Podezření

[mirra]

Zdravím,

prosím o kontrolu logu, mám problém s odesíláním spamu z mé mailové adresy (nejsem si jist, zda je to přímo z mého PC), navíc dnes přítelkyně donesla do školy flash pamět s nějakými dokumenty na prezentaci a zahlásilo jí to vir. Mám ESET Smart Security 4.2, legal, všechno aktuální, pouze na Win 7 nemám zatím SP1, ale jinak všechny aktualizace OK. Předem děkuji za pomoc a radu.

Tady je log:
Logfile of random's system information tool 1.08 (written by random/random)
Run by Mira at 2011-04-05 18:28:59
Microsoft Windows 7 Ultimate
System drive C: has 497 GB (52%) free of 954 GB
Total RAM: 4087 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:29:11, on 5.4.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files (x86)\VMware\VMware Player\hqtray.exe
C:\Program Files (x86)\BOINC\boincmgr.exe
C:\Program Files (x86)\BOINC\boinctray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\BOINC\boinc.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe
C:\Program Files (x86)\Trillian\trillian.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE
C:\ProgramData\BOINC\projects\www.worldcommunitygrid.org\wcg_hpf2_rosetta_6.40_windows_intelx86
C:\ProgramData\BOINC\projects\www.worldcommunitygrid.org\wcg_hpf2_rosetta_6.40_windows_intelx86
C:\ProgramData\BOINC\projects\www.worldcommunitygrid.org\wcg_hcmd2_maxdo_6.40_windows_intelx86
C:\Program Files\trend micro\Mira.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT2786678
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe_ID0ENQBO] C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [VMware hqtray] "C:\Program Files (x86)\VMware\VMware Player\hqtray.exe"
O4 - HKLM\..\Run: [boincmgr] "C:\Program Files (x86)\BOINC\boincmgr.exe" /a /s
O4 - HKLM\..\Run: [boinctray] "C:\Program Files (x86)\BOINC\boinctray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\vmware\vmware player\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\vmware\vmware player\vsocklib.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/f ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Stavová služba ASP.NET (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14428 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe"
C:\Windows\SysWOW64\vmnat.exe
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe"
WLIDSvcM.exe 1912
C:\Windows\SysWOW64\vmnetdhcp.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Windows\WindowsMobile\wmdc.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
C:\Windows\system32\svchost.exe -k WindowsMobile
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe" -autorun
"C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE" /tsr
"C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe"
"C:\Program Files (x86)\VMware\VMware Player\hqtray.exe"
"C:\Program Files (x86)\BOINC\boincmgr.exe" /a /s
"C:\Program Files (x86)\BOINC\boinctray.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\BOINC\\boinc.exe" --redirectio --launched_by_manager
\??\C:\Windows\system32\conhost.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files (x86)\Internet Explorer\IELowutil.exe" -embedding
"C:\Program Files (x86)\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:3888 CREDAT:203009
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe -Embedding
"C:\Program Files (x86)\Trillian\trillian.exe" /user mirra_cze
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:3888 CREDAT:334082
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:3888 CREDAT:334128
"C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe" disp
\??\C:\Windows\system32\conhost.exe
"C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe" "/base-dir=C:\Program Files (x86)\ESET\ESET Online Scanner" /lang=1029 /as
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:3888 CREDAT:203036
"C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
projects/www.worldcommunitygrid.org/wcg_hpf2_ros ... s_intelx86 -abrelax -protein og36 -chain 4 -series 00035 -nstruct 46 -silent -farlx -ex1 -ex2 -output_silent_gz -output_chi_silent -max_attempts 56 -vwu 2916548
projects/www.worldcommunitygrid.org/wcg_hpf2_ros ... s_intelx86 -abrelax -protein og44 -chain 6 -series 00028 -nstruct 42 -silent -farlx -ex1 -ex2 -output_silent_gz -output_chi_silent -max_attempts 51 -vwu 12919172
projects/www.worldcommunitygrid.org/wcg_hcmd2_ma ... s_intelx86 -time 21600 -start 957536 -end 957834
\??\C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-65264270-1257090707-4121270350-100029_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-65264270-1257090707-4121270350-100029 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
"C:\Users\Mira\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-02-11 1246600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
uTorrentBar Toolbar - C:\Program Files (x86)\uTorrentBar\tbuTor.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-02-28 1089288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - uTorrentBar Toolbar - C:\Program Files (x86)\uTorrentBar\tbuTor.dll [2010-12-09 3911776]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-02-28 1089288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Mobile Device Center"=C:\Windows\WindowsMobile\wmdc.exe [2007-05-31 660360]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-11-18 2919168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2010-12-11 1242448]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AdobeCS4ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"Adobe Acrobat Speed Launcher"=C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]
""= []
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]
"Adobe_ID0ENQBO"=C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE [2008-08-15 378224]
"VMware hqtray"=C:\Program Files (x86)\VMware\VMware Player\hqtray.exe [2010-11-11 64112]
"boincmgr"=C:\Program Files (x86)\BOINC\boincmgr.exe [2010-09-23 4543232]
"boinctray"=C:\Program Files (x86)\BOINC\boinctray.exe [2010-09-23 58112]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]

C:\Users\Mira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=255

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - "C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS4\Dreamweaver.exe","%1"

======List of files/folders created in the last 1 months======

2011-04-05 18:29:00 ----D---- C:\Program Files\trend micro
2011-04-05 18:28:59 ----D---- C:\rsit
2011-04-05 17:38:15 ----D---- C:\Program Files (x86)\ESET
2011-04-04 19:39:35 ----A---- C:\Windows\system32\nvgenco64.dll
2011-04-04 19:39:34 ----A---- C:\Windows\system32\nvhdap64.dll
2011-04-04 19:39:34 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2011-04-04 19:37:30 ----A---- C:\Windows\system32\nvdispco642050.dll
2011-04-04 19:37:28 ----A---- C:\Windows\system32\nvgenco642030.dll
2011-04-04 19:37:15 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2011-04-04 19:37:15 ----A---- C:\Windows\system32\OpenCL.dll
2011-04-04 19:37:15 ----A---- C:\Windows\system32\nvwgf2umx.dll
2011-04-04 19:37:14 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2011-04-04 19:37:14 ----A---- C:\Windows\system32\nvoglv64.dll
2011-04-04 19:37:13 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2011-04-04 19:37:12 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2011-04-04 19:37:11 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2011-04-04 19:37:11 ----A---- C:\Windows\system32\nvd3dumx.dll
2011-04-04 19:37:10 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2011-04-04 19:37:10 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2011-04-04 19:37:10 ----A---- C:\Windows\system32\nvcuvid.dll
2011-04-04 19:37:10 ----A---- C:\Windows\system32\nvcuvenc.dll
2011-04-04 19:37:09 ----A---- C:\Windows\system32\nvcuda.dll
2011-04-04 19:37:02 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2011-04-04 19:37:01 ----A---- C:\Windows\SYSWOW64\nvdecodemft.dll
2011-04-04 19:37:01 ----A---- C:\Windows\system32\nvdecodemft.dll
2011-04-04 19:37:01 ----A---- C:\Windows\system32\nvcompiler.dll
2011-04-04 19:36:44 ----D---- C:\Program Files (x86)\ASUS
2011-03-28 12:16:27 ----D---- C:\Users\Mira\AppData\Roaming\dvdcss
2011-03-24 22:15:09 ----D---- C:\ProgramData\Electronic Arts
2011-03-24 22:15:09 ----D---- C:\ProgramData\EA Core
2011-03-24 21:16:42 ----D---- C:\ProgramData\Solidshield
2011-03-22 19:58:10 ----AH---- C:\Windows\SYSWOW64\psProxy.dll
2011-03-22 19:58:10 ----AH---- C:\Windows\SYSWOW64\pSOAP32.dll
2011-03-22 19:58:10 ----AH---- C:\Windows\SYSWOW64\psDime.dll
2011-03-22 19:58:10 ----AH---- C:\Windows\SYSWOW64\pocketHTTP.dll
2011-03-22 19:58:10 ----AH---- C:\Windows\SYSWOW64\EncryptedFolder.dll
2011-03-22 19:58:02 ----D---- C:\Program Files (x86)\FILERECOVERY-PRO
2011-03-21 20:12:52 ----D---- C:\Windows\Sun
2011-03-21 20:12:31 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-03-21 20:12:31 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-03-21 20:12:31 ----A---- C:\Windows\SYSWOW64\java.exe
2011-03-21 20:11:33 ----D---- C:\ProgramData\McAfee
2011-03-17 08:30:37 ----D---- C:\Program Files (x86)\Microsoft
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\url.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-03-15 17:50:58 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-03-15 17:50:57 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-03-15 17:50:57 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-03-15 17:50:57 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-03-15 17:50:57 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-03-15 17:50:57 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-03-15 17:50:57 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-03-15 17:50:57 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-03-15 17:50:57 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-03-15 17:50:57 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\wininet.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\wextract.exe
2011-03-15 17:50:57 ----A---- C:\Windows\system32\webcheck.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\vbscript.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\urlmon.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\url.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-03-15 17:50:57 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-03-15 17:50:57 ----A---- C:\Windows\system32\pngfilt.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\occache.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\msrating.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\msls31.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\mshtmler.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\mshtmled.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\mshtml.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\mshta.exe
2011-03-15 17:50:57 ----A---- C:\Windows\system32\msfeedssync.exe
2011-03-15 17:50:57 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\msfeeds.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\licmgr10.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\jsproxy.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\jscript9.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\jscript.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\inseng.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\imgutil.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\iexpress.exe
2011-03-15 17:50:57 ----A---- C:\Windows\system32\ieUnatt.exe
2011-03-15 17:50:57 ----A---- C:\Windows\system32\ieui.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\iesysprep.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\iesetup.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\iertutil.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\iernonce.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\iepeers.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\ieframe.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\iedkcs32.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\ieapfltr.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\ieakui.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\ieaksie.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\ieakeng.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\ie4uinit.exe
2011-03-15 17:50:57 ----A---- C:\Windows\system32\icardie.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\dxtrans.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\dxtmsft.dll
2011-03-15 17:50:57 ----A---- C:\Windows\system32\admparse.dll
2011-03-09 07:37:01 ----A---- C:\Windows\system32\mstscax.dll
2011-03-09 07:37:00 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2011-03-09 07:37:00 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2011-03-09 07:37:00 ----A---- C:\Windows\system32\mstsc.exe
2011-03-09 07:34:13 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2011-03-09 07:34:13 ----A---- C:\Windows\system32\EncDec.dll
2011-03-09 07:34:13 ----A---- C:\Windows\system32\CPFilters.dll
2011-03-09 07:34:12 ----A---- C:\Windows\SYSWOW64\sbe.dll
2011-03-09 07:34:12 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-03-09 07:34:12 ----A---- C:\Windows\system32\sbe.dll
2011-03-09 07:34:11 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2011-03-09 07:34:11 ----A---- C:\Windows\system32\d3d10_1.dll
2011-03-09 07:34:09 ----A---- C:\Windows\system32\FntCache.dll
2011-03-09 07:34:08 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-03-09 07:34:08 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-03-09 07:34:08 ----A---- C:\Windows\system32\DWrite.dll
2011-03-09 07:34:08 ----A---- C:\Windows\system32\d2d1.dll
2011-03-06 13:47:48 ----D---- C:\Users\Mira\AppData\Roaming\Command and Conquer 4

======List of files/folders modified in the last 1 months======

2011-04-05 18:29:11 ----D---- C:\Windows\Prefetch
2011-04-05 18:29:09 ----D---- C:\Windows\Temp
2011-04-05 18:29:00 ----RD---- C:\Program Files
2011-04-05 18:17:43 ----D---- C:\ProgramData\BOINC
2011-04-05 17:40:19 ----D---- C:\Windows
2011-04-05 17:38:22 ----D---- C:\Users\Mira\AppData\Roaming\Skype
2011-04-05 17:38:17 ----D---- C:\Windows\Downloaded Program Files
2011-04-05 17:38:15 ----D---- C:\Program Files (x86)
2011-04-05 16:14:51 ----D---- C:\Windows\system32\config
2011-04-05 15:32:22 ----D---- C:\Windows\System32
2011-04-05 15:32:22 ----D---- C:\Windows\inf
2011-04-05 15:32:22 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-04-05 13:40:46 ----D---- C:\Program Files (x86)\Steam
2011-04-05 13:38:49 ----D---- C:\ProgramData\VMware
2011-04-05 13:38:47 ----D---- C:\ProgramData\NVIDIA
2011-04-04 21:17:30 ----D---- C:\Program Files (x86)\StarCraft II
2011-04-04 19:46:05 ----D---- C:\Windows\SysWOW64
2011-04-04 19:39:53 ----SHD---- C:\Windows\Installer
2011-04-04 19:39:36 ----D---- C:\Windows\system32\drivers
2011-04-04 19:39:36 ----D---- C:\Windows\system32\catroot
2011-04-04 19:39:35 ----D---- C:\Windows\system32\DriverStore
2011-04-04 19:38:42 ----D---- C:\Program Files\NVIDIA Corporation
2011-04-04 19:37:39 ----SHD---- C:\System Volume Information
2011-04-04 19:36:46 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-04-04 06:29:04 ----D---- C:\Windows\system32\catroot2
2011-04-01 19:17:54 ----D---- C:\Users\Mira\AppData\Roaming\uTorrent
2011-03-24 22:15:09 ----HD---- C:\ProgramData
2011-03-24 21:19:54 ----D---- C:\Program Files (x86)\Electronic Arts
2011-03-24 21:19:25 ----RSD---- C:\Windows\assembly
2011-03-24 21:16:22 ----D---- C:\Windows\winsxs
2011-03-22 19:58:42 ----D---- C:\Windows\SYSWOW64\drivers
2011-03-22 19:25:06 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-03-21 20:12:46 ----D---- C:\Program Files (x86)\Common Files
2011-03-21 20:12:27 ----D---- C:\Program Files (x86)\Java
2011-03-17 08:30:50 ----SD---- C:\ProgramData\Microsoft
2011-03-16 19:45:28 ----D---- C:\Windows\rescache
2011-03-16 16:41:47 ----D---- C:\Program Files\Internet Explorer
2011-03-15 17:54:22 ----D---- C:\Windows\Logs
2011-03-15 17:54:16 ----D---- C:\Windows\servicing
2011-03-15 17:52:49 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-03-15 17:52:49 ----D---- C:\Windows\system32\cs-CZ
2011-03-15 17:52:49 ----D---- C:\Program Files (x86)\Internet Explorer
2011-03-15 17:52:48 ----D---- C:\Windows\SYSWOW64\migration
2011-03-15 17:52:48 ----D---- C:\Windows\SYSWOW64\en-US
2011-03-15 17:52:47 ----D---- C:\Windows\system32\migration
2011-03-15 17:52:47 ----D---- C:\Windows\system32\en-US
2011-03-15 17:52:47 ----D---- C:\Windows\PolicyDefinitions
2011-03-14 08:01:17 ----D---- C:\Program Files (x86)\Trillian
2011-03-09 10:18:05 ----D---- C:\Users\Mira\AppData\Roaming\skypePM
2011-03-09 07:39:44 ----D---- C:\ProgramData\Microsoft Help
2011-03-09 07:38:38 ----D---- C:\Windows\debug
2011-03-09 07:38:37 ----A---- C:\Windows\system32\MRT.exe
2011-03-07 11:39:11 ----SD---- C:\Users\Mira\AppData\Roaming\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-12-11 871408]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-07-29 141264]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-06-27 88632]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-09-03 170104]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-07-29 171152]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-07-29 50624]
R2 hcmon;VMware hcmon; \??\C:\Windows\system32\drivers\hcmon.sys [2010-11-11 38512]
R2 vmci;VMware vmci; \??\C:\Windows\system32\drivers\vmci.sys [2010-11-11 81008]
R2 VMnetBridge;VMware Bridge Protocol; C:\Windows\system32\DRIVERS\vmnetbridge.sys [2010-11-11 45104]
R2 VMnetuserif;VMware Network Application Interface; \??\C:\Windows\system32\drivers\vmnetuserif.sys [2010-11-11 30320]
R2 vmx86;VMware vmx86; \??\C:\Windows\system32\drivers\vmx86.sys [2010-11-11 68720]
R2 vstor2-ws60;Vstor2 WS60 Virtual Storage Driver; \??\C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys [2010-08-19 32816]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-07-29 33632]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2005-03-29 8192]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2010-09-07 155752]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-06-23 344680]
R3 vmkbd;VMware kbd; \??\C:\Windows\system32\drivers\VMkbd.sys [2010-11-11 31856]
R3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys [2010-11-11 20016]
S3 a9p3pwcd;a9p3pwcd; C:\Windows\system32\drivers\a9p3pwcd.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-14 19968]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2010-11-18 810144]
R2 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-12-11 655624]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2010-10-19 989800]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2010-12-22 66872]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-19 369256]
R2 VMAuthdService;VMware Authorization Service; C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe [2010-11-11 113264]
R2 VMnetDHCP;VMware DHCP Service; C:\Windows\syswow64\vmnetdhcp.exe [2010-11-11 334448]
R2 VMUSBArbService;VMware USB Arbitration Service; C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe [2010-11-11 539248]
R2 VMware NAT Service;VMware NAT Service; C:\Windows\syswow64\vmnat.exe [2010-11-11 404080]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2011-03-23 403240]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 Adobe Version Cue CS4;Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
S3 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-11-18 42360]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2010-12-11 1038088]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 ufad-ws60;VMware Agent Service; C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe [2010-08-19 191024]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-12-11 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

[Rudy]

Dejte log z Combofix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

[mirra]

Zdravím, tady je log z Combofix:

ComboFix 11-04-09.01 - Mira 10.04.2011 18:16:34.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.4087.2631 [GMT 2:00]
Spuštěný z: c:\users\Mira\Desktop\ComboFix.exe
AV: ESET Smart Security 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Disabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-03-10 do 2011-04-10 )))))))))))))))))))))))))))))))
.
.
2011-04-10 16:21 . 2011-04-10 16:21 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-04-10 12:33 . 2011-04-10 12:33 -------- d-----w- c:\users\Mira\AppData\Local\{78EB2B43-A8BC-456B-9B79-3532162263B9}
2011-04-10 09:31 . 2011-04-10 09:31 -------- d-----w- c:\users\Mira\AppData\Local\{CDC60954-131D-45C8-99D9-6B8B3BA323D3}
2011-04-10 08:48 . 2011-04-10 08:48 -------- d-----w- c:\program files (x86)\Reality Pump
2011-04-09 17:28 . 2011-04-09 17:29 -------- d-----w- c:\users\Mira\AppData\Local\{29D90921-3A17-459F-9984-B81D361FB1E1}
2011-04-09 09:07 . 2011-04-09 09:07 -------- d-----w- c:\users\Mira\AppData\Local\{2DB76EF4-C138-48DA-BA3E-ACAB268F0C3E}
2011-04-08 14:49 . 2011-04-08 14:49 -------- d-----w- c:\program files (x86)\Ubisoft
2011-04-08 14:49 . 2011-04-08 14:49 1 ----a-w- c:\windows\SysWow64\SI.bin
2011-04-08 06:12 . 2011-04-08 06:12 -------- d-----w- c:\users\Mira\AppData\Local\{788570AE-92A2-4A76-8FF1-72211BA540D8}
2011-04-08 05:59 . 2011-03-15 05:17 8424784 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BE69CAE2-F08D-41DC-AF0E-172FFA7117BA}\mpengine.dll
2011-04-07 19:00 . 2011-04-07 19:00 -------- d-----w- c:\users\Mira\AppData\Local\{E89B39BD-18BF-4C75-9068-A02A51DA0C9A}
2011-04-07 16:47 . 2011-04-07 16:47 -------- d-----w- c:\users\Mira\AppData\Local\Diagnostics
2011-04-07 15:03 . 2011-04-07 15:03 -------- d-----w- c:\users\Mira\AppData\Local\4A Games
2011-04-07 06:28 . 2011-04-07 06:28 -------- d-----w- c:\users\Mira\AppData\Local\{FAE4C662-79D7-496E-A2F1-C88CD4FFEA57}
2011-04-06 04:46 . 2011-04-06 04:46 -------- d-----w- c:\users\Mira\AppData\Local\{7A135529-6719-42B6-9078-97BAABD5B58C}
2011-04-05 19:42 . 2011-04-05 19:42 -------- d-----w- c:\users\Mira\AppData\Local\Electronic Arts
2011-04-05 17:38 . 2011-04-05 17:38 -------- d--h--r- c:\users\Mira\AppData\Roaming\SecuROM
2011-04-05 16:29 . 2011-04-05 16:29 -------- d-----w- c:\program files\trend micro
2011-04-05 16:28 . 2011-04-05 16:29 -------- d-----w- C:\rsit
2011-04-05 15:38 . 2011-04-05 15:38 -------- d-----w- c:\program files (x86)\ESET
2011-04-05 07:03 . 2011-04-05 07:03 -------- d-----w- c:\users\Mira\AppData\Local\{6D406405-C063-472A-A483-87366991ACE5}
2011-04-04 18:01 . 2011-04-04 18:01 -------- d-----w- c:\users\Mira\AppData\Local\{414CB867-C31A-4BEE-A6B2-0B659C69AA85}
2011-04-04 17:39 . 2010-09-07 20:08 1308776 ----a-w- c:\windows\system32\nvgenco64.dll
2011-04-04 17:39 . 2010-09-07 20:09 29288 ----a-w- c:\windows\system32\nvhdap64.dll
2011-04-04 17:39 . 2010-09-07 20:08 155752 ----a-w- c:\windows\system32\drivers\nvhda64v.sys
2011-04-04 17:37 . 2010-10-19 08:10 1500264 ----a-w- c:\windows\system32\nvdispco642050.dll
2011-04-04 17:37 . 2010-10-19 08:10 1308776 ----a-w- c:\windows\system32\nvgenco642030.dll
2011-04-04 17:37 . 2011-02-23 06:28 7732328 ----a-w- c:\windows\system32\nvwgf2umx.dll
2011-04-04 17:37 . 2011-02-23 06:28 5654120 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2011-04-04 17:37 . 2010-10-19 08:10 386152 ----a-w- c:\windows\system32\nvdecodemft.dll
2011-04-04 17:37 . 2010-10-19 08:10 319080 ----a-w- c:\windows\SysWow64\nvdecodemft.dll
2011-04-04 04:28 . 2011-04-04 04:28 -------- d-----w- c:\users\Mira\AppData\Local\{D1E724D8-AFD8-41E4-9057-AD41BAFDD436}
2011-04-03 18:47 . 2011-04-03 18:47 -------- d-----w- c:\users\Mira\AppData\Local\{20731704-C7AF-4CAA-A6DC-DFE94F825E34}
2011-04-01 13:06 . 2011-04-01 13:06 -------- d-----w- c:\users\Mira\AppData\Local\{DF2B83F5-1B09-4FF8-87E2-68E08D131C6E}
2011-04-01 10:51 . 2011-04-01 10:51 -------- d-----w- c:\users\Mira\AppData\Local\{2F2E95C3-B521-4726-A762-4884CE4505D7}
2011-03-31 15:43 . 2011-03-31 15:44 -------- d-----w- c:\users\Mira\AppData\Local\{0378EBC5-3892-41B0-A869-3AB1F865F281}
2011-03-31 10:07 . 2011-03-31 10:07 -------- d-----w- c:\users\Mira\AppData\Local\{E97B52D9-E78D-40E5-A2A9-1FD5C8CD8D89}
2011-03-30 14:15 . 2011-03-30 14:15 -------- d-----w- c:\users\Mira\AppData\Local\{98BD6D41-8D50-495A-A52B-ACE7CCBD4ED5}
2011-03-29 19:08 . 2011-03-29 19:08 -------- d-----w- c:\users\Mira\AppData\Local\{54E54012-8B77-4C52-A04D-EE7C767843BA}
2011-03-29 05:45 . 2011-03-29 05:45 -------- d-----w- c:\users\Mira\AppData\Local\{741D7ACA-6FB9-4AD6-9E96-1A69C9EA9AD9}
2011-03-28 10:16 . 2011-04-04 08:00 -------- d-----w- c:\users\Mira\AppData\Roaming\dvdcss
2011-03-28 06:52 . 2011-03-28 06:52 -------- d-----w- c:\users\Mira\AppData\Local\{F783EAF6-139F-497B-AE72-23BBAACE2E57}
2011-03-26 07:53 . 2011-03-26 07:53 -------- d-----w- c:\users\Mira\AppData\Local\{2A9A501C-99EF-4133-B316-BF5B5B754B67}
2011-03-25 19:53 . 2011-03-25 19:53 -------- d-----w- c:\users\Mira\AppData\Local\{CFA7D8F7-FCBE-4E98-A086-DA4DFDD27CB0}
2011-03-25 07:52 . 2011-03-25 07:53 -------- d-----w- c:\users\Mira\AppData\Local\{077A6168-9ECC-41FC-A316-B01EC1278EB2}
2011-03-24 20:15 . 2011-04-05 19:42 -------- d-----w- c:\programdata\Electronic Arts
2011-03-24 20:15 . 2011-03-24 20:15 -------- d-----w- c:\programdata\EA Core
2011-03-24 19:16 . 2011-04-05 20:23 -------- d-----w- c:\programdata\Solidshield
2011-03-24 07:24 . 2011-03-24 19:24 -------- d-----w- c:\users\Mira\AppData\Local\{1D003163-23B2-4202-81E0-F34A2A0E85FE}
2011-03-23 18:30 . 2011-03-23 18:30 -------- d-----w- c:\users\Mira\AppData\Local\{3F78F886-E98C-4A77-9717-7771DC73F029}
2011-03-23 06:29 . 2011-03-23 06:30 -------- d-----w- c:\users\Mira\AppData\Local\{8C938E6C-66BF-49D9-8A12-3E61E03FEB87}
2011-03-22 19:38 . 2011-03-22 19:38 -------- d-----w- c:\users\Mira\AppData\Local\Apps
2011-03-22 17:58 . 2011-03-22 17:57 73728 ---ha-w- c:\windows\SysWow64\psProxy.dll
2011-03-22 17:58 . 2011-03-22 17:57 380928 ---ha-w- c:\windows\SysWow64\pSOAP32.dll
2011-03-22 17:58 . 2011-03-22 17:57 188416 ---ha-w- c:\windows\SysWow64\pocketHTTP.dll
2011-03-22 17:58 . 2011-03-22 17:57 110676 ---ha-w- c:\windows\SysWow64\psDime.dll
2011-03-22 17:58 . 2011-03-22 17:57 266240 ---ha-w- c:\windows\SysWow64\EncryptedFolder.dll
2011-03-22 17:58 . 2011-03-22 19:38 -------- d-----w- c:\program files (x86)\FILERECOVERY-PRO
2011-03-22 17:44 . 2011-03-22 17:44 -------- d-----w- c:\users\Mira\AppData\Local\{56F710D3-2856-4008-8F31-491FD5D7E943}
2011-03-22 17:25 . 2011-03-22 17:25 781272 ----a-w- c:\program files (x86)\Mozilla Firefox\mozsqlite3.dll
2011-03-22 17:25 . 2011-03-22 17:25 1874904 ----a-w- c:\program files (x86)\Mozilla Firefox\mozjs.dll
2011-03-22 17:25 . 2011-03-22 17:25 15832 ----a-w- c:\program files (x86)\Mozilla Firefox\mozalloc.dll
2011-03-22 17:24 . 2011-03-22 17:25 728024 ----a-w- c:\program files (x86)\Mozilla Firefox\libGLESv2.dll
2011-03-22 17:24 . 2011-03-22 17:24 1975768 ----a-w- c:\program files (x86)\Mozilla Firefox\D3DCompiler_42.dll
2011-03-22 17:24 . 2011-03-22 17:24 1893336 ----a-w- c:\program files (x86)\Mozilla Firefox\d3dx9_42.dll
2011-03-22 17:24 . 2011-03-22 17:24 142296 ----a-w- c:\program files (x86)\Mozilla Firefox\libEGL.dll
2011-03-22 17:24 . 2011-03-22 17:24 142296 ----a-w- c:\program files (x86)\Mozilla Firefox\components\browsercomps.dll
2011-03-22 05:43 . 2011-03-22 05:43 -------- d-----w- c:\users\Mira\AppData\Local\{6F0D5A97-A79C-4A69-8590-EB609E0AE0F7}
2011-03-21 18:12 . 2011-03-21 18:12 -------- d-----w- c:\windows\Sun
2011-03-21 18:12 . 2011-03-21 18:12 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-03-21 18:11 . 2011-03-21 18:11 -------- d-----w- c:\programdata\McAfee
2011-03-21 15:38 . 2011-03-21 15:38 -------- d-----w- c:\users\Mira\AppData\Local\{4A5F9FDC-7830-46D5-87A9-015360993906}
2011-03-20 21:06 . 2011-03-20 21:06 -------- d-----w- c:\users\Mira\AppData\Local\{F6EDA7B3-63EF-4791-85FF-DCCD81BB2AF1}
2011-03-20 08:17 . 2011-03-20 08:17 -------- d-----w- c:\users\Mira\AppData\Local\{AFCE8280-21E4-44F7-8679-3DF5E0765A26}
2011-03-19 18:20 . 2011-03-19 18:20 -------- d-----w- c:\users\Mira\AppData\Local\{E1FE9E42-13D5-47BE-91C9-7D268A3453AE}
2011-03-19 06:19 . 2011-03-19 06:19 -------- d-----w- c:\users\Mira\AppData\Local\{62BBC766-2DA9-4786-B30E-DA831266B642}
2011-03-18 15:41 . 2011-03-18 15:41 -------- d-----w- c:\users\Mira\AppData\Local\{C99C4AB5-C04A-494D-A69B-2816FDB00429}
2011-03-17 17:28 . 2011-03-17 17:28 -------- d-----w- c:\users\Mira\AppData\Local\{A9717C32-97C4-4242-A3D9-EA87041262B9}
2011-03-17 06:30 . 2011-03-17 06:30 -------- d-----w- c:\program files (x86)\Microsoft
2011-03-17 05:28 . 2011-03-17 05:28 -------- d-----w- c:\users\Mira\AppData\Local\{7DD6F6F3-A050-48AE-876C-00D64C9C5032}
2011-03-16 14:46 . 2011-03-16 14:46 -------- d-----w- c:\users\Mira\AppData\Local\{0119BF38-A1B3-4B56-A687-D31184C7E19A}
2011-03-15 19:54 . 2011-03-15 19:54 -------- d-----w- c:\users\Mira\AppData\Local\{48001449-6ABC-4ADD-B0EB-059099A575BB}
2011-03-15 07:54 . 2011-03-15 07:54 -------- d-----w- c:\users\Mira\AppData\Local\{4E26E13C-2BBD-46C7-A841-5A1F9490284C}
2011-03-14 19:53 . 2011-03-14 19:53 -------- d-----w- c:\users\Mira\AppData\Local\{80303BA6-61B1-4024-99AB-7BF43CE3920A}
2011-03-14 07:53 . 2011-03-14 07:53 -------- d-----w- c:\users\Mira\AppData\Local\{D157EBE9-62DB-4A4E-9907-A9D38D568700}
2011-03-13 19:52 . 2011-03-13 19:53 -------- d-----w- c:\users\Mira\AppData\Local\{FD3378AA-E0F5-47FC-95A5-99056AF723CE}
2011-03-13 07:52 . 2011-03-13 07:52 -------- d-----w- c:\users\Mira\AppData\Local\{5A58E43D-0BB7-447D-A47E-90C04489D887}
2011-03-12 07:31 . 2011-03-12 19:31 -------- d-----w- c:\users\Mira\AppData\Local\{ECD866BB-41D2-4146-B3A9-ABAC95B1D862}
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-09 05:30 . 2010-06-24 10:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-02-23 06:28 . 2011-02-23 06:28 67176 ----a-w- c:\windows\system32\OpenCL.dll
2011-02-23 06:28 . 2011-02-23 06:28 6606440 ----a-w- c:\windows\system32\nvcuda.dll
2011-02-23 06:28 . 2011-02-23 06:28 57960 ----a-w- c:\windows\SysWow64\OpenCL.dll
2011-02-23 06:28 . 2011-02-23 06:28 3112040 ----a-w- c:\windows\system32\nvcuvid.dll
2011-02-23 06:28 . 2011-02-23 06:28 2895976 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2011-02-23 06:28 . 2011-02-23 06:28 2479720 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-02-23 06:28 . 2011-02-23 06:28 2251368 ----a-w- c:\windows\SysWow64\nvcuvenc.dll
2011-02-23 06:28 . 2011-02-23 06:28 20473960 ----a-w- c:\windows\system32\nvoglv64.dll
2011-02-23 06:28 . 2011-02-23 06:28 18580072 ----a-w- c:\windows\system32\nvcompiler.dll
2011-02-23 06:28 . 2011-02-23 06:28 1614440 ----a-w- c:\windows\system32\nvdispco642090.dll
2011-02-23 06:28 . 2011-02-23 06:28 15047272 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2011-02-23 06:28 . 2011-02-23 06:28 1359976 ----a-w- c:\windows\system32\nvgenco642040.dll
2011-02-23 06:28 . 2011-02-23 06:28 13011560 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2011-02-23 06:28 . 2011-02-23 06:28 12962792 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2011-02-23 06:28 . 2011-02-23 06:28 12862568 ----a-w- c:\windows\system32\nvd3dumx.dll
2011-02-23 06:28 . 2011-02-23 06:28 10079336 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2011-02-23 06:28 . 2010-12-11 14:41 4942952 ----a-w- c:\windows\SysWow64\nvcuda.dll
2011-02-23 06:28 . 2010-12-11 14:41 2200680 ----a-w- c:\windows\system32\nvapi64.dll
2011-02-23 06:28 . 2010-12-11 14:41 1965672 ----a-w- c:\windows\SysWow64\nvapi.dll
2011-02-19 06:37 . 2011-03-09 05:34 1135104 ----a-w- c:\windows\system32\FntCache.dll
2011-02-19 06:37 . 2011-03-09 05:34 1540608 ----a-w- c:\windows\system32\DWrite.dll
2011-02-19 06:36 . 2011-03-09 05:34 902656 ----a-w- c:\windows\system32\d2d1.dll
2011-02-19 05:32 . 2011-03-09 05:34 1074176 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-02-19 05:32 . 2011-03-09 05:34 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2011-02-02 20:40 . 2010-12-14 18:47 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-02-02 17:11 . 2010-12-11 14:47 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-01-26 06:53 . 2011-02-09 07:05 982912 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-01-26 06:53 . 2011-02-09 07:05 265088 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2011-01-26 06:31 . 2011-02-09 07:05 144384 ----a-w- c:\windows\system32\cdd.dll
2011-01-21 05:36 . 2011-01-21 05:36 74272 ----a-w- c:\windows\system32\RtNicProp64.dll
2011-01-21 05:36 . 2011-01-21 05:36 413800 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2011-01-17 06:17 . 2011-03-09 05:34 197120 ----a-w- c:\windows\system32\d3d10_1.dll
2011-01-17 05:38 . 2011-03-09 05:34 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-12-09 11:51 3911776 ----a-w- c:\program files (x86)\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2010-12-09 11:51 3911776 ----a-w- c:\program files (x86)\uTorrentBar\tbuTor.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2010-12-11 1242448]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656]
"EADM"="c:\program files (x86)\Electronic Arts\EADM\EADMUI.exe" [2011-04-03 11857920]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AdobeCS4ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-11 640376]
"VMware hqtray"="c:\program files (x86)\VMware\VMware Player\hqtray.exe" [2010-11-11 64112]
"boincmgr"="c:\program files (x86)\BOINC\boincmgr.exe" [2010-09-23 4543232]
"boinctray"="c:\program files (x86)\BOINC\boinctray.exe" [2010-09-23 58112]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
c:\users\Mira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2010.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE [2010-3-29 227712]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 Adobe Version Cue CS4;Adobe Version Cue CS4;c:\program files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2010-12-11 1038088]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2010-11-18 810144]
S2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-18 369256]
S2 vmci;VMware vmci;c:\windows\system32\drivers\vmci.sys [x]
S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe [2010-11-11 539248]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 660360]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2010-11-18 2919168]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2786678
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Převést cíl vazby do Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Převést do Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Připojit cíl vazby k existujícímu PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Připojit k existujícímu PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
LSP: c:\program files (x86)\VMware\VMware Player\vsocklib.dll
FF - ProfilePath - c:\users\Mira\AppData\Roaming\Mozilla\Firefox\Profiles\138euzqz.default\
FF - prefs.js: browser.search.defaulturl - www.seznam.cz
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://search.conduit.com/?ctid=CT2786678&SearchSource=13
FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q=
FF - prefs.js: network.proxy.type - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
WebBrowser-{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - (no file)
WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
AddRemove-DAEMON Tools Toolbar - c:\program files (x86)\DAEMON Tools Toolbar\uninst.exe
AddRemove-Mafia Game - c:\windows\system32\MafiaSetup.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-04-10 18:23:13
ComboFix-quarantined-files.txt 2011-04-10 16:23
.
Před spuštěním: Volných bajtů: 501 386 452 992
Po spuštění: Volných bajtů: 514 164 191 232
.
- - End Of File - - 5AC572316F81A4D63FA665131A04AAF9

[Rudy]

Podle všeho žádná nákaza v PC není. Log vypadá čistý.

[mirra]

Díky za pomoc

[Rudy]

Nemáte zač!