe Reader Speed Launcher"="l:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]
"Adobe ARM"="l:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]
"SysTrayApp"="l:\program files\IDT\WDM\sttray.exe" [2009-07-15 458844]
"ISUSScheduler"="l:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-06-16 81920]
"StartCCC"="l:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-03-29 1086856]

l:\users\Jirka.FIBOX.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
msdsvc.lnk - l:\windows\System32\msdsvc.exe [2010-3-3 77824]

l:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Acrobat Speed Launcher.lnk - l:\windows\Installer\{AC76BA86-1029-0000-7760-000000000003}\_SC_Acrobat.exe [2009-9-17 295606]
Adobe Acrobat Synchronizer.lnk - c:\program files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe [2010-3-7 738968]
Canon LBP2900 Status Window.lnk - l:\windows\System32\spool\drivers\w32x86\3\CNAB4LAK.EXE [2008-5-8 50848]
McAfee Security Scan Plus.lnk - l:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

R3 AbSoftMgr4;AbSoftMgr4;l:\program files\Common Files\AB Studio Shared\AbSoftMgr4.exe [2008-06-16 630784]
R3 Adobe Version Cue CS4;Adobe Version Cue CS4;l:\program files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016]
R3 McComponentHostService;McAfee Security Scan Component Host Service;l:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 yukonw7;Ovladač NDIS6.2 Miniport pro řadič Marvell Yukon Ethernet Controller;l:\windows\system32\DRIVERS\yk62x86.sys [2009-07-13 311296]
S0 sptd;sptd;l:\windows\System32\Drivers\sptd.sys [2009-11-02 721904]
S1 ehdrv;ehdrv;l:\windows\system32\DRIVERS\ehdrv.sys [2009-05-14 107256]
S2 AfterFLICS;AfterFLICS;c:\program files\AFLICS\AfterFLICS.exe [2006-12-03 98306]
S2 ekrn;ESET Service;l:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-05-14 731840]
S2 epfwwfpr;epfwwfpr;l:\windows\system32\DRIVERS\epfwwfpr.sys [2009-05-14 93312]
S2 mi-raysat_3dsmax2010_32;mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit;c:\program files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe [2009-03-12 86016]
S2 SBSDWSCService;SBSD Security Center Service;l:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S3 e1yexpress;Intel(R) Gigabit Network Connections Driver;l:\windows\system32\DRIVERS\e1y6232.sys [2009-10-20 223960]
S3 wbondir;Winbond CIR Transceiver;l:\windows\system32\DRIVERS\wbondir.sys [2007-03-20 49664]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
GPSvcGroup REG_MULTI_SZ GPSvc
.
Obsah adresáře 'Naplánované úlohy'

2010-04-19 l:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3351475916-1720942700-161379336-1148Core.job
- l:\users\Jirka.FIBOX.000\AppData\Local\Google\Update\GoogleUpdate.exe [2010-04-19 14:27]
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://search.qip.ru
uStart Page = hxxp://companyweb
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://search.qip.ru/ie
uSearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xportovat do aplikace Microsoft Excel - g:\office~1\Office12\EXCEL.EXE/3000
FF - ProfilePath - l:\users\Jirka.FIBOX.000\AppData\Roaming\Mozilla\Firefox\Profiles\knwpcdh8.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://google.com
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - plugin: l:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: l:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: l:\users\Jirka.FIBOX.000\AppData\Local\Google\Update\1.2.183.23\npGoogleOneClick8.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-AdobeBridge - (no file)
AddRemove-Convert Doc_is1 - l:\program files\Softinterface

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0x8593B1F8]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
IoDeviceObjectType -> DumpProcedure -> 0xd46a624f
SecurityProcedure -> 0x8596b810
QueryNameProcedure -> 0x8596b9a0
user & kernel MBR OK

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(696)
l:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll

- - - - - - - > 'lsass.exe'(656)
l:\program files\Bonjour\mdnsNSP.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
l:\windows\system32\Ati2evxx.exe
l:\windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_0cbbaac32f0ea3a1\STacSV.exe
l:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
l:\program files\Bonjour\mDNSResponder.exe
l:\program files\Canon\DIAS\CnxDIAS.exe
l:\program files\DCPFLICS\DCPFLICS.exe
l:\windows\system32\CNAB4RPK.EXE
l:\windows\system32\WUDFHost.exe
l:\windows\system32\Ati2evxx.exe
l:\windows\system32\taskhost.exe
l:\windows\system32\conhost.exe
l:\program files\iPod\bin\iPodService.exe
l:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
l:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
l:\users\Jirka.FIBOX.000\AppData\Local\Google\Update\1.2.183.23\GoogleCrashHandler.exe
l:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
l:\windows\system32\sppsvc.exe
l:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe
.
**************************************************************************
.
Celkový čas: 2010-04-21 22:01:51 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-04-21 20:01

Před spuštěním: 943 648 768
Po spuštění: 6 253 813 760

- - End Of File - - 676EBD49DF30B5C1B2D05D9F852667D6

#8 Příspěvek od **Rudy** » 21 dub 2010 21:48

Ještě zkuste sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 .

thebobdestroyer · #9 Příspěvek od **thebobdestroyer** » 22 dub 2010 19:55

Děkuji mnohokrát pop-undery uz nevyskakuji, jen disk je ještě stále plnější než by měl být.
Přikládam ještě vysledky z kasperskeho.

