Prosím o kontrolu logu, mám nejspíš zavirovaný PC

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
petrnavra
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 29 Lis 2010 18:34

Prosím o kontrolu logu, mám nejspíš zavirovaný PC

#1 Příspěvek od petrnavra »

Ahoj pánvé, prosm kouknte mi na log. Poítač je njspíš zavirovaný. KNapřkad když spustím internetový prohlížeč, napíše mi, že se v pc vyskytl spam a nepustí mě nikam. Nebo internet nefunguje vůbec..

díy moc


Logfile of random's system information tool 1.08 (written by random/random)
Run by Ladislav at 2010-11-29 18:38:56
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 70 GB (46%) free of 153 GB
Total RAM: 639 MB (47% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:39:15, on 29.11.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\WINDOWS\VMSnap5.EXE
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Program Files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe
C:\Documents and Settings\All Users\Data aplikací\Badoo\Badoo Desktop\1.2.22.828\Badoo.Desktop.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Ladislav\Plocha\RSIT.exe
C:\Program Files\trend micro\Ladislav.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://googleure.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: (no name) - {5D0EC45B-D2E4-4DD0-A5B2-69DDEFE852A8} - (no file)
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [UpdatePDRShortCut] "C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "Software\CyberLink\PowerDirector\7.0"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [VMSnap5] C:\WINDOWS\VMSnap5.EXE
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Advanced SystemCare 3] "C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" /startup
O4 - HKCU\..\Run: [SmartRAM] "C:\Program Files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe" /m
O4 - HKCU\..\Run: [Badoo Desktop] "C:\Documents and Settings\All Users\Data aplikací\Badoo\Badoo Desktop\1.2.22.828\Badoo.Desktop.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

--
End of file - 8557 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-01-03 1019128]
{5D0EC45B-D2E4-4DD0-A5B2-69DDEFE852A8}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]
"DAEMON Tools-1033"=C:\Program Files\D-Tools\daemon.exe [2004-08-22 81920]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-09-01 1164584]
"UpdatePDRShortCut"=C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]
"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2006-01-02 45056]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
"VMSnap5"=C:\WINDOWS\VMSnap5.EXE [2006-06-28 49152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-05-16 153136]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"Advanced SystemCare 3"=C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe [2010-09-28 2407632]
"SmartRAM"=C:\Program Files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe [2010-07-21 198864]
"Badoo Desktop"=C:\Documents and Settings\All Users\Data aplikací\Badoo\Badoo Desktop\1.2.22.828\Badoo.Desktop.exe [2010-10-29 983552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel File Shell Monitor]
C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel Photo Downloader]
C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe -startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-09-01 1164584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
C:\WINDOWS\system32\oodtray.exe [2007-05-11 2512392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PinnacleDriverCheck]
C:\WINDOWS\system32\PSDrvCheck.exe [2003-12-04 406016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
C:\WINDOWS\SOUNDMAN.EXE [2007-04-16 577536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program Files\Winamp\winampa.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]
C:\PROGRA~1\MICROS~2\Office\OSA9.EXE [1999-02-17 65588]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-05-03 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-04-27 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoInstrumentation"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoResolveSearch"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\Program Files\Rockstar Games\counter-strike 1.6\hl.exe"="C:\Program Files\Rockstar Games\counter-strike 1.6\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\ToCA Race Driver\RaceDriver.exe"="C:\Program Files\ToCA Race Driver\RaceDriver.exe:*:Enabled:RaceDriver"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Documents and Settings\Ladislav\Dokumenty\Downloads\P17535732.JPG-www.facebook.exe"="C:\WINDOWS\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\DOCUME~1\Ladislav\LOCALS~1\Temp\1630.exe"="C:\WINDOWS\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"
"C:\Program Files\formule\f1_2000.exe"="C:\Program Files\formule\f1_2000.exe:*:Disabled:F1_2000"
"C:\Program Files\Ford Racing 3\fr3.exe"="C:\Program Files\Ford Racing 3\fr3.exe:*:Enabled:fr3"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"

======List of files/folders created in the last 1 months======

2010-11-29 18:38:57 ----DC---- C:\Program Files\trend micro
2010-11-29 18:38:56 ----DC---- C:\rsit
2010-11-28 08:05:49 ----AC---- C:\WINDOWS\system32\drivers\imsrdzgx.sys
2010-11-27 21:12:13 ----AC---- C:\WINDOWS\system32\drivers\btumjuor.sys
2010-11-27 20:04:00 ----AC---- C:\WINDOWS\system32\drivers\hprtwpsc.sys
2010-11-26 19:55:53 ----AC---- C:\WINDOWS\system32\drivers\kljccnyz.sys
2010-11-26 17:55:49 ----AC---- C:\WINDOWS\system32\drivers\mdkncdvm.sys
2010-11-26 15:55:47 ----AC---- C:\WINDOWS\system32\drivers\vwqorrif.sys
2010-11-26 08:58:58 ----DC---- C:\73ffa2532a0a3ac4efa77de0
2010-11-26 08:35:18 ----DC---- C:\c6de10370373a8a1f3eeff683d7a7d
2010-11-26 08:33:17 ----AC---- C:\WINDOWS\system32\drivers\vctxaium.sys
2010-11-26 08:26:46 ----HDC---- C:\WINDOWS\ie7
2010-11-26 08:26:26 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2010-11-26 08:25:54 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2010-11-26 07:30:21 ----AC---- C:\WINDOWS\system32\drivers\fvvifnyc.sys
2010-11-25 22:10:06 ----AC---- C:\WINDOWS\vidcap32.Exe
2010-11-25 22:10:05 ----AC---- C:\WINDOWS\Sti305.exe
2010-11-25 22:10:04 ----DC---- C:\WINDOWS\EffectResources
2010-11-25 22:10:04 ----DC---- C:\WINDOWS\CatRoot
2010-11-25 22:10:03 ----DC---- C:\Program Files\Vimicro
2010-11-25 22:02:00 ----AC---- C:\WINDOWS\VM305Cap.exe
2010-11-25 22:01:59 ----AC---- C:\WINDOWS\VMSnap5.exe
2010-11-25 22:01:59 ----AC---- C:\WINDOWS\system32\VM305Sti.dll
2010-11-25 22:01:58 ----AC---- C:\WINDOWS\system32\drivers\usbVM305.sys
2010-11-22 19:49:21 ----DC---- C:\Program Files\Montezumova pomsta
2010-11-22 16:14:36 ----DC---- C:\Program Files\Ford Racing 3
2010-11-22 15:46:10 ----DC---- C:\Program Files\formule
2010-11-20 18:29:16 ----DC---- C:\Documents and Settings\All Users\Data aplikací\Badoo
2010-11-14 14:58:19 ----DC---- C:\WINDOWS\Performance
2010-11-14 14:57:39 ----DC---- C:\Program Files\Microsoft Windows 7 Upgrade Advisor
2010-11-14 09:34:38 ----DC---- C:\Program Files\Wise Disk Cleaner
2010-11-13 17:23:21 ----DC---- C:\Documents and Settings\All Users\Data aplikací\Google
2010-11-13 16:56:25 ----DC---- C:\Documents and Settings\Ladislav\Data aplikací\Opera
2010-11-13 16:55:54 ----DC---- C:\Program Files\Opera
2010-11-12 22:42:02 ----AC---- C:\WINDOWS\system32\drivers\aswSP.sys
2010-11-12 22:42:02 ----AC---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2010-11-12 22:42:01 ----AC---- C:\WINDOWS\system32\drivers\aswRdr.sys
2010-11-12 22:42:00 ----AC---- C:\WINDOWS\system32\drivers\aswTdi.sys
2010-11-12 22:41:59 ----AC---- C:\WINDOWS\system32\drivers\aswmon2.sys
2010-11-12 22:41:59 ----AC---- C:\WINDOWS\system32\drivers\aswmon.sys
2010-11-12 22:41:59 ----AC---- C:\WINDOWS\system32\drivers\aavmker4.sys
2010-11-12 22:41:42 ----AC---- C:\WINDOWS\system32\aswBoot.exe
2010-11-12 20:18:13 ----DC---- C:\Documents and Settings\All Users\Data aplikací\{437292BE-95BD-4B12-B699-6D217A03ACAF}
2010-11-12 20:17:09 ----DC---- C:\Program Files\Lavasoft
2010-11-12 20:17:09 ----DC---- C:\Documents and Settings\All Users\Data aplikací\Lavasoft
2010-11-12 18:33:42 ----AC---- C:\min32.exe
2010-11-11 19:58:48 ----AC---- C:\winscxs.exe
2010-11-11 19:43:38 ----AC---- C:\6164.exe
2010-11-11 16:02:39 ----AC---- C:\21.exe
2010-11-10 12:22:06 ----AC---- C:\jshd.exe
2010-11-09 17:13:51 ----AC---- C:\2xhs.exe
2010-11-02 10:55:28 ----AC---- C:\WINDOWS\system32\javaws.exe
2010-11-02 10:55:28 ----AC---- C:\WINDOWS\system32\javaw.exe
2010-11-02 10:55:28 ----AC---- C:\WINDOWS\system32\java.exe

======List of files/folders modified in the last 1 months======

2010-11-29 18:39:05 ----DC---- C:\WINDOWS\Prefetch
2010-11-29 18:38:57 ----RDC---- C:\Program Files
2010-11-29 18:31:31 ----DC---- C:\Program Files\Mozilla Firefox
2010-11-29 17:25:58 ----DC---- C:\WINDOWS
2010-11-29 15:48:34 ----ADC---- C:\WINDOWS\Temp
2010-11-29 15:32:30 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-11-29 15:26:04 ----DC---- C:\WINDOWS\system32
2010-11-29 15:21:30 ----DC---- C:\WINDOWS\pss
2010-11-28 23:50:59 ----DC---- C:\WINDOWS\system32\CatRoot2
2010-11-28 19:01:15 ----DC---- C:\WINDOWS\system32\drivers\etc
2010-11-28 19:00:33 ----DC---- C:\WINDOWS\Debug
2010-11-28 11:52:43 ----DC---- C:\Program Files\Emilka Holubová - Montezumův poklad
2010-11-28 08:05:49 ----DC---- C:\WINDOWS\system32\drivers
2010-11-27 22:14:52 ----SHDC---- C:\WINDOWS\Installer
2010-11-27 22:10:32 ----HDC---- C:\WINDOWS\inf
2010-11-27 21:56:53 ----HDC---- C:\Program Files\InstallShield Installation Information
2010-11-26 09:10:30 ----SDC---- C:\WINDOWS\Tasks
2010-11-26 08:58:22 ----DC---- C:\WINDOWS\system32\CatRoot
2010-11-26 08:31:34 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-11-26 08:31:34 ----DC---- C:\WINDOWS\Media
2010-11-26 08:31:34 ----DC---- C:\WINDOWS\Help
2010-11-26 08:27:51 ----DC---- C:\Program Files\Internet Explorer
2010-11-26 08:26:34 ----AC---- C:\WINDOWS\imsins.BAK
2010-11-26 08:09:32 ----DC---- C:\Program Files\Google
2010-11-26 07:59:15 ----DC---- C:\WINDOWS\twain_32
2010-11-26 07:58:37 ----DC---- C:\Program Files\Common Files
2010-11-26 07:44:44 ----DC---- C:\Program Files\Photo Pos Pro
2010-11-26 07:35:49 ----AC---- C:\WINDOWS\win.ini
2010-11-25 22:22:34 ----DC---- C:\WINDOWS\system32\DirectX
2010-11-25 22:10:03 ----SDC---- C:\WINDOWS\Downloaded Program Files
2010-11-25 22:10:02 ----DC---- C:\Program Files\Common Files\InstallShield
2010-11-25 22:03:20 ----SDC---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-11-25 21:30:30 ----DC---- C:\Documents and Settings\Ladislav\Data aplikací\ICQ
2010-11-25 15:15:16 ----AC---- C:\WINDOWS\NeroDigital.ini
2010-11-22 23:59:53 ----DC---- C:\Documents and Settings\Ladislav\Data aplikací\Skype
2010-11-20 18:24:30 ----DC---- C:\Program Files\PhotoposComTbr
2010-11-16 12:44:15 ----DC---- C:\Documents and Settings\All Users\Data aplikací\DivX
2010-11-16 12:44:14 ----DC---- C:\Program Files\DivX
2010-11-14 09:59:45 ----DC---- C:\Program Files\WinRAR
2010-11-12 22:41:52 ----DC---- C:\WINDOWS\WinSxS
2010-11-12 22:41:32 ----DC---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-11-12 22:28:44 ----DC---- C:\Documents and Settings\Ladislav\Data aplikací\IObit
2010-11-05 18:52:13 ----DC---- C:\Documents and Settings\Ladislav\Data aplikací\skypePM
2010-11-02 16:11:27 ----DC---- C:\Program Files\ICQ7.0
2010-11-02 10:55:23 ----DC---- C:\Program Files\Java
2010-11-02 10:47:35 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 d347bus;d347bus; C:\WINDOWS\system32\DRIVERS\d347bus.sys [2004-08-22 155136]
R0 d347prt;d347prt; C:\WINDOWS\System32\Drivers\d347prt.sys [2004-08-22 5248]
R0 gagp30kx;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\WINDOWS\system32\DRIVERS\gagp30kx.sys [2008-04-13 46464]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-03-31 44944]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-11-03 63488]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-01-17 715248]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-04-27 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 MpFilter;Microsoft Malware Protection Driver; C:\WINDOWS\system32\DRIVERS\MpFilter.sys [2010-03-25 151216]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-04-25 4030144]
R3 ASAPIW2k;ASAPIW2K; C:\WINDOWS\system32\drivers\ASAPIW2k.sys [2003-12-04 11264]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-05-03 1540608]
R3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S2 rifzerrn;rifzerrn; C:\WINDOWS\system32\drivers\rifzerrn.sys []
S2 vctxaium;vctxaium; C:\WINDOWS\system32\drivers\vctxaium.sys [2010-11-26 216]
S3 AF9035HB;AF9035 Hybrid Device; C:\WINDOWS\System32\Drivers\AF9035HB.sys [2010-09-23 863616]
S3 BLKWGU(Belkin);Belkin Wireless G USB Network Adapter(Belkin); C:\WINDOWS\system32\DRIVERS\BLKWGU.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 cpuz132;cpuz132; \??\C:\DOCUME~1\Ladislav\LOCALS~1\Temp\cpuz132\cpuz132_x32.sys []
S3 MPE;BDA MPE Filter; C:\WINDOWS\system32\DRIVERS\MPE.sys [2004-07-09 15104]
S3 mpfbzcvp;mpfbzcvp; \??\C:\WINDOWS\System32\Drivers\mpfbzcvp.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2008-04-27 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-04-27 82944]
S3 xjonzzfj;xjonzzfj; \??\C:\WINDOWS\System32\Drivers\xjonzzfj.sys []
S3 ZDPSp50;ZDPSp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\ZDPSp50.sys []
S3 ZSMC0305;Vimicro USB PC Camera (VC0305); C:\WINDOWS\System32\Drivers\usbVM305.sys [2006-08-10 391737]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-05-03 413696]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-09-15 153376]
R2 O&O Defrag;O&O Defrag; C:\WINDOWS\system32\oodag.exe [2007-05-11 1050120]
R2 ProtexisLicensing;ProtexisLicensing; C:\WINDOWS\system32\PSIService.exe [2007-06-05 177704]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2008-12-31 247152]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-05-16 271920]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2006-05-03 520192]
S2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-13 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-04-13 792112]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17904]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu, mám nejspíš zavirovaný PC

#2 Příspěvek od vyosek »

Zdravim, pekny vecer preji a vitam Vas u nas na foru :welcome:

:arrow: No havet tam mate a ne jednu :arcisit:

:arrow: Odinstalujte Advanced SystemCare 3 a nasledne i vse od IObit - jsou to cinske smejdy, na renomovanych serverech oznacovane jako spyware - navic na trhu jsou i free reseni a daleko lepsi

:arrow: Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
:arrow: Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  • Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
  • Vložte do PC vsechny USB klice (flash disky, ext.disky apod.)
  • Pokud mate Win XP spustte pod uctem Spravce\Administratora
  • Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
  • Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
  • Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
  • Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
  • Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
  • Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
  • Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
petrnavra
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 29 Lis 2010 18:34

Re: Prosím o kontrolu logu, mám nejspíš zavirovaný PC

#3 Příspěvek od petrnavra »

ComboFix 10-11-29.01 - Ladislav 29.11.2010 19:12:12.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.639.279 [GMT 1:00]
Spuštěný z: C:\Documents and Settings\Ladislav\Plocha\ComboFix.exe
AV: avast! Antivirus *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: Microsoft Security Essentials *On-access scanning disabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\21.exe
C:\6164.exe
C:\Autorun.inf
C:\data
C:\data\WINDOWSDEFENDER.EXE
C:\Documents and Settings\Ladislav\secupdat.dat
C:\min32.exe
C:\WINDOWS\daemon.dll
C:\WINDOWS\system32\msconfig.exe
C:\WINDOWS\system32\secupdat.dat
C:\WINDOWS\VM305Cap.exe

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-10-28 do 2010-11-29 )))))))))))))))))))))))))))))))
.

2010-11-29 17:38:57 . 2010-11-29 17:39:15 -------- dc----w- C:\Program Files\trend micro
2010-11-29 17:38:56 . 2010-11-29 17:39:20 -------- dc----w- C:\rsit
2010-11-29 10:59:17 . 2006-12-13 03:12:38 407016 -c--a-w- C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla.org\components\talkback.exe
2010-11-29 10:59:17 . 2006-12-13 03:12:37 14432 -c--a-w- C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla.org\components\qfaservices.dll
2010-11-29 10:59:17 . 2006-12-13 03:12:36 156520 -c--a-w- C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla.org\components\fullsoft.dll
2010-11-29 10:59:17 . 2006-12-13 03:12:35 99816 -c--a-w- C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla.org\components\BrandRes.dll
2010-11-28 07:05:49 . 2010-11-28 07:05:49 0 -c--a-w- C:\WINDOWS\system32\drivers\imsrdzgx.sys
2010-11-27 20:12:13 . 2010-11-27 20:12:13 0 -c--a-w- C:\WINDOWS\system32\drivers\btumjuor.sys
2010-11-27 19:04:00 . 2010-11-27 19:04:00 0 -c--a-w- C:\WINDOWS\system32\drivers\hprtwpsc.sys
2010-11-26 18:55:53 . 2010-11-26 18:55:53 0 -c--a-w- C:\WINDOWS\system32\drivers\kljccnyz.sys
2010-11-26 16:55:49 . 2010-11-26 16:55:49 0 -c--a-w- C:\WINDOWS\system32\drivers\mdkncdvm.sys
2010-11-26 14:55:47 . 2010-11-26 14:55:47 0 -c--a-w- C:\WINDOWS\system32\drivers\vwqorrif.sys
2010-11-26 07:58:58 . 2010-11-26 07:58:59 -------- dc----w- C:\73ffa2532a0a3ac4efa77de0
2010-11-26 07:35:18 . 2010-11-26 07:37:10 -------- dc----w- C:\c6de10370373a8a1f3eeff683d7a7d
2010-11-26 07:33:17 . 2010-11-26 07:33:30 216 -c--a-w- C:\WINDOWS\system32\drivers\vctxaium.sys
2010-11-26 06:30:21 . 2010-11-26 06:30:21 0 -c--a-w- C:\WINDOWS\system32\drivers\fvvifnyc.sys
2010-11-25 21:10:06 . 2000-10-31 11:00:00 307200 -c--a-w- C:\WINDOWS\vidcap32.Exe
2010-11-25 21:10:05 . 2006-10-11 17:40:12 57344 -c--a-w- C:\WINDOWS\Sti305.exe
2010-11-25 21:10:04 . 2010-11-26 06:59:15 -------- dc----w- C:\WINDOWS\CatRoot
2010-11-25 21:10:04 . 2010-11-26 06:59:14 -------- dc----w- C:\WINDOWS\EffectResources
2010-11-25 21:10:03 . 2010-11-26 06:59:14 -------- dc----w- C:\Program Files\Vimicro
2010-11-25 21:10:02 . 2002-07-25 16:06:52 282624 -c--a-w- C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe
2010-11-25 21:01:59 . 2006-06-28 16:39:38 49152 -c--a-w- C:\WINDOWS\VMSnap5.exe
2010-11-25 21:01:59 . 2005-08-05 17:36:24 81920 -c--a-w- C:\WINDOWS\system32\VM305Sti.dll
2010-11-25 21:01:58 . 2006-08-10 11:32:30 391737 -c--a-w- C:\WINDOWS\system32\drivers\usbVM305.sys
2010-11-25 21:01:58 . 2006-07-14 17:23:12 209041 -c--a-w- C:\WINDOWS\system32\VM305Prp.Ax
2010-11-22 18:49:21 . 2010-11-22 18:49:44 -------- dc----w- C:\Program Files\Montezumova pomsta
2010-11-22 15:14:36 . 2010-11-29 16:25:42 -------- dc----w- C:\Program Files\Ford Racing 3
2010-11-22 14:46:10 . 2010-11-24 18:50:06 -------- dc----w- C:\Program Files\formule
2010-11-20 17:29:16 . 2010-11-20 17:29:16 -------- dc----w- C:\Documents and Settings\All Users\Data aplikací\Badoo
2010-11-20 17:25:33 . 2010-11-20 17:25:33 -------- dc-h--w- C:\Documents and Settings\Ladislav\Local Settings\Data aplikací\AlterGeo
2010-11-14 13:58:19 . 2010-11-14 13:58:19 -------- dc----w- C:\WINDOWS\Performance
2010-11-14 13:58:10 . 2010-11-14 13:58:10 -------- dc----w- C:\Documents and Settings\Ladislav\Local Settings\Data aplikací\Microsoft Corporation
2010-11-14 13:57:39 . 2010-11-14 13:57:41 -------- dc----w- C:\Program Files\Microsoft Windows 7 Upgrade Advisor
2010-11-13 16:00:48 . 2010-11-13 16:00:48 -------- dc----w- C:\Documents and Settings\Ladislav\Local Settings\Data aplikací\Opera
2010-11-13 15:55:54 . 2010-11-26 07:10:12 -------- dc----w- C:\Program Files\Opera
2010-11-12 21:42:02 . 2010-09-07 15:52:03 165584 -c--a-w- C:\WINDOWS\system32\drivers\aswSP.sys
2010-11-12 21:42:02 . 2010-09-07 15:47:07 17744 -c--a-w- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2010-11-12 21:42:01 . 2010-09-07 15:47:46 23376 -c--a-w- C:\WINDOWS\system32\drivers\aswRdr.sys
2010-11-12 21:42:00 . 2010-09-07 15:52:25 46672 -c--a-w- C:\WINDOWS\system32\drivers\aswTdi.sys
2010-11-12 21:41:59 . 2010-09-07 15:47:19 100176 -c--a-w- C:\WINDOWS\system32\drivers\aswmon2.sys
2010-11-12 21:41:59 . 2010-09-07 15:47:16 94544 -c--a-w- C:\WINDOWS\system32\drivers\aswmon.sys
2010-11-12 21:41:59 . 2010-09-07 15:46:51 28880 -c--a-w- C:\WINDOWS\system32\drivers\aavmker4.sys
2010-11-12 21:41:42 . 2010-09-07 16:12:17 38848 -c--a-w- C:\WINDOWS\avastSS.scr
2010-11-12 21:41:42 . 2010-09-07 16:11:54 167592 -c--a-w- C:\WINDOWS\system32\aswBoot.exe
2010-11-12 19:18:13 . 2010-11-12 19:18:16 -------- dc----w- C:\Documents and Settings\All Users\Data aplikací\{437292BE-95BD-4B12-B699-6D217A03ACAF}
2010-11-12 19:17:09 . 2010-11-12 19:17:09 -------- dc----w- C:\Program Files\Lavasoft
2010-11-12 19:17:09 . 2010-11-12 19:17:09 -------- dc----w- C:\Documents and Settings\All Users\Data aplikací\Lavasoft
2010-11-11 18:58:48 . 2010-11-11 19:10:07 0 -c--a-w- C:\winscxs.exe
2010-11-10 11:22:06 . 2010-11-10 14:02:15 257 -c--a-w- C:\jshd.exe
2010-11-09 16:13:51 . 2010-11-09 16:13:51 256 -c--a-w- C:\2xhs.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-19 20:51:33 . 2010-01-17 16:30:26 222080 -c----w- C:\WINDOWS\system32\MpSigStub.exe
2010-10-07 23:21:31 . 2010-10-25 15:57:05 6146896 -c--a-w- C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2E1D9874-74A9-441F-846C-6123F9599297}\mpengine.dll
2010-10-07 23:21:31 . 2010-09-28 09:19:39 6146896 -c--a-w- C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2010-09-23 07:39:28 . 2010-09-23 07:39:52 863616 -c--a-w- C:\WINDOWS\system32\drivers\AF9035HB.sys
2010-09-18 10:23:38 . 2007-04-03 08:44:48 974848 -c--a-w- C:\WINDOWS\system32\mfc42u.dll
2010-09-18 06:53:37 . 2008-04-14 08:51:46 974848 -c--a-w- C:\WINDOWS\system32\mfc42.dll
2010-09-18 06:53:37 . 2008-04-14 08:51:46 953856 -c--a-w- C:\WINDOWS\system32\mfc40u.dll
2010-09-18 06:53:37 . 2001-10-25 16:00:00 954368 -c--a-w- C:\WINDOWS\system32\mfc40.dll
2010-09-15 03:50:37 . 2010-05-31 18:24:36 472808 -c--a-w- C:\WINDOWS\system32\deployJava1.dll
2010-09-15 01:29:49 . 2010-05-31 18:24:36 73728 -c--a-w- C:\WINDOWS\system32\javacpl.cpl
2010-09-09 22:52:57 . 2010-09-25 12:32:29 6084944 -c--a-w- C:\Documents and Settings\All Users\Data aplikací\Microsoft\Windows Defender\Definition Updates\{7BD00391-DAF0-463C-B763-CD4C11A2413E}\mpengine.dll
2010-09-09 22:52:57 . 2010-01-17 16:30:31 6084944 -c--a-w- C:\Documents and Settings\All Users\Data aplikací\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2010-09-01 11:52:28 . 2008-04-14 08:37:56 285824 -c--a-w- C:\WINDOWS\system32\atmfd.dll
2010-09-01 07:57:41 . 2008-04-14 07:45:36 1852800 -c--a-w- C:\WINDOWS\system32\win32k.sys
2006-12-13 03:12:30 . 2010-11-26 07:12:27 66648 -c--a-w- C:\Program Files\mozilla firefox\components\jar50.dll
2006-12-13 03:12:31 . 2010-11-26 07:12:27 54352 -c--a-w- C:\Program Files\mozilla firefox\components\jsd3250.dll
2006-12-13 03:12:32 . 2010-11-26 07:12:27 34928 -c--a-w- C:\Program Files\mozilla firefox\components\myspell.dll
2006-12-13 03:12:33 . 2010-11-26 07:12:27 46696 -c--a-w- C:\Program Files\mozilla firefox\components\spellchk.dll
2006-12-13 03:12:34 . 2010-11-26 07:12:27 172120 -c--a-w- C:\Program Files\mozilla firefox\components\xpinstal.dll
.

------- Sigcheck -------

[-] 2008-04-14 00:10:32 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\dllcache\atapi.sys
[-] 2008-04-14 00:10:32 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\drivers\atapi.sys

[-] 2008-04-14 00:27:28 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\dllcache\asyncmac.sys
[-] 2008-04-14 00:27:28 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\drivers\asyncmac.sys

[-] 2001-10-25 16:00:00 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\dllcache\beep.sys
[-] 2001-10-25 16:00:00 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\drivers\beep.sys

[-] 2008-04-14 07:59:08 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\dllcache\kbdclass.sys
[-] 2008-04-14 04:59:08 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\drivers\kbdclass.sys

[-] 2008-04-14 00:50:38 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\dllcache\ndis.sys
[-] 2008-04-14 00:50:38 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\drivers\ndis.sys

[-] 2008-04-14 00:45:54 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\dllcache\ntfs.sys
[-] 2008-04-14 00:45:54 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\drivers\ntfs.sys

[-] 2001-10-25 16:00:00 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\dllcache\null.sys
[-] 2001-10-25 16:00:00 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\drivers\null.sys

[-] 2008-06-20 11:59:02 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)] . . C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 11:51:12 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\dllcache\tcpip.sys
[-] 2008-06-20 11:51:12 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\drivers\tcpip.sys

[-] 2008-04-14 08:51:38 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\browser.dll
[-] 2008-04-14 08:51:38 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\dllcache\browser.dll

[-] 2008-04-14 08:52:30 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\lsass.exe
[-] 2008-04-14 08:52:30 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\dllcache\lsass.exe

[-] 2008-04-14 08:51:52 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\netman.dll
[-] 2008-04-14 08:51:52 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\dllcache\netman.dll

[-] 2008-04-14 08:51:56 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\qmgr.dll
[-] 2008-04-14 08:51:56 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\dllcache\qmgr.dll

[-] 2009-02-09 10:59:26 . C0BD34A62508BA68F146E22CE45919F9 . 401408 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 10:56:06 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\system32\rpcss.dll
[-] 2009-02-09 10:56:06 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\system32\dllcache\rpcss.dll

[-] 2009-02-09 11:25:57 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\system32\services.exe
[-] 2009-02-09 11:25:57 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\system32\dllcache\services.exe
[-] 2009-02-09 11:18:56 . 3D107D45CCFDB266E91D84B52CD7F430 . 111104 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe

[-] 2008-04-14 08:52:54 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\winlogon.exe
[-] 2008-04-14 08:52:54 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\dllcache\winlogon.exe

[-] 2008-04-14 08:51:40 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\cryptsvc.dll
[-] 2008-04-14 08:51:40 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\dllcache\cryptsvc.dll

[-] 2008-07-07 20:29:06 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\system32\es.dll
[-] 2008-07-07 20:29:06 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\system32\dllcache\es.dll
[-] 2008-07-07 20:25:38 . BE68EA4457E2E5717231CF91BE5448E0 . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll

[-] 2008-04-14 08:51:44 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\imm32.dll
[-] 2008-04-14 08:51:44 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\dllcache\imm32.dll

[-] 2009-03-21 14:09:02 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781 (xpsp_sp3_gdr.090321-1317)] . . C:\WINDOWS\system32\kernel32.dll
[-] 2009-03-21 14:09:02 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781 (xpsp_sp3_gdr.090321-1317)] . . C:\WINDOWS\system32\dllcache\kernel32.dll
[-] 2009-03-21 14:03:50 . 0D8F61460F84139BBE5E391D8DE18D9A . 990208 . . [5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)] . . C:\WINDOWS\$hf_mig$\KB959426\SP3QFE\kernel32.dll

[-] 2008-04-14 08:51:46 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\linkinfo.dll
[-] 2008-04-14 08:51:46 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\dllcache\linkinfo.dll

[-] 2008-04-14 08:51:46 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\lpk.dll
[-] 2008-04-14 08:51:46 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\dllcache\lpk.dll

[-] 2008-04-14 08:51:50 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\msvcrt.dll
[-] 2008-04-14 08:51:50 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\dllcache\msvcrt.dll
[-] 2008-04-14 08:37:10 . EC8D5E09C6CA5F52858A5EB71F308FDF . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
[-] 2001-10-25 16:00:00 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll

[-] 2008-06-20 17:49:25 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\mswsock.dll
[-] 2008-06-20 17:49:25 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\dllcache\mswsock.dll
[-] 2008-06-20 17:44:39 . B6CEC406351EA5EF131416D5F52D006F . 247296 . . [5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)] . . C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll

[-] 2008-04-14 08:51:52 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\netlogon.dll
[-] 2008-04-14 08:51:52 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\dllcache\netlogon.dll

[-] 2008-04-14 08:51:54 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\powrprof.dll
[-] 2008-04-14 08:51:54 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\dllcache\powrprof.dll

[-] 2008-04-14 08:51:56 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\scecli.dll
[-] 2008-04-14 08:51:56 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\dllcache\scecli.dll

[-] 2008-04-14 08:51:56 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\sfc.dll
[-] 2008-04-14 08:51:56 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\dllcache\sfc.dll

[-] 2008-04-14 08:52:50 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\svchost.exe
[-] 2008-04-14 08:52:50 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\dllcache\svchost.exe

[-] 2008-04-14 08:52:04 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\tapisrv.dll
[-] 2008-04-14 08:52:04 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\dllcache\tapisrv.dll

[-] 2008-04-14 08:52:06 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\user32.dll
[-] 2008-04-14 08:52:06 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\dllcache\user32.dll

[-] 2008-04-14 08:52:52 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\userinit.exe
[-] 2008-04-14 08:52:52 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\dllcache\userinit.exe

[-] 2008-04-14 08:52:08 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\ws2_32.dll
[-] 2008-04-14 08:52:08 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\dllcache\ws2_32.dll

[-] 2008-04-14 08:52:08 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\ws2help.dll
[-] 2008-04-14 08:52:08 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\dllcache\ws2help.dll

[-] 2008-04-14 08:52:24 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\explorer.exe
[-] 2008-04-14 08:52:24 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\dllcache\explorer.exe

[-] 2008-04-14 08:52:04 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\srsvc.dll
[-] 2008-04-14 08:52:04 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\dllcache\srsvc.dll

[-] 2008-04-14 08:52:56 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\wscntfy.exe
[-] 2008-04-14 08:52:56 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\dllcache\wscntfy.exe

[-] 2008-04-14 08:52:10 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\xmlprov.dll
[-] 2008-04-14 08:52:10 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\dllcache\xmlprov.dll

[-] 2008-04-14 08:51:42 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\eventlog.dll
[-] 2008-04-14 08:51:42 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\dllcache\eventlog.dll

[-] 2008-04-27 10:22:40 . 1E603EA2A3FDBAE9E5B88A8CB3C03124 . 1571840 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\sfcfiles.dll

[-] 2008-04-14 08:52:18 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\ctfmon.exe
[-] 2008-04-14 08:52:18 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\dllcache\ctfmon.exe

[-] 2008-04-14 08:51:56 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\shsvcs.dll
[-] 2008-04-14 08:51:56 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\dllcache\shsvcs.dll

[-] 2008-04-14 08:51:56 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\regsvc.dll
[-] 2008-04-14 08:51:56 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\dllcache\regsvc.dll

[-] 2008-04-14 08:51:56 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\schedsvc.dll
[-] 2008-04-14 08:51:56 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\dllcache\schedsvc.dll

[-] 2008-04-14 08:52:04 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\ssdpsrv.dll
[-] 2008-04-14 08:52:04 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\dllcache\ssdpsrv.dll

[-] 2008-04-14 08:52:04 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\termsrv.dll
[-] 2008-04-14 08:52:04 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\dllcache\termsrv.dll

[-] 2008-04-14 08:51:38 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\appmgmts.dll
[-] 2008-04-14 08:51:38 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\dllcache\appmgmts.dll

[-] 2001-10-25 16:00:00 . AFDFF022A01F0B11C776F0860C3B282F . 11776 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\system32\dllcache\acpiec.sys
[-] 2001-10-25 16:00:00 . AFDFF022A01F0B11C776F0860C3B282F . 11776 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\system32\drivers\acpiec.sys

[-] 2008-04-13 19:09:24 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . C:\WINDOWS\system32\dllcache\aec.sys
[-] 2008-04-13 19:09:24 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . C:\WINDOWS\system32\drivers\aec.sys

[-] 2008-04-14 00:23:36 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\dllcache\ip6fw.sys
[-] 2008-04-14 00:23:36 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\drivers\ip6fw.sys

[-] 2008-04-14 08:51:50 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\msgsvc.dll
[-] 2008-04-14 08:51:50 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\dllcache\msgsvc.dll

[-] 2008-04-27 11:19:33 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . C:\WINDOWS\system32\mspmsnsv.dll
[-] 2008-04-27 11:19:33 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . C:\WINDOWS\system32\dllcache\mspmsnsv.dll

[-] 2008-04-14 08:51:52 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . C:\WINDOWS\system32\ntmssvc.dll
[-] 2008-04-14 08:51:52 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . C:\WINDOWS\system32\dllcache\ntmssvc.dll

[-] 2008-04-14 08:52:06 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\upnphost.dll
[-] 2008-04-14 08:52:06 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\dllcache\upnphost.dll

[-] 2008-04-14 08:51:42 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\dsound.dll
[-] 2008-04-14 08:51:42 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\dllcache\dsound.dll
[7] 2004-07-09 03:27:28 . 033A45AB696EEF481707C2808C806E1A . 381952 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsound.dll

[-] 2008-04-14 08:51:40 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\d3d9.dll
[-] 2008-04-14 08:51:40 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\dllcache\d3d9.dll

[-] 2008-04-14 08:51:40 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\ddraw.dll
[-] 2008-04-14 08:51:40 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\dllcache\ddraw.dll
[7] 2004-07-09 03:27:28 . 90114704C17A581DA1BAE029F20932BE . 292864 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ddraw.dll

[-] 2008-04-14 08:51:54 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . C:\WINDOWS\system32\olepro32.dll
[-] 2008-04-14 08:51:54 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . C:\WINDOWS\system32\dllcache\olepro32.dll

[-] 2008-04-14 08:51:54 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\perfctrs.dll
[-] 2008-04-14 08:51:54 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\dllcache\perfctrs.dll

[-] 2008-04-14 08:52:06 . 614F8186BDAB926E3B1D8927A4161B54 . 18944 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\version.dll
[-] 2008-04-14 08:52:06 . 614F8186BDAB926E3B1D8927A4161B54 . 18944 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\dllcache\version.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-05-16 08:27:16 153136]
"RocketDock"="C:\Program Files\RocketDock\RocketDock.exe" [2007-09-02 11:58:52 495616]
"Badoo Desktop"="C:\Documents and Settings\All Users\Data aplikací\Badoo\Badoo Desktop\1.2.22.828\Badoo.Desktop.exe" [2010-10-29 12:55:50 983552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2010-03-17 19:53:36 421888]
"DAEMON Tools-1033"="C:\Program Files\D-Tools\daemon.exe" [2004-08-22 15:05:02 81920]
"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 09:44:46 248552]
"DivXUpdate"="C:\Program Files\DivX\DivX Update\DivXUpdate.exe" [2010-09-01 06:39:18 1164584]
"UpdatePDRShortCut"="C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" [2009-05-19 20:16:16 222504]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 14:41:22 45056]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 02:47:04 35760]
"Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 21:07:44 932288]
"avast5"="C:\Program Files\Alwil Software\Avast5\avastUI.exe" [2010-09-07 16:12:02 2838912]
"VMSnap5"="C:\WINDOWS\VMSnap5.EXE" [2006-06-28 16:39:38 49152]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 08:52:18 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-20 21:07:44 932288 -c--a-r- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-09-23 02:47:04 35760 -c--a-w- C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2010-09-01 06:39:18 1164584 -c--a-w- C:\Program Files\DivX\DivX Update\DivXUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 07:52:38 1695232 -c----w- C:\Program Files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 14:57:24 153136 -c--a-w- C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
2007-05-11 01:08:54 2512392 -c--a-w- C:\WINDOWS\system32\oodtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PinnacleDriverCheck]
2003-12-04 10:34:44 406016 -c--a-w- C:\WINDOWS\system32\PSDrvCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2007-04-16 14:28:22 577536 -c--a-w- C:\WINDOWS\soundman.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
2006-11-03 18:20:12 866584 -c--a-w- C:\Program Files\Windows Defender\MSASCui.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\ICQ6.5\\ICQ.exe"=
"C:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"C:\\Program Files\\ICQ7.0\\ICQ.exe"=
"C:\\Program Files\\ICQ7.0\\aolload.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\Program Files\\Rockstar Games\\counter-strike 1.6\\hl.exe"=
"C:\\Program Files\\ToCA Race Driver\\RaceDriver.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
"C:\\Program Files\\formule\\f1_2000.exe"=
"C:\\Program Files\\Ford Racing 3\\fr3.exe"=

R0 d347bus;d347bus;C:\WINDOWS\system32\drivers\d347bus.sys [29.7.2010 12:41:36 155136]
R0 d347prt;d347prt;C:\WINDOWS\system32\drivers\d347prt.sys [29.7.2010 12:41:36 5248]
R0 sptd;sptd;C:\WINDOWS\system32\drivers\sptd.sys [17.1.2010 16:17:16 715248]
R1 aswSP;aswSP;C:\WINDOWS\system32\drivers\aswSP.sys [12.11.2010 22:42:02 165584]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\drivers\aswFsBlk.sys [12.11.2010 22:42:02 17744]
R2 ICQ Service;ICQ Service;C:\Program Files\ICQ6Toolbar\ICQ Service.exe [18.1.2010 17:02:52 246520]
S2 rifzerrn;rifzerrn; [x]
S2 vctxaium;vctxaium;C:\WINDOWS\system32\drivers\vctxaium.sys [26.11.2010 8:33:17 216]
S2 WinDefend;Windows Defender;C:\Program Files\Windows Defender\MsMpEng.exe [3.11.2006 19:19:58 13592]
S3 AF9035HB;AF9035 Hybrid Device;C:\WINDOWS\system32\drivers\AF9035HB.sys [23.9.2010 8:39:52 863616]
S3 mpfbzcvp;mpfbzcvp;\??\C:\WINDOWS\System32\Drivers\mpfbzcvp.sys --> C:\WINDOWS\System32\Drivers\mpfbzcvp.sys [?]
S3 xjonzzfj;xjonzzfj;\??\C:\WINDOWS\System32\Drivers\xjonzzfj.sys --> C:\WINDOWS\System32\Drivers\xjonzzfj.sys [?]
S3 ZSMC0305;Vimicro USB PC Camera (VC0305);C:\WINDOWS\system32\drivers\usbVM305.sys [25.11.2010 22:01:58 391737]
.
Obsah adresáře 'Naplánované úlohy'

2010-11-22 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34:12 . 2008-07-30 10:34:12]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://googleure.com
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - C:\Documents and Settings\Ladislav\Data aplikací\Mozilla\Firefox\Profiles\506go8jn.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - component: C:\Documents and Settings\Ladislav\Data aplikací\Mozilla\Firefox\Profiles\506go8jn.default\extensions\{5D0EC45B-D2E4-4DD0-A5B2-69DDEFE852A8}\components\dtTransparency.dll
FF - component: C:\Program Files\Mozilla Firefox\components\xpinstal.dll
FF - plugin: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
FF - user.js: browser.cache.memory.capacity - 16000
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: content.max.tokenizing.time - 3000000
FF - user.js: content.maxtextrun - 4095
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 1000000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 1000000
FF - user.js: dom.disable_window_status_change - true
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 1000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-SmartRAM - C:\Program Files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe
MSConfigStartUp-Corel File Shell Monitor - C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
MSConfigStartUp-Corel Photo Downloader - C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
MSConfigStartUp-WinampAgent - C:\Program Files\Winamp\winampa.exe


hotovo
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu, mám nejspíš zavirovaný PC

#4 Příspěvek od vyosek »

:arrow: Prejmenujte ComboFix na Beruska.com

:arrow: Pokud nemate, tak presunte Combofix (Berusku) na plochu
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Collect::
C:\WINDOWS\system32\drivers\imsrdzgx.sys
C:\WINDOWS\system32\drivers\btumjuor.sys
C:\WINDOWS\system32\drivers\hprtwpsc.sys
C:\WINDOWS\system32\drivers\kljccnyz.sys
C:\WINDOWS\system32\drivers\mdkncdvm.sys
C:\WINDOWS\system32\drivers\vwqorrif.sys
c:\WINDOWS\system32\drivers\vctxaium.sys
C:\WINDOWS\system32\drivers\fvvifnyc.sys
C:\WINDOWS\vidcap32.Exe
C:\winscxs.exe
C:\jshd.exe
C:\2xhs.exe

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=-
"RocketDock"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=-
"DAEMON Tools-1033"=-
"SunJavaUpdateSched"=-
"DivXUpdate"=-
"UpdatePDRShortCut"=-
"Adobe Reader Speed Launcher"=-
"Adobe ARM"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

Driver::
ICQ Service
rifzerrn
vctxaium
mpfbzcvp
xjonzzfj

File::
C:\WINDOWS\Tasks\AppleSoftwareUpdate.job

Folder::
C:\Program Files\ICQ6Toolbar

DDS::
uStart Page = hxxp://googleure.com
  • Ulozte vytvoreny TXT jako CFScript.txt
  • Pretahnete vytvoreny CFScript.txt nad Combofix (Berusku) a pustte (viz obrazek nize)
    Obrázek
  • Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte
:arrow: Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
petrnavra
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 29 Lis 2010 18:34

Re: Prosím o kontrolu logu, mám nejspíš zavirovaný PC

#5 Příspěvek od petrnavra »

ComboFix 10-11-29.01 - Ladislav 29.11.2010 20:01:15.2.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.639.287 [GMT 1:00]
Spuštěný z: c:\documents and settings\Ladislav\Plocha\Beruska.com
Použité ovládací přepínače :: c:\docume~1\Ladislav\Plocha\CFScript.txt
AV: Microsoft Security Essentials *On-access scanning enabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}

FILE ::
"c:\windows\Tasks\AppleSoftwareUpdate.job"

file zipped: C:\2xhs.exe
file zipped: C:\jshd.exe
file zipped: c:\windows\system32\drivers\btumjuor.sys
file zipped: c:\windows\system32\drivers\fvvifnyc.sys
file zipped: c:\windows\system32\drivers\hprtwpsc.sys
file zipped: c:\windows\system32\drivers\imsrdzgx.sys
file zipped: c:\windows\system32\drivers\kljccnyz.sys
file zipped: c:\windows\system32\drivers\mdkncdvm.sys
file zipped: c:\windows\system32\drivers\vctxaium.sys
file zipped: c:\windows\system32\drivers\vwqorrif.sys
file zipped: c:\windows\vidcap32.Exe
file zipped: C:\winscxs.exe
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\2xhs.exe
C:\jshd.exe
c:\program files\ICQ6Toolbar
c:\program files\ICQ6Toolbar\config.xml
c:\program files\ICQ6Toolbar\Icons.bmp
c:\program files\ICQ6Toolbar\ICQ Service.exe
c:\program files\ICQ6Toolbar\icq6Toolbar.ico
c:\program files\ICQ6Toolbar\ICQToolBar.dll
c:\program files\ICQ6Toolbar\ICQUnToolbar.exe
c:\program files\ICQ6Toolbar\install_semcz_icq65.exe
c:\program files\ICQ6Toolbar\logo_small.gif
c:\program files\ICQ6Toolbar\ServiceStarter.exe
c:\program files\ICQ6Toolbar\short.wav
c:\program files\ICQ6Toolbar\Version.txt
c:\windows\system32\drivers\btumjuor.sys
c:\windows\system32\drivers\fvvifnyc.sys
c:\windows\system32\drivers\hprtwpsc.sys
c:\windows\system32\drivers\imsrdzgx.sys
c:\windows\system32\drivers\kljccnyz.sys
c:\windows\system32\drivers\mdkncdvm.sys
c:\windows\system32\drivers\vctxaium.sys
c:\windows\system32\drivers\vwqorrif.sys
c:\windows\Tasks\AppleSoftwareUpdate.job
c:\windows\vidcap32.Exe
C:\winscxs.exe
.
---- Předchozí spuštění -------
.
C:\21.exe
C:\6164.exe
C:\Autorun.inf
c:\data\WINDOWSDEFENDER.EXE
c:\documents and settings\Ladislav\secupdat.dat
C:\min32.exe
c:\windows\daemon.dll
c:\windows\system32\msconfig.exe
c:\windows\system32\secupdat.dat
c:\windows\VM305Cap.exe

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_mpfbzcvp
-------\Service_rifzerrn
-------\Service_vctxaium
-------\Service_xjonzzfj


((((((((((((((((((((((((( Soubory vytvořené od 2010-10-28 do 2010-11-29 )))))))))))))))))))))))))))))))
.

2010-11-29 18:48 . 2010-11-09 19:33 6273872 -c--a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{7B38B680-F371-4F06-BE54-AC0D127C5F89}\mpengine.dll
2010-11-29 18:45 . 2010-11-29 18:45 -------- dc----w- c:\program files\Microsoft Security Essentials
2010-11-29 17:38 . 2010-11-29 17:39 -------- dc----w- c:\program files\trend micro
2010-11-29 17:38 . 2010-11-29 17:39 -------- dc----w- C:\rsit
2010-11-29 10:59 . 2006-12-13 03:12 407016 -c--a-w- c:\program files\Mozilla Firefox\extensions\talkback@mozilla.org\components\talkback.exe
2010-11-29 10:59 . 2006-12-13 03:12 14432 -c--a-w- c:\program files\Mozilla Firefox\extensions\talkback@mozilla.org\components\qfaservices.dll
2010-11-29 10:59 . 2006-12-13 03:12 156520 -c--a-w- c:\program files\Mozilla Firefox\extensions\talkback@mozilla.org\components\fullsoft.dll
2010-11-29 10:59 . 2006-12-13 03:12 99816 -c--a-w- c:\program files\Mozilla Firefox\extensions\talkback@mozilla.org\components\BrandRes.dll
2010-11-26 07:58 . 2010-11-26 07:58 -------- dc----w- C:\73ffa2532a0a3ac4efa77de0
2010-11-26 07:35 . 2010-11-26 07:37 -------- dc----w- C:\c6de10370373a8a1f3eeff683d7a7d
2010-11-25 21:10 . 2006-10-11 17:40 57344 -c--a-w- c:\windows\Sti305.exe
2010-11-25 21:10 . 2010-11-26 06:59 -------- dc----w- c:\windows\CatRoot
2010-11-25 21:10 . 2010-11-26 06:59 -------- dc----w- c:\windows\EffectResources
2010-11-25 21:10 . 2010-11-26 06:59 -------- dc----w- c:\program files\Vimicro
2010-11-25 21:10 . 2002-07-25 16:06 282624 -c--a-w- c:\program files\Common Files\InstallShield\UpdateService\agent.exe
2010-11-25 21:01 . 2006-06-28 16:39 49152 -c--a-w- c:\windows\VMSnap5.exe
2010-11-25 21:01 . 2005-08-05 17:36 81920 -c--a-w- c:\windows\system32\VM305Sti.dll
2010-11-25 21:01 . 2006-08-10 11:32 391737 -c--a-w- c:\windows\system32\drivers\usbVM305.sys
2010-11-25 21:01 . 2006-07-14 17:23 209041 -c--a-w- c:\windows\system32\VM305Prp.Ax
2010-11-22 18:49 . 2010-11-22 18:49 -------- dc----w- c:\program files\Montezumova pomsta
2010-11-22 15:14 . 2010-11-29 16:25 -------- dc----w- c:\program files\Ford Racing 3
2010-11-22 14:46 . 2010-11-24 18:50 -------- dc----w- c:\program files\formule
2010-11-20 17:29 . 2010-11-20 17:29 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Badoo
2010-11-20 17:25 . 2010-11-20 17:25 -------- dc-h--w- c:\documents and settings\Ladislav\Local Settings\Data aplikací\AlterGeo
2010-11-14 13:58 . 2010-11-14 13:58 -------- dc----w- c:\windows\Performance
2010-11-14 13:58 . 2010-11-14 13:58 -------- dc----w- c:\documents and settings\Ladislav\Local Settings\Data aplikací\Microsoft Corporation
2010-11-13 16:00 . 2010-11-13 16:00 -------- dc----w- c:\documents and settings\Ladislav\Local Settings\Data aplikací\Opera
2010-11-13 15:55 . 2010-11-26 07:10 -------- dc----w- c:\program files\Opera
2010-11-12 19:18 . 2010-11-12 19:18 -------- dc----w- c:\documents and settings\All Users\Data aplikací\{437292BE-95BD-4B12-B699-6D217A03ACAF}
2010-11-12 19:17 . 2010-11-12 19:17 -------- dc----w- c:\program files\Lavasoft
2010-11-12 19:17 . 2010-11-12 19:17 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Lavasoft

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-19 20:51 . 2010-01-17 16:30 222080 -c----w- c:\windows\system32\MpSigStub.exe
2010-09-23 07:39 . 2010-09-23 07:39 863616 -c--a-w- c:\windows\system32\drivers\AF9035HB.sys
2010-09-18 10:23 . 2007-04-03 08:44 974848 -c--a-w- c:\windows\system32\mfc42u.dll
2010-09-18 06:53 . 2008-04-14 08:51 974848 -c--a-w- c:\windows\system32\mfc42.dll
2010-09-18 06:53 . 2008-04-14 08:51 953856 -c--a-w- c:\windows\system32\mfc40u.dll
2010-09-18 06:53 . 2001-10-25 16:00 954368 -c--a-w- c:\windows\system32\mfc40.dll
2010-09-15 03:50 . 2010-05-31 18:24 472808 -c--a-w- c:\windows\system32\deployJava1.dll
2010-09-15 01:29 . 2010-05-31 18:24 73728 -c--a-w- c:\windows\system32\javacpl.cpl
2010-09-09 22:52 . 2010-09-25 12:32 6084944 -c--a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Windows Defender\Definition Updates\{7BD00391-DAF0-463C-B763-CD4C11A2413E}\mpengine.dll
2010-09-09 22:52 . 2010-01-17 16:30 6084944 -c--a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2010-09-01 11:52 . 2008-04-14 08:37 285824 -c--a-w- c:\windows\system32\atmfd.dll
2010-09-01 07:57 . 2008-04-14 07:45 1852800 -c--a-w- c:\windows\system32\win32k.sys
2006-12-13 03:12 . 2010-11-26 07:12 66648 -c--a-w- c:\program files\mozilla firefox\components\jar50.dll
2006-12-13 03:12 . 2010-11-26 07:12 54352 -c--a-w- c:\program files\mozilla firefox\components\jsd3250.dll
2006-12-13 03:12 . 2010-11-26 07:12 34928 -c--a-w- c:\program files\mozilla firefox\components\myspell.dll
2006-12-13 03:12 . 2010-11-26 07:12 46696 -c--a-w- c:\program files\mozilla firefox\components\spellchk.dll
2006-12-13 03:12 . 2010-11-26 07:12 172120 -c--a-w- c:\program files\mozilla firefox\components\xpinstal.dll
.

------- Sigcheck -------

[-] 2008-04-14 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\atapi.sys
[-] 2008-04-14 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\drivers\atapi.sys

[-] 2008-04-14 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\asyncmac.sys
[-] 2008-04-14 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\drivers\asyncmac.sys

[-] 2001-10-25 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys
[-] 2001-10-25 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys

[-] 2008-04-14 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\kbdclass.sys
[-] 2008-04-14 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512] . . c:\windows\system32\drivers\kbdclass.sys

[-] 2008-04-14 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ndis.sys
[-] 2008-04-14 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ndis.sys

[-] 2008-04-14 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ntfs.sys
[-] 2008-04-14 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ntfs.sys

[-] 2001-10-25 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\dllcache\null.sys
[-] 2001-10-25 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys

[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys

[-] 2008-04-14 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512] . . c:\windows\system32\browser.dll
[-] 2008-04-14 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\browser.dll

[-] 2008-04-14 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe
[-] 2008-04-14 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\lsass.exe

[-] 2008-04-14 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512] . . c:\windows\system32\netman.dll
[-] 2008-04-14 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\netman.dll

[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\qmgr.dll
[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\dllcache\qmgr.dll

[-] 2009-02-09 . C0BD34A62508BA68F146E22CE45919F9 . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755] . . c:\windows\system32\rpcss.dll
[-] 2009-02-09 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\rpcss.dll

[-] 2009-02-09 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755] . . c:\windows\system32\services.exe
[-] 2009-02-09 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\services.exe
[-] 2009-02-09 . 3D107D45CCFDB266E91D84B52CD7F430 . 111104 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe

[-] 2008-04-14 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
[-] 2008-04-14 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\winlogon.exe

[-] 2008-04-14 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512] . . c:\windows\system32\cryptsvc.dll
[-] 2008-04-14 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\cryptsvc.dll

[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\system32\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\system32\dllcache\es.dll
[-] 2008-07-07 20:25 . BE68EA4457E2E5717231CF91BE5448E0 . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll

[-] 2008-04-14 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512] . . c:\windows\system32\imm32.dll
[-] 2008-04-14 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\imm32.dll

[-] 2009-03-21 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781] . . c:\windows\system32\kernel32.dll
[-] 2009-03-21 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781] . . c:\windows\system32\dllcache\kernel32.dll
[-] 2009-03-21 . 0D8F61460F84139BBE5E391D8DE18D9A . 990208 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll

[-] 2008-04-14 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\linkinfo.dll
[-] 2008-04-14 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\linkinfo.dll

[-] 2008-04-14 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\lpk.dll
[-] 2008-04-14 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\lpk.dll

[-] 2008-04-14 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512] . . c:\windows\system32\msvcrt.dll
[-] 2008-04-14 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512] . . c:\windows\system32\dllcache\msvcrt.dll
[-] 2008-04-14 . EC8D5E09C6CA5F52858A5EB71F308FDF . 343040 . . [7.0.2600.5512] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
[-] 2001-10-25 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll

[-] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . c:\windows\system32\mswsock.dll
[-] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\mswsock.dll
[-] 2008-06-20 . B6CEC406351EA5EF131416D5F52D006F . 247296 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll

[-] 2008-04-14 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\netlogon.dll
[-] 2008-04-14 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\netlogon.dll

[-] 2008-04-14 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\powrprof.dll
[-] 2008-04-14 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\dllcache\powrprof.dll

[-] 2008-04-14 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512] . . c:\windows\system32\scecli.dll
[-] 2008-04-14 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\scecli.dll

[-] 2008-04-14 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512] . . c:\windows\system32\sfc.dll
[-] 2008-04-14 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\sfc.dll

[-] 2008-04-14 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe
[-] 2008-04-14 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\svchost.exe

[-] 2008-04-14 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512] . . c:\windows\system32\tapisrv.dll
[-] 2008-04-14 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\tapisrv.dll

[-] 2008-04-14 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll
[-] 2008-04-14 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\user32.dll

[-] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . c:\windows\system32\userinit.exe
[-] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\userinit.exe

[-] 2008-04-14 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512] . . c:\windows\system32\ws2_32.dll
[-] 2008-04-14 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ws2_32.dll

[-] 2008-04-14 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\ws2help.dll
[-] 2008-04-14 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ws2help.dll

[-] 2008-04-14 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512] . . c:\windows\explorer.exe
[-] 2008-04-14 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512] . . c:\windows\system32\dllcache\explorer.exe

[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\srsvc.dll

[-] 2008-04-14 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512] . . c:\windows\system32\wscntfy.exe
[-] 2008-04-14 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\wscntfy.exe

[-] 2008-04-14 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512] . . c:\windows\system32\xmlprov.dll
[-] 2008-04-14 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\xmlprov.dll

[-] 2008-04-14 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512] . . c:\windows\system32\eventlog.dll
[-] 2008-04-14 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\eventlog.dll

[-] 2008-04-27 . 1E603EA2A3FDBAE9E5B88A8CB3C03124 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll

[-] 2008-04-14 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe
[-] 2008-04-14 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ctfmon.exe

[-] 2008-04-14 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512] . . c:\windows\system32\shsvcs.dll
[-] 2008-04-14 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512] . . c:\windows\system32\dllcache\shsvcs.dll

[-] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . c:\windows\system32\regsvc.dll
[-] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\regsvc.dll

[-] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . c:\windows\system32\schedsvc.dll
[-] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\schedsvc.dll

[-] 2008-04-14 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512] . . c:\windows\system32\ssdpsrv.dll
[-] 2008-04-14 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ssdpsrv.dll

[-] 2008-04-14 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512] . . c:\windows\system32\termsrv.dll
[-] 2008-04-14 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\termsrv.dll

[-] 2008-04-14 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\appmgmts.dll
[-] 2008-04-14 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\appmgmts.dll

[-] 2001-10-25 . AFDFF022A01F0B11C776F0860C3B282F . 11776 . . [5.1.2600.0] . . c:\windows\system32\dllcache\acpiec.sys
[-] 2001-10-25 . AFDFF022A01F0B11C776F0860C3B282F . 11776 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys

[-] 2008-04-13 19:09 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\dllcache\aec.sys
[-] 2008-04-13 19:09 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\drivers\aec.sys

[-] 2008-04-14 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ip6fw.sys
[-] 2008-04-14 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ip6fw.sys

[-] 2008-04-14 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512] . . c:\windows\system32\msgsvc.dll
[-] 2008-04-14 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\msgsvc.dll

[-] 2008-04-27 11:19 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\mspmsnsv.dll
[-] 2008-04-27 11:19 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\dllcache\mspmsnsv.dll

[-] 2008-04-14 08:51 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . c:\windows\system32\ntmssvc.dll
[-] 2008-04-14 08:51 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . c:\windows\system32\dllcache\ntmssvc.dll

[-] 2008-04-14 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512] . . c:\windows\system32\upnphost.dll
[-] 2008-04-14 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\upnphost.dll

[-] 2008-04-14 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512] . . c:\windows\system32\dsound.dll
[-] 2008-04-14 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512] . . c:\windows\system32\dllcache\dsound.dll
[7] 2004-07-09 03:27 . 033A45AB696EEF481707C2808C806E1A . 381952 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsound.dll

[-] 2008-04-14 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512] . . c:\windows\system32\d3d9.dll
[-] 2008-04-14 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512] . . c:\windows\system32\dllcache\d3d9.dll

[-] 2008-04-14 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512] . . c:\windows\system32\ddraw.dll
[-] 2008-04-14 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512] . . c:\windows\system32\dllcache\ddraw.dll
[7] 2004-07-09 03:27 . 90114704C17A581DA1BAE029F20932BE . 292864 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ddraw.dll

[-] 2008-04-14 08:51 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . c:\windows\system32\olepro32.dll
[-] 2008-04-14 08:51 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\olepro32.dll

[-] 2008-04-14 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512] . . c:\windows\system32\perfctrs.dll
[-] 2008-04-14 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\perfctrs.dll

[-] 2008-04-14 . 614F8186BDAB926E3B1D8927A4161B54 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\version.dll
[-] 2008-04-14 . 614F8186BDAB926E3B1D8927A4161B54 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\version.dll
.
((((((((((((((((((((((((((((( SnapShot@2010-11-29_18.24.00 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-11-29 19:12 . 2010-11-29 19:12 16384 c:\windows\Temp\Perflib_Perfdata_124.dat
+ 2010-11-29 18:45 . 2010-11-29 18:45 47104 c:\windows\Installer\109423.msi
+ 2010-03-25 20:30 . 2010-03-25 20:30 151216 c:\windows\system32\drivers\MpFilter.sys
- 2010-03-25 19:30 . 2010-03-25 19:30 151216 c:\windows\system32\drivers\MpFilter.sys
+ 2010-11-29 18:45 . 2010-11-29 18:45 272384 c:\windows\Installer\10941a.msi
+ 2010-11-29 18:45 . 2010-11-29 18:45 264192 c:\windows\Installer\109414.msi
+ 2010-11-29 18:45 . 2010-11-29 18:45 301056 c:\windows\Installer\10940e.msi
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmartRAM"="c:\program files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe" [BU]
"Badoo Desktop"="c:\documents and settings\All Users\Data aplikací\Badoo\Badoo Desktop\1.2.22.828\Badoo.Desktop.exe" [2010-10-29 983552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 45056]
"VMSnap5"="c:\windows\VMSnap5.EXE" [2006-06-28 49152]
"MSSE"="c:\program files\Microsoft Security Essentials\msseces.exe" [2010-09-15 1094224]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel File Shell Monitor]
c:\program files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe [BU]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel Photo Downloader]
c:\program files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe [BU]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
2007-05-11 01:08 2512392 -c--a-w- c:\windows\system32\oodtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PinnacleDriverCheck]
2003-12-04 10:34 406016 -c--a-w- c:\windows\system32\PSDrvCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2007-04-16 14:28 577536 -c--a-w- c:\windows\soundman.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
c:\program files\Winamp\winampa.exe [BU]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
2006-11-03 18:20 866584 -c--a-w- c:\program files\Windows Defender\MSASCui.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\ICQ7.0\\ICQ.exe"=
"c:\\Program Files\\ICQ7.0\\aolload.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Rockstar Games\\counter-strike 1.6\\hl.exe"=
"c:\\Program Files\\ToCA Race Driver\\RaceDriver.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\formule\\f1_2000.exe"=
"c:\\Program Files\\Ford Racing 3\\fr3.exe"=

R0 d347bus;d347bus;c:\windows\system32\drivers\d347bus.sys [29.7.2010 12:41 155136]
R0 d347prt;d347prt;c:\windows\system32\drivers\d347prt.sys [29.7.2010 12:41 5248]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [17.1.2010 16:17 715248]
S2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [3.11.2006 19:19 13592]
S3 AF9035HB;AF9035 Hybrid Device;c:\windows\system32\drivers\AF9035HB.sys [23.9.2010 8:39 863616]
S3 ZSMC0305;Vimicro USB PC Camera (VC0305);c:\windows\system32\drivers\usbVM305.sys [25.11.2010 22:01 391737]
.
Obsah adresáře 'Naplánované úlohy'

2010-11-29 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Microsoft Security Essentials\MpCmdRun.exe [2010-03-25 20:40]

2010-11-29 c:\windows\Tasks\MpIdleTask.job
- c:\program files\Microsoft Security Essentials\MpCmdRun.exe [2010-03-25 20:40]
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Ladislav\Data aplikací\Mozilla\Firefox\Profiles\506go8jn.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - component: c:\documents and settings\Ladislav\Data aplikací\Mozilla\Firefox\Profiles\506go8jn.default\extensions\{5D0EC45B-D2E4-4DD0-A5B2-69DDEFE852A8}\components\dtTransparency.dll
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
FF - user.js: browser.cache.memory.capacity - 16000
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: content.max.tokenizing.time - 3000000
FF - user.js: content.maxtextrun - 4095
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 1000000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 1000000
FF - user.js: dom.disable_window_status_change - true
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 1000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-29 20:13
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-1454471165-616249376-1417001333-1003\Software\SecuROM\License information*]
"datasecu"=hex:59,86,8a,f2,49,31,23,0e,cc,85,f9,86,cf,dd,78,1c,89,53,4f,77,79,
53,32,5d,b8,2e,ff,cd,77,7e,66,95,5c,53,79,68,08,14,fc,f9,e5,e2,ac,67,cd,67,\
"rkeysecu"=hex:bc,d8,b9,2a,87,94,72,78,74,85,b5,ab,25,d7,cd,76

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):95,15,d2,69,6c,fe,36,27,0b,c1,14,51,89,ee,c6,d0,d8,ba,65,64,b8,
61,19,5b,22,7b,ab,a7,5b,9c,81,1d,e7,28,4a,b9,a1,5c,1f,e6,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e72b34f4-eba8-4c0a-8568-837050512b00}]
@Denied: (Full) (Everyone)
"Model"=dword:00000079
"Therad"=dword:0000001e
"MData"=hex(0):2b,8f,78,29,5a,0c,ce,ec,48,d4,68,e5,9f,6a,96,3e,ab,de,c5,81,26,
38,95,44,29,53,01,52,53,ee,8c,54,13,79,5b,6f,fa,dc,99,d5,83,e0,8b,c5,07,bb,\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
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
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(712)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(2880)
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\wpdshserviceobj.dll
c:\windows\system32\portabledevicetypes.dll
c:\windows\system32\portabledeviceapi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\program files\Microsoft Security Essentials\MsMpEng.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\oodag.exe
c:\windows\system32\PSIService.exe
c:\program files\CyberLink\Shared files\RichVideo.exe
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Celkový čas: 2010-11-29 20:20:26 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-11-29 19:20

Před spuštěním: Volných bajtů: 73 356 566 528
Po spuštění: Volných bajtů: 73 333 284 864

- - End Of File - - FF3E6FCD7D486FFE373A4126F7C00BA2
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu, mám nejspíš zavirovaný PC

#6 Příspěvek od vyosek »

:arrow: Nasledujici soubory otestujte na VirusTotalu (viz muj podpis)
  • c:\windows\system32\svchost.exe
    c:\windows\system32\lsass.exe
    c:\windows\system32\drivers\atapi.sys
  • Kliknete na Prochazet
  • Soubor nehledejte, jen vlozte cestu souboru, ktery chci otestovat
  • Kliknete na Send File
  • Pokud na Vas vyskoci obrazovka jako je nize, tak kliknete na ReAnalyse
    Obrázek
  • Vysledek analyzy sem vlozte (jako odkaz)
:arrow: Napiste jak se chova PC
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
petrnavra
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 29 Lis 2010 18:34

Re: Prosím o kontrolu logu, mám nejspíš zavirovaný PC

#7 Příspěvek od petrnavra »

pánové mockkrát vám děkuju, už vás nebudu dál zdržovat.. jako vdycky jste i pomohli a oceňuju vaši práci.. Počíta běží parádně
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu, mám nejspíš zavirovaný PC

#8 Příspěvek od vyosek »

Jeste mi neutikejte -musime uklidit po utilitach, preci Vam tam nebudou strasit :D

:arrow: Pro muj klid mi prosim ty tri soubory, neprosli detekci na digitalni podpis :(

:arrow: T-Cleaner http://sweb.cz/Marinus/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner (viz muj podpis)
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za 14 dni
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Vrátit se na „Řešení problémů, logy“