kontrola - xp home security

[wolfixis]

Zdravim,

potreboval bych zkontrolovat log, protoze pri spousteni jakehokoliv programu spousti misto neho nejaky svinstvo / xp home security / a chce samozrejme povolit stahovat.

diky za vas cas


Logfile of random's system information tool 1.08 (written by random/random)
Run by Administrator at 2011-04-06 00:22:20
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (30%) free of 34 GB
Total RAM: 2047 MB (84% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 0:22:25, on 6.4.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Administrator\Plocha\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll (file missing)
O2 - BHO: DebugBar BHO - {69FC0024-10EB-480A-BBF2-3BF4E78E17B1} - C:\Program Files\Core Services\DebugBar\DebugInfoBar.dll
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Documents and Settings\wolf\Data aplikací\FlashGetBHO\FlashGetBHO3.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DebugBar - {3E1201F4-1707-409F-BB45-A5F192381DA0} - C:\Program Files\Core Services\DebugBar\DebugToolBar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Six Engine] "C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe" -b
O4 - HKLM\..\Run: [MSIAfterburner] "C:\Program Files\MSI Afterburner\MSIAfterburner.exe" /s
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll
O9 - Extra 'Tools' menuitem: Nastavení aplikace &Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll (file missing)
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{DE70FD41-8B73-4F0C-9D50-3BBBDDE85438}: NameServer = 193.165.145.12
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: AODService - Unknown owner - C:\Program Files\AMD\OverDrive\AODAssist.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe

--
End of file - 7468 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-WOLFI-wolf.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-220523388-1292428093-839522115-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-1292428093-839522115-1003.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2011-03-08 381656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{69FC0024-10EB-480A-BBF2-3BF4E78E17B1}]
DebugBar BHO - C:\Program Files\Core Services\DebugBar\DebugInfoBar.dll [2010-03-15 1134080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]
FlashGetBHO - C:\Documents and Settings\wolf\Data aplikací\FlashGetBHO\FlashGetBHO3.dll [2010-12-16 144944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-11-24 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53}]
Google Gears Helper - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll [2010-02-23 2121728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-11-24 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3E1201F4-1707-409F-BB45-A5F192381DA0} - DebugBar - C:\Program Files\Core Services\DebugBar\DebugToolBar.dll [2010-03-15 755200]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-09-06 1048888]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"Six Engine"=C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe [2010-02-03 5756544]
"MSIAfterburner"=C:\Program Files\MSI Afterburner\MSIAfterburner.exe [2010-08-31 355640]
"VirtualCloneDrive"=C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-06-17 85160]
"TkBellExe"=C:\Program Files\Real\RealPlayer\update\realsched.exe [2011-03-08 273544]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-03-09 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-24 500208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Update Checker]
C:\Program Files\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe [2009-12-28 121472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GUCI_AVS]
C:\WINDOWS\PixArt\PAP7501\GUCI_AVS.exe [2007-12-10 323584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HDAudDeck]
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2010-01-18 33714176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PACTray]
C:\WINDOWS\PixArt\PAP7501\PACTray.exe [2009-06-09 319488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Print2PDF Print Monitor]
C:\Program Files\Software602\Print2PDF\Print2PDF.exe [2010-12-03 141368]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe [2010-03-17 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-03-09 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\program files\real\realplayer\update\realsched.exe [2011-03-08 273544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^SATARaid.lnk]
C:\WINDOWS\INSTAL~1\{D28ED~1\_F7A06~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^wolf^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.2.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-06-07 1195520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2011-04-01 188416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"D:\steam\Steam.exe"="D:\steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\FileZilla FTP Client\filezilla.exe"="C:\Program Files\FileZilla FTP Client\filezilla.exe:*:Enabled:FileZilla FTP Client"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\TeamViewer\Version6\TeamViewer.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"D:\steam\steamapps\xxxxxx.k@seznam.cz\half-life\hl.exe"="D:\steam\steamapps\xxxxxx.k@seznam.cz\half-life\hl.exe:*:Enabled:Half-Life"
"D:\steam\steamapps\xxxxxx.k@seznam.cz\deathmatch classic\hl.exe"="D:\steam\steamapps\xxxxxx.k@seznam.cz\deathmatch classic\hl.exe:*:Enabled:Deathmatch Classic"
"D:\steam\steamapps\xxxxxx.k@seznam.cz\ricochet\hl.exe"="D:\steam\steamapps\xxxxxx.k@seznam.cz\ricochet\hl.exe:*:Enabled:Ricochet"
"D:\steam\steamapps\common\operation flashpoint dragon rising\Mission Editor\MissionEditor.exe"="D:\steam\steamapps\common\operation flashpoint dragon rising\Mission Editor\MissionEditor.exe:*:Enabled:Operation Flashpoint: Dragon Rising Mission Editor"
"C:\Program Files\ICQ7.4\ICQ.exe"="C:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"
"C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe"="C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"
"C:\Program Files\Common Files\soft602\langserv.exe"="C:\Program Files\Common Files\soft602\langserv.exe:*:Enabled:Software602 Spell Checker"
"D:\steam\steamapps\common\operation flashpoint dragon rising\OFDR.exe"="D:\steam\steamapps\common\operation flashpoint dragon rising\OFDR.exe:*:Enabled:Operation Flashpoint: Dragon Rising"
"D:\steam\steamapps\common\amd driver updater, xp, 32 bit\Setup.exe"="D:\steam\steamapps\common\amd driver updater, xp, 32 bit\Setup.exe:*:Enabled:AMD Driver Updater, XP, 32 bit"
"D:\steam\steamapps\xxxxxx.k@seznam.cz\counter-strike\hl.exe"="D:\steam\steamapps\xxxxxx.k@seznam.cz\counter-strike\hl.exe:*:Enabled:Counter-Strike"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.4\ICQ.exe"="C:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"

