VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Facebook vrus - prosím o pomoc

https://forum.viry.cz:443/viewtopic.php?t=116682

Stránka 2 z 2

Re: Facebook vrus - prosím o pomoc

Napsal: 06 lis 2011 22:12
od Miri$
PC se chova standartně a nevykazuje jž známky nákazy

Logfile of random's system information tool 1.09 (written by random/random)
Run by Honza at 2011-11-06 22:11:56
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 11 GB (29%) free of 36 GB
Total RAM: 511 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:12:32, on 6.11.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS.0\System32\smss.exe
C:\WINDOWS.0\system32\winlogon.exe
C:\WINDOWS.0\system32\services.exe
C:\WINDOWS.0\system32\lsass.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\System32\svchost.exe
C:\WINDOWS.0\system32\spoolsv.exe
C:\WINDOWS.0\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\PC Tools Security\BDT\BDTUpdateService.exe
C:\WINDOWS.0\system32\IProsetMonitor.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS.0\system32\nvsvc32.exe
C:\WINDOWS.0\system32\PnkBstrA.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\system32\wbem\wmiapsrv.exe
C:\WINDOWS.0\system32\wscntfy.exe
C:\WINDOWS.0\system32\RUNDLL32.EXE
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\PC Tools Security\BDT\FGuard.exe
C:\WINDOWS.0\system32\ctfmon.exe
C:\WINDOWS.0\system32\wuauclt.exe
C:\WINDOWS.0\system32\msiexec.exe
C:\WINDOWS.0\system32\NOTEPAD.EXE
C:\Program Files\Opera\opera.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Program Files\AVAST Software\Avast\setup\avast.setup
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS.0\system32\wuauclt.exe
C:\WINDOWS.0\system32\wuauclt.exe
C:\Documents and Settings\Honza.HONZA-714D35E86\Plocha\RSIT.exe
C:\Program Files\trend micro\Honza.exe
C:\WINDOWS.0\SoftwareDistribution\Download\888f7dc78f4fb22652f6b85c38268acf\update\update.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: PC Tools Browser Guard - {472734EA-242A-422b-ADF8-83D1E48CC825} - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS.0\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS.0\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [PCTools FGuard] C:\Program Files\PC Tools Security\BDT\FGuard.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS.0\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS.0\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS.0\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS.0\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - (no file)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS.0\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS.0\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Browser Defender Update Service - Unknown owner - C:\Program Files\PC Tools Security\BDT\BDTUpdateService.exe
O23 - Service: CiSvc - Unknown owner - C:\WINDOWS.0\system32\cisvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Intel Corporation - C:\WINDOWS.0\system32\IProsetMonitor.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS.0\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS.0\system32\PnkBstrA.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: vToolbarUpdater - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe (file missing)

--
End of file - 9423 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Mozilla\Firefox\Profiles\frgg680j.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "extensions.enabledItems" - "{800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5, {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13, {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26, jqs@sun.com:1.0, {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.16.1, QipCounter@qip.ru:1.0, {32a1fd71-835e-4b11-8e54-886fda0b4c89}:1.1, engine@conduit.com:3.3.3.2, {88c7f2aa-f93f-432c-8f0e-b7d85967a527}:3.5.0.12, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS.0\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{cb84136f-9c44-433a-9048-c5cd9df1dc16}"=C:\Program Files\PC Tools Security\BDT\Firefox\
"{1E73965B-8B48-48be-9C8D-68B920ABC1C4}"=C:\Program Files\AVG\AVG2012\Firefox4\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS.0\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=E:\Program Files\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS.0\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
npdnu.dll
npdnu.xpt
npdnupdater2.dll
npdnupdater2.xpt
NPOFF12.DLL
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
npuuseep.dll
npwachk.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
babylon.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Mozilla\Firefox\Profiles\frgg680j.default\extensions\
avg@toolbar
engine@conduit.com
{32a1fd71-835e-4b11-8e54-886fda0b4c89}
{800b5000-a755-47e1-992b-48a1c1357f07}

C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Mozilla\Firefox\Profiles\frgg680j.default\searchplugins\
aol-web-search.xml
askcom.xml
icq-search.xml
icqplugin-1.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin.gif
icqplugin.src
icqplugin.xml
qip-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}]
PC Tools Browser Guard BHO - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll [2011-05-20 1144784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class - C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll [2010-12-13 141184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-09-21 3853984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-18 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{472734EA-242A-422B-ADF8-83D1E48CC825} - PC Tools Browser Guard - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll [2011-05-20 1144784]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS.0\system32\NvCpl.dll [2006-03-09 7561216]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS.0\system32\NvMcTray.dll [2006-03-09 86016]
"Smapp"=C:\Program Files\Analog Devices\SoundMAX\Smtray.exe [2002-06-26 90112]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2011-09-27 59240]
"PCTools FGuard"=C:\Program Files\PC Tools Security\BDT\FGuard.exe [2011-05-20 247760]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-09-06 3722416]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS.0\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableSecureUIAPaths"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoSMMyDocs"=1
"NoResolveTrack"=1
"LinkResolveIgnoreLinkInfo "=1
"NoSharedDocuments"=1
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceClassicControlPanel"=1
"NoDriveTypeAutoRun"=323
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.i420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS.0\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS.0\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"MIDI1"=SYNCOR11.DLL

======List of files/folders created in the last 1 month======

2011-11-06 22:12:32 ----HDC---- C:\WINDOWS.0\$NtUninstallKB2423089$
2011-11-06 22:11:56 ----HDC---- C:\WINDOWS.0\$NtUninstallKB2360937$
2011-11-06 22:11:48 ----D---- C:\WINDOWS.0\LastGood
2011-11-06 22:07:17 ----A---- C:\WINDOWS.0\system32\drivers\aswSP.sys
2011-11-06 22:07:17 ----A---- C:\WINDOWS.0\system32\drivers\aswFsBlk.sys
2011-11-06 22:07:13 ----A---- C:\WINDOWS.0\system32\drivers\aswRdr.sys
2011-11-06 22:07:12 ----A---- C:\WINDOWS.0\system32\drivers\aswTdi.sys
2011-11-06 22:07:12 ----A---- C:\WINDOWS.0\system32\drivers\aswSnx.sys
2011-11-06 22:07:11 ----A---- C:\WINDOWS.0\system32\drivers\aswmon2.sys
2011-11-06 22:07:11 ----A---- C:\WINDOWS.0\system32\drivers\aswmon.sys
2011-11-06 22:07:11 ----A---- C:\WINDOWS.0\system32\drivers\aavmker4.sys
2011-11-06 22:06:31 ----A---- C:\WINDOWS.0\system32\aswBoot.exe
2011-11-06 22:03:37 ----D---- C:\rsit
2011-11-06 21:35:33 ----D---- C:\Program Files\CCleaner
2011-11-06 21:22:40 ----SHD---- C:\WINDOWS.0\CSC
2011-11-06 20:11:47 ----SHD---- C:\RECYCLER
2011-11-06 12:58:39 ----A---- C:\WINDOWS.0\system32\SETD5.tmp
2011-11-06 12:14:09 ----D---- C:\WINDOWS.0\temp
2011-11-06 11:49:29 ----A---- C:\WINDOWS.0\system32\wmpns.dll
2011-11-06 11:38:53 ----HDC---- C:\WINDOWS.0\$NtUninstallKB980232$
2011-11-06 11:36:41 ----HDC---- C:\WINDOWS.0\$NtUninstallKB980218$
2011-11-06 11:34:59 ----HDC---- C:\WINDOWS.0\$NtUninstallKB979683$
2011-11-06 11:33:02 ----HDC---- C:\WINDOWS.0\$NtUninstallKB979559$
2011-11-06 11:31:55 ----HDC---- C:\WINDOWS.0\$NtUninstallKB979482$
2011-11-06 11:30:43 ----HDC---- C:\WINDOWS.0\$NtUninstallKB979309$
2011-11-06 11:29:28 ----HDC---- C:\WINDOWS.0\$NtUninstallKB978706$
2011-11-06 11:28:10 ----HDC---- C:\WINDOWS.0\$NtUninstallKB978601$
2011-11-06 11:26:50 ----HDC---- C:\WINDOWS.0\$NtUninstallKB978338$
2011-11-06 11:25:34 ----HDC---- C:\WINDOWS.0\$NtUninstallKB978037$
2011-11-06 11:24:25 ----HDC---- C:\WINDOWS.0\$NtUninstallKB977914$
2011-11-06 11:23:00 ----HDC---- C:\WINDOWS.0\$NtUninstallKB975713$
2011-11-06 11:21:37 ----HDC---- C:\WINDOWS.0\$NtUninstallKB975562$
2011-11-06 11:20:14 ----HDC---- C:\WINDOWS.0\$NtUninstallKB975560$
2011-11-06 11:18:45 ----HDC---- C:\WINDOWS.0\$NtUninstallKB975467$
2011-11-06 11:17:27 ----HDC---- C:\WINDOWS.0\$NtUninstallKB974571$
2011-11-06 11:16:08 ----HDC---- C:\WINDOWS.0\$NtUninstallKB974392$
2011-11-06 11:14:44 ----HDC---- C:\WINDOWS.0\$NtUninstallKB974318$
2011-11-06 11:13:22 ----HDC---- C:\WINDOWS.0\$NtUninstallKB974112$
2011-11-06 11:11:56 ----HDC---- C:\WINDOWS.0\$NtUninstallKB973869$
2011-11-06 11:10:37 ----HDC---- C:\WINDOWS.0\$NtUninstallKB973815$
2011-11-06 11:09:22 ----HDC---- C:\WINDOWS.0\$NtUninstallKB973687$
2011-11-06 11:08:00 ----HDC---- C:\WINDOWS.0\$NtUninstallKB973507$
2011-11-06 11:06:49 ----HDC---- C:\WINDOWS.0\$NtUninstallKB972270$
2011-11-06 11:05:28 ----HDC---- C:\WINDOWS.0\$NtUninstallKB971737$
2011-11-06 11:04:10 ----HDC---- C:\WINDOWS.0\$NtUninstallKB971657$
2011-11-06 11:02:50 ----HDC---- C:\WINDOWS.0\$NtUninstallKB971468$
2011-11-06 11:01:24 ----HDC---- C:\WINDOWS.0\$NtUninstallKB970430$
2011-11-06 11:00:04 ----HDC---- C:\WINDOWS.0\$NtUninstallKB970238$
2011-11-06 10:58:44 ----HDC---- C:\WINDOWS.0\$NtUninstallKB969059$
2011-11-06 10:57:04 ----HDC---- C:\WINDOWS.0\$NtUninstallKB968389$
2011-11-06 10:55:22 ----HDC---- C:\WINDOWS.0\$NtUninstallKB967715$
2011-11-06 10:53:50 ----HDC---- C:\WINDOWS.0\$NtUninstallKB961501$
2011-11-06 10:52:24 ----HDC---- C:\WINDOWS.0\$NtUninstallKB961118$
2011-11-06 10:50:57 ----HDC---- C:\WINDOWS.0\$NtUninstallKB960859$
2011-11-06 10:49:19 ----HDC---- C:\WINDOWS.0\$NtUninstallKB960803$
2011-11-06 10:47:52 ----HDC---- C:\WINDOWS.0\$NtUninstallKB960225$
2011-11-06 10:46:32 ----HDC---- C:\WINDOWS.0\$NtUninstallKB959426$
2011-11-06 10:45:10 ----HDC---- C:\WINDOWS.0\$NtUninstallKB958644$
2011-11-06 10:43:50 ----HDC---- C:\WINDOWS.0\$NtUninstallKB956844$
2011-11-06 10:42:29 ----HDC---- C:\WINDOWS.0\$NtUninstallKB956803$
2011-11-06 10:40:55 ----HDC---- C:\WINDOWS.0\$NtUninstallKB956802$
2011-11-06 10:39:21 ----HDC---- C:\WINDOWS.0\$NtUninstallKB956572$
2011-11-06 10:38:00 ----HDC---- C:\WINDOWS.0\$NtUninstallKB955759$
