Smart store help
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: Smart store help
Zkusím něco vymyslet.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Smart store help
Ok, díky
Jsem člověk, který našel svůj domov forum.viry.cz
Nic nedělejte bez rádce, můžete dojít ke kompletní ztrátě dat !
Nejsem rádce, ale chtěl bych se jím stát, ale i tak vám rád pomůžu
Microsoft Essential ke stažení !
RSIT ke stažení !
Chcete pomoct se stránkami nebo grafikou ? Nebojte se mi napsat, rád vám pomůžu
Nic nedělejte bez rádce, můžete dojít ke kompletní ztrátě dat !
Nejsem rádce, ale chtěl bych se jím stát, ale i tak vám rád pomůžu
Microsoft Essential ke stažení !
RSIT ke stažení !
Chcete pomoct se stránkami nebo grafikou ? Nebojte se mi napsat, rád vám pomůžu
Re: Smart store help
Přes přidat/odebrat programy odinstalujte tento program
c:\program files\Winferno
Pak by ten schredder měl jít smazat.
c:\program files\Winferno
Pak by ten schredder měl jít smazat.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Smart store help
Děkuji, již tam není mám provést konečnou kontrolu v RSIT ?
Jsem člověk, který našel svůj domov forum.viry.cz
Nic nedělejte bez rádce, můžete dojít ke kompletní ztrátě dat !
Nejsem rádce, ale chtěl bych se jím stát, ale i tak vám rád pomůžu
Microsoft Essential ke stažení !
RSIT ke stažení !
Chcete pomoct se stránkami nebo grafikou ? Nebojte se mi napsat, rád vám pomůžu
Nic nedělejte bez rádce, můžete dojít ke kompletní ztrátě dat !
Nejsem rádce, ale chtěl bych se jím stát, ale i tak vám rád pomůžu
Microsoft Essential ke stažení !
RSIT ke stažení !
Chcete pomoct se stránkami nebo grafikou ? Nebojte se mi napsat, rád vám pomůžu
Re: Smart store help
Ano 
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Smart store help
Logfile of random's system information tool 1.08 (written by random/random)
Run by Michal at 2010-10-28 22:26:56
Microsoft® Windows Vista™ Home Basic
System drive C: has 26 GB (23%) free of 114 GB
Total RAM: 3002 MB (55% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:27:20, on 28.10.2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16982)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\iSafe AllInOne Keylogger\winsrv.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Multimedia Mouse Driver\v5\KMConfig.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Users\Michal\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Multimedia Mouse Driver\v5\KMProcess.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Michal\Downloads\RSIT.exe
C:\Program Files\trend micro\Michal.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:25488
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = plimus.com,www.plimus.com,regnow.com,www.regnow.com,
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [PrzyspieszKomputer] "C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe"
O4 - HKLM\..\Run: [iSafeCW] C:\Program Files\iSafe AllInOne Keylogger\winsrv.exe
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [KMConfig] "C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe" KMConfig.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: 20Dollars2Surf.lnk = C:\Program Files\20Dollars2Surf\20dollars2surf.exe
O4 - Global Startup: Pinnacle Streaming Server.lnk = C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Michal\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe
O23 - Service: mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit (mi-raysat_3dsmax2010_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe
O23 - Service: RaySat_3dsmax8 Server (mi-raysat_3dsmax8) - Unknown owner - C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: Stardock WindowBlinds (WindowBlinds) - Stardock Corporation - C:\Program Files\Stardock\MyColors\VistaSrv.exe
--
End of file - 8761 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1630076922-693152462-836407820-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1630076922-693152462-836407820-1000UA.job
C:\Windows\tasks\Norton Security Scan for Michal.job
C:\Windows\tasks\PCConfidential.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2010-07-28 325408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-28 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2010-07-30 1006264]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-06-03 1144104]
"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2010-09-15 1094224]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
"PrzyspieszKomputer"=C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe [2010-08-15 890104]
"iSafeCW"=C:\Program Files\iSafe AllInOne Keylogger\winsrv.exe [2010-03-21 1793024]
"amd_dc_opt"=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-10 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-10 175128]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-10 153624]
"KMConfig"=C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe [2007-03-06 212992]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-07-30 1232896]
"Google Update"=C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-09-02 13351304]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-09-16 328568]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe [2009-03-28 3325952]
"ICQ"=C:\Program Files\ICQ6.5\ICQ.exe [2009-11-16 172792]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
20Dollars2Surf.lnk - C:\Program Files\20Dollars2Surf\20dollars2surf.exe
Pinnacle Streaming Server.lnk - C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-10 215040]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2010-10-28 21:46:35 ----HD---- C:\Windows\PIF
2010-10-28 17:51:20 ----SHD---- C:\$RECYCLE.BIN
2010-10-28 17:51:16 ----D---- C:\Windows\temp
2010-10-28 17:51:14 ----A---- C:\ComboFix.txt
2010-10-28 17:34:47 ----D---- C:\ComboFix
2010-10-28 11:52:08 ----D---- C:\Users\Michal\AppData\Roaming\Malwarebytes
2010-10-28 11:52:01 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2010-10-28 11:51:59 ----D---- C:\ProgramData\Malwarebytes
2010-10-28 11:51:59 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-10-28 11:51:59 ----A---- C:\Windows\system32\drivers\mbam.sys
2010-10-27 23:25:20 ----A---- C:\Windows\zip.exe
2010-10-27 23:25:20 ----A---- C:\Windows\SWXCACLS.exe
2010-10-27 23:25:20 ----A---- C:\Windows\SWSC.exe
2010-10-27 23:25:20 ----A---- C:\Windows\SWREG.exe
2010-10-27 23:25:20 ----A---- C:\Windows\sed.exe
2010-10-27 23:25:20 ----A---- C:\Windows\PEV.exe
2010-10-27 23:25:20 ----A---- C:\Windows\NIRCMD.exe
2010-10-27 23:25:20 ----A---- C:\Windows\MBR.exe
2010-10-27 23:25:20 ----A---- C:\Windows\grep.exe
2010-10-27 23:25:05 ----D---- C:\Windows\ERDNT
2010-10-27 23:25:03 ----D---- C:\cokoliv.com
2010-10-27 23:23:48 ----D---- C:\Qoobox
2010-10-27 22:49:03 ----D---- C:\Program Files\trend micro
2010-10-27 22:49:02 ----D---- C:\rsit
2010-10-27 20:44:46 ----D---- C:\Program Files\CamStudio
2010-10-27 11:47:50 ----D---- C:\Program Files\Winamp Detect
2010-10-27 11:47:20 ----D---- C:\Users\Michal\AppData\Roaming\Winamp
2010-10-27 11:47:20 ----D---- C:\Program Files\Winamp
2010-10-26 12:27:00 ----D---- C:\Program Files\ICQ6.5
2010-10-26 12:16:31 ----D---- C:\Program Files\ICQ7.2
2010-10-25 22:13:14 ----D---- C:\Program Files\CPUID
2010-10-25 22:13:14 ----A---- C:\Windows\system32\drivers\cpuz132_x32.sys
2010-10-24 22:56:00 ----D---- C:\Program Files\TED Notepad
2010-10-24 20:09:38 ----D---- C:\Users\Michal\AppData\Roaming\dvdcss
2010-10-24 20:07:03 ----D---- C:\Users\Michal\AppData\Roaming\vlc
2010-10-24 20:05:48 ----D---- C:\Program Files\VideoLAN
2010-10-24 18:39:25 ----A---- C:\Windows\system32\drivers\Ltn_stk7070P.sys
2010-10-24 18:37:34 ----D---- C:\Program Files\MSXML 4.0
2010-10-24 18:36:20 ----N---- C:\Windows\system32\MASE32.DLL
2010-10-24 18:36:20 ----N---- C:\Windows\system32\MASD32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MAMC32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MACD32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MA32.DLL
2010-10-24 18:35:52 ----N---- C:\Windows\system32\MSVCRTD.DLL
2010-10-24 18:35:52 ----N---- C:\Windows\system32\msvcr71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcr70d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcp71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcp70d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\mfc71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\HHActiveX.dll
2010-10-24 18:35:50 ----A---- C:\Windows\system32\DivXEncSettings.txt
2010-10-24 18:35:38 ----N---- C:\Windows\system32\MFC71u.dll
2010-10-24 18:35:38 ----N---- C:\Windows\system32\MFC71.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\msvcr80.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\msvcp80.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\atl71.dll
2010-10-24 18:35:36 ----D---- C:\Program Files\Pinnacle
2010-10-24 18:29:43 ----D---- C:\ProgramData\Pinnacle
2010-10-24 18:03:48 ----D---- C:\Program Files\Multimedia Mouse Driver
2010-10-24 06:46:47 ----D---- C:\ProgramData\Electronic Arts
2010-10-22 14:05:11 ----A---- C:\Windows\system32\vp6vfw.dll
2010-10-22 14:04:55 ----D---- C:\Program Files\Microsoft WSE
2010-10-22 13:45:04 ----D---- C:\Program Files\Electronic Arts
2010-10-18 16:51:19 ----D---- C:\Users\Michal\AppData\Roaming\OpenOffice.org
2010-10-18 16:47:06 ----D---- C:\Program Files\OpenOffice.org 3
2010-10-15 07:06:26 ----D---- C:\Users\Michal\AppData\Roaming\PSpad
2010-10-15 07:06:00 ----D---- C:\Program Files\PSPad editor
2010-10-15 06:40:52 ----D---- C:\Program Files\SoftMaker Viewer
2010-10-15 06:40:52 ----A---- C:\Windows\unTMV.exe
2010-10-15 06:39:24 ----D---- C:\Program Files\Doc Convertor
2010-10-12 17:38:47 ----D---- C:\Users\Michal\AppData\Roaming\TuxPaint
2010-10-12 17:38:34 ----D---- C:\Program Files\TuxPaint
2010-10-12 15:19:14 ----D---- C:\Program Files\Altar Games
2010-10-12 15:14:55 ----D---- C:\Program Files\ABCgames Cheater
2010-10-11 16:24:22 ----D---- C:\Program Files\Scorpions WinCheater
2010-10-11 16:19:57 ----D---- C:\Program Files\1C
2010-10-09 21:46:17 ----D---- C:\Program Files\Google
2010-10-07 09:08:04 ----D---- C:\Program Files\Share Rapid Uploader
2010-09-30 14:30:57 ----D---- C:\Program Files\ScreenVCR
2010-09-30 14:24:57 ----D---- C:\Fraps
======List of files/folders modified in the last 1 months======
2010-10-28 22:25:03 ----SHD---- C:\System Volume Information
2010-10-28 22:24:56 ----D---- C:\Users\Michal\AppData\Roaming\uTorrent
2010-10-28 22:19:14 ----D---- C:\Users\Michal\AppData\Roaming\ICQ
2010-10-28 22:13:34 ----D---- C:\Program Files\Common Files
2010-10-28 22:13:34 ----D---- C:\Program Files
2010-10-28 22:12:04 ----D---- C:\Users\Michal\AppData\Roaming\Skype
2010-10-28 22:11:53 ----D---- C:\Windows\System32
2010-10-28 21:46:35 ----D---- C:\Windows
2010-10-28 21:06:58 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-10-28 17:49:30 ----A---- C:\Windows\system.ini
2010-10-28 17:49:22 ----D---- C:\Windows\system32\drivers\etc
2010-10-28 17:48:41 ----D---- C:\ProgramData
2010-10-28 17:45:43 ----D---- C:\Windows\system32\drivers
2010-10-28 17:45:43 ----D---- C:\Windows\AppPatch
2010-10-28 16:09:34 ----D---- C:\Users\Michal\AppData\Roaming\skypePM
2010-10-27 22:04:51 ----D---- C:\Games
2010-10-27 21:38:25 ----D---- C:\Program Files\ICQ6Toolbar
2010-10-27 17:32:19 ----D---- C:\Users\Michal\AppData\Roaming\FileZilla
2010-10-27 12:21:07 ----D---- C:\Users\Michal\AppData\Roaming\TeamViewer
2010-10-26 12:49:01 ----D---- C:\Users\Michal\AppData\Roaming\Adobe
2010-10-26 12:31:18 ----D---- C:\Program Files\Mozilla Firefox
2010-10-26 12:30:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-10-26 12:30:16 ----D---- C:\ProgramData\ICQ
2010-10-25 14:58:26 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-10-24 19:56:48 ----D---- C:\Windows\Prefetch
2010-10-24 19:56:46 ----D---- C:\Program Files\AVS4YOU
2010-10-24 19:48:25 ----D---- C:\Windows\inf
2010-10-24 19:46:55 ----D---- C:\Windows\system32\catroot
2010-10-24 18:38:56 ----SHD---- C:\Windows\Installer
2010-10-24 18:37:53 ----D---- C:\Windows\winsxs
2010-10-24 18:36:20 ----A---- C:\Windows\win.ini
2010-10-24 18:35:14 ----D---- C:\ProgramData\Adobe
2010-10-24 18:34:33 ----D---- C:\Program Files\Common Files\Adobe
2010-10-24 18:34:14 ----D---- C:\Program Files\Adobe
2010-10-24 13:15:33 ----D---- C:\.mpr_file_store_32
2010-10-22 14:05:10 ----SD---- C:\Users\Michal\AppData\Roaming\Microsoft
2010-10-22 14:05:10 ----RSD---- C:\Windows\assembly
2010-10-22 12:54:10 ----D---- C:\Windows\system32\WDI
2010-10-22 05:59:13 ----D---- C:\Windows\system32\catroot2
2010-10-19 22:51:33 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-18 17:32:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-18 16:47:44 ----RSD---- C:\Windows\Fonts
2010-10-15 09:47:55 ----D---- C:\.file_store_32
2010-10-14 14:55:32 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2010-10-13 23:56:27 ----A---- C:\Windows\system32\mrt.exe
2010-10-13 16:41:51 ----D---- C:\Program Files\Microsoft Security Essentials
2010-10-09 21:46:28 ----D---- C:\Windows\Tasks
2010-10-09 21:46:28 ----D---- C:\Windows\system32\Tasks
2010-10-02 10:37:03 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-10-02 10:37:01 ----A---- C:\Windows\system32\pbsvc.exe
2010-09-29 16:18:19 ----D---- C:\Users\Michal\AppData\Roaming\Autodesk
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 151216]
R2 cpuz132;cpuz132; \??\C:\Windows\system32\drivers\cpuz132_x32.sys [2009-03-27 12672]
R3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-01-09 1093120]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2010-07-30 19456]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2006-11-02 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2010-07-30 29184]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-10 4744704]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2006-11-02 49664]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-12-23 138240]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2006-11-02 132352]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2010-07-30 220160]
S3 catchme;catchme; \??\C:\Users\Michal\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\ialmnt5.sys [2006-11-02 1302492]
S3 Ltn_stk7070P;PCTV based TV tuner device; C:\Windows\system32\DRIVERS\Ltn_stk7070P.sys [2007-06-14 466048]
S3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 Ph3xIB32;Philips 713x Inbox PCI TV Card; C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2007-04-03 1131136]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2010-08-13 72704]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2006-11-02 22016]
R2 KMWDSERVICE;Keyboard And Mouse Communication Service; C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe [2007-05-08 2179072]
R2 mi-raysat_3dsmax2010_32;mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit; C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe [2009-03-12 86016]
R2 mi-raysat_3dsmax8;RaySat_3dsmax8 Server; C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe [2005-09-21 65536]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17904]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-10-02 75064]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-09-24 1960744]
R2 WindowBlinds;Stardock WindowBlinds; C:\Program Files\Stardock\MyColors\VistaSrv.exe [2009-06-09 230704]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-26 651720]
-----------------EOF-----------------
Run by Michal at 2010-10-28 22:26:56
Microsoft® Windows Vista™ Home Basic
System drive C: has 26 GB (23%) free of 114 GB
Total RAM: 3002 MB (55% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:27:20, on 28.10.2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16982)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\iSafe AllInOne Keylogger\winsrv.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Multimedia Mouse Driver\v5\KMConfig.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Users\Michal\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Multimedia Mouse Driver\v5\KMProcess.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Michal\Downloads\RSIT.exe
C:\Program Files\trend micro\Michal.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:25488
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = plimus.com,www.plimus.com,regnow.com,www.regnow.com,
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [PrzyspieszKomputer] "C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe"
O4 - HKLM\..\Run: [iSafeCW] C:\Program Files\iSafe AllInOne Keylogger\winsrv.exe
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [KMConfig] "C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe" KMConfig.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: 20Dollars2Surf.lnk = C:\Program Files\20Dollars2Surf\20dollars2surf.exe
O4 - Global Startup: Pinnacle Streaming Server.lnk = C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Michal\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe
O23 - Service: mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit (mi-raysat_3dsmax2010_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe
O23 - Service: RaySat_3dsmax8 Server (mi-raysat_3dsmax8) - Unknown owner - C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: Stardock WindowBlinds (WindowBlinds) - Stardock Corporation - C:\Program Files\Stardock\MyColors\VistaSrv.exe
--
End of file - 8761 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1630076922-693152462-836407820-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1630076922-693152462-836407820-1000UA.job
C:\Windows\tasks\Norton Security Scan for Michal.job
C:\Windows\tasks\PCConfidential.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2010-07-28 325408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-28 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2010-07-30 1006264]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-06-03 1144104]
"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2010-09-15 1094224]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
"PrzyspieszKomputer"=C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe [2010-08-15 890104]
"iSafeCW"=C:\Program Files\iSafe AllInOne Keylogger\winsrv.exe [2010-03-21 1793024]
"amd_dc_opt"=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-10 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-10 175128]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-10 153624]
"KMConfig"=C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe [2007-03-06 212992]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-07-30 1232896]
"Google Update"=C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-09-02 13351304]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-09-16 328568]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe [2009-03-28 3325952]
"ICQ"=C:\Program Files\ICQ6.5\ICQ.exe [2009-11-16 172792]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
20Dollars2Surf.lnk - C:\Program Files\20Dollars2Surf\20dollars2surf.exe
Pinnacle Streaming Server.lnk - C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-10 215040]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2010-10-28 21:46:35 ----HD---- C:\Windows\PIF
2010-10-28 17:51:20 ----SHD---- C:\$RECYCLE.BIN
2010-10-28 17:51:16 ----D---- C:\Windows\temp
2010-10-28 17:51:14 ----A---- C:\ComboFix.txt
2010-10-28 17:34:47 ----D---- C:\ComboFix
2010-10-28 11:52:08 ----D---- C:\Users\Michal\AppData\Roaming\Malwarebytes
2010-10-28 11:52:01 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2010-10-28 11:51:59 ----D---- C:\ProgramData\Malwarebytes
2010-10-28 11:51:59 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-10-28 11:51:59 ----A---- C:\Windows\system32\drivers\mbam.sys
2010-10-27 23:25:20 ----A---- C:\Windows\zip.exe
2010-10-27 23:25:20 ----A---- C:\Windows\SWXCACLS.exe
2010-10-27 23:25:20 ----A---- C:\Windows\SWSC.exe
2010-10-27 23:25:20 ----A---- C:\Windows\SWREG.exe
2010-10-27 23:25:20 ----A---- C:\Windows\sed.exe
2010-10-27 23:25:20 ----A---- C:\Windows\PEV.exe
2010-10-27 23:25:20 ----A---- C:\Windows\NIRCMD.exe
2010-10-27 23:25:20 ----A---- C:\Windows\MBR.exe
2010-10-27 23:25:20 ----A---- C:\Windows\grep.exe
2010-10-27 23:25:05 ----D---- C:\Windows\ERDNT
2010-10-27 23:25:03 ----D---- C:\cokoliv.com
2010-10-27 23:23:48 ----D---- C:\Qoobox
2010-10-27 22:49:03 ----D---- C:\Program Files\trend micro
2010-10-27 22:49:02 ----D---- C:\rsit
2010-10-27 20:44:46 ----D---- C:\Program Files\CamStudio
2010-10-27 11:47:50 ----D---- C:\Program Files\Winamp Detect
2010-10-27 11:47:20 ----D---- C:\Users\Michal\AppData\Roaming\Winamp
2010-10-27 11:47:20 ----D---- C:\Program Files\Winamp
2010-10-26 12:27:00 ----D---- C:\Program Files\ICQ6.5
2010-10-26 12:16:31 ----D---- C:\Program Files\ICQ7.2
2010-10-25 22:13:14 ----D---- C:\Program Files\CPUID
2010-10-25 22:13:14 ----A---- C:\Windows\system32\drivers\cpuz132_x32.sys
2010-10-24 22:56:00 ----D---- C:\Program Files\TED Notepad
2010-10-24 20:09:38 ----D---- C:\Users\Michal\AppData\Roaming\dvdcss
2010-10-24 20:07:03 ----D---- C:\Users\Michal\AppData\Roaming\vlc
2010-10-24 20:05:48 ----D---- C:\Program Files\VideoLAN
2010-10-24 18:39:25 ----A---- C:\Windows\system32\drivers\Ltn_stk7070P.sys
2010-10-24 18:37:34 ----D---- C:\Program Files\MSXML 4.0
2010-10-24 18:36:20 ----N---- C:\Windows\system32\MASE32.DLL
2010-10-24 18:36:20 ----N---- C:\Windows\system32\MASD32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MAMC32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MACD32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MA32.DLL
2010-10-24 18:35:52 ----N---- C:\Windows\system32\MSVCRTD.DLL
2010-10-24 18:35:52 ----N---- C:\Windows\system32\msvcr71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcr70d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcp71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcp70d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\mfc71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\HHActiveX.dll
2010-10-24 18:35:50 ----A---- C:\Windows\system32\DivXEncSettings.txt
2010-10-24 18:35:38 ----N---- C:\Windows\system32\MFC71u.dll
2010-10-24 18:35:38 ----N---- C:\Windows\system32\MFC71.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\msvcr80.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\msvcp80.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\atl71.dll
2010-10-24 18:35:36 ----D---- C:\Program Files\Pinnacle
2010-10-24 18:29:43 ----D---- C:\ProgramData\Pinnacle
2010-10-24 18:03:48 ----D---- C:\Program Files\Multimedia Mouse Driver
2010-10-24 06:46:47 ----D---- C:\ProgramData\Electronic Arts
2010-10-22 14:05:11 ----A---- C:\Windows\system32\vp6vfw.dll
2010-10-22 14:04:55 ----D---- C:\Program Files\Microsoft WSE
2010-10-22 13:45:04 ----D---- C:\Program Files\Electronic Arts
2010-10-18 16:51:19 ----D---- C:\Users\Michal\AppData\Roaming\OpenOffice.org
2010-10-18 16:47:06 ----D---- C:\Program Files\OpenOffice.org 3
2010-10-15 07:06:26 ----D---- C:\Users\Michal\AppData\Roaming\PSpad
2010-10-15 07:06:00 ----D---- C:\Program Files\PSPad editor
2010-10-15 06:40:52 ----D---- C:\Program Files\SoftMaker Viewer
2010-10-15 06:40:52 ----A---- C:\Windows\unTMV.exe
2010-10-15 06:39:24 ----D---- C:\Program Files\Doc Convertor
2010-10-12 17:38:47 ----D---- C:\Users\Michal\AppData\Roaming\TuxPaint
2010-10-12 17:38:34 ----D---- C:\Program Files\TuxPaint
2010-10-12 15:19:14 ----D---- C:\Program Files\Altar Games
2010-10-12 15:14:55 ----D---- C:\Program Files\ABCgames Cheater
2010-10-11 16:24:22 ----D---- C:\Program Files\Scorpions WinCheater
2010-10-11 16:19:57 ----D---- C:\Program Files\1C
2010-10-09 21:46:17 ----D---- C:\Program Files\Google
2010-10-07 09:08:04 ----D---- C:\Program Files\Share Rapid Uploader
2010-09-30 14:30:57 ----D---- C:\Program Files\ScreenVCR
2010-09-30 14:24:57 ----D---- C:\Fraps
======List of files/folders modified in the last 1 months======
2010-10-28 22:25:03 ----SHD---- C:\System Volume Information
2010-10-28 22:24:56 ----D---- C:\Users\Michal\AppData\Roaming\uTorrent
2010-10-28 22:19:14 ----D---- C:\Users\Michal\AppData\Roaming\ICQ
2010-10-28 22:13:34 ----D---- C:\Program Files\Common Files
2010-10-28 22:13:34 ----D---- C:\Program Files
2010-10-28 22:12:04 ----D---- C:\Users\Michal\AppData\Roaming\Skype
2010-10-28 22:11:53 ----D---- C:\Windows\System32
2010-10-28 21:46:35 ----D---- C:\Windows
2010-10-28 21:06:58 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-10-28 17:49:30 ----A---- C:\Windows\system.ini
2010-10-28 17:49:22 ----D---- C:\Windows\system32\drivers\etc
2010-10-28 17:48:41 ----D---- C:\ProgramData
2010-10-28 17:45:43 ----D---- C:\Windows\system32\drivers
2010-10-28 17:45:43 ----D---- C:\Windows\AppPatch
2010-10-28 16:09:34 ----D---- C:\Users\Michal\AppData\Roaming\skypePM
2010-10-27 22:04:51 ----D---- C:\Games
2010-10-27 21:38:25 ----D---- C:\Program Files\ICQ6Toolbar
2010-10-27 17:32:19 ----D---- C:\Users\Michal\AppData\Roaming\FileZilla
2010-10-27 12:21:07 ----D---- C:\Users\Michal\AppData\Roaming\TeamViewer
2010-10-26 12:49:01 ----D---- C:\Users\Michal\AppData\Roaming\Adobe
2010-10-26 12:31:18 ----D---- C:\Program Files\Mozilla Firefox
2010-10-26 12:30:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-10-26 12:30:16 ----D---- C:\ProgramData\ICQ
2010-10-25 14:58:26 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-10-24 19:56:48 ----D---- C:\Windows\Prefetch
2010-10-24 19:56:46 ----D---- C:\Program Files\AVS4YOU
2010-10-24 19:48:25 ----D---- C:\Windows\inf
2010-10-24 19:46:55 ----D---- C:\Windows\system32\catroot
2010-10-24 18:38:56 ----SHD---- C:\Windows\Installer
2010-10-24 18:37:53 ----D---- C:\Windows\winsxs
2010-10-24 18:36:20 ----A---- C:\Windows\win.ini
2010-10-24 18:35:14 ----D---- C:\ProgramData\Adobe
2010-10-24 18:34:33 ----D---- C:\Program Files\Common Files\Adobe
2010-10-24 18:34:14 ----D---- C:\Program Files\Adobe
2010-10-24 13:15:33 ----D---- C:\.mpr_file_store_32
2010-10-22 14:05:10 ----SD---- C:\Users\Michal\AppData\Roaming\Microsoft
2010-10-22 14:05:10 ----RSD---- C:\Windows\assembly
2010-10-22 12:54:10 ----D---- C:\Windows\system32\WDI
2010-10-22 05:59:13 ----D---- C:\Windows\system32\catroot2
2010-10-19 22:51:33 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-18 17:32:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-18 16:47:44 ----RSD---- C:\Windows\Fonts
2010-10-15 09:47:55 ----D---- C:\.file_store_32
2010-10-14 14:55:32 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2010-10-13 23:56:27 ----A---- C:\Windows\system32\mrt.exe
2010-10-13 16:41:51 ----D---- C:\Program Files\Microsoft Security Essentials
2010-10-09 21:46:28 ----D---- C:\Windows\Tasks
2010-10-09 21:46:28 ----D---- C:\Windows\system32\Tasks
2010-10-02 10:37:03 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-10-02 10:37:01 ----A---- C:\Windows\system32\pbsvc.exe
2010-09-29 16:18:19 ----D---- C:\Users\Michal\AppData\Roaming\Autodesk
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 151216]
R2 cpuz132;cpuz132; \??\C:\Windows\system32\drivers\cpuz132_x32.sys [2009-03-27 12672]
R3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-01-09 1093120]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2010-07-30 19456]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2006-11-02 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2010-07-30 29184]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-10 4744704]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2006-11-02 49664]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-12-23 138240]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2006-11-02 132352]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2010-07-30 220160]
S3 catchme;catchme; \??\C:\Users\Michal\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\ialmnt5.sys [2006-11-02 1302492]
S3 Ltn_stk7070P;PCTV based TV tuner device; C:\Windows\system32\DRIVERS\Ltn_stk7070P.sys [2007-06-14 466048]
S3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 Ph3xIB32;Philips 713x Inbox PCI TV Card; C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2007-04-03 1131136]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2010-08-13 72704]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2006-11-02 22016]
R2 KMWDSERVICE;Keyboard And Mouse Communication Service; C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe [2007-05-08 2179072]
R2 mi-raysat_3dsmax2010_32;mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit; C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe [2009-03-12 86016]
R2 mi-raysat_3dsmax8;RaySat_3dsmax8 Server; C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe [2005-09-21 65536]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17904]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-10-02 75064]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-09-24 1960744]
R2 WindowBlinds;Stardock WindowBlinds; C:\Program Files\Stardock\MyColors\VistaSrv.exe [2009-06-09 230704]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-26 651720]
-----------------EOF-----------------
Jsem člověk, který našel svůj domov forum.viry.cz
Nic nedělejte bez rádce, můžete dojít ke kompletní ztrátě dat !
Nejsem rádce, ale chtěl bych se jím stát, ale i tak vám rád pomůžu
Microsoft Essential ke stažení !
RSIT ke stažení !
Chcete pomoct se stránkami nebo grafikou ? Nebojte se mi napsat, rád vám pomůžu
Nic nedělejte bez rádce, můžete dojít ke kompletní ztrátě dat !
Nejsem rádce, ale chtěl bych se jím stát, ale i tak vám rád pomůžu
Microsoft Essential ke stažení !
RSIT ke stažení !
Chcete pomoct se stránkami nebo grafikou ? Nebojte se mi napsat, rád vám pomůžu
Re: Smart store help
Ten keylloger bych Vám doporučila odinstalovat, nevíte, kdo Vás může sledovat
. Zvlášt, když byl free
.
Smažte
C:\Windows\tasks\Norton Security Scan for Michal.job
C:\Windows\tasks\PCConfidential.job
Otevřete si Poznámkový blok a zkopírujte do něj text
-uložte jako (typ: všechny soubory) kde za název souboru zadáte "smazani.reg" bez uvozovek,
klikněte na uložit, pak na soubor standardně 2X klikněte a potvrďte dialogové okno.
Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:
ComboFix /Uninstall
-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.
***********
Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe
-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir
***********
Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru
záložka čistič
- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner
záložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy
ok
zavřít
Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.
Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.
***********
Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-vyčistí tempy a po použitých programech
***********
C:\Windows\tasks\Norton Security Scan for Michal.job
C:\Windows\tasks\PCConfidential.job
Kód: Vybrat vše
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=-
klikněte na uložit, pak na soubor standardně 2X klikněte a potvrďte dialogové okno.
- zkopírujte do okénka:
ComboFix /Uninstall
-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.
***********
http://sweb.cz/Marinus/T-Cleaner.exe
-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir
***********
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru
záložka čistič- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner
záložka Registry- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy
Záložka Nástroje- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.
Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.
***********
http://oldtimer.geekstogo.com/OTC.exe
-vyčistí tempy a po použitých programech
***********
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Smart store help
Hotovo vše provedeno, CCleaner budu používat... Isafe key loger deleted....
log z RSIT:
Logfile of random's system information tool 1.08 (written by random/random)
Run by Michal at 2010-10-28 23:01:50
Microsoft® Windows Vista™ Home Basic
System drive C: has 24 GB (21%) free of 114 GB
Total RAM: 3002 MB (53% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:01:56, on 28.10.2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16982)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Multimedia Mouse Driver\v5\KMConfig.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Users\Michal\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Multimedia Mouse Driver\v5\KMProcess.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\ICQ7.2\ICQ.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\conime.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Michal\Downloads\RSIT (1).exe
C:\Program Files\trend micro\Michal.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:25488
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = plimus.com,www.plimus.com,regnow.com,www.regnow.com,
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [PrzyspieszKomputer] "C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe"
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [KMConfig] "C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe" KMConfig.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: 20Dollars2Surf.lnk = C:\Program Files\20Dollars2Surf\20dollars2surf.exe
O4 - Global Startup: Pinnacle Streaming Server.lnk = C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Michal\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe
O23 - Service: mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit (mi-raysat_3dsmax2010_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe
O23 - Service: RaySat_3dsmax8 Server (mi-raysat_3dsmax8) - Unknown owner - C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: Stardock WindowBlinds (WindowBlinds) - Stardock Corporation - C:\Program Files\Stardock\MyColors\VistaSrv.exe
--
End of file - 8664 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Norton Security Scan for Michal.job
C:\Windows\tasks\PCConfidential.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2010-07-28 325408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-28 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2010-07-30 1006264]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-06-03 1144104]
"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2010-09-15 1094224]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
"PrzyspieszKomputer"=C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe [2010-08-15 890104]
"amd_dc_opt"=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-10 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-10 175128]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-10 153624]
"KMConfig"=C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe [2007-03-06 212992]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-07-30 1232896]
"Google Update"=C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-09-02 13351304]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-09-16 328568]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe [2009-03-28 3325952]
"ICQ"=C:\Program Files\ICQ6.5\ICQ.exe [2009-11-16 172792]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
20Dollars2Surf.lnk - C:\Program Files\20Dollars2Surf\20dollars2surf.exe
Pinnacle Streaming Server.lnk - C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-10 215040]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2010-10-28 23:00:15 ----D---- C:\rsit
2010-10-28 22:54:03 ----D---- C:\Program Files\CCleaner
2010-10-28 21:46:35 ----HD---- C:\Windows\PIF
2010-10-28 17:51:20 ----SHD---- C:\$RECYCLE.BIN
2010-10-28 17:51:16 ----D---- C:\Windows\temp
2010-10-28 17:51:14 ----A---- C:\ComboFix.txt
2010-10-28 11:52:08 ----D---- C:\Users\Michal\AppData\Roaming\Malwarebytes
2010-10-28 11:52:01 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2010-10-28 11:51:59 ----D---- C:\ProgramData\Malwarebytes
2010-10-28 11:51:59 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-10-28 11:51:59 ----A---- C:\Windows\system32\drivers\mbam.sys
2010-10-27 23:25:05 ----D---- C:\Windows\ERDNT
2010-10-27 23:25:03 ----D---- C:\cokoliv.com
2010-10-27 22:49:03 ----D---- C:\Program Files\trend micro
2010-10-27 20:44:46 ----D---- C:\Program Files\CamStudio
2010-10-27 11:47:50 ----D---- C:\Program Files\Winamp Detect
2010-10-27 11:47:20 ----D---- C:\Users\Michal\AppData\Roaming\Winamp
2010-10-27 11:47:20 ----D---- C:\Program Files\Winamp
2010-10-26 12:27:00 ----D---- C:\Program Files\ICQ6.5
2010-10-26 12:16:31 ----D---- C:\Program Files\ICQ7.2
2010-10-25 22:13:14 ----D---- C:\Program Files\CPUID
2010-10-25 22:13:14 ----A---- C:\Windows\system32\drivers\cpuz132_x32.sys
2010-10-24 22:56:00 ----D---- C:\Program Files\TED Notepad
2010-10-24 20:09:38 ----D---- C:\Users\Michal\AppData\Roaming\dvdcss
2010-10-24 20:07:03 ----D---- C:\Users\Michal\AppData\Roaming\vlc
2010-10-24 20:05:48 ----D---- C:\Program Files\VideoLAN
2010-10-24 18:39:25 ----A---- C:\Windows\system32\drivers\Ltn_stk7070P.sys
2010-10-24 18:37:34 ----D---- C:\Program Files\MSXML 4.0
2010-10-24 18:36:20 ----N---- C:\Windows\system32\MASE32.DLL
2010-10-24 18:36:20 ----N---- C:\Windows\system32\MASD32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MAMC32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MACD32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MA32.DLL
2010-10-24 18:35:52 ----N---- C:\Windows\system32\MSVCRTD.DLL
2010-10-24 18:35:52 ----N---- C:\Windows\system32\msvcr71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcr70d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcp71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcp70d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\mfc71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\HHActiveX.dll
2010-10-24 18:35:50 ----A---- C:\Windows\system32\DivXEncSettings.txt
2010-10-24 18:35:38 ----N---- C:\Windows\system32\MFC71u.dll
2010-10-24 18:35:38 ----N---- C:\Windows\system32\MFC71.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\msvcr80.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\msvcp80.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\atl71.dll
2010-10-24 18:35:36 ----D---- C:\Program Files\Pinnacle
2010-10-24 18:29:43 ----D---- C:\ProgramData\Pinnacle
2010-10-24 18:03:48 ----D---- C:\Program Files\Multimedia Mouse Driver
2010-10-24 06:46:47 ----D---- C:\ProgramData\Electronic Arts
2010-10-22 14:05:11 ----A---- C:\Windows\system32\vp6vfw.dll
2010-10-22 14:04:55 ----D---- C:\Program Files\Microsoft WSE
2010-10-22 13:45:04 ----D---- C:\Program Files\Electronic Arts
2010-10-18 16:51:19 ----D---- C:\Users\Michal\AppData\Roaming\OpenOffice.org
2010-10-18 16:47:06 ----D---- C:\Program Files\OpenOffice.org 3
2010-10-15 07:06:26 ----D---- C:\Users\Michal\AppData\Roaming\PSpad
2010-10-15 07:06:00 ----D---- C:\Program Files\PSPad editor
2010-10-15 06:40:52 ----D---- C:\Program Files\SoftMaker Viewer
2010-10-15 06:40:52 ----A---- C:\Windows\unTMV.exe
2010-10-15 06:39:24 ----D---- C:\Program Files\Doc Convertor
2010-10-12 17:38:47 ----D---- C:\Users\Michal\AppData\Roaming\TuxPaint
2010-10-12 17:38:34 ----D---- C:\Program Files\TuxPaint
2010-10-12 15:19:14 ----D---- C:\Program Files\Altar Games
2010-10-12 15:14:55 ----D---- C:\Program Files\ABCgames Cheater
2010-10-11 16:24:22 ----D---- C:\Program Files\Scorpions WinCheater
2010-10-11 16:19:57 ----D---- C:\Program Files\1C
2010-10-09 21:46:17 ----D---- C:\Program Files\Google
2010-10-07 09:08:04 ----D---- C:\Program Files\Share Rapid Uploader
2010-09-30 14:30:57 ----D---- C:\Program Files\ScreenVCR
2010-09-30 14:24:57 ----D---- C:\Fraps
======List of files/folders modified in the last 1 months======
2010-10-28 22:59:19 ----HD---- C:\Program Files\iSafe AllInOne Keylogger
2010-10-28 22:56:01 ----D---- C:\Windows\Debug
2010-10-28 22:56:01 ----D---- C:\Windows
2010-10-28 22:54:59 ----D---- C:\Users\Michal\AppData\Roaming\uTorrent
2010-10-28 22:54:03 ----D---- C:\Program Files
2010-10-28 22:51:42 ----SHD---- C:\System Volume Information
2010-10-28 22:47:07 ----D---- C:\Windows\Tasks
2010-10-28 22:32:18 ----D---- C:\Users\Michal\AppData\Roaming\ICQ
2010-10-28 22:13:34 ----D---- C:\Program Files\Common Files
2010-10-28 22:12:04 ----D---- C:\Users\Michal\AppData\Roaming\Skype
2010-10-28 22:11:53 ----D---- C:\Windows\System32
2010-10-28 21:06:58 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-10-28 17:49:30 ----A---- C:\Windows\system.ini
2010-10-28 17:49:22 ----D---- C:\Windows\system32\drivers\etc
2010-10-28 17:48:41 ----D---- C:\ProgramData
2010-10-28 17:45:43 ----D---- C:\Windows\system32\drivers
2010-10-28 17:45:43 ----D---- C:\Windows\AppPatch
2010-10-28 16:09:34 ----D---- C:\Users\Michal\AppData\Roaming\skypePM
2010-10-27 22:04:51 ----D---- C:\Games
2010-10-27 21:38:25 ----D---- C:\Program Files\ICQ6Toolbar
2010-10-27 17:32:19 ----D---- C:\Users\Michal\AppData\Roaming\FileZilla
2010-10-27 12:21:07 ----D---- C:\Users\Michal\AppData\Roaming\TeamViewer
2010-10-26 12:49:01 ----D---- C:\Users\Michal\AppData\Roaming\Adobe
2010-10-26 12:31:18 ----D---- C:\Program Files\Mozilla Firefox
2010-10-26 12:30:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-10-26 12:30:16 ----D---- C:\ProgramData\ICQ
2010-10-25 14:58:26 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-10-24 19:56:48 ----D---- C:\Windows\Prefetch
2010-10-24 19:56:46 ----D---- C:\Program Files\AVS4YOU
2010-10-24 19:48:25 ----D---- C:\Windows\inf
2010-10-24 19:46:55 ----D---- C:\Windows\system32\catroot
2010-10-24 18:38:56 ----SHD---- C:\Windows\Installer
2010-10-24 18:37:53 ----D---- C:\Windows\winsxs
2010-10-24 18:36:20 ----A---- C:\Windows\win.ini
2010-10-24 18:35:14 ----D---- C:\ProgramData\Adobe
2010-10-24 18:34:33 ----D---- C:\Program Files\Common Files\Adobe
2010-10-24 18:34:14 ----D---- C:\Program Files\Adobe
2010-10-24 13:15:33 ----D---- C:\.mpr_file_store_32
2010-10-22 14:05:10 ----SD---- C:\Users\Michal\AppData\Roaming\Microsoft
2010-10-22 14:05:10 ----RSD---- C:\Windows\assembly
2010-10-22 12:54:10 ----D---- C:\Windows\system32\WDI
2010-10-22 05:59:13 ----D---- C:\Windows\system32\catroot2
2010-10-19 22:51:33 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-18 17:32:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-18 16:47:44 ----RSD---- C:\Windows\Fonts
2010-10-15 09:47:55 ----D---- C:\.file_store_32
2010-10-14 14:55:32 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2010-10-13 23:56:27 ----A---- C:\Windows\system32\mrt.exe
2010-10-13 16:41:51 ----D---- C:\Program Files\Microsoft Security Essentials
2010-10-09 21:46:28 ----D---- C:\Windows\system32\Tasks
2010-10-02 10:37:03 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-10-02 10:37:01 ----A---- C:\Windows\system32\pbsvc.exe
2010-09-29 16:18:19 ----D---- C:\Users\Michal\AppData\Roaming\Autodesk
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 151216]
R2 cpuz132;cpuz132; \??\C:\Windows\system32\drivers\cpuz132_x32.sys [2009-03-27 12672]
R3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-01-09 1093120]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2010-07-30 19456]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2006-11-02 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2010-07-30 29184]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-10 4744704]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2006-11-02 49664]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-12-23 138240]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2006-11-02 132352]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2010-07-30 220160]
S3 catchme;catchme; \??\C:\Users\Michal\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\ialmnt5.sys [2006-11-02 1302492]
S3 Ltn_stk7070P;PCTV based TV tuner device; C:\Windows\system32\DRIVERS\Ltn_stk7070P.sys [2007-06-14 466048]
S3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 Ph3xIB32;Philips 713x Inbox PCI TV Card; C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2007-04-03 1131136]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2010-08-13 72704]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2006-11-02 22016]
R2 KMWDSERVICE;Keyboard And Mouse Communication Service; C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe [2007-05-08 2179072]
R2 mi-raysat_3dsmax2010_32;mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit; C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe [2009-03-12 86016]
R2 mi-raysat_3dsmax8;RaySat_3dsmax8 Server; C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe [2005-09-21 65536]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17904]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-10-02 75064]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-09-24 1960744]
R2 WindowBlinds;Stardock WindowBlinds; C:\Program Files\Stardock\MyColors\VistaSrv.exe [2009-06-09 230704]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-26 651720]
-----------------EOF-----------------
log z RSIT:
Logfile of random's system information tool 1.08 (written by random/random)
Run by Michal at 2010-10-28 23:01:50
Microsoft® Windows Vista™ Home Basic
System drive C: has 24 GB (21%) free of 114 GB
Total RAM: 3002 MB (53% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:01:56, on 28.10.2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16982)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Multimedia Mouse Driver\v5\KMConfig.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Users\Michal\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Multimedia Mouse Driver\v5\KMProcess.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\ICQ7.2\ICQ.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\conime.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Michal\Downloads\RSIT (1).exe
C:\Program Files\trend micro\Michal.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:25488
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = plimus.com,www.plimus.com,regnow.com,www.regnow.com,
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [PrzyspieszKomputer] "C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe"
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [KMConfig] "C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe" KMConfig.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: 20Dollars2Surf.lnk = C:\Program Files\20Dollars2Surf\20dollars2surf.exe
O4 - Global Startup: Pinnacle Streaming Server.lnk = C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Michal\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe
O23 - Service: mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit (mi-raysat_3dsmax2010_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe
O23 - Service: RaySat_3dsmax8 Server (mi-raysat_3dsmax8) - Unknown owner - C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: Stardock WindowBlinds (WindowBlinds) - Stardock Corporation - C:\Program Files\Stardock\MyColors\VistaSrv.exe
--
End of file - 8664 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Norton Security Scan for Michal.job
C:\Windows\tasks\PCConfidential.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2010-07-28 325408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-28 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2010-07-30 1006264]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-06-03 1144104]
"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2010-09-15 1094224]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
"PrzyspieszKomputer"=C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe [2010-08-15 890104]
"amd_dc_opt"=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-10 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-10 175128]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-10 153624]
"KMConfig"=C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe [2007-03-06 212992]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-07-30 1232896]
"Google Update"=C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-09-02 13351304]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-09-16 328568]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe [2009-03-28 3325952]
"ICQ"=C:\Program Files\ICQ6.5\ICQ.exe [2009-11-16 172792]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
20Dollars2Surf.lnk - C:\Program Files\20Dollars2Surf\20dollars2surf.exe
Pinnacle Streaming Server.lnk - C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-10 215040]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2010-10-28 23:00:15 ----D---- C:\rsit
2010-10-28 22:54:03 ----D---- C:\Program Files\CCleaner
2010-10-28 21:46:35 ----HD---- C:\Windows\PIF
2010-10-28 17:51:20 ----SHD---- C:\$RECYCLE.BIN
2010-10-28 17:51:16 ----D---- C:\Windows\temp
2010-10-28 17:51:14 ----A---- C:\ComboFix.txt
2010-10-28 11:52:08 ----D---- C:\Users\Michal\AppData\Roaming\Malwarebytes
2010-10-28 11:52:01 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2010-10-28 11:51:59 ----D---- C:\ProgramData\Malwarebytes
2010-10-28 11:51:59 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-10-28 11:51:59 ----A---- C:\Windows\system32\drivers\mbam.sys
2010-10-27 23:25:05 ----D---- C:\Windows\ERDNT
2010-10-27 23:25:03 ----D---- C:\cokoliv.com
2010-10-27 22:49:03 ----D---- C:\Program Files\trend micro
2010-10-27 20:44:46 ----D---- C:\Program Files\CamStudio
2010-10-27 11:47:50 ----D---- C:\Program Files\Winamp Detect
2010-10-27 11:47:20 ----D---- C:\Users\Michal\AppData\Roaming\Winamp
2010-10-27 11:47:20 ----D---- C:\Program Files\Winamp
2010-10-26 12:27:00 ----D---- C:\Program Files\ICQ6.5
2010-10-26 12:16:31 ----D---- C:\Program Files\ICQ7.2
2010-10-25 22:13:14 ----D---- C:\Program Files\CPUID
2010-10-25 22:13:14 ----A---- C:\Windows\system32\drivers\cpuz132_x32.sys
2010-10-24 22:56:00 ----D---- C:\Program Files\TED Notepad
2010-10-24 20:09:38 ----D---- C:\Users\Michal\AppData\Roaming\dvdcss
2010-10-24 20:07:03 ----D---- C:\Users\Michal\AppData\Roaming\vlc
2010-10-24 20:05:48 ----D---- C:\Program Files\VideoLAN
2010-10-24 18:39:25 ----A---- C:\Windows\system32\drivers\Ltn_stk7070P.sys
2010-10-24 18:37:34 ----D---- C:\Program Files\MSXML 4.0
2010-10-24 18:36:20 ----N---- C:\Windows\system32\MASE32.DLL
2010-10-24 18:36:20 ----N---- C:\Windows\system32\MASD32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MAMC32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MACD32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MA32.DLL
2010-10-24 18:35:52 ----N---- C:\Windows\system32\MSVCRTD.DLL
2010-10-24 18:35:52 ----N---- C:\Windows\system32\msvcr71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcr70d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcp71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcp70d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\mfc71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\HHActiveX.dll
2010-10-24 18:35:50 ----A---- C:\Windows\system32\DivXEncSettings.txt
2010-10-24 18:35:38 ----N---- C:\Windows\system32\MFC71u.dll
2010-10-24 18:35:38 ----N---- C:\Windows\system32\MFC71.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\msvcr80.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\msvcp80.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\atl71.dll
2010-10-24 18:35:36 ----D---- C:\Program Files\Pinnacle
2010-10-24 18:29:43 ----D---- C:\ProgramData\Pinnacle
2010-10-24 18:03:48 ----D---- C:\Program Files\Multimedia Mouse Driver
2010-10-24 06:46:47 ----D---- C:\ProgramData\Electronic Arts
2010-10-22 14:05:11 ----A---- C:\Windows\system32\vp6vfw.dll
2010-10-22 14:04:55 ----D---- C:\Program Files\Microsoft WSE
2010-10-22 13:45:04 ----D---- C:\Program Files\Electronic Arts
2010-10-18 16:51:19 ----D---- C:\Users\Michal\AppData\Roaming\OpenOffice.org
2010-10-18 16:47:06 ----D---- C:\Program Files\OpenOffice.org 3
2010-10-15 07:06:26 ----D---- C:\Users\Michal\AppData\Roaming\PSpad
2010-10-15 07:06:00 ----D---- C:\Program Files\PSPad editor
2010-10-15 06:40:52 ----D---- C:\Program Files\SoftMaker Viewer
2010-10-15 06:40:52 ----A---- C:\Windows\unTMV.exe
2010-10-15 06:39:24 ----D---- C:\Program Files\Doc Convertor
2010-10-12 17:38:47 ----D---- C:\Users\Michal\AppData\Roaming\TuxPaint
2010-10-12 17:38:34 ----D---- C:\Program Files\TuxPaint
2010-10-12 15:19:14 ----D---- C:\Program Files\Altar Games
2010-10-12 15:14:55 ----D---- C:\Program Files\ABCgames Cheater
2010-10-11 16:24:22 ----D---- C:\Program Files\Scorpions WinCheater
2010-10-11 16:19:57 ----D---- C:\Program Files\1C
2010-10-09 21:46:17 ----D---- C:\Program Files\Google
2010-10-07 09:08:04 ----D---- C:\Program Files\Share Rapid Uploader
2010-09-30 14:30:57 ----D---- C:\Program Files\ScreenVCR
2010-09-30 14:24:57 ----D---- C:\Fraps
======List of files/folders modified in the last 1 months======
2010-10-28 22:59:19 ----HD---- C:\Program Files\iSafe AllInOne Keylogger
2010-10-28 22:56:01 ----D---- C:\Windows\Debug
2010-10-28 22:56:01 ----D---- C:\Windows
2010-10-28 22:54:59 ----D---- C:\Users\Michal\AppData\Roaming\uTorrent
2010-10-28 22:54:03 ----D---- C:\Program Files
2010-10-28 22:51:42 ----SHD---- C:\System Volume Information
2010-10-28 22:47:07 ----D---- C:\Windows\Tasks
2010-10-28 22:32:18 ----D---- C:\Users\Michal\AppData\Roaming\ICQ
2010-10-28 22:13:34 ----D---- C:\Program Files\Common Files
2010-10-28 22:12:04 ----D---- C:\Users\Michal\AppData\Roaming\Skype
2010-10-28 22:11:53 ----D---- C:\Windows\System32
2010-10-28 21:06:58 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-10-28 17:49:30 ----A---- C:\Windows\system.ini
2010-10-28 17:49:22 ----D---- C:\Windows\system32\drivers\etc
2010-10-28 17:48:41 ----D---- C:\ProgramData
2010-10-28 17:45:43 ----D---- C:\Windows\system32\drivers
2010-10-28 17:45:43 ----D---- C:\Windows\AppPatch
2010-10-28 16:09:34 ----D---- C:\Users\Michal\AppData\Roaming\skypePM
2010-10-27 22:04:51 ----D---- C:\Games
2010-10-27 21:38:25 ----D---- C:\Program Files\ICQ6Toolbar
2010-10-27 17:32:19 ----D---- C:\Users\Michal\AppData\Roaming\FileZilla
2010-10-27 12:21:07 ----D---- C:\Users\Michal\AppData\Roaming\TeamViewer
2010-10-26 12:49:01 ----D---- C:\Users\Michal\AppData\Roaming\Adobe
2010-10-26 12:31:18 ----D---- C:\Program Files\Mozilla Firefox
2010-10-26 12:30:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-10-26 12:30:16 ----D---- C:\ProgramData\ICQ
2010-10-25 14:58:26 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-10-24 19:56:48 ----D---- C:\Windows\Prefetch
2010-10-24 19:56:46 ----D---- C:\Program Files\AVS4YOU
2010-10-24 19:48:25 ----D---- C:\Windows\inf
2010-10-24 19:46:55 ----D---- C:\Windows\system32\catroot
2010-10-24 18:38:56 ----SHD---- C:\Windows\Installer
2010-10-24 18:37:53 ----D---- C:\Windows\winsxs
2010-10-24 18:36:20 ----A---- C:\Windows\win.ini
2010-10-24 18:35:14 ----D---- C:\ProgramData\Adobe
2010-10-24 18:34:33 ----D---- C:\Program Files\Common Files\Adobe
2010-10-24 18:34:14 ----D---- C:\Program Files\Adobe
2010-10-24 13:15:33 ----D---- C:\.mpr_file_store_32
2010-10-22 14:05:10 ----SD---- C:\Users\Michal\AppData\Roaming\Microsoft
2010-10-22 14:05:10 ----RSD---- C:\Windows\assembly
2010-10-22 12:54:10 ----D---- C:\Windows\system32\WDI
2010-10-22 05:59:13 ----D---- C:\Windows\system32\catroot2
2010-10-19 22:51:33 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-18 17:32:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-18 16:47:44 ----RSD---- C:\Windows\Fonts
2010-10-15 09:47:55 ----D---- C:\.file_store_32
2010-10-14 14:55:32 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2010-10-13 23:56:27 ----A---- C:\Windows\system32\mrt.exe
2010-10-13 16:41:51 ----D---- C:\Program Files\Microsoft Security Essentials
2010-10-09 21:46:28 ----D---- C:\Windows\system32\Tasks
2010-10-02 10:37:03 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-10-02 10:37:01 ----A---- C:\Windows\system32\pbsvc.exe
2010-09-29 16:18:19 ----D---- C:\Users\Michal\AppData\Roaming\Autodesk
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 151216]
R2 cpuz132;cpuz132; \??\C:\Windows\system32\drivers\cpuz132_x32.sys [2009-03-27 12672]
R3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-01-09 1093120]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2010-07-30 19456]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2006-11-02 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2010-07-30 29184]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-10 4744704]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2006-11-02 49664]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-12-23 138240]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2006-11-02 132352]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2010-07-30 220160]
S3 catchme;catchme; \??\C:\Users\Michal\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\ialmnt5.sys [2006-11-02 1302492]
S3 Ltn_stk7070P;PCTV based TV tuner device; C:\Windows\system32\DRIVERS\Ltn_stk7070P.sys [2007-06-14 466048]
S3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 Ph3xIB32;Philips 713x Inbox PCI TV Card; C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2007-04-03 1131136]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2010-08-13 72704]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2006-11-02 22016]
R2 KMWDSERVICE;Keyboard And Mouse Communication Service; C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe [2007-05-08 2179072]
R2 mi-raysat_3dsmax2010_32;mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit; C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe [2009-03-12 86016]
R2 mi-raysat_3dsmax8;RaySat_3dsmax8 Server; C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe [2005-09-21 65536]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17904]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-10-02 75064]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-09-24 1960744]
R2 WindowBlinds;Stardock WindowBlinds; C:\Program Files\Stardock\MyColors\VistaSrv.exe [2009-06-09 230704]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-26 651720]
-----------------EOF-----------------
Naposledy upravil(a) mickeykr dne 28 Říj 2010 22:08, celkem upraveno 1 x.
Jsem člověk, který našel svůj domov forum.viry.cz
Nic nedělejte bez rádce, můžete dojít ke kompletní ztrátě dat !
Nejsem rádce, ale chtěl bych se jím stát, ale i tak vám rád pomůžu
Microsoft Essential ke stažení !
RSIT ke stažení !
Chcete pomoct se stránkami nebo grafikou ? Nebojte se mi napsat, rád vám pomůžu
Nic nedělejte bez rádce, můžete dojít ke kompletní ztrátě dat !
Nejsem rádce, ale chtěl bych se jím stát, ale i tak vám rád pomůžu
Microsoft Essential ke stažení !
RSIT ke stažení !
Chcete pomoct se stránkami nebo grafikou ? Nebojte se mi napsat, rád vám pomůžu
Re: Smart store help
Prosím odstraňte log z code, bolí z toho oči, děkuji 
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Smart store help
Jsem člověk, který našel svůj domov forum.viry.cz
Nic nedělejte bez rádce, můžete dojít ke kompletní ztrátě dat !
Nejsem rádce, ale chtěl bych se jím stát, ale i tak vám rád pomůžu
Microsoft Essential ke stažení !
RSIT ke stažení !
Chcete pomoct se stránkami nebo grafikou ? Nebojte se mi napsat, rád vám pomůžu
Nic nedělejte bez rádce, můžete dojít ke kompletní ztrátě dat !
Nejsem rádce, ale chtěl bych se jím stát, ale i tak vám rád pomůžu
Microsoft Essential ke stažení !
RSIT ke stažení !
Chcete pomoct se stránkami nebo grafikou ? Nebojte se mi napsat, rád vám pomůžu
Re: Smart store help
C:\Program Files\iSafe AllInOne Keylogger ( je skrytá)
C:\cokoliv.com
Pokud nejsou problémy, je to vše
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Smart store help
Smazáno....
Log :
Logfile of random's system information tool 1.08 (written by random/random)
Run by Michal at 2010-10-28 23:25:40
Microsoft® Windows Vista™ Home Basic
System drive C: has 24 GB (21%) free of 114 GB
Total RAM: 3002 MB (56% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:25:51, on 28.10.2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16982)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Multimedia Mouse Driver\v5\KMConfig.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Users\Michal\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Multimedia Mouse Driver\v5\KMProcess.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\ICQ7.2\ICQ.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\conime.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\Downloads\RSIT (2).exe
C:\Program Files\trend micro\Michal.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:25488
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = plimus.com,www.plimus.com,regnow.com,www.regnow.com,
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [PrzyspieszKomputer] "C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe"
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [KMConfig] "C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe" KMConfig.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: 20Dollars2Surf.lnk = C:\Program Files\20Dollars2Surf\20dollars2surf.exe
O4 - Global Startup: Pinnacle Streaming Server.lnk = C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Michal\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe
O23 - Service: mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit (mi-raysat_3dsmax2010_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe
O23 - Service: RaySat_3dsmax8 Server (mi-raysat_3dsmax8) - Unknown owner - C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: Stardock WindowBlinds (WindowBlinds) - Stardock Corporation - C:\Program Files\Stardock\MyColors\VistaSrv.exe
--
End of file - 8488 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Norton Security Scan for Michal.job
C:\Windows\tasks\PCConfidential.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2010-07-28 325408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-28 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2010-07-30 1006264]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-06-03 1144104]
"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2010-09-15 1094224]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
"PrzyspieszKomputer"=C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe [2010-08-15 890104]
"amd_dc_opt"=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-10 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-10 175128]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-10 153624]
"KMConfig"=C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe [2007-03-06 212992]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-07-30 1232896]
"Google Update"=C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-09-02 13351304]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-09-16 328568]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe [2009-03-28 3325952]
"ICQ"=C:\Program Files\ICQ6.5\ICQ.exe [2009-11-16 172792]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
20Dollars2Surf.lnk - C:\Program Files\20Dollars2Surf\20dollars2surf.exe
Pinnacle Streaming Server.lnk - C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-10 215040]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2010-10-28 23:00:15 ----D---- C:\rsit
2010-10-28 22:54:03 ----D---- C:\Program Files\CCleaner
2010-10-28 21:46:35 ----HD---- C:\Windows\PIF
2010-10-28 17:51:20 ----SHD---- C:\$RECYCLE.BIN
2010-10-28 17:51:16 ----D---- C:\Windows\temp
2010-10-28 17:51:14 ----A---- C:\ComboFix.txt
2010-10-28 11:52:08 ----D---- C:\Users\Michal\AppData\Roaming\Malwarebytes
2010-10-28 11:52:01 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2010-10-28 11:51:59 ----D---- C:\ProgramData\Malwarebytes
2010-10-28 11:51:59 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-10-28 11:51:59 ----A---- C:\Windows\system32\drivers\mbam.sys
2010-10-27 23:25:05 ----D---- C:\Windows\ERDNT
2010-10-27 22:49:03 ----D---- C:\Program Files\trend micro
2010-10-27 20:44:46 ----D---- C:\Program Files\CamStudio
2010-10-27 11:47:50 ----D---- C:\Program Files\Winamp Detect
2010-10-27 11:47:20 ----D---- C:\Users\Michal\AppData\Roaming\Winamp
2010-10-27 11:47:20 ----D---- C:\Program Files\Winamp
2010-10-26 12:27:00 ----D---- C:\Program Files\ICQ6.5
2010-10-26 12:16:31 ----D---- C:\Program Files\ICQ7.2
2010-10-25 22:13:14 ----D---- C:\Program Files\CPUID
2010-10-25 22:13:14 ----A---- C:\Windows\system32\drivers\cpuz132_x32.sys
2010-10-24 22:56:00 ----D---- C:\Program Files\TED Notepad
2010-10-24 20:09:38 ----D---- C:\Users\Michal\AppData\Roaming\dvdcss
2010-10-24 20:07:03 ----D---- C:\Users\Michal\AppData\Roaming\vlc
2010-10-24 20:05:48 ----D---- C:\Program Files\VideoLAN
2010-10-24 18:39:25 ----A---- C:\Windows\system32\drivers\Ltn_stk7070P.sys
2010-10-24 18:37:34 ----D---- C:\Program Files\MSXML 4.0
2010-10-24 18:36:20 ----N---- C:\Windows\system32\MASE32.DLL
2010-10-24 18:36:20 ----N---- C:\Windows\system32\MASD32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MAMC32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MACD32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MA32.DLL
2010-10-24 18:35:52 ----N---- C:\Windows\system32\MSVCRTD.DLL
2010-10-24 18:35:52 ----N---- C:\Windows\system32\msvcr71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcr70d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcp71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcp70d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\mfc71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\HHActiveX.dll
2010-10-24 18:35:50 ----A---- C:\Windows\system32\DivXEncSettings.txt
2010-10-24 18:35:38 ----N---- C:\Windows\system32\MFC71u.dll
2010-10-24 18:35:38 ----N---- C:\Windows\system32\MFC71.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\msvcr80.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\msvcp80.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\atl71.dll
2010-10-24 18:35:36 ----D---- C:\Program Files\Pinnacle
2010-10-24 18:29:43 ----D---- C:\ProgramData\Pinnacle
2010-10-24 18:03:48 ----D---- C:\Program Files\Multimedia Mouse Driver
2010-10-24 06:46:47 ----D---- C:\ProgramData\Electronic Arts
2010-10-22 14:05:11 ----A---- C:\Windows\system32\vp6vfw.dll
2010-10-22 14:04:55 ----D---- C:\Program Files\Microsoft WSE
2010-10-22 13:45:04 ----D---- C:\Program Files\Electronic Arts
2010-10-18 16:51:19 ----D---- C:\Users\Michal\AppData\Roaming\OpenOffice.org
2010-10-18 16:47:06 ----D---- C:\Program Files\OpenOffice.org 3
2010-10-15 07:06:26 ----D---- C:\Users\Michal\AppData\Roaming\PSpad
2010-10-15 07:06:00 ----D---- C:\Program Files\PSPad editor
2010-10-15 06:40:52 ----D---- C:\Program Files\SoftMaker Viewer
2010-10-15 06:40:52 ----A---- C:\Windows\unTMV.exe
2010-10-15 06:39:24 ----D---- C:\Program Files\Doc Convertor
2010-10-12 17:38:47 ----D---- C:\Users\Michal\AppData\Roaming\TuxPaint
2010-10-12 17:38:34 ----D---- C:\Program Files\TuxPaint
2010-10-12 15:19:14 ----D---- C:\Program Files\Altar Games
2010-10-12 15:14:55 ----D---- C:\Program Files\ABCgames Cheater
2010-10-11 16:24:22 ----D---- C:\Program Files\Scorpions WinCheater
2010-10-11 16:19:57 ----D---- C:\Program Files\1C
2010-10-09 21:46:17 ----D---- C:\Program Files\Google
2010-10-07 09:08:04 ----D---- C:\Program Files\Share Rapid Uploader
2010-09-30 14:30:57 ----D---- C:\Program Files\ScreenVCR
2010-09-30 14:24:57 ----D---- C:\Fraps
======List of files/folders modified in the last 1 months======
2010-10-28 23:25:02 ----D---- C:\Users\Michal\AppData\Roaming\uTorrent
2010-10-28 23:24:35 ----HD---- C:\Program Files\iSafe AllInOne Keylogger
2010-10-28 22:56:01 ----D---- C:\Windows\Debug
2010-10-28 22:56:01 ----D---- C:\Windows
2010-10-28 22:54:03 ----D---- C:\Program Files
2010-10-28 22:51:42 ----SHD---- C:\System Volume Information
2010-10-28 22:47:07 ----D---- C:\Windows\Tasks
2010-10-28 22:32:18 ----D---- C:\Users\Michal\AppData\Roaming\ICQ
2010-10-28 22:13:34 ----D---- C:\Program Files\Common Files
2010-10-28 22:12:04 ----D---- C:\Users\Michal\AppData\Roaming\Skype
2010-10-28 22:11:53 ----D---- C:\Windows\System32
2010-10-28 21:06:58 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-10-28 17:49:30 ----A---- C:\Windows\system.ini
2010-10-28 17:49:22 ----D---- C:\Windows\system32\drivers\etc
2010-10-28 17:48:41 ----D---- C:\ProgramData
2010-10-28 17:45:43 ----D---- C:\Windows\system32\drivers
2010-10-28 17:45:43 ----D---- C:\Windows\AppPatch
2010-10-28 16:09:34 ----D---- C:\Users\Michal\AppData\Roaming\skypePM
2010-10-27 22:04:51 ----D---- C:\Games
2010-10-27 21:38:25 ----D---- C:\Program Files\ICQ6Toolbar
2010-10-27 17:32:19 ----D---- C:\Users\Michal\AppData\Roaming\FileZilla
2010-10-27 12:21:07 ----D---- C:\Users\Michal\AppData\Roaming\TeamViewer
2010-10-26 12:49:01 ----D---- C:\Users\Michal\AppData\Roaming\Adobe
2010-10-26 12:31:18 ----D---- C:\Program Files\Mozilla Firefox
2010-10-26 12:30:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-10-26 12:30:16 ----D---- C:\ProgramData\ICQ
2010-10-25 14:58:26 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-10-24 19:56:48 ----D---- C:\Windows\Prefetch
2010-10-24 19:56:46 ----D---- C:\Program Files\AVS4YOU
2010-10-24 19:48:25 ----D---- C:\Windows\inf
2010-10-24 19:46:55 ----D---- C:\Windows\system32\catroot
2010-10-24 18:38:56 ----SHD---- C:\Windows\Installer
2010-10-24 18:37:53 ----D---- C:\Windows\winsxs
2010-10-24 18:36:20 ----A---- C:\Windows\win.ini
2010-10-24 18:35:14 ----D---- C:\ProgramData\Adobe
2010-10-24 18:34:33 ----D---- C:\Program Files\Common Files\Adobe
2010-10-24 18:34:14 ----D---- C:\Program Files\Adobe
2010-10-24 13:15:33 ----D---- C:\.mpr_file_store_32
2010-10-22 14:05:10 ----SD---- C:\Users\Michal\AppData\Roaming\Microsoft
2010-10-22 14:05:10 ----RSD---- C:\Windows\assembly
2010-10-22 12:54:10 ----D---- C:\Windows\system32\WDI
2010-10-22 05:59:13 ----D---- C:\Windows\system32\catroot2
2010-10-19 22:51:33 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-18 17:32:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-18 16:47:44 ----RSD---- C:\Windows\Fonts
2010-10-15 09:47:55 ----D---- C:\.file_store_32
2010-10-14 14:55:32 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2010-10-13 23:56:27 ----A---- C:\Windows\system32\mrt.exe
2010-10-13 16:41:51 ----D---- C:\Program Files\Microsoft Security Essentials
2010-10-09 21:46:28 ----D---- C:\Windows\system32\Tasks
2010-10-02 10:37:03 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-10-02 10:37:01 ----A---- C:\Windows\system32\pbsvc.exe
2010-09-29 16:18:19 ----D---- C:\Users\Michal\AppData\Roaming\Autodesk
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 151216]
R2 cpuz132;cpuz132; \??\C:\Windows\system32\drivers\cpuz132_x32.sys [2009-03-27 12672]
R3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-01-09 1093120]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2010-07-30 19456]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2006-11-02 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2010-07-30 29184]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-10 4744704]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2006-11-02 49664]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-12-23 138240]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2006-11-02 132352]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2010-07-30 220160]
S3 catchme;catchme; \??\C:\Users\Michal\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\ialmnt5.sys [2006-11-02 1302492]
S3 Ltn_stk7070P;PCTV based TV tuner device; C:\Windows\system32\DRIVERS\Ltn_stk7070P.sys [2007-06-14 466048]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 Ph3xIB32;Philips 713x Inbox PCI TV Card; C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2007-04-03 1131136]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2010-08-13 72704]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2006-11-02 22016]
R2 KMWDSERVICE;Keyboard And Mouse Communication Service; C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe [2007-05-08 2179072]
R2 mi-raysat_3dsmax2010_32;mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit; C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe [2009-03-12 86016]
R2 mi-raysat_3dsmax8;RaySat_3dsmax8 Server; C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe [2005-09-21 65536]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17904]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-10-02 75064]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-09-24 1960744]
R2 WindowBlinds;Stardock WindowBlinds; C:\Program Files\Stardock\MyColors\VistaSrv.exe [2009-06-09 230704]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-26 651720]
-----------------EOF-----------------
Log :
Logfile of random's system information tool 1.08 (written by random/random)
Run by Michal at 2010-10-28 23:25:40
Microsoft® Windows Vista™ Home Basic
System drive C: has 24 GB (21%) free of 114 GB
Total RAM: 3002 MB (56% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:25:51, on 28.10.2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16982)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Multimedia Mouse Driver\v5\KMConfig.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Users\Michal\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Multimedia Mouse Driver\v5\KMProcess.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\ICQ7.2\ICQ.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\conime.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\Downloads\RSIT (2).exe
C:\Program Files\trend micro\Michal.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:25488
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = plimus.com,www.plimus.com,regnow.com,www.regnow.com,
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [PrzyspieszKomputer] "C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe"
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [KMConfig] "C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe" KMConfig.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: 20Dollars2Surf.lnk = C:\Program Files\20Dollars2Surf\20dollars2surf.exe
O4 - Global Startup: Pinnacle Streaming Server.lnk = C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Michal\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe
O23 - Service: mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit (mi-raysat_3dsmax2010_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe
O23 - Service: RaySat_3dsmax8 Server (mi-raysat_3dsmax8) - Unknown owner - C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: Stardock WindowBlinds (WindowBlinds) - Stardock Corporation - C:\Program Files\Stardock\MyColors\VistaSrv.exe
--
End of file - 8488 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Norton Security Scan for Michal.job
C:\Windows\tasks\PCConfidential.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2010-07-28 325408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-28 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2010-07-30 1006264]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-06-03 1144104]
"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2010-09-15 1094224]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
"PrzyspieszKomputer"=C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe [2010-08-15 890104]
"amd_dc_opt"=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-10 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-10 175128]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-10 153624]
"KMConfig"=C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe [2007-03-06 212992]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-07-30 1232896]
"Google Update"=C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-09-02 13351304]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-09-16 328568]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe [2009-03-28 3325952]
"ICQ"=C:\Program Files\ICQ6.5\ICQ.exe [2009-11-16 172792]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
20Dollars2Surf.lnk - C:\Program Files\20Dollars2Surf\20dollars2surf.exe
Pinnacle Streaming Server.lnk - C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-10 215040]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2010-10-28 23:00:15 ----D---- C:\rsit
2010-10-28 22:54:03 ----D---- C:\Program Files\CCleaner
2010-10-28 21:46:35 ----HD---- C:\Windows\PIF
2010-10-28 17:51:20 ----SHD---- C:\$RECYCLE.BIN
2010-10-28 17:51:16 ----D---- C:\Windows\temp
2010-10-28 17:51:14 ----A---- C:\ComboFix.txt
2010-10-28 11:52:08 ----D---- C:\Users\Michal\AppData\Roaming\Malwarebytes
2010-10-28 11:52:01 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2010-10-28 11:51:59 ----D---- C:\ProgramData\Malwarebytes
2010-10-28 11:51:59 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-10-28 11:51:59 ----A---- C:\Windows\system32\drivers\mbam.sys
2010-10-27 23:25:05 ----D---- C:\Windows\ERDNT
2010-10-27 22:49:03 ----D---- C:\Program Files\trend micro
2010-10-27 20:44:46 ----D---- C:\Program Files\CamStudio
2010-10-27 11:47:50 ----D---- C:\Program Files\Winamp Detect
2010-10-27 11:47:20 ----D---- C:\Users\Michal\AppData\Roaming\Winamp
2010-10-27 11:47:20 ----D---- C:\Program Files\Winamp
2010-10-26 12:27:00 ----D---- C:\Program Files\ICQ6.5
2010-10-26 12:16:31 ----D---- C:\Program Files\ICQ7.2
2010-10-25 22:13:14 ----D---- C:\Program Files\CPUID
2010-10-25 22:13:14 ----A---- C:\Windows\system32\drivers\cpuz132_x32.sys
2010-10-24 22:56:00 ----D---- C:\Program Files\TED Notepad
2010-10-24 20:09:38 ----D---- C:\Users\Michal\AppData\Roaming\dvdcss
2010-10-24 20:07:03 ----D---- C:\Users\Michal\AppData\Roaming\vlc
2010-10-24 20:05:48 ----D---- C:\Program Files\VideoLAN
2010-10-24 18:39:25 ----A---- C:\Windows\system32\drivers\Ltn_stk7070P.sys
2010-10-24 18:37:34 ----D---- C:\Program Files\MSXML 4.0
2010-10-24 18:36:20 ----N---- C:\Windows\system32\MASE32.DLL
2010-10-24 18:36:20 ----N---- C:\Windows\system32\MASD32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MAMC32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MACD32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MA32.DLL
2010-10-24 18:35:52 ----N---- C:\Windows\system32\MSVCRTD.DLL
2010-10-24 18:35:52 ----N---- C:\Windows\system32\msvcr71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcr70d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcp71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcp70d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\mfc71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\HHActiveX.dll
2010-10-24 18:35:50 ----A---- C:\Windows\system32\DivXEncSettings.txt
2010-10-24 18:35:38 ----N---- C:\Windows\system32\MFC71u.dll
2010-10-24 18:35:38 ----N---- C:\Windows\system32\MFC71.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\msvcr80.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\msvcp80.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\atl71.dll
2010-10-24 18:35:36 ----D---- C:\Program Files\Pinnacle
2010-10-24 18:29:43 ----D---- C:\ProgramData\Pinnacle
2010-10-24 18:03:48 ----D---- C:\Program Files\Multimedia Mouse Driver
2010-10-24 06:46:47 ----D---- C:\ProgramData\Electronic Arts
2010-10-22 14:05:11 ----A---- C:\Windows\system32\vp6vfw.dll
2010-10-22 14:04:55 ----D---- C:\Program Files\Microsoft WSE
2010-10-22 13:45:04 ----D---- C:\Program Files\Electronic Arts
2010-10-18 16:51:19 ----D---- C:\Users\Michal\AppData\Roaming\OpenOffice.org
2010-10-18 16:47:06 ----D---- C:\Program Files\OpenOffice.org 3
2010-10-15 07:06:26 ----D---- C:\Users\Michal\AppData\Roaming\PSpad
2010-10-15 07:06:00 ----D---- C:\Program Files\PSPad editor
2010-10-15 06:40:52 ----D---- C:\Program Files\SoftMaker Viewer
2010-10-15 06:40:52 ----A---- C:\Windows\unTMV.exe
2010-10-15 06:39:24 ----D---- C:\Program Files\Doc Convertor
2010-10-12 17:38:47 ----D---- C:\Users\Michal\AppData\Roaming\TuxPaint
2010-10-12 17:38:34 ----D---- C:\Program Files\TuxPaint
2010-10-12 15:19:14 ----D---- C:\Program Files\Altar Games
2010-10-12 15:14:55 ----D---- C:\Program Files\ABCgames Cheater
2010-10-11 16:24:22 ----D---- C:\Program Files\Scorpions WinCheater
2010-10-11 16:19:57 ----D---- C:\Program Files\1C
2010-10-09 21:46:17 ----D---- C:\Program Files\Google
2010-10-07 09:08:04 ----D---- C:\Program Files\Share Rapid Uploader
2010-09-30 14:30:57 ----D---- C:\Program Files\ScreenVCR
2010-09-30 14:24:57 ----D---- C:\Fraps
======List of files/folders modified in the last 1 months======
2010-10-28 23:25:02 ----D---- C:\Users\Michal\AppData\Roaming\uTorrent
2010-10-28 23:24:35 ----HD---- C:\Program Files\iSafe AllInOne Keylogger
2010-10-28 22:56:01 ----D---- C:\Windows\Debug
2010-10-28 22:56:01 ----D---- C:\Windows
2010-10-28 22:54:03 ----D---- C:\Program Files
2010-10-28 22:51:42 ----SHD---- C:\System Volume Information
2010-10-28 22:47:07 ----D---- C:\Windows\Tasks
2010-10-28 22:32:18 ----D---- C:\Users\Michal\AppData\Roaming\ICQ
2010-10-28 22:13:34 ----D---- C:\Program Files\Common Files
2010-10-28 22:12:04 ----D---- C:\Users\Michal\AppData\Roaming\Skype
2010-10-28 22:11:53 ----D---- C:\Windows\System32
2010-10-28 21:06:58 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-10-28 17:49:30 ----A---- C:\Windows\system.ini
2010-10-28 17:49:22 ----D---- C:\Windows\system32\drivers\etc
2010-10-28 17:48:41 ----D---- C:\ProgramData
2010-10-28 17:45:43 ----D---- C:\Windows\system32\drivers
2010-10-28 17:45:43 ----D---- C:\Windows\AppPatch
2010-10-28 16:09:34 ----D---- C:\Users\Michal\AppData\Roaming\skypePM
2010-10-27 22:04:51 ----D---- C:\Games
2010-10-27 21:38:25 ----D---- C:\Program Files\ICQ6Toolbar
2010-10-27 17:32:19 ----D---- C:\Users\Michal\AppData\Roaming\FileZilla
2010-10-27 12:21:07 ----D---- C:\Users\Michal\AppData\Roaming\TeamViewer
2010-10-26 12:49:01 ----D---- C:\Users\Michal\AppData\Roaming\Adobe
2010-10-26 12:31:18 ----D---- C:\Program Files\Mozilla Firefox
2010-10-26 12:30:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-10-26 12:30:16 ----D---- C:\ProgramData\ICQ
2010-10-25 14:58:26 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-10-24 19:56:48 ----D---- C:\Windows\Prefetch
2010-10-24 19:56:46 ----D---- C:\Program Files\AVS4YOU
2010-10-24 19:48:25 ----D---- C:\Windows\inf
2010-10-24 19:46:55 ----D---- C:\Windows\system32\catroot
2010-10-24 18:38:56 ----SHD---- C:\Windows\Installer
2010-10-24 18:37:53 ----D---- C:\Windows\winsxs
2010-10-24 18:36:20 ----A---- C:\Windows\win.ini
2010-10-24 18:35:14 ----D---- C:\ProgramData\Adobe
2010-10-24 18:34:33 ----D---- C:\Program Files\Common Files\Adobe
2010-10-24 18:34:14 ----D---- C:\Program Files\Adobe
2010-10-24 13:15:33 ----D---- C:\.mpr_file_store_32
2010-10-22 14:05:10 ----SD---- C:\Users\Michal\AppData\Roaming\Microsoft
2010-10-22 14:05:10 ----RSD---- C:\Windows\assembly
2010-10-22 12:54:10 ----D---- C:\Windows\system32\WDI
2010-10-22 05:59:13 ----D---- C:\Windows\system32\catroot2
2010-10-19 22:51:33 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-18 17:32:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-18 16:47:44 ----RSD---- C:\Windows\Fonts
2010-10-15 09:47:55 ----D---- C:\.file_store_32
2010-10-14 14:55:32 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2010-10-13 23:56:27 ----A---- C:\Windows\system32\mrt.exe
2010-10-13 16:41:51 ----D---- C:\Program Files\Microsoft Security Essentials
2010-10-09 21:46:28 ----D---- C:\Windows\system32\Tasks
2010-10-02 10:37:03 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-10-02 10:37:01 ----A---- C:\Windows\system32\pbsvc.exe
2010-09-29 16:18:19 ----D---- C:\Users\Michal\AppData\Roaming\Autodesk
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 151216]
R2 cpuz132;cpuz132; \??\C:\Windows\system32\drivers\cpuz132_x32.sys [2009-03-27 12672]
R3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-01-09 1093120]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2010-07-30 19456]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2006-11-02 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2010-07-30 29184]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-10 4744704]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2006-11-02 49664]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-12-23 138240]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2006-11-02 132352]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2010-07-30 220160]
S3 catchme;catchme; \??\C:\Users\Michal\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\ialmnt5.sys [2006-11-02 1302492]
S3 Ltn_stk7070P;PCTV based TV tuner device; C:\Windows\system32\DRIVERS\Ltn_stk7070P.sys [2007-06-14 466048]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 Ph3xIB32;Philips 713x Inbox PCI TV Card; C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2007-04-03 1131136]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2010-08-13 72704]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2006-11-02 22016]
R2 KMWDSERVICE;Keyboard And Mouse Communication Service; C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe [2007-05-08 2179072]
R2 mi-raysat_3dsmax2010_32;mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit; C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe [2009-03-12 86016]
R2 mi-raysat_3dsmax8;RaySat_3dsmax8 Server; C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe [2005-09-21 65536]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17904]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-10-02 75064]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-09-24 1960744]
R2 WindowBlinds;Stardock WindowBlinds; C:\Program Files\Stardock\MyColors\VistaSrv.exe [2009-06-09 230704]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-26 651720]
-----------------EOF-----------------
Jsem člověk, který našel svůj domov forum.viry.cz
Nic nedělejte bez rádce, můžete dojít ke kompletní ztrátě dat !
Nejsem rádce, ale chtěl bych se jím stát, ale i tak vám rád pomůžu
Microsoft Essential ke stažení !
RSIT ke stažení !
Chcete pomoct se stránkami nebo grafikou ? Nebojte se mi napsat, rád vám pomůžu
Nic nedělejte bez rádce, můžete dojít ke kompletní ztrátě dat !
Nejsem rádce, ale chtěl bych se jím stát, ale i tak vám rád pomůžu
Microsoft Essential ke stažení !
RSIT ke stažení !
Chcete pomoct se stránkami nebo grafikou ? Nebojte se mi napsat, rád vám pomůžu
Re: Smart store help
Pokud nejsou problémy, je to vše 
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Smart store help
Opravdu moc děkuji, a omlouvám se za námahu co jsem způsobil. Moc děkuji

Jsem člověk, který našel svůj domov forum.viry.cz
Nic nedělejte bez rádce, můžete dojít ke kompletní ztrátě dat !
Nejsem rádce, ale chtěl bych se jím stát, ale i tak vám rád pomůžu
Microsoft Essential ke stažení !
RSIT ke stažení !
Chcete pomoct se stránkami nebo grafikou ? Nebojte se mi napsat, rád vám pomůžu
Nic nedělejte bez rádce, můžete dojít ke kompletní ztrátě dat !
Nejsem rádce, ale chtěl bych se jím stát, ale i tak vám rád pomůžu
Microsoft Essential ke stažení !
RSIT ke stažení !
Chcete pomoct se stránkami nebo grafikou ? Nebojte se mi napsat, rád vám pomůžu
Re: Smart store help
Není zač, hezký večer 
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.


Přispějete na provoz fóra?