Win32/olmarik

[motji]

Není zač

[kokes22]

Zdravim.
jak tak sleduji PC zdá se i že PC nějak moc počítá i když nejsou spuštěny žádné náročné aplikace. jedno jádro CPU jede stále cca 80 - 90%. myslím si že před napadením jádra byla na cca 20-30%. Všiml jsem si toho poměvadž je PC hlučnější. Ventilátoru neklesnou otáčky ani při nečinnosti na PC. nevím zda totok patří sem.
Děkuji

[motji]

Koukneme na to.

Stahněte z mého podpisu AVPTOOl http://www.viry.cz/forum/viewtopic.php?f=29&t=58179

-Podle návodu nainstalujte a proveďte sken
-co najde nechejte léčit, mazat
-sken může trvat několik hodin
-vložte zde log z výsledky

[kokes22]

zdravím
tak nyní se dokobcil

Automatická kontrola: dokončeno před 4 min. (události: 94, objekty: 1397568, čas: 11:53:49)
23.1.2011 12:37:20 Úloha byla spuštěna
23.1.2011 13:14:01 Zjištěno: Trojan-Dropper.Win32.VB.ativ C:\Users\Kocourek_Mourek\Desktop\ESET_Nod32_Keys_Finder_V7.exe/#
23.1.2011 13:14:05 Odstraněno: Trojan-Dropper.Win32.VB.ativ C:\Users\Kocourek_Mourek\Desktop\ESET_Nod32_Keys_Finder_V7.exe
23.1.2011 13:14:05 Odstraněno: Trojan-Dropper.Win32.VB.ativ C:\Users\Kocourek_Mourek\Desktop\ESET_Nod32_Keys_Finder_V7.exe
23.1.2011 13:38:36 Zjištěno: Trojan.Win32.DelFiles.mj C:\Documents and Settings\Kocourek_Mourek\Downloads\T-Cleaner.exe
23.1.2011 13:39:09 Odstraněno: Trojan.Win32.DelFiles.mj C:\Documents and Settings\Kocourek_Mourek\Downloads\T-Cleaner.exe
23.1.2011 13:43:15 Zjištěno: Trojan-Downloader.Win32.Small.ayxx C:\Documents and Settings\Kocourek_Mourek\Downloads\DVD_X_Studios_CloneDVD_4.2.5.0_CZ\DVD X Studios CloneDVD 4.2.5.0 CZ\KEYGEN.rar/KEYGEN/Keygen.exe
23.1.2011 13:43:15 Neošetřeno: Trojan-Downloader.Win32.Small.ayxx C:\Documents and Settings\Kocourek_Mourek\Downloads\DVD_X_Studios_CloneDVD_4.2.5.0_CZ\DVD X Studios CloneDVD 4.2.5.0 CZ\KEYGEN.rar/KEYGEN/Keygen.exe Zápis není podporován
23.1.2011 13:54:00 Zjištěno: not-a-virus:Porn-Tool.Win32.StripDance.c C:\pchd\download\nseEDDB.tmp/data0007
23.1.2011 13:54:51 Zjištěno: not-a-virus:Porn-Tool.Win32.StripDance.c C:\pchd\download\nseEDDB.tmp/data0008
23.1.2011 13:54:52 Odstraněno: not-a-virus:Porn-Tool.Win32.StripDance.c C:\pchd\download\nseEDDB.tmp
23.1.2011 13:55:03 Zjištěno: not-a-virus:Porn-Tool.Win32.StripDance.c C:\pchd\download\nswBF5B.tmp/data0007
23.1.2011 13:55:05 Zjištěno: not-a-virus:Porn-Tool.Win32.StripDance.c C:\pchd\download\nswBF5B.tmp/data0008
23.1.2011 13:55:07 Odstraněno: not-a-virus:Porn-Tool.Win32.StripDance.c C:\pchd\download\nswBF5B.tmp
23.1.2011 14:17:06 Zjištěno: Trojan-Downloader.Win32.Small.ayxx C:\Users\Kocourek_Mourek\Downloads\DVD_X_Studios_CloneDVD_4.2.5.0_CZ\DVD X Studios CloneDVD 4.2.5.0 CZ\KEYGEN.rar/KEYGEN/Keygen.exe
23.1.2011 14:17:06 Neošetřeno: Trojan-Downloader.Win32.Small.ayxx C:\Users\Kocourek_Mourek\Downloads\DVD_X_Studios_CloneDVD_4.2.5.0_CZ\DVD X Studios CloneDVD 4.2.5.0 CZ\KEYGEN.rar/KEYGEN/Keygen.exe Zápis není podporován
23.1.2011 14:35:20 Zjištěno: HEUR:Trojan.Win32.Generic C:\Windows\System32\iscsidscv.dll
23.1.2011 16:49:37 Zjištěno: Trojan-Dropper.Win32.VB.ativ D:\Documents and Settings\Bublifuk\Plocha\ESET_Nod32_Keys_Finder_V7.exe/#
23.1.2011 16:51:27 Odstraněno: Trojan-Dropper.Win32.VB.ativ D:\Documents and Settings\Bublifuk\Plocha\ESET_Nod32_Keys_Finder_V7.exe
23.1.2011 16:55:04 Zjištěno: Trojan.Win32.Agent2.cnvc D:\Documents and Settings\Bublifuk\Plocha\Filmy\Tahavec\ts3hels-lksi.rar/keygen.exe
23.1.2011 16:55:04 Neošetřeno: Trojan.Win32.Agent2.cnvc D:\Documents and Settings\Bublifuk\Plocha\Filmy\Tahavec\ts3hels-lksi.rar/keygen.exe Zápis není podporován
23.1.2011 17:32:54 Zjištěno: Flooder.Win32.Delf.eg D:\Documents and Settings\Bublifuk\Plocha\Nástroje\avi.fix.joiner.v2.11.cracked-icu\avifixjoiner.exe
23.1.2011 17:32:54 Zjištěno: Flooder.Win32.Delf.en D:\Documents and Settings\Bublifuk\Plocha\Nástroje\avi.fix.joiner.v2.11.cracked-icu\afjSetup.exe/WISE0013.BIN
23.1.2011 17:33:38 Odstraněno: Flooder.Win32.Delf.eg D:\Documents and Settings\Bublifuk\Plocha\Nástroje\avi.fix.joiner.v2.11.cracked-icu\avifixjoiner.exe
23.1.2011 17:33:58 Odstraněno: Flooder.Win32.Delf.en D:\Documents and Settings\Bublifuk\Plocha\Nástroje\avi.fix.joiner.v2.11.cracked-icu\afjSetup.exe
23.1.2011 17:38:33 Zjištěno: Flooder.Win32.Delf.eg D:\Program Files\AviFixJoiner\avifixjoiner.exe
23.1.2011 17:39:28 Odstraněno: Flooder.Win32.Delf.eg D:\Program Files\AviFixJoiner\avifixjoiner.exe
23.1.2011 18:05:25 Zjištěno: Exploit.Win32.MS05-016.h D:\TTN7\patcher\Patcher.exe
23.1.2011 18:06:30 Odstraněno: Exploit.Win32.MS05-016.h D:\TTN7\patcher\Patcher.exe
23.1.2011 19:58:50 Zjištěno: not-a-virus:Porn-Tool.Win32.Agent.xo F:\Instal_2010\Win_7_Aktivator.rar/Win_7_Aktivator/Win7_Akt/Aktivace1_3-2010/Windows 7 All PlusPatch 10.0 By Orbit30.exe/setup.exe
23.1.2011 19:58:50 Neošetřeno: not-a-virus:Porn-Tool.Win32.Agent.xo F:\Instal_2010\Win_7_Aktivator.rar/Win_7_Aktivator/Win7_Akt/Aktivace1_3-2010/Windows 7 All PlusPatch 10.0 By Orbit30.exe/setup.exe Zápis není podporován
23.1.2011 19:59:26 Zjištěno: Trojan-Dropper.Win32.VB.anqi F:\Instal_2010\Win_7_Aktivator.rar/Win_7_Aktivator/Win7_Akt/Aktiv tor k 32idiot…m/Vis7slic.exe
23.1.2011 19:59:27 Neošetřeno: Trojan-Dropper.Win32.VB.anqi F:\Instal_2010\Win_7_Aktivator.rar/Win_7_Aktivator/Win7_Akt/Aktiv tor k 32idiot…m/Vis7slic.exe Zápis není podporován
23.1.2011 20:01:15 Zjištěno: Trojan.Win32.Rozena.dyl F:\Instal_2010\Win_7_Aktivator.rar/Win_7_Aktivator/Win7_Akt/Win_Akt_04_2010/revt/revt/RemoveWAT22.exe
23.1.2011 20:01:15 Neošetřeno: Trojan.Win32.Rozena.dyl F:\Instal_2010\Win_7_Aktivator.rar/Win_7_Aktivator/Win7_Akt/Win_Akt_04_2010/revt/revt/RemoveWAT22.exe Zápis není podporován
23.1.2011 20:01:23 Zjištěno: Trojan.Win32.Rozena.dyl F:\Instal_2010\Win_7_Aktivator.rar/Win_7_Aktivator/Win7_Akt/Win_Akt_04_2010/revt/revt/RemoveWAT22.rar/RemoveWAT22.exe
23.1.2011 20:01:23 Neošetřeno: Trojan.Win32.Rozena.dyl F:\Instal_2010\Win_7_Aktivator.rar/Win_7_Aktivator/Win7_Akt/Win_Akt_04_2010/revt/revt/RemoveWAT22.rar/RemoveWAT22.exe Zápis není podporován
23.1.2011 20:12:40 Zjištěno: Trojan.Win32.Agent.gvgw F:\Instal_2010\OFFICE_2010\OFFICE\Crack-Serial\Legalizuj Office 2007.exe
23.1.2011 20:13:33 Odstraněno: Trojan.Win32.Agent.gvgw F:\Instal_2010\OFFICE_2010\OFFICE\Crack-Serial\Legalizuj Office 2007.exe
23.1.2011 20:22:51 Zjištěno: not-a-virus:Porn-Tool.Win32.Agent.xo F:\Instal_2010\Win_7_Aktivator\Win7_Akt\Aktivace1_3-2010\Windows 7 All PlusPatch 10.0 By Orbit30.exe/setup.exe
23.1.2011 20:23:31 Odstraněno: not-a-virus:Porn-Tool.Win32.Agent.xo F:\Instal_2010\Win_7_Aktivator\Win7_Akt\Aktivace1_3-2010\Windows 7 All PlusPatch 10.0 By Orbit30.exe
23.1.2011 20:23:35 Zjištěno: Trojan-Dropper.Win32.VB.anqi F:\Instal_2010\Win_7_Aktivator\Win7_Akt\Aktivátor k 32idiotům\Vis7slic.exe
23.1.2011 20:23:36 Odstraněno: Trojan-Dropper.Win32.VB.anqi F:\Instal_2010\Win_7_Aktivator\Win7_Akt\Aktivátor k 32idiotům\Vis7slic.exe
23.1.2011 20:23:42 Zjištěno: Trojan.Win32.Rozena.dyl F:\Instal_2010\Win_7_Aktivator\Win7_Akt\Win_Akt_04_2010\revt\revt\RemoveWAT22.rar/RemoveWAT22.exe
23.1.2011 20:23:42 Neošetřeno: Trojan.Win32.Rozena.dyl F:\Instal_2010\Win_7_Aktivator\Win7_Akt\Win_Akt_04_2010\revt\revt\RemoveWAT22.rar/RemoveWAT22.exe Zápis není podporován
23.1.2011 20:24:02 Zjištěno: Trojan.Win32.Rozena.dyl F:\Instal_2010\Win_7_Aktivator\Win7_Akt\Win_Akt_04_2010\revt\revt\RemoveWAT22.exe
23.1.2011 20:24:04 Odstraněno: Trojan.Win32.Rozena.dyl F:\Instal_2010\Win_7_Aktivator\Win7_Akt\Win_Akt_04_2010\revt\revt\RemoveWAT22.exe
23.1.2011 20:30:15 Zjištěno: not-a-virus:AdWare.Win32.CommonName.bn G:\FreeAgent\PŘEINSTALACE-SOFT\CD\Clone CD\CLONECD 4013\SetupCloneCD4013.exe
23.1.2011 20:30:22 Zjištěno: not-a-virus:AdWare.Win32.CommonName.bk G:\FreeAgent\PŘEINSTALACE-SOFT\CD\Clone CD\CLONECD 4013\SetupCloneCDLangPack4013.exe
23.1.2011 20:30:55 Zjištěno: not-a-virus:AdWare.Win32.CommonName.be G:\FreeAgent\PŘEINSTALACE-SOFT\CD\Clone CD\soubor17.zip/SetupCloneCD4101.exe
23.1.2011 20:30:56 Odstraněno: not-a-virus:AdWare.Win32.CommonName.be G:\FreeAgent\PŘEINSTALACE-SOFT\CD\Clone CD\soubor17.zip/SetupCloneCD4101.exe
23.1.2011 20:31:03 Zjištěno: Trojan-PSW.Win32.Agent.mqn G:\FreeAgent\PŘEINSTALACE-SOFT\Daemon_Tools\Daemon\DAEMON-p-egydown.rar/DAEMON.Tools.Pro.Advanced.v4.30.304.47/DAEMON.Tools.Pro.Advanced.v4.30.304.47/DTPro4300304.exe
23.1.2011 20:31:03 Neošetřeno: Trojan-PSW.Win32.Agent.mqn G:\FreeAgent\PŘEINSTALACE-SOFT\Daemon_Tools\Daemon\DAEMON-p-egydown.rar/DAEMON.Tools.Pro.Advanced.v4.30.304.47/DAEMON.Tools.Pro.Advanced.v4.30.304.47/DTPro4300304.exe Zápis není podporován
23.1.2011 20:31:07 Odstraněno: not-a-virus:AdWare.Win32.CommonName.bk G:\FreeAgent\PŘEINSTALACE-SOFT\CD\Clone CD\CLONECD 4013\SetupCloneCDLangPack4013.exe
23.1.2011 20:31:09 Odstraněno: not-a-virus:AdWare.Win32.CommonName.bn G:\FreeAgent\PŘEINSTALACE-SOFT\CD\Clone CD\CLONECD 4013\SetupCloneCD4013.exe
23.1.2011 20:31:37 Zjištěno: Trojan.Win32.Agent.dexh G:\FreeAgent\PŘEINSTALACE-SOFT\DVD\DVDFab\DVD_FAB4.1.rar/DVD_FAB/DVDFab Platinum 4.1.0.2 - Final GhostHunter/DVDFabPlatinum4102GhostHunter.exe/data0000
23.1.2011 20:31:37 Neošetřeno: Trojan.Win32.Agent.dexh G:\FreeAgent\PŘEINSTALACE-SOFT\DVD\DVDFab\DVD_FAB4.1.rar/DVD_FAB/DVDFab Platinum 4.1.0.2 - Final GhostHunter/DVDFabPlatinum4102GhostHunter.exe/data0000 Zápis není podporován
23.1.2011 20:36:11 Zjištěno: Trojan.Win32.Genome.jjbf G:\FreeAgent\PŘEINSTALACE-SOFT\legalizátory\Fuck_Bill_upload_Server2003.rar/valid.wga.new.exe/#
23.1.2011 20:36:11 Neošetřeno: Trojan.Win32.Genome.jjbf G:\FreeAgent\PŘEINSTALACE-SOFT\legalizátory\Fuck_Bill_upload_Server2003.rar/valid.wga.new.exe/# Zápis není podporován
23.1.2011 20:37:47 Zjištěno: Backdoor.Win32.Ciadoor.cfu G:\FreeAgent\PŘEINSTALACE-SOFT\legalizátory\Mrkvosot\Hacking Mrkvosoft\WinGenuineFixHacksActivateAIO.exe/#/Activation Patch For Windows Vista 5308 WinReg.ARN.2006.exe
23.1.2011 20:38:27 Zjištěno: Trojan.Win32.Agent.gvgw G:\FreeAgent\PŘEINSTALACE-SOFT\OFFICE2007\OFFFICE07_09\office 2007 pro.iso/Crack-Serial/Legalizuj Office 2007.exe;1
23.1.2011 20:38:27 Neošetřeno: Trojan.Win32.Agent.gvgw G:\FreeAgent\PŘEINSTALACE-SOFT\OFFICE2007\OFFFICE07_09\office 2007 pro.iso/Crack-Serial/Legalizuj Office 2007.exe;1 Zápis není podporován
23.1.2011 20:38:39 Odstraněno: Backdoor.Win32.Ciadoor.cfu G:\FreeAgent\PŘEINSTALACE-SOFT\legalizátory\Mrkvosot\Hacking Mrkvosoft\WinGenuineFixHacksActivateAIO.exe
23.1.2011 20:39:13 Zjištěno: Trojan.Win32.Agent.gvgw G:\FreeAgent\PŘEINSTALACE-SOFT\OFFICE2007\OFFFICE07_09\OFFICE.rar/OFFICE/Crack-Serial/Legalizuj Office 2007.exe
23.1.2011 20:39:13 Neošetřeno: Trojan.Win32.Agent.gvgw G:\FreeAgent\PŘEINSTALACE-SOFT\OFFICE2007\OFFFICE07_09\OFFICE.rar/OFFICE/Crack-Serial/Legalizuj Office 2007.exe Zápis není podporován
23.1.2011 20:39:25 Zjištěno: Trojan.Win32.Agent.gvgw G:\FreeAgent\PŘEINSTALACE-SOFT\OFFICE2007\OFFFICE07_09\OFFICE\Crack-Serial\Legalizuj Office 2007.exe
23.1.2011 20:39:28 Odstraněno: Trojan.Win32.Agent.gvgw G:\FreeAgent\PŘEINSTALACE-SOFT\OFFICE2007\OFFFICE07_09\OFFICE\Crack-Serial\Legalizuj Office 2007.exe
23.1.2011 20:47:11 Zjištěno: Hoax.Win32.Agent.qn G:\FreeAgent\PŘEINSTALACE-SOFT\SERVIS\nod32\NOD32_10_7_09\TNodUP_10_FINAL.rar/TNodUP10-Installer.exe/2
23.1.2011 20:47:11 Neošetřeno: Hoax.Win32.Agent.qn G:\FreeAgent\PŘEINSTALACE-SOFT\SERVIS\nod32\NOD32_10_7_09\TNodUP_10_FINAL.rar/TNodUP10-Installer.exe/2 Zápis není podporován
23.1.2011 20:48:19 Zjištěno: Trojan-PSW.Win32.Agent.mqn G:\FreeAgent\PŘEINSTALACE-SOFT\SERVIS\nod32\NOD4_32_10_7_09\ESET.NOD.32-V.4.0.314%2BPatch%2BSerail.rar/ESET.NOD.32-V.4.0.314+Patch+Serail/ESET.NOD.32-V.4.0.314-32Bit-abu137-/NOD32view4_00.exe
23.1.2011 20:48:19 Neošetřeno: Trojan-PSW.Win32.Agent.mqn G:\FreeAgent\PŘEINSTALACE-SOFT\SERVIS\nod32\NOD4_32_10_7_09\ESET.NOD.32-V.4.0.314%2BPatch%2BSerail.rar/ESET.NOD.32-V.4.0.314+Patch+Serail/ESET.NOD.32-V.4.0.314-32Bit-abu137-/NOD32view4_00.exe Zápis není podporován
23.1.2011 20:48:26 Zjištěno: Trojan-PSW.Win32.Agent.mqn G:\FreeAgent\PŘEINSTALACE-SOFT\SERVIS\nod32\NOD4_32_10_7_09\ESET.NOD.32-V.4.0.314%2BPatch%2BSerail.rar/ESET.NOD.32-V.4.0.314+Patch+Serail/ESET.NOD.32-V.4.0.314-32Bit-abu137-/serials.exe
23.1.2011 20:48:26 Neošetřeno: Trojan-PSW.Win32.Agent.mqn G:\FreeAgent\PŘEINSTALACE-SOFT\SERVIS\nod32\NOD4_32_10_7_09\ESET.NOD.32-V.4.0.314%2BPatch%2BSerail.rar/ESET.NOD.32-V.4.0.314+Patch+Serail/ESET.NOD.32-V.4.0.314-32Bit-abu137-/serials.exe Zápis není podporován
23.1.2011 20:48:29 Zjištěno: Hoax.Win32.Agent.qn G:\FreeAgent\PŘEINSTALACE-SOFT\SERVIS\nod32\NOD4_32_10_7_09\TNodUP_10_FINAL.rar/TNodUP10-Installer.exe/2
23.1.2011 20:48:29 Neošetřeno: Hoax.Win32.Agent.qn G:\FreeAgent\PŘEINSTALACE-SOFT\SERVIS\nod32\NOD4_32_10_7_09\TNodUP_10_FINAL.rar/TNodUP10-Installer.exe/2 Zápis není podporován
23.1.2011 20:48:36 Zjištěno: Hoax.Win32.Agent.qn G:\FreeAgent\PŘEINSTALACE-SOFT\SERVIS\nod32\NOD32_10_7_09\TNodUP_10_FINAL\TNodUP10-Installer.exe/2
23.1.2011 20:49:20 Odstraněno: Hoax.Win32.Agent.qn G:\FreeAgent\PŘEINSTALACE-SOFT\SERVIS\nod32\NOD32_10_7_09\TNodUP_10_FINAL\TNodUP10-Installer.exe
23.1.2011 20:49:21 Zjištěno: Hoax.Win32.Agent.qn G:\FreeAgent\PŘEINSTALACE-SOFT\SERVIS\nod32\NOD4_32_10_7_09\TNodUP_10_FINAL\TNodUP10-Installer.exe/2
23.1.2011 20:49:22 Odstraněno: Hoax.Win32.Agent.qn G:\FreeAgent\PŘEINSTALACE-SOFT\SERVIS\nod32\NOD4_32_10_7_09\TNodUP_10_FINAL\TNodUP10-Installer.exe
23.1.2011 20:49:25 Zjištěno: P2P-Worm.Win32.Kapucen.b G:\FreeAgent\PŘEINSTALACE-SOFT\SERVIS\Tune_up_2008\TuneUp Utilities 2008 + keygen Deutsch updated-fixed 12-2007.rar/setup.exe
23.1.2011 20:49:25 Neošetřeno: P2P-Worm.Win32.Kapucen.b G:\FreeAgent\PŘEINSTALACE-SOFT\SERVIS\Tune_up_2008\TuneUp Utilities 2008 + keygen Deutsch updated-fixed 12-2007.rar/setup.exe Zápis není podporován
23.1.2011 20:50:29 Zjištěno: Exploit.Win32.MS05-016.h G:\FreeAgent\PŘEINSTALACE-SOFT\TomTom\TomTom7\tomtom7 crack updated-fixed 03-2008.zip/tomtom7 crack/crackmapv7/crack map v7/crack map v7.zip/Patcher.exe
23.1.2011 20:50:29 Odstraněno: Exploit.Win32.MS05-016.h G:\FreeAgent\PŘEINSTALACE-SOFT\TomTom\TomTom7\tomtom7 crack updated-fixed 03-2008.zip/tomtom7 crack/crackmapv7/crack map v7/crack map v7.zip/Patcher.exe
23.1.2011 20:50:31 Zjištěno: Exploit.Win32.MS05-016.h G:\FreeAgent\PŘEINSTALACE-SOFT\TomTom\TomTom7\tomtom7 crack.zip/tomtom7 crack/crackmapv7/crack map v7/crack map v7.zip/Patcher.exe
23.1.2011 20:50:31 Odstraněno: Exploit.Win32.MS05-016.h G:\FreeAgent\PŘEINSTALACE-SOFT\TomTom\TomTom7\tomtom7 crack.zip/tomtom7 crack/crackmapv7/crack map v7/crack map v7.zip/Patcher.exe
23.1.2011 20:50:33 Zjištěno: Exploit.Win32.MS05-016.h G:\FreeAgent\PŘEINSTALACE-SOFT\TomTom\TomTom7\tomtom7 keygen maps italia 710.1571.zip/crack map v7/Patcher.exe
23.1.2011 20:50:33 Odstraněno: Exploit.Win32.MS05-016.h G:\FreeAgent\PŘEINSTALACE-SOFT\TomTom\TomTom7\tomtom7 keygen maps italia 710.1571.zip/crack map v7/Patcher.exe
23.1.2011 22:28:49 Zjištěno: Trojan-Downloader.Win32.Agent.egjr H:\Inst_Hry\Arcade Games\114 Reflexive Arcade Games.iso/The 114 Games/Feeding Frenzy.exe/data0000/data0002
23.1.2011 22:28:49 Neošetřeno: Trojan-Downloader.Win32.Agent.egjr H:\Inst_Hry\Arcade Games\114 Reflexive Arcade Games.iso/The 114 Games/Feeding Frenzy.exe/data0000/data0002 Zápis není podporován
23.1.2011 23:10:38 Zjištěno: Trojan-Dropper.Win32.Delf.fto H:\Inst_Hry\FEAR-extraction.CZ\f.e.a.r\F.E.A.R.V1.04.ENG.UNLEASHED.NOCD.ZIP/FEAR.exe
23.1.2011 23:10:38 Odstraněno: Trojan-Dropper.Win32.Delf.fto H:\Inst_Hry\FEAR-extraction.CZ\f.e.a.r\F.E.A.R.V1.04.ENG.UNLEASHED.NOCD.ZIP/FEAR.exe
23.1.2011 23:51:31 Zjištěno: Trojan-Dropper.Win32.Agent.braw H:\Win7_Them_aktiv\Theme_Win7\Theme_for _Win 7\Setup.exe/0
23.1.2011 23:53:04 Odstraněno: Trojan-Dropper.Win32.Agent.braw H:\Win7_Them_aktiv\Theme_Win7\Theme_for _Win 7\Setup.exe
24.1.2011 0:31:09 Úloha byla dokončena

[motji]

POkud budete mít pc plný cracků a keygenů, tak se nedivte, že ho máte pořád zavirovaný.
Poprosím o nový log ze Rsitu, jak je na tom počítač?

[kokes22]

Zdravím a jsou to skutečně vejřííí?? nebo se jen tak tváří.
Scan pošlu večer

[motji]

To Vám neřeknu, ale je to potencionální zdroj infekce, což je na bezpečnostním foru nežádoucí.

[kokes22]

O.K. uvedu to napravou míru.

[kokes22]

Zde zasílám log RSIT

Logfile of random's system information tool 1.08 (written by random/random)
Run by Kocourek_Mourek at 2011-01-24 18:26:55
Microsoft Windows 7 Ultimate
System drive C: has 81 GB (67%) free of 120 GB
Total RAM: 3327 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:27:07, on 24.1.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
C:\Genius\ioCentre\gTaskBar.exe
C:\Program Files\Hard Drive Inspector\HDInspector.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Genius\ioCentre\gMouseTask.exe
C:\Genius\ioCentre\gKbdTask.exe
C:\Genius\ioCentre\gIoCentreFunMgm.exe
C:\Users\Kocourek_Mourek\Desktop\Virus Removal Tool\setup_9.0.0.722_23.01.2011_12-47\setup_9.0.0.722_23.01.2011_12-47.exe
C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe
C:\Program Files\ASUS\GamerOSD\ATKFastUserSwitching.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\EPU-6 Engine\SixEngine.exe
C:\Program Files\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe
C:\Users\Kocourek_Mourek\Downloads\RSIT.exe
C:\Program Files\trend micro\Kocourek_Mourek.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=;ftp=;https=;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [ASUSGamerOSD] C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
O4 - HKLM\..\Run: [ioCentre] C:\Genius\ioCentre\gTaskBar.exe
O4 - HKLM\..\Run: [HDInspector.exe] C:\Program Files\Hard Drive Inspector\HDInspector.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - Startup: setup_9.0.0.722_23.01.2011_12-47.lnk = Kocourek_Mourek\Desktop\Virus Removal Tool\setup_9.0.0.722_23.01.2011_12-47\startup.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://juniper.net/dana-cached/sc/Juni ... Client.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{4BB97CB0-DA71-4363-9CE6-750702AB91EA}: NameServer = 81.19.5.10,81.19.5.11
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
O23 - Service: ASDR - Unknown owner - C:\Windows\System32\ASDR.exe
O23 - Service: ASUS System Control Service (AsSysCtrlService) - Unknown owner - C:\Program Files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
O23 - Service: ATK Fast User Switch Service (ATKFUSService) - ASUSTeK COMPUTER INC. - C:\Windows\system32\ATKFUSService.exe
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: GeniusMouseService - Unknown owner - C:\Genius\ioCentre\GMouseService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HDD Information Service (HDDSvc) - AltrixSoft (http://www.altrixsoft.com/) - C:\Program Files\Common Files\AltrixSoft\HDDInfoService\HDDSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NitroPDFDriverCreatorReadSpool (NitroDriverReadSpool) - Nitro PDF Software - C:\Program Files\Nitro PDF\Professional\NitroPDFDriverService.exe
O23 - Service: NLS Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\system32\NLSSRV32.EXE
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: SolidConverterPDFReadSpool (SCPDFReadSpool) - Solid Documents, LLC - C:\Windows\Installer\MSI5049.tmp
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

--
End of file - 10299 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2010-05-10 798771]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-09-22 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-23 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2010-05-10 798771]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-02-22 2140880]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-03-13 8546848]
"ASUSGamerOSD"=C:\Program Files\ASUS\GamerOSD\GamerOSD.exe [2009-07-30 380928]
"ioCentre"=C:\Genius\ioCentre\gTaskBar.exe [2009-09-03 61440]
"HDInspector.exe"=C:\Program Files\Hard Drive Inspector\HDInspector.exe [2010-12-23 943864]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-07-22 402432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SolidWorks_CheckForUpdates]
C:\Program Files\Common Files\Manažer instalací SolidWorks\Scheduler\sldIMScheduler.exe [2008-09-16 7218472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
H:\Hry\GTR Evolution\Steam.exe [2010-12-20 1242448]

C:\Users\Kocourek_Mourek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
setup_9.0.0.722_23.01.2011_12-47.lnk - C:\Users\Kocourek_Mourek\Desktop\Virus Removal Tool\setup_9.0.0.722_23.01.2011_12-47\startup.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2009-07-14 229376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll [2010-08-30 233888]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe"="C:\Program Files\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe:*:Enabled:Logitech Harmony Remote Software 7"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\Program Files\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe"="C:\Program Files\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe:*:Enabled:Logitech Harmony Remote Software 7"

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2011-01-23 21:39:46 ----D---- C:\Windows\cs
2011-01-23 21:26:59 ----A---- C:\Windows\system32\UIRibbonRes.dll
2011-01-23 21:26:59 ----A---- C:\Windows\system32\UIRibbon.dll
2011-01-23 12:13:18 ----D---- C:\ProgramData\Kaspersky Lab
2011-01-23 12:12:03 ----A---- C:\Windows\ntbtlog.txt
2011-01-23 12:12:00 ----A---- C:\Windows\system32\drivers\90020302.sys
2011-01-23 12:12:00 ----A---- C:\Windows\system32\drivers\90020301.sys
2011-01-23 12:12:00 ----A---- C:\Windows\system32\drivers\9002030.sys
2011-01-22 10:12:45 ----D---- C:\Program Files\Defraggler
2011-01-19 18:00:42 ----D---- C:\rsit
2011-01-19 18:00:42 ----D---- C:\Program Files\trend micro
2011-01-16 14:22:45 ----SHD---- C:\Config.Msi
2011-01-16 10:23:54 ----SHD---- C:\$RECYCLE.BIN
2011-01-16 10:23:09 ----D---- C:\Windows\temp
2011-01-15 10:11:20 ----D---- C:\Users\Kocourek_Mourek\AppData\Roaming\Malwarebytes
2011-01-15 10:11:14 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2011-01-15 10:11:13 ----D---- C:\ProgramData\Malwarebytes
2011-01-15 10:11:10 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-01-15 10:11:10 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-01-15 10:03:05 ----D---- C:\Program Files\Armor2net
2011-01-13 22:25:38 ----D---- C:\Program Files\Enigma Software Group
2011-01-13 22:25:25 ----D---- C:\Windows\41EBC322660F4D16A0DF53147210CBDB.TMP
2011-01-12 18:14:58 ----A---- C:\Windows\system32\odbc32.dll
2011-01-12 18:14:57 ----A---- C:\Windows\system32\XpsPrint.dll
2011-01-12 18:14:57 ----A---- C:\Windows\system32\FntCache.dll
2011-01-12 18:14:57 ----A---- C:\Windows\system32\DWrite.dll
2011-01-12 18:14:57 ----A---- C:\Windows\system32\d3d10warp.dll
2011-01-12 18:14:57 ----A---- C:\Windows\system32\d2d1.dll
2011-01-12 18:14:56 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-01-12 18:14:56 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-01-12 18:14:56 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-01-12 18:14:56 ----A---- C:\Windows\system32\cdd.dll
2011-01-12 18:14:55 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-01-12 18:14:55 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-01-12 18:14:55 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-01-12 18:14:55 ----A---- C:\Windows\system32\d3d10_1.dll
2011-01-10 18:43:15 ----D---- C:\Program Files\Promixis
2011-01-09 09:34:26 ----D---- C:\Program Files\GNU
2011-01-07 20:19:43 ----D---- C:\Users\Kocourek_Mourek\AppData\Roaming\PlatinumHideIP
2011-01-07 20:19:43 ----D---- C:\ProgramData\PlatinumHideIP
2011-01-07 20:18:51 ----D---- C:\Program Files\PlatinumHideIP
2011-01-07 19:58:38 ----D---- C:\pchd
2011-01-06 18:39:47 ----D---- C:\ProgramData\AltrixSoft
2011-01-06 18:39:02 ----D---- C:\Program Files\Hard Drive Inspector
2011-01-06 18:38:59 ----D---- C:\Program Files\Common Files\AltrixSoft
2011-01-02 21:50:12 ----D---- C:\Users\Kocourek_Mourek\AppData\Roaming\AltrixSoft
2011-01-02 16:31:22 ----D---- C:\Program Files\SEC
2010-12-25 15:40:16 ----D---- C:\Program Files\Common Files\Skype

======List of files/folders modified in the last 1 months======

2011-01-24 18:27:07 ----D---- C:\Windows\Prefetch
2011-01-24 18:26:12 ----D---- C:\Windows\system32\config
2011-01-24 18:25:24 ----D---- C:\ProgramData\NVIDIA
2011-01-24 15:08:21 ----SHD---- C:\System Volume Information
2011-01-24 06:33:58 ----D---- C:\Windows\System32
2011-01-24 06:33:58 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-01-24 06:29:36 ----AD---- C:\Windows
2011-01-24 06:29:21 ----D---- C:\Program Files\My Internet Browser
2011-01-23 23:41:15 ----D---- C:\Windows\Microsoft.NET
2011-01-23 23:41:12 ----RSD---- C:\Windows\assembly
2011-01-23 21:40:18 ----SHD---- C:\Windows\Installer
2011-01-23 21:34:30 ----D---- C:\Program Files\Windows Live
2011-01-23 21:27:14 ----D---- C:\Windows\winsxs
2011-01-23 21:27:12 ----D---- C:\Windows\system32\catroot
2011-01-23 19:46:52 ----AD---- C:\ProgramData\TEMP
2011-01-23 12:13:18 ----D---- C:\ProgramData
2011-01-23 12:12:06 ----D---- C:\Windows\system32\drivers
2011-01-23 09:37:05 ----D---- C:\Users\Kocourek_Mourek\AppData\Roaming\XnView
2011-01-22 13:58:02 ----D---- C:\Users\Kocourek_Mourek\AppData\Roaming\Vso
2011-01-22 10:25:38 ----D---- C:\Program Files\JDownloader
2011-01-22 10:12:45 ----RD---- C:\Program Files
2011-01-20 19:10:22 ----D---- C:\Program Files\DNA
2011-01-20 18:44:22 ----D---- C:\Windows\system32\wdi
2011-01-19 17:56:48 ----AD---- C:\Qoobox
2011-01-16 21:57:11 ----D---- C:\Program Files\DAEMON Tools Toolbar
2011-01-16 14:54:43 ----D---- C:\Windows\inf
2011-01-16 14:53:36 ----D---- C:\Windows\system32\DriverStore
2011-01-16 14:25:14 ----D---- C:\Windows\system32\catroot2
2011-01-16 10:23:17 ----A---- C:\Windows\system.ini
2011-01-16 10:15:31 ----D---- C:\Windows\AppPatch
2011-01-16 10:15:30 ----D---- C:\Program Files\Common Files
2011-01-16 08:22:57 ----D---- C:\Windows\system32\drivers\etc
2011-01-15 16:24:29 ----HD---- C:\Program Files\InstallShield Installation Information
2011-01-15 16:19:19 ----D---- C:\Windows\Logs
2011-01-15 15:52:08 ----D---- C:\Program Files\XnView
2011-01-15 13:56:40 ----D---- C:\Windows\system32\Tasks
2011-01-15 13:56:39 ----D---- C:\Windows\Tasks
2011-01-15 11:54:06 ----D---- C:\Windows\Registration
2011-01-15 10:18:58 ----D---- C:\Windows\security
2011-01-15 10:06:29 ----D---- C:\Windows\debug
2011-01-13 22:25:24 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-01-13 21:48:06 ----D---- C:\Program Files\Optimik
2011-01-12 18:15:45 ----A---- C:\Windows\system32\MRT.exe
2011-01-12 18:15:35 ----D---- C:\ProgramData\Microsoft Help
2011-01-09 17:28:38 ----D---- C:\Program Files\Adobe
2011-01-09 16:09:50 ----D---- C:\Users\Kocourek_Mourek\AppData\Roaming\Skype
2011-01-08 10:53:46 ----RD---- C:\Users
2011-01-08 10:10:56 ----D---- C:\Users\Kocourek_Mourek\AppData\Roaming\skypePM
2011-01-03 19:00:14 ----RD---- C:\Program Files\Skype
2011-01-02 16:01:47 ----D---- C:\Program Files\AWS
2011-01-02 15:53:37 ----D---- C:\ProgramData\DivX
2011-01-02 15:53:35 ----D---- C:\Program Files\DivX
2011-01-02 15:53:34 ----D---- C:\Program Files\Common Files\PX Storage Engine
2010-12-25 15:40:12 ----D---- C:\ProgramData\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 90020302;90020302 Boot Guard Driver; C:\Windows\system32\DRIVERS\90020302.sys [2009-10-22 37392]
R0 BtHidBus;Bluetooth HID Bus Service; C:\Windows\System32\Drivers\BtHidBus.sys [2010-04-06 20104]
R0 mv61xx;mv61xx; C:\Windows\system32\DRIVERS\mv61xx.sys [2009-05-11 154664]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 90020301;90020301; C:\Windows\system32\DRIVERS\90020301.sys [2009-09-25 128016]
R1 AsIO;AsIO; C:\Windows\system32\drivers\AsIO.sys [2007-12-17 12400]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-02-22 114984]
R1 EIO;EIO Driver; C:\Windows\system32\DRIVERS\EIO.sys [2010-08-02 14336]
R1 setup_9.0.0.722_23.01.2011_12-47drv;setup_9.0.0.722_23.01.2011_12-47drv; C:\Windows\system32\DRIVERS\9002030.sys [2009-10-09 311312]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-02-22 133512]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-02-22 96896]
R3 asusgsb;ASUS Virtual Video Capture Device Driver; C:\Windows\system32\drivers\asusgsb.sys [2009-02-17 15232]
R3 atkdisplf;ASUS Kernel Mode Enhanced Driver; C:\Windows\system32\drivers\ATKDispLowFilter.sys [2009-02-17 30976]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
R3 gHidPnp;USB Device Enhanced Function Driver; C:\Windows\System32\Drivers\gHidPnp.Sys [2009-11-02 20480]
R3 gMouUsb;USB Mouse Device Drv; C:\Windows\system32\DRIVERS\gMouUsb.sys [2009-11-02 11520]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2010-03-13 3036832]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E62x86.sys [2010-03-29 55848]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-16 13216]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-05-27 47360]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 snpstd;Eye 310; C:\Windows\system32\DRIVERS\snpstd.sys [2007-03-29 384384]
R3 t3;Sound Blaster X-Fi Xtreme Audio; C:\Windows\system32\drivers\t3.sys [2009-06-04 413208]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [2009-10-14 10064]
S1 ASPI32;ASPI32; C:\Windows\system32\drivers\ASPI32.sys []
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BT;Bluetooth PAN Network Adapter; C:\Windows\system32\DRIVERS\btnetdrv.sys []
S3 BTCOM;Bluetooth Serial port driver; C:\Windows\system32\DRIVERS\btcomport.sys []
S3 BTCOMBUS;Bluetooth Serial Port Bus Service; C:\Windows\System32\Drivers\btcombus.sys []
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\Windows\System32\Drivers\btcusb.sys []
S3 BthAvrcp;Bluetooth AVRCP Profile; C:\Windows\system32\DRIVERS\BthAvrcp.sys [2009-08-13 22528]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 btnetBUs;Bluetooth PAN Bus Service; C:\Windows\System32\Drivers\btnetBus.sys [2010-04-06 25864]
S3 cpuz132;cpuz132; \??\C:\Users\KOCOUR~1\AppData\Local\Temp\cpuz132\cpuz132_x32.sys []
S3 ENTECH;ENTECH; \??\C:\Windows\system32\DRIVERS\ENTECH.sys [2008-04-22 27672]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-22 39272]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-02-03 26176]
S3 IvtBtBUs;IVT Bluetooth Bus Service; C:\Windows\System32\Drivers\IvtBtBus.sys [2010-04-06 23048]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 VComm;Virtual Serial port driver; C:\Windows\system32\DRIVERS\VComm.sys []
S3 VcommMgr;Bluetooth VComm Manager Service; C:\Windows\System32\Drivers\VcommMgr.sys []
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinDriver6;WinDriver6; C:\Windows\system32\drivers\windrvr6.sys [2010-07-15 195904]
S4 sptd;sptd; C:\Windows\C:\Windows\System32\Drivers\sptd.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASDR;ASDR; C:\Windows\System32\ASDR.exe [2009-07-27 61440]
R2 AsSysCtrlService;ASUS System Control Service; C:\Program Files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [2009-04-02 90112]
R2 ATKFUSService;ATK Fast User Switch Service; C:\Windows\system32\ATKFUSService.exe [2009-12-01 61952]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 CTAudSvcService;Creative Audio Service; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [2008-04-30 425984]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-02-22 810120]
R2 GeniusMouseService;GeniusMouseService; C:\Genius\ioCentre\GMouseService.exe [2010-03-11 12288]
R2 NitroDriverReadSpool;NitroPDFDriverCreatorReadSpool; C:\Program Files\Nitro PDF\Professional\NitroPDFDriverService.exe [2010-10-20 196928]
R2 nlsX86cc;NLS Service; C:\Windows\system32\NLSSRV32.EXE [2010-10-20 67904]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-10-16 600680]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-10-15 75064]
R2 SCPDFReadSpool;SolidConverterPDFReadSpool; C:\Windows\Installer\MSI5049.tmp [2010-11-13 189760]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-09-22 249136]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-16 369256]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-05-21 173352]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2009-10-30 1021256]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
R3 HDDSvc;HDD Information Service; C:\Program Files\Common Files\AltrixSoft\HDDInfoService\HDDSvc.exe [2010-12-23 458488]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-12-24 135664]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-04-24 79360]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-04-24 79360]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-02-22 33560]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-09-22 1493352]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-06-11 136120]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-09-08 575488]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2010-04-23 332720]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TuneUp.Defrag;@C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-09-17 435016]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-04-21 1343400]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]

-----------------EOF-----------------

[motji]

Eset máte legální? domnívám se že ne.

[kokes22]

Zdravím Eset mám legální. Vlastním certifikát.

[motji]

V tom případě nechápu, proč jste na něj měl keygenerátor.
Odinstalujte Avptool. Jak je na tom počítač?