Autoscan: completed 47 minutes ago (events: 102, objects: 1798716, time: 04:47:37)
22.4.2010 15:07:54 Task started
22.4.2010 15:14:59 Detected: Trojan.Win32.Swisyn.xyq L:\Windows\System32\msdsvc.exe
22.4.2010 15:21:32 Deleted: Trojan.Win32.Swisyn.xyq L:\Windows\System32\msdsvc.exe
22.4.2010 15:21:32 Deleted: Trojan.Win32.Swisyn.xyq L:\Windows\System32\msdsvc.exe
22.4.2010 15:24:08 Detected: Trojan.Win32.Swisyn.xyq A:\Downloads\Microsoft Entertainment Pack - The Puzzle Collection\Microsoft Entertainment Pack - The Puzzle Collection Setup.exe/msdsvc.exe
22.4.2010 15:24:39 Deleted: Trojan.Win32.Swisyn.xyq A:\Downloads\Microsoft Entertainment Pack - The Puzzle Collection\Microsoft Entertainment Pack - The Puzzle Collection Setup.exe
22.4.2010 16:13:58 Detected: Trojan-Downloader.Win32.Agent.dixb C:\Tutorials\Graphisoft\ArchiCAD BIM Experience\Uninstall.TGB\archive.jar/f85172f2514d531c0a9384068920af7f/win32ppk/LauncherMain.exe
22.4.2010 16:14:01 Deleted: Trojan-Downloader.Win32.Agent.dixb C:\Tutorials\Graphisoft\ArchiCAD BIM Experience\Uninstall.TGB\archive.jar/f85172f2514d531c0a9384068920af7f/win32ppk/LauncherMain.exe
22.4.2010 16:16:27 Detected: Trojan-PSW.Win32.QQPass.sso D:\Plocha jirka\N_AVS.Video.Converter.v6.2.3.320.rar/AVS.Video.Converter.v6.2.3.320/AVSVideoConverter.exe
22.4.2010 16:16:27 Untreated: Trojan-PSW.Win32.QQPass.sso D:\Plocha jirka\N_AVS.Video.Converter.v6.2.3.320.rar/AVS.Video.Converter.v6.2.3.320/AVSVideoConverter.exe Write not supported
22.4.2010 16:17:32 Detected: Trojan-PSW.Win32.LdPinch.amvx D:\Plocha jirka\Ostatní\bia.exe
22.4.2010 16:18:05 Deleted: Trojan-PSW.Win32.LdPinch.amvx D:\Plocha jirka\Ostatní\bia.exe
22.4.2010 16:19:28 Detected: Trojan-PSW.Win32.QQPass.sso D:\Plocha jirka\Ostatní\AVS.Video.Converter.v6.2.3.320\AVSVideoConverter.exe
22.4.2010 16:20:13 Cannot be deleted: Trojan-PSW.Win32.QQPass.sso D:\Plocha jirka\Ostatní\AVS.Video.Converter.v6.2.3.320\AVSVideoConverter.exe Object not found
22.4.2010 16:25:30 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\hol-agro zaloha\ac_runactivecontent.js
22.4.2010 16:25:30 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\hol-agro zaloha\ja.slideshow.js
22.4.2010 16:25:31 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\hol-agro zaloha\slide.html
22.4.2010 16:25:44 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\hol-agro zaloha\swfobject_modified.js
22.4.2010 16:25:44 Detected: Exploit.PHP.Agent.h F:\HOL-Agro\Nový WEB\hol-agro zaloha\images\gifimg.php
22.4.2010 16:25:44 Deleted: Exploit.PHP.Agent.h F:\HOL-Agro\Nový WEB\hol-agro zaloha\images\gifimg.php
22.4.2010 16:25:45 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\hol-agro zaloha\javascript\effects.js
22.4.2010 16:25:45 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\hol-agro zaloha\javascript\lightwindow.js
22.4.2010 16:25:45 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\hol-agro zaloha\javascript\prototype.js
22.4.2010 16:25:45 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\hol-agro zaloha\javascript\scriptaculous.js
22.4.2010 16:25:46 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\hol-agro zaloha\js\slideshow.flash.js
22.4.2010 16:25:46 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\hol-agro zaloha\js\mootools.js
22.4.2010 16:25:46 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\hol-agro zaloha\js\slideshow.fold.js
22.4.2010 16:25:46 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\hol-agro zaloha\js\slideshow.js
22.4.2010 16:25:46 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\hol-agro zaloha\js\slideshow.kenburns.js
22.4.2010 16:25:46 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\hol-agro zaloha\js\slideshow.push.js
22.4.2010 16:26:01 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\hol-agro zaloha\Scripts\ac_runactivecontent.js
22.4.2010 16:26:01 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\hol-agro zaloha\Scripts\swfobject_modified.js
22.4.2010 16:26:04 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý\ac_runactivecontent.js
22.4.2010 16:26:04 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý\ja.slideshow.js
22.4.2010 16:26:04 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý\slide.html
