Prosím kontrolu.Avast mi hlásí u všeho co chci otevřít vir

[Doktorcz]

Avast mi hlásí u všeho vir - červ vitro
Prosím o radu.děkuji.Ještě jedna věc,nevíte zda v pohodě funguje virustotal ? nemůžu se připojit.Ostatní stránky fungujou v pohodě.Nevím jestli to nemá souvislost.Ještě jednou díky za pomoc.


Logfile of random's system information tool 1.06 (written by random/random)
Run by Pc_Nextpro at 2010-04-24 16:39:23
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (13%) free of 76 GB
Total RAM: 2047 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:39:33, on 24.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Photodex\ProShowProducer\ScsiAccess.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\VIA\RAID\vialogsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\Mixer.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Downloads\RSIT(2).exe
C:\Program Files\trend micro\Pc_Nextpro.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://nextpro.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {ad708c09-d51b-45b3-9d28-4eba2681febf} - (no file)
O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\WINDOWS\WebIE.dll
O2 - BHO: 123WashAll BHO - {3D1B06AB-EF14-4FF9-871A-9B023FA28A7E} - C:\WINDOWS\system32\IEAdsFilter.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: FCBHOBHO Class - {8B3868B4-EBA8-48FA-A19B-E1DFB99066FA} - C:\Program Files\Flash Capture\fcbho.dll
O2 - BHO: (no name) - {ad708c09-d51b-45b3-9d28-4eba2681febf} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\WINDOWS\WebIE.dll
O3 - Toolbar: (no name) - {ad708c09-d51b-45b3-9d28-4eba2681febf} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\IEPro\IEProRecorder.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O4 - Startup: _uninst_setup_9.0.0.722_02.12.2009_17-34.exe.lnk = C:\Documents and Settings\Pc_Nextpro\Local Settings\temp\_uninst_setup_9.0.0.722_02.12.2009_17-34.exe.bat
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint - Náhled - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint - Přidat na seznam k tisku - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint - Tisk - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint - Vysokorychlostní tisk - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
O8 - Extra context menu item: Save F&lash with FlashCapture - res://C:\Program Files\Flash Capture\fciext.dll/FCIEXT.htm
O9 - Extra button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: FlashCapture - {753BBC4B-CC73-4fb8-A5B5-CA09C804C1DD} - C:\Program Files\Flash Capture\fciext.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\WINDOWS\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 9452667265
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMSAccess - Unknown owner - C:\Program Files\Blaze Media Pro\NMSAccess32.exe (file missing)
O23 - Service: ScsiAccess - Unknown owner - C:\Program Files\Photodex\ProShowProducer\ScsiAccess.exe
O23 - Service: VRAID Log Service - Unknown owner - C:\Program Files\VIA\RAID\vialogsv.exe

--
End of file - 10593 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00011268-E188-40DF-A514-835FCD78B1BF}]
IE7Pro BHO - C:\Program Files\IEPro\iepro.dll [2010-03-20 777392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\WINDOWS\WebIE.dll [2009-12-06 491520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3D1B06AB-EF14-4FF9-871A-9B023FA28A7E}]
EvtFilter Class - C:\WINDOWS\system32\IEAdsFilter.dll [2004-12-13 90112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{68F9551E-0411-48E4-9AAF-4BC42A6A46BE}]
EWPBrowseObject Class - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll [2006-04-18 34304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre6\bin\ssv.dll [2009-10-11 321312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8B3868B4-EBA8-48FA-A19B-E1DFB99066FA}]
BHO Class - C:\Program Files\Flash Capture\fcbho.dll [2010-04-15 815104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ad708c09-d51b-45b3-9d28-4eba2681febf}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\WINDOWS\WebIE.dll [2009-12-06 491520]
{ad708c09-d51b-45b3-9d28-4eba2681febf}
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} - Easy-WebPrint - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll [2006-04-18 552960]
{C55BBCD6-41AD-48AD-9953-3609C48EACC7} - Grab Pro - C:\Program Files\IEPro\IEProRecorder.dll [2010-03-20 662736]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]
"C-Media Mixer"=Mixer.exe /startup []
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"SSBkgdUpdate"=C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2003-09-30 180224]
"OpwareSE4"=C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe [2006-03-21 69632]
"QuickTime Task"=C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe [2009-11-11 442368]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OEXPRESS"= []
"WEBTRAN"= []
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA]
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2004-06-10 339968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BluetoothAuthenticationAgent]
bthprops.cpl,,BluetoothAuthenticationAgent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpwareSE4]
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe [2006-03-21 69632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe [2009-11-11 442368]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe /startoptions []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2003-09-30 180224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UIWatcher]
C:\Program Files\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe [2009-02-23 3508568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Gamma Loader.lnk]
C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [2000-08-24 110592]

C:\Documents and Settings\Pc_Nextpro\Nabídka Start\Programy\Po spuštění
_uninst_setup_9.0.0.722_02.12.2009_17-34.exe.lnk - C:\Documents and Settings\Pc_Nextpro\Local Settings\temp\_uninst_setup_9.0.0.722_02.12.2009_17-34.exe.bat

