Pro mou drahou MOTJI

[Anubides]

Tak tady to máš ty workoholiku

Logfile of random's system information tool 1.06 (written by random/random)
Run by Tomáš at 2010-05-15 22:53:34
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 172 MB (1%) free of 25 GB
Total RAM: 1023 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:53:47, on 15.5.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17023)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\QIP 2010\qip.exe
C:\Program Files\MSI\Common\RaUI.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
G:\Downloads\RSIT.exe
C:\Program Files\trend micro\Tomáš.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: MSI Wireless Utility.lnk = C:\Program Files\MSI\Common\RaUI.exe
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: www.wspk.cz
O16 - DPF: {43BD5CFC-1382-4282-8239-AEC0E7ECAA48} (CTBClient Control) - http://www.wspk.cz/internetbanking/inte ... roject.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: ForceWare user log service (nSvcLog) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

--
End of file - 7994 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24 2212224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-14 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-05-14 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88}
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-03-28 1017592]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"P17Helper"=Rundll32 P17.dll,P17Helper []
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-03-03 61440]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-11-15 77824]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2010-03-02 282792]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2007-08-24 33648]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2007-08-21 1422632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-08-08 1828136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe [2010-03-17 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe /startoptions []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
C:\Program Files\SweetIM\Messenger\SweetIM.exe [2009-01-13 111928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Synchronizer.lnk]
C:\PROGRA~1\Adobe\READER~1.0\Reader\ADOBEC~1.EXE [2010-04-04 542168]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
MSI Wireless Utility.lnk - C:\Program Files\MSI\Common\RaUI.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-03-04 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24 2212224]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\QIP\qip.exe"="D:\QIP\qip.exe:*:Disabled:Quiet Internet Pager"
"C:\Program Files\Grisoft\AVG7\avginet.exe"="C:\Program Files\Grisoft\AVG7\avginet.exe:*:Enabled:avginet.exe"
"C:\Program Files\Grisoft\AVG7\avgamsvr.exe"="C:\Program Files\Grisoft\AVG7\avgamsvr.exe:*:Enabled:avgamsvr.exe"
"C:\Program Files\Grisoft\AVG7\avgcc.exe"="C:\Program Files\Grisoft\AVG7\avgcc.exe:*:Enabled:avgcc.exe"
"C:\Documents and Settings\Tomáš\Plocha\QIP\qip.exe"="C:\Documents and Settings\Tomáš\Plocha\QIP\qip.exe:*:Disabled:Quiet Internet Pager"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\QIP\qip.exe"="C:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"C:\Program Files\ICQLite\ICQLite.exe"="C:\Program Files\ICQLite\ICQLite.exe:*:Enabled:ICQ Lite"
"C:\Program Files\Common Files\Nero\Nero Web\SetupX.exe"="C:\Program Files\Common Files\Nero\Nero Web\SetupX.exe:*:Enabled:Nero ControlCenter"
"F:\Utility\dcc-1026.exe"="F:\Utility\dcc-1026.exe:*:Disabled:dcc-1026"
"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
"C:\Program Files\ICQ7.1\ICQ.exe"="C:\Program Files\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1"
"C:\Program Files\ICQ7.1\aolload.exe"="C:\Program Files\ICQ7.1\aolload.exe:*:Enabled:aolload.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.1\ICQ.exe"="C:\Program Files\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1"
"C:\Program Files\ICQ7.1\aolload.exe"="C:\Program Files\ICQ7.1\aolload.exe:*:Enabled:aolload.exe"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c707d652-4542-11de-b02e-0013d386a00a}]
shell\Auto\command - G:\sal.xls.exe
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL sal.xls.exe


======List of files/folders created in the last 1 months======

2010-05-15 22:53:35 ----D---- C:\Program Files\trend micro
2010-05-15 22:53:34 ----D---- C:\rsit
2010-05-15 12:47:53 ----A---- C:\avenger.txt
2010-05-15 02:45:29 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2010-05-15 02:45:29 ----A---- C:\WINDOWS\system32\pndx5032.dll
2010-05-15 02:45:29 ----A---- C:\WINDOWS\system32\pndx5016.dll
2010-05-15 02:45:29 ----A---- C:\WINDOWS\system32\pncrt.dll
2010-05-15 02:45:28 ----A---- C:\WINDOWS\system32\unrar.dll
2010-05-15 02:45:27 ----A---- C:\WINDOWS\avisplitter.ini
2010-05-15 02:45:25 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2010-05-15 02:45:24 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-05-15 02:45:24 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-05-15 02:45:24 ----A---- C:\WINDOWS\system32\qt-dx331.dll
2010-05-15 02:45:24 ----A---- C:\WINDOWS\system32\dpl100.dll
2010-05-15 02:45:23 ----A---- C:\WINDOWS\system32\divx.dll
2010-05-15 02:45:21 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2010-05-15 02:45:20 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2010-05-15 02:45:18 ----D---- C:\Program Files\K-Lite Codec Pack
2010-05-14 23:43:18 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\AIMP
2010-05-14 23:43:10 ----D---- C:\Program Files\AIMP2
2010-05-14 21:44:02 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\QIP
2010-05-14 21:43:32 ----D---- C:\Program Files\QIP 2010
2010-05-14 21:24:25 ----D---- C:\Program Files\ICQ7.1
2010-05-14 20:27:38 ----D---- C:\WINDOWS\system32\Adobe
2010-05-14 20:13:31 ----D---- C:\Program Files\QuickTime
2010-05-14 20:12:43 ----D---- C:\Program Files\Common Files\Apple
2010-05-14 20:12:33 ----D---- C:\Program Files\Apple Software Update
2010-05-14 20:12:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple
2010-05-14 20:10:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2010-05-14 20:10:24 ----D---- C:\Program Files\Common Files\Java
2010-05-14 20:09:34 ----A---- C:\WINDOWS\system32\javaws.exe
2010-05-14 20:09:34 ----A---- C:\WINDOWS\system32\javaw.exe
2010-05-14 20:09:34 ----A---- C:\WINDOWS\system32\java.exe
2010-05-14 20:09:34 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-05-14 20:09:12 ----D---- C:\Program Files\Java
2010-05-14 20:08:39 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Sun
2010-05-14 20:00:49 ----SHD---- C:\Config.Msi
2010-05-14 19:59:33 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-05-14 19:59:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\McAfee
2010-05-14 19:58:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\NOS
2010-05-14 19:28:10 ----D---- C:\Program Files\Mozilla Firefox
2010-05-14 18:39:22 ----D---- C:\Avenger
2010-05-14 18:32:44 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-05-14 18:32:28 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-05-14 18:32:22 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-05-14 18:31:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-05-14 18:31:45 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-05-14 18:31:37 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-05-14 18:20:24 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-05-14 18:20:18 ----A---- C:\WINDOWS\imsins.BAK
2010-05-14 18:11:20 ----D---- C:\Program Files\Avira
2010-05-14 18:11:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2010-05-14 17:50:16 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\ATI
2010-05-14 17:50:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2010-05-14 17:46:34 ----D---- C:\Program Files\NVIDIA Corporation
2010-05-14 17:45:07 ----A---- C:\WINDOWS\system32\CapabilityTable.exe
2010-05-14 17:44:59 ----A---- C:\WINDOWS\system32\nvuide.exe
2010-05-14 17:44:38 ----A---- C:\WINDOWS\system32\nvunrm.exe
2010-05-14 17:44:34 ----A---- C:\WINDOWS\system32\nvusmb.exe
2010-05-14 17:44:33 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2010-05-14 17:43:34 ----N---- C:\WINDOWS\avrack.ini
2010-05-14 17:43:34 ----D---- C:\Program Files\Realtek Sound Manager
2010-05-14 17:43:34 ----D---- C:\Program Files\AvRack
2010-05-14 17:43:28 ----N---- C:\WINDOWS\system32\ChCfg.exe
2010-05-14 17:43:28 ----A---- C:\WINDOWS\system32\RTLCPAPI.dll
2010-05-14 17:43:28 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2010-05-14 17:43:26 ----N---- C:\WINDOWS\alcupd.exe
2010-05-14 17:43:26 ----N---- C:\WINDOWS\alcrmv.exe
2010-05-14 17:43:26 ----A---- C:\WINDOWS\system32\RTLCPL.EXE
2010-05-14 17:43:06 ----D---- C:\Program Files\AMD
2010-05-14 17:41:35 ----A---- C:\WINDOWS\system32\idecoi.dll
2010-05-14 17:41:34 ----A---- C:\WINDOWS\system32\nvconrm.dll
2010-05-14 17:41:31 ----A---- C:\WINDOWS\system32\fdco1ins.dll
2010-05-14 17:41:31 ----A---- C:\WINDOWS\system32\fdco1.dll
2010-05-14 17:41:31 ----A---- C:\WINDOWS\system32\bdco1ins.dll
2010-05-14 17:41:31 ----A---- C:\WINDOWS\system32\bdco1.dll
2010-05-14 17:36:49 ----A---- C:\WINDOWS\system32\Oemdspif.dll
2010-05-14 17:36:48 ----A---- C:\WINDOWS\system32\ativcoxx.dll
2010-05-14 17:36:48 ----A---- C:\WINDOWS\system32\atitvo32.dll
2010-05-14 17:36:48 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2010-05-14 17:36:48 ----A---- C:\WINDOWS\system32\atiok3x2.dll
2010-05-14 17:36:47 ----A---- C:\WINDOWS\system32\atioglxx.dll
2010-05-14 17:36:47 ----A---- C:\WINDOWS\system32\atikvmag.dll
2010-05-14 17:36:47 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2010-05-14 17:36:47 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2010-05-14 17:36:47 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2010-05-14 17:36:47 ----A---- C:\WINDOWS\system32\aticalrt.dll
2010-05-14 17:36:47 ----A---- C:\WINDOWS\system32\aticaldd.dll
2010-05-14 17:36:47 ----A---- C:\WINDOWS\system32\aticalcl.dll
2010-05-14 17:36:47 ----A---- C:\WINDOWS\system32\atibrtmon.exe
2010-05-14 17:36:47 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2010-05-14 17:36:46 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2010-05-14 17:36:46 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2010-05-14 17:36:46 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2010-05-14 17:36:46 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2010-05-14 17:36:46 ----A---- C:\WINDOWS\system32\amdpcom32.dll
2010-05-14 17:12:38 ----D---- C:\WINDOWS\pss
2010-05-14 17:07:32 ----D---- C:\UsbMac
2010-05-14 17:04:40 ----D---- C:\Program Files\ATI Technologies
2010-05-14 17:04:09 ----D---- C:\ATI
2010-05-14 16:42:29 ----D---- C:\NVIDIA
2010-05-14 16:32:00 ----D---- C:\Program Files\CCleaner
2010-05-14 13:21:32 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-05-14 13:19:41 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-05-14 13:14:23 ----N---- C:\WINDOWS\system32\browserchoice.exe

======List of files/folders modified in the last 1 months======

2010-05-15 22:53:40 ----D---- C:\WINDOWS\Prefetch
2010-05-15 22:53:35 ----RD---- C:\Program Files
2010-05-15 15:25:59 ----A---- C:\WINDOWS\NeroDigital.ini
2010-05-15 12:50:00 ----D---- C:\WINDOWS\Temp
2010-05-15 12:49:57 ----D---- C:\WINDOWS\system32\CatRoot2
2010-05-15 12:47:53 ----D---- C:\WINDOWS\system32\drivers
2010-05-15 02:45:29 ----D---- C:\WINDOWS\system32
2010-05-15 02:45:27 ----D---- C:\WINDOWS
2010-05-15 01:56:16 ----HD---- C:\WINDOWS\inf
2010-05-14 23:34:29 ----SHD---- C:\WINDOWS\Installer
2010-05-14 22:26:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-05-14 21:43:12 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\ICQ
2010-05-14 21:25:32 ----D---- C:\Program Files\ICQ6Toolbar
2010-05-14 21:25:23 ----HD---- C:\Program Files\InstallShield Installation Information
2010-05-14 21:25:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\ICQ
2010-05-14 20:13:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
2010-05-14 20:12:46 ----D---- C:\WINDOWS\WinSxS
2010-05-14 20:12:43 ----D---- C:\Program Files\Common Files
2010-05-14 20:01:50 ----D---- C:\Program Files\Common Files\Adobe
2010-05-14 20:01:32 ----D---- C:\Program Files\Adobe
2010-05-14 19:35:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-05-14 19:35:37 ----D---- C:\WINDOWS\PCHEALTH
2010-05-14 19:35:37 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-05-14 19:35:36 ----D---- C:\Program Files\Microsoft Works
2010-05-14 19:28:47 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Mozilla
2010-05-14 18:39:34 ----D---- C:\Program Files\AskTBar
2010-05-14 18:38:48 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-05-14 18:33:36 ----D---- C:\WINDOWS\Debug
2010-05-14 18:32:49 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-05-14 18:32:33 ----HD---- C:\WINDOWS\$hf_mig$
2010-05-14 18:31:47 ----D---- C:\Program Files\Movie Maker
2010-05-14 18:30:20 ----RSD---- C:\WINDOWS\Fonts
2010-05-14 18:22:30 ----A---- C:\WINDOWS\win.ini
2010-05-14 18:22:29 ----D---- C:\Program Files\Common Files\System
2010-05-14 18:20:26 ----D---- C:\Program Files\Outlook Express
2010-05-14 18:20:06 ----D---- C:\WINDOWS\system32\cs-cz
2010-05-14 18:20:06 ----D---- C:\Program Files\Internet Explorer
2010-05-14 18:19:55 ----D---- C:\WINDOWS\ie7updates
2010-05-14 18:02:57 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Teleca
2010-05-14 18:02:54 ----D---- C:\WINDOWS\Downloaded Installations
2010-05-14 18:02:47 ----D---- C:\Program Files\Common Files\Teleca Shared
2010-05-14 18:00:59 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-05-14 17:59:59 ----D---- C:\Program Files\SweetIM
2010-05-14 17:59:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\SweetIM
2010-05-14 17:58:49 ----SD---- C:\WINDOWS\Tasks
2010-05-14 17:58:23 ----D---- C:\Program Files\Google
2010-05-14 17:53:27 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-05-14 17:50:19 ----D---- C:\WINDOWS\system32\config
2010-05-14 17:45:32 ----D---- C:\Program Files\Common Files\InstallShield
2010-05-14 17:39:31 ----RSD---- C:\WINDOWS\assembly
2010-05-14 17:37:45 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-05-14 17:13:34 ----RASH---- C:\boot.ini
2010-05-14 17:13:34 ----A---- C:\WINDOWS\system.ini
2010-04-30 11:51:08 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;Ovladač procesoru AMD Athlon64; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2004-05-08 38400]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2010-03-01 124784]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2007-12-29 20747]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2010-02-16 60936]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-11-17 2297664]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-03-04 3565568]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys [2005-01-10 138752]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2004-11-24 33408]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2004-11-24 12928]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\DRIVERS\ctoss2k.sys [2005-01-10 106496]
R3 P17;Sound Blaster Audigy; C:\WINDOWS\system32\drivers\P17.sys [2005-07-07 1389056]
R3 RT61;Ralink RT61 Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT61.sys [2006-01-19 363008]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2008-04-13 17152]
S3 als_fm;Microsoft OPL3 Miniport Driver (WDM); C:\WINDOWS\system32\drivers\alsfm.sys [2000-01-25 3139]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\WINDOWS\system32\DRIVERS\k750bus.sys [2005-07-07 55216]
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\WINDOWS\system32\DRIVERS\k750mgmt.sys [2005-07-07 81728]
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\WINDOWS\system32\DRIVERS\k750obex.sys [2005-07-07 79488]
S3 MemStPCI;Řadič Sony Memory Stick (PCI); C:\WINDOWS\system32\DRIVERS\MemStPCI.SYS [2008-04-13 26112]
S3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
S3 s816bus;Sony Ericsson Device 816 driver (WDM); C:\WINDOWS\system32\DRIVERS\s816bus.sys [2007-06-19 81832]
S3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s816mdfl.sys [2007-06-19 13864]
S3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s816mdm.sys [2007-06-19 107304]
S3 s816mgmt;Sony Ericsson Device 816 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s816mgmt.sys [2007-06-19 99112]
S3 s816nd5;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (NDIS); C:\WINDOWS\system32\DRIVERS\s816nd5.sys [2007-06-19 21928]
S3 s816obex;Sony Ericsson Device 816 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s816obex.sys [2007-06-19 97320]
S3 s816unic;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (WDM); C:\WINDOWS\system32\DRIVERS\s816unic.sys [2007-06-19 97704]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 wdmals;WDM Miniport Driver for Avance Sound; C:\WINDOWS\system32\drivers\alswdm.sys [2000-01-25 17493]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2010-05-14 267432]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2010-02-24 135336]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-03-04 602112]
R2 ForcewareWebInterface;Forceware Web Interface; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [2004-10-20 20543]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-03-28 246520]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-05-14 153376]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-08-08 836904]
R2 nSvcLog;ForceWare user log service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe [2004-11-24 53313]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2007-08-24 68464]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-08-21 382248]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[motji]

Ahoj

Návody mám s vykáním, tak se nelekni

Zapojte do pc všechny usb klíče, flashky...co používáte


Stáhněte na plochu UsbFix
-spusťte, zvolte jazyk E - potvrdťe enter
-klikněte na volbu 1 - enter
- po skenu sem vložte log , pokud na Vás nevyskočí, najdete ho C:\UsbFix.txt

[Anubides]

############################## | UsbFix V6.113 |

User : Tomáš (Administrators) # DOMOV-8DJLY395S
Update on 13/05/2010 by El Desaparecido , C_XX & Chimay8
Start at: 23:50:06 | 15.5.2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

AMD Athlon(tm) 64 Processor 3000+
Systém Microsoft Windows XP Professional (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 7.0.5730.13
Windows Firewall Status : Enabled
AV : AntiVir Desktop 10.0.1.44 [ Enabled | Updated ]

A:\ -> Disketová jednotka 3 1/2"
C:\ -> Místní pevný disk # 24.41 Go (165.82 Mo free) # NTFS
D:\ -> Místní pevný disk # 50.11 Go (21.77 Go free) [media] # NTFS
E:\ -> Disk CD-ROM
F:\ -> Disk CD-ROM
G:\ -> Místní pevný disk # 233.76 Go (107.69 Go free) [File Disk] # NTFS
H:\ -> Vyměnitelný disk # 3.92 Go (3.62 Go free) # FAT32
I:\ -> Vyměnitelný disk

################## | Files # Infected Folders |

D:\autorun.inf
G:\log.txt

################## | Registry |


################## | Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{c707d652-4542-11de-b02e-0013d386a00a}
Shell\Auto\command =G:\sal.xls.exe
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL sal.xls.exe

################## | Vaccin |

# G:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).

################## | ! End of report # UsbFix V6.113 ! |

[motji]

Spust USBfix znovu a dej volbu 2.
Log vlož zde.

prožen na pc ccleaner.

Zlobí Tě počítač nějak?

[Anubides]

Mě ne, kámoše prej jo Po resetu se zasekl na POST obrazovce, ale dobrý. Zasekává se když je delší dobu puštěná stránka s flash animací a v prostředí win trvá dlouho třeba smazání souboru ručně, řádově 10 vteřin velikost do 512kb. Jinak OK zatím..

############################## | UsbFix V6.113 |

User : Tomáš (Administrators) # DOMOV-8DJLY395S
Update on 13/05/2010 by El Desaparecido , C_XX & Chimay8
Start at: 0:14:06 | 16.5.2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

AMD Athlon(tm) 64 Processor 3000+
Systém Microsoft Windows XP Professional (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 7.0.5730.13
Windows Firewall Status : Enabled
AV : AntiVir Desktop 10.0.1.44 [ Enabled | Updated ]

A:\ -> Disketová jednotka 3 1/2"
C:\ -> Místní pevný disk # 24.41 Go (127.39 Mo free) # NTFS
D:\ -> Místní pevný disk # 50.11 Go (21.77 Go free) [media] # NTFS
E:\ -> Disk CD-ROM
F:\ -> Disk CD-ROM
G:\ -> Místní pevný disk # 233.76 Go (107.69 Go free) [File Disk] # NTFS
H:\ -> Vyměnitelný disk # 3.92 Go (3.62 Go free) # FAT32
I:\ -> Vyměnitelný disk # 1.87 Go (918.38 Mo free) # FAT32

################## | Files # Infected Folders |

Deleted ! C:\Recycler\S-1-5-21-117609710-1482476501-839522115-1003
Deleted ! D:\autorun.inf
Deleted ! D:\Recycler\S-1-5-21-117609710-1482476501-839522115-1003
Deleted ! D:\Recycler\S-1-5-21-1659004503-1960408961-725345543-1003
Deleted ! D:\Recycler\S-1-5-21-1659004503-1960408961-725345543-1005
Deleted ! G:\log.txt
Deleted ! G:\$Recycle.Bin\S-1-5-21-2821377464-880764942-2565372794-1001
Deleted ! G:\$Recycle.Bin\S-1-5-21-2821377464-880764942-2565372794-500
Deleted ! G:\Recycler\S-1-5-21-117609710-1482476501-839522115-1003
Deleted ! G:\Recycler\S-1-5-21-1844237615-682003330-725345543-1004
Deleted ! G:\Recycler\S-1-5-21-1844237615-682003330-725345543-500
Deleted ! G:\Recycler\S-1-5-21-527237240-1644491937-725345543-1004

################## | Registry |


################## | Mountpoints2 |

Deleted ! HKCU\...\Explorer\MountPoints2\{c707d652-4542-11de-b02e-0013d386a00a}\Shell\Auto\Command

################## | Listing of the present files |

[14.05.2010 17:46|--a------|1024] C:\.rnd
[26.12.2007 14:15|--a------|0] C:\AUTOEXEC.BAT
[15.05.2010 12:47|--a------|1346] C:\avenger.txt
[14.05.2010 17:13|-rahs----|211] C:\boot.ini
[25.10.2001 14:00|-rahs----|4952] C:\Bootfont.bin
[26.12.2007 14:15|--a------|0] C:\CONFIG.SYS
[26.12.2007 14:15|-rahs----|0] C:\IO.SYS
[26.12.2007 14:15|-rahs----|0] C:\MSDOS.SYS
[26.12.2007 14:29|-rahs----|47564] C:\NTDETECT.COM
[20.09.2008 12:33|-rahs----|250576] C:\ntldr
[?|?|?] C:\pagefile.sys
[16.05.2010 00:18|--a------|2463] C:\UsbFix.txt
[29.05.2008 13:21|---hs----|3019] D:\AlbumArtSmall.jpg
[29.05.2008 13:21|---hs----|13868] D:\AlbumArt_{A2109C89-D317-4E6E-8F3E-B1AF4B70177E}_Large.jpg
[29.05.2008 13:21|---hs----|3019] D:\AlbumArt_{A2109C89-D317-4E6E-8F3E-B1AF4B70177E}_Small.jpg
[30.03.2007 10:44|--a------|6814648] D:\d2lod-patch111.exe
[12.06.2008 21:35|---hs----|355] D:\desktop.ini
[29.05.2008 13:21|---hs----|13868] D:\Folder.jpg
[08.01.2008 23:42|--a------|194414768] D:\Nero-8.2.8.0_csy_trial.exe
[25.07.2009 16:15|--a------|853888] D:\SDC10813.JPG
[28.10.2008 17:32|--a------|7069897] D:\setup.exe
[02.12.2007 21:17|--ahs----|6144] D:\Thumbs.db
[11.10.2008 20:20|--a------|14665056] D:\winzip120.exe
[11.10.2008 20:18|--a------|170568] D:\winzip_12_0_cestina.exe
[05.01.2008 13:42|--a------|2149309] D:\wrar_unplugged_3.7.0.1.exe
[12.11.2009 02:26|--a------|11228335] G:\.urchin (SHE IS A ROLLER) 1978 ADRIAN SMITH RULEZ THUMBS UP.mp4
[09.04.2010 03:09|--a------|14545] G:\0.jpg
[20.04.2010 19:24|--a------|8325] G:\001 Test.rtf
[23.03.2010 00:58|--a------|1147] G:\001.txt
[21.03.2010 14:52|--a------|7592042] G:\100320-plachta.flv
[06.03.2010 00:14|--a------|54380427] G:\1112.mpeg
[01.03.2010 14:40|--a------|13164430] G:\1176-video-b63uv.flv
[17.04.2010 00:04|--a------|63189] G:\11HA Sideswipe Epps.jpg
[10.04.2010 01:21|--a------|59287] G:\1235110618.jpg
[06.05.2010 23:27|--a------|55560] G:\127070-gallery-8wcq2.jpg
[06.05.2010 23:27|--a------|60886] G:\127071-gallery-joe9t.jpg
[06.05.2010 23:28|--a------|87822] G:\127073-gallery-ws60l.jpg
[06.05.2010 23:28|--a------|64862] G:\127075-gallery-uk204.jpg
[06.05.2010 23:28|--a------|54200] G:\127078-gallery-l8w50.jpg
[31.01.2010 02:53|--a------|379] G:\2012.rtf
[09.04.2010 18:23|--a------|296762] G:\209568-original1-i6mks.jpg
[16.04.2010 00:45|--a------|222415] G:\210260-original1-ymu9n.jpg
[16.04.2010 00:44|--a------|58243] G:\210287-gallery1-9bmjk.jpg
[18.04.2010 17:08|--a------|267811] G:\210678-original1-knwuq.jpg
[18.04.2010 17:08|--a------|229589] G:\210680-original1-tc8er.jpg
[18.04.2010 17:06|--a------|42781] G:\210681-gallery1-8lspo.jpg
[18.04.2010 17:08|--a------|216387] G:\210704-original1-basm0.jpg
[04.03.2010 22:43|--a------|43163129] G:\250731.flv
[13.04.2010 02:30|--a------|109518] G:\27257_381627118471_99917438471_3967439_7489885_n.jpg
[31.03.2010 19:05|--a------|129561] G:\2942655249_3123e35ab5.jpg
[09.04.2010 02:24|--a------|38755] G:\300px-Skywarp1.jpg
[04.03.2010 22:14|--a------|27709] G:\3IOB.odt
[13.03.2010 16:21|--a------|7859158] G:\4.1 Floorball Training-Florbalovy trening.mp4
[16.04.2010 23:19|--a------|112702] G:\6c182ef43b_247980_o2.gif
[09.04.2010 04:01|--a------|14203] G:\72.jpeg
[16.04.2010 23:23|--a------|5795] G:\8399d5e980_128750_o2.gif
[05.03.2010 02:39|--a------|7487056] G:\9099-video-d4kef.flv
[05.03.2010 02:16|--a------|2331767] G:\9101-video-ltgj4.flv
[05.03.2010 02:19|--a------|6384033] G:\9106-video-kigtq.flv
[05.03.2010 02:21|--a------|4118168] G:\9107-video-u2cyo.flv
[07.05.2010 11:07|--a------|182403544] G:\ashlynn_brooke_2.wmv
[27.03.2010 01:26|--a------|6353] G:\Bakyho rozluźka.txt
[12.04.2010 17:08|--a------|676528] G:\BB01.jpg
[12.04.2010 17:08|--a------|729495] G:\BB02.jpg
[12.04.2010 17:09|--a------|741729] G:\BB03.jpg
[12.04.2010 17:17|--a------|530896] G:\BB04.jpg
[12.04.2010 17:20|--a------|534760] G:\BB05.jpg
[22.04.2010 16:39|--a------|737386] G:\BB06.jpg
[09.12.2003 17:16|--a------|366155] G:\bio blacklight wallpaper.jpg
[28.12.2009 02:51|--a------|74240] G:\Bonecrusher 2010.doc
[28.04.2010 15:17|--a------|280373] G:\CD Keys WINXP.rtf
[14.04.2010 13:35|--a------|107520] G:\cer.doc
[18.04.2010 23:13|--a------|24483] G:\CFScript.gif
[21.04.2010 18:14|--a------|1620] G:\confused0068.gif
[13.09.2009 23:09|--a------|2589431] G:\cvicte-si-svuj-mozek-1.pdf
[13.09.2009 23:10|--a------|2884830] G:\cvicte-si-svuj-mozek-2.pdf
[13.09.2009 23:10|--a------|2297395] G:\cvicte-si-svuj-mozek-3.pdf
[16.04.2010 00:13|--a------|99874] G:\desatero_pro_pany_.jpg
[09.04.2010 03:35|--a------|921654] G:\dirge-of-cerberus-final-fantasy-vii-20060811065024853_screen001.bmp
[11.11.2009 10:46|--a------|65536] G:\DK stˇ§nost.doc
[11.11.2009 10:42|--a------|12750] G:\DK stˇ§nost.odt
[12.11.2009 21:42|--a------|1936] G:\Dluh.txt
[28.10.2009 17:02|--a------|4751454] G:\dluh.xps
[03.10.2009 01:50|--a------|13024] G:\dopis.rtf
[03.04.2010 23:36|--a------|1148] G:\Dotaznˇk mu§.rtf
[03.04.2010 23:15|--a------|1400] G:\Dotaznˇk SG.rtf
[03.04.2010 23:21|--a------|1175] G:\Dotaznˇk Surender.rtf
[03.04.2010 23:38|--a------|1390] G:\Dotaznˇk §ena.rtf
[05.03.2010 22:33|--a------|309248] G:\Epilepsie a epileptick‚ z chvaty patýˇ k.doc
[26.04.2010 23:59|--a------|225061] G:\ESET.docx
[28.04.2010 12:25|--a------|0] G:\ESET.odt
[21.04.2010 18:12|--a------|1697] G:\evilgrin0036.gif
[06.03.2010 19:20|--a------|75776] G:\Excalion.doc
[17.04.2010 12:42|--a------|2359350] G:\exit.bmp
[21.04.2010 18:16|--a------|848] G:\fighting0005.gif
[21.04.2010 18:14|--a------|2739] G:\fighting0029.gif
[09.05.2008 00:59|--a------|7758] G:\Filmy-recenze.rtf
[23.12.2009 00:43|--a------|264] G:\Finance Hoff.txt
[27.04.2010 00:03|--a------|975360] G:\forAnub.doc
[21.04.2010 18:18|--a------|10363] G:\free-indifferent-smileys-437.gif
[16.03.2010 04:59|--a------|302868438] G:\Godzilla 1998.avi
[10.04.2010 12:48|--a------|800159] G:\GONE_IN_10_SECONDS_by_Transformers_Mosaic.jpg
[07.05.2010 12:40|--a------|521568] G:\GPU-Z.0.4.2.exe
[08.05.2008 00:57|--a------|6751] G:\Grol a Riu.rtf
[17.04.2010 00:07|--a------|31811] G:\HA Barricade 035.JPG
[17.04.2010 00:08|--a------|37421] G:\HA Barricade 043b.JPG
[17.04.2010 21:18|--a------|54574] G:\HijacktTHisClanek.htm
[07.04.2010 13:49|--a------|24839] G:\Hoff Finance Unor - býezen.ods
[15.10.2009 23:45|--a------|76800] G:\Hoff.doc
[01.05.2010 23:35|--a------|7626] G:\Hoff.jpg
[14.03.2010 23:17|--a------|88] G:\Hoffçtina.txt
[24.10.2009 16:32|--a------|63469] G:\horurek.rtf
[13.11.2008 03:19|--a------|1178] G:\HvŘzdiźka z nebˇźka.txt
[09.04.2010 03:10|--a------|20481] G:\insecticon.jpg
[05.04.2010 02:21|--a------|29282092] G:\japan drumers.mpeg
[09.04.2010 03:06|--a------|42159] G:\jetfirealt.jpg
[03.11.2008 23:50|--a------|15872] G:\Katastrofy.doc
[13.04.2010 00:06|--a------|11266] G:\Kl vesov‚ zkratky pro SPUSTIT.rtf
[08.09.2009 20:22|--a------|221] G:\Koty.wsc
[06.10.2009 23:37|--a------|2614] G:\mechquest.txt
[05.05.2010 11:11|--a------|1190322] G:\Medicina1.7.7.rar
[31.03.2010 17:04|--a------|1249280] G:\mmpr-theme.mp3
[31.03.2010 17:06|--a------|4859904] G:\mmpr-thememovie.mp3
[17.04.2010 20:38|--a------|1861707] G:\mrtvej had.wmv
[27.02.2010 16:32|--a------|17825] G:\NB.odt
[04.03.2010 14:16|--a------|2432] G:\New Database.odb
[07.03.2010 06:35|--a------|447622510] G:\NO4.avi
[09.01.2010 02:01|--a------|69120] G:\Nuclear Blast Highlights.doc
[17.04.2010 16:00|--a------|1354] G:\n vrhy SGA.rtf
[01.05.2010 17:27|--a------|128019364] G:\OOo_3.2.0_100218_Win32Intel_install_cs.exe
[21.02.2010 02:07|--a------|3706] G:\ordinace.txt
[01.05.2010 17:53|--a------|39424] G:\pro hoff web.doc
[27.09.2009 23:28|--a------|78336] G:\Pro Petulku.ppt
[01.05.2010 18:45|--a------|27136] G:\PýˇbŘh, aktuality.doc
[22.12.2009 03:02|--a------|2538] G:\pýˇbŘhy.rtf
[05.05.2010 11:44|--a------|2524268] G:\qip8095.exe
[25.10.2009 22:07|--a------|11126] G:\RALF pokraźov nˇ serie.rtf
[09.04.2010 03:07|--a------|19652] G:\robot_thundercracker.jpg
[15.04.2010 22:55|--a------|87849] G:\ROTF_Deluxe_Sideways.jpg
[23.04.2010 17:39|--a------|104193021] G:\Sandy.avi
[28.03.2010 17:21|--a------|5068] G:\SGA Shrnutˇ vŘku 28.3.2010.rtf
[01.05.2010 23:36|--a------|16936] G:\SGA-07-007.jpg
[03.02.2010 00:16|--a------|84697] G:\SGA-HOFF.rtf
[01.05.2010 20:06|--a------|137645] G:\sgg a sga.jpg
[24.03.2010 18:01|--a------|6624] G:\Souhrn.rtf
[09.04.2010 03:24|--a------|110391] G:\spotlight-ramjet.jpg
[26.04.2010 15:32|--a------|195291] G:\Stargate Atlantis.jpg
[01.05.2010 17:32|--a------|321963] G:\Stargate-Atlantis-science-fiction-4355405-1280-800.jpg
[01.05.2010 20:02|--a------|35687] G:\StargateAtlantis-thumb-550x299-14664.jpg
[30.04.2010 12:00|--a------|138] G:\Str nka1.html
[31.03.2008 16:35|--a------|1791771] G:\Superpamet1e6.exe
[17.01.2010 01:30|--a------|80384] G:\Tel.seznam.xls
[30.11.2009 18:42|--a------|1039748236] G:\Terminator 4 Salvation 2009-SUPR-CZ dabing zlata-kvalita scifi..avi
[20.08.2007 17:53|--a------|1230382] G:\Terminator.wav
[29.04.2010 16:07|--a------|6933] G:\TEST 2.rtf
[08.06.2009 21:17|--a------|11543] G:\TFS New Generation.rtf
[10.05.2010 00:02|--ahs----|499200] G:\Thumbs.db
[21.04.2010 20:46|--a------|59873] G:\Tomio a krteźek.jpg
[18.03.2010 01:17|--a------|7610] G:\TOP DIS.txt
[?|?|?] G:\trp.
[13.12.2009 01:34|--a------|160] G:\TS3.txt
[13.04.2010 19:12|--a------|42576] G:\Vencis log.rtf
[04.08.2008 15:57|--a------|224600] G:\Vesmlouvesknizetem.pdf
[20.04.2010 01:04|--a------|1298] G:\viry.cz pom…cky.rtf
[20.04.2010 21:49|--a------|1372] G:\viry.cz test.rtf
[21.04.2010 23:15|--a------|1675] G:\Vl da Hoff.rtf
[08.05.2010 00:27|--a------|509136] G:\V…dci SGA 8.5.2010.jpg
[16.12.2009 14:08|--a------|4259] G:\WASP.txt
[13.11.2006 01:15|--a------|657552] G:\Win32_Pipeline_Remover.exe
[14.04.2010 13:32|--a------|463734] G:\WIN7 on XP.jpg
[05.05.2010 10:28|--a------|1520004] G:\wrar393cz.exe
[28.03.2010 20:38|--a------|23415] G:\zatnktel-1.mp3
[28.03.2010 20:38|--a------|126921] G:\zatnktel-2.mp3
[28.03.2010 20:37|--a------|3001] G:\zatnktel.mp3
[13.05.2010 22:52|--a------|11754509] H:\VIA4in1_MB_K7T266_Pro2_1.zip
[13.05.2010 23:15|--a------|15243539] H:\VIA_USB2_V270p1-L-M.zip
[13.05.2010 23:19|--a------|111159872] H:\197.45_desktop_winxp_32bit_international_whql.exe
[14.05.2010 16:51|--a------|41592704] H:\9-8_xp32_dd_ccc_wdm_enu.exe
[14.05.2010 17:24|--a------|72753475] H:\ati8592_winXP32.zip
[14.05.2010 17:33|--a------|68852288] H:\ASUS_A8NE-FM_Motherboard_Drivers.rar
[30.11.2009 18:42|--a------|1039748236] I:\Terminator 4 Salvation 2009-SUPR-CZ dabing zlata-kvalita scifi..avi

################## | Vaccination |

# C:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).
# D:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).
# G:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).
# H:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).
# I:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).

################## | Upload |

Please send the file : C:\UsbFix_Upload_Me_DOMOV-8DJLY395S.zip : http://chiquitine.changelog.fr/Sample/Upload.php
Thank you for your contribution .

################## | ! End of report # UsbFix V6.113 ! |

[motji]

Prosím Tě tento soubor : C:\UsbFix_Upload_Me_DOMOV-8DJLY395S.zip uploadni zde http://chiquitine.changelog.fr/Sample/Upload.php
Díky

Spusť znovu USbfix a potvrd volbu 6 - odinstaluje se

Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.

udělej ještě kontrolu disku a defragmentuj disky