2011-11-06 10:36:39 ----HDC---- C:\WINDOWS.0\$NtUninstallKB973687_1$
2011-11-06 10:35:20 ----HDC---- C:\WINDOWS.0\$NtUninstallKB955069$
2011-11-06 10:33:58 ----HDC---- C:\WINDOWS.0\$NtUninstallKB952954$
2011-11-06 10:32:38 ----HDC---- C:\WINDOWS.0\$NtUninstallKB952287$
2011-11-06 10:31:08 ----HDC---- C:\WINDOWS.0\$NtUninstallKB952004$
2011-11-06 10:29:40 ----HDC---- C:\WINDOWS.0\$NtUninstallKB951748$
2011-11-06 10:28:15 ----HDC---- C:\WINDOWS.0\$NtUninstallKB951376-v2$
2011-11-06 10:26:53 ----HDC---- C:\WINDOWS.0\$NtUninstallKB950974$
2011-11-06 10:25:29 ----HDC---- C:\WINDOWS.0\$NtUninstallKB950762$
2011-11-06 10:23:59 ----HDC---- C:\WINDOWS.0\$NtUninstallKB923561$
2011-11-06 10:22:19 ----HDC---- C:\WINDOWS.0\$NtUninstallKB2229593$
2011-11-06 10:16:21 ----N---- C:\WINDOWS.0\system32\wmpdxm.dll
2011-11-06 10:16:21 ----N---- C:\WINDOWS.0\system32\wmpasf.dll
2011-11-06 10:16:20 ----N---- C:\WINDOWS.0\system32\wmp.dll
2011-11-06 10:16:20 ----N---- C:\WINDOWS.0\system32\wmerror.dll
2011-11-06 10:16:19 ----N---- C:\WINDOWS.0\system32\mp4sdmod.dll
2011-11-06 10:16:19 ----N---- C:\WINDOWS.0\system32\mp43dmod.dll
2011-11-06 10:16:17 ----N---- C:\WINDOWS.0\system32\spiisupd.exe
2011-11-06 10:16:17 ----N---- C:\WINDOWS.0\system32\smtpapi.dll
2011-11-06 10:16:17 ----N---- C:\WINDOWS.0\system32\rwnh.dll
2011-11-06 10:16:17 ----N---- C:\WINDOWS.0\system32\drivers\irbus.sys
2011-11-06 10:16:17 ----N---- C:\WINDOWS.0\system32\comsdupd.exe
2011-11-06 10:16:12 ----N---- C:\WINDOWS.0\system32\ati2dvaa.dll
2011-11-06 10:16:12 ----N---- C:\WINDOWS.0\system32\ati2cqag.dll
2011-11-06 10:16:12 ----N---- C:\WINDOWS.0\system32\aaclient.dll
2011-11-06 10:16:11 ----N---- C:\WINDOWS.0\system32\azroles.dll
2011-11-06 10:16:11 ----N---- C:\WINDOWS.0\system32\ativvaxx.dll
2011-11-06 10:16:11 ----N---- C:\WINDOWS.0\system32\ativtmxx.dll
2011-11-06 10:16:11 ----N---- C:\WINDOWS.0\system32\ati3duag.dll
2011-11-06 10:16:11 ----N---- C:\WINDOWS.0\system32\ati3d1ag.dll
2011-11-06 10:16:11 ----N---- C:\WINDOWS.0\system32\ati2dvag.dll
2011-11-06 10:16:10 ----N---- C:\WINDOWS.0\system32\dot3api.dll
2011-11-06 10:16:10 ----N---- C:\WINDOWS.0\system32\dimsroam.dll
2011-11-06 10:16:10 ----N---- C:\WINDOWS.0\system32\dimsntfy.dll
2011-11-06 10:16:10 ----N---- C:\WINDOWS.0\system32\dhcpqec.dll
2011-11-06 10:16:10 ----N---- C:\WINDOWS.0\system32\credssp.dll
2011-11-06 10:16:10 ----N---- C:\WINDOWS.0\system32\blastcln.exe
2011-11-06 10:16:10 ----N---- C:\WINDOWS.0\system32\bitsprx4.dll
2011-11-06 10:16:09 ----N---- C:\WINDOWS.0\system32\dot3ui.dll
2011-11-06 10:16:09 ----N---- C:\WINDOWS.0\system32\dot3svc.dll
2011-11-06 10:16:09 ----N---- C:\WINDOWS.0\system32\dot3msm.dll
2011-11-06 10:16:09 ----N---- C:\WINDOWS.0\system32\dot3gpclnt.dll
2011-11-06 10:16:09 ----N---- C:\WINDOWS.0\system32\dot3dlg.dll
2011-11-06 10:16:09 ----N---- C:\WINDOWS.0\system32\dot3cfg.dll
2011-11-06 10:16:08 ----N---- C:\WINDOWS.0\system32\eappprxy.dll
2011-11-06 10:16:08 ----N---- C:\WINDOWS.0\system32\eapphost.dll
2011-11-06 10:16:08 ----N---- C:\WINDOWS.0\system32\eappgnui.dll
2011-11-06 10:16:08 ----N---- C:\WINDOWS.0\system32\eappcfg.dll
2011-11-06 10:16:08 ----N---- C:\WINDOWS.0\system32\eapp3hst.dll
2011-11-06 10:16:08 ----N---- C:\WINDOWS.0\system32\eapolqec.dll
2011-11-06 10:16:07 ----N---- C:\WINDOWS.0\system32\eapsvc.dll
2011-11-06 10:16:07 ----N---- C:\WINDOWS.0\system32\eapqec.dll
2011-11-06 10:16:06 ----N---- C:\WINDOWS.0\system32\ieencode.dll
2011-11-06 10:16:06 ----N---- C:\WINDOWS.0\system32\hsfcisp2.dll
2011-11-06 10:16:03 ----N---- C:\WINDOWS.0\system32\kbdbhc.dll
2011-11-06 10:16:02 ----N---- C:\WINDOWS.0\system32\l2gpstore.dll
2011-11-06 10:16:02 ----N---- C:\WINDOWS.0\system32\kmsvc.dll
2011-11-06 10:16:02 ----N---- C:\WINDOWS.0\system32\kbdpash.dll
2011-11-06 10:16:02 ----N---- C:\WINDOWS.0\system32\kbdnepr.dll
2011-11-06 10:16:02 ----N---- C:\WINDOWS.0\system32\kbdiultn.dll
2011-11-06 10:16:01 ----N---- C:\WINDOWS.0\system32\mmcperf.exe
2011-11-06 10:16:01 ----N---- C:\WINDOWS.0\system32\mmcfxcommon.dll
2011-11-06 10:16:01 ----N---- C:\WINDOWS.0\system32\mmcex.dll
2011-11-06 10:16:01 ----N---- C:\WINDOWS.0\system32\microsoft.managementconsole.dll
2011-11-06 10:16:01 ----N---- C:\WINDOWS.0\system32\mdmxsdk.dll
2011-11-06 10:15:59 ----N---- C:\WINDOWS.0\system32\napstat.exe
2011-11-06 10:15:59 ----N---- C:\WINDOWS.0\system32\napmontr.dll
2011-11-06 10:15:59 ----N---- C:\WINDOWS.0\system32\napipsec.dll
2011-11-06 10:15:59 ----N---- C:\WINDOWS.0\system32\mtxparhd.dll
2011-11-06 10:15:59 ----N---- C:\WINDOWS.0\system32\msshavmsg.dll
2011-11-06 10:15:59 ----N---- C:\WINDOWS.0\system32\mssha.dll
2011-11-06 10:15:58 ----N---- C:\WINDOWS.0\system32\onex.dll
2011-11-06 10:15:57 ----N---- C:\WINDOWS.0\system32\slserv.exe
2011-11-06 10:15:57 ----N---- C:\WINDOWS.0\system32\slrundll.exe
2011-11-06 10:15:57 ----N---- C:\WINDOWS.0\system32\slgen.dll
2011-11-06 10:15:57 ----N---- C:\WINDOWS.0\system32\slextspk.dll
2011-11-06 10:15:57 ----N---- C:\WINDOWS.0\system32\slcoinst.dll
2011-11-06 10:15:57 ----N---- C:\WINDOWS.0\system32\setupn.exe
2011-11-06 10:15:57 ----N---- C:\WINDOWS.0\system32\s3gnb.dll
2011-11-06 10:15:57 ----N---- C:\WINDOWS.0\system32\rhttpaa.dll
2011-11-06 10:15:57 ----N---- C:\WINDOWS.0\system32\rasqec.dll
2011-11-06 10:15:57 ----N---- C:\WINDOWS.0\system32\qutil.dll
2011-11-06 10:15:57 ----N---- C:\WINDOWS.0\system32\qcliprov.dll
2011-11-06 10:15:57 ----N---- C:\WINDOWS.0\system32\qagentrt.dll
2011-11-06 10:15:57 ----N---- C:\WINDOWS.0\system32\qagent.dll
2011-11-06 10:15:55 ----N---- C:\WINDOWS.0\system32\verclsid.exe
2011-11-06 10:15:55 ----N---- C:\WINDOWS.0\system32\tspkg.dll
2011-11-06 10:15:55 ----N---- C:\WINDOWS.0\system32\tsgqec.dll
2011-11-06 10:15:54 ----N---- C:\WINDOWS.0\system32\wlanapi.dll
2011-11-06 10:15:53 ----N---- C:\WINDOWS.0\slrundll.exe
2011-11-06 10:15:51 ----D---- C:\WINDOWS.0\l2schemas
2011-11-06 10:15:50 ----D---- C:\WINDOWS.0\system32\cs
2011-11-06 10:15:50 ----D---- C:\WINDOWS.0\system32\bits
2011-11-06 10:11:35 ----N---- C:\WINDOWS.0\system32\asferror.dll
2011-11-06 10:11:00 ----N---- C:\WINDOWS.0\system32\mplay32.exe
2011-11-06 10:11:00 ----N---- C:\WINDOWS.0\system32\mpg4dmod.dll
2011-11-06 10:10:23 ----N---- C:\WINDOWS.0\system32\shmedia.dll
2011-11-06 10:10:05 ----N---- C:\WINDOWS.0\system32\wmpcore.dll
2011-11-06 10:10:05 ----N---- C:\WINDOWS.0\system32\wmpcd.dll
2011-11-06 10:10:04 ----N---- C:\WINDOWS.0\system32\wmstream.dll
2011-11-06 10:10:04 ----N---- C:\WINDOWS.0\system32\wmsdmoe.dll
2011-11-06 10:10:04 ----N---- C:\WINDOWS.0\system32\wmpui.dll
2011-11-06 10:10:04 ----N---- C:\WINDOWS.0\system32\wmpshell.dll
2011-11-06 10:09:59 ----N---- C:\WINDOWS.0\system32\drivers\ati1pdxx.sys
2011-11-06 10:09:59 ----N---- C:\WINDOWS.0\system32\drivers\ati1mdxx.sys
2011-11-06 10:09:59 ----N---- C:\WINDOWS.0\system32\drivers\ati1btxx.sys
2011-11-06 10:09:59 ----N---- C:\WINDOWS.0\system32\drivers\amdagp.sys
2011-11-06 10:09:59 ----N---- C:\WINDOWS.0\system32\drivers\alim1541.sys
2011-11-06 10:09:59 ----N---- C:\WINDOWS.0\system32\drivers\agpcpq.sys
2011-11-06 10:09:59 ----N---- C:\WINDOWS.0\system32\drivers\adv11nt5.dll
2011-11-06 10:09:59 ----N---- C:\WINDOWS.0\system32\drivers\adv09nt5.dll
2011-11-06 10:09:59 ----N---- C:\WINDOWS.0\system32\drivers\adv08nt5.dll
2011-11-06 10:09:59 ----N---- C:\WINDOWS.0\system32\drivers\adv07nt5.dll
2011-11-06 10:09:59 ----N---- C:\WINDOWS.0\system32\drivers\adv05nt5.dll
2011-11-06 10:09:59 ----N---- C:\WINDOWS.0\system32\drivers\adv02nt5.dll
2011-11-06 10:09:59 ----N---- C:\WINDOWS.0\system32\drivers\adv01nt5.dll
2011-11-06 10:09:59 ----D---- C:\WINDOWS.0\network diagnostic
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\atv01nt5.dll
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\atinxsxx.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\atinxbxx.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\atintuxx.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\atinttxx.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\atinsnxx.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\atinrvxx.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\atinraxx.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\atinpdxx.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\atinmdxx.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\atinbtxx.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\ati2mtag.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\ati2mtaa.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\ati1xsxx.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\ati1xbxx.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\ati1tuxx.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\ati1ttxx.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\ati1snxx.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\ati1rvxx.sys
2011-11-06 10:09:58 ----N---- C:\WINDOWS.0\system32\drivers\ati1raxx.sys
2011-11-06 10:09:57 ----N---- C:\WINDOWS.0\system32\drivers\ch7xxnt5.dll
2011-11-06 10:09:57 ----N---- C:\WINDOWS.0\system32\drivers\hdaudbus.sys
2011-11-06 10:09:57 ----N---- C:\WINDOWS.0\system32\drivers\gagp30kx.sys
2011-11-06 10:09:57 ----N---- C:\WINDOWS.0\system32\drivers\bthusb.sys
2011-11-06 10:09:57 ----N---- C:\WINDOWS.0\system32\drivers\bthprint.sys
2011-11-06 10:09:57 ----N---- C:\WINDOWS.0\system32\drivers\bthpan.sys
2011-11-06 10:09:57 ----N---- C:\WINDOWS.0\system32\drivers\bthmodem.sys
2011-11-06 10:09:57 ----N---- C:\WINDOWS.0\system32\drivers\bthenum.sys
2011-11-06 10:09:57 ----N---- C:\WINDOWS.0\system32\drivers\atv10nt5.dll
2011-11-06 10:09:57 ----N---- C:\WINDOWS.0\system32\drivers\atv06nt5.dll
2011-11-06 10:09:57 ----N---- C:\WINDOWS.0\system32\drivers\atv04nt5.dll
2011-11-06 10:09:57 ----N---- C:\WINDOWS.0\system32\drivers\atv02nt5.dll
2011-11-06 10:09:56 ----N---- C:\WINDOWS.0\system32\drivers\mdmxsdk.sys
2011-11-06 10:09:56 ----N---- C:\WINDOWS.0\system32\drivers\hsfdpsp2.sys
2011-11-06 10:09:56 ----N---- C:\WINDOWS.0\system32\drivers\hsfcxts2.sys
2011-11-06 10:09:56 ----N---- C:\WINDOWS.0\system32\drivers\hsfbs2s2.sys
2011-11-06 10:09:56 ----N---- C:\WINDOWS.0\system32\drivers\hidir.sys
2011-11-06 10:09:56 ----N---- C:\WINDOWS.0\system32\drivers\hidbth.sys
2011-11-06 10:09:55 ----N---- C:\WINDOWS.0\system32\drivers\s3gnbm.sys
2011-11-06 10:09:55 ----N---- C:\WINDOWS.0\system32\drivers\rndismpx.sys
2011-11-06 10:09:55 ----N---- C:\WINDOWS.0\system32\drivers\rfcomm.sys
2011-11-06 10:09:55 ----N---- C:\WINDOWS.0\system32\drivers\recagent.sys
2011-11-06 10:09:55 ----N---- C:\WINDOWS.0\system32\drivers\ntmtlfax.sys
2011-11-06 10:09:55 ----N---- C:\WINDOWS.0\system32\drivers\mutohpen.sys
2011-11-06 10:09:55 ----N---- C:\WINDOWS.0\system32\drivers\mtxparhm.sys
2011-11-06 10:09:55 ----N---- C:\WINDOWS.0\system32\drivers\mtlstrm.sys
2011-11-06 10:09:55 ----N---- C:\WINDOWS.0\system32\drivers\mtlmnt5.sys
2011-11-06 10:09:54 ----N---- C:\WINDOWS.0\system32\drivers\usb8023x.sys
2011-11-06 10:09:54 ----N---- C:\WINDOWS.0\system32\drivers\uagp35.sys
2011-11-06 10:09:54 ----N---- C:\WINDOWS.0\system32\drivers\smbali.sys
2011-11-06 10:09:54 ----N---- C:\WINDOWS.0\system32\drivers\slwdmsup.sys
2011-11-06 10:09:54 ----N---- C:\WINDOWS.0\system32\drivers\slnthal.sys
2011-11-06 10:09:54 ----N---- C:\WINDOWS.0\system32\drivers\slntamr.sys
2011-11-06 10:09:54 ----N---- C:\WINDOWS.0\system32\drivers\slnt7554.sys
2011-11-06 10:09:54 ----N---- C:\WINDOWS.0\system32\drivers\sisagp.sys
2011-11-06 10:09:54 ----N---- C:\WINDOWS.0\system32\drivers\siint5.dll
2011-11-06 10:09:54 ----N---- C:\WINDOWS.0\system32\drivers\sffp_mmc.sys
2011-11-06 10:09:53 ----N---- C:\WINDOWS.0\system32\drivers\watv10nt.sys
2011-11-06 10:09:53 ----N---- C:\WINDOWS.0\system32\drivers\watv06nt.sys
2011-11-06 10:09:53 ----N---- C:\WINDOWS.0\system32\drivers\wadv11nt.sys
2011-11-06 10:09:53 ----N---- C:\WINDOWS.0\system32\drivers\wadv09nt.sys
2011-11-06 10:09:53 ----N---- C:\WINDOWS.0\system32\drivers\wadv08nt.sys
2011-11-06 10:09:53 ----N---- C:\WINDOWS.0\system32\drivers\wadv07nt.sys
2011-11-06 10:09:53 ----N---- C:\WINDOWS.0\system32\drivers\wacompen.sys
2011-11-06 10:09:53 ----N---- C:\WINDOWS.0\system32\drivers\viaagp.sys
2011-11-06 10:09:53 ----N---- C:\WINDOWS.0\system32\drivers\vchnt5.dll
2011-11-06 10:09:53 ----N---- C:\WINDOWS.0\system32\drivers\usbvideo.sys
2011-11-06 10:03:30 ----HDC---- C:\WINDOWS.0\$NtServicePackUninstall$
2011-11-02 23:20:40 ----A---- C:\WINDOWS.0\avastSS.scr
2011-11-02 22:57:40 ----D---- C:\Program Files\AVAST Software
2011-11-02 22:57:40 ----D---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\AVAST Software
2011-11-02 21:05:29 ----D---- C:\WINDOWS.0\srchasst
2011-11-02 21:05:29 ----D---- C:\Program Files\xerox
2011-11-02 21:05:28 ----D---- C:\WINDOWS.0\system32\xircom
2011-11-02 21:05:27 ----D---- C:\WINDOWS.0\msagent
2011-11-02 20:43:30 ----A---- C:\Boot.bak
2011-11-02 20:43:23 ----RASHD---- C:\cmdcons
2011-11-02 19:21:16 ----D---- C:\Program Files\trend micro
2011-10-30 13:32:42 ----D---- C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\AVG2012
2011-10-30 13:31:16 ----D---- C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\AVG Secure Search
2011-10-30 13:29:05 ----D---- C:\Config.Msi
2011-10-30 12:45:05 ----D---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\MFAData
2011-10-29 18:13:15 ----A---- C:\WINDOWS.0\BDTSupport.dll
2011-10-29 18:13:14 ----A---- C:\WINDOWS.0\SGDetectionTool.dll
2011-10-29 18:13:14 ----A---- C:\WINDOWS.0\PCTBDRes.dll
2011-10-29 18:13:14 ----A---- C:\WINDOWS.0\PCTBDCore.dll
2011-10-29 18:07:50 ----A---- C:\WINDOWS.0\system32\drivers\Cat.DB
2011-10-29 18:06:19 ----D---- C:\Program Files\PC Tools Security
2011-10-29 18:06:18 ----AD---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\TEMP
2011-10-29 11:00:03 ----A---- C:\WINDOWS.0\btc_client_iplist.txt
2011-10-28 22:30:10 ----A---- C:\WINDOWS.0\iecheck_iplist.txt
2011-10-28 22:28:54 ----A---- C:\WINDOWS.0\iplist.txt
2011-10-28 22:27:38 ----A---- C:\WINDOWS.0\front_ip_list.txt
2011-10-28 22:14:39 ----A---- C:\WINDOWS.0\winlog-ids.txt
2011-10-28 22:14:39 ----A---- C:\WINDOWS.0\winlog-dirs.txt
2011-10-26 18:19:34 ----D---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\ICQ
2011-10-26 18:18:52 ----D---- C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\ICQ
2011-10-21 21:43:55 ----D---- C:\WINDOWS.0\Minidump
2011-10-21 21:15:00 ----D---- C:\WINDOWS.0\ie8updates
2011-10-21 21:12:21 ----D---- C:\WINDOWS.0\WBEM
2011-10-21 21:09:44 ----HDC---- C:\WINDOWS.0\ie8
2011-10-21 21:09:44 ----D---- C:\WINDOWS.0\system32\cs-CZ
2011-10-21 21:08:24 ----D---- C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\ESET
2011-10-21 21:00:55 ----A---- C:\WINDOWS.0\system32\javaws.exe
2011-10-21 21:00:55 ----A---- C:\WINDOWS.0\system32\javaw.exe
2011-10-21 21:00:54 ----A---- C:\WINDOWS.0\system32\java.exe
2011-10-21 20:56:12 ----A---- C:\WINDOWS.0\system32\MRT.exe
2011-10-21 05:44:07 ----HD---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Common Files
2011-10-20 20:51:15 ----D---- C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Babylon
2011-10-20 20:51:15 ----D---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Babylon
2011-10-16 20:41:50 ----AH---- C:\WINDOWS.0\system32\Converter_sysquict.dat
2011-10-16 20:41:42 ----D---- C:\Program Files\Agree Free MP3 to M4A AAC Converter
2011-10-14 19:31:59 ----HDC---- C:\WINDOWS.0\$NtUninstallKB919880$
2011-10-14 19:11:00 ----D---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\SolidWorks
2011-10-14 19:01:56 ----D---- C:\SolidWorks Data
2011-10-14 18:59:42 ----D---- C:\WINDOWS.0\SxsCaPendDel
2011-10-14 18:39:43 ----D---- C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\EDrawings
2011-10-14 18:38:53 ----D---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\FLEXnet
2011-10-14 18:38:26 ----D---- C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\DassaultSystemes
2011-10-14 18:38:26 ----D---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\DassaultSystemes
2011-10-14 18:29:37 ----A---- C:\WINDOWS.0\eDrawingOfficeAutomator.INI
2011-10-14 18:29:33 ----D---- C:\Program Files\Common Files\SolidWorks Shared
2011-10-14 18:28:50 ----D---- C:\Program Files\SolidWorks Corp
2011-10-14 18:26:52 ----D---- C:\Program Files\Common Files\Manažer instalací SolidWorks
2011-10-14 18:26:28 ----D---- C:\WINDOWS.0\SolidWorks
2011-10-14 18:26:22 ----D---- C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\SolidWorks
2011-10-14 18:24:28 ----D---- C:\WINDOWS.0\system32\appmgmt
2011-10-12 19:07:06 ----D---- C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Skype
2011-10-12 19:06:50 ----D---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Skype
2011-10-11 20:28:25 ----D---- C:\Program Files\iTunes

======List of files/folders modified in the last 1 month======

2011-11-06 22:12:38 ----D---- C:\WINDOWS.0
2011-11-06 22:12:31 ----HD---- C:\WINDOWS.0\inf
2011-11-06 22:12:30 ----HD---- C:\WINDOWS.0\$hf_mig$
2011-11-06 22:12:03 ----RSHDC---- C:\WINDOWS.0\system32\dllcache
2011-11-06 22:12:03 ----D---- C:\WINDOWS.0\system32
2011-11-06 22:11:46 ----D---- C:\WINDOWS.0\system32\CatRoot2
2011-11-06 22:07:17 ----D---- C:\WINDOWS.0\system32\drivers
2011-11-06 22:06:53 ----SHD---- C:\WINDOWS.0\Installer
2011-11-06 22:06:52 ----D---- C:\WINDOWS.0\WinSxS
2011-11-06 22:01:01 ----D---- C:\Program Files\Microsoft Office
2011-11-06 22:00:20 ----RSD---- C:\WINDOWS.0\Fonts
2011-11-06 22:00:13 ----D---- C:\Program Files\Common Files\DESIGNER
2011-11-06 22:00:06 ----D---- C:\Program Files
2011-11-06 21:58:47 ----D---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Microsoft Help
2011-11-06 21:39:27 ----D---- C:\Program Files\Bonjour
2011-11-06 21:36:44 ----D---- C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Winamp
2011-11-06 21:36:43 ----D---- C:\WINDOWS.0\Debug
2011-11-06 21:22:47 ----D---- C:\Documents and Settings
2011-11-06 21:05:05 ----D---- C:\WINDOWS.0\system32\Restore
2011-11-06 20:11:14 ----D---- C:\WINDOWS.0\system32\drivers\etc
2011-11-06 20:11:10 ----A---- C:\WINDOWS.0\system32\PerfStringBackup.INI
2011-11-06 12:17:21 ----A---- C:\WINDOWS.0\system.ini
2011-11-06 12:09:43 ----D---- C:\WINDOWS.0\AppPatch
2011-11-06 12:09:38 ----D---- C:\Program Files\Common Files
2011-11-06 11:49:31 ----A---- C:\WINDOWS.0\win.ini
2011-11-06 11:49:22 ----SD---- C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Microsoft
2011-11-06 11:49:22 ----SD---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Microsoft
2011-11-06 11:46:52 ----D---- C:\WINDOWS.0\security
2011-11-06 11:46:42 ----D---- C:\WINDOWS.0\system32\wbem
2011-11-06 11:46:41 ----D---- C:\WINDOWS.0\system32\Setup
2011-11-06 11:40:11 ----D---- C:\WINDOWS.0\system32\CatRoot
2011-11-06 10:16:34 ----D---- C:\Program Files\Messenger
2011-11-06 10:16:33 ----D---- C:\WINDOWS.0\Help
2011-11-06 10:16:30 ----D---- C:\Program Files\Windows Media Player
2011-11-06 10:16:19 ----D---- C:\WINDOWS.0\ehome
2011-11-06 10:16:17 ----D---- C:\WINDOWS.0\system32\inetsrv
2011-11-06 10:16:16 ----D---- C:\WINDOWS.0\ime
2011-11-06 10:15:52 ----D---- C:\WINDOWS.0\system32\usmt
2011-11-06 10:15:51 ----D---- C:\Program Files\Internet Explorer
2011-11-06 10:15:50 ----D---- C:\WINDOWS.0\PeerNet
2011-11-06 10:15:49 ----D---- C:\Program Files\Movie Maker
2011-11-06 10:12:20 ----D---- C:\WINDOWS.0\ServicePackFiles
2011-11-06 10:12:08 ----D---- C:\WINDOWS.0\system32\npp
2011-11-06 10:12:08 ----D---- C:\Program Files\NetMeeting
2011-11-06 10:12:06 ----D---- C:\WINDOWS.0\system32\Com
2011-11-06 10:12:03 ----D---- C:\Program Files\Windows NT
2011-11-06 10:12:03 ----D---- C:\Program Files\Outlook Express
2011-11-06 10:11:59 ----D---- C:\Program Files\Common Files\System
2011-11-06 10:11:38 ----D---- C:\WINDOWS.0\system32\oobe
2011-11-06 10:11:36 ----D---- C:\WINDOWS.0\system
2011-11-06 10:08:08 ----D---- C:\WINDOWS.0\system32\ReinstallBackups
2011-11-02 21:04:27 ----D---- C:\WINDOWS.0\system32\config
2011-11-02 20:43:30 ----RASH---- C:\boot.ini
2011-11-02 19:46:32 ----D---- C:\Program Files\DsNET Corp
2011-10-29 18:58:14 ----SHD---- C:\System Volume Information
2011-10-29 18:10:10 ----D---- C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\BitTorrent
2011-10-26 18:21:30 ----HD---- C:\Program Files\InstallShield Installation Information
2011-10-21 21:54:32 ----D---- C:\Program Files\iPod
2011-10-21 21:46:14 ----D---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Aiseesoft Studio
2011-10-21 21:11:57 ----D---- C:\WINDOWS.0\Media
2011-10-21 21:01:17 ----D---- C:\Program Files\Common Files\Java
2011-10-21 21:00:30 ----D---- C:\Program Files\Java
2011-10-21 14:59:54 ----D---- C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\DiskAid
2011-10-21 06:15:25 ----D---- C:\Program Files\Opera
2011-10-16 20:41:55 ----D---- C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\GetRightToGo
2011-10-16 09:44:12 ----D---- C:\Temp
2011-10-15 08:39:01 ----D---- C:\WINDOWS.0\Microsoft.NET
2011-10-15 08:39:00 ----RSHD---- C:\WINDOWS.0\assembly
2011-10-14 19:06:00 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-10-14 19:05:54 ----D---- C:\Program Files\Microsoft Visual Studio 8
2011-10-14 19:03:45 ----D---- C:\Program Files\MSECache
2011-10-12 19:07:26 ----RD---- C:\Program Files\Skype
2011-10-11 20:25:36 ----DC---- C:\WINDOWS.0\system32\DRVSTORE

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Filtr Intel sběrnice AGP; C:\WINDOWS.0\system32\DRIVERS\agp440.sys [2008-04-14 42368]
R0 PxHelp20;PxHelp20; C:\WINDOWS.0\System32\Drivers\PxHelp20.sys [2011-03-04 45648]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS.0\system32\drivers\Aavmker4.sys [2011-09-06 30808]
R1 aswRdr;aswRdr; C:\WINDOWS.0\system32\drivers\aswRdr.sys [2011-09-06 34392]
R1 aswSP;aswSP; C:\WINDOWS.0\system32\drivers\aswSP.sys [2011-09-06 320856]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS.0\system32\drivers\aswTdi.sys [2011-09-06 52568]
R1 ehdrv;ehdrv; C:\WINDOWS.0\system32\DRIVERS\ehdrv.sys [2011-08-04 118104]
R1 epfwtdi;epfwtdi; C:\WINDOWS.0\system32\DRIVERS\epfwtdi.sys [2011-08-04 61936]
R1 epfwtdir;epfwtdir; C:\WINDOWS.0\system32\DRIVERS\epfwtdir.sys [2011-08-04 103112]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS.0\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS.0\System32\drivers\ws2ifsl.sys [2002-12-05 12032]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS.0\system32\drivers\aswFsBlk.sys [2011-09-06 20568]
R2 aswMon2;aswMon2; C:\WINDOWS.0\system32\drivers\aswMon2.sys [2011-09-06 110552]
R2 epfw;epfw; C:\WINDOWS.0\system32\DRIVERS\epfw.sys [2011-08-04 147480]
R3 aeaudio;aeaudio; C:\WINDOWS.0\system32\drivers\aeaudio.sys [2002-08-22 98752]
R3 E100B;Intel(R) PRO Network Connection Driver; C:\WINDOWS.0\system32\DRIVERS\e100b325.sys [2007-11-16 165496]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS.0\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS.0\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS.0\system32\DRIVERS\mouhid.sys [2006-01-16 12160]
R3 nv;nv; C:\WINDOWS.0\system32\DRIVERS\nv4_mini.sys [2006-03-09 3650368]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS.0\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 smwdm;smwdm; C:\WINDOWS.0\system32\drivers\smwdm.sys [2002-08-23 549672]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS.0\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS.0\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S1 aswSnx;aswSnx; C:\WINDOWS.0\system32\drivers\aswSnx.sys [2011-09-06 442200]
S3 cpudrv;cpudrv; \??\C:\Program Files\SystemRequirementsLab\cpudrv.sys []
S3 eamon;eamon; C:\WINDOWS.0\system32\DRIVERS\eamon.sys [2011-08-09 154136]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS.0\System32\Drivers\usbaapl.sys [2011-05-10 42496]
S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS.0\system32\DRIVERS\lgusbbus.sys [2008-11-11 13056]
S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS.0\system32\DRIVERS\lgusbdiag.sys [2008-11-11 19968]
S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS.0\system32\DRIVERS\lgusbmodem.sys [2008-11-11 24832]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS.0\system32\DRIVERS\usbscan.sys [2008-04-14 15104]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2011-10-09 55144]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-09-06 44768]
R2 Browser Defender Update Service;Browser Defender Update Service; C:\Program Files\PC Tools Security\BDT\BDTUpdateService.exe [2011-05-20 337872]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\WINDOWS.0\system32\IProsetMonitor.exe [2011-04-11 112800]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-10-03 153376]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS.0\system32\nvsvc32.exe [2006-03-09 143436]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS.0\system32\PnkBstrA.exe [2011-07-11 75064]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-07-15 45056]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS.0\system32\wdfmgr.exe [2005-01-28 38912]
S2 vToolbarUpdater;vToolbarUpdater; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS.0\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS.0\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-10-14 1044816]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-02-08 136120]
S3 idsvc;Windows CardSpace; c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2011-10-09 821608]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 msvsmon80;Visual Studio 2005 Remote Debugger; C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe [2005-09-23 2799808]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Re: Facebook vrus - prosím o pomoc

Napsal: 07 lis 2011 08:36
od vyosek
:arrow: Otevrete si poznamkovy blok
  • Start->spustit->notepad
  • Vlozte text nize

  • Kód: Vybrat vše

    @ECHO OFF
reg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{95289393-33EA-4F8D-B952-483415B9C955}" /f
del "C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll"
reg add "HKCU\Software\Microsoft\Internet Explorer\Search" /v "SearchAssistant" /t REG_SZ /d "" /f
reg del "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}" /f
reg del "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}" /f
del "C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Mozilla\Firefox\Profiles\frgg680j.default\searchplugins\aol-web-search.xml"
del "C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Mozilla\Firefox\Profiles\frgg680j.default\searchplugins\askcom.xml"
del "C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Mozilla\Firefox\Profiles\frgg680j.default\searchplugins\icq-search.xml"
del "C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Mozilla\Firefox\Profiles\frgg680j.default\searchplugins\icqplugin-1.xml"
del "C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Mozilla\Firefox\Profiles\frgg680j.default\searchplugins\icqplugin-2.xml"
del "C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Mozilla\Firefox\Profiles\frgg680j.default\searchplugins\icqplugin-3.xml"
del "C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Mozilla\Firefox\Profiles\frgg680j.default\searchplugins\icqplugin-4.xml"
del "C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Mozilla\Firefox\Profiles\frgg680j.default\searchplugins\icqplugin.gif"
del "C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Mozilla\Firefox\Profiles\frgg680j.default\searchplugins\icqplugin.src"
del "C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Mozilla\Firefox\Profiles\frgg680j.default\searchplugins\icqplugin.xml"
del "C:\Documents and Settings\Honza.HONZA-714D35E86\Data aplikací\Mozilla\Firefox\Profiles\frgg680j.default\searchplugins\qip-search.xml"
sc stop vToolbarUpdater
sc delete vToolbarUpdater
sc stop gusvc
sc delete gusvc
  • Soubor ulozte jako del.bat
  • Pri ukladani dejte ulozit jako typ Vsechny soubory (nastevni je uvedeno na obrazku nize)
  • Obrázek
  • Zavrit notepad a spustit dvojklikem del.bat
  • Okno jen problikne a provede mazani - soubor muzete smazat
:arrow: Jinak OK

Re: Facebook vrus - prosím o pomoc

Napsal: 07 lis 2011 14:26
od Miri$
Takže po alikaci této dávky již není třeba dalších kroků k odstranění virus je smazán.

Děkuji za ochotu a super přístup. Rychlost a pružnost vašeho jednání mě příjmně překvapila. Děkuji a přeji hezký den.

Re: Facebook vrus - prosím o pomoc

Napsal: 07 lis 2011 14:28
od vyosek
Nemate zac, rad jsem pomohl :worship: Zase nekdy Obrázek


A na rozloucenou Vam zahraje nase kapela :guitar: :150: :151: :152: :153: :154: :196:
Všechny časy jsou v UTC+01:00
Stránka 2 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz