VIRY.CZ

Prominte ale nejde to sem blbej ... Musime se dohodnout na náký termín kdy by jste měla čas a zkusila to najit vy přes teamviewer 5 pls

Není potřeba, to zvládneme

Tuto stránku znáte?
uStart Page = hxxp://giaitri.com/new/index.php


Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka
-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

Ano tu stránku znám ... Tu je log ze COMBOFIXU : ComboFix 10-06-18.03 - Uživatel 19.06.2010 8:27.3.2 - x86
Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1250.420.1029.18.2037.1100 [GMT 2:00]
Spuštěný z: c:\users\Uživatel\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Uživatel\Desktop\CFScript.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

FILE ::
"c:\users\UIVATE~1\AppData\Local\Temp\~nsu.tmp\Au_.exe"
"c:\users\UIVATE~1\AppData\Local\Temp\~nsu.tmp\Bu_.exe"
"c:\windows\system32\GameMon.des"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\GameMon.des

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_npggsvc


((((((((((((((((((((((((( Soubory vytvořené od 2010-05-19 do 2010-06-19 )))))))))))))))))))))))))))))))
.

2010-06-19 06:46 . 2010-06-19 06:46 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\temp
2010-06-19 06:46 . 2010-06-19 06:46 -------- d-----w- c:\users\U×ivatel\AppData\Local\temp
2010-06-19 06:46 . 2010-06-19 06:46 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-06-19 06:46 . 2010-06-19 06:46 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-06-17 13:46 . 2010-05-04 05:55 71680 ----a-w- c:\windows\system32\iesetup.dll
2010-06-17 13:46 . 2010-05-01 14:13 2037248 ----a-w- c:\windows\system32\win32k.sys
2010-06-16 13:15 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-06-16 13:15 . 2010-06-16 13:15 -------- d-----w- c:\programdata\Malwarebytes
2010-06-16 13:15 . 2010-06-16 13:15 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-06-16 13:15 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-06-16 12:43 . 2010-06-16 12:43 -------- d-----w- c:\program files\CCleaner
2010-06-15 15:39 . 2010-06-16 19:07 -------- d-----w- c:\program files\trend micro
2010-06-15 15:39 . 2010-06-15 15:41 -------- d-----w- C:\rsit
2010-06-13 11:53 . 2010-06-13 11:53 -------- d-----w- c:\program files\PremiumSoft
2010-06-13 10:58 . 2010-06-13 14:26 -------- d-----w- c:\programdata\Symantec
2010-06-13 10:58 . 2010-06-13 10:58 -------- d-----w- c:\programdata\Norton
2010-06-13 10:58 . 2010-06-13 10:58 -------- d-----w- c:\windows\system32\drivers\NSS
2010-06-13 10:58 . 2010-06-13 10:58 -------- d-----w- c:\program files\Norton Security Scan
2010-06-13 10:58 . 2010-06-13 10:58 -------- d-----w- c:\programdata\NortonInstaller
2010-06-13 10:58 . 2010-06-13 10:58 -------- d-----w- c:\program files\NortonInstaller
2010-06-13 10:00 . 2009-12-19 22:00 -------- d---a-w- C:\xampp
2010-06-13 09:20 . 2010-06-13 09:20 -------- d-----w- c:\program files\Sun
2010-06-13 07:57 . 2010-06-13 07:59 -------- d-----w- c:\windows\system32\Adobe
2010-06-08 16:08 . 2010-06-08 16:08 -------- d-----w- c:\programdata\FLEXnet
2010-06-08 15:59 . 2010-06-08 15:59 -------- d-----w- c:\program files\Bonjour
2010-06-08 15:41 . 2010-06-08 15:41 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2010-06-08 14:43 . 2010-06-13 07:23 -------- d-----w- c:\program files\SindicateM2
2010-06-07 15:11 . 1998-10-29 14:45 306688 ----a-w- c:\windows\IsUninst.exe
2010-06-07 12:43 . 2010-06-07 13:04 -------- d-----w- c:\windows\048298C9A4D3490B9FF9AB023A9238F3.TMP
2010-06-07 12:26 . 2010-06-07 12:26 -------- d-----w- c:\program files\Common Files\Steam
2010-05-26 13:24 . 2010-04-23 14:13 2048 ----a-w- c:\windows\system32\tzres.dll
2010-05-25 14:53 . 2010-05-25 16:10 66178 ----a-w- c:\program files\Uninstall.exe
2010-05-25 14:33 . 2010-06-18 17:59 -------- d-----w- c:\program files\InfinityMU
2010-05-24 18:37 . 2010-05-24 18:37 -------- d-----w- c:\users\U×ivatel

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-18 08:30 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-06-17 13:26 . 2010-01-01 10:20 -------- d-----w- c:\program files\Google
2010-06-16 16:59 . 2007-06-07 10:09 611540 ----a-w- c:\windows\system32\perfh005.dat
2010-06-16 16:59 . 2007-06-07 10:09 119196 ----a-w- c:\windows\system32\perfc005.dat
2010-06-14 13:29 . 2009-02-03 14:33 -------- d-----w- c:\program files\ESET
2010-06-08 15:59 . 2009-01-13 12:57 -------- d-----w- c:\program files\Common Files\Adobe
2010-05-26 17:06 . 2010-06-17 13:47 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-05-26 14:47 . 2010-06-17 13:47 289792 ----a-w- c:\windows\system32\atmfd.dll
2010-05-23 17:51 . 2010-02-13 17:39 -------- d-----w- c:\program files\Metin2_CZ
2010-05-21 12:14 . 2009-10-02 18:21 221568 ------w- c:\windows\system32\MpSigStub.exe
2010-05-09 18:29 . 2010-03-24 16:56 -------- d-----w- c:\program files\Softonic-Eng7
2010-05-06 20:59 . 2009-02-12 16:46 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-05-06 20:59 . 2009-02-12 16:46 165032 ----a-w- c:\windows\system32\aswBoot.exe
2010-05-06 20:39 . 2009-02-12 16:46 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-05-06 20:39 . 2009-02-12 16:46 164048 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-05-06 20:34 . 2009-02-12 16:46 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-05-06 20:34 . 2009-02-12 16:46 51792 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-05-06 20:33 . 2009-02-12 16:46 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-05-04 05:59 . 2010-06-17 13:47 916480 ----a-w- c:\windows\system32\wininet.dll
2010-05-04 05:55 . 2010-06-17 13:47 109056 ----a-w- c:\windows\system32\iesysprep.dll
2010-05-04 04:31 . 2010-06-17 13:47 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2010-05-01 15:28 . 2010-05-01 14:54 -------- d-----w- c:\programdata\Blizzard Entertainment
2010-05-01 11:34 . 2009-04-18 06:48 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment
2010-04-29 16:50 . 2010-04-01 15:15 -------- d-----w- c:\program files\Naruto Battle Arena MUGEN
2010-04-08 12:53 . 2010-04-08 12:53 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2010-04-05 17:01 . 2010-06-17 13:47 67072 ----a-w- c:\windows\system32\asycfilt.dll
2010-04-03 15:55 . 2010-04-03 15:55 151 ----a-w- c:\windows\system32\check.bat
2010-03-30 17:16 . 2010-03-30 17:16 0 ----a-w- c:\windows\nsreg.dat
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
2010-05-09 18:29 2515552 ----a-w- c:\program files\Softonic-Eng7\tbSof1.dll

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}"= "c:\program files\Softonic-Eng7\tbSof1.dll" [2010-05-09 2515552]

[HKEY_CLASSES_ROOT\clsid\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-11 2153472]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2009-05-26 4351216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-18 1008184]
"RtHDVCpl"="RtHDVCpl.exe" [2008-04-17 4874240]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 644696]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-03 1603152]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 79400]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-05-06 2815192]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-11 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-11 166424]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-11 133656]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2010-2-4 495432]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):08,76,39,cd,17,2e,ca,01

R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-04-02 135664]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [x]
R3 LLRING0;LLRING0;c:\program files\InfinityMU\MuGuard\llck2.sys [2010-05-28 5120]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2009-12-17 99152]
S1 aswSP;aswSP; [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2009-12-17 123280]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2009-12-17 41616]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-05-06 51792]
S2 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2010-03-18 172328]
S3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [2009-12-17 110096]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'

2010-03-12 c:\windows\Tasks\CreateChoiceProcessTask.job
- c:\windows\System32\browserchoice.exe [2010-03-12 10:32]

2010-06-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-02 11:12]

2010-06-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-02 11:12]

2010-06-18 c:\windows\Tasks\Norton Security Scan for Uživatel.job
- c:\program files\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-06-13 14:31]

2010-06-19 c:\windows\Tasks\User_Feed_Synchronization-{7B9E18C4-C5EC-4FF3-8D2D-40E8B0370A8D}.job
- c:\windows\system32\msfeedssync.exe [2010-06-17 04:30]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://giaitri.com/new/index.php
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html
FF - ProfilePath - c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\mk6s8n54.default\
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-06-19 08:49
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\windows\RtHDVCpl.exe
c:\program files\Alwil Software\Avast5\AvastUI.exe
c:\windows\system32\conime.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\windows\servicing\TrustedInstaller.exe
c:\program files\Windows Media Player\wmpnscfg.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Celkový čas: 2010-06-19 08:58:47 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-06-19 06:58
ComboFix2.txt 2010-06-18 13:10

Před spuštěním: Volných bajtů: 239 934 025 728
Po spuštění: Volných bajtů: 239 540 191 232

Current=1 Default=1 Failed=0 LastKnownGood=11 Sets=1,2,3,4,5,6,7,8,9,11
- - End Of File - - EFA87B5C2908A9402A061A03E85F6F9A

Jak to vypadá s počítačem?

Všechno je v poho jen ty 2 klávesy pořád blbnou pod SHIFTEM je kalkulačka a pod ALTEM vypínám zvuk

Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


***********


Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir



***********


Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

záložka čistič
- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner

záložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy ok zavřít

Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.


***********



Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-vyčistí tempy a po použitých programech



***********

Vložte nový log ze RSIT a řekněte co počítač, jak se chová, už je vše v pořádku?


Na ty klávesy se zeptám kolegů

Tu je log ze RSITU ... - jinak vše je v pořádku jen ty klávesy . .. Logfile of random's system information tool 1.07 (written by random/random)
Run by Uživatel at 2010-06-19 17:03:19
Microsoft® Windows Vista™ Home Basic Service Pack 2
System drive C: has 227 GB (74%) free of 305 GB
Total RAM: 2037 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:03:28, on 19.6.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Users\Uživatel\Downloads\RSIT.exe
C:\Users\Uživatel\Downloads\RSIT.exe
C:\Program Files\trend micro\Uživatel.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://giaitri.com/new/index.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSof1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - (no file)
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\YTSingleInstance.dll
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - Unknown owner - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--
End of file - 6625 bytes

======Scheduled tasks folder======

C:\Windows\tasks\CreateChoiceProcessTask.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Norton Security Scan for Uživatel.job
C:\Windows\tasks\User_Feed_Synchronization-{7B9E18C4-C5EC-4FF3-8D2D-40E8B0370A8D}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
Softonic-Eng7 Toolbar - C:\Program Files\Softonic-Eng7\tbSof1.dll [2010-05-09 2515552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-11-19 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}]
SingleInstance Class - C:\Program Files\Yahoo!\Companion\Installs\cpn2\YTSingleInstance.dll [2010-03-23 160056]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88}


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-18 1008184]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-04-17 4874240]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-05-14 644696]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-03 1603152]
"OpwareSE4"=C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-02 32768]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-05-06 2815192]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-02-11 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-02-11 166424]
"Persistence"=C:\Windows\system32\igfxpers.exe [2008-02-11 133656]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
"Messenger (Yahoo!)"=C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [2009-05-26 4351216]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2008-02-11 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Users\Uživatel\Downloads\IMAGE464-facebook.com.JPG.jpg.exe"="C:\Windows\infocard.exe:*:Enabled:Firewall Admin"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-06-19 16:59:20 ----D---- C:\rsit
2010-06-19 08:48:50 ----D---- C:\$RECYCLE.BIN
2010-06-18 15:10:52 ----D---- C:\Windows\temp
2010-06-17 15:47:53 ----A---- C:\Windows\system32\asycfilt.dll
2010-06-17 15:47:50 ----A---- C:\Windows\system32\atmfd.dll
2010-06-17 15:47:49 ----A---- C:\Windows\system32\atmlib.dll
2010-06-17 15:47:22 ----A---- C:\Windows\system32\mshtml.dll
2010-06-17 15:47:19 ----A---- C:\Windows\system32\ieframe.dll
2010-06-17 15:47:16 ----A---- C:\Windows\system32\iertutil.dll
2010-06-17 15:47:15 ----A---- C:\Windows\system32\urlmon.dll
2010-06-17 15:47:14 ----A---- C:\Windows\system32\wininet.dll
2010-06-17 15:47:13 ----A---- C:\Windows\system32\occache.dll
2010-06-17 15:47:13 ----A---- C:\Windows\system32\msfeeds.dll
2010-06-17 15:47:12 ----A---- C:\Windows\system32\mstime.dll
2010-06-17 15:47:12 ----A---- C:\Windows\system32\iedkcs32.dll
2010-06-17 15:47:10 ----A---- C:\Windows\system32\ieui.dll
2010-06-17 15:47:09 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-06-17 15:47:09 ----A---- C:\Windows\system32\ieUnatt.exe
2010-06-17 15:47:09 ----A---- C:\Windows\system32\iesysprep.dll
2010-06-17 15:47:09 ----A---- C:\Windows\system32\iepeers.dll
2010-06-17 15:47:08 ----A---- C:\Windows\system32\jsproxy.dll
2010-06-17 15:46:59 ----A---- C:\Windows\system32\msfeedssync.exe
2010-06-17 15:46:59 ----A---- C:\Windows\system32\ie4uinit.exe
2010-06-17 15:46:58 ----A---- C:\Windows\system32\iesetup.dll
2010-06-17 15:46:58 ----A---- C:\Windows\system32\iernonce.dll
2010-06-16 15:15:51 ----D---- C:\Users\Uživatel\AppData\Roaming\Malwarebytes
2010-06-16 15:15:18 ----D---- C:\ProgramData\Malwarebytes
2010-06-16 15:15:17 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-06-16 14:43:35 ----D---- C:\Program Files\CCleaner
2010-06-15 17:39:57 ----D---- C:\Program Files\trend micro
2010-06-13 13:53:54 ----D---- C:\Program Files\PremiumSoft
2010-06-13 12:58:23 ----D---- C:\ProgramData\Symantec
2010-06-13 12:58:23 ----D---- C:\ProgramData\Norton
2010-06-13 12:58:23 ----D---- C:\Program Files\Norton Security Scan
2010-06-13 12:58:19 ----D---- C:\ProgramData\NortonInstaller
2010-06-13 12:58:19 ----D---- C:\Program Files\NortonInstaller
2010-06-13 12:00:05 ----AD---- C:\xampp
2010-06-13 11:20:44 ----D---- C:\Program Files\Sun
2010-06-13 09:57:16 ----D---- C:\Windows\system32\Adobe
2010-06-08 18:08:05 ----D---- C:\ProgramData\FLEXnet
2010-06-08 17:59:25 ----D---- C:\Program Files\Bonjour
2010-06-08 17:41:38 ----D---- C:\Program Files\Common Files\Macrovision Shared
2010-06-08 16:43:02 ----D---- C:\Program Files\SindicateM2
2010-06-07 17:11:51 ----A---- C:\Windows\IsUninst.exe
2010-06-07 14:43:36 ----D---- C:\Windows\048298C9A4D3490B9FF9AB023A9238F3.TMP
2010-06-07 14:26:22 ----D---- C:\Program Files\Common Files\Steam
2010-05-26 15:24:00 ----A---- C:\Windows\system32\tzres.dll
2010-05-25 16:53:44 ----A---- C:\Program Files\Uninstall.exe
2010-05-25 16:33:21 ----D---- C:\Program Files\InfinityMU
2010-05-20 19:59:37 ----D---- C:\Program Files\WinRAR