22.4.2010 16:26:05 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý\swfobject_modified.js
22.4.2010 16:26:05 Detected: Exploit.PHP.Agent.h F:\HOL-Agro\Nový WEB\NOVý\images\gifimg.php
22.4.2010 16:26:06 Deleted: Exploit.PHP.Agent.h F:\HOL-Agro\Nový WEB\NOVý\images\gifimg.php
22.4.2010 16:26:07 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý\javascript\effects.js
22.4.2010 16:26:07 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý\javascript\lightwindow.js
22.4.2010 16:26:07 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý\javascript\scriptaculous.js
22.4.2010 16:26:07 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý\javascript\prototype.js
22.4.2010 16:26:07 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý\js\slideshow.flash.js
22.4.2010 16:26:07 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý\js\mootools.js
22.4.2010 16:26:07 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý\js\slideshow.fold.js
22.4.2010 16:26:07 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý\js\slideshow.js
22.4.2010 16:26:07 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý\js\slideshow.kenburns.js
22.4.2010 16:26:08 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý\js\slideshow.push.js
22.4.2010 16:26:25 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý\Scripts\AC_RunActiveContent.js
22.4.2010 16:26:25 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý\Scripts\swfobject_modified.js
22.4.2010 16:26:26 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý – kopie\ac_runactivecontent.js
22.4.2010 16:26:26 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý – kopie\ja.slideshow.js
22.4.2010 16:26:26 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý – kopie\slide.html
22.4.2010 16:26:27 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý – kopie\swfobject_modified.js
22.4.2010 16:26:29 Detected: Exploit.PHP.Agent.h F:\HOL-Agro\Nový WEB\NOVý – kopie\images\gifimg.php
22.4.2010 16:26:29 Deleted: Exploit.PHP.Agent.h F:\HOL-Agro\Nový WEB\NOVý – kopie\images\gifimg.php
22.4.2010 16:26:31 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý – kopie\javascript\effects.js
22.4.2010 16:26:31 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý – kopie\javascript\lightwindow.js
22.4.2010 16:26:32 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý – kopie\javascript\scriptaculous.js
22.4.2010 16:26:32 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý – kopie\javascript\prototype.js
22.4.2010 16:26:32 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý – kopie\js\slideshow.flash.js
22.4.2010 16:26:32 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý – kopie\js\mootools.js
22.4.2010 16:26:32 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý – kopie\js\slideshow.fold.js
22.4.2010 16:26:33 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý – kopie\js\slideshow.js
22.4.2010 16:26:33 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý – kopie\js\slideshow.kenburns.js
22.4.2010 16:26:33 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý – kopie\js\slideshow.push.js
22.4.2010 16:27:05 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý – kopie\Scripts\AC_RunActiveContent.js
22.4.2010 16:27:05 Detected: HEUR:Trojan.Script.Generic F:\HOL-Agro\Nový WEB\NOVý – kopie\Scripts\swfobject_modified.js
22.4.2010 17:07:54 Detected: Trojan-Downloader.Win32.Agent.dibf G:\Downloads\ArchiCAD 13 INT 32bit and 64bit with crack - ENGINE\AC13-INT.iso/Graphisoft BIM Server/Graphisoft BIM Server-Win32/archive.jar/1ab072e136b1ec4ecd1ae4a046679047/win32ppk/LauncherMain.exe
22.4.2010 17:07:54 Untreated: Trojan-Downloader.Win32.Agent.dibf G:\Downloads\ArchiCAD 13 INT 32bit and 64bit with crack - ENGINE\AC13-INT.iso/Graphisoft BIM Server/Graphisoft BIM Server-Win32/archive.jar/1ab072e136b1ec4ecd1ae4a046679047/win32ppk/LauncherMain.exe Write not supported
22.4.2010 17:09:15 Detected: Trojan-Downloader.Win32.Agent.dibf G:\Downloads\ArchiCAD 13 INT 32bit and 64bit with crack - ENGINE\AC13-INT.iso/Graphisoft BIM Server/Graphisoft BIM Server-Win64/archive.jar/48f458679af6eec6ad9dd93f47a076d7/win32ppk/LauncherMain.exe