======File associations======

.txt - open - "%WinDir%\NOTEPAD.EXE" %1

======List of files/folders created in the last 1 months======

2011-04-06 00:22:20 ----D---- C:\rsit
2011-04-06 00:22:20 ----D---- C:\Program Files\trend micro
2011-04-06 00:19:24 ----D---- C:\WINDOWS\temp
2011-04-06 00:19:23 ----A---- C:\ComboFix.txt
2011-04-06 00:13:29 ----A---- C:\Boot.bak
2011-04-06 00:13:26 ----RASHD---- C:\cmdcons
2011-04-06 00:10:00 ----A---- C:\WINDOWS\zip.exe
2011-04-06 00:10:00 ----A---- C:\WINDOWS\SWXCACLS.exe
2011-04-06 00:10:00 ----A---- C:\WINDOWS\SWSC.exe
2011-04-06 00:10:00 ----A---- C:\WINDOWS\SWREG.exe
2011-04-06 00:10:00 ----A---- C:\WINDOWS\sed.exe
2011-04-06 00:10:00 ----A---- C:\WINDOWS\PEV.exe
2011-04-06 00:10:00 ----A---- C:\WINDOWS\NIRCMD.exe
2011-04-06 00:10:00 ----A---- C:\WINDOWS\MBR.exe
2011-04-06 00:10:00 ----A---- C:\WINDOWS\grep.exe
2011-04-06 00:03:42 ----D---- C:\WINDOWS\ERDNT
2011-04-06 00:03:42 ----D---- C:\aaa
2011-04-05 23:56:49 ----D---- C:\Program Files\Spybot - Search & Destroy
2011-04-05 23:56:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-04-05 23:55:29 ----D---- C:\Qoobox
2011-04-05 23:54:31 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2011-04-05 23:54:31 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Macromedia
2011-04-05 23:19:08 ----SHD---- C:\WINDOWS\CSC
2011-04-05 23:19:00 ----A---- C:\WINDOWS\ntbtlog.txt
2011-04-04 01:31:01 ----D---- C:\Program Files\SpeedFan
2011-04-02 13:10:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2011-03-31 17:32:01 ----D---- C:\Program Files\Microsoft Bootvis
2011-03-31 14:43:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Solidshield
2011-03-30 16:30:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Electronic Arts
2011-03-30 16:30:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\EA Core
2011-03-29 21:18:37 ----D---- C:\Program Files\Inkscape
2011-03-29 12:14:02 ----D---- C:\Program Files\KompoZer
2011-03-28 16:00:17 ----RA---- C:\WINDOWS\system32\drivers\EIO_XP.sys
2011-03-25 04:00:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2524375$
2011-03-19 02:20:42 ----D---- C:\Program Files\PDFCreator
2011-03-19 02:20:42 ----A---- C:\WINDOWS\system32\MSMPIDE.DLL
2011-03-15 12:55:20 ----A---- C:\WINDOWS\system32\GDS32.DLL
2011-03-15 12:55:19 ----A---- C:\WINDOWS\system32\FBCLIENT.DLL
2011-03-15 12:55:10 ----D---- C:\Program Files\Firebird
2011-03-12 14:37:02 ----A---- C:\WINDOWS\WINCMD.INI
2011-03-12 14:35:04 ----D---- C:\totalcmd
2011-03-11 22:29:59 ----D---- C:\Program Files\VID_0E8F&PID_0012
2011-03-11 20:37:20 ----D---- C:\Program Files\Common Files\ATI Technologies
2011-03-11 20:33:53 ----A---- C:\WINDOWS\system32\ativvamv.dll
2011-03-11 01:22:46 ----A---- C:\WINDOWS\MRU.ini
2011-03-11 01:19:49 ----D---- C:\Program Files\RegiStax 5_1
2011-03-10 22:31:32 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2011-03-10 04:02:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2011-03-10 04:00:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2011-03-08 21:26:44 ----A---- C:\WINDOWS\avisplitter.ini
2011-03-08 21:26:41 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2011-03-08 21:26:41 ----A---- C:\WINDOWS\system32\vp7vfw.dll
2011-03-08 21:26:40 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2011-03-08 21:26:40 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2011-03-08 21:26:38 ----D---- C:\Program Files\K-Lite Codec Pack
2011-03-08 00:22:14 ----D---- C:\Program Files\Common Files\xing shared
2011-03-08 00:22:07 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2011-03-08 00:21:53 ----A---- C:\WINDOWS\system32\pndx5032.dll
2011-03-08 00:21:53 ----A---- C:\WINDOWS\system32\pndx5016.dll
2011-03-08 00:21:52 ----A---- C:\WINDOWS\system32\pncrt.dll
2011-03-08 00:21:51 ----A---- C:\WINDOWS\system32\msvcp71.dll
2011-03-08 00:19:16 ----D---- C:\Program Files\MediaCoder
2011-03-08 00:02:34 ----D---- C:\Program Files\MKVConverter

======List of files/folders modified in the last 1 months======

2011-04-06 00:22:20 ----RD---- C:\Program Files
2011-04-06 00:19:24 ----D---- C:\WINDOWS
2011-04-06 00:18:20 ----A---- C:\WINDOWS\system.ini
2011-04-06 00:17:35 ----D---- C:\WINDOWS\system32\drivers
2011-04-06 00:16:11 ----D---- C:\WINDOWS\system32
2011-04-06 00:16:11 ----D---- C:\WINDOWS\AppPatch
2011-04-06 00:16:07 ----D---- C:\Program Files\Common Files
2011-04-06 00:13:29 ----RASH---- C:\boot.ini
2011-04-06 00:10:07 ----D---- C:\WINDOWS\system32\CatRoot2
2011-04-06 00:05:56 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-04-05 23:54:30 ----D---- C:\Documents and Settings
2011-04-05 23:53:33 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-04-05 23:49:06 ----D---- C:\WINDOWS\Prefetch
2011-04-05 22:57:55 ----D---- C:\WINDOWS\system32\config
2011-04-05 22:48:35 ----SD---- C:\WINDOWS\Tasks
2011-04-04 14:47:23 ----D---- C:\Program Files\Mozilla Firefox
2011-04-03 20:22:34 ----HD---- C:\WINDOWS\inf
2011-04-01 23:55:13 ----SHD---- C:\WINDOWS\Installer
2011-04-01 23:55:13 ----D---- C:\Config.Msi
2011-04-01 23:55:03 ----D---- C:\Program Files\ATI Technologies
2011-04-01 23:54:22 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-04-01 23:53:54 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-04-01 23:52:14 ----A---- C:\WINDOWS\system32\aticaldd.dll
2011-04-01 23:52:06 ----A---- C:\WINDOWS\system32\atitvo32.dll
2011-04-01 23:51:56 ----A---- C:\WINDOWS\system32\drivers\ati2erec.dll
2011-04-01 23:51:52 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2011-04-01 23:51:49 ----A---- C:\WINDOWS\system32\atioglxx.dll
2011-04-01 23:51:44 ----A---- C:\WINDOWS\system32\aticalrt.dll
2011-04-01 23:51:44 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2011-04-01 23:51:35 ----A---- C:\WINDOWS\system32\ati3duag.dll
2011-04-01 23:51:28 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2011-04-01 23:51:04 ----A---- C:\WINDOWS\system32\atiok3x2.dll
2011-04-01 23:50:48 ----A---- C:\WINDOWS\system32\ATIODCLI.exe
2011-04-01 23:50:47 ----A---- C:\WINDOWS\system32\atibtmon.exe
2011-04-01 23:50:46 ----A---- C:\WINDOWS\system32\Oemdspif.dll
2011-04-01 23:50:45 ----A---- C:\WINDOWS\system32\aticalcl.dll
2011-04-01 23:50:44 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2011-04-01 23:50:42 ----A---- C:\WINDOWS\system32\atiapfxx.exe
2011-04-01 23:50:41 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2011-04-01 23:50:40 ----A---- C:\WINDOWS\system32\ATIODE.exe
2011-04-01 23:50:40 ----A---- C:\WINDOWS\system32\atimpc32.dll
2011-04-01 23:50:40 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2011-04-01 23:50:40 ----A---- C:\WINDOWS\system32\amdpcom32.dll
2011-04-01 23:50:37 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2011-04-01 23:50:36 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2011-04-01 23:50:33 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2011-04-01 23:50:31 ----A---- C:\WINDOWS\system32\atikvmag.dll
2011-04-01 23:50:28 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2011-04-01 23:50:28 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2011-04-01 23:50:27 ----A---- C:\WINDOWS\system32\ativcoxx.dll
2011-04-01 23:50:24 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2011-04-01 21:48:27 ----D---- C:\Program Files\MSI Afterburner
2011-04-01 10:31:49 ----D---- C:\WINDOWS\system32\LogFiles
2011-03-31 14:29:25 ----D---- C:\WINDOWS\system32\DirectX
2011-03-31 00:53:16 ----D---- C:\miranda
2011-03-28 20:07:56 ----HD---- C:\Program Files\InstallShield Installation Information
2011-03-28 20:07:52 ----D---- C:\Program Files\ASUS
2011-03-28 14:42:20 ----D---- C:\WINDOWS\Debug
2011-03-25 04:00:25 ----HD---- C:\WINDOWS\$hf_mig$
2011-03-20 02:33:51 ----D---- C:\WINDOWS\WinSxS
2011-03-11 17:21:25 ----AD---- C:\xampp
2011-03-11 15:27:13 ----D---- C:\Program Files\SecondLifeViewer2
2011-03-10 15:00:21 ----D---- C:\HLServer
2011-03-10 04:00:52 ----A---- C:\WINDOWS\system32\MRT.exe
2011-03-10 01:08:04 ----D---- C:\FreeRapid
2011-03-08 00:22:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Real
2011-03-08 00:22:20 ----D---- C:\Program Files\Real
2011-03-08 00:21:51 ----A---- C:\WINDOWS\system32\msvcr71.dll
2011-03-07 23:13:32 ----D---- C:\Program Files\Common Files\Real

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 Pnp680r;Silicon Image SiI 0680 Medley Raid Controller; C:\WINDOWS\system32\DRIVERS\pnp680r.sys [2007-07-20 110120]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R0 RRamdisk;Ramdisk Driver; C:\WINDOWS\system32\DRIVERS\rramdisk.sys [2003-12-09 10368]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2010-12-18 21696]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-10-24 691696]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-01-13 23632]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SbFw;SbFw; C:\WINDOWS\system32\drivers\SbFw.sys [2008-10-31 270888]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\System32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\System32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\System32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-08-11 14604]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\System32\DRIVERS\Rtenicxp.sys [2009-07-28 143360]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport; C:\WINDOWS\system32\DRIVERS\sbfwim.sys [2008-06-21 65576]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-14 12288]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp.sys [2011-01-18 109328]
R3 VBoxNetFlt;VBoxNetFlt Service; C:\WINDOWS\system32\DRIVERS\VBoxNetFlt.sys [2011-01-18 120208]
R3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2009-08-09 29696]
S1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-01-13 29392]
S1 AmdPPM;Ovladač procesoru HwPState AMD; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
S1 AsIO;AsIO; C:\WINDOWS\system32\drivers\AsIO.sys [2009-08-04 11296]
S1 AsUpIO;AsUpIO; C:\WINDOWS\system32\drivers\AsUpIO.sys [2009-07-06 11448]
S1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys []
S1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-01-13 294608]
S1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-01-13 47440]
S1 EIO_XP;EIO_XP; \??\C:\WINDOWS\system32\drivers\EIO_XP.sys []
S1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-12-18 26024]
S1 sbhips;Sunbelt HIPS Driver; C:\WINDOWS\system32\drivers\sbhips.sys [2008-06-21 66600]
S1 VBoxDrv;VirtualBox Service; C:\WINDOWS\system32\DRIVERS\VBoxDrv.sys [2011-01-18 158736]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [2011-01-18 42960]
S2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-01-13 17744]
S2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-01-13 100176]
S2 BT848;Conexant's BtPCI WDM Video Capture; C:\WINDOWS\system32\DRIVERS\BT848.sys [2010-12-20 371349]
S3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2011-04-01 6553088]
S3 AVerAF35;AVerMedia A835 USB DVB-T; C:\WINDOWS\System32\Drivers\AVerAF35.sys [2010-04-02 642560]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BTHMODEM;Ovladač komunikace modemu Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-14 37888]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 catchme;catchme; \??\C:\DOCUME~1\Administrator\Local Settings\Temp\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys []
S3 GUCI_AVS;USB2.0 VGA Video Device; C:\WINDOWS\system32\DRIVERS\GUCI_AVS.sys [2009-07-15 595712]
S3 HidBth;Miniport Bluetooth HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidbth.sys [2008-04-14 25600]
S3 mbr;mbr; \??\C:\ComboFix\mbr.sys []
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-14 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nm;Ovladač programu Sledování sítě; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-14 40320]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 RTCore32;RTCore32; \??\C:\Program Files\MSI Afterburner\RTCore32.sys []
S3 rtl8029;Realtek RTL8029(AS)-based PCI Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8029.SYS [2001-08-17 19017]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2009-11-12 7168]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 teamviewervpn;TeamViewer VPN Adapter; C:\WINDOWS\system32\DRIVERS\teamviewervpn.sys [2010-10-15 25088]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S3 VBoxUSB;VirtualBox USB; C:\WINDOWS\System32\Drivers\VBoxUSB.sys [2011-01-18 31888]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2010-01-11 2106880]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 602XML Updater;602Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [2010-04-14 73728]
S2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 AODService;AODService; C:\Program Files\AMD\OverDrive\AODAssist.exe [2010-07-01 136616]
S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2011-04-01 643072]
S2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-01-13 40384]
S2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
S2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe [2009-10-06 65536]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-09-22 136176]
S2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-09-06 247096]
S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-11-12 153376]
S2 NMSAccess;NMSAccess; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2010-03-04 71096]
S2 SbPF.Launcher;SbPF.Launcher; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-10-31 95528]
S2 SPF4;Sunbelt Personal Firewall 4; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-10-31 1365288]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe [2009-10-06 1532000]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-07-10 654848]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Roli]

Zdravím, tohle fixni v HJT :

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll (file missing)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

HJT najdeš zde :

C:\Program Files\trend micro\Administrator.exe

Fix znamená že spustíš HJT

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Přes Start >> Ovládací panely >> Přidat nebo odebrat odinstaluj ICQ6Toolbar


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Koukám že tam máš ComboFix, můžeš ho tedy spustit jestli jsi tedy již tak neučinil a dát mi sem z něj log ?

[wolfixis]

Tady je

ComboFix 11-04-05.02 - Administrator 06.04.2011 9:56.2.4 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2047.1749 [GMT 2:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: Sunbelt Personal Firewall *Enabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Administrator\Dokumenty\cc_20110406_094420.reg
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-03-06 do 2011-04-06 )))))))))))))))))))))))))))))))
.
.
2011-04-05 22:22 . 2011-04-06 07:37 -------- d-----w- c:\program files\trend micro
2011-04-05 22:22 . 2011-04-05 22:22 -------- d-----w- C:\rsit
2011-04-05 22:03 . 2011-04-05 22:05 -------- d-----w- C:\aaa
2011-04-05 21:56 . 2011-04-06 07:43 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-04-05 21:56 . 2011-04-06 07:37 -------- d-----w- c:\program files\Spybot - Search & Destroy
2011-04-05 21:54 . 2011-04-06 07:43 -------- d-s---w- c:\documents and settings\Administrator
2011-04-03 23:31 . 2011-04-04 20:10 -------- d-----w- c:\program files\SpeedFan
2011-04-02 11:10 . 2011-04-02 11:10 -------- d-----w- c:\documents and settings\All Users\Data aplikací\ATI
2011-03-31 15:32 . 2011-04-01 14:32 -------- d-----w- c:\program files\Microsoft Bootvis
2011-03-31 12:43 . 2011-03-31 12:43 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Solidshield
2011-03-30 14:30 . 2011-03-30 14:30 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Electronic Arts
2011-03-30 14:30 . 2011-03-30 14:30 -------- d-----w- c:\documents and settings\All Users\Data aplikací\EA Core
2011-03-29 19:18 . 2011-03-31 21:29 -------- d-----w- c:\program files\Inkscape
2011-03-29 10:14 . 2011-04-05 00:01 -------- d-----w- c:\program files\KompoZer
2011-03-28 14:00 . 2006-06-14 11:44 12288 ----a-r- c:\windows\system32\drivers\EIO_XP.sys
2011-03-25 13:06 . 2011-03-18 17:55 781272 ----a-w- c:\program files\Mozilla Firefox\mozsqlite3.dll
2011-03-25 13:06 . 2011-03-18 17:55 728024 ----a-w- c:\program files\Mozilla Firefox\libGLESv2.dll
2011-03-25 13:06 . 2011-03-18 17:55 1893336 ----a-w- c:\program files\Mozilla Firefox\d3dx9_42.dll
2011-03-25 13:06 . 2011-03-18 17:55 1874904 ----a-w- c:\program files\Mozilla Firefox\mozjs.dll
2011-03-25 13:06 . 2011-03-18 17:55 15832 ----a-w- c:\program files\Mozilla Firefox\mozalloc.dll
2011-03-25 13:06 . 2011-03-18 17:55 142296 ----a-w- c:\program files\Mozilla Firefox\libEGL.dll
2011-03-25 13:06 . 2011-03-18 17:55 142296 ----a-w- c:\program files\Mozilla Firefox\components\browsercomps.dll
2011-03-25 13:06 . 2011-03-18 17:55 1975768 ----a-w- c:\program files\Mozilla Firefox\D3DCompiler_42.dll
2011-03-19 00:20 . 2004-03-08 23:00 662288 ----a-w- c:\windows\system32\MSCOMCT2.OCX
2011-03-19 00:20 . 1998-06-23 23:00 137000 ----a-w- c:\windows\system32\MSMAPI32.OCX
2011-03-19 00:20 . 2011-03-19 00:21 -------- d-----w- c:\program files\PDFCreator
2011-03-19 00:20 . 1998-07-05 23:00 23552 ----a-w- c:\windows\system32\MSMPIDE.DLL
2011-03-15 10:55 . 2009-10-06 00:05 356448 ----a-w- c:\windows\system32\GDS32.DLL
2011-03-15 10:55 . 2009-10-06 00:05 356448 ----a-w- c:\windows\system32\FBCLIENT.DLL
2011-03-15 10:55 . 2011-03-15 10:55 -------- d-----w- c:\program files\Firebird
2011-03-12 12:35 . 2011-03-12 12:35 -------- d-----w- C:\totalcmd
2011-03-12 11:28 . 2011-03-12 11:28 103864 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
2011-03-12 11:28 . 2011-03-12 11:28 103864 ----a-w- c:\program files\Internet Explorer\PLUGINS\nppdf32.dll
2011-03-11 20:29 . 2011-03-11 20:29 -------- d-----w- c:\program files\VID_0E8F&PID_0012
2011-03-11 20:29 . 2011-03-11 20:29 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\setup.dll
2011-03-11 20:29 . 2011-03-11 20:29 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iGdi.dll
2011-03-11 20:29 . 2005-04-03 22:02 753664 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iKernel.dll
2011-03-11 20:29 . 2005-04-03 22:02 69714 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\ctor.dll
2011-03-11 20:29 . 2005-04-03 22:01 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iscript.dll
2011-03-11 20:29 . 2005-04-03 22:00 184320 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iuser.dll
2011-03-11 20:29 . 2005-04-03 21:59 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\DotNetInstaller.exe
2011-03-11 18:37 . 2011-03-11 18:37 -------- d-----w- c:\program files\Common Files\ATI Technologies
2011-03-11 18:33 . 2011-04-01 21:50 1112576 ----a-w- c:\windows\system32\ativvamv.dll
2011-03-10 23:19 . 2011-03-10 23:34 -------- d-----w- c:\program files\RegiStax 5_1
2011-03-10 20:31 . 2011-03-10 20:37 -------- d---a-w- c:\documents and settings\All Users\Data aplikací\TEMP
2011-03-08 19:26 . 2010-11-03 19:08 237568 ----a-w- c:\windows\system32\yv12vfw.dll
2011-03-08 19:26 . 2010-01-17 16:18 151552 ----a-w- c:\windows\system32\ac3acm.acm
2011-03-08 19:26 . 2008-09-24 19:41 839680 ----a-w- c:\windows\system32\lameACM.acm
2011-03-08 19:26 . 2006-04-02 13:47 630784 ----a-w- c:\windows\system32\vp7vfw.dll
2011-03-08 19:26 . 2011-02-28 08:00 80896 ----a-w- c:\windows\system32\ff_vfw.dll
2011-03-08 19:26 . 2011-03-08 19:27 -------- d-----w- c:\program files\K-Lite Codec Pack
2011-03-07 22:22 . 2011-03-07 22:22 11776 ----a-w- c:\program files\Mozilla Firefox\plugins\nprjplug.dll
2011-03-07 22:22 . 2011-03-07 22:22 -------- d-----w- c:\program files\Common Files\xing shared
2011-03-07 22:22 . 2011-03-07 22:22 150712 ----a-w- c:\program files\Mozilla Firefox\plugins\nppl3260.dll
2011-03-07 22:21 . 2011-03-07 22:21 100864 ----a-w- c:\program files\Mozilla Firefox\plugins\nprpjplug.dll
2011-03-07 22:21 . 2011-03-07 22:21 499712 ----a-w- c:\windows\system32\msvcp71.dll
2011-03-07 22:19 . 2011-03-07 22:19 -------- d-----w- c:\program files\MediaCoder
2011-03-07 22:02 . 2011-03-07 22:03 -------- d-----w- c:\program files\MKVConverter
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-01 21:52 . 2010-07-10 11:44 4669440 ----a-w- c:\windows\system32\aticaldd.dll
2011-04-01 21:52 . 2010-07-10 11:17 6553088 ----a-w- c:\windows\system32\drivers\ati2mtag.sys
2011-04-01 21:52 . 2010-07-10 11:44 17408 ----a-w- c:\windows\system32\atitvo32.dll
2011-04-01 21:51 . 2010-07-10 11:44 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2011-04-01 21:51 . 2010-07-10 11:44 53248 ----a-w- c:\windows\system32\ATIDDC.DLL
2011-04-01 21:51 . 2010-07-10 11:44 17444864 ----a-w- c:\windows\system32\atioglxx.dll
2011-04-01 21:51 . 2010-07-10 11:44 643072 ----a-w- c:\windows\system32\ati2evxx.exe
2011-04-01 21:51 . 2010-07-10 11:44 57344 ----a-w- c:\windows\system32\aticalrt.dll
2011-04-01 21:51 . 2010-07-10 11:19 4148544 ----a-w- c:\windows\system32\ati3duag.dll
2011-04-01 21:51 . 2011-01-16 17:29 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-04-01 21:51 . 2010-07-10 11:44 491520 ----a-w- c:\windows\system32\atiok3x2.dll
2011-04-01 21:50 . 2010-07-10 11:44 45056 ----a-w- c:\windows\system32\ATIODCLI.exe
2011-04-01 21:50 . 2010-07-10 11:44 118784 ----a-w- c:\windows\system32\atibtmon.exe
2011-04-01 21:50 . 2010-07-10 11:44 155648 ----a-w- c:\windows\system32\Oemdspif.dll
2011-04-01 21:50 . 2010-07-10 11:44 53248 ----a-w- c:\windows\system32\aticalcl.dll
2011-04-01 21:50 . 2010-07-10 11:44 26112 ----a-w- c:\windows\system32\Ati2mdxx.exe
2011-04-01 21:50 . 2010-07-10 11:44 143360 ----a-w- c:\windows\system32\atiapfxx.exe
2011-04-01 21:50 . 2010-07-10 11:19 851968 ----a-w- c:\windows\system32\ati2cqag.dll
2011-04-01 21:50 . 2011-01-16 17:30 311296 ----a-w- c:\windows\system32\atiiiexx.dll
2011-04-01 21:50 . 2010-07-10 11:44 64512 ----a-w- c:\windows\system32\atimpc32.dll
2011-04-01 21:50 . 2010-07-10 11:44 64512 ----a-w- c:\windows\system32\amdpcom32.dll
2011-04-01 21:50 . 2010-07-10 11:44 294912 ----a-w- c:\windows\system32\ATIODE.exe
2011-04-01 21:50 . 2010-07-10 11:44 188416 ----a-w- c:\windows\system32\ati2evxx.dll
2011-04-01 21:50 . 2010-07-10 11:19 2681600 ----a-w- c:\windows\system32\ativvaxx.dll
2011-04-01 21:50 . 2010-07-10 11:44 212992 ----a-w- c:\windows\system32\atipdlxx.dll
2011-04-01 21:50 . 2010-07-10 11:44 651264 ----a-w- c:\windows\system32\atikvmag.dll
2011-04-01 21:50 . 2010-07-10 11:44 200704 ----a-w- c:\windows\system32\atiadlxx.dll
2011-04-01 21:50 . 2010-07-10 11:19 302080 ----a-w- c:\windows\system32\ati2dvag.dll
2011-04-01 21:50 . 2010-07-10 11:44 24064 ----a-w- c:\windows\system32\ativcoxx.dll
2011-04-01 21:50 . 2010-07-10 11:44 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2011-03-07 22:21 . 2010-10-21 11:09 348160 ----a-w- c:\windows\system32\msvcr71.dll
2011-02-10 10:20 . 2010-10-25 00:09 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2011-02-10 10:20 . 2010-10-25 00:09 109080 -c--a-w- c:\windows\system32\OpenAL32.dll
2011-02-09 13:53 . 2003-04-16 12:00 270848 ----a-w- c:\windows\system32\sbe.dll
2011-02-09 13:53 . 2003-04-16 12:00 186880 ----a-w- c:\windows\system32\encdec.dll
2011-02-02 07:58 . 2010-07-10 10:10 2067456 ----a-w- c:\windows\system32\mstscax.dll
2011-01-28 17:56 . 2011-01-28 17:56 695642 ----a-w- c:\windows\unins000.exe
2011-01-27 11:57 . 2010-07-10 10:10 677888 ----a-w- c:\windows\system32\mstsc.exe
2011-01-21 14:44 . 2003-04-16 12:00 440320 ----a-w- c:\windows\system32\shimgvw.dll
2011-01-18 16:43 . 2010-12-16 21:02 42960 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2011-01-18 16:43 . 2010-12-01 12:44 109328 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2011-01-18 16:43 . 2011-01-23 23:42 31888 ----a-w- c:\windows\system32\drivers\VBoxUSB.sys
2011-01-18 16:43 . 2011-01-18 16:43 120208 ----a-w- c:\windows\system32\drivers\VBoxNetFlt.sys
2011-01-18 16:43 . 2010-12-16 21:02 158736 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2011-01-18 16:43 . 2010-12-01 12:44 133648 ----a-w- c:\windows\system32\VBoxNetFltNotify.dll
2011-01-13 08:47 . 2010-07-11 17:53 38848 ----a-w- c:\windows\avastSS.scr
2011-01-13 08:47 . 2010-07-11 17:53 188216 ----a-w- c:\windows\system32\aswBoot.exe
2011-01-13 08:41 . 2010-07-11 17:54 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-01-13 08:40 . 2010-07-11 17:54 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-01-13 08:40 . 2010-07-11 17:54 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-01-13 08:39 . 2010-07-11 17:54 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-01-13 08:37 . 2010-07-11 17:54 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-01-13 08:37 . 2010-07-11 17:54 29392 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-01-13 08:37 . 2010-07-11 17:54 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-01-07 14:09 . 2003-04-16 12:00 290048 ----a-w- c:\windows\system32\atmfd.dll
2011-03-18 17:55 . 2011-03-25 13:06 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
.
[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 4AFB3B0919649F95C1964AA1FAD27D73 . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2003-04-16 . 244A2F9816BC9B593957281EF577D976 . 332928 . . [5.1.2600.1106] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-01-13 08:47 120712 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"Six Engine"="c:\program files\ASUS\EPU-4 Engine\FourEngine.exe" [2010-02-03 5756544]
"MSIAfterburner"="c:\program files\MSI Afterburner\MSIAfterburner.exe" [2010-08-31 355640]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-06-17 85160]
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^SATARaid.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\SATARaid.lnk
backup=c:\windows\pss\SATARaid.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^wolf^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.2.lnk]
path=c:\documents and settings\wolf\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.2.lnk
backup=c:\windows\pss\OpenOffice.org 3.2.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2011-01-31 08:44 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
2010-07-24 07:38 500208 ------w- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
2010-02-22 02:57 406992 ----a-w- c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Update Checker]
2009-12-28 15:49 121472 -c--a-w- c:\program files\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GUCI_AVS]
2007-12-10 13:55 323584 ----a-w- c:\windows\PixArt\PAP7501\GUCI_AVS.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HDAudDeck]
2010-01-18 09:49 33714176 ----a-w- c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PACTray]
2009-06-09 08:53 319488 ----a-w- c:\windows\PixArt\PAP7501\PACTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Print2PDF Print Monitor]
2010-12-03 15:47 141368 ----a-w- c:\program files\Software602\Print2PDF\Print2PDF.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-03-17 19:53 421888 -c--a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2011-03-08 22:37 98304 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2011-03-07 22:21 273544 ----a-w- c:\program files\Real\realplayer\Update\realsched.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"d:\\steam\\Steam.exe"=
"c:\\Program Files\\FileZilla FTP Client\\filezilla.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer_Service.exe"=
"d:\\steam\\steamapps\\xxxxxx@seznam.cz\\half-life\\hl.exe"=
"d:\\steam\\steamapps\\xxxxxx@seznam.cz\\deathmatch classic\\hl.exe"=
"d:\\steam\\steamapps\\xxxxxx@seznam.cz\\ricochet\\hl.exe"=
"d:\\steam\\steamapps\\common\\operation flashpoint dragon rising\\Mission Editor\\MissionEditor.exe"=
"c:\\Program Files\\ICQ7.4\\ICQ.exe"=
"c:\\Program Files\\FlashGet Network\\FlashGet 3\\FlashGet3.exe"=
"c:\\Program Files\\Common Files\\soft602\\langserv.exe"=
"d:\\steam\\steamapps\\common\\operation flashpoint dragon rising\\OFDR.exe"=
"d:\\steam\\steamapps\\common\\amd driver updater, xp, 32 bit\\Setup.exe"=
"d:\\steam\\steamapps\\xxxxxx.k@seznam.cz\\counter-strike\\hl.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Vzdálená správa systému Windows
.
R0 RRamdisk;Ramdisk Driver;c:\windows\system32\drivers\rramdisk.sys [25.10.2010 15:57 10368]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [10.7.2010 13:27 270888]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [10.7.2010 13:27 65576]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\drivers\VBoxNetAdp.sys [1.12.2010 14:44 109328]
R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\drivers\VBoxNetFlt.sys [18.1.2011 18:43 120208]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [24.10.2010 10:40 691696]
S1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [10.7.2010 12:45 11448]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [11.7.2010 19:54 294608]
S1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [21.6.2008 4:54 66600]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\drivers\VBoxDrv.sys [16.12.2010 23:02 158736]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\drivers\VBoxUSBMon.sys [16.12.2010 23:02 42960]
S2 602XML Updater;602Updater;c:\program files\Common Files\soft602\602updsvc\602updsvc.exe [14.4.2010 12:28 73728]
S2 AODService;AODService;c:\program files\AMD\OverDrive\AODAssist.exe [1.7.2010 4:45 136616]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [11.7.2010 19:54 17744]
S2 BT848;Conexant's BtPCI WDM Video Capture;c:\windows\system32\drivers\BT848.sys [20.12.2010 14:39 371349]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files\Firebird\Firebird_1_5\bin\fbguard.exe -s --> c:\program files\Firebird\Firebird_1_5\bin\fbguard.exe -s [?]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [22.9.2010 21:40 136176]
S2 SbPF.Launcher;SbPF.Launcher;c:\program files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [31.10.2008 7:24 95528]
S2 SPF4;Sunbelt Personal Firewall 4;c:\program files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [31.10.2008 7:24 1365288]
S3 AVerAF35;AVerMedia A835 USB DVB-T;c:\windows\system32\drivers\AVerAF35.sys [2.1.2011 20:00 642560]
S3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files\Firebird\Firebird_1_5\bin\fbserver.exe -s --> c:\program files\Firebird\Firebird_1_5\bin\fbserver.exe -s [?]
S3 GUCI_AVS;USB2.0 VGA Video Device;c:\windows\system32\drivers\GUCI_AVS.sys [17.7.2010 17:14 595712]
S3 RTCore32;RTCore32;c:\program files\MSI Afterburner\RTCore32.sys [31.8.2010 5:04 12088]
S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\drivers\teamviewervpn.sys [16.11.2010 18:11 25088]
S3 VBoxUSB;VirtualBox USB;c:\windows\system32\drivers\VBoxUSB.sys [24.1.2011 1:42 31888]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [10.7.2010 12:42 2106880]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [16.4.2003 14:00 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
.
Obsah adresáře 'Naplánované úlohy'
.
2011-04-05 c:\windows\Tasks\AdobeAAMUpdater-1.0-WOLFI-wolf.job
- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2010-07-24 07:38]
.
2011-04-04 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
2011-04-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-22 19:39]
.
2011-04-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-22 19:39]
.
2011-04-05 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-220523388-1292428093-839522115-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-01-24 13:25]
.
2011-04-05 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-220523388-1292428093-839522115-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-01-24 13:25]
.
.
------- Doplňkový sken -------
.
IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - c:\program files\ICQ7.4\ICQ.exe
TCP: {DE70FD41-8B73-4F0C-9D50-3BBBDDE85438} = 193.165.145.12
FF - ProfilePath -
.
.
------- Asociace souborů -------
.
txtfile="%WinDir%\NOTEPAD.EXE" %1
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-04-06 10:00
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\System32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\System32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Reinstall\:őwjY*]
"DisplayName"="???\17?\11\09"
"DeviceDesc"="???\17?\11\09"
"ProviderName"="???\11?\16?\11??"
"MFG"="???????"
"ReinstallString"=".10.1000.8"
"DeviceInstanceIds"=multi:"c:\\documents and settings\\wolf\\plocha\\amd_chipset_v51010008v13049_xpvistawin7\\xp\\smbus\\smbusati.inf\00"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1876)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
Celkový čas: 2011-04-06 10:01:55
ComboFix-quarantined-files.txt 2011-04-06 08:01
ComboFix2.txt 2011-04-05 22:40
.
Před spuštěním: Volných bajtů: 11 635 691 520
Po spuštění: Volných bajtů: 11 615 485 952
.
- - End Of File - - FE63EEE576527DD58DFD519829F90473

[Roli]

Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.


Pak použij Cure It z mého podpisu a dej vědět co našel.

[wolfixis]

Tak po skoro 7 hodinach nasel pouze na nesystemovem disku

OpenTTD.exe;D:\OpenTTD;Trojan.MulDrop1.43309;Smazán.;
pv.exe;D:\zaloha C\webserver\xampp\apache\bin;Program.PrcView.3725;;

[Roli]

Bezva, jaký je tedy stav PC ?

[wolfixis]

Tak sem bootnul linux pac po 15 minutovem startovani xp do nouzaku sem to tipnul a nemam chut se stim uz zabyvat - format c: a bude vymalovano co ty na to ?


edit: Jeste jsem xp spustil a na potreti jsem v nouzaku ale zadna zmena porad se ta svine spousti.

[Roli]

Pokud chceš můžeš HDD naformátovat, ono je to občas nejrychlejší řešení, nebo budeme pokračovat.

Je to na tobě.

[wolfixis]

Format C: dik za pomoc.

[Roli]

Není zač.

[wolfixis]

hotovo vcetne ovladacu za 40min

Co jako doplnek k avastu aby se to neopakovalo ?

[Roli]

K Avastu doporučuji na občasný sken SuperAntiSpy a přemýšlet