======List of files/folders modified in the last 1 months======

2010-06-19 17:02:18 ----D---- C:\Windows\Prefetch
2010-06-19 16:57:09 ----AD---- C:\Windows
2010-06-19 16:54:45 ----D---- C:\Users\Uživatel\AppData\Roaming\Skype
2010-06-19 16:51:45 ----D---- C:\Windows\Debug
2010-06-19 16:40:47 ----D---- C:\Windows\tracing
2010-06-19 16:05:27 ----D---- C:\Users\Uživatel\AppData\Roaming\skypePM
2010-06-19 11:13:01 ----SHD---- C:\System Volume Information
2010-06-19 08:58:52 ----D---- C:\Windows\system32\drivers
2010-06-19 08:49:14 ----A---- C:\Windows\system.ini
2010-06-19 08:47:03 ----D---- C:\Windows\system32\config
2010-06-19 08:47:03 ----D---- C:\Boot
2010-06-19 08:45:16 ----D---- C:\Windows\System32
2010-06-19 08:40:59 ----D---- C:\Windows\AppPatch
2010-06-19 08:40:56 ----D---- C:\Program Files\Common Files
2010-06-18 10:49:16 ----D---- C:\Windows\Microsoft.NET
2010-06-18 10:49:01 ----RSD---- C:\Windows\assembly
2010-06-18 10:45:09 ----D---- C:\Windows\winsxs
2010-06-18 10:34:45 ----D---- C:\Windows\system32\catroot
2010-06-18 10:30:44 ----D---- C:\Windows\system32\migration
2010-06-18 10:30:44 ----D---- C:\Program Files\Windows Mail
2010-06-18 10:30:44 ----D---- C:\Program Files\Internet Explorer
2010-06-18 10:05:25 ----D---- C:\Windows\system32\wbem
2010-06-17 19:15:23 ----D---- C:\Users\Uživatel\AppData\Roaming\Hamachi
2010-06-17 15:45:00 ----D---- C:\Windows\system32\catroot2
2010-06-17 15:30:51 ----D---- C:\ProgramData
2010-06-17 15:26:35 ----D---- C:\Program Files\Google
2010-06-17 03:50:08 ----SHD---- C:\Windows\Installer
2010-06-16 18:59:59 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-06-16 18:59:54 ----D---- C:\Windows\inf
2010-06-16 15:15:17 ----D---- C:\Program Files
2010-06-16 14:57:26 ----D---- C:\Windows\Minidump
2010-06-15 21:07:17 ----SD---- C:\Users\Uživatel\AppData\Roaming\Microsoft
2010-06-14 15:29:58 ----D---- C:\Program Files\ESET
2010-06-13 12:58:37 ----D---- C:\Windows\Tasks
2010-06-13 12:58:33 ----D---- C:\Windows\system32\Tasks
2010-06-13 09:58:43 ----D---- C:\Windows\system32\Macromed
2010-06-08 18:25:10 ----D---- C:\Program Files\Adobe
2010-06-08 18:10:11 ----D---- C:\Users\Uživatel\AppData\Roaming\Adobe
2010-06-08 18:01:22 ----D---- C:\ProgramData\Adobe
2010-06-08 17:59:17 ----D---- C:\Program Files\Common Files\Adobe
2010-06-08 17:53:56 ----RSD---- C:\Windows\Fonts
2010-05-28 21:37:34 ----A---- C:\Windows\system32\mrt.exe
2010-05-27 14:15:37 ----D---- C:\Windows\rescache
2010-05-27 14:05:40 ----D---- C:\Windows\system32\cs-CZ
2010-05-24 20:37:41 ----RD---- C:\Users
2010-05-23 19:51:26 ----D---- C:\Program Files\Metin2_CZ
2010-05-22 08:13:04 ----D---- C:\Program Files\Mozilla Firefox
2010-05-21 14:14:28 ----N---- C:\Windows\system32\MpSigStub.exe
2010-05-20 20:00:22 ----D---- C:\Users\Uživatel\AppData\Roaming\WinRAR

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-05-06 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-05-06 164048]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-05-06 46672]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2009-12-17 123280]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2009-12-17 41616]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-05-06 19024]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-05-06 51792]
R3 ElbyCDFL;ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-04-08 25280]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-02-11 2302976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-04-17 2047576]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-04-17 118784]
R3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2009-12-17 110096]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-02-11 2302976]
S3 LLRING0;LLRING0; \??\C:\Program Files\InfinityMU\MuGuard\llck2.sys [2010-05-29 5120]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-18 35328]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2009-12-17 99152]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 83328]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-03-18 172328]
R2 YahooAUService;Yahoo! Updater; C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe [2008-11-09 602392]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-02 135664]
S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -s []
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-06-08 654848]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-18 21504]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-01-01 182768]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2008-12-22 104944]

-----------------EOF-----------------

Otestujte na www.virustotal.com
C:\Users\Uživatel\Downloads\IMAGE464-facebook.com.JPG.jpg.exe
C:\Windows\infocard.exe
-Na virustotalu dáte procházet, a do spodního okénka nakopírujete přímo cestu k souboru a dáte odeslat
-z prohlížeče zkopírujete adresu ke stránce s výsledky
-pokud se Vás zeptá, dejte soubor otestovat znovu, tak aby to byl soubor z Vašeho počítače

Udělal sem to přesně jako na screenu ale napíše mi to vždy soubor nenalezen

Můžu Vás ještě chviličku trápit? Jen pro ověření, zda tam nemáte jednu potvůrku.



Stáhněte SystemLook
http://jpshortstuff.247fixes.com/SystemLook.exe

- uložte ho na plochu a spustte.
- do okénka zkopírujte - klikněte na Look, proběhne sken, na konci se zobrazí log, jehož obsah zkopírujete sem

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 13:42 on 20/06/2010 by Uživatel (Administrator - Elevation successful)

========== filefind ==========

Searching for "C:\Users\Uživatel\Downloads\IMAGE464-facebook.com.JPG.jpg.exe"
No files found.

Searching for "C:\Windows\infocard.exe"
No files found.

-=End Of File=-

Otevřete si Poznámkový blok a zkopírujte do něj text

-uložte jako (typ: všechny soubory) kde za název souboru zadáte "smazani.reg" bez uvozovek,
klikněte na uložit, pak na soubor standardně 2X klikněte a potvrďte dialogové okno.



Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-počítač se restartuje



S tou klávesnicí, pokud to není notebook, můžete na něm vyzkoušet jinou klávesnici?

Udělal jsem to ale problemy zustavaj , bohuzel nemůžem zkusit jinou klávesnici máme jen jednu

Musíte tu klávesnici vyzkoušet, nemůžete si pujčit třeba od kamaráda? Nebo tu Vaši vyzkoušet v jiném pc?

Zkusím přemluvit kámoše jestli by mi ji nepujčil odpovím do týdne