prikladam novy log s ComboFixu:
ComboFix 10-07-06.05 - Jozo . 07. 2010 21:31:03.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.421.1051.18.3070.2370 [GMT 2:00]
Running from: c:\users\Jozo\Desktop\ComboFix.exe
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\users\Jozo\AppData\Roaming\Desktopicon
c:\users\Jozo\AppData\Roaming\Desktopicon\eBay.ico
c:\users\Jozo\AppData\Roaming\Desktopicon\uninst.exe
.
((((((((((((((((((((((((( Files Created from 2010-06-07 to 2010-07-07 )))))))))))))))))))))))))))))))
.
2010-07-07 19:35 . 2010-07-07 19:35 -------- d-----w- c:\users\Jozo\AppData\Local\temp
2010-07-07 19:35 . 2010-07-07 19:35 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-07-07 19:35 . 2010-07-07 19:35 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-07-07 15:01 . 2010-07-07 15:01 92560 ----a-r- c:\users\Jozo\AppData\Roaming\Microsoft\Installer\{AECC30A7-EB0A-4BE6-8E59-3FE699F05143}\Windows7Manager.exe
2010-07-07 13:21 . 2010-07-07 13:23 23124 ----a-w- c:\windows\hpqins15.dat
2010-07-07 12:32 . 2010-07-07 12:32 -------- d-----w- c:\program files\Auslogics
2010-07-07 11:47 . 2010-07-07 18:57 -------- d-----w- c:\users\Jozo\AppData\Local\CrashDumps
2010-07-06 22:39 . 2010-07-07 14:00 -------- d-----w- c:\users\Jozo\AppData\Roaming\skypePM
2010-07-06 22:36 . 2010-07-07 19:28 -------- d-----w- c:\users\Jozo\AppData\Roaming\Skype
2010-07-06 22:36 . 2010-07-06 22:36 -------- d-----w- c:\program files\Common Files\Skype
2010-07-06 22:36 . 2010-07-06 22:36 -------- d-----r- c:\program files\Skype
2010-07-06 22:28 . 2010-07-06 22:36 -------- d-----w- c:\programdata\Skype
2010-07-06 22:07 . 2010-07-06 22:07 -------- d-----w- c:\program files\VS Revo Group
2010-07-06 21:54 . 2010-07-06 21:54 198064 ----a-w- c:\users\Jozo\AppData\Roaming\IDM\idmmzcc3\components\idmmzcc.dll
2010-07-06 21:54 . 2010-07-06 21:54 -------- d-----w- c:\users\Jozo\AppData\Roaming\IDM
2010-07-06 21:54 . 2010-07-07 19:18 -------- d-----w- c:\program files\Internet Download Manager
2010-07-06 21:05 . 2010-07-07 19:18 -------- d-----w- c:\program files\Unlocker
2010-07-03 09:15 . 2010-07-03 09:15 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2010-07-03 07:20 . 2010-07-03 07:20 -------- d-----w- c:\windows\system32\Wat
2010-07-03 07:07 . 2009-11-25 10:47 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2010-07-03 07:07 . 2009-11-25 10:47 49472 ----a-w- c:\windows\system32\netfxperf.dll
2010-07-03 07:07 . 2009-11-25 10:47 297808 ----a-w- c:\windows\system32\mscoree.dll
2010-07-03 07:07 . 2009-11-25 10:47 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2010-07-03 07:07 . 2009-11-25 10:47 1130824 ----a-w- c:\windows\system32\dfshim.dll
2010-07-03 07:05 . 2010-02-11 07:10 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-07-03 06:54 . 2010-07-03 06:58 -------- d-----w- c:\users\Jozo\AppData\Local\Tific
2010-07-03 06:46 . 2010-07-03 06:46 -------- d-----w- c:\users\Jozo\AppData\Roaming\Tific
2010-07-03 06:46 . 2010-07-03 06:46 -------- d-----w- c:\users\Jozo\AppData\Local\Symantec
2010-07-03 06:45 . 2010-07-03 06:45 124976 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2010-07-03 06:45 . 2010-07-07 19:18 -------- d-----w- c:\program files\Symantec
2010-07-03 06:45 . 2010-07-07 19:18 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-07-03 06:45 . 2010-07-07 19:18 -------- d-----w- c:\windows\system32\drivers\NIS
2010-07-03 06:45 . 2010-07-07 19:24 -------- d-----w- c:\program files\Norton Internet Security
2010-07-03 06:45 . 2010-07-07 19:18 -------- d-----w- c:\programdata\Norton
2010-07-03 06:44 . 2010-07-07 19:18 -------- d-----w- c:\program files\NortonInstaller
2010-07-03 06:44 . 2010-07-06 20:16 -------- d-----w- c:\programdata\NortonInstaller
2010-07-02 15:39 . 2010-07-02 16:21 -------- d-----w- c:\program files\CCleaner
2010-07-02 15:05 . 2010-07-02 15:06 -------- d-----w- c:\program files\Common Files\Adobe
2010-07-02 10:49 . 2010-07-02 10:49 61440 ----a-w- c:\windows\system32\lpremove.exe
2010-07-02 10:49 . 2010-07-02 10:49 6144 ----a-w- c:\windows\system32\lpksetupproxyserv.dll
2010-07-02 10:49 . 2010-07-02 10:49 477696 ----a-w- c:\windows\system32\lpksetup.exe
2010-07-02 10:49 . 2010-07-02 10:49 26624 ----a-w- c:\windows\system32\LangCleanupSysprepAction.dll
2010-07-02 10:49 . 2010-07-02 10:49 10240 ----a-w- c:\windows\system32\MUILanguageCleanup.dll
2010-07-02 10:49 . 2010-07-02 10:49 179712 ----a-w- c:\windows\system32\notepad.exe
2010-07-02 10:49 . 2010-07-02 10:49 179712 ----a-w- c:\windows\notepad.exe
2010-07-02 10:39 . 2009-07-21 11:40 404737 ----a-w- c:\programdata\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\update.exe
2010-07-02 10:39 . 2009-06-03 13:26 345345 ----a-w- c:\programdata\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\update.dll
2010-07-02 10:39 . 2009-04-09 07:20 79105 ----a-w- c:\programdata\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\updaterc.dll
2010-07-02 10:39 . 2009-02-27 08:59 8961 ----a-w- c:\programdata\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\updguirc.dll
2010-07-02 10:39 . 2009-02-24 10:16 117505 ----a-w- c:\programdata\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\updgui.dll
2010-07-02 10:39 . 2008-12-05 08:32 126721 ----a-w- c:\programdata\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\scewxmlw.dll
2010-07-02 10:25 . 2010-07-02 10:25 -------- d-----w- c:\programdata\WEBREG
2010-07-02 10:25 . 2010-07-02 10:25 -------- d-----w- c:\users\Jozo\AppData\Local\HP
2010-07-02 10:25 . 2010-07-02 10:25 -------- d-----w- c:\users\Jozo\AppData\Roaming\HP
2010-07-02 10:23 . 2010-07-02 10:23 -------- d-----w- c:\programdata\HP Product Assistant
2010-07-02 10:22 . 2010-07-02 10:22 -------- d-----w- c:\program files\Common Files\HP
2010-07-02 10:22 . 2010-07-02 10:22 -------- d-----w- c:\program files\Common Files\Hewlett-Packard
2010-07-02 10:21 . 2010-07-06 22:16 -------- d-----w- c:\program files\HP
2010-07-02 10:19 . 2010-07-06 22:17 210512 ----a-w- c:\windows\hpoins21.dat
2010-07-02 10:19 . 2009-10-08 01:28 5474 ------w- c:\windows\hpomdl21.dat
2010-07-02 10:19 . 2010-07-02 16:21 -------- d-----w- c:\programdata\HP
2010-07-02 10:19 . 2009-07-08 10:51 452408 ----a-w- c:\windows\system32\hpzids01.dll
2010-07-02 10:19 . 2009-07-08 10:51 966656 ----a-w- c:\windows\system32\hpotiop5.dll
2010-07-02 10:19 . 2009-07-08 10:51 729088 ----a-w- c:\windows\system32\hpowiax5.dll
2010-07-02 10:19 . 2009-07-08 10:51 364544 ----a-w- c:\windows\system32\hppldcoi.dll
2010-07-02 10:19 . 2009-07-08 10:51 303104 ----a-w- c:\windows\system32\hpovst12.dll
2010-07-02 10:07 . 2007-11-06 07:06 32080 ----a-w- c:\windows\system32\drivers\UimBus.sys
2010-07-02 10:07 . 2007-11-06 07:06 131672 ----a-w- c:\windows\system32\drivers\Uim_IM.sys
2010-07-02 10:07 . 2007-11-06 07:06 11568 ----a-w- c:\windows\system32\drivers\UimFIO.sys
2010-07-02 10:07 . 2008-01-21 15:43 4244744 ----a-w- c:\windows\system32\qtp-mt334.dll
2010-07-02 10:07 . 2008-01-21 15:43 13576 ----a-w- c:\windows\system32\wnaspi32.dll
2010-07-02 10:07 . 2008-01-21 15:43 247560 ----a-w- c:\windows\system32\prgiso.dll
2010-07-02 10:07 . 2007-11-06 07:06 39472 ----a-w- c:\windows\system32\drivers\hotcore3.sys
2010-07-02 10:06 . 2010-07-02 10:07 -------- d-----w- c:\program files\Paragon Software
2010-07-02 10:05 . 2010-07-02 10:05 -------- d-----w- c:\users\Jozo\AppData\Roaming\URSoft
2010-07-02 10:05 . 2010-07-07 19:18 -------- d-----w- c:\program files\Your Uninstaller 2010
2010-07-02 09:59 . 2009-12-09 16:31 20992 ----a-w- c:\users\Jozo\AppData\Roaming\Thunderbird\Profiles\58180bza.default\extensions\{de1b245c-de57-11da-ba2d-0050c2490048}\library\WINNT-32\MinimizeToTrayPlus.dll
2010-07-02 09:58 . 2010-07-02 09:58 -------- d-----w- c:\users\Jozo\AppData\Roaming\Thunderbird
2010-07-02 09:58 . 2010-07-02 09:58 -------- d-----w- c:\users\Jozo\AppData\Local\Thunderbird
2010-07-02 09:57 . 2010-07-07 19:18 -------- d-----w- c:\program files\Mozilla Thunderbird
2010-07-02 09:53 . 2010-02-25 09:03 30536 ----a-w- c:\windows\system32\TURegOpt.exe
2010-07-02 09:53 . 2010-02-25 08:56 21320 ----a-w- c:\windows\system32\authuitu.dll
2010-07-02 09:53 . 2010-02-25 08:56 30024 ----a-w- c:\windows\system32\uxtuneup.dll
2010-07-02 09:53 . 2010-07-02 09:53 -------- d-----w- c:\users\Jozo\AppData\Roaming\TuneUp Software
2010-07-02 09:53 . 2010-07-07 19:18 -------- d-----w- c:\program files\TuneUp Utilities 2010
2010-07-02 09:53 . 2010-07-02 09:53 -------- d-----w- c:\programdata\TuneUp Software
2010-07-02 09:52 . 2010-07-02 09:52 -------- d-sh--w- c:\programdata\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-07-02 09:51 . 2010-07-02 09:52 -------- d-----w- C:\totalcmd
2010-07-02 09:51 . 2010-07-02 09:51 -------- d-----w- c:\users\Jozo\AppData\Roaming\GHISLER
2010-07-02 09:51 . 2009-09-24 05:50 545 ----a-w- c:\windows\UC.PIF
2010-07-02 09:51 . 2009-09-24 05:50 545 ----a-w- c:\windows\RAR.PIF
2010-07-02 09:51 . 2009-09-24 05:50 545 ----a-w- c:\windows\PKZIP.PIF
2010-07-02 09:51 . 2009-09-24 05:50 545 ----a-w- c:\windows\PKUNZIP.PIF
2010-07-02 09:51 . 2009-09-24 05:50 545 ----a-w- c:\windows\NOCLOSE.PIF
2010-07-02 09:51 . 2009-09-24 05:50 545 ----a-w- c:\windows\LHA.PIF
2010-07-02 09:51 . 2009-09-24 05:50 545 ----a-w- c:\windows\ARJ.PIF
2010-07-02 09:50 . 2010-07-02 09:50 -------- d-----w- c:\users\Jozo\AppData\Roaming\Nero
2010-07-02 09:49 . 2006-03-17 12:49 368640 ----a-w- c:\windows\system32\TwnLib4.dll
2010-07-02 09:49 . 2010-07-02 09:49 -------- d-----w- c:\program files\Nero
2010-07-02 09:49 . 2010-07-02 09:49 -------- d-----w- c:\programdata\Nero
2010-07-02 09:49 . 2006-03-17 09:45 802816 ----a-w- c:\windows\system32\imagXRA7.dll
2010-07-02 09:49 . 2006-03-17 09:45 497296 ----a-w- c:\windows\system32\imagXpr7.dll
2010-07-02 09:49 . 2006-03-17 09:45 258048 ----a-w- c:\windows\system32\imagXR7.dll
2010-07-02 09:49 . 2006-03-17 09:45 1757184 ----a-w- c:\windows\system32\imagX7.dll
2010-07-02 09:49 . 2010-07-02 09:49 -------- d-----w- c:\program files\Common Files\Nero
2010-07-02 09:44 . 2010-07-02 09:44 -------- d-----w- c:\program files\Alcohol Soft
2010-07-02 09:41 . 2010-07-02 09:41 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-07-02 09:34 . 2010-07-02 10:39 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-07-02 09:34 . 2009-05-08 11:13 97608 ----a-w- c:\windows\system32\drivers\avfwot.sys
2010-07-02 09:34 . 2009-03-30 07:33 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-07-02 09:34 . 2009-02-24 10:06 69632 ----a-w- c:\windows\system32\drivers\avfwim.sys
2010-07-02 09:34 . 2010-07-07 19:18 -------- d-----w- c:\program files\Avira
2010-07-02 09:34 . 2010-07-02 16:18 -------- d-----w- c:\programdata\Avira
2010-07-02 09:26 . 2010-07-02 09:26 53248 ----a-r- c:\users\Jozo\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2010-07-02 09:26 . 2010-07-02 09:26 -------- d-----w- c:\users\Jozo\AppData\Roaming\Leadertech
2010-07-02 09:25 . 2010-07-02 09:28 -------- d-----w- c:\programdata\Logishrd
2010-07-02 09:25 . 2010-07-02 09:25 -------- d-----w- c:\program files\Logitech
2010-07-02 09:25 . 2010-07-02 09:26 -------- d-----w- c:\program files\Common Files\LogiShrd
2010-07-02 09:25 . 2010-07-02 09:27 -------- d-----w- c:\users\Jozo\AppData\Roaming\Logitech
2010-07-02 09:25 . 2010-07-02 09:25 -------- d-----w- c:\users\Jozo\AppData\Roaming\Logishrd
2010-07-02 09:18 . 2010-07-07 19:26 -------- d-----w- c:\users\Jozo\AppData\Roaming\DMCache
2010-07-02 09:17 . 2010-07-02 09:17 -------- d-----w- c:\program files\MozBackup
2010-07-02 09:13 . 2010-07-06 20:10 109208 ----a-w- c:\users\Jozo\AppData\Local\GDIPFONTCACHEV1.DAT
2010-07-02 09:13 . 2010-07-02 09:13 -------- d-----w- c:\windows\system32\Macromed
2010-07-02 09:12 . 2010-07-02 09:12 -------- d-----w- c:\users\Jozo\AppData\Local\Mozilla
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-07 19:20 . 2010-07-07 19:20 48 ---ha-w- c:\programdata\ezsidmv.dat
2010-07-07 19:18 . 2010-07-07 15:01 -------- d-----w- c:\users\Jozo\AppData\Roaming\Yamicsoft
2010-07-07 19:06 . 2010-07-07 19:06 -------- d-----w- c:\program files\Realtek
2010-07-07 18:33 . 2010-07-07 18:33 -------- d-----w- c:\programdata\GroupPolicy
2010-07-03 07:20 . 2009-07-14 02:37 -------- d-----w- c:\program files\Windows Mail
2010-07-03 06:45 . 2010-07-03 06:45 805 ----a-w- c:\windows\system32\drivers\SYMEVENT.INF
2010-07-03 06:45 . 2010-07-03 06:45 7443 ----a-w- c:\windows\system32\drivers\SYMEVENT.CAT
2010-07-02 16:22 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Portable Devices
2010-07-02 16:21 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Sidebar
2010-07-02 16:21 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Photo Viewer
2010-07-02 08:15 . 2009-07-14 04:52 -------- d-----w- c:\program files\MSBuild
2010-07-02 07:51 . 2010-07-02 07:51 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_09_00.Wdf
2010-05-27 07:24 . 2010-07-03 06:40 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-05-27 03:49 . 2010-07-03 06:40 293888 ----a-w- c:\windows\system32\atmfd.dll
2010-05-21 05:18 . 2010-07-03 06:40 977920 ----a-w- c:\windows\system32\wininet.dll
2010-05-01 14:49 . 2010-07-03 06:40 2326528 ----a-w- c:\windows\system32\win32k.sys
2010-04-23 07:13 . 2010-07-03 06:40 2048 ----a-w- c:\windows\system32\tzres.dll
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Thunderbird"="c:\program files\Mozilla Thunderbird\thunderbird -turbo" [X]
"AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 120\axcmd.exe" [2009-04-24 203928]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2009-09-10 3118512]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-03-09 26100520]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2010-05-18 1311312]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
c:\users\Jozo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech . Registr cia věrobku.lnk - c:\program files\Common Files\LogiShrd\eReg\SetPoint\eReg.exe [2009-11-16 517384]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2010-05-06 09:29 64592 ----a-w- c:\program files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll
R1 BHDrvx86;BHDrvx86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20100619.001\BHDrvx86.sys [2010-06-18 691248]
R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NIS\1107000.00C\Ironx86.SYS [2010-04-29 116784]
R2 NIS;Norton Internet Security;c:\program files\Norton Internet Security\Engine\17.7.0.12\ccSvcHst.exe [2010-02-26 126392]
R3 c2wts;Claims to Windows Token Service;c:\program files\Windows Identity Foundation\v3.5\c2wtshost.exe [2010-02-03 13080]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-07-03 1343400]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2010-07-02 721904]
S0 hotcore3;hotcore3;c:\windows\system32\drivers\hotcore3.sys [2007-11-06 39472]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NIS\1107000.00C\SYMDS.SYS [2009-08-30 328752]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NIS\1107000.00C\SYMEFA.SYS [2010-04-22 173104]
S1 avfwot;avfwot;c:\windows\system32\DRIVERS\avfwot.sys [2009-05-08 97608]
S1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\NIS\1107000.00C\ccHPx86.sys [2010-02-26 501888]
S1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20100706.003\IDSvix86.sys [2010-06-04 344112]
S1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\System32\Drivers\NIS\1107000.00C\SYMTDIV.SYS [2010-05-06 339504]
S2 GEST Service;GEST Service for program management.;c:\program files\GIGABYTE\EnergySaver\GSvr.exe [2008-07-18 80392]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2010-02-25 1047880]
S3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\DRIVERS\avfwim.sys [2009-02-24 69632]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [2010-02-25 10064]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
.
------- Supplementary Scan -------
.
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Prevziať cez IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: Prevziať cez IDM všetky prepojenia - c:\program files\Internet Download Manager\IEGetAll.htm
IE: Prevziať obsah FLV cez IDM - c:\program files\Internet Download Manager\IEGetVL.htm
LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll
FF - ProfilePath - c:\users\Jozo\AppData\Roaming\Mozilla\Firefox\Profiles\nux3lvb5.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage -
www.google.sk
FF - prefs.js: keyword.URL - hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=LMW2&o=16062&locale=en_EU&q=
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - component: c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\coFFPlgn\components\coFFPlgn.dll
FF - component: c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\IPSFFPlgn\components\IPSFFPl.dll
FF - component: c:\users\Jozo\AppData\Roaming\IDM\idmmzcc3\components\idmmzcc.dll
---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".sk");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files\Norton Internet Security\Engine\17.7.0.12\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files\Norton Internet Security\Engine\17.7.0.12\diMaster.dll\" /prefetch:1"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2010-07-07 21:37:40
ComboFix-quarantined-files.txt 2010-07-07 19:37
ComboFix2.txt 2010-07-07 18:18
ComboFix3.txt 2010-07-07 17:35
Pre-Run: 99 127 758 848 bytes free
Post-Run: 99 255 701 504 bytes free
- - End Of File - - 573133152F11327C06B16C50DF374732