VIRY.CZ

1.C:/program files/logmein/x86/logmein.exe---virus:patchload.O a.k.a
virus.Win32.Suspic.gen.a.k.a Trojan.ADH.2
2.C:/windows/system32/wltrysvc.exe---Trojan.katusha.A!inf a.k.a
virus:patchload.O a.k.a Trojan Win32

v nouzovem rezimu tez MBAM pada

on pak udela log, ten bych rad videl

ano v nouzovém režimu take ale asi po patnácti vteřinách

ano v nouzovém režimu take ale asi po patnácti vteřinách

Poprosim o novy log z RSIT

Logfile of random's system information tool 1.09 (written by random/random)
Run by Martin at 2011-08-23 18:02:45
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 34 GB (45%) free of 76 GB
Total RAM: 701 MB (40% free)


======Scheduled tasks folder======

C:\WINDOWS\tasks\Reimage Reminder.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{F98A1C68-8FC1-40E7-A771-A0435ADB6F6C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6}]
ALOT Toolbar Helper - C:\Program Files\alot\bin\BHO\alotBHO.dll [2011-03-17 831848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2011-01-20 988480]
{5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - ALOT Toolbar - C:\Program Files\alot\bin\alot.dll [2011-03-17 831848]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Broadcom Wireless Manager UI"=C:\WINDOWS\system32\WLTRAY []
"SiSPower"=SiSPower.dll,ModeAgent []
"SiS Windows KeyHook"=C:\WINDOWS\system32\keyhook.exe [2005-03-04 32768]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-06-08 37296]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-02-23 77824]
"LogMeIn GUI"=C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [2010-09-17 63048]
"tray_ico"= []
"tray_ico1"= []
"tray_ico2"= []
"tray_ico3"= []
"tray_ico4"= []
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-12 2219184]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
"SoftAuto.exe"=C:\Program Files\Creative\Software Update 3\SoftAuto.exe [2008-08-13 405504]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
Utility Tray.lnk - C:\WINDOWS\system32\sistray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LMIinit]
C:\WINDOWS\system32\LMIinit.dll [2011-07-19 87424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wxpdrivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\wxpdrivers]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableSecureUIAPaths"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Documents and Settings\Martin\Dokumenty\Downloads\facebook-pic000934519.exe"="c:\windows\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Firefly Studios\Stronghold Crusader\Stronghold Crusader.exe"="C:\Program Files\Firefly Studios\Stronghold Crusader\Stronghold Crusader.exe:*:Enabled:Stronghold Crusader"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Documents and Settings\Martin\Plocha\age-of-empires-2-cz-crack\age-of-empires-2-cz-crack\age of empires 2\empires2.exe"="C:\Documents and Settings\Martin\Plocha\age-of-empires-2-cz-crack\age-of-empires-2-cz-crack\age of empires 2\empires2.exe:*:Enabled:Age of Empires II"
"C:\Documents and Settings\Martin\Plocha\age-of-empires-2-cz-crack\age-of-empires-2-cz-crack\age of empires 2\age2_x1.exe"="C:\Documents and Settings\Martin\Plocha\age-of-empires-2-cz-crack\age-of-empires-2-cz-crack\age of empires 2\age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"C:\Documents and Settings\Martin\Dokumenty\Downloads\Flash-Player.exe"="C:\Documents and Settings\Martin\Dokumenty\Downloads\Flash-Player.exe:*:Enabled:C:\Documents and Settings\Martin\Dokumenty\Downloads\Flash-Player.exe"
"C:\WINDOWS\update.1\svchost.exe"="C:\WINDOWS\update.1\svchost.exe:*:Enabled:C:\WINDOWS\update.1\svchost.exe"
"C:\WINDOWS\services32.exe"="C:\WINDOWS\services32.exe:*:Enabled:C:\WINDOWS\services32.exe"
"C:\WINDOWS\update.tray-2-0\svchost.exe"="C:\WINDOWS\update.tray-2-0\svchost.exe:*:Enabled:C:\WINDOWS\update.tray-2-0\svchost.exe"
"C:\WINDOWS\update.2\svchost.exe"="C:\WINDOWS\update.2\svchost.exe:*:Enabled:C:\WINDOWS\update.2\svchost.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=L3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"vidc.tscc"=tsccvid.dll
"vidc.divx"=divx.dll
"vidc.div4"=DivXc32f.dll
"vidc.div3"=DivXc32.dll
"vidc.xvid"=xvid.dll
"vidc.mp43"=mpg4c32.dll
"msacm.l3radius"=l3codecp.acm
"msacm.divxa"=divxa32.acm
"msacm.vorbis"=Vorbis.acm
"msacm.a3d"=a3d.dll
"msacm.ogg"=ogg.dll
"msacm.vorbisenc"=vorbisenc.dll
"MSVideo8"=VfWWDM32.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux1"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit -
.js - open -
.txt - open -

======List of files/folders created in the last 1 month======

2011-08-23 00:14:29 ----D---- C:\WINDOWS\Minidump
2011-08-23 00:04:27 ----D---- C:\Program Files\ESET
2011-08-23 00:04:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2011-08-22 23:06:04 ----HD---- C:\WINDOWS\PIF
2011-08-22 21:50:46 ----D---- C:\Program Files\trend micro
2011-08-22 21:50:45 ----D---- C:\rsit
2011-08-22 21:18:12 ----D---- C:\Documents and Settings\Martin\Data aplikací\Malwarebytes
2011-08-22 21:18:01 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2011-08-22 21:18:01 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2011-08-22 21:17:57 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-08-22 21:17:57 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2011-08-22 21:06:27 ----A---- C:\WINDOWS\reimage.ini
2011-08-22 21:05:49 ----D---- C:\rei
2011-08-22 21:05:43 ----D---- C:\Program Files\Reimage
2011-08-22 20:59:00 ----D---- C:\Program Files\GridinSoft Trojan Killer
2011-08-22 20:39:21 ----SD---- C:\32788R22FWJFW
2011-08-22 19:41:56 ----D---- C:\Program Files\InCode Solutions
2011-08-22 19:20:41 ----SHD---- C:\WINDOWS\CSC
2011-08-22 18:10:07 ----HD---- C:\Documents and Settings\All Users\Data aplikací\Common Files
2011-08-22 17:53:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\MFAData
2011-08-22 17:38:37 ----A---- C:\WINDOWS\ntbtlog.txt
2011-08-20 21:39:13 ----D---- C:\WINDOWS\ufa
2011-08-20 21:39:13 ----D---- C:\WINDOWS\rpcminer
2011-08-20 21:39:13 ----D---- C:\WINDOWS\phoenix
2011-08-20 21:27:31 ----A---- C:\WINDOWS\btc_client_iplist.txt
2011-08-20 21:27:15 ----A---- C:\WINDOWS\l1rezerv.exe
2011-08-20 21:26:44 ----HD---- C:\WINDOWS\update.5.0
2011-08-20 21:26:07 ----A---- C:\WINDOWS\iecheck_iplist.txt
2011-08-20 21:25:43 ----HD---- C:\WINDOWS\update.2
2011-08-20 21:25:21 ----HD---- C:\WINDOWS\update.7.1
2011-08-20 21:25:08 ----A---- C:\WINDOWS\unrar.exe
2011-08-20 21:23:41 ----A---- C:\WINDOWS\iplist.txt
2011-08-20 21:22:53 ----A---- C:\WINDOWS\sysdriver32.exe
2011-08-20 21:22:34 ----A---- C:\WINDOWS\front_ip_list.txt
2011-08-20 21:22:09 ----D---- C:\WINDOWS\av_ico
2011-08-20 21:20:35 ----HD---- C:\WINDOWS\update.1
2011-08-20 21:20:10 ----HD---- C:\WINDOWS\update.tray-2-0-lnk
2011-08-20 21:20:10 ----HD---- C:\WINDOWS\update.tray-2-0
2011-08-20 21:08:56 ----A---- C:\WINDOWS\winlog-ids.txt
2011-08-20 21:08:56 ----A---- C:\WINDOWS\winlog-dirs.txt
2011-08-20 21:08:46 ----A---- C:\WINDOWS\services32.exe
2011-08-10 00:57:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-08-10 00:56:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-08-10 00:56:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-08-10 00:52:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-08-10 00:52:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
2011-08-10 00:29:59 ----D---- C:\Program Files\Firefly Studios
2011-07-27 23:25:23 ----D---- C:\Program Files\Microsoft Silverlight

======List of files/folders modified in the last 1 month======

2011-08-23 18:00:32 ----D---- C:\WINDOWS\Temp
2011-08-23 18:00:31 ----D---- C:\WINDOWS
2011-08-23 17:59:59 ----D---- C:\WINDOWS\system32\drivers
2011-08-23 00:27:39 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-08-23 00:05:28 ----SHD---- C:\WINDOWS\Installer
2011-08-23 00:05:11 ----D---- C:\WINDOWS\system32\CatRoot2
2011-08-23 00:04:27 ----RD---- C:\Program Files
2011-08-23 00:01:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\LogMeIn
2011-08-22 22:48:40 ----SHD---- C:\RECYCLER
2011-08-22 21:06:28 ----SD---- C:\WINDOWS\Tasks
2011-08-22 20:12:09 ----A---- C:\boot.ini
2011-08-22 19:41:48 ----D---- C:\WINDOWS\system32
2011-08-22 17:59:19 ----D---- C:\WINDOWS\Prefetch
2011-08-22 17:39:42 ----D---- C:\Documents and Settings
2011-08-21 19:59:35 ----HD---- C:\WINDOWS\inf
2011-08-20 21:30:19 ----SHD---- C:\System Volume Information
2011-08-20 21:30:19 ----D---- C:\WINDOWS\system32\Restore
2011-08-20 21:26:07 ----D---- C:\WINDOWS\system32\drivers\etc
2011-08-10 23:39:20 ----RSD---- C:\WINDOWS\assembly
2011-08-10 23:35:33 ----D---- C:\WINDOWS\Microsoft.NET
2011-08-10 01:01:15 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-08-10 01:00:21 ----D---- C:\WINDOWS\WinSxS
2011-08-10 00:57:32 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-10 00:57:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-08-10 00:56:39 ----A---- C:\WINDOWS\imsins.BAK
2011-08-10 00:56:33 ----HD---- C:\WINDOWS\$hf_mig$
2011-08-10 00:53:43 ----A---- C:\WINDOWS\system32\MRT.exe
2011-08-10 00:53:25 ----D---- C:\Program Files\Internet Explorer
2011-08-10 00:29:56 ----HD---- C:\Program Files\InstallShield Installation Information
2011-08-10 00:03:25 ----D---- C:\Documents and Settings\Martin\Data aplikací\skypePM
2011-08-09 21:27:43 ----D---- C:\Documents and Settings\Martin\Data aplikací\Skype
2011-08-07 14:06:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype Extras
2011-07-27 23:25:55 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-07-25 16:08:54 ----A---- C:\WINDOWS\system32\mshtml.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 SISAGP;SiS AGP Filter; C:\WINDOWS\system32\DRIVERS\SISAGPX.sys [2003-07-18 36992]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2011-02-12 431672]
R0 uagp35;Filtr Microsoft AGPv3.5; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2008-04-13 44672]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2010-12-21 94872]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2005-02-25 13312]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.2.0.3; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2011-01-06 17801]
R2 BTSERIAL;Bluetooth Serial Driver; \??\C:\WINDOWS\system32\drivers\btserial.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-12-21 141264]
R2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys []
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\WINDOWS\system32\drivers\LMIRfsDriver.sys []
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-02-24 2311680]
R3 BCM43XX;Broadcom 802.11 ovladač síťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2004-12-22 369024]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2005-12-02 854826]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2004-12-15 1038208]
R3 HSFHWSIS;HSFHWSIS; C:\WINDOWS\system32\DRIVERS\HSFHWSIS.sys [2004-12-15 200576]
R3 lmimirr;lmimirr; C:\WINDOWS\system32\DRIVERS\lmimirr.sys [2010-09-17 10144]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2005-03-02 240640]
R3 SISNICXP;SiS PCI Fast Ethernet Adapter Driver for NDIS51; C:\WINDOWS\system32\DRIVERS\sisnicxp.sys [2004-11-05 32768]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2004-12-15 703232]
S3 3afbc65e;3afbc65e; C:\WINDOWS\1590098746:3305388449.exe []
S3 avnjzjw5;avnjzjw5; C:\WINDOWS\system32\drivers\avnjzjw5.sys []
S3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys [2005-12-02 328141]
S3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [2005-12-02 30363]
S3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2005-12-02 148488]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2005-12-02 65016]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\sisnic.sys [2004-08-03 32768]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 LMIRfsClientNP;LMIRfsClientNP; C:\WINDOWS\system32\drivers\LMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2005-12-02 270336]
R2 CTDevice_Srv;CT Device Query service; C:\Program Files\Creative\Shared Files\CTDevSrv.exe [2007-04-02 61440]
R2 ddservice;ddservice; C:\WINDOWS\update.7.1\svchostdriver.exe [2011-08-20 386560]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe [2011-07-06 374152]
R2 LMIMaint;LogMeIn Maintenance Service; C:\Program Files\LogMeIn\x86\RaMaint.exe [2011-07-06 136584]
R2 LogMeIn;LogMeIn; C:\Program Files\LogMeIn\x86\LogMeIn.exe [2011-01-11 390528]
R2 wltrysvc;Broadcom Wireless LAN Tray Service; C:\WINDOWS\System32\wltrysvc.exe [2004-12-22 65536]
S2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-01-12 810144]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-30 69632]
S3 CTUPnPSv;Creative Centrale Media Server; C:\Program Files\Creative\Creative Centrale\CTUPnPSv.exe [2008-05-21 64000]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2011-01-12 33584]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Zkuste tam pustit CureIt http://viry.cz/forum/viewtopic.php?f=29&t=47721

=============================================================================
Skener Dr.Web pro Windows v6.00.11 (6.00.11.07112)
© Doctor Web, Ltd., 1992-2010
Výpis událostí vytvořen: 2011-08-23, 20:22:18 [GASPER][Martin]
Příkazový řádek: "C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\15f20_xp.exe" /lng:cs-scan /ini:setup_xp.ini /fast
Operační Systém: Windows XP Professional x86 (Build 2600), Service Pack 3
=============================================================================
DwShield nastartován
Verze jádra programu: 5.00 (5.00.2.03300)
Verze API: 2.02
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\277eabd9 - 2125 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\5d7ea3ff - 1851 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\c374acfc - 21563 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\e4ca2eed - 28282 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\5b43c8c7 - 23517 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\6aee8251 - 20563 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\d1e15640 - 29147 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\ce48fada - 20771 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\e5ce83e1 - 41547 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\9e432aa5 - 35434 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\4fdd3fee - 41517 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\4267cd21 - 25512 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\2feb18a7 - 28999 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\d927379e - 36564 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\d9578ec5 - 30676 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\50bef7ad - 25157 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\e8d1c1d8 - 21479 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\10c93596 - 23541 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\299f7401 - 24447 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\4ad3abaf - 21471 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\ea235992 - 17824 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\37e0cc2d - 18737 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\bdffa499 - 8998 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\8faa2ed8 - 9352 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\d2f97a86 - 4901 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\5eea80fe - 7472 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\fb5c215b - 13720 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\fa3ca2d2 - 12944 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\6e0d6d91 - 17300 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\fc5da789 - 17443 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\e586373a - 18483 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\f3f8a3a6 - 14834 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\82922636 - 14185 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\97b24975 - 13370 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\03a8a8d8 - 7482 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\1d5378bf - 11624 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\80f0cce3 - 10523 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\42cad921 - 10122 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\f4be94a5 - 10453 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\347e33c6 - 10778 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\9f3732be - 9822 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\525a76cd - 14045 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\aeb32f2d - 7028 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\6e760566 - 8674 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\cfcee577 - 8626 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\56060274 - 8231 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\a5fb9c45 - 10397 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\91295e62 - 11234 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\c91c49e0 - 10356 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\3ea91886 - 11383 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\84b9d9cc - 8957 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\ddb4e689 - 11015 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\ed9528c0 - 11168 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\2dffdd4b - 7798 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\6985ef03 - 7873 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\1422b867 - 6904 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\5bd54935 - 6503 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\606b1469 - 9823 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\087d92da - 7572 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\77c64432 - 6996 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\6565041d - 16360 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\19cd4bd3 - 29168 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\acbd3e6e - 34202 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\f1e7cbb7 - 28292 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\da03a4b0 - 27164 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\6689a341 - 25131 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\cb96b328 - 31464 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\239aeb16 - 18281 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\594c1f96 - 18009 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\0986a6a4 - 24685 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\843ea05a - 13651 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\a70f4408 - 16025 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\0d99193b - 15644 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\7e768e5c - 23265 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\66674b4f - 23135 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\ce87f30e - 20510 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\eea449ec - 25475 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\ceb95f9e - 16298 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\e17e576a - 19357 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\e51518f2 - 18381 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\48656837 - 19562 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\883cb045 - 27102 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\b6278f5a - 21223 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\7a13559a - 24847 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\eb863367 - 23251 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\aa3b821f - 14982 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\1a811339 - 16778 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\1aedaa35 - 18725 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\443952af - 18429 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\68bad816 - 6220 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\e1ca5dfb - 142240 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\403e14b0 - 66726 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\b0990929 - 24512 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\317881b6 - 82762 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\7e09ff79 - 508543 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\e4b96a2a - 1404 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\674224f1 - 1843 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\a412951b - 1694 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\ac0070e6 - 1578 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\aeafc0cd - 1959 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\39e53b1b - 2033 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\15142a7f - 1812 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\49000072 - 1738 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\2ac883aa - 1885 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\7ee214e0 - 2091 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\4f8b5328 - 1569 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\77af97f0 - 1834 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\9cc526d3 - 611 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\d5a603cd - 2015 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\e047bfb4 - 2208 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\5224ad80 - 2483 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\f57b273a - 1603 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\0998f354 - 1919 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\cfac82b7 - 1819 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\9addc396 - 2229 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\7623ba7e - 1833 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\46c372c4 - 1614 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\784112d3 - 2297 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\73621260 - 2110 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\7686ecf2 - 2007 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\0d19b440 - 2370 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\b16dd412 - 2241 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\719dcb4f - 2596 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\4ff52b3a - 2024 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\9eef7230 - 1609 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\07335b0c - 1471 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\6de526c6 - 1445 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\4b913147 - 1895 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\aa2773ca - 2312 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\40e8042f - 3006 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\2c40a9f3 - 2146 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\5e183ab2 - 1714 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\efaa99eb - 2095 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\9cbc84e5 - 2715 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\2e368809 - 2545 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\915a5b91 - 2801 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\463291ee - 6197 virů v databázi
[Virová databáze] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\e3dac483 - 28348 virů v databázi
Celkem zaznamenaných virů: 2515230
[Sebeobrana] C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\15f20_xp.exe
Soubor s klíčem: C:\Documents and Settings\Martin\Local Settings\Temp\B9320E9F-D4C2DC48-5806C0F8-80FA5B52\setup.key
Číslo licenčního klíče: 0013622856
Registrován na: An unauthorized User
Aktivace licenčního klíče: 2011-03-10
Platnost licenčního klíče vyprší: 2012-03-11

Jeste poprosim o AVPTool http://viry.cz/forum/viewtopic.php?f=29&t=58179

v normalnim režimu se nespustí v nouzovém se spustí test a po třech hodinách vypne bez jakehokoliv upozornění

Takze zkusime SAS http://viry.cz/forum/viewtopic.php?f=29&t=51359

spustí se pracuje ale vypne se a pak už nejde spustit

opravdu nevím co s tím

Otevrete si poznamkovy blok

• Start->spustit->notepad
• Vlozte text nize

• Kód: Vybrat vše

  REGEDIT4
  
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  "Adobe ARM"=-
  "Adobe Reader Speed Launcher"=-
  "tray_ico"=-
  "tray_ico1"=-
  "tray_ico2"=-
  "tray_ico3"=-
  "tray_ico4"=-
  "egui"=-
  "KernelFaultCheck"=-
  [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
  "C:\Documents and Settings\Martin\Dokumenty\Downloads\Flash-Player.exe"=-
  "C:\WINDOWS\update.1\svchost.exe"=-
  "C:\WINDOWS\services32.exe"=-
  "C:\WINDOWS\update.tray-2-0\svchost.exe"=-
  "C:\WINDOWS\update.2\svchost.exe"=-
  

• Soubor ulozte jako oprava.reg
• Pri ukladani dejte ulozit jako typ Vsechny soubory (nastevni je uvedeno na obrazku nize)
• 
• Zavrit notepad ale vytvoreny soubor nespoustejte
• Soubor oprava.reg ulozte primo na disk c:\ tak aby nebyl v zadne slozce (cesta tedy bude c:\oprava.reg)

Stahnete Avenger (viz muj podpis)

• Pokud pouzivate Win Vista ci W7, kliknete na Avenger pravym a dejte Run As Administrator ci Spustit jako spravce
• Po spusteni Vas program upozorni, ze vse co delate, delate na vlastni riziko - Dejte OK
• Po potvrzeni uz na Vas koukne hlavni okno, kam vlozite skript, ktery mate nize

• Kód: Vybrat vše

  Files to delete:
  C:\Documents and Settings\Martin\Dokumenty\Downloads\Flash-Player.exe
  C:\WINDOWS\services32.exe
  C:\WINDOWS\btc_client_iplist.txt
  C:\WINDOWS\l1rezerv.exe
  C:\WINDOWS\update.5.0
  c:\WINDOWS\iecheck_iplist.txt
  C:\WINDOWS\unrar.exe
  C:\WINDOWS\iplist.txt
  C:\WINDOWS\sysdriver32.exe
  C:\WINDOWS\front_ip_list.txt
  C:\WINDOWS\winlog-ids.txt
  C:\WINDOWS\winlog-dirs.txt
  C:\WINDOWS\services32.exe
  C:\WINDOWS\1590098746:3305388449.exe
  
  Folders to delete:
  C:\Program Files\GridinSoft Trojan Killer
  C:\WINDOWS\update.1
  C:\Documents and Settings\Martin\Plocha\age-of-empires-2-cz-crack
  C:\WINDOWS\update.tray-2-0
  C:\WINDOWS\update.2
  C:\WINDOWS\ufa
  C:\WINDOWS\rpcminer
  C:\WINDOWS\phoenix
  C:\WINDOWS\update.2
  C:\WINDOWS\update.7.1
  C:\WINDOWS\av_ico
  C:\WINDOWS\update.1
  C:\WINDOWS\update.tray-2-0-lnk
  C:\WINDOWS\update.tray-2-0
  
  Drivers to delete:
  3afbc65e
  ddservice
  
  Programs launch on reboot:
  c:\oprava.reg
  

• Do ctverecku u Scan for rootkits a Automatically disable any rootkits found dejte fajecku
• Nyni uz kliknete na Execute a potvrdte Yes v nasledujicim okne - timto potvrdite spusteni skriptu
• Na otazku Reboot now odpovezte opet OK - timto se PC restartuje
• Po restartu by se mel otevrit poznamkovy blok s logem a jeho obsah vlozte sem. Pokud se tak nestane, naleznete pozadovany dokument v C:\avenger.txt