Rozesílání spamů

[earl]

Smazte co MBAM nasel.

otestujte na VIRSCANu a JOTTISCANu

C:\WINDOWS\System32\haspdos.sys

(navod: po nacteni stranky kliknete na tlacitko Prochazet , najdete cestu k vyse zminenemu souboru a kliknete na tlacitko Odeslat soubor; dejte skenerum nejakych deset minut; vysledek sem vlozte)

Pokud skener napíše, že soubor již byl testován, dejte otestovat znovu.

[brkys]

Výsledek
Výsledek : Žádný program nenalezl malware!
Čas : 2010/10/27 09:26:00 (CEST)
AV program Verze jádra Databáze Datum databáze Výsledek testu Čas
a-squared 5.0.0.20 20101027041428 2010-10-27 - 6.349
AhnLab V3 2010.10.19.02 2010.10.19 2010-10-19 - 1.975
AntiVir 8.2.4.84 7.10.13.46 2010-10-26 - 6.842
Antiy 2.0.18 20101026.5491279 2010-10-26 - 0.021
Arcavir 2010 201010271424 2010-10-27 - 1.729
Authentium 5.1.1 201010270229 2010-10-27 - 4.768
AVAST! 4.7.4 101026-1 2010-10-26 - 0.350
AVG 8.5.850 271.1.1/3221 2010-10-27 - 5.711
BitDefender 7.90123.6400893 7.34441 2010-10-27 - 24.744
ClamAV 0.96.3 12181 2010-10-27 - 0.003
Comodo 4.0 6524 2010-10-27 - 27.534
CP Secure 1.3.0.5 2010.10.27 2010-10-27 - 0.004
Dr.Web 5.0.2.3300 2010.10.27 2010-10-27 - 12.838
F-Prot 4.4.4.56 20101026 2010-10-26 - 1.697
F-Secure 7.02.73807 2010.10.27.02 2010-10-27 - 0.065
Fortinet 4.2.249 12.498 2010-10-26 - 27.735
GData 21.1020/21.432 20101027 2010-10-27 - 26.608
Ikarus T3.1.32.15.0 2010.10.27.77025 2010-10-27 - 10.422
JiangMin 13.0.900 2010.10.27 2010-10-27 - 1.719
Kaspersky 5.5.10 2010.10.26 2010-10-26 - 0.045
KingSoft 2009.2.5.15 2010.10.27.9 2010-10-27 - 37.343
McAfee 5400.1158 6148 2010-10-26 - 26.184
Microsoft 1.6301 2010.10.26 2010-10-26 - 40.102
Norman 6.06.10 6.06.00 2010-10-26 - 10.026
nProtect 20101025.01 9217735 2010-10-25 - 23.767
Panda 9.05.01 2010.10.24 2010-10-24 - 40.086
Quick Heal 11.00 2010.10.22 2010-10-22 - 40.086
Rising 20.0 22.71.00.04 2010-10-25 - 32.997
Sophos 3.12.1 4.58 2010-10-27 - 7.630
Sunbelt 3.9.2456.2 7147 2010-10-26 - 40.187
Symantec 1.3.0.24 20101026.002 2010-10-26 - 1.057
The Hacker 6.7.0.1 v00069 2010-10-26 - 0.428
Trend Micro 9.120-1004 7.572.06 2010-10-26 - 0.023
VBA32 3.12.14.1 20101026.1012 2010-10-26 - 4.954
ViRobot 20101026 2010.10.26 2010-10-26 - 0.612
VirusBuster 4.5.11.10 10.130.3/2052338 2010-10-26 - 4.448

[brkys]

Výsledky
2010-10-25 Žádný nález 2010-10-27 Žádný nález
2010-10-26 Žádný nález Žádný výsledek
2010-10-26 Žádný nález Žádný výsledek
2010-10-26 Žádný nález 2010-10-27 Žádný nález
2010-10-27 Žádný nález 2010-10-26 Žádný nález
2010-10-27 Žádný nález 2010-10-27 Žádný nález
Žádný výsledek Žádný výsledek
Žádný výsledek 2010-10-26 Žádný nález
2010-10-26 Žádný nález Žádný výsledek
2010-10-27 Žádný nález

[earl]

Jak se chova pc nyni?

[brkys]

tak je to určitě lepší, i když ještě pořád asi pomalejší... Jestli rozesílám spam se ale asi dozvim až mě zas odpojí?
každopádně díky za pomoc!

[earl]

Jestli rozesílám spam se ale asi dozvim až mě zas odpojí?

Samozrejme,tedy pokud nemate detailni prehled o tom,co vam v pc bezi za procesy a co je kde ulozeno za data.

1) Odinstalujte nepotrebne programy a polozky po spusteni - Jdete do slozky C:\Documents and Settings\jmeno_uzivatele\Nabidka Start\Programy\Po spusteni a

zde odstrante nepotrebne programy.

2) Pro zrychleni startu Windows stahnete a spustte program StartUpLite

Program vypise seznam zbytecnych programu spoustejicich se pri startu Windows .

K vypnuti spousteni techto programu zaskrtnete u prislusnych radku Disable a kliknete na Continue.

Stahnete OTC

spustte a klepnete na CleanUp.



Vycistete pc Ccleanerem.

Vzdy nejprve Analyzovat a pak Spustit Cleaner.2x po sobe.

Windows-odskrtnout historii a historii automatickeho vyplnovani formularu - prisel byste o historii navstivenych stranek a o ulozena hesla ve formularich

(je to sice z pohledu zabezpeceni spatne,ale aspon pak uzivatel nenadava,kam ze mu to zmizelo )

Aplikace-u prohlizecu internetu odskrtnout Historii internetu.

Registry-nechat vse zaskrtle,Hledej problemy,Opravit vybrane problemy

(nechat ho udelat zalohu-ta je ulozena v Dokumentech-DULEZITE).

Taktez 2x-3x po sobe.

Provedte nekolikrat po sobe defragmentaci systemoveho disku C: - Start-Vsechny programy-Prislusenstvi-Systemove nastroje-Defragmentace disku

Pote by melo byt pc urcite sviznejsi...

[brkys]

tak se mi při startu počítače rozjel nějakýá PC CONFIDENTAL, tak to asi bude ještě nějaký problém

[earl]

Pokud mate AVG 10 free,tak jej odinstalujte a nainstalujte Avast nebo Aviru (Avira neobsahuje mailovy skener,Avast ano)

Pokud se na pc strida vic osob (rodice,deti apod.),tak je treba vsechny poucit o rizicich pri stahovani dat z internetu.

Pouzijte MBAM

instalace,uplny sken,vlozit sem log-NIC NEMAZAT!

Stahnete DDS a ulozte ho na plochu.

Zavrete vsechna spustena okna a spustte program jako Administrator, potvrdte licencni podminky a postupujte podle pokynu. Zacne scanovani.

Az skonci, tak by mel vytvorit 2 logy proto se vam 2krat otevre notepad. Jeden log bude mit nazev DDS.txt a druhy attach.txt.

Zkopirujte sem pouze ten DDS.txt.

V pripade nejasnosti navod zde

[brkys]

používám registrovanou verzi AVG 11.
Výpis MBAM
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 5014

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

1.11.2010 17:05:27
mbam-log-2010-11-01 (17-05-27).txt

Typ skenu: Úplný sken (C:\|D:\|)
Skenované objekty: 415443
Uplynulý čas: 1 hodina(y), 29 minuta(y), 11 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 4

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
C:\System Volume Information\_restore{B157AFEB-B348-449F-A6C7-3A864869584D}\RP2\A0003475.exe (Malware.Packer.Gen) -> No action taken.
C:\System Volume Information\_restore{B157AFEB-B348-449F-A6C7-3A864869584D}\RP2\A0003476.dll (Malware.Packer.Gen) -> No action taken.
C:\System Volume Information\_restore{B157AFEB-B348-449F-A6C7-3A864869584D}\RP2\A0003477.dll (Malware.Packer.Gen) -> No action taken.
C:\System Volume Information\_restore{B157AFEB-B348-449F-A6C7-3A864869584D}\RP2\A0003478.dll (Malware.Packer.Gen) -> No action taken.

[brkys]

DDS se mi stahuje jako textový soubor

[brkys]

tak během skenu DSS nastala "modrá smrt".

[earl]

Pouzijte navod zde na vypnuti a zapnuti obnovy systemu - SVI.

Udelejte kompletni scan pomoci AvpTool,

postupujte presne dle navodu, pri vyberu jaka akce nechte lecit,obsah logu vlozte sem.

Pouzijte CureIt na procisteni pc.

Stahnete OTL

spustte, oznacte "Pro vsechny uzivatele,30 dnů zmente na 7,kliknete na Prohledat,

po skonceni skenu sem vlozte obsah logu z OTL.txt.

[brkys]

tak sken pomocí AVPTOOL proběhl, ale nenašel jsem žádny log, kromě zprávy:
Automatická kontrola: dokončeno před 50 min. (události: 2, objekty: 464768, čas: 03:51:24)
3.11.2010 11:46:35 Úloha byla dokončena
3.11.2010 7:55:11 Úloha byla spuštěna


při čištění CURELT opět modrá obrazovka

log z OTL:

OTL logfile created on: 3.11.2010 12:54:11 - Run 3
OTL by OldTimer - Version 3.2.17.0 Folder = C:\Documents and Settings\Kaska\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 74.00% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 85.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 183.29 Gb Total Space | 55.47 Gb Free Space | 30.26% Space Free | Partition Type: FAT32
Drive D: | 76.67 Gb Total Space | 57.10 Gb Free Space | 74.48% Space Free | Partition Type: FAT32

Computer Name: SERVER | User Name: Kaska | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2010.10.29 07:44:02 | 000,133,432 | ---- | M] (ICQ, LLC.) -- C:\Program Files\ICQ7.2\ICQ.exe
PRC - [2010.10.23 17:26:56 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Kaska\Plocha\OTL.exe
PRC - [2010.10.11 12:58:12 | 006,104,656 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
PRC - [2010.10.11 12:58:12 | 000,725,072 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe
PRC - [2010.10.06 17:24:38 | 000,652,640 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgrsx.exe
PRC - [2010.10.06 17:24:36 | 001,065,824 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgnsx.exe
PRC - [2010.10.06 17:24:08 | 000,845,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgcsrvx.exe
PRC - [2010.10.06 17:24:08 | 000,647,008 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgchsvx.exe
PRC - [2010.09.27 14:49:10 | 000,116,104 | ---- | M] (LogMeIn, Inc.) -- C:\Program Files\LogMeIn\x86\ramaint.exe
PRC - [2010.09.27 14:47:14 | 000,374,152 | ---- | M] (LogMeIn, Inc.) -- C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
PRC - [2010.09.20 19:52:38 | 005,352,288 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\Avg10 Admin\Server\avgadmsv.exe
PRC - [2010.09.20 19:52:36 | 000,505,184 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\Avg10 Admin\Server\AvgAdminServerMonitor.exe
PRC - [2010.09.15 05:29:10 | 002,745,696 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgtray.exe
PRC - [2010.09.10 01:45:22 | 000,265,400 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgwdsvc.exe
PRC - [2010.09.07 03:50:22 | 001,047,392 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgemcx.exe
PRC - [2010.09.07 03:50:08 | 000,745,824 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgam.exe
PRC - [2010.05.31 11:31:10 | 000,063,048 | ---- | M] (LogMeIn, Inc.) -- C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
PRC - [2010.05.31 11:31:10 | 000,063,040 | ---- | M] (LogMeIn, Inc.) -- C:\Program Files\LogMeIn\x86\LogMeIn.exe
PRC - [2008.04.14 05:22:36 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Outlook Express\msimn.exe
PRC - [2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007.05.11 03:06:00 | 000,341,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
PRC - [2006.04.13 22:36:10 | 000,307,200 | ---- | M] () -- C:\Program Files\Transoft Solutions\License Server\TransoftLS.exe
PRC - [2002.10.17 16:26:36 | 000,532,541 | ---- | M] () -- C:\Program Files\WinRoute Pro\winroute.exe
PRC - [2001.11.06 18:09:00 | 000,053,248 | ---- | M] () -- C:\Program Files\WinRoute Pro\WrCtrl.exe


========== Modules (SafeList) ==========

MOD - [2010.10.23 17:26:56 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Kaska\Plocha\OTL.exe
MOD - [2010.08.23 18:12:34 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- C:\ComboFix\PEV.cfx -- (PEVSystemStart)
SRV - File not found [Auto | Stopped] -- C:\windows\System32\hasplms.exe -- (hasplms)
SRV - [2010.10.11 12:58:12 | 006,104,656 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2010.10.06 11:31:48 | 000,517,448 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe -- (AVG Security Toolbar Service)
SRV - [2010.09.27 14:49:10 | 000,116,104 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files\LogMeIn\x86\RaMaint.exe -- (LMIMaint)
SRV - [2010.09.27 14:47:14 | 000,374,152 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2010.09.20 19:52:38 | 005,352,288 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\Avg10 Admin\Server\avgadmsv.exe -- (AvgAdminServer)
SRV - [2010.09.10 01:45:22 | 000,265,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\avgwdsvc.exe -- (avgwd)
SRV - [2010.05.31 11:31:10 | 000,063,040 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files\LogMeIn\x86\LogMeIn.exe -- (LogMeIn)
SRV - [2008.04.14 05:21:54 | 000,105,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\p2pgasvc.dll -- (p2pgasvc)
SRV - [2007.11.19 17:25:52 | 000,085,096 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2006.04.13 22:36:10 | 000,307,200 | ---- | M] () [Auto | Running] -- C:\Program Files\Transoft Solutions\License Server\TransoftLS.exe -- (Transoft Solutions License Server V1.4)
SRV - [2002.10.17 16:26:36 | 000,532,541 | ---- | M] () [Auto | Running] -- C:\Program Files\WinRoute Pro\winroute.exe -- (WinRoute)


========== Driver Services (SafeList) ==========

DRV - File not found [File_System | Boot | Stopped] -- C:\windows\System32\DRIVERS\Lbd.sys -- (Lbd)
DRV - [2010.11.03 12:40:50 | 000,125,304 | ---- | M] (Doctor Web, Ltd.) [File_System | Boot | Running] -- C:\windows\system32\drivers\dwprot.sys -- (DwProt)
DRV - [2010.09.27 14:50:44 | 000,083,360 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\windows\System32\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV - [2010.09.13 16:27:24 | 000,025,680 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\windows\system32\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH)
DRV - [2010.09.07 03:49:00 | 000,298,448 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2010.09.07 03:48:56 | 000,034,384 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2010.09.07 03:48:54 | 000,249,424 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2010.09.07 03:48:50 | 000,026,064 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\windows\system32\DRIVERS\avgrkx86.sys -- (Avgrkx86)
DRV - [2010.09.02 07:15:04 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF) WinPcap Packet Driver (NPF)
DRV - [2010.08.19 21:42:38 | 000,030,288 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)
DRV - [2010.08.19 21:42:36 | 000,123,472 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)
DRV - [2010.08.19 21:42:34 | 000,026,192 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys -- (AVGIDSShim)
DRV - [2010.05.31 11:31:12 | 000,012,856 | ---- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] -- C:\Program Files\LogMeIn\x86\rainfo.sys -- (LMIInfo)
DRV - [2010.05.31 11:31:10 | 000,047,640 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV - [2010.02.11 14:02:16 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2008.04.13 18:36:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Hdaudbus.sys -- (HDAudBus)
DRV - [2008.03.18 16:09:16 | 000,350,720 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\aksfridge.sys -- (aksfridge)
DRV - [2008.03.07 12:33:46 | 000,017,480 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2007.07.23 15:12:44 | 000,046,336 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\akshhl.sys -- (akshhl)
DRV - [2007.07.05 15:16:56 | 000,238,976 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\akshasp.sys -- (akshasp)
DRV - [2007.07.05 15:16:56 | 000,014,976 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aksusb.sys -- (aksusb)
DRV - [2006.11.22 10:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (hardlock)
DRV - [2005.12.27 14:17:12 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\Haspnt.sys -- (Haspnt)
DRV - [2005.08.04 05:10:16 | 001,273,344 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2005.05.25 16:55:58 | 003,134,976 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2005.03.09 10:09:18 | 000,870,912 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\windows\system32\drivers\iaStor.sys -- (iaStor)
DRV - [2004.11.26 07:29:00 | 000,224,000 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp)
DRV - [2004.08.13 03:56:20 | 000,005,810 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2002.10.08 09:09:26 | 000,064,000 | ---- | M] () [Kernel | System | Running] -- C:\windows\system32\drivers\wrdrv.sys -- (WRDRV)
DRV - [2002.04.11 11:47:52 | 000,011,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ipfilter.sys -- (IPFilter)
DRV - [2001.08.17 20:11:06 | 000,066,591 | ---- | M] (3Com Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\el90xbc5.sys -- (EL90XBC)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found


IE - HKU\.DEFAULT\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.autocont.cz

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.autocont.cz
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-284587905-4065617495-2210005112-1016\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
IE - HKU\S-1-5-21-284587905-4065617495-2210005112-1016\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-284587905-4065617495-2210005112-1016\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
IE - HKU\S-1-5-21-284587905-4065617495-2210005112-1016\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG10\Firefox\ [2010.09.29 12:41:44 | 000,000,000 | ---D | M]


O1 HOSTS File: ([2010.09.02 11:45:08 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Podpora odkazu pro Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (PCCBHO.CPCCBHO) - {22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF} - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll (Capital Intellect Inc)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
O3 - HKU\S-1-5-21-284587905-4065617495-2210005112-1016\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [AvgAdminServerMonitor] C:\Program Files\AVG\Avg10 Admin\Server\AvgAdminServerMonitor.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [LogMeIn GUI] C:\Program Files\LogMeIn\x86\LogMeInSystray.exe (LogMeIn, Inc.)
O4 - HKU\S-1-5-21-284587905-4065617495-2210005112-1016..\Run: [ICQ] C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O4 - HKU\S-1-5-21-284587905-4065617495-2210005112-1016..\Run: [WrCtrl] C:\Program Files\WinRoute Pro\WrCtrl.exe ()
O4 - Startup: C:\Documents and Settings\Kaska\Nabídka Start\Programy\Po spuštění\Outlook Express.lnk = C:\Program Files\Outlook Express\msimn.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-284587905-4065617495-2210005112-1016\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-284587905-4065617495-2210005112-1016\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-284587905-4065617495-2210005112-1016\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-284587905-4065617495-2210005112-1016\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\S-1-5-21-284587905-4065617495-2210005112-1016\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\S-1-5-21-284587905-4065617495-2210005112-1016\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O7 - HKU\S-1-5-21-284587905-4065617495-2210005112-1016\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
O7 - HKU\S-1-5-21-284587905-4065617495-2210005112-1016\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
O9 - Extra 'Tools' menuitem : PC Confidential - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe (Capital Intellect, Inc)
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: PC Confidential - {925DAB62-F9AC-4221-806A-057BFB1014AA} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe (Capital Intellect, Inc)
O9 - Extra Button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe (Amaze Soft)
O9 - Extra 'Tools' menuitem : &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe (Amaze Soft)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onecare.live.com/resour ... se9602.cab (Windows Live Safety Center Base Module)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microso ... 0914300968 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/sh ... wflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\avgsecuritytoolbar {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\windows\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\LMIinit: DllName - LMIinit.dll - C:\windows\System32\LMIinit.dll (LogMeIn, Inc.)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Kaska\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Kaska\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005.12.05 08:00:36 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ]
O32 - AutoRun File - [2008.03.05 15:25:38 | 000,000,000 | ---D | M] - D:\Autoturn -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (OODBS) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 7 Days ==========

[2010.11.03 12:46:14 | 000,000,000 | -HSD | C] -- C:\FOUND.008
[2010.11.03 12:40:49 | 000,125,304 | ---- | C] (Doctor Web, Ltd.) -- C:\windows\System32\drivers\dwprot.sys
[2010.11.03 07:50:22 | 082,287,232 | ---- | C] ( ) -- C:\Documents and Settings\Kaska\Plocha\setup_9.0.0.722_03.11.2010_08-09.exe
[2010.11.02 12:21:16 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Kaska\Recent
[2010.10.29 07:44:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kaska\Local Settings\Data aplikací\AOL
[2010.10.29 07:43:59 | 000,000,000 | ---D | C] -- C:\Program Files\ICQ7.2

========== Files - Modified Within 7 Days ==========

[2010.11.03 12:51:14 | 000,000,386 | ---- | M] () -- C:\windows\tasks\Final Media Player Update Checker.job
[2010.11.03 12:50:02 | 000,001,158 | ---- | M] () -- C:\windows\System32\wpa.dbl
[2010.11.03 12:48:10 | 000,000,416 | ---- | M] () -- C:\windows\tasks\PCConfidential.job
[2010.11.03 12:47:08 | 000,002,048 | --S- | M] () -- C:\windows\bootstat.dat
[2010.11.03 12:46:58 | 3220,426,752 | -HS- | M] () -- C:\hiberfil.sys
[2010.11.03 12:40:50 | 000,125,304 | ---- | M] (Doctor Web, Ltd.) -- C:\windows\System32\drivers\dwprot.sys
[2010.11.03 09:25:52 | 000,019,968 | ---- | M] () -- C:\Documents and Settings\Kaska\Plocha\Hluboká.doc
[2010.11.03 07:50:20 | 082,287,232 | ---- | M] ( ) -- C:\Documents and Settings\Kaska\Plocha\setup_9.0.0.722_03.11.2010_08-09.exe
[2010.11.03 06:57:20 | 000,000,116 | ---- | M] () -- C:\windows\NeroDigital.ini
[2010.11.02 13:54:12 | 000,012,932 | ---- | M] () -- C:\Documents and Settings\Kaska\Dokumenty\CleanupScales11.csv
[2010.11.02 12:15:10 | 000,024,064 | ---- | M] () -- C:\Documents and Settings\Kaska\Plocha\úkoly ZESA.xls
[2010.11.02 09:03:44 | 000,859,191 | ---- | M] () -- C:\Documents and Settings\Kaska\Plocha\84654.pdf
[2010.11.01 19:03:30 | 000,626,176 | ---- | M] () -- C:\Documents and Settings\Kaska\Plocha\dds.com
[2010.11.01 18:17:36 | 000,068,096 | ---- | M] () -- C:\Documents and Settings\Kaska\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.11.01 17:10:46 | 000,626,176 | ---- | M] () -- C:\Documents and Settings\Kaska\Plocha\dds.scr
[2010.11.01 13:44:28 | 001,447,097 | ---- | M] () -- C:\Documents and Settings\Kaska\Plocha\vo_milevsko_26_10_2010.dwg
[2010.11.01 08:35:30 | 000,259,840 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT
[2010.10.29 11:11:46 | 000,253,440 | ---- | M] () -- C:\Documents and Settings\Kaska\Plocha\C2_V41.doc
[2010.10.28 12:13:56 | 000,000,611 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\AVG 2011.lnk

========== Files Created - No Company Name ==========

[2010.11.03 09:25:50 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\Kaska\Plocha\Hluboká.doc
[2010.11.02 13:54:11 | 000,012,932 | ---- | C] () -- C:\Documents and Settings\Kaska\Dokumenty\CleanupScales11.csv
[2010.11.02 09:03:42 | 000,859,191 | ---- | C] () -- C:\Documents and Settings\Kaska\Plocha\84654.pdf
[2010.11.01 19:03:28 | 000,626,176 | ---- | C] () -- C:\Documents and Settings\Kaska\Plocha\dds.com
[2010.11.01 17:08:16 | 000,626,176 | ---- | C] () -- C:\Documents and Settings\Kaska\Plocha\dds.scr
[2010.11.01 13:44:26 | 001,447,097 | ---- | C] () -- C:\Documents and Settings\Kaska\Plocha\vo_milevsko_26_10_2010.dwg
[2010.10.29 11:11:45 | 000,253,440 | ---- | C] () -- C:\Documents and Settings\Kaska\Plocha\C2_V41.doc
[2009.08.03 15:07:42 | 000,403,816 | ---- | C] () -- C:\windows\System32\OGACheckControl.dll
[2008.12.18 14:53:24 | 000,000,000 | ---- | C] () -- C:\windows\OODCNT.INI
[2008.11.11 08:33:16 | 000,001,056 | -HS- | C] () -- C:\windows\System32\KGyGaAvL.sys
[2008.08.20 12:45:30 | 000,528,384 | ---- | C] () -- C:\windows\System32\~AdAway.dll
[2008.08.20 12:45:27 | 000,176,128 | ---- | C] () -- C:\windows\System32\~global.dll
[2008.01.21 12:19:37 | 000,068,096 | ---- | C] () -- C:\Documents and Settings\Kaska\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.01.21 10:38:42 | 000,000,125 | ---- | C] () -- C:\Documents and Settings\Kaska\Local Settings\Data aplikací\fusioncache.dat
[2006.06.16 16:50:14 | 000,001,763 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\QTSBandwidthCache
[2006.02.07 19:42:22 | 000,000,754 | ---- | C] () -- C:\windows\WORDPAD.INI
[2006.02.06 11:51:04 | 000,116,224 | ---- | C] () -- C:\windows\System32\pdfcmnnt.dll
[2006.01.30 12:32:19 | 000,000,310 | ---- | C] () -- C:\windows\WINCMD.INI
[2005.12.27 18:42:20 | 000,000,116 | ---- | C] () -- C:\windows\NeroDigital.ini
[2005.12.27 14:35:29 | 030,604,794 | ---- | C] () -- C:\Program Files\Roadpac ze Server 12-05.zip
[2005.12.27 14:17:10 | 000,000,383 | ---- | C] () -- C:\windows\System32\haspdos.sys
[2005.12.22 17:08:09 | 000,001,125 | ---- | C] () -- C:\windows\winamp.ini
[2005.12.22 16:05:23 | 000,000,327 | ---- | C] () -- C:\windows\SWWATER.INI
[2005.12.22 13:39:41 | 000,064,000 | ---- | C] () -- C:\windows\System32\drivers\wrdrv.sys
[2005.12.22 09:46:57 | 000,000,390 | ---- | C] () -- C:\windows\ODBC.INI
[2005.12.05 12:24:00 | 000,000,061 | ---- | C] () -- C:\windows\smscfg.ini
[2005.12.05 11:44:11 | 000,156,672 | ---- | C] () -- C:\windows\System32\RtlCPAPI.dll
[2005.12.05 07:56:11 | 000,004,249 | ---- | C] () -- C:\windows\ODBCINST.INI
[2004.08.13 03:56:20 | 000,005,810 | ---- | C] () -- C:\windows\System32\drivers\ASACPI.sys
[2003.04.09 15:38:04 | 000,005,664 | ---- | C] () -- C:\windows\System32\OUTLPERF.INI
[2002.04.11 11:47:52 | 000,049,152 | ---- | C] () -- C:\windows\System32\msmscoin.dll
[1980.01.01 00:00:00 | 000,014,060 | ---- | C] () -- C:\windows\System32\OEMINFO.INI

< End of report >

[earl]

Potreboval bych cislo chyby,kterou vypise BSOD - napr.: 0x00000D4

[brkys]

po expresním skenu Cureit vyběhla tato hláška: Windows operating systems use the HOSTS file to map text hostnames to IP addresses. Modifications to the HOSTS file indicate possible operation of malicious software. Do you want to restore the default HOSTS file?

Zatím jsem dal možnost NE.
Ve výpisu testu: pravděpodobně STPAGE.Trojan