prázdna plocha žiadna ikona žiaden Start panel len obrázok

Zpráva

Peter · #1 Příspěvek od **Peter** » 13 úno 2011 20:33

Nazdar problém je v tom že ako som uviedol v predmete nejde mi nič zobraziť na pracovnej ploche len obrázok pozadia nemám žiadne skryté ikony ani panel Start k internetu sa dopracujem len cez ctrl+alt+delete a napíšem tam explorer tak ma hodí do dákeho panelu kde sa dopracujem k čomukoľvek ale je to dosť nepohodlné a skopírovať to na plochu sa mi nedá.
Tu mám aj ten log o ktorom sa tu zmieňujete je strašne dlhý :

PS: ak sa vám nebude chcieť to riešiť alebo sa to nedá vyriešiť tak aspoň dáku radu ako reinstalnem XP bez CD/DVD lebo mechanika mi už nefunguje pokazila sa chcelo by to niečo cez flash ale neviem či sa to dá. Ďakujem.

Logfile of random's system information tool 1.08 (written by random/random)
Run by L at 2011-02-13 20:06:59
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 11 GB (9%) free of 119 GB
Total RAM: 1919 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:07:01, on 13.2.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17055)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\smss.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Vqitoa.exe
C:\WINDOWS\explorer.exe
C:\DOCUME~1\L\LOCALS~1\Temp\Vxx.exe
C:\Program Files\VideoLAN\VLC\vlc.exe
C:\Documents and Settings\L\Plocha\RSIT.exe
C:\Program Files\trend micro\L.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT2786678
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: Shell=
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,C:\Program Files\smss.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] C:\Documents and Settings\L\Data aplikací\WinDefender.exe
O4 - HKLM\..\Run: [smss] C:\Program Files\smss.exe
O4 - HKLM\..\Run: [HKCU\SOFTWARE.............] C:\Documents and Settings\L\Data aplikací\BlackshadesBot.exe
O4 - HKLM\..\Run: [WinDEF] C:\Documents and Settings\L\Data aplikací\raw2.exe
O4 - HKLM\..\Run: [X5P70U2SIVHBV] C:\Documents and Settings\L\Data aplikací\UL54RY01UKU0.exe
O4 - HKLM\..\Run: [dlll.exe] C:\Documents and Settings\L\Data aplikací\dllls.exe
O4 - HKLM\..\Run: [0XQHGQHZYM] C:\Documents and Settings\L\Data aplikací\svchoster.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [ATKHOTKEY] "C:\Program Files\ATK Hotkey\Hcontrol.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_2] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\wmnetmgr.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_3] C:\WINDOWS\system32\regsvr32 /s /u "C:\WINDOWS\system32\wmv8dmod.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_4] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\wmvdmod.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_5] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\wmvdmoe2.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_6] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\wmadmoe.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_7] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\wmspdmod.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_8] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\wmspdmoe.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_9] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\wmsdmoe.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_10] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\wmsdmoe2.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_20] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\wmadmod.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_21] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\mpg4dmod.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_22] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\mp43dmod.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_23] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\mp4sdmod.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_24] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\wmsdmod.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_30] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\laprxy.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_31] "C:\WINDOWS\system32\logagent.exe" /RegServer
O4 - HKLM\..\RunOnce: [OE_WMPWMFSDK_Install_32] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\wmvcore.dll"
O4 - HKLM\..\RunOnce: [OE_WMPDRM_Install_1] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\drmstor.dll"
O4 - HKLM\..\RunOnce: [OE_WMPDRM_Install_2] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\drmclien.dll"
O4 - HKLM\..\RunOnce: [OE_WMPDRM_Install_4] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\drmv2clt.dll"
O4 - HKLM\..\RunOnce: [OE_WMPDRM_Install_5] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\blackbox.dll"
O4 - HKLM\..\RunOnce: [OE_WMPDRM_Install_6] C:\WINDOWS\system32\regsvr32 /s "C:\WINDOWS\system32\msnetobj.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMP7_Install_0] C:\WINDOWS\INF\unregmp2.exe /MigrateLibrary
O4 - HKLM\..\RunOnce: [OE_WMPWMP7_Install_1] "C:\Program Files\Windows Media Player\migrate.exe" /s
O4 - HKLM\..\RunOnce: [OE_WMPWMP7_Install_2] C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmp.dll
O4 - HKLM\..\RunOnce: [OE_WMPWMP7_Install_8] C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmpshell.dll
O4 - HKLM\..\RunOnce: [OE_WMPWMP7_Install_9] C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmpasf.dll
O4 - HKLM\..\RunOnce: [OE_WMPWMP7_Install_10] C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmpdxm.dll
O4 - HKLM\..\RunOnce: [OE_WMPWMP7_Install_11] C:\WINDOWS\system32\regsvr32 /s "C:\Program Files\Windows Media Player\mpvis.dll"
O4 - HKLM\..\RunOnce: [OE_WMPWMDM_Install_7] C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\mspmsnsv.dll
O4 - HKLM\..\RunOnce: [OE_WMPWMP7_Install_20] C:\WINDOWS\INF\unregmp2.exe /Shortcuts /RegExts
O4 - HKLM\..\RunOnce: [KB923561] rundll32.exe apphelp.dll,ShimFlushCache
O4 - HKLM\..\RunOnce: [KB955759] rundll32.exe apphelp.dll,ShimFlushCache
O4 - HKCU\..\Run: [{9F94C4BC-8AD1-2432-71E6-D88B7D12071E}] "C:\Documents and Settings\L\Data aplikací\Fetau\kyguk.exe"
O4 - HKCU\..\Run: [Windows Defender] C:\Documents and Settings\L\Data aplikací\WinDefender.exe
O4 - HKCU\..\Run: [smss] C:\Program Files\smss.exe
O4 - HKCU\..\Run: [HKCU\SOFTWARE.............] C:\Documents and Settings\L\Data aplikací\BlackshadesBot.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [WinDEF] C:\Documents and Settings\L\Data aplikací\raw2.exe
O4 - HKCU\..\Run: [X5P70U2SIVHBV] C:\Documents and Settings\L\Data aplikací\UL54RY01UKU0.exe
O4 - HKCU\..\Run: [Trubagedeyox] rundll32.exe "C:\WINDOWS\pavicl.dll",Startup
O4 - HKCU\..\Run: [dlll.exe] C:\Documents and Settings\L\Data aplikací\dllls.exe
O4 - HKCU\..\Run: [0XQHGQHZYM] C:\Documents and Settings\L\Data aplikací\svchoster.exe
O4 - HKCU\..\Run: [Driver Updater] "C:\Program Files\Carambis\Driver Updater\dupdater.exe" /minimized
O4 - HKCU\..\Run: [MSWUpdate] "C:\Documents and Settings\L\Data aplikací\svchost.exe"
O4 - HKCU\..\Run: [CE8SIIFGSU] C:\DOCUME~1\L\LOCALS~1\Temp\Vxx.exe
O4 - HKCU\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs"
O4 - HKCU\..\RunOnce: [TSClientAXDisabler] cmd.exe /C "%systemroot%\Installer\TSClientMsiTrans\tscdsbl.bat"
O4 - HKLM\..\Policies\Explorer\Run: [Windows Defender] C:\Documents and Settings\L\Data aplikací\WinDefender.exe
O4 - HKLM\..\Policies\Explorer\Run: [smss] C:\Program Files\smss.exe
O4 - HKLM\..\Policies\Explorer\Run: [HKCU\SOFTWARE.............] C:\Documents and Settings\L\Data aplikací\BlackshadesBot.exe
O4 - HKLM\..\Policies\Explorer\Run: [WinDEF] C:\Documents and Settings\L\Data aplikací\raw2.exe
O4 - HKLM\..\Policies\Explorer\Run: [X5P70U2SIVHBV] C:\Documents and Settings\L\Data aplikací\UL54RY01UKU0.exe
O4 - HKLM\..\Policies\Explorer\Run: [Javaconf] C:\Documents and Settings\L\Data aplikací\javaconf.exe
O4 - HKLM\..\Policies\Explorer\Run: [dlll.exe] C:\Documents and Settings\L\Data aplikací\dllls.exe
O4 - HKLM\..\Policies\Explorer\Run: [0XQHGQHZYM] C:\Documents and Settings\L\Data aplikací\svchoster.exe
O4 - HKCU\..\Policies\Explorer\Run: [smss] C:\Program Files\smss.exe
O4 - HKCU\..\Policies\Explorer\Run: [X5P70U2SIVHBV] C:\Documents and Settings\L\Data aplikací\UL54RY01UKU0.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: CCC.lnk = ?
O4 - Global Startup: TMMonitor.lnk = C:\Program Files\ArcSoft\TotalMedia\TMMonitor.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Remote Procedure Call (HGM) (RPCHGM) - Unknown owner - C:\Program Files\NetMeeting\secedit.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

--
End of file - 12534 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-12-14 297648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll [2010-10-28 843832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-12-14 297648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Documents and Settings\L\Data aplikací\WinDefender.exe []
"smss"=C:\Program Files\smss.exe [2011-02-28 155649]
"HKCU\SOFTWARE............."=C:\Documents and Settings\L\Data aplikací\BlackshadesBot.exe [2011-02-01 344064]
"WinDEF"=C:\Documents and Settings\L\Data aplikací\raw2.exe [2011-02-27 241664]
"X5P70U2SIVHBV"=C:\Documents and Settings\L\Data aplikací\UL54RY01UKU0.exe []
"dlll.exe"=C:\Documents and Settings\L\Data aplikací\dllls.exe [2011-02-27 914432]
"0XQHGQHZYM"=C:\Documents and Settings\L\Data aplikací\svchoster.exe [2011-02-27 229376]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2006-11-22 630784]
"ATKHOTKEY"=C:\Program Files\ATK Hotkey\Hcontrol.exe [2007-07-12 225280]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"OE_WMPWMFSDK_Install_2"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmnetmgr.dll []
"OE_WMPWMFSDK_Install_3"=C:\WINDOWS\system32\regsvr32 /s /u C:\WINDOWS\system32\wmv8dmod.dll []
"OE_WMPWMFSDK_Install_4"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmvdmod.dll []
"OE_WMPWMFSDK_Install_5"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmvdmoe2.dll []
"OE_WMPWMFSDK_Install_6"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmadmoe.dll []
"OE_WMPWMFSDK_Install_7"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmspdmod.dll []
"OE_WMPWMFSDK_Install_8"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmspdmoe.dll []
"OE_WMPWMFSDK_Install_9"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmsdmoe.dll []
"OE_WMPWMFSDK_Install_10"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmsdmoe2.dll []
"OE_WMPWMFSDK_Install_20"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmadmod.dll []
"OE_WMPWMFSDK_Install_21"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\mpg4dmod.dll []
"OE_WMPWMFSDK_Install_22"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\mp43dmod.dll []
"OE_WMPWMFSDK_Install_23"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\mp4sdmod.dll []
"OE_WMPWMFSDK_Install_24"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmsdmod.dll []
"OE_WMPWMFSDK_Install_30"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\laprxy.dll []
"OE_WMPWMFSDK_Install_31"=C:\WINDOWS\system32\logagent.exe [2008-04-14 103936]
"OE_WMPWMFSDK_Install_32"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmvcore.dll []
"OE_WMPDRM_Install_1"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\drmstor.dll []
"OE_WMPDRM_Install_2"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\drmclien.dll []
"OE_WMPDRM_Install_4"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\drmv2clt.dll []
"OE_WMPDRM_Install_5"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\blackbox.dll []
"OE_WMPDRM_Install_6"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\msnetobj.dll []
"OE_WMPWMP7_Install_0"=C:\WINDOWS\INF\unregmp2.exe [2008-04-14 208896]
"OE_WMPWMP7_Install_1"=C:\Program Files\Windows Media Player\migrate.exe [2008-04-14 786432]
"OE_WMPWMP7_Install_2"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmp.dll []
"OE_WMPWMP7_Install_8"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmpshell.dll []
"OE_WMPWMP7_Install_9"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmpasf.dll []
"OE_WMPWMP7_Install_10"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\wmpdxm.dll []
"OE_WMPWMP7_Install_11"=C:\WINDOWS\system32\regsvr32 /s C:\Program Files\Windows Media Player\mpvis.dll []
"OE_WMPWMDM_Install_7"=C:\WINDOWS\system32\regsvr32 /s C:\WINDOWS\system32\mspmsnsv.dll []
"OE_WMPWMP7_Install_20"=C:\WINDOWS\INF\unregmp2.exe [2008-04-14 208896]
"KB923561"=apphelp.dll,ShimFlushCache []
"KB955759"=apphelp.dll,ShimFlushCache []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Windows Defender"=C:\Documents and Settings\L\Data aplikací\WinDefender.exe []
"smss"=C:\Program Files\smss.exe [2011-02-28 155649]
"HKCU\SOFTWARE............."=C:\Documents and Settings\L\Data aplikací\BlackshadesBot.exe [2011-02-01 344064]
"WinDEF"=C:\Documents and Settings\L\Data aplikací\raw2.exe [2011-02-27 241664]
"X5P70U2SIVHBV"=C:\Documents and Settings\L\Data aplikací\UL54RY01UKU0.exe []
"Javaconf"=C:\Documents and Settings\L\Data aplikací\javaconf.exe []
"dlll.exe"=C:\Documents and Settings\L\Data aplikací\dllls.exe [2011-02-27 914432]
"0XQHGQHZYM"=C:\Documents and Settings\L\Data aplikací\svchoster.exe [2011-02-27 229376]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"{9F94C4BC-8AD1-2432-71E6-D88B7D12071E}"=C:\Documents and Settings\L\Data aplikací\Fetau\kyguk.exe [2010-11-28 188928]
"Windows Defender"=C:\Documents and Settings\L\Data aplikací\WinDefender.exe []
"smss"=C:\Program Files\smss.exe [2011-02-28 155649]
"HKCU\SOFTWARE............."=C:\Documents and Settings\L\Data aplikací\BlackshadesBot.exe [2011-02-01 344064]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-06-24 39408]
"WinDEF"=C:\Documents and Settings\L\Data aplikací\raw2.exe [2011-02-27 241664]
"X5P70U2SIVHBV"=C:\Documents and Settings\L\Data aplikací\UL54RY01UKU0.exe []
"Trubagedeyox"= C:\WINDOWS\pavicl.dll,Startup []
"dlll.exe"=C:\Documents and Settings\L\Data aplikací\dllls.exe [2011-02-27 914432]
"0XQHGQHZYM"=C:\Documents and Settings\L\Data aplikací\svchoster.exe [2011-02-27 229376]
"Driver Updater"=C:\Program Files\Carambis\Driver Updater\dupdater.exe [2010-06-08 4973056]
"MSWUpdate"=C:\Documents and Settings\L\Data aplikací\svchost.exe []
"CE8SIIFGSU"=C:\DOCUME~1\L\LOCALS~1\Temp\Vxx.exe [2011-02-13 139264]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"TSClientMSIUninstaller"=cmd.exe /C cscript C:\WINDOWS\Installer\TSClientMsiTrans\tscuinst.vbs []
"TSClientAXDisabler"=cmd.exe /C C:\WINDOWS\Installer\TSClientMsiTrans\tscdsbl.bat []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"smss"=C:\Program Files\smss.exe [2011-02-28 155649]
"X5P70U2SIVHBV"=C:\Documents and Settings\L\Data aplikací\UL54RY01UKU0.exe []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
TMMonitor.lnk - C:\Program Files\ArcSoft\TotalMedia\TMMonitor.exe

C:\Documents and Settings\L\Nabídka Start\Programy\Po spuštění
CCC.lnk - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2007-02-02 110592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
nwprovau

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Warcraft III\Warcraft III.exe"="C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Program Files\Garena\Garena.exe"="C:\Program Files\Garena\Garena.exe:*:Enabled:Garena"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe:*:Enabled:umi"
"H:\ApexDC\ApexDC\ApexDC.exe"="H:\ApexDC\ApexDC\ApexDC.exe:*:Enabled:ApexDC++"
"C:\Documents and Settings\L\Plocha\DC\ApexDC.exe"="C:\Documents and Settings\L\Plocha\DC\ApexDC.exe:*:Enabled:ApexDC++"
"C:\Documents and Settings\L\Plocha\dc\ApexDC\ApexDC\ApexDC.exe"="C:\Documents and Settings\L\Plocha\dc\ApexDC\ApexDC\ApexDC.exe:*:Enabled:ApexDC++"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\VideoLAN\VLC\vlc.exe"="C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\WINDOWS\explorer.exe"="C:\WINDOWS\explorer.exe:*:Enabled:Průzkumník Windows"
"C:\Documents and Settings\L\Data aplikací\WinDefender.exe"="C:\Documents and Settings\L\Data aplikací\WinDefender.exe:*:Enabled:Windows Messanger"
"C:\DOCUME~1\L\LOCALS~1\Temp\lol.exe"="C:\DOCUME~1\L\LOCALS~1\Temp\lol.exe:*:Enabled:Windows Messanger"
"C:\Program Files\WUpRFNNDgRkW.exe"="C:\Program Files\WUpRFNNDgRkW.exe:*:Enabled:Windows Messanger"
"C:\Documents and Settings\L\Data aplikací\BlackshadesBot.exe"="C:\Documents and Settings\L\Data aplikací\BlackshadesBot.exe:*:Enabled:Windows Messanger"
"C:\Documents and Settings\L\Data aplikací\avurqf.exe"="C:\Documents and Settings\L\Data aplikací\avurqf.exe:*:Enabled:Windows Messanger"
"C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe"="C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe:*:Enabled:Windows Messanger"
"C:\Documents and Settings\L\Data aplikací\locatl.exe"="C:\Documents and Settings\L\Data aplikací\locatl.exe:*:Enabled:Windows Messanger"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Documents and Settings\L\Data aplikací\ouwtnx.exe"="C:\Documents and Settings\L\Data aplikací\ouwtnx.exe:*:Enabled:Windows Messanger"
"C:\Documents and Settings\L\Data aplikací\efepyw.exe"="C:\Documents and Settings\L\Data aplikací\efepyw.exe:*:Enabled:Windows Messanger"
"C:\Documents and Settings\L\Data aplikací\javaconf.exe"="C:\Documents and Settings\L\Data aplikací\javaconf.exe:*:Enabled:Windows Messanger"
"C:\Documents and Settings\L\Data aplikací\Microsoft\Run.exe"="C:\Documents and Settings\L\Data aplikací\Microsoft\Run.exe:*:Enabled:Windows Messanger"
"C:\Documents and Settings\L\Data aplikací\raw2.exe"="C:\Documents and Settings\L\Data aplikací\raw2.exe:*:Enabled:Windows Messanger"
"C:\DOCUME~1\L\LOCALS~1\Temp\35861.exe"="C:\DOCUME~1\L\LOCALS~1\Temp\35861.exe:*:Enabled:Windows Messanger"
"C:\Documents and Settings\L\Data aplikací\dllls.exe"="C:\Documents and Settings\L\Data aplikací\dllls.exe:*:Enabled:Windows Messanger"
"C:\DOCUME~1\L\LOCALS~1\Temp\28755.exe"="C:\DOCUME~1\L\LOCALS~1\Temp\28755.exe:*:Enabled:Windows Messanger"
"C:\Documents and Settings\L\Data aplikací\svchoster.exe"="C:\Documents and Settings\L\Data aplikací\svchoster.exe:*:Enabled:Windows Messanger"
"C:\Program Files\smss.exe"="C:\Program Files\smss.exe:*:Enabled:CityScape"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Disabled:Skype. Take a deep breath "
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-02-28 00:08:04 ----A---- C:\Program Files\ocIMkfmAkFDK.exe
2011-02-27 16:10:12 ----A---- C:\Documents and Settings\L\Data aplikací\svchoster.exe
2011-02-27 14:51:00 ----H---- C:\Documents and Settings\L\Data aplikací\dllls.exe
2011-02-27 13:43:33 ----A---- C:\Program Files\jLhfnaYGUScD.exe
2011-02-27 13:36:49 ----A---- C:\Program Files\jpOQemwlpjIl.exe
2011-02-13 20:04:01 ----D---- C:\rsit
2011-02-13 20:04:01 ----D---- C:\Program Files\trend micro
2011-02-13 19:01:28 ----A---- C:\WINDOWS\Vqitoa.exe
2011-02-13 19:01:19 ----A---- C:\WINDOWS\system32\sshnas21.dll
2011-02-13 18:44:22 ----D---- C:\WINDOWS\LastGood
2011-02-13 14:57:19 ----D---- C:\WINDOWS\Prefetch
2011-02-13 14:25:49 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2011-02-13 14:25:44 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2011-02-13 14:25:36 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2011-02-13 14:25:29 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2011-02-13 14:25:24 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2011-02-13 14:25:19 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2011-02-13 14:25:14 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2011-02-13 14:25:09 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2011-02-13 14:25:03 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2011-02-13 14:24:58 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2011-02-13 14:24:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2011-02-13 14:24:47 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2011-02-13 14:24:40 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2011-02-13 14:24:35 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2011-02-13 14:24:30 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2011-02-13 14:24:24 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2011-02-13 14:24:19 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2011-02-13 14:24:13 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2011-02-13 14:24:08 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2011-02-13 14:24:01 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2011-02-13 14:23:55 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2011-02-13 14:23:51 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2011-02-13 14:23:45 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2011-02-13 14:23:39 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2011-02-13 14:23:33 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2011-02-13 14:23:27 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2011-02-13 14:23:21 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2011-02-13 14:23:14 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2011-02-13 14:23:07 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2011-02-13 14:23:01 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2011-02-13 14:22:56 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2011-02-13 14:22:51 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2011-02-13 14:22:45 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2011-02-13 14:22:38 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2011-02-13 14:22:32 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2011-02-13 14:22:27 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2011-02-13 14:22:18 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2011-02-13 14:22:12 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2011-02-13 14:22:06 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2011-02-13 14:21:59 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2011-02-13 14:21:54 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2011-02-13 14:21:49 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
2011-02-13 14:21:44 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$
2011-02-13 14:21:37 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2011-02-13 14:21:32 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2011-02-13 14:21:26 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2011-02-13 14:21:21 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2011-02-13 14:21:16 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2011-02-13 14:21:11 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2011-02-13 14:21:05 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2011-02-13 14:21:00 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2011-02-13 14:20:55 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2011-02-13 14:20:50 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2011-02-13 14:20:40 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2011-02-13 14:20:32 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2011-02-13 14:20:26 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$
2011-02-13 14:20:22 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2011-02-13 14:20:16 ----HDC---- C:\WINDOWS\$NtUninstallKB974112_1$
2011-02-13 14:20:11 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2011-02-13 14:20:06 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2011-02-13 14:20:01 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2011-02-13 14:19:55 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2011-02-13 14:19:49 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2011-02-13 14:19:44 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2011-02-13 14:19:39 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2011-02-13 14:19:34 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-02-13 14:19:29 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2011-02-13 14:19:23 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2011-02-13 14:19:18 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2011-02-13 14:19:12 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2011-02-13 14:19:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2011-02-13 14:15:39 ----D---- C:\WINDOWS\l2schemas
2011-02-13 14:15:38 ----D---- C:\WINDOWS\system32\cs
2011-02-13 14:15:38 ----D---- C:\WINDOWS\system32\bits
2011-02-13 14:12:01 ----D---- C:\WINDOWS\network diagnostic
2011-02-13 14:08:18 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2011-02-10 15:07:20 ----A---- C:\Program Files\iVXONEmdHKrx.exe
2011-02-10 07:07:49 ----A---- C:\Program Files\SLowcfAEQruB.exe
2011-02-10 07:07:35 ----A---- C:\Program Files\UPUTWroYJQYy.exe
2011-02-10 00:25:09 ----A---- C:\Program Files\GAEwRqxVRIvO.exe
2011-02-09 22:31:00 ----A---- C:\Program Files\rFpQVpvFGVKk.exe
2011-02-09 21:37:00 ----A---- C:\Program Files\BqITMInLUQfL.exe
2011-02-09 21:13:00 ----A---- C:\Program Files\hWOJgUmMIajQ.exe
2011-02-09 21:10:03 ----A---- C:\Program Files\jydJvypYObjX.exe
2011-02-09 21:07:30 ----A---- C:\Program Files\YEAQssHqPVUC.exe
2011-02-08 19:01:04 ----A---- C:\Program Files\upgEsYdUqclN.exe
2011-02-08 18:58:23 ----A---- C:\Program Files\avEQNXaPYeei.exe
2011-02-08 17:27:13 ----A---- C:\Program Files\XFNbICsjQbSH.exe
2011-02-08 17:24:35 ----A---- C:\Program Files\fskAIISxajwS.exe
2011-02-07 21:49:18 ----D---- C:\WINDOWS\system32\Atheros_L2
2011-02-07 21:49:08 ----A---- C:\WINDOWS\system32\drivers\l251x86.sys
2011-02-07 21:47:43 ----A---- C:\WINDOWS\system32\drivers\RTSTOR.sys
2011-02-07 21:46:15 ----D---- C:\Program Files\ATK Hotkey
2011-02-07 21:45:15 ----D---- C:\Documents and Settings\L\Data aplikací\Carambis
2011-02-07 21:45:00 ----D---- C:\Program Files\Carambis
2011-02-07 21:43:26 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-02-07 21:43:11 ----D---- C:\Program Files\Motorola
2011-02-07 21:43:07 ----A---- C:\WINDOWS\system32\sm56co6a.dll
2011-02-07 21:43:07 ----A---- C:\WINDOWS\system32\drivers\smserial.sys
2011-02-07 20:07:41 ----D---- C:\WINDOWS\system32\en-US
2011-02-07 18:23:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2011-02-05 12:53:56 ----D---- C:\Documents and Settings\L\Data aplikací\Bakyru
2011-02-05 12:27:31 ----D---- C:\Documents and Settings\L\Data aplikací\Opera
2011-02-05 12:27:25 ----D---- C:\Program Files\Opera
2011-02-04 00:44:03 ----D---- C:\Documents and Settings\L\Data aplikací\PriceGong
2011-02-03 21:57:09 ----H---- C:\Documents and Settings\L\Data aplikací\GetProcAddress.dll
2011-02-02 02:09:44 ----D---- C:\Documents and Settings\All Users\Data aplikací\Kaspersky Lab
2011-02-02 02:05:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Kaspersky Lab Setup Files
2011-02-01 20:28:31 ----A---- C:\Program Files\cjlPftcmcaCG.exe
2011-02-01 19:39:30 ----H---- C:\Program Files\WUpRFNNDgRkW.exe
2011-02-01 19:39:30 ----H---- C:\Documents and Settings\L\Data aplikací\BlackshadesBot.exe
2011-02-01 19:06:12 ----RSH---- C:\Program Files\smss.exe
2011-01-28 17:55:26 ----A---- C:\WINDOWS\winsvchost.exe
2011-01-25 19:39:20 ----H---- C:\Documents and Settings\L\Data aplikací\raw2.exe
2011-01-24 21:17:39 ----D---- C:\Documents and Settings\L\Data aplikací\Fetau
2011-01-14 12:52:10 ----D---- C:\Program Files\Gadwin Systems

======List of files/folders modified in the last 1 months======

2011-02-27 22:36:18 ----D---- C:\Documents and Settings\L\Data aplikací\uTorrent
2011-02-13 20:06:01 ----SD---- C:\WINDOWS\Tasks
2011-02-13 20:04:01 ----RD---- C:\Program Files
2011-02-13 20:01:26 ----D---- C:\Documents and Settings\L\Data aplikací\Skype
2011-02-13 19:23:11 ----SHD---- C:\WINDOWS\Installer
2011-02-13 19:01:28 ----D---- C:\WINDOWS
2011-02-13 19:01:19 ----D---- C:\WINDOWS\system32
2011-02-13 18:47:46 ----HD---- C:\WINDOWS\inf
2011-02-13 18:47:22 ----D---- C:\Documents and Settings\L\Data aplikací\skypePM
2011-02-13 18:46:18 ----HD---- C:\WINDOWS\$hf_mig$
2011-02-13 18:45:34 ----D---- C:\WINDOWS\system32\CatRoot2
2011-02-13 18:43:11 ----D---- C:\WINDOWS\Temp
2011-02-13 15:13:01 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-02-13 14:57:23 ----A---- C:\WINDOWS\setuplog.txt
2011-02-13 14:56:54 ----D---- C:\WINDOWS\AppPatch
2011-02-13 14:56:53 ----D---- C:\WINDOWS\system32\wbem
2011-02-13 14:56:53 ----D---- C:\WINDOWS\system32\Setup
2011-02-13 14:56:52 ----RSD---- C:\WINDOWS\Fonts
2011-02-13 14:56:46 ----D---- C:\WINDOWS\system32\drivers
2011-02-13 14:55:57 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-02-13 14:26:58 ----D---- C:\Documents and Settings\L\Data aplikací\vlc
2011-02-13 14:25:50 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-02-13 14:25:50 ----D---- C:\WINDOWS\system32\CatRoot
2011-02-13 14:25:05 ----D---- C:\Program Files\Outlook Express
2011-02-13 14:24:32 ----D---- C:\Program Files\Movie Maker
2011-02-13 14:19:24 ----D---- C:\Program Files\Messenger
2011-02-13 14:19:19 ----D---- C:\WINDOWS\WinSxS
2011-02-13 14:18:58 ----D---- C:\WINDOWS\security
2011-02-13 14:15:59 ----D---- C:\Program Files\Windows Media Player
2011-02-13 14:15:58 ----D---- C:\WINDOWS\Help
2011-02-13 14:15:51 ----D---- C:\WINDOWS\ehome
2011-02-13 14:15:50 ----D---- C:\WINDOWS\system32\inetsrv
2011-02-13 14:15:49 ----D---- C:\WINDOWS\ime
2011-02-13 14:15:39 ----D---- C:\WINDOWS\system32\usmt
2011-02-13 14:15:39 ----D---- C:\WINDOWS\system32\cs-cz
2011-02-13 14:15:38 ----D---- C:\WINDOWS\PeerNet
2011-02-13 14:14:16 ----A---- C:\WINDOWS\ModemLog_Motorola SM56 Speakerphone Modem.txt
2011-02-13 14:13:59 ----D---- C:\WINDOWS\ServicePackFiles
2011-02-13 14:13:51 ----D---- C:\WINDOWS\system32\Restore
2011-02-13 14:13:51 ----D---- C:\WINDOWS\system32\npp
2011-02-13 14:13:50 ----D---- C:\WINDOWS\msagent
2011-02-13 14:13:49 ----D---- C:\WINDOWS\srchasst
2011-02-13 14:13:49 ----D---- C:\Program Files\NetMeeting
2011-02-13 14:13:48 ----D---- C:\WINDOWS\system32\Com
2011-02-13 14:13:45 ----D---- C:\Program Files\Windows NT
2011-02-13 14:13:42 ----D---- C:\Program Files\Common Files\System
2011-02-13 14:13:20 ----D---- C:\WINDOWS\system32\oobe
2011-02-13 14:13:19 ----D---- C:\WINDOWS\system
2011-02-13 12:48:58 ----HD---- C:\Program Files\InstallShield Installation Information
2011-02-13 12:44:50 ----SD---- C:\Documents and Settings\L\Data aplikací\Microsoft
2011-02-13 12:44:50 ----A---- C:\WINDOWS\system32\MRT.INI
2011-02-13 12:42:49 ----A---- C:\WINDOWS\system32\MRT.exe
2011-02-07 20:48:56 ----RSD---- C:\WINDOWS\assembly
2011-02-07 20:48:56 ----D---- C:\WINDOWS\Microsoft.NET
2011-02-07 19:43:01 ----D---- C:\Program Files\Online Services
2011-02-07 18:11:27 ----D---- C:\WINDOWS\system32\ias
2011-02-07 17:58:43 ----D---- C:\Program Files\Mozilla Firefox
2011-02-05 12:32:14 ----D---- C:\WINDOWS\SxsCaPendDel
2011-02-05 12:08:34 ----D---- C:\Program Files\Internet Explorer
2011-02-05 02:53:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\WinZip
2011-02-04 20:09:51 ----D---- C:\Program Files\Marias
2011-02-04 20:08:37 ----D---- C:\Objekte
2011-02-04 20:08:37 ----D---- C:\Material
2011-02-04 20:08:31 ----D---- C:\Texturen
2011-02-04 00:33:35 ----D---- C:\Program Files\uTorrent
2011-01-21 01:41:52 ----D---- C:\Documents and Settings\L\Data aplikací\codeblocks
2011-01-19 09:12:09 ----D---- C:\Program Files\CodeBlocks
2011-01-17 21:48:28 ----D---- C:\Documents and Settings\L\Data aplikací\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-10-19 436792]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-25 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-25 55936]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2008-04-08 1309504]
R3 AtcL002;NDIS Miniport Driver for Atheros L2 Fast Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l251x86.sys [2007-08-21 30208]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2007-02-02 1975296]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-11-03 4394496]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2007-08-24 5760]
R3 NWRDR;NetWare Rdr; C:\WINDOWS\system32\DRIVERS\nwrdr.sys [2008-04-13 163584]
R3 RTSTOR;USB Mass Stroage Device; C:\WINDOWS\system32\drivers\RTSTOR.SYS [2006-06-10 27520]
R3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2006-11-22 982272]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
S3 BDA_Capture_220;Digital TV receiver Driver 1.0.1.3; C:\WINDOWS\System32\Drivers\BDA_Capture_220.sys [2005-10-13 14080]
S3 BDA_Loader_220;Digital TV Receiver Firmware Loader 5.9.19.0; C:\WINDOWS\System32\Drivers\BDA_Loader_220.sys [2005-09-19 15616]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 DCamUSBEMPIA;Dazzle DVC Video Device; C:\WINDOWS\system32\DRIVERS\emDevice.sys [2005-12-21 100957]
S3 emAudio;Dazzle DVC Audio Device; C:\WINDOWS\system32\drivers\emAudio.sys [2006-12-12 22528]
S3 FiltUSBEMPIA;USB Device Lower Filter; C:\WINDOWS\system32\DRIVERS\emFilter.sys [2005-12-21 5245]
S3 GarenaPEngine;GarenaPEngine; \??\C:\DOCUME~1\L\LOCALS~1\Temp\WGB7E.tmp []
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files\Garena\plugins\UI\safedrv.sys []
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 Nokia USB Generic;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2006-10-10 9216]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2006-10-10 138240]
S3 ScanUSBEMPIA;USB Still Image Capture Device; C:\WINDOWS\system32\DRIVERS\emScan.sys [2005-12-21 4493]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\sscdbus.sys [2008-02-22 87936]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys [2008-02-22 14976]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\WINDOWS\system32\DRIVERS\sscdmdm.sys [2008-02-22 114304]
S3 sscdserd;SAMSUNG Mobile Modem Diagnostic Serial Port (WDM); C:\WINDOWS\system32\DRIVERS\sscdserd.sys [2008-02-22 94336]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 Tosrfbd;Bluetooth RFBUS; C:\WINDOWS\system32\DRIVERS\tosrfbd.sys [2007-04-24 113920]
S3 Tosrfcom;Tosrfcom; C:\WINDOWS\system32\drivers\Tosrfcom.sys []
S3 Tosrfhid;Bluetooth RFHID; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2007-03-01 73728]
S3 tosrfusb;Bluetooth USB Controller; C:\WINDOWS\system32\DRIVERS\tosrfusb.sys [2007-06-11 41856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2007-02-02 446464]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-06-09 73728]
R2 NWCWorkstation;Klient systému NetWare; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-02-25 125048]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-14 135664]
S2 RPCHGM;Remote Procedure Call (HGM); C:\Program Files\NetMeeting\secedit.exe [2009-07-31 22863560]
S2 SSHNAS;SSHNAS; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-06-24 182768]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2006-11-06 210432]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 13 úno 2011 20:39

Zdravim a pekny vecer preji

Uprimne, mate tam celou zoo i s babkou pokladni

Zazalohujte si dulezita data, pac tohle nevim jestli PC prezije

Prihlaste se do nouzoveho rezimu (restart PC, mackat F8, zvolit Stav nouze s praci v siti)

Pri stahovani ComboFixu - navod a postup nize, jej ulozte jako Beruska.com

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK

Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
Pokud mate Win XP spustte pod uctem Spravce\Administratora
Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

Peter · #3 Příspěvek od **Peter** » 13 úno 2011 22:30

Fíha znie to dosť nádejne a máte pravdu je v tom strašný guláš, ja v tom mám guláš uvedený postup vyskúšam a potom dám vedieť ako som pochodil. Vopred ďakujem za pomoc a za ochotu.

#4 Příspěvek od **vyosek** » 13 úno 2011 22:47

Je tam straslive moc haveti, uvidime jestli to PC prezije...kdyby nahodou spadl tak zkusime jeste nejake opravy - doufam ze mate nejake druhe PC ze ktereho muzete pripadne napsat...

Peter · #5 Příspěvek od **Peter** » 14 úno 2011 10:53

Nech sa páči tu je log :

ComboFix 11-02-13.03 - L 14.02.2011 10:34:46.1.2 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1919.1671 [GMT 1:00]
Spuštěný z: c:\documents and settings\L\Plocha\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\L\Data aplikací\BlackshadesBot.exe
c:\documents and settings\L\Data aplikací\dllls.exe
c:\documents and settings\L\Data aplikací\Fetau
c:\documents and settings\L\Data aplikací\Fetau\kyguk.exe
c:\documents and settings\L\Data aplikací\Microsoft\bot.exe
c:\documents and settings\L\Data aplikací\Microsoft\svchosts.exe
c:\documents and settings\L\Data aplikací\PriceGong
c:\documents and settings\L\Data aplikací\PriceGong\Data\1.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\a.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\b.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\c.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\d.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\e.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\f.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\g.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\h.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\i.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\J.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\k.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\l.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\m.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\mru.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\n.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\o.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\p.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\q.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\r.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\s.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\t.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\u.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\v.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\w.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\x.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\y.xml
c:\documents and settings\L\Data aplikací\PriceGong\Data\z.xml
c:\program files\NetMeeting\secedit.exe
c:\program files\smss.exe
c:\windows\pavicl.dll
c:\windows\system32\install
c:\windows\system32\install\setup.exe
c:\windows\system32\sshnas21.dll
c:\windows\system32\win
c:\windows\system32\win\Framework.exe
c:\windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_SSHNAS
-------\Service_SSHNAS
-------\Legacy_RPCHGM
-------\Service_RPCHGM

((((((((((((((((((((((((( Soubory vytvořené od 2011-01-14 do 2011-02-14 )))))))))))))))))))))))))))))))
.

2011-02-27 23:08 . 2011-02-27 23:08 106695 ----a-w- c:\program files\ocIMkfmAkFDK.exe
2011-02-27 15:10 . 2011-02-27 15:10 229376 ----a-w- c:\documents and settings\L\Data aplikací\svchoster.exe
2011-02-27 12:43 . 2011-02-27 12:43 90112 ----a-w- c:\program files\jLhfnaYGUScD.exe
2011-02-27 12:36 . 2011-02-27 12:36 53248 ----a-w- c:\program files\jpOQemwlpjIl.exe
2011-02-14 09:21 . 2011-02-14 08:59 138240 ----a-w- c:\windows\Vqitob.exe
2011-02-13 19:04 . 2011-02-13 19:07 -------- d-----w- c:\program files\trend micro
2011-02-13 19:04 . 2011-02-13 19:04 -------- d-----w- C:\rsit
2011-02-13 18:01 . 2011-02-13 18:01 138240 ----a-w- c:\windows\Vqitoa.exe
2011-02-13 13:15 . 2011-02-13 13:15 -------- d-----w- c:\windows\l2schemas
2011-02-13 13:15 . 2011-02-13 13:15 -------- d-----w- c:\windows\system32\cs
2011-02-13 13:15 . 2011-02-13 13:15 -------- d-----w- c:\windows\system32\bits
2011-02-10 14:07 . 2011-02-10 14:07 0 ----a-w- c:\program files\iVXONEmdHKrx.exe
2011-02-10 06:07 . 2011-02-10 06:07 0 ----a-w- c:\program files\SLowcfAEQruB.exe
2011-02-10 06:07 . 2011-02-10 06:07 0 ----a-w- c:\program files\UPUTWroYJQYy.exe
2011-02-09 23:25 . 2011-02-09 23:25 0 ----a-w- c:\program files\GAEwRqxVRIvO.exe
2011-02-09 21:31 . 2011-02-09 21:31 0 ----a-w- c:\program files\rFpQVpvFGVKk.exe
2011-02-09 20:37 . 2011-02-09 20:37 0 ----a-w- c:\program files\BqITMInLUQfL.exe
2011-02-09 20:13 . 2011-02-09 20:13 0 ----a-w- c:\program files\hWOJgUmMIajQ.exe
2011-02-09 20:10 . 2011-02-09 20:10 0 ----a-w- c:\program files\jydJvypYObjX.exe
2011-02-09 20:07 . 2011-02-09 20:07 0 ----a-w- c:\program files\YEAQssHqPVUC.exe
2011-02-08 18:01 . 2011-02-08 18:01 0 ----a-w- c:\program files\upgEsYdUqclN.exe
2011-02-08 17:58 . 2011-02-08 17:58 0 ----a-w- c:\program files\avEQNXaPYeei.exe
2011-02-08 16:27 . 2011-02-08 16:27 0 ----a-w- c:\program files\XFNbICsjQbSH.exe
2011-02-08 16:24 . 2011-02-08 16:24 0 ----a-w- c:\program files\fskAIISxajwS.exe
2011-02-07 20:49 . 2011-02-13 11:47 -------- d-----w- c:\windows\system32\Atheros_L2
2011-02-07 20:49 . 2007-08-21 15:50 30208 ----a-w- c:\windows\system32\drivers\l251x86.sys
2011-02-07 20:47 . 2006-06-09 23:07 27520 ----a-w- c:\windows\system32\drivers\RTSTOR.sys
2011-02-07 20:47 . 2004-07-05 20:07 83968 ----a-w- c:\windows\system\DriveIcon.dll
2011-02-07 20:46 . 2011-02-07 20:46 -------- d-----w- c:\program files\ATK Hotkey
2011-02-07 20:45 . 2011-02-07 20:45 -------- d-----w- c:\documents and settings\L\Data aplikací\Carambis
2011-02-07 20:45 . 2011-02-07 20:45 -------- d-----w- c:\program files\Carambis
2011-02-07 20:43 . 2011-02-07 20:43 -------- d-----w- c:\program files\Motorola
2011-02-07 20:43 . 2006-11-22 16:35 982272 ----a-w- c:\windows\system32\drivers\smserial.sys
2011-02-07 20:43 . 2006-11-22 16:31 196608 ----a-w- c:\windows\system32\sm56co6a.dll
2011-02-05 11:53 . 2011-02-07 16:55 -------- d-----w- c:\documents and settings\L\Data aplikací\Bakyru
2011-02-05 11:27 . 2011-02-05 11:27 -------- d-----w- c:\documents and settings\L\Local Settings\Data aplikací\Opera
2011-02-05 11:27 . 2011-02-05 11:27 -------- d-----w- c:\program files\Opera
2011-02-03 20:57 . 2011-02-03 20:57 13824 ---h--w- c:\documents and settings\L\Data aplikací\GetProcAddress.dll
2011-02-02 01:15 . 2011-02-02 01:15 604140 --sha-w- c:\windows\system32\drivers\ISwift3.dat
2011-02-02 01:09 . 2011-02-02 10:43 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Kaspersky Lab
2011-02-02 01:05 . 2011-02-02 01:05 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Kaspersky Lab Setup Files
2011-02-01 19:28 . 2011-02-01 19:28 344064 ----a-w- c:\program files\cjlPftcmcaCG.exe
2011-02-01 18:39 . 2011-02-01 18:39 344064 ---h--w- c:\program files\WUpRFNNDgRkW.exe
2011-01-28 16:55 . 2011-01-28 16:55 55296 ----a-w- c:\windows\winsvchost.exe
2011-01-25 18:39 . 2011-02-27 12:01 241664 ---h--w- c:\documents and settings\L\Data aplikací\raw2.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-14 09:43 . 2011-02-14 09:44 249856 ---h--w- c:\documents and settings\L\Data aplikací\Microsoft\svchost.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-06-24 39408]
"WinDEF"="c:\documents and settings\L\Data aplikací\raw2.exe" [2011-02-27 241664]
"0XQHGQHZYM"="c:\documents and settings\L\Data aplikací\svchoster.exe" [2011-02-27 229376]
"Driver Updater"="c:\program files\Carambis\Driver Updater\dupdater.exe" [2010-06-08 4973056]
"svchost.exe"="c:\documents and settings\L\Data aplikací\Microsoft\svchost.exe" [2011-02-14 249856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinDEF"="c:\documents and settings\L\Data aplikací\raw2.exe" [2011-02-27 241664]
"0XQHGQHZYM"="c:\documents and settings\L\Data aplikací\svchoster.exe" [2011-02-27 229376]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 630784]
"ATKHOTKEY"="c:\program files\ATK Hotkey\Hcontrol.exe" [2007-07-12 225280]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\Currentversion\policies\explorer\Run]
"WinDEF"="c:\documents and settings\L\Data aplikací\raw2.exe" [2011-02-27 241664]
"0XQHGQHZYM"="c:\documents and settings\L\Data aplikací\svchoster.exe" [2011-02-27 229376]

c:\documents and settings\L\Nabˇdka Start\Programy\Po spuçtŘnˇ\
CCC.lnk - c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [2006-9-29 49152]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
TMMonitor.lnk - c:\program files\ArcSoft\TotalMedia\TMMonitor.exe [2009-6-21 147456]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\umi.exe"=
"c:\\Documents and Settings\\L\\Plocha\\dc\\ApexDC\\ApexDC\\ApexDC.exe"=
"c:\\Program Files\\ICQ7.2\\ICQ.exe"=
"c:\\Program Files\\ICQ7.2\\aolload.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\WUpRFNNDgRkW.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Documents and Settings\\L\\Data aplikací\\raw2.exe"=
"c:\\Documents and Settings\\L\\Data aplikací\\svchoster.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [18.10.2010 17:56 436792]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [14.8.2010 11:10 135664]
S3 BDA_Capture_220;Digital TV receiver Driver 1.0.1.3;c:\windows\system32\drivers\BDA_Capture_220.sys [9.11.2005 8:32 14080]
S3 BDA_Loader_220;Digital TV Receiver Firmware Loader 5.9.19.0;c:\windows\system32\drivers\BDA_Loader_220.sys [9.11.2005 8:32 15616]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\L\LOCALS~1\Temp\WGB7E.tmp --> c:\docume~1\L\LOCALS~1\Temp\WGB7E.tmp [?]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\Garena\plugins\UI\safedrv.sys --> c:\program files\Garena\plugins\UI\safedrv.sys [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{EBBAE2EB-3CCF-9B77-A4C2-ADDDDC1F5EF2}]
2011-02-27 15:10 229376 ----a-w- c:\documents and settings\L\Data aplikací\svchoster.exe

[HKEY_CURRENT_USER\software\microsoft\active setup\installed components\{EBBAE2EB-3CCF-9B77-A4C2-ADDDDC1F5EF2}]
2011-02-27 15:10 229376 ----a-w- c:\documents and settings\L\Data aplikací\svchoster.exe
.
Obsah adresáře 'Naplánované úlohy'

2011-02-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-08-14 10:10]

2011-02-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-08-14 10:10]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2786678
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&s ... f8&oe=utf8
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
FF - ProfilePath - c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://www.azet.sk/
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: Conduit Engine : engine@conduit.com - %profile%\extensions\engine@conduit.com
FF - Ext: uTorrentBar Community Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - %profile%\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-{9F94C4BC-8AD1-2432-71E6-D88B7D12071E} - c:\documents and settings\L\Data aplikací\Fetau\kyguk.exe
HKCU-Run-smss - c:\program files\smss.exe
HKCU-Run-HKCU\SOFTWARE............. - c:\documents and settings\L\Data aplikací\BlackshadesBot.exe
HKCU-Run-X5P70U2SIVHBV - c:\documents and settings\L\Data aplikací\UL54RY01UKU0.exe
HKCU-Run-Trubagedeyox - c:\windows\pavicl.dll
HKCU-Run-dlll.exe - c:\documents and settings\L\Data aplikací\dllls.exe
HKCU-Run-MSWUpdate - c:\documents and settings\L\Data aplikací\svchost.exe
HKLM-Run-HKCU\SOFTWARE............. - c:\documents and settings\L\Data aplikací\BlackshadesBot.exe
HKLM-Run-X5P70U2SIVHBV - c:\documents and settings\L\Data aplikací\UL54RY01UKU0.exe
HKLM-Run-dlll.exe - c:\documents and settings\L\Data aplikací\dllls.exe
HKLM-Explorer_Run-HKCU\SOFTWARE............. - c:\documents and settings\L\Data aplikací\BlackshadesBot.exe
HKLM-Explorer_Run-X5P70U2SIVHBV - c:\documents and settings\L\Data aplikací\UL54RY01UKU0.exe
HKLM-Explorer_Run-Javaconf - c:\documents and settings\L\Data aplikací\javaconf.exe
HKLM-Explorer_Run-dlll.exe - c:\documents and settings\L\Data aplikací\dllls.exe
HKLM_ActiveSetup-{ED9FD10F-BB2D-CF05-4DDA-6CD2FCBD165D} - c:\documents and settings\L\Data aplikací\BlackshadesBot.exe
HKLM_ActiveSetup-{F2AFAE3A-8ADB-0EFB-5D0F-DEBE6E8EBBAC} - c:\documents and settings\L\Data aplikací\WinDefender.exe
HKLM_ActiveSetup-{FCEBFB93-5E58-60FC-ECBF-1305AE5AE0C4} - c:\documents and settings\L\Data aplikací\WinDefender.exe
HKCU_ActiveSetup-{1E75B5E6-FB4F-EFAB-5FE1-FA6BC349DDEE} - c:\documents and settings\L\Data aplikací\javaconf.exe
HKCU_ActiveSetup-{ED9FD10F-BB2D-CF05-4DDA-6CD2FCBD165D} - c:\documents and settings\L\Data aplikací\BlackshadesBot.exe
HKCU_ActiveSetup-{F2AFAE3A-8ADB-0EFB-5D0F-DEBE6E8EBBAC} - c:\documents and settings\L\Data aplikací\WinDefender.exe
HKCU_ActiveSetup-{FCEBFB93-5E58-60FC-ECBF-1305AE5AE0C4} - c:\documents and settings\L\Data aplikací\WinDefender.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-14 10:42
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine]
"ImagePath"="\??\c:\docume~1\L\LOCALS~1\Temp\WGB7E.tmp"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(808)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(1616)
c:\windows\system32\msi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\rundll32.exe
c:\program files\ATK Hotkey\ATKOSD.exe
c:\program files\ATK Hotkey\WDC.exe
.
**************************************************************************
.
Celkový čas: 2011-02-14 10:46:52 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-02-14 09:46

Před spuštěním: Volných bajtů: 11 588 829 184
Po spuštění: Volných bajtů: 14 497 546 240

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 795FD7FC598A48760C47F413C9E76F37

Noťas to dáko prežil všetko prebehlo bez komplikácií a plocha sa mi vrátila na začiatku mi ale vyhodilo dáky rundll error a ešte dáky to si nepamätám myslím že sa s tým bude dať žiť. Dakujem velmi pekne za pomoc velmi ste mi pomohli. Inak chcel som sa opýtať že či sa dá reinstall môj terajší Xp na windows 7 dajme tomu ale cez USB bo moja mechanika je už fuč. Ešte raz vdaka

Peter · #6 Příspěvek od **Peter** » 14 úno 2011 10:57

a ešte aký je dobrý antivir bo nemám žiadny moc sa one ani nestarám lebo mi to príde všetko na jedno kopyto čo som tu čítal staré antiviráky sú nám nanič kedže sú stále novšie a novšie vírusy. stačí aj ak mi len hodíš link na dáku stránku ohladom toho temata bo som aj tu hladal ale konkrétneho som si vybral málo.

#7 Příspěvek od **vyosek** » 14 úno 2011 11:23

Antivir dete Avast

log je jeste treba dolustit, jsem ale momentalnde v praci, takze nemam na to klidek - budu tu kolem treti odpoledne, tak dodam dalsi postup - prosim i strpeni

Peter · #8 Příspěvek od **Peter** » 14 úno 2011 12:00

Jasné ved ja sa nikam neponáhlam na dobré sa oplatí počkať

#9 Příspěvek od **vyosek** » 14 úno 2011 15:35

Pokud nemate, tak presunte Combofix na plochu

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

KillAll::

RegLock::
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

DDS::
uStart Page = hxxp://search.conduit.com?SearchSource= ... =CT2786678
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

Firefox::
FF - ProfilePath - c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.as ... ource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.as ... 2786678&q=
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: uTorrentBar Community Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - %profile%\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\documents and settings\L\Data aplikací\svchoster.exe
c:\documents and settings\L\Data aplikací\raw2.exe
c:\documents and settings\L\Data aplikací\Microsoft\svchost.exe
c:\windows\winsvchost.exe
c:\program files\cjlPftcmcaCG.exe
c:\program files\WUpRFNNDgRkW.exe
c:\program files\iVXONEmdHKrx.exe
c:\program files\SLowcfAEQruB.exe
c:\program files\UPUTWroYJQYy.exe
c:\program files\GAEwRqxVRIvO.exe
c:\program files\rFpQVpvFGVKk.exe
c:\program files\BqITMInLUQfL.exe
c:\program files\hWOJgUmMIajQ.exe
c:\program files\jydJvypYObjX.exe
c:\program files\YEAQssHqPVUC.exe
c:\program files\upgEsYdUqclN.exe
c:\program files\avEQNXaPYeei.exe
c:\program files\XFNbICsjQbSH.exe
c:\program files\fskAIISxajwS.exe
c:\windows\Vqitoa.exe
c:\program files\ocIMkfmAkFDK.exe
c:\documents and settings\L\Data aplikací\svchoster.exe
c:\program files\jLhfnaYGUScD.exe
c:\program files\jpOQemwlpjIl.exe
c:\windows\Vqitob.exe

Driver::
gupdate

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{EBBAE2EB-3CCF-9B77-A4C2-ADDDDC1F5EF2}]
[-HKEY_CURRENT_USER\software\microsoft\active setup\installed components\{EBBAE2EB-3CCF-9B77-A4C2-ADDDDC1F5EF2}]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Documents and Settings\\L\\Data aplikací\\raw2.exe"=-
"c:\\Documents and Settings\\L\\Data aplikací\\svchoster.exe"=-
[HKEY_LOCAL_MACHINE\software\microsoft\windows\Currentversion\policies\explorer\Run]
"WinDEF"=-
"0XQHGQHZYM"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinDEF"=-
"0XQHGQHZYM"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"=-
"WinDEF"=-
"0XQHGQHZYM"=-
"Driver Updater"=-
"svchost.exe"=-

Reboot::

Ulozte vytvoreny TXT jako CFScript.txt
Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

Peter · #10 Příspěvek od **Peter** » 15 úno 2011 21:47

a čo by to malo spraviť s PC ? mám aj zálohovať radšej ? Ale dakujem určite skúsim potom vám vypíšem ten log.

Peter · #11 Příspěvek od **Peter** » 15 úno 2011 23:14

Dobrý večer nech sa páči tu je ten log po reštarte :

ComboFix 11-02-13.03 - L 15.02.2011 23:00:11.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1919.1284 [GMT 1:00]
Spuštěný z: c:\documents and settings\L\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\L\Plocha\CFScript.txt

FILE ::
"c:\documents and settings\L\Data aplikací\Microsoft\svchost.exe"
"c:\documents and settings\L\Data aplikací\raw2.exe"
"c:\documents and settings\L\Data aplikací\svchoster.exe"
"c:\program files\avEQNXaPYeei.exe"
"c:\program files\BqITMInLUQfL.exe"
"c:\program files\cjlPftcmcaCG.exe"
"c:\program files\fskAIISxajwS.exe"
"c:\program files\GAEwRqxVRIvO.exe"
"c:\program files\hWOJgUmMIajQ.exe"
"c:\program files\iVXONEmdHKrx.exe"
"c:\program files\jLhfnaYGUScD.exe"
"c:\program files\jpOQemwlpjIl.exe"
"c:\program files\jydJvypYObjX.exe"
"c:\program files\ocIMkfmAkFDK.exe"
"c:\program files\rFpQVpvFGVKk.exe"
"c:\program files\SLowcfAEQruB.exe"
"c:\program files\upgEsYdUqclN.exe"
"c:\program files\UPUTWroYJQYy.exe"
"c:\program files\WUpRFNNDgRkW.exe"
"c:\program files\XFNbICsjQbSH.exe"
"c:\program files\YEAQssHqPVUC.exe"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\Vqitoa.exe"
"c:\windows\Vqitob.exe"
"c:\windows\winsvchost.exe"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\L\Data aplikací\Microsoft\Run.exe
c:\documents and settings\L\Data aplikací\Microsoft\svchost.exe
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components\ITB_History.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\prefs.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\user.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome.manifest
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\about.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\about.xul
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\autocomplete.xml
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\exitobserver.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\globals.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\highlight.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtabs.css
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtabs.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtoolbar.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtoolbar.xul
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\bgLarge.gif
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\bgSmall.gif
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\buttonBlue.gif
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\buttonGreen.gif
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\searchLogo.gif
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\localfileupdate.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\menu-button.xml
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab.html
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_bg.html
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_cz.html
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_de.html
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_en.html
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_es.html
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_fr.html
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_he.html
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_it.html
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_ru.html
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_sk.html
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_tr.html
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_uk.html
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\options.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\options.xul
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\parsegamesxml.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\parsemenuxml.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\peoplesearch.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\peoplesearch.xul
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\prefutils.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\search.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\splitter.xml
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\statistics.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\tabcontext.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\utilities.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\voucher.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\zoom.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\icq_locale.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\itb.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\itb_options.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\options.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\icq_locale.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\itb.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\itb_options.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\options.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\icq_locale.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\itb.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\itb_options.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\options.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\icq_locale.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\itb.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\itb_options.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\options.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\icq_locale.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\itb.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\itb_options.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\options.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\icq_locale.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\itb.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\itb_options.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\options.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\icq_locale.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\itb.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\itb_options.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\options.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\icq_locale.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\itb.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\itb_options.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\options.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\icq_locale.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\itb.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\itb_options.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\options.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\icq_locale.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\itb.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\itb_options.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\options.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\icq_locale.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\itb.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\itb_options.dtd
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\options.properties
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\about.css
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\abt.png
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\ain.png
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\ang.png
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\default.css
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\dis.png
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\dropmarker.css
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\hide.png
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\icons.png
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\logo_small.gif
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\more_vouchers_r.png
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\more_vouchers_y.png
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\options.css
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\peoplesearch.css
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\voucher_bg.png
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\voucher_bg_y.png
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\install.rdf
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\manifest.mf
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.rsa
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.sf
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.gif
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.src
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.xml
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitAutoCompleteSearch.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitAutoCompleteSearch.xpt
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitToolbar.idl
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitToolbar.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitToolbar.xpt
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCore.dll
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCore.xpt
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCoreGecko19.dll
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\alertSettingsComponent.xml
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\appContextMenu.xml
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\engineContextMenu.xml
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\engineSettings.json
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\fbAlert.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\getAppsContextMenu.xml
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\postAppsContextMenu.xml
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\toolbarContextMenu.xml
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\unsharedAppsContextMenu.xml
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\chrome.manifest
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\chrome\utorrentbar.jar
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\install.rdf
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\lib\xpcom.js
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\META-INF\manifest.mf
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\META-INF\zigbert.rsa
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\META-INF\zigbert.sf
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin\conduit.gif
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin\conduit.ico
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin\conduit.PNG
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin\conduit.src
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin\conduit.xml
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\setup.ini
c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\version.txt
c:\program files\avEQNXaPYeei.exe
c:\program files\BqITMInLUQfL.exe
c:\program files\cjlPftcmcaCG.exe
c:\program files\fskAIISxajwS.exe
c:\program files\GAEwRqxVRIvO.exe
c:\program files\hWOJgUmMIajQ.exe
c:\program files\iVXONEmdHKrx.exe
c:\program files\jLhfnaYGUScD.exe
c:\program files\jpOQemwlpjIl.exe
c:\program files\jydJvypYObjX.exe
c:\program files\ocIMkfmAkFDK.exe
c:\program files\rFpQVpvFGVKk.exe
c:\program files\SLowcfAEQruB.exe
c:\program files\upgEsYdUqclN.exe
c:\program files\UPUTWroYJQYy.exe
c:\program files\WUpRFNNDgRkW.exe
c:\program files\XFNbICsjQbSH.exe
c:\program files\YEAQssHqPVUC.exe
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Vqitoa.exe
c:\windows\Vqitob.exe
c:\windows\winsvchost.exe

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_GUPDATE
-------\Service_gupdate

((((((((((((((((((((((((( Soubory vytvořené od 2011-01-15 do 2011-02-15 )))))))))))))))))))))))))))))))
.

2011-02-27 15:10 . 2011-02-27 15:10 229376 ----a-w- c:\documents and settings\L\Data aplikací\svchoster.exe
2011-02-13 19:04 . 2011-02-13 19:07 -------- d-----w- c:\program files\trend micro
2011-02-13 19:04 . 2011-02-13 19:04 -------- d-----w- C:\rsit
2011-02-13 17:46 . 2010-09-18 06:53 974848 -c----w- c:\windows\system32\dllcache\mfc42.dll
2011-02-13 17:46 . 2010-09-18 06:53 953856 -c----w- c:\windows\system32\dllcache\mfc40u.dll
2011-02-13 17:46 . 2010-08-23 16:12 617472 -c----w- c:\windows\system32\dllcache\comctl32.dll
2011-02-13 17:45 . 2010-11-02 15:17 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
2011-02-13 17:38 . 2010-10-11 14:59 45568 -c----w- c:\windows\system32\dllcache\wab.exe
2011-02-13 13:15 . 2011-02-13 13:15 -------- d-----w- c:\windows\l2schemas
2011-02-13 13:15 . 2011-02-13 13:15 -------- d-----w- c:\windows\system32\cs
2011-02-13 13:15 . 2011-02-13 13:15 -------- d-----w- c:\windows\system32\bits
2011-02-07 20:49 . 2011-02-13 11:47 -------- d-----w- c:\windows\system32\Atheros_L2
2011-02-07 20:49 . 2007-08-21 15:50 30208 ----a-w- c:\windows\system32\drivers\l251x86.sys
2011-02-07 20:47 . 2006-06-09 23:07 27520 ----a-w- c:\windows\system32\drivers\RTSTOR.sys
2011-02-07 20:47 . 2004-07-05 20:07 83968 ----a-w- c:\windows\system\DriveIcon.dll
2011-02-07 20:46 . 2011-02-07 20:46 -------- d-----w- c:\program files\ATK Hotkey
2011-02-07 20:45 . 2011-02-07 20:45 -------- d-----w- c:\documents and settings\L\Data aplikací\Carambis
2011-02-07 20:45 . 2011-02-07 20:45 -------- d-----w- c:\program files\Carambis
2011-02-07 20:43 . 2011-02-07 20:43 -------- d-----w- c:\program files\Motorola
2011-02-07 20:43 . 2006-11-22 16:35 982272 ----a-w- c:\windows\system32\drivers\smserial.sys
2011-02-07 20:43 . 2006-11-22 16:31 196608 ----a-w- c:\windows\system32\sm56co6a.dll
2011-02-05 11:53 . 2011-02-07 16:55 -------- d-----w- c:\documents and settings\L\Data aplikací\Bakyru
2011-02-05 11:27 . 2011-02-05 11:27 -------- d-----w- c:\documents and settings\L\Local Settings\Data aplikací\Opera
2011-02-05 11:27 . 2011-02-05 11:27 -------- d-----w- c:\program files\Opera
2011-02-03 20:57 . 2011-02-03 20:57 13824 ---h--w- c:\documents and settings\L\Data aplikací\GetProcAddress.dll
2011-02-02 01:15 . 2011-02-02 01:15 604140 --sha-w- c:\windows\system32\drivers\ISwift3.dat
2011-02-02 01:09 . 2011-02-02 10:43 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Kaspersky Lab
2011-02-02 01:05 . 2011-02-02 01:05 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Kaspersky Lab Setup Files
2011-01-25 18:39 . 2011-02-27 12:01 241664 ---h--w- c:\documents and settings\L\Data aplikací\raw2.exe
2011-01-21 14:44 . 2011-01-21 14:44 440320 -c----w- c:\windows\system32\dllcache\shimgvw.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-21 14:44 . 2004-08-17 13:49 440320 ----a-w- c:\windows\system32\shimgvw.dll
2011-01-07 14:09 . 2004-08-17 13:48 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-12-31 14:04 . 2004-08-17 13:44 1854976 ----a-w- c:\windows\system32\win32k.sys
2010-12-22 12:34 . 2004-08-17 13:49 301568 ----a-w- c:\windows\system32\kerberos.dll
2010-12-20 23:06 . 2004-08-17 13:49 1830912 ----a-w- c:\windows\system32\inetcpl.cpl
2010-12-20 23:06 . 2004-08-17 13:49 832512 ----a-w- c:\windows\system32\wininet.dll
2010-12-20 23:06 . 2004-08-17 13:49 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-12-20 23:06 . 2004-08-17 13:49 17408 ----a-w- c:\windows\system32\corpol.dll
2010-12-20 17:25 . 2004-08-17 13:49 729088 ----a-w- c:\windows\system32\lsasrv.dll
2010-12-20 12:55 . 2004-08-17 13:44 389120 ----a-w- c:\windows\system32\html.iec
2010-12-09 15:15 . 2004-08-17 13:48 713216 ----a-w- c:\windows\system32\ntdll.dll
2010-12-09 15:14 . 2004-08-17 15:45 2029056 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-12-09 15:14 . 2004-08-17 13:45 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-12-09 14:30 . 2004-08-17 13:49 33280 ----a-w- c:\windows\system32\csrsrv.dll
2010-11-18 18:15 . 2009-06-13 16:13 81920 ----a-w- c:\windows\system32\isign32.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 630784]
"ATKHOTKEY"="c:\program files\ATK Hotkey\Hcontrol.exe" [2007-07-12 225280]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\L\Nabˇdka Start\Programy\Po spuçtŘnˇ\
CCC.lnk - c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [2006-9-29 49152]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
TMMonitor.lnk - c:\program files\ArcSoft\TotalMedia\TMMonitor.exe [2009-6-21 147456]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\umi.exe"=
"c:\\Documents and Settings\\L\\Plocha\\dc\\ApexDC\\ApexDC\\ApexDC.exe"=
"c:\\Program Files\\ICQ7.2\\ICQ.exe"=
"c:\\Program Files\\ICQ7.2\\aolload.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [18.10.2010 17:56 436792]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 BDA_Capture_220;Digital TV receiver Driver 1.0.1.3;c:\windows\system32\drivers\BDA_Capture_220.sys [9.11.2005 8:32 14080]
S3 BDA_Loader_220;Digital TV Receiver Firmware Loader 5.9.19.0;c:\windows\system32\drivers\BDA_Loader_220.sys [9.11.2005 8:32 15616]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\L\LOCALS~1\Temp\WGB7E.tmp --> c:\docume~1\L\LOCALS~1\Temp\WGB7E.tmp [?]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\Garena\plugins\UI\safedrv.sys --> c:\program files\Garena\plugins\UI\safedrv.sys [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
FF - ProfilePath - c:\documents and settings\L\Data aplikací\Mozilla\Firefox\Profiles\5ga0a9rw.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.azet.sk/
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: Conduit Engine : engine@conduit.com - %profile%\extensions\engine@conduit.com
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-15 23:08
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine]
"ImagePath"="\??\c:\docume~1\L\LOCALS~1\Temp\WGB7E.tmp"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(812)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(1316)
c:\windows\system32\msi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
c:\windows\system32\wscntfy.exe
c:\program files\ATK Hotkey\ATKOSD.exe
c:\program files\ATK Hotkey\WDC.exe
.
**************************************************************************
.
Celkový čas: 2011-02-15 23:11:45 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-02-15 22:11
ComboFix2.txt 2011-02-14 09:46

Před spuštěním: 7 291 097 088
Po spuštění: 7 265 120 256

- - End Of File - - 7155C6CCA4F8AEFBAF3274082015C788

#12 Příspěvek od **vyosek** » 15 úno 2011 23:28

Stahnete OTM (viz muj podpis)

Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize

Kód: Vybrat vše

:files
c:\documents and settings\L\Data aplikací\svchoster.exe
c:\documents and settings\L\Data aplikací\raw2.exe
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]

Kliknete na cervene tlacitko MoveIt!
Budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles, obsah sem vlozte

Peter · #13 Příspěvek od **Peter** » 16 úno 2011 11:39

Prosím Vás čo to je OTM (viz muj podpis) je to dáka skratka? alebo ozaj mám dačo stiahnuť bo som to kukal na googli ale vyhladalo mi to dáke poznámkové veci a fungujem na XP.

#14 Příspěvek od **vyosek** » 16 úno 2011 11:40

OTM je program, mam jej v podpise, nebo jej muzete stahnout odsud http://oldtimer.geekstogo.com/OTM.exe

Peter · #15 Příspěvek od **Peter** » 16 úno 2011 12:05

Prepáčte nevšimol som si

All processes killed
========== FILES ==========
c:\documents and settings\L\Data aplikací\svchoster.exe moved successfully.
c:\documents and settings\L\Data aplikací\raw2.exe moved successfully.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\002968_.tmp moved successfully.
C:\WINDOWS\SET3.tmp moved successfully.
C:\WINDOWS\SET4.tmp moved successfully.
C:\WINDOWS\SET8.tmp moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP10A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP130.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1B8.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1C.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1ED.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1F.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP295.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2BC.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2C3.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP386.tmp folder moved successfully.
C:\WINDOWS\Installer\MSI58.tmp moved successfully.
C:\WINDOWS\SoftwareDistribution\Download\0884d6b6e84e03b0f813424942eeb46d\BIT7.tmp moved successfully.
C:\WINDOWS\SoftwareDistribution\Download\5a6a24c9d667689fbfedb9c85851ed1b\BIT8.tmp moved successfully.
C:\WINDOWS\system32\CONFIG.TMP moved successfully.
C:\WINDOWS\system32\CatRoot\TMP1.tmp moved successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56504 bytes

User: L
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 1246731 bytes
->FireFox cache emptied: 64856554 bytes
->Opera cache emptied: 110475713 bytes
->Flash cache emptied: 101817 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 483 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 67 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 169,00 mb

OTM by OldTimer - Version 3.1.17.2 log created on 02162011_120104

VIRY.CZ

prázdna plocha žiadna ikona žiaden Start panel len obrázok

prázdna plocha žiadna ikona žiaden Start panel len obrázok

Re: prázdna plocha žiadna ikona žiaden Start panel len obráz

Re: prázdna plocha žiadna ikona žiaden Start panel len obráz

Re: prázdna plocha žiadna ikona žiaden Start panel len obráz

Re: prázdna plocha žiadna ikona žiaden Start panel len obráz

Re: prázdna plocha žiadna ikona žiaden Start panel len obráz

Re: prázdna plocha žiadna ikona žiaden Start panel len obráz

Re: prázdna plocha žiadna ikona žiaden Start panel len obráz

Re: prázdna plocha žiadna ikona žiaden Start panel len obráz

Re: prázdna plocha žiadna ikona žiaden Start panel len obráz

Re: prázdna plocha žiadna ikona žiaden Start panel len obráz

Re: prázdna plocha žiadna ikona žiaden Start panel len obráz

Re: prázdna plocha žiadna ikona žiaden Start panel len obráz

Re: prázdna plocha žiadna ikona žiaden Start panel len obráz

Re: prázdna plocha žiadna ikona žiaden Start panel len obráz