Prosim o kontrolu logu

Zpráva

Badiss · #16 Příspěvek od **Badiss** » 07 zář 2011 04:21

Status: Deleted (events: 73)
6.9.2011 21:54:07 Deleted malware HackTool.Win32.BruteForce.it C:\Documents and Settings\Marcela\Dokumenty\Downloads\GameParkSetup11024.exe Medium
6.9.2011 21:54:07 Deleted malware HackTool.Win32.BruteForce.it C:\Documents and Settings\Marcela\Dokumenty\Downloads\GameParkSetup11024.exe//data0001 Medium
6.9.2011 22:41:51 Deleted Trojan program Trojan-Spy.Win32.Ardamax.pvo C:\Program Files\DVDFab 5\Options\DVDFabMobile.exe High
6.9.2011 22:42:07 Deleted malware HackTool.Win32.BruteForce.it C:\Program Files\GamePark\GameparkUpdate.exe Medium
6.9.2011 23:47:35 Deleted Trojan program Trojan-Spy.Win32.Ardamax.pvo D:\Install\DVDFabPlatinum5232\DVDFab5232.exe High
6.9.2011 23:47:35 Deleted Trojan program Trojan-Spy.Win32.Ardamax.pvo D:\Install\DVDFabPlatinum5232\DVDFab5232.exe//data0022 High
7.9.2011 0:09:18 Deleted Trojan program Exploit.Win32.Pidief.gx D:\Původní disk\[NTFS]\Documents and Settings\Marcela\Local Settings\Temp\Acr398.tmp High
7.9.2011 0:15:38 Deleted Trojan program Trojan-Downloader.JS.Agent.egv D:\Původní disk\[NTFS]\Documents and Settings\Marcela\Local Settings\Temp\Temporary Internet Files\Content.IE5\485U9RKZ\ntkmecu6[1].htm High
7.9.2011 0:15:43 Deleted Trojan program Trojan-Downloader.JS.Agent.egv D:\Původní disk\[NTFS]\Documents and Settings\Marcela\Local Settings\Temp\Temporary Internet Files\Content.IE5\485U9RKZ\ntkmecub[1].htm High
7.9.2011 0:15:40 Deleted Trojan program Trojan-Downloader.JS.Agent.egv D:\Původní disk\[NTFS]\Documents and Settings\Marcela\Local Settings\Temp\Temporary Internet Files\Content.IE5\485U9RKZ\ntkmecug[1].htm High
7.9.2011 0:58:41 Deleted Trojan program Trojan-Downloader.Win32.Mutant.cj D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND2C.NFI High
7.9.2011 0:58:42 Deleted Trojan program Trojan-Downloader.Win32.Small.ezx D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND26.NFI High
7.9.2011 0:58:42 Deleted Trojan program Trojan-Downloader.Win32.Small.ezx D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND26.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:42 Deleted Trojan program Trojan-Downloader.Win32.Mutant.hm D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND2D.NFI High
7.9.2011 0:58:41 Deleted Trojan program Trojan-Downloader.Win32.Mutant.cj D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND2C.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:42 Deleted Trojan program Trojan-Downloader.Win32.Small.ezx D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND26.NFI//PE-Crypt.XorPE//FSG High
7.9.2011 0:58:42 Deleted Trojan program Trojan-Downloader.Win32.Mutant.hm D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND2D.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:43 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND37.NFI High
7.9.2011 0:58:43 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND37.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:44 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND38.NFI High
7.9.2011 0:58:44 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND38.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:44 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND39.NFI High
7.9.2011 0:58:44 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND39.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:45 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3A.NFI High
7.9.2011 0:58:45 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3A.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:45 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3B.NFI High
7.9.2011 0:58:45 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3B.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:46 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3C.NFI High
7.9.2011 0:58:46 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3C.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:47 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3D.NFI High
7.9.2011 0:58:47 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3D.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:47 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3E.NFI High
7.9.2011 0:58:47 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3E.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:48 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3F.NFI High
7.9.2011 0:58:48 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3F.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:49 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND40.NFI High
7.9.2011 0:58:49 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND40.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:49 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND41.NFI High
7.9.2011 0:58:49 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND41.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:50 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND42.NFI High
7.9.2011 0:58:50 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND42.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:50 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND43.NFI High
7.9.2011 0:58:50 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND43.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:51 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND44.NFI High
7.9.2011 0:58:51 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND44.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:52 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND45.NFI High
7.9.2011 0:58:52 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND45.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:52 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND46.NFI High
7.9.2011 0:58:52 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND46.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:53 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND47.NFI High
7.9.2011 0:58:53 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND47.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:54 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND48.NFI High
7.9.2011 0:58:54 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND48.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:54 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND49.NFI High
7.9.2011 0:58:54 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND49.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:55 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4A.NFI High
7.9.2011 0:58:55 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4A.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:55 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4B.NFI High
7.9.2011 0:58:55 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4B.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:56 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4C.NFI High
7.9.2011 0:58:56 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4C.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:57 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4D.NFI High
7.9.2011 0:58:57 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4D.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:58 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4E.NFI High
7.9.2011 0:58:58 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4E.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:59 Deleted Trojan program Packed.Win32.PolyCrypt.d D:\Původní disk\[NTFS]\Program Files\ESET\cache\FNDF.NFI High
7.9.2011 0:58:59 Deleted Trojan program Packed.Win32.PolyCrypt.d D:\Původní disk\[NTFS]\Program Files\ESET\cache\FNDF.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:59 Deleted Trojan program Packed.Win32.PolyCrypt.d D:\Původní disk\[NTFS]\Program Files\ESET\cache\FNDF.NFI//PE-Crypt.XorPE//PE_Patch.Poly High
7.9.2011 0:59:08 Deleted Trojan program Trojan-Dropper.Win32.Wlord.gen D:\Původní disk\[NTFS]\Program Files\ESET\infected\V5BYGWCA.NQF High
7.9.2011 0:59:08 Deleted Trojan program Trojan-Dropper.Win32.Wlord.gen D:\Původní disk\[NTFS]\Program Files\ESET\infected\V5BYGWCA.NQF//PE-Crypt.XorPE High
7.9.2011 0:59:08 Deleted Trojan program Trojan-Dropper.Win32.Wlord.gen D:\Původní disk\[NTFS]\Program Files\ESET\infected\WAJUXPDA.NQF High
7.9.2011 0:59:08 Deleted Trojan program Trojan-Dropper.Win32.Wlord.gen D:\Původní disk\[NTFS]\Program Files\ESET\infected\WAJUXPDA.NQF//PE-Crypt.XorPE High
7.9.2011 2:15:16 Deleted adware not-a-virus:AdWare.Win32.Mostofate.cd D:\Původní disk\[NTFS]\Program Files\Win Stream plugin\tbhelper.dll Medium
Status: Quarantined (events: 1)
7.9.2011 0:11:30 Quarantined virus HEUR:Trojan.Script.Iframer D:\Původní disk\[NTFS]\Documents and Settings\Marcela\Local Settings\Temp\~DF5070.tmp High
Status: Detected (events: 2)
7.9.2011 2:13:59 Detected adware not-a-virus:AdWare.Win32.Mostofate.bv D:\Původní disk\[NTFS]\Program Files\Win Stream plugin\cache\9a98dc1aaf75f3a9ab604c9f59111010//win_stream_plugin.dll Medium
7.9.2011 2:14:01 Detected adware not-a-virus:AdWare.Win32.Mostofate.cd D:\Původní disk\[NTFS]\Program Files\Win Stream plugin\cache\9a98dc1aaf75f3a9ab604c9f59111010//tbhelper.dll Medium

chodnik74 · #17 Příspěvek od **chodnik74** » 07 zář 2011 05:43

Výborně

nyní bych zkusil Malwarebytes

Badiss · #18 Příspěvek od **Badiss** » 07 zář 2011 15:46

Podle návodu k AVPTool bych měl teď program ukončit kliknutím na křížek vpravo nahoře.
ALE program nereaguje!! Klikl jsem a už víc než hodinu se nic neděje. Počítač reaguje, zdá se že vše funguje. Můžu proces ukončit přes Správce úloh??

chodnik74 · #19 Příspěvek od **chodnik74** » 07 zář 2011 17:00

Ano ukončete proces,pokud nejde standartně vypnout

poté zkuste MBAM

Badiss · #20 Příspěvek od **Badiss** » 08 zář 2011 04:14

Malwarebytes' Anti-Malware
www.malwarebytes.org

Verze databáze:

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

8.9.2011 2:10:46
mbam-log-2011-09-08 (02-10-46).txt

Typ: Úplná kontrola (C:\|D:\|)
Kontrolované objekty: 386194
Uplynulý čas: 3 hodin, 51 minut, 14 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

chodnik74 · #21 Příspěvek od **chodnik74** » 08 zář 2011 05:08

Odinstalujte všechny nepotřebné toolbary

TFC

Stáhneme a spustíme program
Klikneme na Start a potvrdíme OK
Program začne uklízet,poté restartuje pc
po použití program smažte

Údržba PC:

1)Čištění dočasných složek + neplatné registry

Ccleaner

Stáhneme a nainstalujeme program
Spustíme program
ČISTIČ
Windows zde necháme vše jak je (pokud používáme IE,tak odškrkneme jeho položky) a zaškrkneme položky Start Menu zástupci a Zástupci na ploše
Aplikace - necháme jak je,ale pokud používáme nějaký prohlížeč (Google chrome,Firefox,Opera..) tak odškrkneme jeho položky
>Stiskeneme tlačítko Analyzovat a poté Spustit Cleaner
Registry
>Stiskneme tlačítko Hledej problémy,program začne hledat neplatné registry..podé zvolíme Opravit vybrané problémy..
>Program se zeptá,zda chceme vytvořit zálohu registrů,zvolíme ano a uložíme si někde zálohu(kdyby byli po opravení registru s něčím problémy,tak zálohu obnovíme tak,že spustíme uloženou zálohu a potvrdíme ano),dále zvolíme Opravit všechny problémy a Zavřít
>opakujte dokud nebude registr bez problémů
Program používáme 1x 14dní (záleží na používání pc,můžeme i jednou týdně)

2)Defragmentace disku

Defraggler

Stáhneme a nainstalujeme program
Spustíme program
Vybereme disk ( C:,D:..prostě který používáme)
Pokud je ve sloupci Fragmentace více než 5% dejte Defragmentovat
Proveďte se všemi používanými disky
Provádíme 1x za měsíc

3)Aktualizace programů

FileHippo.com Update Checker

Stáhneme a nainstalujeme program(Při instalaci odškrkneme volbu Run at Startup )
Spustíme program
Program vyhledá nainstalované programy v PC a zjistí dostupné aktualizace
Poté se vám otevře internetová stránka,kde budou nabídnuté aplikace k aktualizování
>X Updates Detected..to jsou dostupné aktualizace..
> klikneme na zelenou šipečku a stáhneme program,poté nainstalujeme jeho aktuální verzi
> X Beta Updates Detected..tyto aktualizace nestahujte,jedná se o betaverze,které jsou ve vývoji a jsou nestabilní
Provádíme 1x za 14 dní nebo jednou za měsíc

Jak se chová PC

+ nový RSIT

Badiss · #22 Příspěvek od **Badiss** » 08 zář 2011 21:03

Počítač už se chová líp, snad už bude OK... Přikládám log:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Marcela at 2011-09-08 21:58:17
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 49 GB (64%) free of 76 GB
Total RAM: 768 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:59:04, on 8.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\svchost.exe
C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\spoolsv.exe
C:\windows\Explorer.EXE
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Kooperativa\Services\KoopPDFServer.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Logitech\SetPointP\SetPoint.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\windows\system32\svchost.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
C:\windows\system32\wuauclt.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Documents and Settings\Marcela\Plocha\RSIT.exe
C:\Program Files\trend micro\Marcela.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\windows\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 7595944512
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\windows\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\windows\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\windows\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: KoopPdfService - Unknown owner - C:\Program Files\Kooperativa\Services\KoopPDFServer.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

--
End of file - 6646 bytes

======Scheduled tasks folder======

C:\windows\tasks\AppleSoftwareUpdate.job
C:\windows\tasks\Úklid 1 kliknutím.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Marcela\Data aplikací\Mozilla\Firefox\Profiles\azn5c1ff.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}:6.0.12, {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13, jqs@sun.com:1.0, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

C:\Program Files\Mozilla Firefox\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
NPOFFICE.DLL
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Marcela\Data aplikací\Mozilla\Firefox\Profiles\azn5c1ff.default\extensions\
{20a82645-c095-46ed-80e3-08825760534b}

C:\Documents and Settings\Marcela\Data aplikací\Mozilla\Firefox\Profiles\azn5c1ff.default\searchplugins\
icqplugin-1.xml
icqplugin-10.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-08-16 3942048]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-09-08 56712]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-02-19 49152]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2011-06-15 997920]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-05-04 252136]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2011-07-05 421888]
"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2011-06-24 1386776]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"TomTomHOME.exe"=C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [2011-03-09 247728]
"ctfmon.exe"=C:\windows\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer]
KHALMNPR.EXE []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\windows\system32\Ati2evxx.dll [2011-07-28 188416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2011-06-17 66328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-10-19 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableSecureUIAPaths"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
"C:\Program Files\TrackMania Sunrise\TmSunrise.exe"="C:\Program Files\TrackMania Sunrise\TmSunrise.exe:*:Disabled:TmSunrise"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\MotoGP2\motogp2.exe"="C:\Program Files\MotoGP2\motogp2.exe:*:Disabled:motogp2"
"C:\Program Files\Kooperativa\KalkZiv\Kalk_Ziv.exe"="C:\Program Files\Kooperativa\KalkZiv\Kalk_Ziv.exe:*:Enabled:Kalk_Ziv"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Disabled:HLSW Application"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe"="C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"MIDI1"=SYNCOR11.DLL
"vidc.iv41"=ir41_32.ax
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll

======List of files/folders created in the last 1 month======

2011-09-08 21:58:17 ----D---- C:\rsit
2011-09-08 20:09:43 ----A---- C:\windows\system32\aticalrt.dll
2011-09-08 20:09:42 ----A---- C:\windows\system32\aticaldd.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\ativvamv.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\atioglxx.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\atimpc32.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\aticalcl.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\atibtmon.exe
2011-09-08 20:09:41 ----A---- C:\windows\system32\amdpcom32.dll
2011-09-08 20:09:40 ----A---- C:\windows\system32\atiapfxx.exe
2011-09-08 20:09:40 ----A---- C:\windows\system32\atiadlxx.dll
2011-09-08 19:26:33 ----A---- C:\windows\system32\ShellManager310E2D762.dll
2011-09-08 18:44:24 ----D---- C:\Program Files\Common Files\Windows Live
2011-09-08 18:40:00 ----A---- C:\windows\system32\drivers\LBeepKE.sys
2011-09-08 18:39:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Logishrd
2011-09-08 18:39:06 ----D---- C:\Program Files\Logitech
2011-09-08 18:32:32 ----D---- C:\Program Files\Common Files\LogiShrd
2011-09-08 18:32:07 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Logishrd
2011-09-08 18:23:30 ----HDC---- C:\windows\$NtUninstallKB942288-v3$
2011-09-08 18:11:55 ----D---- C:\Program Files\Common Files\Apple
2011-09-08 18:11:23 ----D---- C:\Program Files\Apple Software Update
2011-09-08 18:11:23 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple
2011-09-08 17:49:42 ----D---- C:\Program Files\AMD APP
2011-09-08 17:47:18 ----D---- C:\windows\ATI
2011-09-08 16:59:02 ----RD---- C:\Program Files\Skype
2011-09-08 16:26:13 ----D---- C:\Program Files\Common Files\Java
2011-09-08 16:25:15 ----HDC---- C:\windows\$NtUninstallWdf01005$
2011-09-08 16:23:30 ----A---- C:\windows\system32\javaws.exe
2011-09-08 16:23:30 ----A---- C:\windows\system32\javaw.exe
2011-09-08 16:23:30 ----A---- C:\windows\system32\java.exe
2011-09-08 16:12:05 ----D---- C:\Program Files\FileHippo.com
2011-09-08 16:08:04 ----D---- C:\Program Files\Defraggler
2011-09-07 15:59:17 ----HDC---- C:\windows\$NtUninstallKB2607712$
2011-09-06 20:43:37 ----N---- C:\windows\system32\MpSigStub.exe
2011-09-06 16:03:08 ----SHD---- C:\RECYCLER
2011-08-26 18:49:34 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Malwarebytes
2011-08-26 18:49:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2011-08-26 18:10:11 ----D---- C:\windows\temp
2011-08-24 19:50:14 ----D---- C:\Program Files\trend micro
2011-08-24 13:29:31 ----HDC---- C:\windows\$NtUninstallKB2570791$
2011-08-11 18:36:27 ----HDC---- C:\windows\$NtUninstallKB2567680$
2011-08-11 18:35:35 ----HDC---- C:\windows\$NtUninstallKB2536276-v2$
2011-08-11 18:34:42 ----HDC---- C:\windows\$NtUninstallKB2570222$
2011-08-11 18:05:01 ----HDC---- C:\windows\$NtUninstallKB2566454$
2011-08-11 18:03:52 ----HDC---- C:\windows\$NtUninstallKB2562937$
2011-08-10 14:05:08 ----A---- C:\windows\w_distrib_iplist.txt

