Stránka 2 z 2

Re: log z ComboFix - kontrola

Napsal: 04 úno 2011 10:58
od vyosek
Jeste uklidime :James008:

:arrow: Odinstalujte Combofix
  • Start - Spustit (nebo pouzijte klavesobou zkratku Win+R)
  • Napiste ComboFix /Uninstall
  • Stisknete Enter
  • Tohle smaze Combofix a jeho slozky
:arrow: T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner (viz muj podpis)
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za 14 dni

:arrow: Vlozte novy log z RSIT a napiste jak se PC chova

Re: log z ComboFix - kontrola

Napsal: 04 úno 2011 11:20
od Rossi46
PC se najizdi dele do WIN a chrochta nez vse nacte... asi to zpomalil Avast, nic mene kdyz se vse nacte tak bych rekl ze jede zcela v poradku.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Jirka at 2011-02-04 11:16:38
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 11 GB (24%) free of 46 GB
Total RAM: 1023 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:19:01, on 4.2.2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\Motherboard Monitor 5\MBM5.EXE
C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\opel inst\BHROOT\BIN\NT611SVC.EXE
C:\opel inst\BHROOT\BIN\monitor.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\opel inst\BHROOT\BIN\PORTMAP.EXE
C:\BHROOT\BIN\DBMANG.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Jirka\Plocha\!venca\RSIT.exe
C:\Program Files\trend micro\Jirka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O3 - Toolbar: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Xfire.lnk = F:\Games\Xfire\Xfire.exe
O4 - Global Startup: Nokia Ovi Suite.lnk = C:\Program Files\Nokia\Ovi\Suite\RunLauncher.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\WINDOWS\system32\shdocvw.dll (HKCU)
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodata Limited License Service - Unknown owner - C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: bh611 - Bell& Howell - C:\opel inst\BHROOT\BIN\NT611SVC.EXE
O23 - Service: Bell & Howell Monitor Service (BHMonitorService) - Bell & Howell - C:\opel inst\BHROOT\BIN\monitor.exe
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: Bell & Howell Database Manager (dbmang) - Bell & Howell - C:\BHROOT\BIN\DBMANG.EXE
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe
O23 - Service: ONC/RPC Portmapper (portmapper) - Bell & Howell - C:\opel inst\BHROOT\BIN\PORTMAP.EXE
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TwonkyMedia - PacketVideo - C:\Program Files\Nokia\Nokia Home Media Server\Media Server\TwonkyMedia.exe

--
End of file - 7376 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"C-Media Mixer"=Mixer.exe /startup []
"MBM 5"=C:\Program Files\Motherboard Monitor 5\MBM5.EXE [2004-06-12 594944]
"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe [2006-05-16 40960]
"Lexmark 1200 Series"=C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe [2006-07-13 57344]
"QuickTime Task"=C:\Program Files\QuickTime Alternative\qttask.exe [2007-10-10 282624]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2011-01-13 3396624]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe [2006-05-16 57344]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Nokia Ovi Suite.lnk - C:\Program Files\Nokia\Ovi\Suite\RunLauncher.exe

C:\Documents and Settings\Jirka\Nabídka Start\Programy\Po spuštění
Xfire.lnk - F:\Games\Xfire\Xfire.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-03-22 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\dbeng6.exe"="C:\WINDOWS\system32\dbeng6.exe:*:Enabled:Adaptive Server Anywhere Database Engine"
"C:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe"="C:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe:*:Disabled:Far Cry"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Documents and Settings\Jirka\temp\TeamViewer3\TeamViewer.exe"="C:\Documents and Settings\Jirka\temp\TeamViewer3\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe"="C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe:*:Enabled:NEXON_EU_Downloader_Engine"
"C:\Program Files\Nokia\Nokia Home Media Server\Media Server\twonkymedia.exe"="C:\Program Files\Nokia\Nokia Home Media Server\Media Server\twonkymedia.exe:*:Enabled:TwonkyMedia"
"C:\Program Files\Nokia\Nokia Home Media Server\Media Server\twonkymediaserver.exe"="C:\Program Files\Nokia\Nokia Home Media Server\Media Server\twonkymediaserver.exe:*:Enabled:TwonkyMediaServer"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2012-06-11 16:33:00 ----N---- C:\WINDOWS\system32\ov530usd.dll
2012-06-11 16:33:00 ----N---- C:\WINDOWS\system32\ov530ext.dll
2012-06-11 16:33:00 ----N---- C:\WINDOWS\system32\drivers\ov530vid.sys
2012-06-11 16:33:00 ----N---- C:\WINDOWS\system32\drivers\ov530cmd.sys
2012-06-11 16:33:00 ----N---- C:\WINDOWS\ov530dib.dll
2012-06-11 16:33:00 ----D---- C:\WINDOWS\OvtCam
2012-06-11 16:31:58 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2012-06-09 20:12:17 ----A---- C:\WINDOWS\system32\CmdLineExt03.dll
2012-06-09 20:07:43 ----D---- C:\Program Files\THQ
2011-02-04 11:16:38 ----D---- C:\rsit
2011-02-04 11:16:38 ----D---- C:\Program Files\trend micro
2011-02-04 10:33:38 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-02-04 10:33:38 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-02-04 10:33:36 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-02-04 10:33:36 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2011-02-04 10:33:36 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2011-02-04 10:33:36 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2011-02-04 10:33:35 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2011-02-04 10:33:21 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-02-04 10:26:52 ----N---- C:\WINDOWS\SchedLgU.Txt
2011-02-04 10:26:44 ----ASH---- C:\hiberfil.sys
2011-02-04 10:25:33 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Opera
2011-02-04 10:25:21 ----D---- C:\Program Files\Opera
2011-02-03 22:27:36 ----SHD---- C:\RECYCLER
2011-02-03 19:47:48 ----D---- C:\WINDOWS\temp
2011-02-03 15:38:51 ----D---- C:\Program Files\Alwil Software
2011-02-03 15:38:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2011-02-03 14:21:11 ----A---- C:\Boot.bak
2011-02-03 14:21:01 ----RASHD---- C:\cmdcons
2011-02-03 14:05:31 ----D---- C:\Program Files\Ultimate Process Manager
2011-01-26 14:50:43 ----AH---- C:\Documents and Settings\Jirka\Data aplikací\HhdFJl61DD.txt
2011-01-26 14:50:43 ----AH---- C:\Documents and Settings\Jirka\Data aplikací\Bgm7fGCGHJ.txt
2011-01-26 14:49:25 ----AH---- C:\Documents and Settings\Jirka\Data aplikací\IK6fDMGl71.txt
2011-01-23 15:44:24 ----D---- C:\Program Files\Common Files\Symantec Shared
2011-01-23 15:44:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2011-01-23 15:44:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller

======List of files/folders modified in the last 1 months======

2012-06-09 20:04:14 ----D---- C:\Program Files\IncrediMail
2012-06-09 19:39:38 ----D---- C:\Program Files\Living World Racing
2012-06-09 19:36:44 ----D---- C:\Program Files\Luxor
2011-02-04 11:16:50 ----D---- C:\WINDOWS\Prefetch
2011-02-04 11:16:38 ----D---- C:\Program Files
2011-02-04 11:14:53 ----D---- C:\WINDOWS
2011-02-04 11:11:36 ----D---- C:\WINDOWS\system32
2011-02-04 11:05:06 ----SHD---- C:\System Volume Information
2011-02-04 11:05:06 ----D---- C:\WINDOWS\system32\Restore
2011-02-04 11:04:02 ----D---- C:\WINDOWS\system32\drivers
2011-02-04 10:56:25 ----SHD---- C:\WINDOWS\Installer
2011-02-04 10:56:19 ----RD---- C:\Program Files\Skype
2011-02-04 10:54:09 ----D---- C:\Program Files\CCleaner
2011-02-04 10:50:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\SweetIM
2011-02-04 10:33:31 ----D---- C:\WINDOWS\WinSxS
2011-02-04 10:31:21 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Skype
2011-02-04 08:24:32 ----D---- C:\Program Files\AWS
2011-02-03 22:30:18 ----HD---- C:\WINDOWS\inf
2011-02-03 22:30:13 ----D---- C:\WINDOWS\system32\CatRoot2
2011-02-03 22:27:37 ----D---- C:\WINDOWS\Minidump
2011-02-03 19:57:41 ----A---- C:\WINDOWS\NeroDigital.ini
2011-02-03 19:50:21 ----A---- C:\WINDOWS\system.ini
2011-02-03 19:49:42 ----D---- C:\WINDOWS\system32\drivers\etc
2011-02-03 19:46:29 ----D---- C:\WINDOWS\AppPatch
2011-02-03 19:46:25 ----D---- C:\Program Files\Common Files
2011-02-03 19:40:24 ----A---- C:\WINDOWS\wincmd.ini
2011-02-03 19:33:11 ----D---- C:\Program Files\Mozilla Firefox
2011-02-03 16:00:29 ----D---- C:\WINDOWS\system32\config
2011-02-03 15:59:47 ----SD---- C:\WINDOWS\Tasks
2011-02-03 15:37:42 ----D---- C:\Program Files\ESET
2011-02-03 14:26:12 ----D---- C:\Program Files\ICQ6.5
2011-02-03 14:21:11 ----RASH---- C:\boot.ini
2011-02-03 12:27:14 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-02-03 12:27:08 ----A---- C:\WINDOWS\explorer.exe
2011-02-03 12:26:33 ----D---- C:\Documents and Settings\Jirka\Data aplikací\skypePM
2011-02-03 11:20:48 ----D---- C:\Program Files\Google
2011-02-03 11:16:29 ----D---- C:\Program Files\Absolute Uninstaller
2011-02-03 11:14:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2011-01-30 14:57:16 ----A---- C:\WINDOWS\ModemLog_Axesstel USB Modem.txt
2011-01-24 21:15:18 ----A---- C:\WINDOWS\WDICT32.INI
2011-01-23 12:52:38 ----D---- C:\WINDOWS\system32\Adobe
2011-01-23 12:41:12 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Macromedia
2011-01-23 12:38:34 ----D---- C:\WINDOWS\system32\Macromed
2011-01-20 01:01:40 ----D---- C:\WINDOWS\Debug
2011-01-15 11:05:42 ----A---- C:\WINDOWS\oops.ini
2011-01-11 22:04:00 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Defrag32b;Defrag32Boot; C:\WINDOWS\system32\drivers\Defrag32b.sys [2005-11-22 61456]
R0 nvatabus;nvatabus; C:\WINDOWS\system32\DRIVERS\nvatabus.sys [2004-06-03 79360]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2004-08-03 61056]
R0 prohlp02;StarForce Protection Helper Driver v2; C:\WINDOWS\System32\drivers\prohlp02.sys [2004-09-03 115680]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:\WINDOWS\System32\drivers\prosync1.sys [2004-07-19 7040]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2008-11-20 43872]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-03-03 48640]
R0 sfhlp01;StarForce Protection Helper Driver; C:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-02-23 6656]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\WINDOWS\System32\drivers\sfsync02.sys [2004-12-03 20544]
R0 SI3112r;Silicon Image SiI 3112 SATARaid Controller; C:\WINDOWS\system32\DRIVERS\SI3112r.sys [2006-01-12 102528]
R0 SiFilter;SATALink driver accelerator; C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys [2004-11-01 10368]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-05-15 721904]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-01-13 29392]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2004-08-17 41216]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-01-13 23632]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-01-13 294608]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-01-13 47440]
R1 cdrbsdrv;cdrbsdrv; C:\WINDOWS\system32\drivers\cdrbsdrv.sys [2005-05-10 32256]
R1 mbmiodrvr;mbmiodrvr; \??\C:\WINDOWS\system32\mbmiodrvr.sys []
R1 NetworkX;NetworkX; C:\WINDOWS\system32\ckldrv.sys [2000-02-03 24608]
R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys [2002-09-16 4228]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-09-03 54368]
R2 Aspi32;Aspi32; C:\WINDOWS\System32\drivers\aspi32.sys [2004-07-16 16512]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-01-13 17744]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-01-13 100176]
R2 Defrag32;Defrag32; C:\WINDOWS\system32\drivers\Defrag32.sys [2005-11-22 61456]
R2 DS1410D;DS1410D Dongle Driver; \??\C:\WINDOWS\system32\drivers\ds1410d.sys []
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2004-08-03 87424]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-03-22 1522688]
R3 ATIAVAIW;ATI T200 Unified AVStream service; C:\WINDOWS\system32\DRIVERS\atinavt2.sys [2006-03-03 163968]
R3 axvdkbus;axvdkbus; C:\WINDOWS\system32\DRIVERS\axvdkbus.sys [2003-02-25 8672]
R3 axvodka;axvodka; C:\WINDOWS\system32\DRIVERS\axvodka.sys [2003-02-27 102272]
R3 cmpci;C-Media PCI Audio Driver (WDM); C:\WINDOWS\system32\drivers\cmaudio.sys [2002-11-18 377358]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-17 61824]
R3 nvax;Service for NVIDIA(R) nForce(TM) Audio Enumerator; C:\WINDOWS\system32\drivers\nvax.sys [2003-08-13 36864]
R3 NVENET;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENET.sys [2004-01-29 93764]
R3 nvnforce;Service for NVIDIA(R) nForce(TM) Audio; C:\WINDOWS\system32\drivers\nvapu.sys [2003-08-13 311552]
R3 Pcouffin;Low level access layer for CD devices; C:\WINDOWS\System32\Drivers\Pcouffin.sys [2006-05-21 47360]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 yukonx86;NDIS5.1 Miniport Driver for Marvell Yukon Gigabit Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\yukonx86.sys [2003-10-16 176256]
S1 SpyEmrg;Spy Emergency Driver; C:\WINDOWS\System32\Drivers\spyemrg.sys []
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys []
S3 ad5rwzmk;ad5rwzmk; C:\WINDOWS\system32\drivers\ad5rwzmk.sys []
S3 adiusbaw;USB ADSL WAN Adapter; C:\WINDOWS\system32\DRIVERS\adiusbaw.sys []
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-17 60800]
S3 atinrvxx;ATI WDM Rage Theater Video (Microsoft Corporation); C:\WINDOWS\system32\DRIVERS\atinrvxx.sys [2004-08-03 104960]
S3 ATWPKT;ATWPKT; \??\C:\WINDOWS\system32\Drivers\ATWPKT.SYS []
S3 Axtmvflt;Axesstel USB Filter Service; C:\WINDOWS\system32\DRIVERS\Axtmvflt.sys [2007-03-22 3456]
S3 Axtmvmdm;Axesstel USB Modem; C:\WINDOWS\system32\DRIVERS\Axtmvmdm.sys [2007-03-26 40064]
S3 Axtmvprt;Axesstel Diagnostic Port; C:\WINDOWS\System32\Drivers\Axtmvprt.sys [2007-03-26 38784]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024]
S3 EL90XBC;3Com EtherLink XL 90XB/C Adapter Driver; C:\WINDOWS\system32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2004-08-03 15360]
S3 MSIRCOMM;Microsoft IR Communications Driver; C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys [2004-08-03 22016]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 MVDCODEC;ATI WDM Specialized MVD Codec (Microsoft Corporation); C:\WINDOWS\system32\DRIVERS\atinmdxx.sys [2004-08-03 13824]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-04 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2008-05-07 17536]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2008-05-07 20864]
S3 ovt530;Webcam Deluxe; C:\WINDOWS\System32\Drivers\ov530vid.sys [2005-03-15 161792]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-04 11136]
S3 STIrUsb;SigmaTel USB-IrDA Dongle; C:\WINDOWS\system32\DRIVERS\irstusb.sys [2001-08-17 26624]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-04 15360]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2008-06-06 8064]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2004-08-03 25600]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2008-05-07 8064]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 vaxscsi;vaxscsi; C:\WINDOWS\System32\Drivers\vaxscsi.sys [2006-05-21 223128]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-03-22 405504]
R2 Autodata Limited License Service;Autodata Limited License Service; C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe [2006-05-21 68608]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-01-13 40384]
R2 bgsvcgen;B's Recorder GOLD Library General Service; C:\WINDOWS\system32\bgsvcgen.exe [2005-04-30 86016]
R2 bh611;bh611; C:\opel inst\BHROOT\BIN\NT611SVC.EXE [1996-12-13 101888]
R2 BHMonitorService;Bell & Howell Monitor Service; C:\opel inst\BHROOT\BIN\monitor.exe [1999-01-23 28160]
R2 Crypkey License;Crypkey License; C:\WINDOWS\system32\crypserv.exe [2000-06-29 52224]
R2 dbmang;Bell & Howell Database Manager; C:\BHROOT\BIN\DBMANG.EXE [1998-10-28 143360]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-12-11 153376]
R2 LexBceS;LexBce Server; C:\WINDOWS\system32\LEXBCES.EXE [2006-04-18 311296]
R2 portmapper;ONC/RPC Portmapper; C:\opel inst\BHROOT\BIN\PORTMAP.EXE [1998-10-28 30208]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2006-03-17 520192]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-10-03 136176]
S2 PDSched;PDScheduler; C:\Program Files\Raxco\PerfectDisk\PDSched.exe [2005-11-29 241731]
S2 TwonkyMedia;TwonkyMedia; C:\Program Files\Nokia\Nokia Home Media Server\Media Server\TwonkyMedia.exe [2008-07-09 102400]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-10-03 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S3 PDEngine;PDEngine; C:\Program Files\Raxco\PerfectDisk\PDEngine.exe [2005-11-29 483397]
S3 ServiceLayer;ServiceLayer; C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe [2008-05-30 572416]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Re: log z ComboFix - kontrola

Napsal: 04 úno 2011 11:29
od vyosek
:arrow: Otevrete si poznamkovy blok
  • Start->spustit->notepad
  • Vlozte text nize
  • Kód: Vybrat vše

    Windows Registry Editor Version 5.00
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{BFC32E1D-EE75-4A48-BC60-104E11EE2431}"=-
    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "C-Media Mixer"=-
    "QuickTime Task"=-
    
  • Soubor ulozte jako oprava.reg
  • Pri ukladani dejte ulozit jako typ Vsechny soubory (nastevni je uvedeno na obrazku nize)
  • Obrázek
  • Zavrit notepad a spustit dvojklikem oprava.reg
  • Pripadny dotaz na zmenu registru potvrdte
  • Okno jen problikne a opravi regsitry - soubor muzete smazat
:arrow: Kliknete na Start a pote Spustit, pripadne pouzijte klavesou zkratku Win+R
  • Vyskoci na Vas okenko, do ktereho zkopirujte text nize
  • Kód: Vybrat vše

    services.msc
  • Kliknete na OK
  • Najdete sluzby nize
  • Služba Google Update
    Google Software Updater
    Java Quick Starter
  • U sluzby provedte toto
    • Klik na ni pravym mysidlem a zvolit Vlastnosti
    • Nyní klik na Zastavit
    • Typ spousteni nastavit na Zakazano
    • Potvrdte kliknutim na OK
:arrow: Otevrete si poznamkovy blok
  • Start->spustit->notepad
  • Vlozte text nize
  • Kód: Vybrat vše

    @echo off
    del "C:\Documents and Settings\Jirka\Data aplikací\HhdFJl61DD.txt"
    del " C:\Documents and Settings\Jirka\Data aplikací\Bgm7fGCGHJ.txt"
    del "C:\Documents and Settings\Jirka\Data aplikací\IK6fDMGl71.txt"
    del "C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Nokia Ovi Suite.lnk "
    del "C:\Documents and Settings\Jirka\Nabídka Start\Programy\Po spuštění\Xfire.lnk"
  • Soubor ulozte jako del.bat
  • Pri ukladani dejte ulozit jako typ Vsechny soubory (nastevni je uvedeno na obrazku nize)
  • Obrázek
  • Zavrit notepad a spustit dvojklikem del.bat
  • Okno jen problikne a provede mazani - soubor muzete smazat
:arrow: Doporucuji provest defragmentaci disku
  • Nejjednodussi (ale nejmene ucinny) zpusob je pomoci utility ve windowsech
    • Kliknete na Tento pocitac, dale na disk kliknete pravym tlacitkem, vyberte Vlastnosti
    • prepnete se do zalozky Nastroje
    • Nyni vidite pomucky Defragmentace - spustte ji kliknutim na Defragmentovat
    • Toto provedte se vsemi disky
  • Dalsi moznosti (a mnou doporucenou) je pres programek Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
    • Program stahnete, nainstalujte (dejte fajfku pryc u yahoo toolbaru) a spustte
    • Kliknete na Analyzovat
    • Pokud je ve sloupci Fragmentováno vice jak 5%, doporucuji provest defragmentaci (klik na Defragmentovat)
    • Postup provedte se vsemi disky
  • Posledni moznost je pres jednoduchy programek JKDefrag http://www.stahuj.centrum.cz/utility_a_ ... /jkdefrag/
    • Vyhodou programku je, ze se neinstaluje
    • Staci tedy jen stahnout dle verze vaseho OS a rozbalit
    • Nasledne spustit pomoci souboru JKDefrag pripadne JKDefrag64
    • Probehne analyza disku a nasledne i defragmentace
:arrow: Z logu je patrno, ze nemate aktualni verzi Windows - chybi Vam ServicePack 3 - doinstalujte jej

Re: log z ComboFix - kontrola

Napsal: 04 úno 2011 19:27
od Rossi46
Vse udelano podle postupu.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Jirka at 2011-02-04 19:26:17
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (21%) free of 46 GB
Total RAM: 1023 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:26:28, on 4.2.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\opel inst\BHROOT\BIN\NT611SVC.EXE
C:\opel inst\BHROOT\BIN\monitor.exe
C:\WINDOWS\system32\crypserv.exe
C:\opel inst\BHROOT\BIN\PORTMAP.EXE
C:\BHROOT\BIN\DBMANG.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Motherboard Monitor 5\MBM5.EXE
C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Jirka\Plocha\!venca\RSIT.exe
C:\Program Files\trend micro\Jirka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\WINDOWS\system32\shdocvw.dll (HKCU)
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodata Limited License Service - Unknown owner - C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: bh611 - Bell& Howell - C:\opel inst\BHROOT\BIN\NT611SVC.EXE
O23 - Service: Bell & Howell Monitor Service (BHMonitorService) - Bell & Howell - C:\opel inst\BHROOT\BIN\monitor.exe
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: Bell & Howell Database Manager (dbmang) - Bell & Howell - C:\BHROOT\BIN\DBMANG.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe
O23 - Service: ONC/RPC Portmapper (portmapper) - Bell & Howell - C:\opel inst\BHROOT\BIN\PORTMAP.EXE
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TwonkyMedia - PacketVideo - C:\Program Files\Nokia\Nokia Home Media Server\Media Server\TwonkyMedia.exe

--
End of file - 6767 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MBM 5"=C:\Program Files\Motherboard Monitor 5\MBM5.EXE [2004-06-12 594944]
"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe [2006-05-16 40960]
"Lexmark 1200 Series"=C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe [2006-07-13 57344]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2011-01-13 3396624]
"QuickTime Task"=C:\Program Files\QuickTime Alternative\qttask.exe [2007-10-10 282624]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe [2006-05-16 57344]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-03-22 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\dbeng6.exe"="C:\WINDOWS\system32\dbeng6.exe:*:Enabled:Adaptive Server Anywhere Database Engine"
"C:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe"="C:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe:*:Disabled:Far Cry"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Documents and Settings\Jirka\temp\TeamViewer3\TeamViewer.exe"="C:\Documents and Settings\Jirka\temp\TeamViewer3\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe"="C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe:*:Enabled:NEXON_EU_Downloader_Engine"
"C:\Program Files\Nokia\Nokia Home Media Server\Media Server\twonkymedia.exe"="C:\Program Files\Nokia\Nokia Home Media Server\Media Server\twonkymedia.exe:*:Enabled:TwonkyMedia"
"C:\Program Files\Nokia\Nokia Home Media Server\Media Server\twonkymediaserver.exe"="C:\Program Files\Nokia\Nokia Home Media Server\Media Server\twonkymediaserver.exe:*:Enabled:TwonkyMediaServer"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2012-06-11 16:33:00 ----N---- C:\WINDOWS\system32\ov530usd.dll
2012-06-11 16:33:00 ----N---- C:\WINDOWS\system32\ov530ext.dll
2012-06-11 16:33:00 ----N---- C:\WINDOWS\system32\drivers\ov530vid.sys
2012-06-11 16:33:00 ----N---- C:\WINDOWS\system32\drivers\ov530cmd.sys
2012-06-11 16:33:00 ----N---- C:\WINDOWS\ov530dib.dll
2012-06-11 16:33:00 ----D---- C:\WINDOWS\OvtCam
2012-06-11 16:31:58 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2012-06-09 20:12:17 ----A---- C:\WINDOWS\system32\CmdLineExt03.dll
2012-06-09 20:07:43 ----D---- C:\Program Files\THQ
2011-02-04 19:17:30 ----D---- C:\WINDOWS\LastGood
2011-02-04 19:16:17 ----A---- C:\WINDOWS\OEWABLog.txt
2011-02-04 19:14:37 ----D---- C:\WINDOWS\Prefetch
2011-02-04 19:11:59 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2011-02-04 19:11:50 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2011-02-04 19:11:39 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2011-02-04 19:11:31 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2011-02-04 19:11:19 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2011-02-04 19:11:10 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2011-02-04 19:11:01 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2011-02-04 19:10:51 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2011-02-04 19:10:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2011-02-04 19:10:30 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2011-02-04 19:10:20 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2011-02-04 19:10:12 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2011-02-04 19:10:03 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2011-02-04 19:09:53 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2011-02-04 19:09:45 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2011-02-04 19:09:37 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2011-02-04 19:09:29 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2011-02-04 19:09:18 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2011-02-04 19:09:09 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2011-02-04 19:08:59 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2011-02-04 19:08:50 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2011-02-04 19:08:41 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2011-02-04 19:08:31 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2011-02-04 19:08:20 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2011-02-04 19:08:09 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2011-02-04 19:08:00 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2011-02-04 19:07:52 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2$
2011-02-04 19:07:31 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2011-02-04 19:07:23 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2011-02-04 19:07:14 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2011-02-04 19:07:06 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2011-02-04 19:06:58 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2011-02-04 19:06:49 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2011-02-04 19:06:39 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2011-02-04 19:06:30 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2011-02-04 19:06:22 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2011-02-04 19:06:13 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2011-02-04 19:06:04 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2011-02-04 19:05:56 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2011-02-04 19:05:48 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2011-02-04 19:05:32 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2011-02-04 19:05:17 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2011-02-04 19:05:08 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$
2011-02-04 19:04:59 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2011-02-04 19:04:50 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2011-02-04 19:04:38 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2011-02-04 19:04:29 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2011-02-04 19:04:19 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2011-02-04 19:04:09 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2011-02-04 19:04:00 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2011-02-04 19:03:51 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2011-02-04 19:03:39 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2011-02-04 19:03:31 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-02-04 19:03:23 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2011-02-04 19:03:11 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2011-02-04 19:03:01 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2011-02-04 19:02:52 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2011-02-04 19:02:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2011-02-04 18:59:29 ----A---- C:\WINDOWS\setuplog.txt
2011-02-04 18:58:12 ----D---- C:\WINDOWS\system32\cs
2011-02-04 18:58:12 ----D---- C:\WINDOWS\system32\bits
2011-02-04 18:58:12 ----D---- C:\WINDOWS\l2schemas
2011-02-04 18:53:57 ----D---- C:\WINDOWS\network diagnostic
2011-02-04 18:48:35 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2011-02-04 11:41:36 ----D---- C:\Program Files\Defraggler
2011-02-04 11:16:38 ----D---- C:\rsit
2011-02-04 11:16:38 ----D---- C:\Program Files\trend micro
2011-02-04 10:33:38 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-02-04 10:33:38 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-02-04 10:33:36 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-02-04 10:33:36 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2011-02-04 10:33:36 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2011-02-04 10:33:36 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2011-02-04 10:33:35 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2011-02-04 10:33:21 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-02-04 10:26:52 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-02-04 10:26:44 ----ASH---- C:\hiberfil.sys
2011-02-04 10:25:33 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Opera
2011-02-04 10:25:21 ----D---- C:\Program Files\Opera
2011-02-03 22:27:36 ----SHD---- C:\RECYCLER
2011-02-03 19:47:48 ----D---- C:\WINDOWS\temp
2011-02-03 15:38:51 ----D---- C:\Program Files\Alwil Software
2011-02-03 15:38:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2011-02-03 14:21:11 ----A---- C:\Boot.bak
2011-02-03 14:21:01 ----RASHD---- C:\cmdcons
2011-02-03 14:05:31 ----D---- C:\Program Files\Ultimate Process Manager
2011-01-26 14:50:43 ----AH---- C:\Documents and Settings\Jirka\Data aplikací\HhdFJl61DD.txt
2011-01-26 14:50:43 ----AH---- C:\Documents and Settings\Jirka\Data aplikací\Bgm7fGCGHJ.txt
2011-01-26 14:49:25 ----AH---- C:\Documents and Settings\Jirka\Data aplikací\IK6fDMGl71.txt
2011-01-23 15:44:24 ----D---- C:\Program Files\Common Files\Symantec Shared
2011-01-23 15:44:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2011-01-23 15:44:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller

======List of files/folders modified in the last 1 months======

2012-06-09 20:04:14 ----D---- C:\Program Files\IncrediMail
2012-06-09 19:39:38 ----D---- C:\Program Files\Living World Racing
2012-06-09 19:36:44 ----D---- C:\Program Files\Luxor
2011-02-04 19:24:37 ----D---- C:\WINDOWS
2011-02-04 19:23:49 ----D---- C:\WINDOWS\system32
2011-02-04 19:22:35 ----D---- C:\WINDOWS\system32\CatRoot
2011-02-04 19:22:15 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-02-04 19:22:15 ----HD---- C:\WINDOWS\inf
2011-02-04 19:22:07 ----D---- C:\WINDOWS\system32\CatRoot2
2011-02-04 19:22:04 ----D---- C:\WINDOWS\system32\drivers
2011-02-04 19:21:06 ----D---- C:\Program Files\Outlook Express
2011-02-04 19:16:34 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-02-04 19:15:30 ----D---- C:\WINDOWS\Debug
2011-02-04 19:13:37 ----D---- C:\WINDOWS\system32\Setup
2011-02-04 19:13:37 ----D---- C:\WINDOWS\AppPatch
2011-02-04 19:13:36 ----D---- C:\WINDOWS\system32\wbem
2011-02-04 19:13:35 ----RSD---- C:\WINDOWS\Fonts
2011-02-04 19:08:24 ----D---- C:\WINDOWS\security
2011-02-04 19:03:13 ----D---- C:\Program Files\Messenger
2011-02-04 18:58:33 ----D---- C:\WINDOWS\WinSxS
2011-02-04 18:58:24 ----D---- C:\WINDOWS\ehome
2011-02-04 18:58:23 ----D---- C:\WINDOWS\system32\inetsrv
2011-02-04 18:58:22 ----D---- C:\WINDOWS\ime
2011-02-04 18:58:22 ----D---- C:\WINDOWS\Help
2011-02-04 18:58:13 ----D---- C:\WINDOWS\system32\usmt
2011-02-04 18:58:13 ----D---- C:\WINDOWS\system32\cs-CZ
2011-02-04 18:58:12 ----SHD---- C:\WINDOWS\Installer
2011-02-04 18:58:12 ----D---- C:\WINDOWS\PeerNet
2011-02-04 18:58:12 ----D---- C:\Program Files\Movie Maker
2011-02-04 18:58:12 ----D---- C:\Program Files\Internet Explorer
2011-02-04 18:56:04 ----D---- C:\WINDOWS\ServicePackFiles
2011-02-04 18:55:55 ----D---- C:\WINDOWS\system32\Restore
2011-02-04 18:55:55 ----D---- C:\WINDOWS\system32\npp
2011-02-04 18:55:53 ----D---- C:\WINDOWS\msagent
2011-02-04 18:55:52 ----D---- C:\WINDOWS\srchasst
2011-02-04 18:55:52 ----D---- C:\Program Files\NetMeeting
2011-02-04 18:55:50 ----D---- C:\WINDOWS\system32\Com
2011-02-04 18:55:48 ----D---- C:\Program Files\Windows NT
2011-02-04 18:55:48 ----D---- C:\Program Files\Windows Media Player
2011-02-04 18:55:45 ----D---- C:\Program Files\Common Files\System
2011-02-04 18:55:28 ----D---- C:\WINDOWS\system32\oobe
2011-02-04 18:55:27 ----D---- C:\WINDOWS\system
2011-02-04 18:52:06 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-02-04 11:41:36 ----D---- C:\Program Files
2011-02-04 11:05:06 ----SHD---- C:\System Volume Information
2011-02-04 10:56:19 ----RD---- C:\Program Files\Skype
2011-02-04 10:54:09 ----D---- C:\Program Files\CCleaner
2011-02-04 10:50:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\SweetIM
2011-02-04 10:31:21 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Skype
2011-02-04 10:30:34 ----D---- C:\Documents and Settings\Jirka\Data aplikací\skypePM
2011-02-04 08:24:32 ----D---- C:\Program Files\AWS
2011-02-03 22:27:37 ----D---- C:\WINDOWS\Minidump
2011-02-03 19:57:41 ----A---- C:\WINDOWS\NeroDigital.ini
2011-02-03 19:50:21 ----A---- C:\WINDOWS\system.ini
2011-02-03 19:49:42 ----D---- C:\WINDOWS\system32\drivers\etc
2011-02-03 19:46:25 ----D---- C:\Program Files\Common Files
2011-02-03 19:40:24 ----A---- C:\WINDOWS\wincmd.ini
2011-02-03 19:33:11 ----D---- C:\Program Files\Mozilla Firefox
2011-02-03 16:00:29 ----D---- C:\WINDOWS\system32\config
2011-02-03 15:59:47 ----SD---- C:\WINDOWS\Tasks
2011-02-03 15:37:42 ----D---- C:\Program Files\ESET
2011-02-03 14:26:12 ----D---- C:\Program Files\ICQ6.5
2011-02-03 14:21:11 ----RASH---- C:\boot.ini
2011-02-03 11:20:48 ----D---- C:\Program Files\Google
2011-02-03 11:16:29 ----D---- C:\Program Files\Absolute Uninstaller
2011-02-03 11:14:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2011-01-30 14:57:16 ----A---- C:\WINDOWS\ModemLog_Axesstel USB Modem.txt
2011-01-24 21:15:18 ----A---- C:\WINDOWS\WDICT32.INI
2011-01-23 12:52:38 ----D---- C:\WINDOWS\system32\Adobe
2011-01-23 12:41:12 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Macromedia
2011-01-23 12:38:34 ----D---- C:\WINDOWS\system32\Macromed
2011-01-15 11:05:42 ----A---- C:\WINDOWS\oops.ini
2011-01-11 22:04:00 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Defrag32b;Defrag32Boot; C:\WINDOWS\system32\drivers\Defrag32b.sys [2005-11-22 61456]
R0 nvatabus;nvatabus; C:\WINDOWS\system32\DRIVERS\nvatabus.sys [2004-06-03 79360]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 prohlp02;StarForce Protection Helper Driver v2; C:\WINDOWS\System32\drivers\prohlp02.sys [2004-09-03 115680]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:\WINDOWS\System32\drivers\prosync1.sys [2004-07-19 7040]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2008-11-20 43872]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-03-03 48640]
R0 sfhlp01;StarForce Protection Helper Driver; C:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-02-23 6656]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\WINDOWS\System32\drivers\sfsync02.sys [2004-12-03 20544]
R0 SI3112r;Silicon Image SiI 3112 SATARaid Controller; C:\WINDOWS\system32\DRIVERS\SI3112r.sys [2006-01-12 102528]
R0 SiFilter;SATALink driver accelerator; C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys [2004-11-01 10368]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-05-15 721904]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-01-13 29392]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-01-13 23632]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-01-13 294608]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-01-13 47440]
R1 cdrbsdrv;cdrbsdrv; C:\WINDOWS\system32\drivers\cdrbsdrv.sys [2005-05-10 32256]
R1 mbmiodrvr;mbmiodrvr; \??\C:\WINDOWS\system32\mbmiodrvr.sys []
R1 NetworkX;NetworkX; C:\WINDOWS\system32\ckldrv.sys [2000-02-03 24608]
R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys [2002-09-16 4228]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-09-03 54368]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 Aspi32;Aspi32; C:\WINDOWS\System32\drivers\aspi32.sys [2004-07-16 16512]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-01-13 17744]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-01-13 100176]
R2 Defrag32;Defrag32; C:\WINDOWS\system32\drivers\Defrag32.sys [2005-11-22 61456]
R2 DS1410D;DS1410D Dongle Driver; \??\C:\WINDOWS\system32\drivers\ds1410d.sys []
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-03-22 1522688]
R3 ATIAVAIW;ATI T200 Unified AVStream service; C:\WINDOWS\system32\DRIVERS\atinavt2.sys [2006-03-03 163968]
R3 axvdkbus;axvdkbus; C:\WINDOWS\system32\DRIVERS\axvdkbus.sys [2003-02-25 8672]
R3 axvodka;axvodka; C:\WINDOWS\system32\DRIVERS\axvodka.sys [2003-02-27 102272]
R3 cmpci;C-Media PCI Audio Driver (WDM); C:\WINDOWS\system32\drivers\cmaudio.sys [2002-11-18 377358]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nvax;Service for NVIDIA(R) nForce(TM) Audio Enumerator; C:\WINDOWS\system32\drivers\nvax.sys [2003-08-13 36864]
R3 NVENET;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENET.sys [2004-01-29 93764]
R3 nvnforce;Service for NVIDIA(R) nForce(TM) Audio; C:\WINDOWS\system32\drivers\nvapu.sys [2003-08-13 311552]
R3 Pcouffin;Low level access layer for CD devices; C:\WINDOWS\System32\Drivers\Pcouffin.sys [2006-05-21 47360]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 yukonx86;NDIS5.1 Miniport Driver for Marvell Yukon Gigabit Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\yukonx86.sys [2003-10-16 176256]
S1 SpyEmrg;Spy Emergency Driver; C:\WINDOWS\System32\Drivers\spyemrg.sys []
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys []
S3 adiusbaw;USB ADSL WAN Adapter; C:\WINDOWS\system32\DRIVERS\adiusbaw.sys []
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 atinrvxx;ATI WDM Rage Theater Video (Microsoft Corporation); C:\WINDOWS\system32\DRIVERS\atinrvxx.sys [2004-08-03 104960]
S3 ATWPKT;ATWPKT; \??\C:\WINDOWS\system32\Drivers\ATWPKT.SYS []
S3 awaefv6x;awaefv6x; C:\WINDOWS\system32\drivers\awaefv6x.sys []
S3 Axtmvflt;Axesstel USB Filter Service; C:\WINDOWS\system32\DRIVERS\Axtmvflt.sys [2007-03-22 3456]
S3 Axtmvmdm;Axesstel USB Modem; C:\WINDOWS\system32\DRIVERS\Axtmvmdm.sys [2007-03-26 40064]
S3 Axtmvprt;Axesstel Diagnostic Port; C:\WINDOWS\System32\Drivers\Axtmvprt.sys [2007-03-26 38784]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 EL90XBC;3Com EtherLink XL 90XB/C Adapter Driver; C:\WINDOWS\system32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSIRCOMM;Microsoft IR Communications Driver; C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys [2008-04-13 22016]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 MVDCODEC;ATI WDM Specialized MVD Codec (Microsoft Corporation); C:\WINDOWS\system32\DRIVERS\atinmdxx.sys [2004-08-03 13824]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2008-05-07 17536]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2008-05-07 20864]
S3 ovt530;Webcam Deluxe; C:\WINDOWS\System32\Drivers\ov530vid.sys [2005-03-15 161792]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 STIrUsb;SigmaTel USB-IrDA Dongle; C:\WINDOWS\system32\DRIVERS\irstusb.sys [2001-08-17 26624]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2008-06-06 8064]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2008-05-07 8064]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 vaxscsi;vaxscsi; C:\WINDOWS\System32\Drivers\vaxscsi.sys [2006-05-21 223128]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-03-22 405504]
R2 Autodata Limited License Service;Autodata Limited License Service; C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe [2006-05-21 68608]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-01-13 40384]
R2 bgsvcgen;B's Recorder GOLD Library General Service; C:\WINDOWS\system32\bgsvcgen.exe [2005-04-30 86016]
R2 bh611;bh611; C:\opel inst\BHROOT\BIN\NT611SVC.EXE [1996-12-13 101888]
R2 BHMonitorService;Bell & Howell Monitor Service; C:\opel inst\BHROOT\BIN\monitor.exe [1999-01-23 28160]
R2 Crypkey License;Crypkey License; C:\WINDOWS\system32\crypserv.exe [2000-06-29 52224]
R2 dbmang;Bell & Howell Database Manager; C:\BHROOT\BIN\DBMANG.EXE [1998-10-28 143360]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 LexBceS;LexBce Server; C:\WINDOWS\system32\LEXBCES.EXE [2006-04-18 311296]
R2 portmapper;ONC/RPC Portmapper; C:\opel inst\BHROOT\BIN\PORTMAP.EXE [1998-10-28 30208]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2006-03-17 520192]
S2 PDSched;PDScheduler; C:\Program Files\Raxco\PerfectDisk\PDSched.exe [2005-11-29 241731]
S2 TwonkyMedia;TwonkyMedia; C:\Program Files\Nokia\Nokia Home Media Server\Media Server\TwonkyMedia.exe [2008-07-09 102400]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S3 PDEngine;PDEngine; C:\Program Files\Raxco\PerfectDisk\PDEngine.exe [2005-11-29 483397]
S3 ServiceLayer;ServiceLayer; C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe [2008-05-30 572416]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-10-03 136176]
S4 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-10-03 182768]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-12-11 153376]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Re: log z ComboFix - kontrola

Napsal: 05 úno 2011 11:21
od vyosek
Log vypada v poradku :wink: