počítač se často vypíná

[vyosek]

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) (viz muj podpis)

• Provedte aktualizaci - treti zalozka
• Provedte uplny sken - nic nemazte
• MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

[skalpik]

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 5838

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

21.2.2011 11:26:23
mbam-log-2011-02-21 (11-26-11).txt

Typ kontroly: Úplný test (C:\|)
Testované objekty: 279955
Uplynulý čas: 1 hodin, 25 minut, 15 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 70

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\Documents and Settings\vasek\Local Settings\Temp\nvxpreaeerc7e493db6.tmp (Trojan.Agent) -> No action taken.
c:\Documents and Settings\vasek\Local Settings\Temp\hofzjgh7ca79b8d.tmp (Trojan.Agent) -> No action taken.
c:\documents and settings\vasek\local settings\Temp\vbzoap03beb32e.tmp (Trojan.Agent) -> No action taken.
c:\program files\Officy\office 2010 activation and conversion kit 1.3\resources\KMSKG\Keygen.exe (RiskWare.Tool.CK) -> No action taken.
c:\Qoobox\quarantine\C\documents and settings\localservice\data aplikací\microsoft\lydazoug.exe.vir (Trojan.Agent) -> No action taken.
c:\Qoobox\quarantine\C\documents and settings\localservice\data aplikací\microsoft\vouciby.exe.vir (Trojan.Agent) -> No action taken.
c:\Qoobox\quarantine\C\documents and settings\vasek\fxmdk.exe.vir (Worm.Rimecud) -> No action taken.
c:\Qoobox\quarantine\C\DOCUME~1\vasek\LOCALS~1\Temp\kfwyhpuu01501515.tmp.vir (Trojan.Agent) -> No action taken.
c:\Qoobox\quarantine\C\DOCUME~1\vasek\LOCALS~1\Temp\vbzoap03beb32e.tmp.vir (Trojan.Agent) -> No action taken.
c:\Qoobox\quarantine\C\RECYCLER\s-1-5-21-0402442840-1596461924-253656365-2919\djwi2kcew.exe.vir (Trojan.Dropper) -> No action taken.
c:\Qoobox\quarantine\C\WINDOWS\Temp\vbzoap03beb32e.tmp.vir (Trojan.Agent) -> No action taken.
c:\system volume information\_restore{ce96f567-7971-4284-9294-366611205933}\RP70\A0137400.exe (RiskWare.Tool.CK) -> No action taken.
c:\system volume information\_restore{ce96f567-7971-4284-9294-366611205933}\RP72\A0142468.exe (Trojan.Agent) -> No action taken.
c:\system volume information\_restore{ce96f567-7971-4284-9294-366611205933}\RP72\A0143468.exe (Trojan.Agent) -> No action taken.
c:\system volume information\_restore{ce96f567-7971-4284-9294-366611205933}\RP72\A0144469.exe (Trojan.Agent) -> No action taken.
c:\system volume information\_restore{ce96f567-7971-4284-9294-366611205933}\RP72\A0144482.exe (Trojan.Agent) -> No action taken.
c:\system volume information\_restore{ce96f567-7971-4284-9294-366611205933}\RP73\A0152570.exe (Trojan.Agent) -> No action taken.
c:\system volume information\_restore{ce96f567-7971-4284-9294-366611205933}\RP73\A0152573.exe (Trojan.Agent) -> No action taken.
c:\system volume information\_restore{ce96f567-7971-4284-9294-366611205933}\RP73\A0152574.exe (Worm.Rimecud) -> No action taken.
c:\system volume information\_restore{ce96f567-7971-4284-9294-366611205933}\RP73\A0152575.exe (Trojan.Dropper) -> No action taken.
c:\system volume information\_restore{ce96f567-7971-4284-9294-366611205933}\RP73\A0152843.exe (Trojan.Agent) -> No action taken.
c:\WINDOWS\Temp\hofzjgh7ca79b8d.tmp (Trojan.Agent) -> No action taken.
c:\WINDOWS\Temp\nvxpreaeerc7e493db6.tmp (Trojan.Agent) -> No action taken.
c:\WINDOWS\Temp\vbzoap03beb32e.tmp (Trojan.Agent) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\local settings\Temp\resources\KMSKG\Keygen.exe (RiskWare.Tool.CK) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\00juepz.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\01niknj.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\0xfkwhr.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\1huobrz.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\1tbozpu.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\1vsubrz.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\55gcfvg.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\5qnlhil.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\5ysbpjs.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\cfgm55uix.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\emhpksj55.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\emhpksm55.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\fjgifh00n.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\fvuq55csvx.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\gnnygtf0.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\hegdfc01h.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\idlgod55a.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\ixlqks55c.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\jrluoxra.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\k55eiliexve.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\laow55amln.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\lvg01bjemh.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\nbwezhb00.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\nyitd001n.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\ojpa01jikn.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\pyy56kdjuq.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\rakzd00zw.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\rcmxhss5.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\rks55iatre.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\smx5suvdyg.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\stngcv56o.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\teizj0mvp.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\uixlqqj56.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\wghn00bpk.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\x55egnreofh.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\y55mkvxeyhb.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\yvxet56ix.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\zicfheqv.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_documents and settings\vasek\nabídka start\Programy\po spuštění\zv00hpksnvp.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_docume~1\vasek\LOCALS~1\Temp\kfwyhpuu01501515.tmp (Trojan.Agent) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_windows\TEMP\kfwyhpuu01501515.tmp (Trojan.Agent) -> No action taken.
c:\_OTM\movedfiles\02192011_171626\c_windows\TEMP\vbzoap03beb32e.tmp (Trojan.Agent) -> No action taken.
c:\_OTM\movedfiles\02202011_094259\c_documents and settings\vasek\nabídka start\Programy\po spuštění\55umbzm.exe (Worm.Autorun) -> No action taken.
c:\_OTM\movedfiles\02202011_094259\c_documents and settings\vasek\nabídka start\Programy\po spuštění\abo01psozf.exe (Trojan.Refroso) -> No action taken.
c:\_OTM\movedfiles\02202011_094259\c_documents and settings\vasek\nabídka start\Programy\po spuštění\ubo01psozf.exe (Trojan.Refroso) -> No action taken.

[vyosek]

Nalezy ktere nejsou v c:\Qoobox a c:\_OTM smazte

Odinstalujte ty nelegalni Office 2010

Stahnete na plochu CKScanner

• Spustte a kliknete na Search for files
• Po dokonceni skenu kliknete na Save List to File a nasledne OK
• Na plose se Vam vytvori log s nazvem ckfiles.txt, jeho obsah mi sem vlozte

Napiste jak se chova PC

[skalpik]

CKScanner - Additional Security Risks - These are not necessarily bad
c:\_otm\movedfiles\02192011_171626\c_documents and settings\vasek\local settings\temp\resources\kmskg\keygen.exe
scanner sequence 3.AP.11
----- EOF -----

[vyosek]

Jak se chova PC

[skalpik]

pocitac se chova dobre. Nevypina se, ani se nejak neprehriva,nebezi pomaleji

[vyosek]

Odinstalujte Combofix

• Start - Spustit (nebo pouzijte klavesobou zkratku Win+R)
• Napiste ComboFix /Uninstall
• Stisknete Enter
• Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

MBAM muzete odinstalovat nebo nechat na obcasny sken - v pripade nalezu velmi doporucuji dat sem log na posouzeni, at si neodstrelite neco legitimniho

Havet se usadila v bodech obnoveni - smazte je dle navodu kolegy riffa http://www.viry.cz/forum/viewtopic.php?f=11&t=47040

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis)
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

Dejte novy log z RSIT a napiste ci je jiz PC v poradku

[skalpik]

Logfile of random's system information tool 1.08 (written by random/random)
Run by vasek at 2011-02-21 13:44:57
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 25 GB (33%) free of 76 GB
Total RAM: 447 MB (23% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:45:10, on 21.2.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Documents and Settings\LocalService\Data aplikací\Microsoft\divin.exe
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\HPQ\One-Touch\OneTouch.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\QIP 2010\qip.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\WINDOWS\system32\fizizoumut.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\TEMP\hofzjgh7CA79B8D.tmp
C:\DOCUME~1\vasek\LOCALS~1\Temp\hofzjgh7CA79B8D.tmp
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\vasek\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\vasek.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [QT4HPOT] C:\Program Files\HPQ\One-Touch\OneTouch.EXE
O4 - HKLM\..\Run: [fudoh] C:\WINDOWS\system32\fizizoumut.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Infium] "C:\Program Files\QIP 2010\qip.exe" /autorun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [fudoh] C:\Documents and Settings\LocalService\Data aplikací\Microsoft\fizizoumut.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [biquoottaf] C:\Documents and Settings\LocalService\Data aplikací\Microsoft\padofou.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: SmartLinkService (a7yya77di) - Google Inc. - C:\Documents and Settings\LocalService\Data aplikací\Microsoft\divin.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: HP Configuration Interface Service (HPConfig) - Hewlett-Packard - C:\WINDOWS\system32\HPConfig.exe
O23 - Service: HPWirelessMgr - Hewlett-Packard Co. - C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ASF Agent (mfa4kf8baa) - Google Inc. - C:\WINDOWS\system32\hujupiwoow.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

--
End of file - 7480 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-01-04 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-01-04 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2003-05-22 110592]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2003-05-22 610304]
"ATIModeChange"=C:\WINDOWS\system32\Ati2mdxx.exe [2002-08-16 28672]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2002-08-14 290816]
"Cpqset"=C:\Program Files\HPQ\Default Settings\cpqset.exe [2003-10-05 196670]
"Display Settings"=C:\Program Files\HPQ\Notebook Utilities\hptasks.exe [2002-08-15 45056]
"AdaptecDirectCD"=C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe [2003-03-26 684032]
"CARPService"=C:\WINDOWS\system32\carpserv.exe [2003-04-15 4608]
"QT4HPOT"=C:\Program Files\HPQ\One-Touch\OneTouch.EXE [2003-03-13 106496]
"fudoh"=C:\WINDOWS\system32\fizizoumut.exe [2011-02-19 245760]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Infium"=C:\Program Files\QIP 2010\qip.exe [2011-02-01 5856640]

C:\Documents and Settings\vasek\Nabídka Start\Programy\Po spuštění
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Winamp\winamp.exe"="C:\Program Files\Winamp\winamp.exe:*:Enabled:Winamp"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-02-21 13:44:57 ----D---- C:\rsit
2011-02-21 13:33:07 ----D---- C:\Program Files\CCleaner
2011-02-21 04:16:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2011-02-21 04:16:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2485376$
2011-02-21 04:16:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2011-02-21 04:16:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2011-02-21 04:15:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2479628$
2011-02-21 04:15:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2011-02-21 04:15:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$
2011-02-21 04:14:24 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2011-02-21 03:34:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2476687$
2011-02-21 03:30:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2011-02-21 03:25:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2482017$
2011-02-21 03:10:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2011-02-21 03:09:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2011-02-21 03:06:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2011-02-20 19:53:10 ----A---- C:\WINDOWS\system32\divin.exe
2011-02-20 11:11:20 ----A---- C:\WINDOWS\system32\hujupiwoow.exe
2011-02-20 10:57:46 ----A---- C:\WINDOWS\system32\muweb.dll
2011-02-20 10:57:46 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2011-02-20 10:57:46 ----A---- C:\WINDOWS\system32\mucltui.dll
2011-02-20 10:46:58 ----A---- C:\WINDOWS\system32\msonpmon.dll
2011-02-20 10:39:36 ----D---- C:\Program Files\Microsoft Works
2011-02-20 10:39:12 ----D---- C:\Program Files\MSBuild
2011-02-20 10:37:56 ----D---- C:\Program Files\Microsoft Visual Studio
2011-02-20 10:37:56 ----D---- C:\Program Files\Common Files\DESIGNER
2011-02-20 10:25:03 ----D---- C:\WINDOWS\SHELLNEW
2011-02-20 10:22:41 ----D---- C:\Program Files\Microsoft Office
2011-02-20 10:22:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-02-20 10:20:49 ----RHD---- C:\MSOCache
2011-02-20 10:11:19 ----D---- C:\Program Files\MS Office 2007
2011-02-20 00:04:24 ----D---- C:\Program Files\WinZip
2011-02-19 21:58:58 ----SHD---- C:\RECYCLER
2011-02-19 17:49:28 ----A---- C:\WINDOWS\system32\fizizoumut.exe
2011-02-19 17:31:02 ----A---- C:\Boot.bak
2011-02-19 17:30:56 ----RASHD---- C:\cmdcons
2011-02-19 17:26:25 ----D---- C:\Qoobox
2011-02-16 06:14:14 ----AH---- C:\Documents and Settings\vasek\Data aplikací\fLFGjmeheC.txt
2011-02-12 17:32:11 ----AH---- C:\Documents and Settings\vasek\Data aplikací\CmI1eJ1FIL.txt
2011-02-10 18:28:53 ----D---- C:\Program Files\Officy
2011-02-09 19:11:13 ----D---- C:\ado
2011-02-08 18:13:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\MiKTeX
2011-02-08 17:03:04 ----D---- C:\Program Files\MiKTeX 2.8
2011-02-02 11:00:17 ----D---- C:\Documents and Settings\vasek\Data aplikací\gtk-2.0
2011-02-02 10:58:50 ----D---- C:\Documents and Settings\vasek\Data aplikací\gretl
2011-02-02 10:57:28 ----D---- C:\Program Files\gretl
2011-02-01 11:17:15 ----A---- C:\Program Files\AdbeRdr1000_de_DE.exe
2011-01-30 10:28:53 ----D---- C:\Documents and Settings\vasek\Data aplikací\Stata10

======List of files/folders modified in the last 1 months======

2011-02-21 13:45:09 ----D---- C:\Program Files\trend micro
2011-02-21 13:44:56 ----D---- C:\WINDOWS\Prefetch
2011-02-21 13:43:15 ----RD---- C:\Program Files\Skype
2011-02-21 13:42:46 ----SHD---- C:\WINDOWS\Installer
2011-02-21 13:41:55 ----D---- C:\Program Files\Google
2011-02-21 13:34:04 ----D---- C:\Documents and Settings\vasek\Data aplikací\Winamp
2011-02-21 13:33:58 ----D---- C:\WINDOWS\Debug
2011-02-21 13:33:58 ----D---- C:\WINDOWS
2011-02-21 13:33:57 ----D---- C:\WINDOWS\Minidump
2011-02-21 13:33:07 ----RD---- C:\Program Files
2011-02-21 13:33:01 ----D---- C:\WINDOWS\Temp
2011-02-21 13:30:44 ----D---- C:\Program Files\QIP 2010
2011-02-21 13:29:13 ----N---- C:\WINDOWS\SchedLgU.Txt
2011-02-21 13:23:16 ----SHD---- C:\System Volume Information
2011-02-21 13:23:16 ----D---- C:\WINDOWS\system32\Restore
2011-02-21 12:20:24 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2011-02-21 12:20:24 ----D---- C:\WINDOWS\system32\drivers
2011-02-21 09:58:04 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-02-21 04:34:10 ----D---- C:\WINDOWS\system32
2011-02-21 04:16:47 ----HD---- C:\WINDOWS\inf
2011-02-21 04:16:46 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-02-21 04:16:06 ----HD---- C:\WINDOWS\$hf_mig$
2011-02-21 04:04:35 ----RSD---- C:\WINDOWS\Fonts
2011-02-21 04:04:06 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-02-21 04:03:03 ----D---- C:\WINDOWS\WinSxS
2011-02-21 03:56:57 ----A---- C:\WINDOWS\win.ini
2011-02-21 03:56:08 ----D---- C:\Program Files\Common Files\System
2011-02-21 03:34:33 ----D---- C:\WINDOWS\system32\CatRoot2
2011-02-21 03:07:04 ----D---- C:\Program Files\Outlook Express
2011-02-20 18:58:13 ----D---- C:\WINDOWS\system32\wbem
2011-02-20 18:58:13 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-02-20 10:59:46 ----SD---- C:\Documents and Settings\vasek\Data aplikací\Microsoft
2011-02-20 10:44:23 ----D---- C:\WINDOWS\system32\config
2011-02-20 10:37:56 ----D---- C:\Program Files\Common Files
2011-02-20 10:35:26 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-02-20 00:05:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\WinZip
2011-02-19 21:37:12 ----A---- C:\WINDOWS\system.ini
2011-02-19 21:36:43 ----D---- C:\WINDOWS\system32\drivers\etc
2011-02-19 21:30:03 ----D---- C:\WINDOWS\AppPatch
2011-02-19 17:55:21 ----D---- C:\Program Files\Mozilla Firefox
2011-02-19 17:31:02 ----RASH---- C:\boot.ini
2011-02-19 17:16:36 ----SD---- C:\WINDOWS\Tasks
2011-02-19 17:11:23 ----D---- C:\Documents and Settings\vasek\Data aplikací\Skype
2011-02-19 17:10:33 ----D---- C:\Documents and Settings\vasek\Data aplikací\skypePM
2011-02-04 17:34:02 ----A---- C:\WINDOWS\system32\MRT.exe
2011-02-01 11:18:37 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-01-25 09:51:51 ----D---- C:\Music

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\System32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R1 Cdr4_xp;Cdr4_xp; C:\WINDOWS\system32\drivers\Cdr4_xp.sys [2009-04-28 9072]
R1 Cdralw2k;Cdralw2k; C:\WINDOWS\system32\drivers\Cdralw2k.sys [2009-04-28 9200]
R1 cdudf_xp;cdudf_xp; C:\WINDOWS\system32\drivers\cdudf_xp.sys [2003-03-26 241280]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 pwd_2k;pwd_2k; C:\WINDOWS\system32\drivers\pwd_2k.sys [2003-03-26 144250]
R1 UdfReadr_xp;UdfReadr_xp; C:\WINDOWS\system32\drivers\UdfReadr_xp.sys [2003-03-26 206464]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.9.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-12-25 21275]
R2 irda;Protokol IrDA; C:\WINDOWS\System32\DRIVERS\irda.sys [2008-04-13 88192]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2003-04-15 9855]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2005-12-28 13568]
R2 StreamDispatcher;StreamDispatcher; C:\WINDOWS\system32\DRIVERS\strmdisp.sys [2003-04-15 34224]
R3 ALiIRDA;ALi Infrared Device Driver; C:\WINDOWS\System32\DRIVERS\aliirda.sys [2001-12-17 26112]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2002-08-16 471168]
R3 CALIAUD;Conexant AMC 3D ENVIRONMENTAL AUDIO; C:\WINDOWS\system32\drivers\caliaud.sys [2002-11-05 291328]
R3 CALIHALA;CALIHALA; C:\WINDOWS\system32\drivers\calihal.sys [2002-11-05 244608]
R3 DKbFltr;Dritek HotKey Keyboard Filter Driver; C:\WINDOWS\System32\Drivers\DKbFltr.SYS [2002-10-16 14543]
R3 DP83815;National Semiconductor Corp. DP83815/816 NDIS 5.0 Miniport Driver; C:\WINDOWS\System32\DRIVERS\DP83815.SYS [2003-07-17 28280]
R3 HPCI;HP Configuration Interface; C:\WINDOWS\System32\DRIVERS\hpci.sys [2002-07-17 14504]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2003-04-15 1171616]
R3 HSFHWALI;HSFHWALI; C:\WINDOWS\system32\DRIVERS\HSFHWALI.sys [2003-04-15 153380]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\System32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\System32\DRIVERS\SynTP.sys [2003-05-22 273072]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2003-04-15 594960]
S3 aliadwdm;Ovladač WDM urychlovače zpracování zvuku ALi; C:\WINDOWS\system32\drivers\ac97ali.sys [2002-08-29 231552]
S3 BCM43XX;Broadcom 802.11 OneDriver; C:\WINDOWS\System32\DRIVERS\bcmwl5.sys [2003-10-01 254208]
S3 Bridge;Most MAC; C:\WINDOWS\System32\DRIVERS\bridge.sys [2008-04-13 71552]
S3 BridgeMP;Miniport mostu MAC; C:\WINDOWS\System32\DRIVERS\bridge.sys [2008-04-13 71552]
S3 dvd_2K;dvd_2K; C:\WINDOWS\system32\drivers\dvd_2K.sys [2003-03-26 25930]
S3 FA312;NETGEAR FA330/FA312/FA311 Fast Ethernet Adapter Driver; C:\WINDOWS\System32\DRIVERS\FA312nd5.sys [2001-08-17 16074]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 mmc_2K;mmc_2K; C:\WINDOWS\system32\drivers\mmc_2K.sys [2003-03-26 30662]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2005-12-28 114753]
R2 HPConfig;HP Configuration Interface Service; C:\WINDOWS\system32\HPConfig.exe [2002-08-15 151552]
R2 HPWirelessMgr;HPWirelessMgr; C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe [2003-07-28 53248]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-01-04 153376]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2005-12-28 217164]
R2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2005-12-28 540745]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R2 WLTRYSVC;WLTRYSVC; C:\WINDOWS\System32\WLTRYSVC.EXE [2003-10-01 45056]
S2 a7yya77di;SmartLinkService; C:\Documents and Settings\LocalService\Data aplikací\Microsoft\divin.exe [2011-02-19 245760]
S2 mfa4kf8baa;ASF Agent; C:\WINDOWS\system32\hujupiwoow.exe [2011-02-19 245760]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------

[vyosek]

Jeste to neni v poradku

Stahnete OTM (viz muj podpis)

• Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
• Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize

• Kód: Vybrat vše

  :reg
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  "fudoh"=-
  
  :services
  mfa4kf8baa
  a7yya77d
  
  :files
  C:\Documents and Settings\LocalService\Data aplikací\Microsoft\divin.exe
  C:\Documents and Settings\vasek\Data aplikací\fLFGjmeheC.txt
  C:\Documents and Settings\vasek\Data aplikací\CmI1eJ1FIL.txt
  C:\WINDOWS\system32\hujupiwoow.exe
  C:\WINDOWS\system32\divin.exe
  C:\WINDOWS\system32\fizizoumut.exe
  c:\Qoobox
  C:\DOCUME~1\vasek\LOCALS~1\Temp
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp /s
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]

• Kliknete na cervene tlacitko MoveIt!
• Budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles, obsah sem vlozte

[skalpik]

All processes killed
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\fudoh deleted successfully.
========== SERVICES/DRIVERS ==========
Service mfa4kf8baa stopped successfully!
Service mfa4kf8baa deleted successfully!
Error: No service named a7yya77d was found to stop!
Service\Driver key a7yya77d not found.
========== FILES ==========
C:\Documents and Settings\LocalService\Data aplikací\Microsoft\divin.exe moved successfully.
C:\Documents and Settings\vasek\Data aplikací\fLFGjmeheC.txt moved successfully.
C:\Documents and Settings\vasek\Data aplikací\CmI1eJ1FIL.txt moved successfully.
C:\WINDOWS\system32\hujupiwoow.exe moved successfully.
C:\WINDOWS\system32\divin.exe moved successfully.
C:\WINDOWS\system32\fizizoumut.exe moved successfully.
Folder move failed. c:\Qoobox\BackEnv scheduled to be moved on reboot.
c:\Qoobox folder moved successfully.
C:\DOCUME~1\vasek\LOCALS~1\Temp\svddn.tmp folder moved successfully.
C:\DOCUME~1\vasek\LOCALS~1\Temp\Google Toolbar folder moved successfully.
C:\DOCUME~1\vasek\LOCALS~1\Temp folder moved successfully.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\Temp\hofzjgh7CA79B8D.tmp moved successfully.
C:\WINDOWS\Temp\hzre0CFDB2E7.tmp moved successfully.
C:\WINDOWS\Temp\uspdaB1E84C67.tmp moved successfully.
C:\WINDOWS\Temp\xhkuvqwr955DD43C.tmp moved successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: vasek
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 617783 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 11271232 bytes
->Flash cache emptied: 343 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 11,00 mb


OTM by OldTimer - Version 3.1.17.2 log created on 02212011_151949

Files moved on Reboot...
File c:\Qoobox\BackEnv not found!

Registry entries deleted on Reboot...

[vyosek]

Spustte znovu OTM a kliknete na CleanUp! - uklidi po sobe

A melo by to byt vse

[skalpik]

Provedeno. Děkuji moc za pomoc a za trpělivost

[vyosek]

Nemate zac, rad jsem pomohl Zase nekdy