======List of files/folders modified in the last 1 month======

2011-09-08 21:57:15 ----D---- C:\WINDOWS
2011-09-08 21:55:27 ----A---- C:\windows\SchedLgU.Txt
2011-09-08 21:55:09 ----A---- C:\windows\wincmd.ini
2011-09-08 21:54:30 ----D---- C:\windows\system32\CatRoot2
2011-09-08 20:20:29 ----D---- C:\Program Files
2011-09-08 20:12:38 ----D---- C:\windows\system32
2011-09-08 20:12:38 ----D---- C:\Config.Msi
2011-09-08 20:10:33 ----D---- C:\windows\system32\drivers
2011-09-08 20:09:52 ----D---- C:\windows\system32\ReinstallBackups
2011-09-08 20:09:48 ----HD---- C:\windows\inf
2011-09-08 20:09:40 ----DC---- C:\windows\system32\DRVSTORE
2011-09-08 20:09:35 ----SHD---- C:\windows\Installer
2011-09-08 20:09:26 ----D---- C:\Program Files\ATI Technologies
2011-09-08 19:58:58 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-09-08 19:47:29 ----D---- C:\Program Files\Spybot - Search & Destroy
2011-09-08 19:46:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-09-08 19:29:14 ----D---- C:\Program Files\Common Files\Nero
2011-09-08 19:29:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nero
2011-09-08 19:25:56 ----A---- C:\windows\system32\MsiExec.exe.log
2011-09-08 19:10:02 ----D---- C:\Program Files\Nero
2011-09-08 19:06:31 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Nero
2011-09-08 19:01:54 ----SD---- C:\windows\Tasks
2011-09-08 18:46:33 ----RSD---- C:\windows\Fonts
2011-09-08 18:44:24 ----D---- C:\Program Files\Common Files
2011-09-08 18:40:44 ----RSHDC---- C:\windows\system32\dllcache
2011-09-08 18:36:57 ----HD---- C:\Program Files\InstallShield Installation Information
2011-09-08 18:32:07 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Logitech
2011-09-08 18:14:47 ----D---- C:\Program Files\QuickTime
2011-09-08 18:05:08 ----D---- C:\Program Files\DVDFab 5
2011-09-08 17:28:20 ----A---- C:\windows\win.ini
2011-09-08 17:28:20 ----A---- C:\windows\system.ini
2011-09-08 17:28:20 ----A---- C:\boot.ini
2011-09-08 17:00:26 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Skype
2011-09-08 16:59:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-09-08 16:40:28 ----D---- C:\windows\WinSxS
2011-09-08 16:36:32 ----D---- C:\Program Files\Common Files\Adobe
2011-09-08 16:36:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-09-08 16:23:04 ----A---- C:\windows\system32\deployJava1.dll
2011-09-08 16:22:56 ----D---- C:\Program Files\Java
2011-09-08 15:31:55 ----D---- C:\ProgramData
2011-09-08 15:30:27 ----D---- C:\Program Files\GameSpy Arcade
2011-09-08 15:29:13 ----D---- C:\Documents and Settings\Marcela\Data aplikací\HLSW
2011-09-08 15:23:10 ----D---- C:\Program Files\Common Files\Teleca Shared
2011-09-08 15:20:11 ----D---- C:\windows\Prefetch
2011-09-08 15:19:12 ----D---- C:\Program Files\TuneUp Utilities 2009
2011-09-07 22:12:59 ----D---- C:\Program Files\Mozilla Firefox
2011-09-07 22:09:47 ----D---- C:\Program Files\Microsoft Security Client
2011-09-07 15:43:27 ----D---- C:\windows\ufa
2011-09-07 14:41:59 ----HD---- C:\windows\$hf_mig$
2011-09-06 21:38:20 ----SHD---- C:\System Volume Information
2011-09-06 21:29:59 ----D---- C:\windows\system32\Restore
2011-09-06 21:28:39 ----D---- C:\Program Files\CCleaner
2011-09-06 15:49:30 ----D---- C:\windows\system32\drivers\etc
2011-09-06 15:45:18 ----D---- C:\windows\AppPatch
2011-09-05 21:18:42 ----D---- C:\Documents and Settings
2011-09-03 12:17:22 ----A---- C:\windows\system32\crypt32.dll
2011-08-27 13:28:15 ----HDC---- C:\windows\$NtUninstallXPSEPSCLP$
2011-08-27 13:26:57 ----HD---- C:\windows\update.tray-2-0-lnk
2011-08-27 13:26:57 ----HD---- C:\windows\update.tray-2-0
2011-08-26 18:10:45 ----D---- C:\windows\system32\config
2011-08-25 16:31:43 ----SD---- C:\Documents and Settings\Marcela\Data aplikací\Microsoft
2011-08-24 21:23:53 ----D---- C:\windows\Minidump
2011-08-24 21:23:53 ----D---- C:\windows\Debug
2011-08-24 21:06:06 ----D---- C:\Program Files\Yahoo!
2011-08-24 21:06:04 ----D---- C:\Program Files\Common Files\Scanner
2011-08-24 20:42:29 ----D---- C:\windows\pss
2011-08-24 19:47:58 ----A---- C:\windows\iplist.txt
2011-08-24 19:45:42 ----A---- C:\windows\btc_client_iplist.txt
2011-08-24 19:45:18 ----A---- C:\windows\iecheck_iplist.txt
2011-08-23 11:58:45 ----A---- C:\windows\wininit.ini
2011-08-22 11:40:39 ----D---- C:\windows\Help
2011-08-22 08:48:26 ----A---- C:\windows\ddh_iplist.txt
2011-08-13 19:16:21 ----A---- C:\windows\winlog-ids.txt
2011-08-13 19:16:21 ----A---- C:\windows\winlog-dirs.txt
2011-08-12 00:24:57 ----D---- C:\windows\network diagnostic
2011-08-11 19:40:06 ----RSD---- C:\windows\assembly
2011-08-11 19:28:36 ----D---- C:\windows\Microsoft.NET
2011-08-11 18:47:06 ----A---- C:\windows\system32\PerfStringBackup.INI
2011-08-11 18:12:38 ----A---- C:\windows\system32\MRT.exe
2011-08-11 18:07:14 ----D---- C:\Program Files\Internet Explorer
2011-08-11 18:06:36 ----D---- C:\windows\ie8updates

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\windows\System32\drivers\sfdrv01.sys [2005-03-03 48640]
R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a); C:\windows\System32\drivers\sfdrv01a.sys [2006-07-05 63352]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\windows\System32\drivers\sfhlp02.sys [2006-06-14 13680]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\windows\System32\drivers\sfsync02.sys [2006-07-10 27032]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\windows\System32\drivers\sfvfs02.sys [2007-01-12 82296]
R0 sisagp;Filtr SIS sběrnice AGP ; C:\windows\System32\DRIVERS\sisagp.sys [2008-04-14 40960]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\windows\system32\DRIVERS\WudfPf.sys [2008-10-19 77568]
R1 easdrv;easdrv; C:\windows\system32\DRIVERS\easdrv.sys [2007-12-21 30216]
R1 epfwtdir;epfwtdir; C:\windows\system32\DRIVERS\epfwtdir.sys [2007-12-21 33800]
R1 intelppm;Řadič procesoru Intel; C:\windows\System32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2011-04-18 165648]
R1 MpKslb964ef6d;MpKslb964ef6d; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKslb964ef6d.sys []
R2 eamon;EAMON; C:\windows\system32\DRIVERS\eamon.sys [2007-12-21 39944]
R2 LBeepKE;Logitech Beep Suppression Driver; C:\windows\System32\Drivers\LBeepKE.sys [2011-04-30 12184]
R3 aeaudio;aeaudio; C:\windows\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 ati2mtag;ati2mtag; C:\windows\system32\DRIVERS\ati2mtag.sys [2011-07-29 7084544]
R3 hidusb;Ovladač třídy standardu HID; C:\windows\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\windows\system32\DRIVERS\L8042Kbd.sys [2011-04-30 22040]
R3 mouhid;Ovladač myši standardu HID; C:\windows\System32\DRIVERS\mouhid.sys [2008-10-19 12160]
R3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\windows\System32\DRIVERS\sisnic.sys [2004-08-03 32768]
R3 smwdm;smwdm; C:\windows\system32\drivers\smwdm.sys [2003-08-29 578304]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\windows\system32\DRIVERS\serscan.sys [2001-10-24 6784]
S0 sptd;sptd; C:\windows\System32\Drivers\sptd.sys [2009-03-21 685816]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\windows\System32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S1 MpKsl204cce24;MpKsl204cce24; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKsl204cce24.sys []
S1 MpKsl90a8603e;MpKsl90a8603e; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKsl90a8603e.sys []
S1 MpKsl912a108d;MpKsl912a108d; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKsl912a108d.sys []
S1 MpKslc3983a74;MpKslc3983a74; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKslc3983a74.sys []
S3 AR9271;Wireless Network Adapter Service; C:\windows\system32\DRIVERS\athuw.sys [2010-01-05 1714176]
S3 catchme;catchme; \??\C:\DOCUME~1\Marcela\LOCALS~1\Temp\catchme.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\windows\system32\DRIVERS\HPZid412.sys [2006-04-12 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\windows\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\windows\system32\DRIVERS\HPZius12.sys [2006-04-12 21568]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\windows\system32\DRIVERS\k750bus.sys []
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\windows\system32\DRIVERS\k750mdfl.sys []
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\windows\system32\DRIVERS\k750mdm.sys []
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\windows\system32\DRIVERS\k750mgmt.sys []
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\windows\system32\DRIVERS\k750obex.sys []
S3 L8042mou;SetPoint PS/2 Mouse Filter Driver; C:\windows\system32\DRIVERS\L8042mou.Sys [2007-04-11 63248]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\windows\system32\DRIVERS\LHidFilt.Sys [2007-04-11 34832]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\windows\system32\DRIVERS\LMouFilt.Sys [2007-04-11 36112]
S3 LMouKE;SetPoint Mouse Filter Driver; C:\windows\system32\DRIVERS\LMouKE.Sys [2007-04-11 79376]
S3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\windows\System32\Drivers\LUsbFilt.Sys [2007-04-11 28688]
S3 pcouffin;VSO Software pcouffin; C:\windows\System32\Drivers\pcouffin.sys [2009-10-26 47360]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\windows\system32\DRIVERS\s1039bus.sys [2009-11-19 98672]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s1039mdfl.sys [2009-11-19 14960]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s1039mdm.sys [2009-11-19 124016]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s1039mgmt.sys [2009-11-19 117872]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\windows\system32\DRIVERS\s1039nd5.sys [2009-11-19 25456]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s1039obex.sys [2009-11-19 113904]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\windows\system32\DRIVERS\s1039unic.sys [2009-11-19 123504]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\windows\System32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\windows\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\windows\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Wdf01000; C:\windows\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\windows\system32\DRIVERS\wpdusb.sys [2008-10-19 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\windows\system32\DRIVERS\wudfrd.sys [2008-10-19 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\windows\system32\Ati2evxx.exe [2011-07-28 643072]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2011-09-08 161664]
R2 KoopPdfService;KoopPdfService; C:\Program Files\Kooperativa\Services\KoopPDFServer.exe [2010-04-05 447488]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2011-04-27 11736]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-12-01 75136]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2011-03-09 92592]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\windows\system32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-08-15 593920]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2007-08-09 73728]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2011-06-17 295192]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 WSearch;Windows Search; C:\windows\system32\SearchIndexer.exe [2008-05-26 439808]

-----------------EOF-----------------

Ještě tam vidím "PnkBstrA", toho bych se asi taky mohl zbavit, ne??

chodnik74 · #23 Příspěvek od **chodnik74** » 09 zář 2011 05:13

To je tzv. Punkbuster,více zde: http://cs.wikipedia.org/wiki/PunkBuster

Otevřeme si Služby Obrázek

Stiskněte klávesovou kombinaci WIN+R( nebo start-spustit ),čímž se vám otevře okno pro zadání příkazu pro spuštění. Zkopírujte a vložte sem následujíci text: services.msc a dejte enter
Otevře se vám okno se službami vašeho pc,najděte následující služby,dvojklikem rozklikněte,klikneme na Zastavit a dále nastavte Typ spuštění:Zakázano
Kód: Vybrat vše
```
Java Quick Starter
```

Znovu si spustíme HijackThis

Kód: Vybrat vše

C:\Program Files\trend micro\Marcela.exe

(Pokud nenajdeme nebo nemáme,tak stáhneme ZDE )

Dále klikneme na tlačítko Do a system scan only

Najdeme a označíme následující položky:

Kód: Vybrat vše

R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

klikneme na položku Fix checked a potvrdíme tlačítkem Ano

Restartovat pc

Badiss · #24 Příspěvek od **Badiss** » 09 zář 2011 14:56

Hotovo, co dál??? Co s tím messengerem (file missing), můžu to taky "fixnout" pomocí HJT???

chodnik74 · #25 Příspěvek od **chodnik74** » 09 zář 2011 15:29

Vložte mi prosím nový log z RSIT

Děkuji,já vám řeknu co fixnout,jestli bude ještě třeba

Badiss · #26 Příspěvek od **Badiss** » 09 zář 2011 15:36

Pardon, nechci dělat chytrého, já jen že ho nepoužívám, a složka s MSN messengerem je odstraněna...
Tady je ten nový log:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Marcela at 2011-09-09 16:32:26
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 49 GB (64%) free of 76 GB
Total RAM: 768 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:33:08, on 9.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\svchost.exe
C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Kooperativa\Services\KoopPDFServer.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\windows\system32\svchost.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\windows\Explorer.EXE
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Logitech\SetPointP\SetPoint.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Documents and Settings\Marcela\Plocha\RSIT.exe
C:\Program Files\trend micro\Marcela.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\windows\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 7595944512
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\windows\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\windows\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\windows\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: KoopPdfService - Unknown owner - C:\Program Files\Kooperativa\Services\KoopPDFServer.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

--
End of file - 5944 bytes

======Scheduled tasks folder======

C:\windows\tasks\AppleSoftwareUpdate.job
C:\windows\tasks\Úklid 1 kliknutím.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Marcela\Data aplikací\Mozilla\Firefox\Profiles\azn5c1ff.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}:6.0.12, {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13, jqs@sun.com:1.0, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

C:\Program Files\Mozilla Firefox\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
NPOFFICE.DLL
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Marcela\Data aplikací\Mozilla\Firefox\Profiles\azn5c1ff.default\extensions\
{20a82645-c095-46ed-80e3-08825760534b}

C:\Documents and Settings\Marcela\Data aplikací\Mozilla\Firefox\Profiles\azn5c1ff.default\searchplugins\
icqplugin-1.xml
icqplugin-10.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-08-16 3942048]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-09-08 56712]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2011-06-15 997920]
"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2011-06-24 1386776]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2011-07-05 421888]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"TomTomHOME.exe"=C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [2011-03-09 247728]
"ctfmon.exe"=C:\windows\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer]
KHALMNPR.EXE []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\windows\system32\Ati2evxx.dll [2011-07-28 188416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2011-06-17 66328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-10-19 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableSecureUIAPaths"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
"C:\Program Files\TrackMania Sunrise\TmSunrise.exe"="C:\Program Files\TrackMania Sunrise\TmSunrise.exe:*:Disabled:TmSunrise"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\MotoGP2\motogp2.exe"="C:\Program Files\MotoGP2\motogp2.exe:*:Disabled:motogp2"
"C:\Program Files\Kooperativa\KalkZiv\Kalk_Ziv.exe"="C:\Program Files\Kooperativa\KalkZiv\Kalk_Ziv.exe:*:Enabled:Kalk_Ziv"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Disabled:HLSW Application"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe"="C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"MIDI1"=SYNCOR11.DLL
"vidc.iv41"=ir41_32.ax
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll

======List of files/folders created in the last 1 month======

2011-09-09 16:32:26 ----D---- C:\rsit
2011-09-08 20:09:43 ----A---- C:\windows\system32\aticalrt.dll
2011-09-08 20:09:42 ----A---- C:\windows\system32\aticaldd.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\ativvamv.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\atioglxx.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\atimpc32.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\aticalcl.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\atibtmon.exe
2011-09-08 20:09:41 ----A---- C:\windows\system32\amdpcom32.dll
2011-09-08 20:09:40 ----A---- C:\windows\system32\atiapfxx.exe
2011-09-08 20:09:40 ----A---- C:\windows\system32\atiadlxx.dll
2011-09-08 19:26:33 ----A---- C:\windows\system32\ShellManager310E2D762.dll
2011-09-08 18:44:24 ----D---- C:\Program Files\Common Files\Windows Live
2011-09-08 18:40:00 ----A---- C:\windows\system32\drivers\LBeepKE.sys
2011-09-08 18:39:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Logishrd
2011-09-08 18:39:06 ----D---- C:\Program Files\Logitech
2011-09-08 18:32:32 ----D---- C:\Program Files\Common Files\LogiShrd
2011-09-08 18:32:07 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Logishrd
2011-09-08 18:23:30 ----HDC---- C:\windows\$NtUninstallKB942288-v3$
2011-09-08 18:11:55 ----D---- C:\Program Files\Common Files\Apple
2011-09-08 18:11:23 ----D---- C:\Program Files\Apple Software Update
2011-09-08 18:11:23 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple
2011-09-08 17:49:42 ----D---- C:\Program Files\AMD APP
2011-09-08 17:47:18 ----D---- C:\windows\ATI
2011-09-08 16:59:02 ----RD---- C:\Program Files\Skype
2011-09-08 16:26:13 ----D---- C:\Program Files\Common Files\Java
2011-09-08 16:25:15 ----HDC---- C:\windows\$NtUninstallWdf01005$
2011-09-08 16:23:30 ----A---- C:\windows\system32\javaws.exe
2011-09-08 16:23:30 ----A---- C:\windows\system32\javaw.exe
2011-09-08 16:23:30 ----A---- C:\windows\system32\java.exe
2011-09-08 16:12:05 ----D---- C:\Program Files\FileHippo.com
2011-09-08 16:08:04 ----D---- C:\Program Files\Defraggler
2011-09-07 15:59:17 ----HDC---- C:\windows\$NtUninstallKB2607712$
2011-09-06 20:43:37 ----N---- C:\windows\system32\MpSigStub.exe
2011-09-06 16:03:08 ----SHD---- C:\RECYCLER
2011-08-26 18:49:34 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Malwarebytes
2011-08-26 18:49:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2011-08-26 18:10:11 ----D---- C:\windows\temp
2011-08-24 19:50:14 ----D---- C:\Program Files\trend micro
2011-08-24 13:29:31 ----HDC---- C:\windows\$NtUninstallKB2570791$
2011-08-11 18:36:27 ----HDC---- C:\windows\$NtUninstallKB2567680$
2011-08-11 18:35:35 ----HDC---- C:\windows\$NtUninstallKB2536276-v2$
2011-08-11 18:34:42 ----HDC---- C:\windows\$NtUninstallKB2570222$
2011-08-11 18:05:01 ----HDC---- C:\windows\$NtUninstallKB2566454$
2011-08-11 18:03:52 ----HDC---- C:\windows\$NtUninstallKB2562937$
2011-08-10 14:05:08 ----A---- C:\windows\w_distrib_iplist.txt

======List of files/folders modified in the last 1 month======

2011-09-09 16:32:13 ----A---- C:\windows\wincmd.ini
2011-09-09 16:26:43 ----D---- C:\Program Files
2011-09-09 16:05:45 ----D---- C:\windows\system32\CatRoot2
2011-09-09 15:44:31 ----A---- C:\windows\SchedLgU.Txt
2011-09-08 21:57:15 ----D---- C:\WINDOWS
2011-09-08 20:12:38 ----D---- C:\windows\system32
2011-09-08 20:10:33 ----D---- C:\windows\system32\drivers
2011-09-08 20:09:52 ----D---- C:\windows\system32\ReinstallBackups
2011-09-08 20:09:48 ----HD---- C:\windows\inf
2011-09-08 20:09:40 ----DC---- C:\windows\system32\DRVSTORE
2011-09-08 20:09:35 ----SHD---- C:\windows\Installer
2011-09-08 20:09:26 ----D---- C:\Program Files\ATI Technologies
2011-09-08 19:58:58 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-09-08 19:46:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-09-08 19:29:14 ----D---- C:\Program Files\Common Files\Nero
2011-09-08 19:29:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nero
2011-09-08 19:25:56 ----A---- C:\windows\system32\MsiExec.exe.log
2011-09-08 19:06:31 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Nero
2011-09-08 19:01:54 ----SD---- C:\windows\Tasks
2011-09-08 18:46:33 ----RSD---- C:\windows\Fonts
2011-09-08 18:44:24 ----D---- C:\Program Files\Common Files
2011-09-08 18:40:44 ----RSHDC---- C:\windows\system32\dllcache
2011-09-08 18:36:57 ----HD---- C:\Program Files\InstallShield Installation Information
2011-09-08 18:32:07 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Logitech
2011-09-08 18:14:47 ----D---- C:\Program Files\QuickTime
2011-09-08 18:14:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
2011-09-08 18:05:07 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Vso
2011-09-08 17:28:20 ----A---- C:\windows\win.ini
2011-09-08 17:28:20 ----A---- C:\windows\system.ini
2011-09-08 17:28:20 ----A---- C:\boot.ini
2011-09-08 17:00:26 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Skype
2011-09-08 16:59:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-09-08 16:40:28 ----D---- C:\windows\WinSxS
2011-09-08 16:36:32 ----D---- C:\Program Files\Common Files\Adobe
2011-09-08 16:36:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-09-08 16:23:04 ----A---- C:\windows\system32\deployJava1.dll
2011-09-08 16:22:56 ----D---- C:\Program Files\Java
2011-09-08 15:29:13 ----D---- C:\Documents and Settings\Marcela\Data aplikací\HLSW
2011-09-08 15:23:10 ----D---- C:\Program Files\Common Files\Teleca Shared
2011-09-08 15:20:11 ----D---- C:\windows\Prefetch
2011-09-07 22:12:59 ----D---- C:\Program Files\Mozilla Firefox
2011-09-07 22:09:47 ----D---- C:\Program Files\Microsoft Security Client
2011-09-07 15:43:27 ----D---- C:\windows\ufa
2011-09-07 14:41:59 ----HD---- C:\windows\$hf_mig$
2011-09-06 21:38:20 ----SHD---- C:\System Volume Information
2011-09-06 21:29:59 ----D---- C:\windows\system32\Restore
2011-09-06 21:28:39 ----D---- C:\Program Files\CCleaner
2011-09-06 15:49:30 ----D---- C:\windows\system32\drivers\etc
2011-09-06 15:45:18 ----D---- C:\windows\AppPatch
2011-09-05 21:18:42 ----D---- C:\Documents and Settings
2011-09-03 12:17:22 ----A---- C:\windows\system32\crypt32.dll
2011-08-27 13:28:15 ----HDC---- C:\windows\$NtUninstallXPSEPSCLP$
2011-08-27 13:26:57 ----HD---- C:\windows\update.tray-2-0-lnk
2011-08-27 13:26:57 ----HD---- C:\windows\update.tray-2-0
2011-08-26 18:10:45 ----D---- C:\windows\system32\config
2011-08-25 16:31:43 ----SD---- C:\Documents and Settings\Marcela\Data aplikací\Microsoft
2011-08-24 21:23:53 ----D---- C:\windows\Minidump
2011-08-24 21:23:53 ----D---- C:\windows\Debug
2011-08-24 21:06:06 ----D---- C:\Program Files\Yahoo!
2011-08-24 21:06:04 ----D---- C:\Program Files\Common Files\Scanner
2011-08-24 20:42:29 ----D---- C:\windows\pss
2011-08-24 19:47:58 ----A---- C:\windows\iplist.txt
2011-08-24 19:45:42 ----A---- C:\windows\btc_client_iplist.txt
2011-08-24 19:45:18 ----A---- C:\windows\iecheck_iplist.txt
2011-08-23 11:58:45 ----A---- C:\windows\wininit.ini
2011-08-22 11:40:39 ----D---- C:\windows\Help
2011-08-22 08:48:26 ----A---- C:\windows\ddh_iplist.txt
2011-08-13 19:16:21 ----A---- C:\windows\winlog-ids.txt
2011-08-13 19:16:21 ----A---- C:\windows\winlog-dirs.txt
2011-08-12 00:24:57 ----D---- C:\windows\network diagnostic
2011-08-11 19:40:06 ----RSD---- C:\windows\assembly
2011-08-11 19:28:36 ----D---- C:\windows\Microsoft.NET
2011-08-11 18:47:06 ----A---- C:\windows\system32\PerfStringBackup.INI
2011-08-11 18:12:38 ----A---- C:\windows\system32\MRT.exe
2011-08-11 18:07:14 ----D---- C:\Program Files\Internet Explorer
2011-08-11 18:06:36 ----D---- C:\windows\ie8updates

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\windows\System32\drivers\sfdrv01.sys [2005-03-03 48640]
R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a); C:\windows\System32\drivers\sfdrv01a.sys [2006-07-05 63352]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\windows\System32\drivers\sfhlp02.sys [2006-06-14 13680]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\windows\System32\drivers\sfsync02.sys [2006-07-10 27032]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\windows\System32\drivers\sfvfs02.sys [2007-01-12 82296]
R0 sisagp;Filtr SIS sběrnice AGP ; C:\windows\System32\DRIVERS\sisagp.sys [2008-04-14 40960]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\windows\system32\DRIVERS\WudfPf.sys [2008-10-19 77568]
R1 easdrv;easdrv; C:\windows\system32\DRIVERS\easdrv.sys [2007-12-21 30216]
R1 epfwtdir;epfwtdir; C:\windows\system32\DRIVERS\epfwtdir.sys [2007-12-21 33800]
R1 intelppm;Řadič procesoru Intel; C:\windows\System32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2011-04-18 165648]
R1 MpKsl1982f31e;MpKsl1982f31e; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKsl1982f31e.sys []
R2 eamon;EAMON; C:\windows\system32\DRIVERS\eamon.sys [2007-12-21 39944]
R2 LBeepKE;Logitech Beep Suppression Driver; C:\windows\System32\Drivers\LBeepKE.sys [2011-04-30 12184]
R3 aeaudio;aeaudio; C:\windows\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 ati2mtag;ati2mtag; C:\windows\system32\DRIVERS\ati2mtag.sys [2011-07-29 7084544]
R3 hidusb;Ovladač třídy standardu HID; C:\windows\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\windows\system32\DRIVERS\L8042Kbd.sys [2011-04-30 22040]
R3 mouhid;Ovladač myši standardu HID; C:\windows\System32\DRIVERS\mouhid.sys [2008-10-19 12160]
R3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\windows\System32\DRIVERS\sisnic.sys [2004-08-03 32768]
R3 smwdm;smwdm; C:\windows\system32\drivers\smwdm.sys [2003-08-29 578304]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\windows\system32\DRIVERS\serscan.sys [2001-10-24 6784]
S0 sptd;sptd; C:\windows\System32\Drivers\sptd.sys [2009-03-21 685816]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\windows\System32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S1 MpKsl204cce24;MpKsl204cce24; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKsl204cce24.sys []
S1 MpKsl90a8603e;MpKsl90a8603e; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKsl90a8603e.sys []
S1 MpKsl912a108d;MpKsl912a108d; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKsl912a108d.sys []
S1 MpKslc3983a74;MpKslc3983a74; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKslc3983a74.sys []
S3 AR9271;Wireless Network Adapter Service; C:\windows\system32\DRIVERS\athuw.sys [2010-01-05 1714176]
S3 catchme;catchme; \??\C:\DOCUME~1\Marcela\LOCALS~1\Temp\catchme.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\windows\system32\DRIVERS\HPZid412.sys [2006-04-12 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\windows\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\windows\system32\DRIVERS\HPZius12.sys [2006-04-12 21568]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\windows\system32\DRIVERS\k750bus.sys []
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\windows\system32\DRIVERS\k750mdfl.sys []
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\windows\system32\DRIVERS\k750mdm.sys []
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\windows\system32\DRIVERS\k750mgmt.sys []
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\windows\system32\DRIVERS\k750obex.sys []
S3 L8042mou;SetPoint PS/2 Mouse Filter Driver; C:\windows\system32\DRIVERS\L8042mou.Sys [2007-04-11 63248]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\windows\system32\DRIVERS\LHidFilt.Sys [2007-04-11 34832]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\windows\system32\DRIVERS\LMouFilt.Sys [2007-04-11 36112]
S3 LMouKE;SetPoint Mouse Filter Driver; C:\windows\system32\DRIVERS\LMouKE.Sys [2007-04-11 79376]
S3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\windows\System32\Drivers\LUsbFilt.Sys [2007-04-11 28688]
S3 pcouffin;VSO Software pcouffin; C:\windows\System32\Drivers\pcouffin.sys [2009-10-26 47360]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\windows\system32\DRIVERS\s1039bus.sys [2009-11-19 98672]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s1039mdfl.sys [2009-11-19 14960]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s1039mdm.sys [2009-11-19 124016]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s1039mgmt.sys [2009-11-19 117872]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\windows\system32\DRIVERS\s1039nd5.sys [2009-11-19 25456]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s1039obex.sys [2009-11-19 113904]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\windows\system32\DRIVERS\s1039unic.sys [2009-11-19 123504]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\windows\System32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\windows\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\windows\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Wdf01000; C:\windows\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\windows\system32\DRIVERS\wpdusb.sys [2008-10-19 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\windows\system32\DRIVERS\wudfrd.sys [2008-10-19 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\windows\system32\Ati2evxx.exe [2011-07-28 643072]
R2 KoopPdfService;KoopPdfService; C:\Program Files\Kooperativa\Services\KoopPDFServer.exe [2010-04-05 447488]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2011-04-27 11736]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-12-01 75136]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2011-03-09 92592]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\windows\system32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-08-15 593920]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2007-08-09 73728]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2011-06-17 295192]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2011-09-08 161664]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 WSearch;Windows Search; C:\windows\system32\SearchIndexer.exe [2008-05-26 439808]

-----------------EOF-----------------

chodnik74 · #27 Příspěvek od **chodnik74** » 09 zář 2011 15:41

Ano vše je již v pořádku a máte pravdu,můžete fixnout položky

Kód: Vybrat vše

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

Můžu v tuto chvíli ještě něco pro vás udělat?Počítač se chová korektně?

Badiss · #28 Příspěvek od **Badiss** » 09 zář 2011 15:53

Fixnuto...

Moc Vám děkuji za pomoc, počítač se chová podstatně lépe než před léčbou, asi bude v pořádku. Pokud bych zaznamenal nějaký problém, ozval bych se...

Ještě jednou Vám MOC DĚKUJI za Vaši pomoc...

chodnik74 · #29 Příspěvek od **chodnik74** » 09 zář 2011 16:23

Rád jsem vám pomohl

kdyby byly problémy,určitě se ozvěte,nás tým je tu pro vás

VIRY.CZ

Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu