VIRY.CZ

Status: Deleted (events: 73)
6.9.2011 21:54:07 Deleted malware HackTool.Win32.BruteForce.it C:\Documents and Settings\Marcela\Dokumenty\Downloads\GameParkSetup11024.exe Medium
6.9.2011 21:54:07 Deleted malware HackTool.Win32.BruteForce.it C:\Documents and Settings\Marcela\Dokumenty\Downloads\GameParkSetup11024.exe//data0001 Medium
6.9.2011 22:41:51 Deleted Trojan program Trojan-Spy.Win32.Ardamax.pvo C:\Program Files\DVDFab 5\Options\DVDFabMobile.exe High
6.9.2011 22:42:07 Deleted malware HackTool.Win32.BruteForce.it C:\Program Files\GamePark\GameparkUpdate.exe Medium
6.9.2011 23:47:35 Deleted Trojan program Trojan-Spy.Win32.Ardamax.pvo D:\Install\DVDFabPlatinum5232\DVDFab5232.exe High
6.9.2011 23:47:35 Deleted Trojan program Trojan-Spy.Win32.Ardamax.pvo D:\Install\DVDFabPlatinum5232\DVDFab5232.exe//data0022 High
7.9.2011 0:09:18 Deleted Trojan program Exploit.Win32.Pidief.gx D:\Původní disk\[NTFS]\Documents and Settings\Marcela\Local Settings\Temp\Acr398.tmp High
7.9.2011 0:15:38 Deleted Trojan program Trojan-Downloader.JS.Agent.egv D:\Původní disk\[NTFS]\Documents and Settings\Marcela\Local Settings\Temp\Temporary Internet Files\Content.IE5\485U9RKZ\ntkmecu6[1].htm High
7.9.2011 0:15:43 Deleted Trojan program Trojan-Downloader.JS.Agent.egv D:\Původní disk\[NTFS]\Documents and Settings\Marcela\Local Settings\Temp\Temporary Internet Files\Content.IE5\485U9RKZ\ntkmecub[1].htm High
7.9.2011 0:15:40 Deleted Trojan program Trojan-Downloader.JS.Agent.egv D:\Původní disk\[NTFS]\Documents and Settings\Marcela\Local Settings\Temp\Temporary Internet Files\Content.IE5\485U9RKZ\ntkmecug[1].htm High
7.9.2011 0:58:41 Deleted Trojan program Trojan-Downloader.Win32.Mutant.cj D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND2C.NFI High
7.9.2011 0:58:42 Deleted Trojan program Trojan-Downloader.Win32.Small.ezx D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND26.NFI High
7.9.2011 0:58:42 Deleted Trojan program Trojan-Downloader.Win32.Small.ezx D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND26.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:42 Deleted Trojan program Trojan-Downloader.Win32.Mutant.hm D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND2D.NFI High
7.9.2011 0:58:41 Deleted Trojan program Trojan-Downloader.Win32.Mutant.cj D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND2C.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:42 Deleted Trojan program Trojan-Downloader.Win32.Small.ezx D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND26.NFI//PE-Crypt.XorPE//FSG High
7.9.2011 0:58:42 Deleted Trojan program Trojan-Downloader.Win32.Mutant.hm D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND2D.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:43 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND37.NFI High
7.9.2011 0:58:43 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND37.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:44 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND38.NFI High
7.9.2011 0:58:44 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND38.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:44 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND39.NFI High
7.9.2011 0:58:44 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND39.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:45 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3A.NFI High
7.9.2011 0:58:45 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3A.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:45 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3B.NFI High
7.9.2011 0:58:45 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3B.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:46 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3C.NFI High
7.9.2011 0:58:46 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3C.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:47 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3D.NFI High
7.9.2011 0:58:47 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3D.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:47 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3E.NFI High
7.9.2011 0:58:47 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3E.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:48 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3F.NFI High
7.9.2011 0:58:48 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND3F.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:49 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND40.NFI High
7.9.2011 0:58:49 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND40.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:49 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND41.NFI High
7.9.2011 0:58:49 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND41.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:50 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND42.NFI High
7.9.2011 0:58:50 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND42.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:50 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND43.NFI High
7.9.2011 0:58:50 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND43.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:51 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND44.NFI High
7.9.2011 0:58:51 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND44.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:52 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND45.NFI High
7.9.2011 0:58:52 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND45.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:52 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND46.NFI High
7.9.2011 0:58:52 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND46.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:53 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND47.NFI High
7.9.2011 0:58:53 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND47.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:54 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND48.NFI High
7.9.2011 0:58:54 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND48.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:54 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND49.NFI High
7.9.2011 0:58:54 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND49.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:55 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4A.NFI High
7.9.2011 0:58:55 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4A.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:55 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4B.NFI High
7.9.2011 0:58:55 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4B.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:56 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4C.NFI High
7.9.2011 0:58:56 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4C.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:57 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4D.NFI High
7.9.2011 0:58:57 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4D.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:58 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4E.NFI High
7.9.2011 0:58:58 Deleted Trojan program Trojan-Downloader.Win32.Small.ivo D:\Původní disk\[NTFS]\Program Files\ESET\cache\FND4E.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:59 Deleted Trojan program Packed.Win32.PolyCrypt.d D:\Původní disk\[NTFS]\Program Files\ESET\cache\FNDF.NFI High
7.9.2011 0:58:59 Deleted Trojan program Packed.Win32.PolyCrypt.d D:\Původní disk\[NTFS]\Program Files\ESET\cache\FNDF.NFI//PE-Crypt.XorPE High
7.9.2011 0:58:59 Deleted Trojan program Packed.Win32.PolyCrypt.d D:\Původní disk\[NTFS]\Program Files\ESET\cache\FNDF.NFI//PE-Crypt.XorPE//PE_Patch.Poly High
7.9.2011 0:59:08 Deleted Trojan program Trojan-Dropper.Win32.Wlord.gen D:\Původní disk\[NTFS]\Program Files\ESET\infected\V5BYGWCA.NQF High
7.9.2011 0:59:08 Deleted Trojan program Trojan-Dropper.Win32.Wlord.gen D:\Původní disk\[NTFS]\Program Files\ESET\infected\V5BYGWCA.NQF//PE-Crypt.XorPE High
7.9.2011 0:59:08 Deleted Trojan program Trojan-Dropper.Win32.Wlord.gen D:\Původní disk\[NTFS]\Program Files\ESET\infected\WAJUXPDA.NQF High
7.9.2011 0:59:08 Deleted Trojan program Trojan-Dropper.Win32.Wlord.gen D:\Původní disk\[NTFS]\Program Files\ESET\infected\WAJUXPDA.NQF//PE-Crypt.XorPE High
7.9.2011 2:15:16 Deleted adware not-a-virus:AdWare.Win32.Mostofate.cd D:\Původní disk\[NTFS]\Program Files\Win Stream plugin\tbhelper.dll Medium
Status: Quarantined (events: 1)
7.9.2011 0:11:30 Quarantined virus HEUR:Trojan.Script.Iframer D:\Původní disk\[NTFS]\Documents and Settings\Marcela\Local Settings\Temp\~DF5070.tmp High
Status: Detected (events: 2)
7.9.2011 2:13:59 Detected adware not-a-virus:AdWare.Win32.Mostofate.bv D:\Původní disk\[NTFS]\Program Files\Win Stream plugin\cache\9a98dc1aaf75f3a9ab604c9f59111010//win_stream_plugin.dll Medium
7.9.2011 2:14:01 Detected adware not-a-virus:AdWare.Win32.Mostofate.cd D:\Původní disk\[NTFS]\Program Files\Win Stream plugin\cache\9a98dc1aaf75f3a9ab604c9f59111010//tbhelper.dll Medium

Výborně

nyní bych zkusil Malwarebytes

Podle návodu k AVPTool bych měl teď program ukončit kliknutím na křížek vpravo nahoře.
ALE program nereaguje!! Klikl jsem a už víc než hodinu se nic neděje. Počítač reaguje, zdá se že vše funguje. Můžu proces ukončit přes Správce úloh??

Ano ukončete proces,pokud nejde standartně vypnout

poté zkuste MBAM

Malwarebytes' Anti-Malware
www.malwarebytes.org

Verze databáze:

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

8.9.2011 2:10:46
mbam-log-2011-09-08 (02-10-46).txt

Typ: Úplná kontrola (C:\|D:\|)
Kontrolované objekty: 386194
Uplynulý čas: 3 hodin, 51 minut, 14 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

Odinstalujte všechny nepotřebné toolbary

TFC

Stáhneme a spustíme program
Klikneme na Start a potvrdíme OK
Program začne uklízet,poté restartuje pc
po použití program smažte

Údržba PC:

1)Čištění dočasných složek + neplatné registry

Ccleaner

Stáhneme a nainstalujeme program
Spustíme program
ČISTIČ
Windows zde necháme vše jak je (pokud používáme IE,tak odškrkneme jeho položky) a zaškrkneme položky Start Menu zástupci a Zástupci na ploše
Aplikace - necháme jak je,ale pokud používáme nějaký prohlížeč (Google chrome,Firefox,Opera..) tak odškrkneme jeho položky
>Stiskeneme tlačítko Analyzovat a poté Spustit Cleaner
Registry
>Stiskneme tlačítko Hledej problémy,program začne hledat neplatné registry..podé zvolíme Opravit vybrané problémy..
>Program se zeptá,zda chceme vytvořit zálohu registrů,zvolíme ano a uložíme si někde zálohu(kdyby byli po opravení registru s něčím problémy,tak zálohu obnovíme tak,že spustíme uloženou zálohu a potvrdíme ano),dále zvolíme Opravit všechny problémy a Zavřít
>opakujte dokud nebude registr bez problémů
Program používáme 1x 14dní (záleží na používání pc,můžeme i jednou týdně)

2)Defragmentace disku

Defraggler

Stáhneme a nainstalujeme program
Spustíme program
Vybereme disk ( C:,D:..prostě který používáme)
Pokud je ve sloupci Fragmentace více než 5% dejte Defragmentovat
Proveďte se všemi používanými disky
Provádíme 1x za měsíc

3)Aktualizace programů

FileHippo.com Update Checker

Stáhneme a nainstalujeme program(Při instalaci odškrkneme volbu Run at Startup )
Spustíme program
Program vyhledá nainstalované programy v PC a zjistí dostupné aktualizace
Poté se vám otevře internetová stránka,kde budou nabídnuté aplikace k aktualizování
>X Updates Detected..to jsou dostupné aktualizace..
> klikneme na zelenou šipečku a stáhneme program,poté nainstalujeme jeho aktuální verzi
> X Beta Updates Detected..tyto aktualizace nestahujte,jedná se o betaverze,které jsou ve vývoji a jsou nestabilní
Provádíme 1x za 14 dní nebo jednou za měsíc

Jak se chová PC

+ nový RSIT

Počítač už se chová líp, snad už bude OK... Přikládám log:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Marcela at 2011-09-08 21:58:17
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 49 GB (64%) free of 76 GB
Total RAM: 768 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:59:04, on 8.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\svchost.exe
C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\spoolsv.exe
C:\windows\Explorer.EXE
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Kooperativa\Services\KoopPDFServer.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Logitech\SetPointP\SetPoint.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\windows\system32\svchost.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
C:\windows\system32\wuauclt.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Documents and Settings\Marcela\Plocha\RSIT.exe
C:\Program Files\trend micro\Marcela.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\windows\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 7595944512
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\windows\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\windows\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\windows\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: KoopPdfService - Unknown owner - C:\Program Files\Kooperativa\Services\KoopPDFServer.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

--
End of file - 6646 bytes

======Scheduled tasks folder======

C:\windows\tasks\AppleSoftwareUpdate.job
C:\windows\tasks\Úklid 1 kliknutím.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Marcela\Data aplikací\Mozilla\Firefox\Profiles\azn5c1ff.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}:6.0.12, {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13, jqs@sun.com:1.0, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

C:\Program Files\Mozilla Firefox\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
NPOFFICE.DLL
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Marcela\Data aplikací\Mozilla\Firefox\Profiles\azn5c1ff.default\extensions\
{20a82645-c095-46ed-80e3-08825760534b}

C:\Documents and Settings\Marcela\Data aplikací\Mozilla\Firefox\Profiles\azn5c1ff.default\searchplugins\
icqplugin-1.xml
icqplugin-10.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-08-16 3942048]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-09-08 56712]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-02-19 49152]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2011-06-15 997920]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-05-04 252136]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2011-07-05 421888]
"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2011-06-24 1386776]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"TomTomHOME.exe"=C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [2011-03-09 247728]
"ctfmon.exe"=C:\windows\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer]
KHALMNPR.EXE []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\windows\system32\Ati2evxx.dll [2011-07-28 188416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2011-06-17 66328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-10-19 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableSecureUIAPaths"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
"C:\Program Files\TrackMania Sunrise\TmSunrise.exe"="C:\Program Files\TrackMania Sunrise\TmSunrise.exe:*:Disabled:TmSunrise"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\MotoGP2\motogp2.exe"="C:\Program Files\MotoGP2\motogp2.exe:*:Disabled:motogp2"
"C:\Program Files\Kooperativa\KalkZiv\Kalk_Ziv.exe"="C:\Program Files\Kooperativa\KalkZiv\Kalk_Ziv.exe:*:Enabled:Kalk_Ziv"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Disabled:HLSW Application"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe"="C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"MIDI1"=SYNCOR11.DLL
"vidc.iv41"=ir41_32.ax
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll

======List of files/folders created in the last 1 month======

2011-09-08 21:58:17 ----D---- C:\rsit
2011-09-08 20:09:43 ----A---- C:\windows\system32\aticalrt.dll
2011-09-08 20:09:42 ----A---- C:\windows\system32\aticaldd.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\ativvamv.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\atioglxx.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\atimpc32.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\aticalcl.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\atibtmon.exe
2011-09-08 20:09:41 ----A---- C:\windows\system32\amdpcom32.dll
2011-09-08 20:09:40 ----A---- C:\windows\system32\atiapfxx.exe
2011-09-08 20:09:40 ----A---- C:\windows\system32\atiadlxx.dll
2011-09-08 19:26:33 ----A---- C:\windows\system32\ShellManager310E2D762.dll
2011-09-08 18:44:24 ----D---- C:\Program Files\Common Files\Windows Live
2011-09-08 18:40:00 ----A---- C:\windows\system32\drivers\LBeepKE.sys
2011-09-08 18:39:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Logishrd
2011-09-08 18:39:06 ----D---- C:\Program Files\Logitech
2011-09-08 18:32:32 ----D---- C:\Program Files\Common Files\LogiShrd
2011-09-08 18:32:07 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Logishrd
2011-09-08 18:23:30 ----HDC---- C:\windows\$NtUninstallKB942288-v3$
2011-09-08 18:11:55 ----D---- C:\Program Files\Common Files\Apple
2011-09-08 18:11:23 ----D---- C:\Program Files\Apple Software Update
2011-09-08 18:11:23 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple
2011-09-08 17:49:42 ----D---- C:\Program Files\AMD APP
2011-09-08 17:47:18 ----D---- C:\windows\ATI
2011-09-08 16:59:02 ----RD---- C:\Program Files\Skype
2011-09-08 16:26:13 ----D---- C:\Program Files\Common Files\Java
2011-09-08 16:25:15 ----HDC---- C:\windows\$NtUninstallWdf01005$
2011-09-08 16:23:30 ----A---- C:\windows\system32\javaws.exe
2011-09-08 16:23:30 ----A---- C:\windows\system32\javaw.exe
2011-09-08 16:23:30 ----A---- C:\windows\system32\java.exe
2011-09-08 16:12:05 ----D---- C:\Program Files\FileHippo.com
2011-09-08 16:08:04 ----D---- C:\Program Files\Defraggler
2011-09-07 15:59:17 ----HDC---- C:\windows\$NtUninstallKB2607712$
2011-09-06 20:43:37 ----N---- C:\windows\system32\MpSigStub.exe
2011-09-06 16:03:08 ----SHD---- C:\RECYCLER
2011-08-26 18:49:34 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Malwarebytes
2011-08-26 18:49:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2011-08-26 18:10:11 ----D---- C:\windows\temp
2011-08-24 19:50:14 ----D---- C:\Program Files\trend micro
2011-08-24 13:29:31 ----HDC---- C:\windows\$NtUninstallKB2570791$
2011-08-11 18:36:27 ----HDC---- C:\windows\$NtUninstallKB2567680$
2011-08-11 18:35:35 ----HDC---- C:\windows\$NtUninstallKB2536276-v2$
2011-08-11 18:34:42 ----HDC---- C:\windows\$NtUninstallKB2570222$
2011-08-11 18:05:01 ----HDC---- C:\windows\$NtUninstallKB2566454$
2011-08-11 18:03:52 ----HDC---- C:\windows\$NtUninstallKB2562937$
2011-08-10 14:05:08 ----A---- C:\windows\w_distrib_iplist.txt

======List of files/folders modified in the last 1 month======

2011-09-08 21:57:15 ----D---- C:\WINDOWS
2011-09-08 21:55:27 ----A---- C:\windows\SchedLgU.Txt
2011-09-08 21:55:09 ----A---- C:\windows\wincmd.ini
2011-09-08 21:54:30 ----D---- C:\windows\system32\CatRoot2
2011-09-08 20:20:29 ----D---- C:\Program Files
2011-09-08 20:12:38 ----D---- C:\windows\system32
2011-09-08 20:12:38 ----D---- C:\Config.Msi
2011-09-08 20:10:33 ----D---- C:\windows\system32\drivers
2011-09-08 20:09:52 ----D---- C:\windows\system32\ReinstallBackups
2011-09-08 20:09:48 ----HD---- C:\windows\inf
2011-09-08 20:09:40 ----DC---- C:\windows\system32\DRVSTORE
2011-09-08 20:09:35 ----SHD---- C:\windows\Installer
2011-09-08 20:09:26 ----D---- C:\Program Files\ATI Technologies
2011-09-08 19:58:58 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-09-08 19:47:29 ----D---- C:\Program Files\Spybot - Search & Destroy
2011-09-08 19:46:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-09-08 19:29:14 ----D---- C:\Program Files\Common Files\Nero
2011-09-08 19:29:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nero
2011-09-08 19:25:56 ----A---- C:\windows\system32\MsiExec.exe.log
2011-09-08 19:10:02 ----D---- C:\Program Files\Nero
2011-09-08 19:06:31 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Nero
2011-09-08 19:01:54 ----SD---- C:\windows\Tasks
2011-09-08 18:46:33 ----RSD---- C:\windows\Fonts
2011-09-08 18:44:24 ----D---- C:\Program Files\Common Files
2011-09-08 18:40:44 ----RSHDC---- C:\windows\system32\dllcache
2011-09-08 18:36:57 ----HD---- C:\Program Files\InstallShield Installation Information
2011-09-08 18:32:07 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Logitech
2011-09-08 18:14:47 ----D---- C:\Program Files\QuickTime
2011-09-08 18:05:08 ----D---- C:\Program Files\DVDFab 5
2011-09-08 17:28:20 ----A---- C:\windows\win.ini
2011-09-08 17:28:20 ----A---- C:\windows\system.ini
2011-09-08 17:28:20 ----A---- C:\boot.ini
2011-09-08 17:00:26 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Skype
2011-09-08 16:59:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-09-08 16:40:28 ----D---- C:\windows\WinSxS
2011-09-08 16:36:32 ----D---- C:\Program Files\Common Files\Adobe
2011-09-08 16:36:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-09-08 16:23:04 ----A---- C:\windows\system32\deployJava1.dll
2011-09-08 16:22:56 ----D---- C:\Program Files\Java
2011-09-08 15:31:55 ----D---- C:\ProgramData
2011-09-08 15:30:27 ----D---- C:\Program Files\GameSpy Arcade
2011-09-08 15:29:13 ----D---- C:\Documents and Settings\Marcela\Data aplikací\HLSW
2011-09-08 15:23:10 ----D---- C:\Program Files\Common Files\Teleca Shared
2011-09-08 15:20:11 ----D---- C:\windows\Prefetch
2011-09-08 15:19:12 ----D---- C:\Program Files\TuneUp Utilities 2009
2011-09-07 22:12:59 ----D---- C:\Program Files\Mozilla Firefox
2011-09-07 22:09:47 ----D---- C:\Program Files\Microsoft Security Client
2011-09-07 15:43:27 ----D---- C:\windows\ufa
2011-09-07 14:41:59 ----HD---- C:\windows\$hf_mig$
2011-09-06 21:38:20 ----SHD---- C:\System Volume Information
2011-09-06 21:29:59 ----D---- C:\windows\system32\Restore
2011-09-06 21:28:39 ----D---- C:\Program Files\CCleaner
2011-09-06 15:49:30 ----D---- C:\windows\system32\drivers\etc
2011-09-06 15:45:18 ----D---- C:\windows\AppPatch
2011-09-05 21:18:42 ----D---- C:\Documents and Settings
2011-09-03 12:17:22 ----A---- C:\windows\system32\crypt32.dll
2011-08-27 13:28:15 ----HDC---- C:\windows\$NtUninstallXPSEPSCLP$
2011-08-27 13:26:57 ----HD---- C:\windows\update.tray-2-0-lnk
2011-08-27 13:26:57 ----HD---- C:\windows\update.tray-2-0
2011-08-26 18:10:45 ----D---- C:\windows\system32\config
2011-08-25 16:31:43 ----SD---- C:\Documents and Settings\Marcela\Data aplikací\Microsoft
2011-08-24 21:23:53 ----D---- C:\windows\Minidump
2011-08-24 21:23:53 ----D---- C:\windows\Debug
2011-08-24 21:06:06 ----D---- C:\Program Files\Yahoo!
2011-08-24 21:06:04 ----D---- C:\Program Files\Common Files\Scanner
2011-08-24 20:42:29 ----D---- C:\windows\pss
2011-08-24 19:47:58 ----A---- C:\windows\iplist.txt
2011-08-24 19:45:42 ----A---- C:\windows\btc_client_iplist.txt
2011-08-24 19:45:18 ----A---- C:\windows\iecheck_iplist.txt
2011-08-23 11:58:45 ----A---- C:\windows\wininit.ini
2011-08-22 11:40:39 ----D---- C:\windows\Help
2011-08-22 08:48:26 ----A---- C:\windows\ddh_iplist.txt
2011-08-13 19:16:21 ----A---- C:\windows\winlog-ids.txt
2011-08-13 19:16:21 ----A---- C:\windows\winlog-dirs.txt
2011-08-12 00:24:57 ----D---- C:\windows\network diagnostic
2011-08-11 19:40:06 ----RSD---- C:\windows\assembly
2011-08-11 19:28:36 ----D---- C:\windows\Microsoft.NET
2011-08-11 18:47:06 ----A---- C:\windows\system32\PerfStringBackup.INI
2011-08-11 18:12:38 ----A---- C:\windows\system32\MRT.exe
2011-08-11 18:07:14 ----D---- C:\Program Files\Internet Explorer
2011-08-11 18:06:36 ----D---- C:\windows\ie8updates

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\windows\System32\drivers\sfdrv01.sys [2005-03-03 48640]
R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a); C:\windows\System32\drivers\sfdrv01a.sys [2006-07-05 63352]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\windows\System32\drivers\sfhlp02.sys [2006-06-14 13680]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\windows\System32\drivers\sfsync02.sys [2006-07-10 27032]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\windows\System32\drivers\sfvfs02.sys [2007-01-12 82296]
R0 sisagp;Filtr SIS sběrnice AGP ; C:\windows\System32\DRIVERS\sisagp.sys [2008-04-14 40960]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\windows\system32\DRIVERS\WudfPf.sys [2008-10-19 77568]
R1 easdrv;easdrv; C:\windows\system32\DRIVERS\easdrv.sys [2007-12-21 30216]
R1 epfwtdir;epfwtdir; C:\windows\system32\DRIVERS\epfwtdir.sys [2007-12-21 33800]
R1 intelppm;Řadič procesoru Intel; C:\windows\System32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2011-04-18 165648]
R1 MpKslb964ef6d;MpKslb964ef6d; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKslb964ef6d.sys []
R2 eamon;EAMON; C:\windows\system32\DRIVERS\eamon.sys [2007-12-21 39944]
R2 LBeepKE;Logitech Beep Suppression Driver; C:\windows\System32\Drivers\LBeepKE.sys [2011-04-30 12184]
R3 aeaudio;aeaudio; C:\windows\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 ati2mtag;ati2mtag; C:\windows\system32\DRIVERS\ati2mtag.sys [2011-07-29 7084544]
R3 hidusb;Ovladač třídy standardu HID; C:\windows\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\windows\system32\DRIVERS\L8042Kbd.sys [2011-04-30 22040]
R3 mouhid;Ovladač myši standardu HID; C:\windows\System32\DRIVERS\mouhid.sys [2008-10-19 12160]
R3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\windows\System32\DRIVERS\sisnic.sys [2004-08-03 32768]
R3 smwdm;smwdm; C:\windows\system32\drivers\smwdm.sys [2003-08-29 578304]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\windows\system32\DRIVERS\serscan.sys [2001-10-24 6784]
S0 sptd;sptd; C:\windows\System32\Drivers\sptd.sys [2009-03-21 685816]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\windows\System32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S1 MpKsl204cce24;MpKsl204cce24; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKsl204cce24.sys []
S1 MpKsl90a8603e;MpKsl90a8603e; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKsl90a8603e.sys []
S1 MpKsl912a108d;MpKsl912a108d; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKsl912a108d.sys []
S1 MpKslc3983a74;MpKslc3983a74; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKslc3983a74.sys []
S3 AR9271;Wireless Network Adapter Service; C:\windows\system32\DRIVERS\athuw.sys [2010-01-05 1714176]
S3 catchme;catchme; \??\C:\DOCUME~1\Marcela\LOCALS~1\Temp\catchme.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\windows\system32\DRIVERS\HPZid412.sys [2006-04-12 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\windows\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\windows\system32\DRIVERS\HPZius12.sys [2006-04-12 21568]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\windows\system32\DRIVERS\k750bus.sys []
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\windows\system32\DRIVERS\k750mdfl.sys []
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\windows\system32\DRIVERS\k750mdm.sys []
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\windows\system32\DRIVERS\k750mgmt.sys []
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\windows\system32\DRIVERS\k750obex.sys []
S3 L8042mou;SetPoint PS/2 Mouse Filter Driver; C:\windows\system32\DRIVERS\L8042mou.Sys [2007-04-11 63248]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\windows\system32\DRIVERS\LHidFilt.Sys [2007-04-11 34832]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\windows\system32\DRIVERS\LMouFilt.Sys [2007-04-11 36112]
S3 LMouKE;SetPoint Mouse Filter Driver; C:\windows\system32\DRIVERS\LMouKE.Sys [2007-04-11 79376]
S3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\windows\System32\Drivers\LUsbFilt.Sys [2007-04-11 28688]
S3 pcouffin;VSO Software pcouffin; C:\windows\System32\Drivers\pcouffin.sys [2009-10-26 47360]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\windows\system32\DRIVERS\s1039bus.sys [2009-11-19 98672]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s1039mdfl.sys [2009-11-19 14960]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s1039mdm.sys [2009-11-19 124016]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s1039mgmt.sys [2009-11-19 117872]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\windows\system32\DRIVERS\s1039nd5.sys [2009-11-19 25456]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s1039obex.sys [2009-11-19 113904]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\windows\system32\DRIVERS\s1039unic.sys [2009-11-19 123504]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\windows\System32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\windows\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\windows\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Wdf01000; C:\windows\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\windows\system32\DRIVERS\wpdusb.sys [2008-10-19 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\windows\system32\DRIVERS\wudfrd.sys [2008-10-19 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\windows\system32\Ati2evxx.exe [2011-07-28 643072]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2011-09-08 161664]
R2 KoopPdfService;KoopPdfService; C:\Program Files\Kooperativa\Services\KoopPDFServer.exe [2010-04-05 447488]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2011-04-27 11736]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-12-01 75136]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2011-03-09 92592]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\windows\system32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-08-15 593920]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2007-08-09 73728]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2011-06-17 295192]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 WSearch;Windows Search; C:\windows\system32\SearchIndexer.exe [2008-05-26 439808]

-----------------EOF-----------------

Ještě tam vidím "PnkBstrA", toho bych se asi taky mohl zbavit, ne??

To je tzv. Punkbuster,více zde: http://cs.wikipedia.org/wiki/PunkBuster

Otevřeme si Služby Obrázek

Stiskněte klávesovou kombinaci WIN+R( nebo start-spustit ),čímž se vám otevře okno pro zadání příkazu pro spuštění. Zkopírujte a vložte sem následujíci text: services.msc a dejte enter
Otevře se vám okno se službami vašeho pc,najděte následující služby,dvojklikem rozklikněte,klikneme na Zastavit a dále nastavte Typ spuštění:Zakázano
Kód: Vybrat vše
```
Java Quick Starter
```

Znovu si spustíme HijackThis

Kód: Vybrat vše

C:\Program Files\trend micro\Marcela.exe

(Pokud nenajdeme nebo nemáme,tak stáhneme ZDE )

Dále klikneme na tlačítko Do a system scan only

Najdeme a označíme následující položky:

Kód: Vybrat vše

R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

klikneme na položku Fix checked a potvrdíme tlačítkem Ano

Restartovat pc

Hotovo, co dál??? Co s tím messengerem (file missing), můžu to taky "fixnout" pomocí HJT???

Vložte mi prosím nový log z RSIT

Děkuji,já vám řeknu co fixnout,jestli bude ještě třeba

Pardon, nechci dělat chytrého, já jen že ho nepoužívám, a složka s MSN messengerem je odstraněna...
Tady je ten nový log:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Marcela at 2011-09-09 16:32:26
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 49 GB (64%) free of 76 GB
Total RAM: 768 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:33:08, on 9.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\svchost.exe
C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Kooperativa\Services\KoopPDFServer.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\windows\system32\svchost.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\windows\Explorer.EXE
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Logitech\SetPointP\SetPoint.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Documents and Settings\Marcela\Plocha\RSIT.exe
C:\Program Files\trend micro\Marcela.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\windows\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 7595944512
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\windows\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\windows\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\windows\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: KoopPdfService - Unknown owner - C:\Program Files\Kooperativa\Services\KoopPDFServer.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

--
End of file - 5944 bytes

======Scheduled tasks folder======

C:\windows\tasks\AppleSoftwareUpdate.job
C:\windows\tasks\Úklid 1 kliknutím.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Marcela\Data aplikací\Mozilla\Firefox\Profiles\azn5c1ff.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}:6.0.12, {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13, jqs@sun.com:1.0, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

C:\Program Files\Mozilla Firefox\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
NPOFFICE.DLL
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Marcela\Data aplikací\Mozilla\Firefox\Profiles\azn5c1ff.default\extensions\
{20a82645-c095-46ed-80e3-08825760534b}

C:\Documents and Settings\Marcela\Data aplikací\Mozilla\Firefox\Profiles\azn5c1ff.default\searchplugins\
icqplugin-1.xml
icqplugin-10.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-08-16 3942048]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-09-08 56712]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2011-06-15 997920]
"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2011-06-24 1386776]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2011-07-05 421888]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"TomTomHOME.exe"=C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [2011-03-09 247728]
"ctfmon.exe"=C:\windows\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer]
KHALMNPR.EXE []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\windows\system32\Ati2evxx.dll [2011-07-28 188416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2011-06-17 66328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-10-19 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableSecureUIAPaths"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
"C:\Program Files\TrackMania Sunrise\TmSunrise.exe"="C:\Program Files\TrackMania Sunrise\TmSunrise.exe:*:Disabled:TmSunrise"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\MotoGP2\motogp2.exe"="C:\Program Files\MotoGP2\motogp2.exe:*:Disabled:motogp2"
"C:\Program Files\Kooperativa\KalkZiv\Kalk_Ziv.exe"="C:\Program Files\Kooperativa\KalkZiv\Kalk_Ziv.exe:*:Enabled:Kalk_Ziv"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Disabled:HLSW Application"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe"="C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"MIDI1"=SYNCOR11.DLL
"vidc.iv41"=ir41_32.ax
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll

======List of files/folders created in the last 1 month======

2011-09-09 16:32:26 ----D---- C:\rsit
2011-09-08 20:09:43 ----A---- C:\windows\system32\aticalrt.dll
2011-09-08 20:09:42 ----A---- C:\windows\system32\aticaldd.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\ativvamv.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\atioglxx.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\atimpc32.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\aticalcl.dll
2011-09-08 20:09:41 ----A---- C:\windows\system32\atibtmon.exe
2011-09-08 20:09:41 ----A---- C:\windows\system32\amdpcom32.dll
2011-09-08 20:09:40 ----A---- C:\windows\system32\atiapfxx.exe
2011-09-08 20:09:40 ----A---- C:\windows\system32\atiadlxx.dll
2011-09-08 19:26:33 ----A---- C:\windows\system32\ShellManager310E2D762.dll
2011-09-08 18:44:24 ----D---- C:\Program Files\Common Files\Windows Live
2011-09-08 18:40:00 ----A---- C:\windows\system32\drivers\LBeepKE.sys
2011-09-08 18:39:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Logishrd
2011-09-08 18:39:06 ----D---- C:\Program Files\Logitech
2011-09-08 18:32:32 ----D---- C:\Program Files\Common Files\LogiShrd
2011-09-08 18:32:07 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Logishrd
2011-09-08 18:23:30 ----HDC---- C:\windows\$NtUninstallKB942288-v3$
2011-09-08 18:11:55 ----D---- C:\Program Files\Common Files\Apple
2011-09-08 18:11:23 ----D---- C:\Program Files\Apple Software Update
2011-09-08 18:11:23 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple
2011-09-08 17:49:42 ----D---- C:\Program Files\AMD APP
2011-09-08 17:47:18 ----D---- C:\windows\ATI
2011-09-08 16:59:02 ----RD---- C:\Program Files\Skype
2011-09-08 16:26:13 ----D---- C:\Program Files\Common Files\Java
2011-09-08 16:25:15 ----HDC---- C:\windows\$NtUninstallWdf01005$
2011-09-08 16:23:30 ----A---- C:\windows\system32\javaws.exe
2011-09-08 16:23:30 ----A---- C:\windows\system32\javaw.exe
2011-09-08 16:23:30 ----A---- C:\windows\system32\java.exe
2011-09-08 16:12:05 ----D---- C:\Program Files\FileHippo.com
2011-09-08 16:08:04 ----D---- C:\Program Files\Defraggler
2011-09-07 15:59:17 ----HDC---- C:\windows\$NtUninstallKB2607712$
2011-09-06 20:43:37 ----N---- C:\windows\system32\MpSigStub.exe
2011-09-06 16:03:08 ----SHD---- C:\RECYCLER
2011-08-26 18:49:34 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Malwarebytes
2011-08-26 18:49:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2011-08-26 18:10:11 ----D---- C:\windows\temp
2011-08-24 19:50:14 ----D---- C:\Program Files\trend micro
2011-08-24 13:29:31 ----HDC---- C:\windows\$NtUninstallKB2570791$
2011-08-11 18:36:27 ----HDC---- C:\windows\$NtUninstallKB2567680$
2011-08-11 18:35:35 ----HDC---- C:\windows\$NtUninstallKB2536276-v2$
2011-08-11 18:34:42 ----HDC---- C:\windows\$NtUninstallKB2570222$
2011-08-11 18:05:01 ----HDC---- C:\windows\$NtUninstallKB2566454$
2011-08-11 18:03:52 ----HDC---- C:\windows\$NtUninstallKB2562937$
2011-08-10 14:05:08 ----A---- C:\windows\w_distrib_iplist.txt

======List of files/folders modified in the last 1 month======

2011-09-09 16:32:13 ----A---- C:\windows\wincmd.ini
2011-09-09 16:26:43 ----D---- C:\Program Files
2011-09-09 16:05:45 ----D---- C:\windows\system32\CatRoot2
2011-09-09 15:44:31 ----A---- C:\windows\SchedLgU.Txt
2011-09-08 21:57:15 ----D---- C:\WINDOWS
2011-09-08 20:12:38 ----D---- C:\windows\system32
2011-09-08 20:10:33 ----D---- C:\windows\system32\drivers
2011-09-08 20:09:52 ----D---- C:\windows\system32\ReinstallBackups
2011-09-08 20:09:48 ----HD---- C:\windows\inf
2011-09-08 20:09:40 ----DC---- C:\windows\system32\DRVSTORE
2011-09-08 20:09:35 ----SHD---- C:\windows\Installer
2011-09-08 20:09:26 ----D---- C:\Program Files\ATI Technologies
2011-09-08 19:58:58 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-09-08 19:46:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-09-08 19:29:14 ----D---- C:\Program Files\Common Files\Nero
2011-09-08 19:29:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nero
2011-09-08 19:25:56 ----A---- C:\windows\system32\MsiExec.exe.log
2011-09-08 19:06:31 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Nero
2011-09-08 19:01:54 ----SD---- C:\windows\Tasks
2011-09-08 18:46:33 ----RSD---- C:\windows\Fonts
2011-09-08 18:44:24 ----D---- C:\Program Files\Common Files
2011-09-08 18:40:44 ----RSHDC---- C:\windows\system32\dllcache
2011-09-08 18:36:57 ----HD---- C:\Program Files\InstallShield Installation Information
2011-09-08 18:32:07 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Logitech
2011-09-08 18:14:47 ----D---- C:\Program Files\QuickTime
2011-09-08 18:14:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
2011-09-08 18:05:07 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Vso
2011-09-08 17:28:20 ----A---- C:\windows\win.ini
2011-09-08 17:28:20 ----A---- C:\windows\system.ini
2011-09-08 17:28:20 ----A---- C:\boot.ini
2011-09-08 17:00:26 ----D---- C:\Documents and Settings\Marcela\Data aplikací\Skype
2011-09-08 16:59:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-09-08 16:40:28 ----D---- C:\windows\WinSxS
2011-09-08 16:36:32 ----D---- C:\Program Files\Common Files\Adobe
2011-09-08 16:36:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-09-08 16:23:04 ----A---- C:\windows\system32\deployJava1.dll
2011-09-08 16:22:56 ----D---- C:\Program Files\Java
2011-09-08 15:29:13 ----D---- C:\Documents and Settings\Marcela\Data aplikací\HLSW
2011-09-08 15:23:10 ----D---- C:\Program Files\Common Files\Teleca Shared
2011-09-08 15:20:11 ----D---- C:\windows\Prefetch
2011-09-07 22:12:59 ----D---- C:\Program Files\Mozilla Firefox
2011-09-07 22:09:47 ----D---- C:\Program Files\Microsoft Security Client
2011-09-07 15:43:27 ----D---- C:\windows\ufa
2011-09-07 14:41:59 ----HD---- C:\windows\$hf_mig$
2011-09-06 21:38:20 ----SHD---- C:\System Volume Information
2011-09-06 21:29:59 ----D---- C:\windows\system32\Restore
2011-09-06 21:28:39 ----D---- C:\Program Files\CCleaner
2011-09-06 15:49:30 ----D---- C:\windows\system32\drivers\etc
2011-09-06 15:45:18 ----D---- C:\windows\AppPatch
2011-09-05 21:18:42 ----D---- C:\Documents and Settings
2011-09-03 12:17:22 ----A---- C:\windows\system32\crypt32.dll
2011-08-27 13:28:15 ----HDC---- C:\windows\$NtUninstallXPSEPSCLP$
2011-08-27 13:26:57 ----HD---- C:\windows\update.tray-2-0-lnk
2011-08-27 13:26:57 ----HD---- C:\windows\update.tray-2-0
2011-08-26 18:10:45 ----D---- C:\windows\system32\config
2011-08-25 16:31:43 ----SD---- C:\Documents and Settings\Marcela\Data aplikací\Microsoft
2011-08-24 21:23:53 ----D---- C:\windows\Minidump
2011-08-24 21:23:53 ----D---- C:\windows\Debug
2011-08-24 21:06:06 ----D---- C:\Program Files\Yahoo!
2011-08-24 21:06:04 ----D---- C:\Program Files\Common Files\Scanner
2011-08-24 20:42:29 ----D---- C:\windows\pss
2011-08-24 19:47:58 ----A---- C:\windows\iplist.txt
2011-08-24 19:45:42 ----A---- C:\windows\btc_client_iplist.txt
2011-08-24 19:45:18 ----A---- C:\windows\iecheck_iplist.txt
2011-08-23 11:58:45 ----A---- C:\windows\wininit.ini
2011-08-22 11:40:39 ----D---- C:\windows\Help
2011-08-22 08:48:26 ----A---- C:\windows\ddh_iplist.txt
2011-08-13 19:16:21 ----A---- C:\windows\winlog-ids.txt
2011-08-13 19:16:21 ----A---- C:\windows\winlog-dirs.txt
2011-08-12 00:24:57 ----D---- C:\windows\network diagnostic
2011-08-11 19:40:06 ----RSD---- C:\windows\assembly
2011-08-11 19:28:36 ----D---- C:\windows\Microsoft.NET
2011-08-11 18:47:06 ----A---- C:\windows\system32\PerfStringBackup.INI
2011-08-11 18:12:38 ----A---- C:\windows\system32\MRT.exe
2011-08-11 18:07:14 ----D---- C:\Program Files\Internet Explorer
2011-08-11 18:06:36 ----D---- C:\windows\ie8updates

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\windows\System32\drivers\sfdrv01.sys [2005-03-03 48640]
R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a); C:\windows\System32\drivers\sfdrv01a.sys [2006-07-05 63352]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\windows\System32\drivers\sfhlp02.sys [2006-06-14 13680]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\windows\System32\drivers\sfsync02.sys [2006-07-10 27032]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\windows\System32\drivers\sfvfs02.sys [2007-01-12 82296]
R0 sisagp;Filtr SIS sběrnice AGP ; C:\windows\System32\DRIVERS\sisagp.sys [2008-04-14 40960]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\windows\system32\DRIVERS\WudfPf.sys [2008-10-19 77568]
R1 easdrv;easdrv; C:\windows\system32\DRIVERS\easdrv.sys [2007-12-21 30216]
R1 epfwtdir;epfwtdir; C:\windows\system32\DRIVERS\epfwtdir.sys [2007-12-21 33800]
R1 intelppm;Řadič procesoru Intel; C:\windows\System32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2011-04-18 165648]
R1 MpKsl1982f31e;MpKsl1982f31e; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKsl1982f31e.sys []
R2 eamon;EAMON; C:\windows\system32\DRIVERS\eamon.sys [2007-12-21 39944]
R2 LBeepKE;Logitech Beep Suppression Driver; C:\windows\System32\Drivers\LBeepKE.sys [2011-04-30 12184]
R3 aeaudio;aeaudio; C:\windows\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 ati2mtag;ati2mtag; C:\windows\system32\DRIVERS\ati2mtag.sys [2011-07-29 7084544]
R3 hidusb;Ovladač třídy standardu HID; C:\windows\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\windows\system32\DRIVERS\L8042Kbd.sys [2011-04-30 22040]
R3 mouhid;Ovladač myši standardu HID; C:\windows\System32\DRIVERS\mouhid.sys [2008-10-19 12160]
R3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\windows\System32\DRIVERS\sisnic.sys [2004-08-03 32768]
R3 smwdm;smwdm; C:\windows\system32\drivers\smwdm.sys [2003-08-29 578304]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\windows\system32\DRIVERS\serscan.sys [2001-10-24 6784]
S0 sptd;sptd; C:\windows\System32\Drivers\sptd.sys [2009-03-21 685816]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\windows\System32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S1 MpKsl204cce24;MpKsl204cce24; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKsl204cce24.sys []
S1 MpKsl90a8603e;MpKsl90a8603e; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKsl90a8603e.sys []
S1 MpKsl912a108d;MpKsl912a108d; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKsl912a108d.sys []
S1 MpKslc3983a74;MpKslc3983a74; \??\C:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{4AB0297A-F8C0-4093-94E0-3C98C5BC0AA6}\MpKslc3983a74.sys []
S3 AR9271;Wireless Network Adapter Service; C:\windows\system32\DRIVERS\athuw.sys [2010-01-05 1714176]
S3 catchme;catchme; \??\C:\DOCUME~1\Marcela\LOCALS~1\Temp\catchme.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\windows\system32\DRIVERS\HPZid412.sys [2006-04-12 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\windows\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\windows\system32\DRIVERS\HPZius12.sys [2006-04-12 21568]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\windows\system32\DRIVERS\k750bus.sys []
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\windows\system32\DRIVERS\k750mdfl.sys []
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\windows\system32\DRIVERS\k750mdm.sys []
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\windows\system32\DRIVERS\k750mgmt.sys []
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\windows\system32\DRIVERS\k750obex.sys []
S3 L8042mou;SetPoint PS/2 Mouse Filter Driver; C:\windows\system32\DRIVERS\L8042mou.Sys [2007-04-11 63248]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\windows\system32\DRIVERS\LHidFilt.Sys [2007-04-11 34832]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\windows\system32\DRIVERS\LMouFilt.Sys [2007-04-11 36112]
S3 LMouKE;SetPoint Mouse Filter Driver; C:\windows\system32\DRIVERS\LMouKE.Sys [2007-04-11 79376]
S3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\windows\System32\Drivers\LUsbFilt.Sys [2007-04-11 28688]
S3 pcouffin;VSO Software pcouffin; C:\windows\System32\Drivers\pcouffin.sys [2009-10-26 47360]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\windows\system32\DRIVERS\s1039bus.sys [2009-11-19 98672]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s1039mdfl.sys [2009-11-19 14960]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s1039mdm.sys [2009-11-19 124016]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s1039mgmt.sys [2009-11-19 117872]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\windows\system32\DRIVERS\s1039nd5.sys [2009-11-19 25456]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s1039obex.sys [2009-11-19 113904]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\windows\system32\DRIVERS\s1039unic.sys [2009-11-19 123504]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\windows\System32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\windows\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\windows\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Wdf01000; C:\windows\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\windows\system32\DRIVERS\wpdusb.sys [2008-10-19 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\windows\system32\DRIVERS\wudfrd.sys [2008-10-19 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\windows\system32\Ati2evxx.exe [2011-07-28 643072]
R2 KoopPdfService;KoopPdfService; C:\Program Files\Kooperativa\Services\KoopPDFServer.exe [2010-04-05 447488]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2011-04-27 11736]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-12-01 75136]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2011-03-09 92592]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\windows\system32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-08-15 593920]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2007-08-09 73728]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2011-06-17 295192]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2011-09-08 161664]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 WSearch;Windows Search; C:\windows\system32\SearchIndexer.exe [2008-05-26 439808]

-----------------EOF-----------------

Ano vše je již v pořádku a máte pravdu,můžete fixnout položky

Kód: Vybrat vše

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

Můžu v tuto chvíli ještě něco pro vás udělat?Počítač se chová korektně?

Fixnuto...

Moc Vám děkuji za pomoc, počítač se chová podstatně lépe než před léčbou, asi bude v pořádku. Pokud bych zaznamenal nějaký problém, ozval bych se...

Ještě jednou Vám MOC DĚKUJI za Vaši pomoc...

Rád jsem vám pomohl

kdyby byly problémy,určitě se ozvěte,nás tým je tu pro vás

VIRY.CZ

Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu

Re: Prosim o kontrolu logu