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-08-24 133120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\STRONG\StrongDC.exe"="C:\Program Files\STRONG\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Sony Ericsson\Update Service\Update Service.exe"="C:\Program Files\Sony Ericsson\Update Service\Update Service.exe:*:Enabled:Update Service"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\IEPro\MiniDM.exe"="C:\Program Files\IEPro\MiniDM.exe:*:Enabled:MiniDM"
"\??\C:\WINDOWS\system32\winlogon.exe"="\??\C:\WINDOWS\system32\winlogon.exe:*:enabled:@shell32.dll,-1"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{972162cc-c153-11de-81e1-000b6a8d9d84}]
shell\AutoRun\command - K:\ATTRIB.EXE

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{dbe35eed-b9b0-11de-8a38-806d6172696f}]
shell\AutoRun\command - E:\startdvd.exe
shell\readme\command - notepad cti_mne.txt


======List of files/folders created in the last 1 months======

2010-04-24 16:39:24 ----D---- C:\Program Files\trend micro
2010-04-24 16:39:23 ----D---- C:\rsit
2010-04-24 14:39:56 ----D---- C:\Program Files\MWSnap
2010-04-24 14:37:20 ----D---- C:\Documents and Settings\Pc_Nextpro\Data aplikací\FastStone
2010-04-24 14:36:00 ----D---- C:\Program Files\FastStone Capture
2010-04-24 13:28:56 ----D---- C:\Documents and Settings\Pc_Nextpro\Data aplikací\GrabPro
2010-04-24 13:28:50 ----D---- C:\Program Files\IEPro
2010-04-24 13:28:49 ----D---- C:\Documents and Settings\Pc_Nextpro\Data aplikací\IEPro
2010-04-24 13:13:08 ----HDC---- C:\WINDOWS\ie8
2010-04-24 08:22:32 ----D---- C:\Program Files\WashAll
2010-04-24 08:18:30 ----D---- C:\Program Files\Flash Capture
2010-04-23 12:29:57 ----D---- C:\Program Files\Diar 5
2010-04-23 09:16:25 ----D---- C:\Program Files\Photodex
2010-04-23 09:12:52 ----D---- C:\Documents and Settings\Pc_Nextpro\Data aplikací\Photodex
2010-04-23 09:12:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\Photodex
2010-04-22 13:06:12 ----D---- C:\Program Files\Wedding Nail-art
2010-04-21 10:58:29 ----D---- C:\WINDOWS\Vbox
2010-04-21 10:58:23 ----A---- C:\WINDOWS\ULEAD32.INI
2010-04-21 10:58:11 ----D---- C:\WINDOWS\Noslip
2010-03-31 08:00:46 ----A---- C:\WINDOWS\system32\frapsvid.dll
2010-03-31 06:51:42 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$
2010-03-31 06:51:10 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-03-31 06:50:33 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-03-31 06:50:19 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-03-27 21:52:40 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-03-27 21:52:31 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-03-27 21:52:19 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-03-27 21:52:07 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-03-27 21:51:55 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-03-27 21:51:29 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-03-27 21:51:11 ----HDC---- C:\WINDOWS\$NtUninstallKB978207$
2010-03-27 21:50:59 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-03-27 21:50:47 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-03-27 21:50:36 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-03-27 21:50:22 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-03-27 21:50:10 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-03-27 21:49:56 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-03-27 21:49:45 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-03-27 21:49:36 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-03-27 21:49:27 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-03-27 21:49:10 ----HDC---- C:\WINDOWS\$NtUninstallKB977165-v2$
2010-03-27 21:48:41 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-03-27 21:48:29 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-03-27 21:48:19 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-03-27 21:47:54 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-03-27 21:47:34 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-03-27 21:47:20 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-03-27 21:47:09 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-03-27 21:46:58 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-03-27 21:46:47 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$
2010-03-27 21:46:39 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-03-27 21:46:29 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-03-27 21:46:17 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-03-27 21:46:06 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-03-27 21:45:55 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-03-27 21:45:41 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-03-27 21:45:35 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2010-03-27 21:44:56 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-03-27 21:44:47 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-03-27 21:44:39 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-03-27 21:44:29 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2010-03-27 21:44:17 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-03-27 21:44:03 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-03-27 21:43:45 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2010-03-27 21:43:34 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-03-27 21:43:19 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-03-27 21:43:00 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-03-27 21:42:51 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-03-27 21:42:40 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-03-27 21:42:30 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-03-27 21:42:19 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-03-27 21:42:09 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-03-27 21:41:58 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-03-27 21:41:46 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-03-27 21:41:35 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-03-27 21:41:23 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-03-27 21:41:11 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-03-27 21:41:04 ----A---- C:\WINDOWS\imsins.BAK
2010-03-27 21:40:54 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2010-03-26 20:17:50 ----D---- C:\Program Files\Impact Web Audio
2010-03-26 19:47:04 ----N---- C:\WINDOWS\cmaudio.ini
2010-03-26 19:46:57 ----D---- C:\Program Files\C-Media
2010-03-26 19:46:52 ----A---- C:\WINDOWS\CMISETUP.INI
2010-03-26 19:46:52 ----A---- C:\WINDOWS\CMCDPLAY.INI
2010-03-26 19:33:29 ----D---- C:\WINDOWS\system32\CatRoot_bak
2010-03-25 23:06:55 ----D---- C:\WINDOWS\Prefetch
2010-03-25 22:56:09 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-03-25 22:53:04 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2010-03-25 22:50:36 ----A---- C:\WINDOWS\system32\wshirda.dll
2010-03-25 22:50:36 ----A---- C:\WINDOWS\system32\irmon.dll
2010-03-25 22:50:36 ----A---- C:\WINDOWS\system32\irftp.exe
2010-03-25 22:35:36 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-03-25 22:35:36 ----A---- C:\WINDOWS\system32\irclass.dll
2010-03-25 22:35:09 ----RA---- C:\WINDOWS\SET97.tmp
2010-03-25 22:35:06 ----RA---- C:\WINDOWS\SET8B.tmp
2010-03-25 22:35:05 ----RA---- C:\WINDOWS\SET8A.tmp
2010-03-25 21:17:56 ----D---- C:\Program Files\ArcSoft
2010-03-25 09:19:36 ----A---- C:\WINDOWS\system32\wuweb.dll
2010-03-25 09:19:32 ----A---- C:\WINDOWS\system32\wups.dll
2010-03-25 09:19:30 ----A---- C:\WINDOWS\system32\wucltui.dll
2010-03-25 09:19:26 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-03-25 09:19:25 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-03-25 09:19:23 ----A---- C:\WINDOWS\system32\wuapi.dll
2010-03-25 09:03:46 ----A---- C:\AUTOEXEC.BAT
2010-03-25 08:42:59 ----RA---- C:\WINDOWS\SETE4.tmp
2010-03-25 08:42:57 ----RA---- C:\WINDOWS\SETD8.tmp
2010-03-25 08:42:55 ----RA---- C:\WINDOWS\SETD5.tmp
2010-03-25 08:21:32 ----D---- C:\32788R22FWJFW
2010-03-25 08:20:41 ----D---- C:\Qoobox

======List of files/folders modified in the last 1 months======

2010-04-24 16:39:24 ----RD---- C:\Program Files
2010-04-24 16:39:19 ----D---- C:\Downloads
2010-04-24 16:33:30 ----D---- C:\Program Files\7-Zip
2010-04-24 16:32:30 ----D---- C:\WINDOWS\system32
2010-04-24 15:17:59 ----D---- C:\WINDOWS\Temp
2010-04-24 14:21:36 ----D---- C:\WINDOWS
2010-04-24 14:21:36 ----A---- C:\WINDOWS\MAILTRAN.INI
2010-04-24 14:16:48 ----D---- C:\Program Files\Windows Media Player
2010-04-24 13:18:01 ----HD---- C:\WINDOWS\inf
2010-04-24 13:17:55 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-24 13:17:03 ----D---- C:\WINDOWS\system32\cs-cz
2010-04-24 13:17:02 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-24 13:17:02 ----D---- C:\WINDOWS\Media
2010-04-24 13:17:02 ----D---- C:\WINDOWS\Help
2010-04-24 13:17:02 ----D---- C:\Program Files\Internet Explorer
2010-04-24 13:15:31 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-24 08:07:33 ----D---- C:\Program Files\Mozilla Firefox
2010-04-23 16:27:58 ----D---- C:\Documents and Settings\Pc_Nextpro\Data aplikací\AIMP
2010-04-23 15:59:02 ----D---- C:\Program Files\Mozilla Thunderbird
2010-04-23 09:17:52 ----D---- C:\Documents and Settings\Pc_Nextpro\Data aplikací\uTorrent
2010-04-23 09:17:37 ----A---- C:\WINDOWS\TRNCOM.INI
2010-04-23 09:16:50 ----D---- C:\Documents and Settings\Pc_Nextpro\Data aplikací\Mozilla
2010-04-22 15:01:20 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-04-22 13:08:17 ----RSD---- C:\WINDOWS\Fonts
2010-04-21 11:59:10 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-19 19:48:53 ----A---- C:\WINDOWS\NeroDigital.ini
2010-04-19 15:21:14 ----D---- C:\Documents and Settings\Pc_Nextpro\Data aplikací\Vso
2010-04-19 14:55:30 ----D---- C:\Config.Msi
2010-04-19 12:10:56 ----D---- C:\Stahování
2010-04-19 09:13:44 ----SHD---- C:\WINDOWS\Installer
2010-04-10 19:01:56 ----A---- C:\WINDOWS\WTRAN32.INI
2010-04-09 15:00:45 ----D---- C:\Documents and Settings\Pc_Nextpro\Data aplikací\vlc
2010-04-06 19:03:18 ----D---- C:\Program Files\AIMP2
2010-04-06 18:26:29 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-04-06 18:23:53 ----D---- C:\WINDOWS\security
2010-03-31 06:51:12 ----D---- C:\WINDOWS\system32\drivers
2010-03-30 04:31:05 ----HDC---- C:\WINDOWS\ie7
2010-03-30 04:30:21 ----D---- C:\WINDOWS\system32\CatRoot
2010-03-30 04:25:20 ----D---- C:\WINDOWS\Debug
2010-03-29 21:44:40 ----D---- C:\Documents and Settings\Pc_Nextpro\Data aplikací\dvdcss
2010-03-27 22:59:03 ----D---- C:\WINDOWS\AppPatch
2010-03-27 22:59:02 ----D---- C:\WINDOWS\system32\wbem
2010-03-27 21:47:05 ----D---- C:\Program Files\Movie Maker
2010-03-27 21:44:32 ----D---- C:\Program Files\Outlook Express
2010-03-27 14:54:08 ----A---- C:\WINDOWS\mixerdef.ini
2010-03-26 19:47:27 ----D---- C:\WINDOWS\system
2010-03-26 19:37:43 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-03-26 19:36:50 ----A---- C:\WINDOWS\Ascd_tmp.ini
2010-03-26 19:24:26 ----D---- C:\WINDOWS\SoftwareDistribution
2010-03-25 23:30:49 ----D---- C:\WINDOWS\system32\Setup
2010-03-25 23:30:37 ----D---- C:\WINDOWS\system32\usmt
2010-03-25 23:30:25 ----D---- C:\WINDOWS\ehome
2010-03-25 23:30:24 ----D---- C:\WINDOWS\ime
2010-03-25 23:30:05 ----D---- C:\WINDOWS\PeerNet
2010-03-25 23:29:45 ----D---- C:\WINDOWS\system32\npp
2010-03-25 23:29:37 ----D---- C:\WINDOWS\msagent
2010-03-25 23:26:24 ----D---- C:\WINDOWS\system32\1029
2010-03-25 23:26:05 ----D---- C:\WINDOWS\twain_32
2010-03-25 23:25:47 ----D---- C:\WINDOWS\system32\icsxml
2010-03-25 23:25:10 ----D---- C:\WINDOWS\system32\ias
2010-03-25 23:25:01 ----D---- C:\WINDOWS\system32\1033
2010-03-25 23:23:32 ----D---- C:\WINDOWS\Driver Cache
2010-03-25 23:10:20 ----D---- C:\WINDOWS\Registration
2010-03-25 23:09:03 ----SHD---- C:\System Volume Information
2010-03-25 23:09:03 ----D---- C:\WINDOWS\system32\Restore
2010-03-25 23:06:10 ----D---- C:\WINDOWS\system32\config
2010-03-25 22:57:09 ----A---- C:\WINDOWS\ODBCINST.INI
2010-03-25 22:56:12 ----RD---- C:\WINDOWS\Web
2010-03-25 22:56:02 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-03-25 22:55:48 ----A---- C:\WINDOWS\win.ini
2010-03-25 22:55:39 ----D---- C:\WINDOWS\system32\oobe
2010-03-25 22:55:37 ----D---- C:\WINDOWS\srchasst
2010-03-25 22:55:14 ----D---- C:\Program Files\NetMeeting
2010-03-25 22:55:09 ----D---- C:\Program Files\Common Files\System
2010-03-25 22:53:45 ----D---- C:\WINDOWS\system32\Com
2010-03-25 22:53:08 ----D---- C:\Program Files\Windows NT
2010-03-25 22:52:00 ----SH---- C:\boot.ini
2010-03-25 22:35:44 ----A---- C:\WINDOWS\system.ini
2010-03-25 22:35:21 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2010-03-25 22:34:37 ----D---- C:\WINDOWS\WinSxS
2010-03-25 21:57:02 ----D---- C:\Documents and Settings\Pc_Nextpro\Data aplikací\Canon
2010-03-25 21:46:27 ----D---- C:\Program Files\Canon
2010-03-25 12:30:52 ----D---- C:\Program Files\MSECACHE
2010-03-25 12:29:51 ----D---- C:\Program Files\SweetLight
2010-03-25 11:29:58 ----RSD---- C:\WINDOWS\assembly
2010-03-25 11:03:52 ----D---- C:\Program Files\Sony Ericsson
2010-03-25 11:03:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sony Ericsson
2010-03-25 11:03:31 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-03-25 10:36:45 ----D---- C:\Documents and Settings\Pc_Nextpro\Data aplikací\Teleca
2010-03-25 10:36:38 ----D---- C:\WINDOWS\Downloaded Installations
2010-03-25 10:36:13 ----D---- C:\Program Files\Common Files\Teleca Shared
2010-03-25 10:35:50 ----D---- C:\Program Files\Common Files
2010-03-25 10:21:34 ----D---- C:\Program Files\Common Files\Anvsoft
2010-03-25 10:20:52 ----D---- C:\Program Files\DreamCom
2010-03-25 09:38:11 ----D---- C:\WINDOWS\L2Schemas
2010-03-25 09:37:53 ----D---- C:\WINDOWS\Network Diagnostic
2010-03-25 09:36:34 ----D---- C:\WINDOWS\system32\cs
2010-03-25 08:59:14 ----D---- C:\WINDOWS\Cursors
2010-03-25 08:30:33 ----A---- C:\WINDOWS\UPGRADE.TXT
2010-03-25 08:17:06 ----SHD---- C:\RECYCLER

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2004-08-17 41216]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-09-15 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-09-15 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-09-15 94160]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-04-14 701440]
R3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2006-01-19 10068]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2004-08-03 17024]
R3 BTHidEnum;Bluetooth HID Enumerator; C:\WINDOWS\system32\DRIVERS\vbtenum.sys [2005-07-29 11988]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2004-08-03 100992]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2004-08-03 18944]
R3 cmpci;C-Media PCI Audio Driver (WDM); C:\WINDOWS\system32\drivers\cmaudio.sys [2002-01-29 370382]
R3 FETNDIS;VIA Rhine Family Fast Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2009-06-29 40448]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-10-25 9600]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2004-08-03 59648]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-04 59264]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-04 25856]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
R3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2004-10-19 61312]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2006-02-28 84836]
S1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys []
S1 InCDRm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys []
S3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2005-08-31 20480]
S3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys [2005-08-31 20480]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2005-10-23 23000]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTNetFilter;Bluetooth Network Filter; \??\C:\Program Files\IVT Corporation\BlueSoleil\Device\Win2k\BTNetFilter.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024]
S3 cmuda3;C-Media PCI Audio Interface; C:\WINDOWS\system32\drivers\cmudax3.sys [2009-03-18 1512960]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys []
S3 FTDIBUS;USB Serial Converter Driver; C:\WINDOWS\system32\drivers\ftdibus.sys [2009-10-22 57800]
S3 FTSER2K;USB Serial Port Driver; C:\WINDOWS\system32\drivers\ftser2k.sys [2009-10-22 72520]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-17 10880]
S3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-10-20 47360]
S3 s115bus;Sony Ericsson Device 115 driver (WDM); C:\WINDOWS\system32\DRIVERS\s115bus.sys [2007-04-23 83208]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s115mdfl.sys [2007-04-23 15112]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s115mdm.sys [2007-04-23 108680]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s115mgmt.sys [2007-04-23 100488]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s115obex.sys [2007-04-23 98568]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328]
S4 InCDFs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys []
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 BlueSoleil Hid Service;BlueSoleil Hid Service; C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe [2005-04-06 110592]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 ScsiAccess;ScsiAccess; C:\Program Files\Photodex\ProShowProducer\ScsiAccess.exe [2010-04-23 186760]
R2 VRAID Log Service;VRAID Log Service; C:\Program Files\VIA\RAID\vialogsv.exe [2008-09-24 52888]
S2 NMSAccess;NMSAccess; C:\Program Files\Blaze Media Pro\NMSAccess32.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
S3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-02-01 676352]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 98304]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Doktorcz]

Hm .... stáhnul jsem to ze STAHUJ.cz......jako jeden freeware .
druhý PC nemám.Mrknu na postup a uvidim co se dá dělat.

[Doktorcz]

Dostal jsem se na Avira antivir web - http://www.free-av.com/en/download/index.html
Nevim ale který mám použít free tool.

Připíchnul jsem to na uložto.cz :

http://www.ulozto.cz/4635504/getpopupinfo.exe

Předpokládám že až to stáhneš tak to mám rychle smáznout co ?

[Doktorcz]

Tak jsem se konečně k něčemu dopracoval.Po 4 dnech non - stop léčení a mazání jsem se dostal už i sem.Dnes ráno posledních 9 (podle on-line ESETU)nakažených souborů -žádný však už tímhle šmejdem - smáznuto.Teď ještě opravy všech programů (.exe všude samozřejmě chybí).Jinak jsem o nic nepřišel a s pomocí notebooku jsem všechno důležité zálohoval.Až budu mít vše opraveno,pošlu ještě pro kontrolu log z RSit.

[Doktorcz]

Vše je OK . 0%,krom tohoto :

Soubor services.exe přijatý 2010.04.30 09:22:06 (UTC)
Antivirus Verze Poslední aktualizace Výsledek
a-squared 4.5.0.50 2010.04.30 -
AhnLab-V3 2010.04.30.00 2010.04.30 -
AntiVir 8.2.1.224 2010.04.30 -
Antiy-AVL 2.0.3.7 2010.04.30 -
Authentium 5.2.0.5 2010.04.30 -
Avast 4.8.1351.0 2010.04.30 -
Avast5 5.0.332.0 2010.04.30 -
AVG 9.0.0.787 2010.04.30 -
BitDefender 7.2 2010.04.30 -
CAT-QuickHeal 10.00 2010.04.29 Trojan.Agent.ATV
ClamAV 0.96.0.3-git 2010.04.30 -
Comodo 4717 2010.04.30 -
DrWeb 5.0.2.03300 2010.04.30 -
eSafe 7.0.17.0 2010.04.29 -
eTrust-Vet 35.2.7460 2010.04.30 -
F-Prot 4.5.1.85 2010.04.30 -
F-Secure 9.0.15370.0 2010.04.30 -
Fortinet 4.0.14.0 2010.04.27 -
GData 21 2010.04.30 -
Ikarus T3.1.1.80.0 2010.04.30 -
Jiangmin 13.0.900 2010.04.29 -
Kaspersky 7.0.0.125 2010.04.30 -
McAfee 5.400.0.1158 2010.04.30 -
McAfee-GW-Edition 6.8.5 2010.04.30 Heuristic.LooksLike.Win32.Suspicious.H
Microsoft 1.5703 2010.04.30 -
NOD32 5073 2010.04.29 -
Norman 6.04.12 2010.04.30 -
nProtect 2010-04-30.01 2010.04.30 -
Panda 10.0.2.7 2010.04.29 -
PCTools 7.0.3.5 2010.04.30 -
Prevx 3.0 2010.04.30 -
Rising 22.45.04.03 2010.04.30 -
Sophos 4.53.0 2010.04.30 -
Sunbelt 6241 2010.04.30 -
Symantec 20091.2.0.41 2010.04.30 -
TheHacker 6.5.2.0.274 2010.04.30 -
TrendMicro 9.120.0.1004 2010.04.30 -
TrendMicro-HouseCall 9.120.0.1004 2010.04.30 -
VBA32 3.12.12.4 2010.04.30 -
ViRobot 2010.4.29.2296 2010.04.30 -
VirusBuster 5.0.27.0 2010.04.29 -
Rozšiřující informace
File size: 111104 bytes
MD5...: 9ef697af07bb8dd82c3b02ca953a95b7
SHA1..: 7f9ec136746a6d49ca34d6e6909222076b074cc0
SHA256: f26033e660b8ff1bdb9e88cda205ce128c03138af6bec05db3cf2d95c16d86c6
ssdeep: 1536:Hyj12id0hKy+k1DQ+7Gpj3r4M7TGfwG1K9IJvydlnk4pCxvZbD:HyG1DQgG<br>pj3Cf1K9IBydlk+cvFD<br>

[Doktorcz]

celí je tady :
Soubor services.exe přijatý 2010.04.30 09:22:06 (UTC)
Antivirus Verze Poslední aktualizace Výsledek
a-squared 4.5.0.50 2010.04.30 -
AhnLab-V3 2010.04.30.00 2010.04.30 -
AntiVir 8.2.1.224 2010.04.30 -
Antiy-AVL 2.0.3.7 2010.04.30 -
Authentium 5.2.0.5 2010.04.30 -
Avast 4.8.1351.0 2010.04.30 -
Avast5 5.0.332.0 2010.04.30 -
AVG 9.0.0.787 2010.04.30 -
BitDefender 7.2 2010.04.30 -
CAT-QuickHeal 10.00 2010.04.29 Trojan.Agent.ATV
ClamAV 0.96.0.3-git 2010.04.30 -
Comodo 4717 2010.04.30 -
DrWeb 5.0.2.03300 2010.04.30 -
eSafe 7.0.17.0 2010.04.29 -
eTrust-Vet 35.2.7460 2010.04.30 -
F-Prot 4.5.1.85 2010.04.30 -
F-Secure 9.0.15370.0 2010.04.30 -
Fortinet 4.0.14.0 2010.04.27 -
GData 21 2010.04.30 -
Ikarus T3.1.1.80.0 2010.04.30 -
Jiangmin 13.0.900 2010.04.29 -
Kaspersky 7.0.0.125 2010.04.30 -
McAfee 5.400.0.1158 2010.04.30 -
McAfee-GW-Edition 6.8.5 2010.04.30 Heuristic.LooksLike.Win32.Suspicious.H
Microsoft 1.5703 2010.04.30 -
NOD32 5073 2010.04.29 -
Norman 6.04.12 2010.04.30 -
nProtect 2010-04-30.01 2010.04.30 -
Panda 10.0.2.7 2010.04.29 -
PCTools 7.0.3.5 2010.04.30 -
Prevx 3.0 2010.04.30 -
Rising 22.45.04.03 2010.04.30 -
Sophos 4.53.0 2010.04.30 -
Sunbelt 6241 2010.04.30 -
Symantec 20091.2.0.41 2010.04.30 -
TheHacker 6.5.2.0.274 2010.04.30 -
TrendMicro 9.120.0.1004 2010.04.30 -
TrendMicro-HouseCall 9.120.0.1004 2010.04.30 -
VBA32 3.12.12.4 2010.04.30 -
ViRobot 2010.4.29.2296 2010.04.30 -
VirusBuster 5.0.27.0 2010.04.29 -
Rozšiřující informace
File size: 111104 bytes
MD5...: 9ef697af07bb8dd82c3b02ca953a95b7
SHA1..: 7f9ec136746a6d49ca34d6e6909222076b074cc0
SHA256: f26033e660b8ff1bdb9e88cda205ce128c03138af6bec05db3cf2d95c16d86c6
ssdeep: 1536:Hyj12id0hKy+k1DQ+7Gpj3r4M7TGfwG1K9IJvydlnk4pCxvZbD:HyG1DQgG<br>pj3Cf1K9IBydlk+cvFD<br>
PEiD..: -
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0xbf63<br>timedatestamp.....: 0x498c1ac8 (Fri Feb 06 11:11:04 2009)<br>machinetype.......: 0x14c (I386)<br><br>( 3 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x196a5 0x19800 6.23 bf32e1a6f4363e9fffea31d970bdebf2<br>.data 0x1b000 0xa38 0xc00 1.78 817a9a6979796d656eb64e994df5db0a<br>.rsrc 0x1c000 0x810 0xa00 4.03 9c077f09c85c35a0f56507998053e0a0<br><br>( 10 imports ) <br>> ADVAPI32.dll: AllocateLocallyUniqueId, RegOpenKeyW, ConvertSidToStringSidW, AllocateAndInitializeSid, FreeSid, LogonUserExW, LsaStorePrivateData, LsaLookupNames, AddAccessAllowedAce, SetTokenInformation, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, SetServiceStatus, SystemFunction029, SystemFunction005, CheckTokenMembership, LsaQueryInformationPolicy, OpenThreadToken, RegNotifyChangeKeyValue, InitializeSecurityDescriptor, SetSecurityDescriptorOwner, GetSecurityDescriptorDacl, GetLengthSid, CopySid, InitializeAcl, AddAce, SetSecurityDescriptorDacl, LsaOpenPolicy, LsaLookupSids, LsaFreeMemory, LsaClose, GetTokenInformation, RegCloseKey, RegQueryValueExW, RegOpenKeyExW, InitiateSystemShutdownW, RevertToSelf, CreateProcessAsUserW, ImpersonateLoggedOnUser<br>> KERNEL32.dll: GetCurrentThread, CreateMutexW, ReleaseMutex, ExitThread, FormatMessageW, lstrcmpiW, SetProcessShutdownParameters, DelayLoadFailureHook, RaiseException, GetExitCodeThread, SetConsoleCtrlHandler, SetErrorMode, SetUnhandledExceptionFilter, LoadLibraryA, QueryPerformanceCounter, GetCurrentThreadId, GetCurrentProcess, UnhandledExceptionFilter, GetModuleHandleA, OpenEventW, LocalAlloc, LocalFree, Sleep, LeaveCriticalSection, EnterCriticalSection, SetLastError, CloseHandle, CreateThread, GetLastError, CreateProcessW, ExpandEnvironmentStringsW, InitializeCriticalSection, HeapAlloc, HeapFree, TerminateProcess, WaitForSingleObject, HeapCreate, FreeLibrary, GetProcAddress, GetModuleHandleExW, InterlockedCompareExchange, CreateNamedPipeW, ReadFile, CancelIo, GetOverlappedResult, WaitForMultipleObjects, ConnectNamedPipe, TransactNamedPipe, WriteFile, GetTickCount, GetSystemTimeAsFileTime, GetModuleHandleW, GetComputerNameW, CreateEventW, SetEvent, ResetEvent, DeviceIoControl, CreateFileW, ResumeThread, GetCurrentProcessId, LoadLibraryW, GetDriveTypeW<br>> msvcrt.dll: _itow, wcsrchr, time, _except_handler3, memmove, wcschr, _c_exit, _exit, wcsncmp, _XcptFilter, _cexit, exit, _wcsnicmp, __getmainargs, _initterm, __setusermatherr, _adjust_fdiv, __p__commode, __p__fmode, __set_app_type, _controlfp, _wtol, wcscpy, wcscat, wcsncpy, _wcsicmp, __initenv, wcslen, wcscspn, _ultow<br>> NCObjAPI.DLL: WmiCreateObjectWithFormat, WmiEventSourceConnect, WmiSetAndCommitObject<br>> ntdll.dll: RtlCreateSecurityDescriptor, RtlAddAccessAllowedAce, RtlCreateAcl, NtCreateKey, NtQueryValueKey, NtSetValueKey, NtDeleteValueKey, NtEnumerateKey, NtQuerySecurityObject, RtlFreeHeap, NtOpenKey, NtDeleteKey, RtlSetControlSecurityDescriptor, RtlValidSecurityDescriptor, RtlLengthSecurityDescriptor, NtPrivilegeObjectAuditAlarm, NtPrivilegeCheck, NtOpenThreadToken, NtAccessCheckAndAuditAlarm, NtSetInformationThread, NtAdjustPrivilegesToken, NtDuplicateToken, NtOpenProcessToken, RtlSetDaclSecurityDescriptor, RtlQuerySecurityObject, RtlSetSecurityObject, RtlValidRelativeSecurityDescriptor, RtlMapGenericMask, RtlCopyUnicodeString, NtSetInformationFile, NtQueryInformationFile, RtlAppendUnicodeStringToString, RtlAppendUnicodeToString, NtWaitForSingleObject, NtQueryDirectoryFile, NtDeleteFile, NtSetInformationProcess, RtlUnhandledExceptionFilter, NtSetEvent, RtlGetAce, RtlQueryInformationAcl, RtlGetDaclSecurityDescriptor, RtlAllocateHeap, RtlConvertSharedToExclusive, RtlConvertExclusiveToShared, RtlRegisterWait, RtlGetNtProductType, RtlEqualUnicodeString, RtlLengthSid, RtlCopySid, NtOpenDirectoryObject, NtQueryDirectoryObject, RtlUnicodeStringToAnsiString, RtlInitAnsiString, RtlAnsiStringToUnicodeString, RtlNewSecurityObject, RtlAddAce, RtlSetOwnerSecurityDescriptor, RtlSetGroupSecurityDescriptor, RtlSetSaclSecurityDescriptor, RtlSubAuthorityCountSid, RtlCompareUnicodeString, NtLoadDriver, NtUnloadDriver, RtlExpandEnvironmentStrings_U, RtlAdjustPrivilege, NtFlushKey, NtOpenFile, RtlDosPathNameToNtPathName_U, NtOpenSymbolicLinkObject, NtQuerySymbolicLinkObject, RtlFreeUnicodeString, RtlAreAllAccessesGranted, NtDeleteObjectAuditAlarm, NtCloseObjectAuditAlarm, RtlQueueWorkItem, RtlCopyLuid, RtlDeregisterWait, RtlReleaseResource, RtlAcquireResourceExclusive, RtlAcquireResourceShared, RtlInitializeResource, RtlDeleteSecurityObject, RtlLockBootStatusData, RtlGetSetBootStatusData, RtlUnlockBootStatusData, NtInitializeRegistry, NtQueryKey, NtClose, RtlInitUnicodeString, NtSetSystemEnvironmentValue, RtlNtStatusToDosError, NtShutdownSystem, NtQueryInformationToken, RtlMakeSelfRelativeSD, RtlInitializeSid, RtlLengthRequiredSid, RtlSubAuthoritySid, NtSetSecurityObject<br>> RPCRT4.dll: RpcServerRegisterAuthInfoW, RpcBindingFree, RpcEpResolveBinding, RpcBindingFromStringBindingW, RpcStringBindingComposeW, NdrClientCall2, RpcAsyncCompleteCall, RpcAsyncInitializeHandle, NdrAsyncServerCall, RpcServerListen, RpcMgmtStopServerListening, RpcMgmtWaitServerListen, RpcServerUnregisterIf, NdrAsyncClientCall, NdrServerCall2, I_RpcBindingIsClientLocal, RpcRevertToSelf, I_RpcMapWin32Status, RpcImpersonateClient, RpcStringBindingParseW, RpcStringFreeW, RpcBindingToStringBindingW, RpcServerRegisterIfEx, RpcServerUseProtseqEpW, RpcServerRegisterIf<br>> SCESRV.dll: ScesrvInitializeServer, ScesrvTerminateServer<br>> umpnpmgr.dll: RegisterScmCallback, PNP_SetActiveService, PNP_GetDeviceRegProp, PNP_GetDeviceListSize, PNP_GetDeviceList, PNP_HwProfFlags, RegisterServiceNotification, DeleteServicePlugPlayRegKeys<br>> USER32.dll: LoadStringW, wsprintfW, BroadcastSystemMessageW, MessageBoxW, RegisterServicesProcess<br>> USERENV.dll: UnloadUserProfile, CreateEnvironmentBlock, LoadUserProfileW, DestroyEnvironmentBlock<br><br>( 0 exports ) <br>
RDS...: NSRL Reference Data Set<br>-
pdfid.: -
sigcheck:<br>publisher....: Microsoft Corporation<br>copyright....: (c) Microsoft Corporation. V_echna pr_va vyhrazena.<br>product......: Opera_n_ syst_m Microsoft_ Windows_<br>description..: Services and Controller app<br>original name: services.exe<br>internal name: services.exe<br>file version.: 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)<br>comments.....: n/a<br>signers......: -<br>signing date.: -<br>verified.....: Unsigned<br>
trid..: Win32 Executable Generic (42.3%)<br>Win32 Dynamic Link Library (generic) (37.6%)<br>Generic Win/DOS Executable (9.9%)<br>DOS Executable Generic (9.9%)<br>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)

Combofix stáhnu a udělám.

[Doktorcz]

Nějak mi nejde CF spustit.Normálně najede,napíše v dosu ze atrib není spustitelný vější ani vnitřní soubor a pak čeká a připravuje se ke spuštění.
To trvá 30 min.a nic dál.Už jsem párkrát CF spouštěl,ale nepamatuji se že by to bylo tak dlouhý
A Jeśtě jeden problém.Vypnu štíty u avasta (je jich celkem 7) ale CF mi při spuštění stejně hlásí že jsou zaplé.Dokonce jsem Avasta kvůli tomu natu dobu odinstaloval,aby bylo vše OK.

Ještě jsem chtěl vypnout obnovení systému,ale když dám ,,nastavení .......,,nejde mi zapnout.Má to souvyslost s vymazanými .exe soubory ?

Při prohlížení správce účtů,jsem narazil na účet,který jsem nevytvořil,ani se mi nezobrazuje při startu ???
Mohlo to něco samo vytvořit,nebo tam je normálně ale skrytý - myslím ve win. jmenuje se ,,ASP.NET Machine A...,, je to účet chráněný heslem,ale s omezenými pravomocemy.

[Doktorcz]

nějak se stim peru.zkošel jsem najít nějakej seznam všech exe.souborů ve win,ale u pár linků co jsem našel se to dost liší.Byl bych rád,kdyby jsi mi upnul alespoň ten attrib,abych mohl rozjed ten scan s CF.Nebo jestli víš kde hledat ten seznam tak poradil kam ,,zajít,,
Měl jsem za to,že když ,,INOVUJU,,win,tak se to doplní.ale bohužel.Nepomohlo ani přeinstal.SP3 balíku.