22.4.2010 17:09:15 Untreated: Trojan-Downloader.Win32.Agent.dibf G:\Downloads\ArchiCAD 13 INT 32bit and 64bit with crack - ENGINE\AC13-INT.iso/Graphisoft BIM Server/Graphisoft BIM Server-Win64/archive.jar/48f458679af6eec6ad9dd93f47a076d7/win32ppk/LauncherMain.exe Write not supported
22.4.2010 17:12:13 Detected: HEUR:Trojan.Script.Generic G:\Hol-agro\ac_runactivecontent.js
22.4.2010 17:52:10 Detected: Trojan.Win32.DNSChanger.uek G:\TheBobDestroyer\crack3264.exe/data0001
22.4.2010 17:52:40 Detected: Rootkit.Win32.TDSS.pxq G:\TheBobDestroyer\crack3264.exe/data0002
22.4.2010 17:52:50 Deleted: Rootkit.Win32.TDSS.pxq G:\TheBobDestroyer\crack3264.exe
22.4.2010 17:52:51 Detected: Trojan.Win32.DNSChanger.uek G:\TheBobDestroyer\keygen3264.exe/data0001
22.4.2010 17:52:51 Detected: Rootkit.Win32.TDSS.pxq G:\TheBobDestroyer\keygen3264.exe/data0002
22.4.2010 17:53:01 Deleted: Rootkit.Win32.TDSS.pxq G:\TheBobDestroyer\keygen3264.exe
22.4.2010 17:53:02 Detected: Trojan.Win32.DNSChanger.uek G:\TheBobDestroyer\patch3264.exe/data0001
22.4.2010 17:53:02 Detected: Rootkit.Win32.TDSS.pxq G:\TheBobDestroyer\patch3264.exe/data0002
22.4.2010 17:53:12 Deleted: Rootkit.Win32.TDSS.pxq G:\TheBobDestroyer\patch3264.exe
22.4.2010 17:54:21 Detected: Trojan-Downloader.NSIS.Agent.cu G:\VIDEO\VR_150sp3m_2010.rar/VR_150sp3m_2010/vray-adv-150SP3a-max2010-x86.exe/data0002/n2pclient.exe/data0002/data0001
22.4.2010 17:54:21 Untreated: Trojan-Downloader.NSIS.Agent.cu G:\VIDEO\VR_150sp3m_2010.rar/VR_150sp3m_2010/vray-adv-150SP3a-max2010-x86.exe/data0002/n2pclient.exe/data0002/data0001 Write not supported
22.4.2010 17:54:23 Detected: Trojan-Downloader.NSIS.Agent.ct G:\VIDEO\VR_150sp3m_2010.rar/VR_150sp3m_2010/vray-adv-150SP3a-max2010-x86.exe/data0002/n2pclient.exe/data0003/data0001
22.4.2010 17:54:23 Untreated: Trojan-Downloader.NSIS.Agent.ct G:\VIDEO\VR_150sp3m_2010.rar/VR_150sp3m_2010/vray-adv-150SP3a-max2010-x86.exe/data0002/n2pclient.exe/data0003/data0001 Write not supported
22.4.2010 18:04:50 Detected: HEUR:Trojan.Script.Generic I:\hol agro\ac_runactivecontent.js
22.4.2010 18:04:51 Detected: HEUR:Trojan.Script.Generic I:\hol agro\ja.slideshow.js
22.4.2010 18:05:04 Detected: HEUR:Trojan.Script.Generic I:\hol agro\slide.html
22.4.2010 18:05:05 Detected: HEUR:Trojan.Script.Generic I:\hol agro\javascript\effects.js
22.4.2010 18:05:05 Detected: HEUR:Trojan.Script.Generic I:\hol agro\javascript\lightwindow.js
22.4.2010 18:05:05 Detected: HEUR:Trojan.Script.Generic I:\hol agro\javascript\prototype.js
22.4.2010 18:05:06 Detected: HEUR:Trojan.Script.Generic I:\hol agro\javascript\scriptaculous.js
22.4.2010 18:05:06 Detected: HEUR:Trojan.Script.Generic I:\hol agro\js\mootools.js
22.4.2010 18:05:06 Detected: HEUR:Trojan.Script.Generic I:\hol agro\js\slideshow.flash.js
22.4.2010 18:05:06 Detected: HEUR:Trojan.Script.Generic I:\hol agro\js\slideshow.fold.js
22.4.2010 18:05:06 Detected: HEUR:Trojan.Script.Generic I:\hol agro\js\slideshow.js
22.4.2010 18:05:06 Detected: HEUR:Trojan.Script.Generic I:\hol agro\js\slideshow.kenburns.js
22.4.2010 18:05:06 Detected: HEUR:Trojan.Script.Generic I:\hol agro\js\slideshow.push.js
22.4.2010 18:05:06 Detected: HEUR:Trojan.Script.Generic I:\hol agro\Scripts\ac_runactivecontent.js
22.4.2010 18:05:06 Detected: HEUR:Trojan.Script.Generic I:\hol agro\Scripts\swfobject_modified.js
22.4.2010 19:55:31 Task completed

thebobdestroyer

ted se jestě ale začaly zasekávat programy a možná by se dalo řict i ovladače (zvukovka) - vypada to že se reinstalování windowsů nevyhnu..

#11 Příspěvek od **Rudy** » 22 dub 2010 20:50

OK. Teď použijte CCleaner: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 a zbavte PC ostatního balastu.

thebobdestroyer

Děkuji mockrát problém byl odstraněn.

#13 Příspěvek od **Rudy** » 25 dub 2010 20:26

Nemáte zač!

VIRY.CZ

Harddisk se sám od sebe plní

Harddisk se sám od sebe plní

Re: Harddisk se sám od sebe plní

Re: Harddisk se sám od sebe plní

Re: Harddisk se sám od sebe plní

Re: Harddisk se sám od sebe plní

Re: Harddisk se sám od sebe plní

Re: Harddisk se sám od sebe plní

Re: Harddisk se sám od sebe plní

Re: Harddisk se sám od sebe plní

Re: Harddisk se sám od sebe plní

Re: Harddisk se sám od sebe plní

Re: Harddisk se sám od sebe plní

Re: Harddisk se sám od sebe plní