Změna hesel na Fb, seznam.email

Zpráva

stereza · #1 Příspěvek od **stereza** » 05 kvě 2011 18:58

Dobrý den,
chtěla jsem se zeptat, před dvěma týdny mi někdo změnil heslo na facebooku a na seznamu email heslo. Na emailu jsem si obnovila heslo a na facebooku poté taky, ale po týdnu mi zase někdo změnil na obou účtech hesla, zase jsem chtěla změnit obě hesla, ale nešlo to :@ Myslím si, že je to nějaký vir. Prosím o pomoc

Díky

#2 Příspěvek od **vyosek** » 05 kvě 2011 19:13

Zdravim, pekny vecer preji a vitam Vas na nasem foru

Jelikoz nevime o Vasem PC nic a z kristalove koule se spatne vesti, navic pri zatazenem pocasi jake ted v okrese Brno panuje, neni nic videt

Ale dosti legracek, kouknem na to

Kliknete do meho podpisu na RSIT a dejte log z nej - navod Vas povede...

stereza · #3 Příspěvek od **stereza** » 05 kvě 2011 19:27

Děkuji

Jen se chci zeptat co potřebujete z toho logu

Vidím že to ukazuje spuštěné aplikace atd...

Jestli ho chcete celý zkopírovat sem

díky

#4 Příspěvek od **vyosek** » 05 kvě 2011 19:37

Ano, cely mi jej sem nasypte

stereza · #5 Příspěvek od **stereza** » 05 kvě 2011 19:38

Logfile of random's system information tool 1.08 (written by random/random)
Run by Tereza at 2011-05-05 20:18:32
Microsoft Windows 7 Home Premium
System drive C: has 14 GB (5%) free of 290 GB
Total RAM: 2935 MB (32% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:18:44, on 5.5.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16766)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\STMicroelectronics\Accelerometer\FF_Protection.exe
C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE
C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe
C:\Program Files\Microsoft Office Communicator\communicator.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Real\RealPlayer\Update\realsched.exe
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\ICQ7.2\ICQ.exe
C:\Program Files\Microsoft Office\Office14\POWERPNT.EXE
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Movier\Movier.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Tereza\Downloads\SRDownloader.exe
C:\Program Files\VideoLAN\VLC\vlc.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Tereza\Downloads\RSIT.exe
C:\Program Files\trend micro\Tereza.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www1.euro.dell.com/content/defau ... l=cs&s=bsd
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT2186473
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: Movier-media Toolbar - {ce10bf86-da68-441e-91fa-38336363e3cd} - C:\Program Files\Movier-media\tbMovi.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Movier-media Toolbar - {ce10bf86-da68-441e-91fa-38336363e3cd} - C:\Program Files\Movier-media\tbMovi.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Movier-media Toolbar - {ce10bf86-da68-441e-91fa-38336363e3cd} - C:\Program Files\Movier-media\tbMovi.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\QuickSet.exe
O4 - HKLM\..\Run: [FreeFallProtection] C:\Program Files\STMicroelectronics\Accelerometer\FF_Protection.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [RemoteControl9] "c:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe"
O4 - HKLM\..\Run: [PDVD9LanguageShortcut] "c:\Program Files\CyberLink\PowerDVD9\Language\Language.exe"
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Communicator] "C:\Program Files\Microsoft Office Communicator\communicator.exe" /fromrunkey
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\Update\realsched.exe" -osboot
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [NVIDIA driver monitor] C:\Users\Public\nvsvc32.exe
O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\aestsrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: FF Install Filter Service (InstallFilterService) - Unknown owner - C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe
O23 - Service: IP-Clamp Licensing by cebas VISUAL TECHNOLOGY Inc. (IPClampService) - Unknown owner - C:\Program Files\cebas\ip-clamp\ipclamp.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: mental ray 3.8 Satellite for Autodesk 3ds Max 2011 32-bit 32-bit (mi-raysat_3dsmax2011_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: DW WLAN Tray Service (wltrysvc) - Dell Inc. - C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE

--
End of file - 12968 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2011-03-12 381656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-02-23 814160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ce10bf86-da68-441e-91fa-38336363e3cd}]
Movier-media Toolbar - C:\Program Files\Movier-media\tbMovi.dll [2010-03-09 2355224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Nero Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-02-01 1487240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-08-28 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-09-06 1048888]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Nero Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-02-01 1487240]
{ce10bf86-da68-441e-91fa-38336363e3cd} - Movier-media Toolbar - C:\Program Files\Movier-media\tbMovi.dll [2010-03-09 2355224]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-02-23 814160]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-01-07 1602856]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2010-04-06 495708]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-04-21 136216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-04-21 171032]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-04-21 169496]
"QuickSet"=C:\Program Files\Dell\QuickSet\QuickSet.exe [2010-01-15 3873648]
"FreeFallProtection"=C:\Program Files\STMicroelectronics\Accelerometer\FF_Protection.exe [2009-07-22 2384896]
"Broadcom Wireless Manager UI"=C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [2010-08-28 5249024]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696]
"Dell Webcam Central"=C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [2009-06-24 409744]
"RemoteControl9"=c:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe [2009-07-06 87336]
"PDVD9LanguageShortcut"=c:\Program Files\CyberLink\PowerDVD9\Language\Language.exe [2010-04-14 50472]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
"Communicator"=C:\Program Files\Microsoft Office Communicator\communicator.exe [2011-03-07 5150560]
"AdobeCS5ServiceManager"=C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-05-27 413696]
"TkBellExe"=C:\Program Files\Real\RealPlayer\Update\realsched.exe [2011-03-12 273544]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-02-23 3451496]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"AdobeBridge"= []
"NVIDIA driver monitor"=C:\Users\Public\nvsvc32.exe []
"OfficeSyncProcess"=C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [2010-03-16 718208]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Users\Tereza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-04-21 227328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2011-05-05 20:18:33 ----D---- C:\Program Files\trend micro
2011-05-05 20:18:32 ----D---- C:\rsit
2011-04-27 20:16:59 ----A---- C:\Windows\system32\prevhost.exe
2011-04-27 20:16:57 ----A---- C:\Windows\system32\fsutil.exe
2011-04-27 20:16:57 ----A---- C:\Windows\system32\esent.dll
2011-04-27 20:16:57 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-04-27 20:16:57 ----A---- C:\Windows\system32\drivers\storport.sys
2011-04-27 20:16:57 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-04-27 20:16:57 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-04-27 20:16:57 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-04-27 20:16:57 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-04-27 20:16:57 ----A---- C:\Windows\system32\drivers\amdxata.sys
2011-04-27 20:16:57 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-04-27 20:16:51 ----A---- C:\Windows\system32\XpsPrint.dll
2011-04-27 20:16:49 ----A---- C:\Windows\explorer.exe
2011-04-18 10:20:05 ----A---- C:\Windows\system32\drivers\aswSP.sys
2011-04-18 10:20:05 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2011-04-18 10:20:04 ----A---- C:\Windows\system32\drivers\aswRdr.sys
2011-04-18 10:20:03 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2011-04-18 10:20:03 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2011-04-18 10:20:03 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2011-04-18 10:19:46 ----A---- C:\Windows\system32\aswBoot.exe
2011-04-15 11:58:41 ----A---- C:\Windows\system32\mshtml.dll
2011-04-15 11:58:40 ----A---- C:\Windows\system32\ieframe.dll
2011-04-15 11:58:39 ----A---- C:\Windows\system32\urlmon.dll
2011-04-15 11:58:38 ----A---- C:\Windows\system32\wininet.dll
2011-04-15 11:58:38 ----A---- C:\Windows\system32\mstime.dll
2011-04-15 11:58:38 ----A---- C:\Windows\system32\mshtmled.dll
2011-04-15 11:58:38 ----A---- C:\Windows\system32\msfeedssync.exe
2011-04-15 11:58:38 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-04-15 11:58:38 ----A---- C:\Windows\system32\msfeeds.dll
2011-04-15 11:58:38 ----A---- C:\Windows\system32\licmgr10.dll
2011-04-15 11:58:38 ----A---- C:\Windows\system32\jsproxy.dll
2011-04-15 11:58:38 ----A---- C:\Windows\system32\ieui.dll
2011-04-15 11:58:38 ----A---- C:\Windows\system32\iertutil.dll
2011-04-15 11:58:38 ----A---- C:\Windows\system32\iepeers.dll
2011-04-15 11:58:38 ----A---- C:\Windows\system32\iedkcs32.dll
2011-04-15 11:05:56 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-04-15 11:05:56 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-04-15 11:05:56 ----A---- C:\Windows\system32\drivers\srv.sys
2011-04-15 11:05:21 ----A---- C:\Windows\system32\vbscript.dll
2011-04-15 11:05:21 ----A---- C:\Windows\system32\jscript.dll
2011-04-15 11:05:15 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-04-15 11:05:15 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-04-15 11:05:15 ----A---- C:\Windows\system32\dnsapi.dll
2011-04-15 11:05:14 ----A---- C:\Windows\system32\atmlib.dll
2011-04-15 11:05:14 ----A---- C:\Windows\system32\atmfd.dll
2011-04-15 10:58:46 ----A---- C:\Windows\system32\win32k.sys
2011-04-15 10:58:46 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-04-15 10:58:44 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-04-15 10:58:42 ----A---- C:\Windows\system32\inetcomm.dll
2011-04-15 10:58:38 ----A---- C:\Windows\system32\mfc42u.dll
2011-04-15 10:58:38 ----A---- C:\Windows\system32\mfc42.dll
2011-04-15 10:58:36 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-04-15 10:58:36 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-04-15 10:58:36 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-04-15 10:58:36 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-04-12 23:10:28 ----D---- C:\Users\Tereza\AppData\Roaming\Movier
2011-04-12 23:10:24 ----D---- C:\Program Files\Conduit
2011-04-12 23:10:22 ----D---- C:\Program Files\Movier-media
2011-04-12 23:10:19 ----D---- C:\Program Files\Movier

======List of files/folders modified in the last 1 months======

2011-05-05 20:18:43 ----D---- C:\Windows\Temp
2011-05-05 20:18:33 ----RD---- C:\Program Files
2011-05-05 20:18:27 ----D---- C:\Windows\Prefetch
2011-05-05 20:18:06 ----D---- C:\Windows\System32
2011-05-05 20:18:06 ----D---- C:\Windows\inf
2011-05-05 20:18:06 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-05-05 19:03:19 ----SHD---- C:\System Volume Information
2011-05-05 19:03:16 ----HD---- C:\Program Files\InstallShield Installation Information
2011-05-05 08:58:26 ----D---- C:\Windows\system32\config
2011-05-05 08:45:21 ----A---- C:\Windows\system32\log.txt
2011-04-30 16:45:46 ----D---- C:\Windows\rescache
2011-04-28 23:19:12 ----D---- C:\Windows\winsxs
2011-04-28 23:19:09 ----D---- C:\Windows\AppPatch
2011-04-28 19:14:43 ----SHD---- C:\Windows\Installer
2011-04-28 08:56:26 ----D---- C:\Windows\system32\drivers
2011-04-28 08:56:26 ----D---- C:\Windows\system32\cs-CZ
2011-04-28 08:56:25 ----D---- C:\Windows\system32\DriverStore
2011-04-27 22:45:13 ----D---- C:\Windows
2011-04-27 20:16:45 ----D---- C:\Windows\system32\catroot2
2011-04-27 20:16:45 ----D---- C:\Windows\system32\catroot
2011-04-26 08:44:44 ----D---- C:\Users\Tereza\AppData\Roaming\ICQ
2011-04-21 16:47:27 ----D---- C:\Program Files\Microsoft Silverlight
2011-04-20 10:16:29 ----SD---- C:\Users\Tereza\AppData\Roaming\Microsoft
2011-04-19 22:02:01 ----D---- C:\Users\Tereza\AppData\Roaming\vlc
2011-04-19 10:55:00 ----D---- C:\Windows\system32\Tasks
2011-04-18 15:46:44 ----A---- C:\Windows\system32\MRT.exe
2011-04-18 10:19:44 ----D---- C:\ProgramData\AVAST Software
2011-04-18 10:14:17 ----HD---- C:\ProgramData
2011-04-18 10:05:06 ----D---- C:\Program Files\Ask.com
2011-04-16 23:18:16 ----D---- C:\Windows\Microsoft.NET
2011-04-16 23:17:43 ----RSD---- C:\Windows\assembly
2011-04-16 22:50:55 ----D---- C:\Windows\system32\migration
2011-04-16 22:50:55 ----D---- C:\Program Files\Internet Explorer
2011-04-16 18:22:07 ----D---- C:\ProgramData\Microsoft Help
2011-04-16 18:21:37 ----D---- C:\Program Files\Microsoft Office Communicator

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-03-04 435736]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2009-07-09 45200]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-09-14 691696]
R0 stdflt;Disk Filter Driver for Accelerometer; C:\Windows\system32\DRIVERS\stdflt.sys [2009-11-27 16176]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-02-23 25432]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-02-23 371544]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-02-23 301528]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-02-23 49240]
R1 cdrblock;cdrblock; C:\Windows\system32\DRIVERS\cdrblock.sys [2008-05-30 27704]
R1 cdrport;cdrport; C:\Windows\system32\DRIVERS\cdrport.sys [2005-03-11 4608]
R1 vmm;Virtual Machine Monitor; \??\C:\Windows\system32\Drivers\vmm.sys [2010-10-25 229208]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-02-23 19544]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-02-23 53592]
R2 Hardlock;Hardlock; \??\C:\Windows\system32\drivers\hardlock.sys [2006-11-22 693760]
R2 rimspci;rimspci; C:\Windows\system32\DRIVERS\rimspe86.sys [2009-07-02 47104]
R2 risdpcie;risdpcie; C:\Windows\system32\DRIVERS\risdpe86.sys [2009-06-30 49152]
R2 rixdpcie;rixdpcie; C:\Windows\system32\DRIVERS\rixdpe86.sys [2009-07-04 38400]
R3 Acceler;Accelerometer Service; C:\Windows\system32\DRIVERS\Acceler.sys [2009-12-02 41648]
R3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys [2010-08-28 18424]
R3 BCM43XX;Ovladač pro bezdrátovou síťovou kartu DW WLAN; C:\Windows\system32\DRIVERS\bcmwl6.sys [2010-05-05 2707448]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-10-02 86056]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-08-28 108072]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-08-28 18472]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\Windows\system32\DRIVERS\CtClsFlt.sys [2009-06-15 143968]
R3 HECI;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECI.sys [2009-09-17 41088]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2010-04-21 8746496]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2009-10-26 125696]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-02-03 232960]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2010-03-04 277536]
R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt.sys [2010-04-06 423936]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-01-07 232624]
R3 VPCNetS2;Virtual Machine Network Services Driver; C:\Windows\system32\DRIVERS\VMNetSrv.sys [2007-01-29 59280]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 a039kdeh;a039kdeh; C:\Windows\system32\drivers\a039kdeh.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 CtAudDrv;Provides advanced audio effects for audio devices.; \??\C:\Windows\system32\Drivers\CtAudDrv.sys [2009-05-28 134144]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-11-09 25280]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\Windows\system32\DRIVERS\ewdcsc.sys [2009-12-15 23424]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2009-12-15 102912]
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\Windows\system32\DRIVERS\ewusbdev.sys [2009-12-15 101120]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S4 RsFx0103;RsFx0103 Driver; C:\Windows\system32\DRIVERS\RsFx0103.sys [2009-03-30 239336]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\aestsrv.exe [2009-03-02 81920]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-02-23 42184]
R2 BcmSqlStartupSvc;Business Contact Manager SQL Server Startup Service; C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe [2010-03-25 31144]
R2 btwdins;Bluetooth Service; c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-10-20 595232]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-09-06 247096]
R2 InstallFilterService;FF Install Filter Service; C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe [2009-11-30 60928]
R2 IPClampService;IP-Clamp Licensing by cebas VISUAL TECHNOLOGY Inc.; C:\Program Files\cebas\ip-clamp\ipclamp.exe [2007-11-20 45700]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-11-04 268824]
R2 mi-raysat_3dsmax2011_32;mental ray 3.8 Satellite for Autodesk 3ds Max 2011 32-bit 32-bit; C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe [2010-03-10 86016]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-07-10 98840]
R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\STacSV.exe [2010-04-06 229458]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-11-04 2320920]
R2 wltrysvc;DW WLAN Tray Service; C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE [2010-08-28 40960]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-09-14 136176]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2010-11-24 72704]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-14 1045256]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-09-14 136176]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ); C:\Program Files\Microsoft SQL Server\MSSQL10.MSSMLBIZ\MSSQL\Binn\sqlservr.exe [2009-03-30 43010392]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2009-01-16 74392]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-09-12 1343400]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-03-31 47128]
S4 SQLAgent$MSSMLBIZ;SQL Server Agent (MSSMLBIZ); C:\Program Files\Microsoft SQL Server\MSSQL10.MSSMLBIZ\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 366936]
S4 SQLBrowser;SQL Server Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2009-03-30 254808]

-----------------EOF-----------------

#6 Příspěvek od **vyosek** » 05 kvě 2011 19:46

Spustte HJT a provedeme fixnuti polozek

HJT najdete zde C:\Program Files\trend micro\Tereza.exe
Otevre se Vam okno, kliknete na Do a system scan only
V dalsim okne najdete radky které jsem Vam vypsal nize, vedle nich je ctverecek, do ktereho udelate zatrzitko
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www1.euro.dell.com/content/defau ... l=cs&s=bsd
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT2186473
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: Movier-media Toolbar - {ce10bf86-da68-441e-91fa-38336363e3cd} - C:\Program Files\Movier-media\tbMovi.dll
Kliknete na Fix checked (vlevo dole)
HJT se Vas zepta zda opravdu ANO, s tim souhlasite a je hotovo

Stahnete OTM (viz muj podpis)

Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize

Kód: Vybrat vše

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ce10bf86-da68-441e-91fa-38336363e3cd}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{855F3B16-6D32-4fe6-8A56-BBB695989046}"=-
"{32099AAC-C132-4136-9E9A-4E364A424E17}"=-
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
"{ce10bf86-da68-441e-91fa-38336363e3cd}"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl9"=-
"PDVD9LanguageShortcut"=-
"AdobeAAMUpdater-1.0"=-
"AdobeCS5ServiceManager"=-
"SwitchBoard"=-
"QuickTime Task"=-
"TkBellExe"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=-
"AdobeBridge"=-
"NVIDIA driver monitor"=-

:services
gupdate
gupdatem
ICQ Service

:files
C:\Program Files\DAEMON Tools Toolbar
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Program Files\Ask.com
C:\Program Files\ICQ6Toolbar
C:\Program Files\Movier-media\tbMovi.dll
C:\Users\Public\nvsvc32.exe
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]

Kliknete na cervene tlacitko MoveIt!
Budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles, obsah sem vlozte

stereza · #7 Příspěvek od **stereza** » 05 kvě 2011 20:11

All processes killed
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ce10bf86-da68-441e-91fa-38336363e3cd}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ce10bf86-da68-441e-91fa-38336363e3cd}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{ce10bf86-da68-441e-91fa-38336363e3cd} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ce10bf86-da68-441e-91fa-38336363e3cd}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\RemoteControl9 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\PDVD9LanguageShortcut deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeCS5ServiceManager deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TkBellExe deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\NVIDIA driver monitor deleted successfully.
========== SERVICES/DRIVERS ==========
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
Service ICQ Service stopped successfully!
Service ICQ Service deleted successfully!
========== FILES ==========
C:\Program Files\DAEMON Tools Toolbar\Resources folder moved successfully.
C:\Program Files\DAEMON Tools Toolbar folder moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Program Files\Ask.com\assets\oobe folder moved successfully.
C:\Program Files\Ask.com\assets folder moved successfully.
C:\Program Files\Ask.com folder moved successfully.
C:\Program Files\ICQ6Toolbar folder moved successfully.
C:\Program Files\Movier-media\tbMovi.dll moved successfully.
File/Folder C:\Users\Public\nvsvc32.exe not found.
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP21B2.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5E64.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8545.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPBCA5.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE6CB.tmp folder moved successfully.
C:\Windows\Installer\MSI710E.tmp moved successfully.
C:\Windows\SoftwareDistribution\Download\2c30e49c40cbcccdfc0cff9fcf47f083\BIT7E0F.tmp moved successfully.
C:\Windows\SoftwareDistribution\Download\dc5785e9c8b3c9af476ade166b57dd6e\BITC353.tmp moved successfully.
C:\Windows\SoftwareDistribution\Download\f1172ec065789780f3e853c2a63ff94c\BITCC4A.tmp moved successfully.
C:\Windows\Temp\DMI7399.tmp moved successfully.
C:\Windows\Temp\DMI83FD.tmp moved successfully.
C:\Windows\Temp\GUR6B20.tmp moved successfully.
C:\Windows\Temp\HTT2406.tmp moved successfully.
C:\Windows\Temp\HTTD4BA.tmp moved successfully.
C:\Windows\Temp\HTTFDCA.tmp moved successfully.
C:\Windows\Temp\Hx571.tmp moved successfully.
C:\Windows\Temp\TFR6AE0.tmp moved successfully.
C:\Windows\Temp\TS_A62E.tmp moved successfully.
C:\Windows\Temp\TS_A7D4.tmp moved successfully.
C:\Windows\Temp\TS_AAC2.tmp moved successfully.
C:\Windows\Temp\TS_AC49.tmp moved successfully.
C:\Windows\Temp\TS_AF56.tmp moved successfully.
C:\Windows\Temp\TS_B32E.tmp moved successfully.
C:\Windows\Temp\TS_B3EA.tmp moved successfully.
C:\Windows\Temp\TS_B468.tmp moved successfully.
C:\Windows\Temp\TS_E37B.tmp moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41620 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

User: Tereza
->Temp folder emptied: 942106868 bytes
->Temporary Internet Files folder emptied: 123829470 bytes
->Java cache emptied: 3226953 bytes
->Google Chrome cache emptied: 222515479 bytes
->Opera cache emptied: 12064471 bytes
->Flash cache emptied: 113444 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 24947240 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 14050007518 bytes

Total Files Cleaned = 14 666,00 mb

OTM by OldTimer - Version 3.1.17.2 log created on 05052011_210059

Files moved on Reboot...
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
File move failed. C:\Windows\temp\hlktmp scheduled to be moved on reboot.

Registry entries deleted on Reboot...

#8 Příspěvek od **vyosek** » 05 kvě 2011 20:16

No pekne jsme to procistili a ted se dame do hledani jestli tam neni nejaky ten keylogger - smejd co sleduje stisknute tlacitka

Aplikujte AVPTool dle tohoto navodu http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 - krok 1 vynechte, to uz udelalo OTM

stereza · #9 Příspěvek od **stereza** » 05 kvě 2011 23:06

Vypsalo mi to ve zpravě nějaký viry

nevím jestli je vymazalo a opravilo a jak se v příspěvku psalo posílám log

Automatická kontrola: dokončeno před 11 min. (události: 76, objekty: 784236, čas: 02:15:12)
5.5.2011 21:32:22 Úloha byla spuštěna
5.5.2011 22:25:46 Zjištěno: Trojan.Win32.Vilsel.avpm C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.hdr/VWSSelectTool.exe
5.5.2011 22:25:46 Neošetřeno: Trojan.Win32.Vilsel.avpm C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.hdr/VWSSelectTool.exe Zápis není podporován
5.5.2011 22:26:46 Zjištěno: Trojan.Win32.Vilsel.avqh C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.hdr/CMTSWriter.exe
5.5.2011 22:26:46 Neošetřeno: Trojan.Win32.Vilsel.avqh C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.hdr/CMTSWriter.exe Zápis není podporován
5.5.2011 22:26:46 Zjištěno: Trojan.Win32.Vilsel.avqi C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.hdr/DiscCap.exe
5.5.2011 22:26:46 Neošetřeno: Trojan.Win32.Vilsel.avqi C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.hdr/DiscCap.exe Zápis není podporován
5.5.2011 22:27:37 Zjištěno: Trojan.Win32.Vilsel.avqa C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.hdr/Infinity Ingest.exe
5.5.2011 22:27:37 Neošetřeno: Trojan.Win32.Vilsel.avqa C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.hdr/Infinity Ingest.exe Zápis není podporován
5.5.2011 22:27:37 Zjištěno: Trojan.Win32.Vilsel.avpz C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.hdr/GF Ingest.exe
5.5.2011 22:27:37 Neošetřeno: Trojan.Win32.Vilsel.avpz C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.hdr/GF Ingest.exe Zápis není podporován
5.5.2011 22:31:06 Zjištěno: Trojan.Win32.Vilsel.avpm C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.cab/VWSSelectTool.exe
5.5.2011 22:31:06 Neošetřeno: Trojan.Win32.Vilsel.avpm C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.cab/VWSSelectTool.exe Zápis není podporován
5.5.2011 22:32:27 Zjištěno: Trojan.Win32.Vilsel.avqh C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.cab/CMTSWriter.exe
5.5.2011 22:32:27 Neošetřeno: Trojan.Win32.Vilsel.avqh C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.cab/CMTSWriter.exe Zápis není podporován
5.5.2011 22:32:28 Zjištěno: Trojan.Win32.Vilsel.avqi C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.cab/DiscCap.exe
5.5.2011 22:32:28 Neošetřeno: Trojan.Win32.Vilsel.avqi C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.cab/DiscCap.exe Zápis není podporován
5.5.2011 22:33:19 Zjištěno: not-a-virus:AdWare.Win32.FunWeb.jl C:\Program Files\SmileyCentral.exe
5.5.2011 22:33:22 Zjištěno: Trojan.Win32.Vilsel.avqa C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.cab/Infinity Ingest.exe
5.5.2011 22:33:22 Neošetřeno: Trojan.Win32.Vilsel.avqa C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.cab/Infinity Ingest.exe Zápis není podporován
5.5.2011 22:33:23 Zjištěno: Trojan.Win32.Vilsel.avpz C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.cab/GF Ingest.exe
5.5.2011 22:33:23 Neošetřeno: Trojan.Win32.Vilsel.avpz C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.cab/GF Ingest.exe Zápis není podporován
5.5.2011 22:33:36 Zjištěno: Trojan.Win32.Vilsel.avpm C:\Documents and Settings\Tereza\Edius 5\EDIUS\data2.cab/VWSSelectTool.exe
5.5.2011 22:33:36 Neošetřeno: Trojan.Win32.Vilsel.avpm C:\Documents and Settings\Tereza\Edius 5\EDIUS\data2.cab/VWSSelectTool.exe Zápis není podporován
5.5.2011 22:33:38 Odstraněno: not-a-virus:AdWare.Win32.FunWeb.jl C:\Program Files\SmileyCentral.exe
5.5.2011 22:33:42 Zjištěno: Trojan.Win32.Vilsel.avqh C:\Documents and Settings\Tereza\Edius 5\EDIUS\data2.cab/CMTSWriter.exe
5.5.2011 22:33:42 Neošetřeno: Trojan.Win32.Vilsel.avqh C:\Documents and Settings\Tereza\Edius 5\EDIUS\data2.cab/CMTSWriter.exe Zápis není podporován
5.5.2011 22:33:46 Zjištěno: Trojan.Win32.Vilsel.avqi C:\Documents and Settings\Tereza\Edius 5\EDIUS\data2.cab/DiscCap.exe
5.5.2011 22:33:46 Neošetřeno: Trojan.Win32.Vilsel.avqi C:\Documents and Settings\Tereza\Edius 5\EDIUS\data2.cab/DiscCap.exe Zápis není podporován
5.5.2011 22:33:52 Zjištěno: Trojan.Win32.Vilsel.avqa C:\Documents and Settings\Tereza\Edius 5\EDIUS\data2.cab/Infinity Ingest.exe
5.5.2011 22:33:52 Neošetřeno: Trojan.Win32.Vilsel.avqa C:\Documents and Settings\Tereza\Edius 5\EDIUS\data2.cab/Infinity Ingest.exe Zápis není podporován
5.5.2011 22:33:56 Zjištěno: Trojan.Win32.Vilsel.avpz C:\Documents and Settings\Tereza\Edius 5\EDIUS\data2.cab/GF Ingest.exe
5.5.2011 22:33:56 Neošetřeno: Trojan.Win32.Vilsel.avpz C:\Documents and Settings\Tereza\Edius 5\EDIUS\data2.cab/GF Ingest.exe Zápis není podporován
5.5.2011 22:45:55 Zjištěno: Trojan.Win32.Vilsel.avqh C:\Program Files\Canopus\EDIUS 5\CMTSWriter.exe
5.5.2011 22:45:57 Zjištěno: Trojan.Win32.Vilsel.avqi C:\Program Files\Canopus\EDIUS 5\DiscCap.exe
5.5.2011 22:46:06 Odstraněno: Trojan.Win32.Vilsel.avqh C:\Program Files\Canopus\EDIUS 5\CMTSWriter.exe
5.5.2011 22:46:08 Zjištěno: Trojan.Win32.Vilsel.avpz C:\Program Files\Canopus\EDIUS 5\GF Ingest.exe
5.5.2011 22:46:09 Odstraněno: Trojan.Win32.Vilsel.avqi C:\Program Files\Canopus\EDIUS 5\DiscCap.exe
5.5.2011 22:46:10 Zjištěno: Trojan.Win32.Vilsel.avqa C:\Program Files\Canopus\EDIUS 5\Infinity Ingest.exe
5.5.2011 22:46:12 Odstraněno: Trojan.Win32.Vilsel.avpz C:\Program Files\Canopus\EDIUS 5\GF Ingest.exe
5.5.2011 22:46:12 Odstraněno: Trojan.Win32.Vilsel.avqa C:\Program Files\Canopus\EDIUS 5\Infinity Ingest.exe
5.5.2011 22:46:12 Zjištěno: Trojan.Win32.Vilsel.avpm C:\Program Files\Canopus\EDIUS 5\VWSSelectTool.exe
5.5.2011 22:46:12 Odstraněno: Trojan.Win32.Vilsel.avpm C:\Program Files\Canopus\EDIUS 5\VWSSelectTool.exe
5.5.2011 23:04:32 Zjištěno: Backdoor.Win32.Hupigon.mcuc C:\Program Files\WinRAR\Zip.SFX
5.5.2011 23:04:49 Odstraněno: Backdoor.Win32.Hupigon.mcuc C:\Program Files\WinRAR\Zip.SFX
5.5.2011 23:34:25 Zjištěno: Trojan.Win32.Vilsel.avpm C:\Users\Tereza\Edius 5\EDIUS\data1.hdr/VWSSelectTool.exe
5.5.2011 23:34:25 Neošetřeno: Trojan.Win32.Vilsel.avpm C:\Users\Tereza\Edius 5\EDIUS\data1.hdr/VWSSelectTool.exe Zápis není podporován
5.5.2011 23:34:26 Zjištěno: Trojan.Win32.Vilsel.avpm C:\Users\Tereza\Edius 5\EDIUS\data1.cab/VWSSelectTool.exe
5.5.2011 23:34:26 Neošetřeno: Trojan.Win32.Vilsel.avpm C:\Users\Tereza\Edius 5\EDIUS\data1.cab/VWSSelectTool.exe Zápis není podporován
5.5.2011 23:34:36 Zjištěno: Trojan.Win32.Vilsel.avqh C:\Users\Tereza\Edius 5\EDIUS\data1.hdr/CMTSWriter.exe
5.5.2011 23:34:36 Neošetřeno: Trojan.Win32.Vilsel.avqh C:\Users\Tereza\Edius 5\EDIUS\data1.hdr/CMTSWriter.exe Zápis není podporován
5.5.2011 23:34:36 Zjištěno: Trojan.Win32.Vilsel.avqi C:\Users\Tereza\Edius 5\EDIUS\data1.hdr/DiscCap.exe
5.5.2011 23:34:36 Neošetřeno: Trojan.Win32.Vilsel.avqi C:\Users\Tereza\Edius 5\EDIUS\data1.hdr/DiscCap.exe Zápis není podporován
5.5.2011 23:34:36 Zjištěno: Trojan.Win32.Vilsel.avqh C:\Users\Tereza\Edius 5\EDIUS\data1.cab/CMTSWriter.exe
5.5.2011 23:34:36 Neošetřeno: Trojan.Win32.Vilsel.avqh C:\Users\Tereza\Edius 5\EDIUS\data1.cab/CMTSWriter.exe Zápis není podporován
5.5.2011 23:34:37 Zjištěno: Trojan.Win32.Vilsel.avqi C:\Users\Tereza\Edius 5\EDIUS\data1.cab/DiscCap.exe
5.5.2011 23:34:37 Neošetřeno: Trojan.Win32.Vilsel.avqi C:\Users\Tereza\Edius 5\EDIUS\data1.cab/DiscCap.exe Zápis není podporován
5.5.2011 23:34:40 Zjištěno: Trojan.Win32.Vilsel.avqa C:\Users\Tereza\Edius 5\EDIUS\data1.cab/Infinity Ingest.exe
5.5.2011 23:34:40 Neošetřeno: Trojan.Win32.Vilsel.avqa C:\Users\Tereza\Edius 5\EDIUS\data1.cab/Infinity Ingest.exe Zápis není podporován
5.5.2011 23:34:40 Zjištěno: Trojan.Win32.Vilsel.avpz C:\Users\Tereza\Edius 5\EDIUS\data1.cab/GF Ingest.exe
5.5.2011 23:34:40 Neošetřeno: Trojan.Win32.Vilsel.avpz C:\Users\Tereza\Edius 5\EDIUS\data1.cab/GF Ingest.exe Zápis není podporován
5.5.2011 23:34:41 Zjištěno: Trojan.Win32.Vilsel.avqa C:\Users\Tereza\Edius 5\EDIUS\data1.hdr/Infinity Ingest.exe
5.5.2011 23:34:41 Neošetřeno: Trojan.Win32.Vilsel.avqa C:\Users\Tereza\Edius 5\EDIUS\data1.hdr/Infinity Ingest.exe Zápis není podporován
5.5.2011 23:34:41 Zjištěno: Trojan.Win32.Vilsel.avpm C:\Users\Tereza\Edius 5\EDIUS\data2.cab/VWSSelectTool.exe
5.5.2011 23:34:41 Neošetřeno: Trojan.Win32.Vilsel.avpm C:\Users\Tereza\Edius 5\EDIUS\data2.cab/VWSSelectTool.exe Zápis není podporován
5.5.2011 23:34:41 Zjištěno: Trojan.Win32.Vilsel.avpz C:\Users\Tereza\Edius 5\EDIUS\data1.hdr/GF Ingest.exe
5.5.2011 23:34:41 Neošetřeno: Trojan.Win32.Vilsel.avpz C:\Users\Tereza\Edius 5\EDIUS\data1.hdr/GF Ingest.exe Zápis není podporován
5.5.2011 23:34:46 Zjištěno: Trojan.Win32.Vilsel.avqh C:\Users\Tereza\Edius 5\EDIUS\data2.cab/CMTSWriter.exe
5.5.2011 23:34:46 Neošetřeno: Trojan.Win32.Vilsel.avqh C:\Users\Tereza\Edius 5\EDIUS\data2.cab/CMTSWriter.exe Zápis není podporován
5.5.2011 23:34:50 Zjištěno: Trojan.Win32.Vilsel.avqi C:\Users\Tereza\Edius 5\EDIUS\data2.cab/DiscCap.exe
5.5.2011 23:34:50 Neošetřeno: Trojan.Win32.Vilsel.avqi C:\Users\Tereza\Edius 5\EDIUS\data2.cab/DiscCap.exe Zápis není podporován
5.5.2011 23:34:55 Zjištěno: Trojan.Win32.Vilsel.avqa C:\Users\Tereza\Edius 5\EDIUS\data2.cab/Infinity Ingest.exe
5.5.2011 23:34:55 Neošetřeno: Trojan.Win32.Vilsel.avqa C:\Users\Tereza\Edius 5\EDIUS\data2.cab/Infinity Ingest.exe Zápis není podporován
5.5.2011 23:34:58 Zjištěno: Trojan.Win32.Vilsel.avpz C:\Users\Tereza\Edius 5\EDIUS\data2.cab/GF Ingest.exe
5.5.2011 23:34:58 Neošetřeno: Trojan.Win32.Vilsel.avpz C:\Users\Tereza\Edius 5\EDIUS\data2.cab/GF Ingest.exe Zápis není podporován
5.5.2011 23:47:34 Úloha byla dokončena

#10 Příspěvek od **vyosek** » 06 kvě 2011 06:25

Tohle zname C:\Documents and Settings\Tereza\Edius 5

Nasledujici soubory otestujte na VirusTotalu (viz muj podpis)

C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.hdr/CMTSWriter.exe
C:\Documents and Settings\Tereza\Edius 5\EDIUS\data1.cab/DiscCap.exe
Kliknete na Prochazet
Soubor nehledejte, jen vlozte cestu souboru, ktery chci otestovat
Kliknete na Send File
Pokud na Vas vyskoci obrazovka jako je nize, tak kliknete na ReAnalyse
Vysledek analyzy sem vlozte (jako odkaz)

stereza · #11 Příspěvek od **stereza** » 06 kvě 2011 07:05

Cesta k těmto souboru mi nešla protože psalo to že to je neplatná akce

Takže jsem si to zkrátil na: C:\Documents and Settings\Tereza\Edius 5\EDIUS\ a našel seoubor data1

a dal ho search:)
http://www.virustotal.com/file-scan/rep ... 1304661368

#12 Příspěvek od **vyosek** » 06 kvě 2011 07:54

Jak se chova PC nyni

Doporucil bych ted kompletni zmenu hesel a pouzivat tzv. "silna" hesla = kombinace velkych a malych pisemn ve spojeni s cisly...

stereza · #13 Příspěvek od **stereza** » 06 kvě 2011 07:59

De poznat, že asi lépe moc děkuji jen se chci zeptat jestli nevíte jak obnovím heslo na facebooku a emailu, nejde mi to, protože mi změnili ověřovací otázku. Jerstli s tím nemáte zkušenosti:) Díky

#14 Příspěvek od **vyosek** » 06 kvě 2011 08:03

Tak jeste uklidime

Odinstalujte Combofix

Start - Spustit (nebo pouzijte klavesobou zkratku Win+R)
Napiste ComboFix /Uninstall
Stisknete Enter
Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis)
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

Ohledne emailu bych napsal na jejich tech. podporu, na FB netusim

Ale zkusim pohledat...

stereza · #15 Příspěvek od **stereza** » 06 kvě 2011 08:36

Pohledejte já se taky kouknu

A děkuji

když tak jsem napište ohledně toho fb

díky

VIRY.CZ

Změna hesel na Fb, seznam.email

Změna hesel na Fb, seznam.email

Re: Změna hesel na Fb, seznam.email

Re: Změna hesel na Fb, seznam.email

Re: Změna hesel na Fb, seznam.email

Re: Změna hesel na Fb, seznam.email

Re: Změna hesel na Fb, seznam.email

Re: Změna hesel na Fb, seznam.email

Re: Změna hesel na Fb, seznam.email

Re: Změna hesel na Fb, seznam.email

Re: Změna hesel na Fb, seznam.email

Re: Změna hesel na Fb, seznam.email

Re: Změna hesel na Fb, seznam.email

Re: Změna hesel na Fb, seznam.email

Re: Změna hesel na Fb, seznam.email

Re: Změna hesel na Fb, seznam.email