VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

posím o preventivku mal som security tol

https://forum.viry.cz:443/viewtopic.php?t=106234

Stránka 3 z 3

Re: posím o preventivku mal som security tol

Napsal: 05 lis 2010 14:18
od ruso
OTL logfile created on: 5. 11. 2010 14:05:25 - Run 2
OTL by OldTimer - Version 3.2.17.2 Folder = C:\Users\Peťo\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18975)
Locale: 0000041B | Country: Slovenská republika | Language: SKY | Date Format: d. M. yyyy

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 50,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 77,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 225,71 Gb Total Space | 151,18 Gb Free Space | 66,98% Space Free | Partition Type: NTFS
Drive D: | 7,18 Gb Total Space | 1,63 Gb Free Space | 22,78% Space Free | Partition Type: NTFS
Drive F: | 111,79 Gb Total Space | 62,12 Gb Free Space | 55,57% Space Free | Partition Type: NTFS

Computer Name: PETO | User Name: Peťo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2010/11/05 11:55:59 | 000,576,000 | ---- | M] (OldTimer Tools) -- C:\Users\Peťo\Desktop\OTL.exe
PRC - [2010/11/02 21:26:10 | 000,126,976 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
PRC - [2010/11/02 21:24:27 | 000,030,192 | ---- | M] (Google) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
PRC - [2010/10/22 10:26:19 | 000,134,808 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\1.2.183.39\GoogleCrashHandler.exe
PRC - [2010/10/22 10:06:44 | 000,134,808 | ---- | M] (Google Inc.) -- C:\Users\Peťo\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
PRC - [2010/09/08 05:25:50 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
PRC - [2010/09/07 16:12:02 | 002,838,912 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010/09/07 16:11:59 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010/01/12 19:22:48 | 000,039,408 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
PRC - [2009/12/22 18:50:54 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009/10/11 04:17:36 | 000,055,072 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\jureg.exe
PRC - [2009/04/11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008/07/24 10:40:00 | 003,073,424 | ---- | M] (Alibaba) -- C:\Program Files\Alibaba\TradeManager\TradeManager.exe
PRC - [2008/01/29 17:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
PRC - [2008/01/19 08:38:38 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
PRC - [2008/01/19 08:33:27 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
PRC - [2007/09/26 16:23:48 | 000,554,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
PRC - [2007/07/06 12:06:52 | 004,669,440 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2007/06/14 19:31:36 | 000,355,096 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2007/06/14 19:31:32 | 000,178,968 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2007/04/18 16:01:34 | 000,065,536 | ---- | M] (Hewlett-Packard Company) -- C:\hp\support\hpsysdrv.exe
PRC - [2007/02/15 12:59:00 | 000,118,784 | ---- | M] (OsdMaestro) -- C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
PRC - [2007/02/09 11:17:30 | 000,694,008 | ---- | M] () -- C:\Program Files\Portrait Displays\Pivot Software\Floater.exe
PRC - [2007/02/09 11:17:26 | 000,694,008 | ---- | M] () -- C:\Program Files\Portrait Displays\Pivot Software\wpCtrl.exe
PRC - [2007/01/11 12:26:56 | 000,063,112 | ---- | M] (CANON INC.) -- C:\Windows\System32\CNAB4RPK.EXE


========== Modules (SafeList) ==========

MOD - [2010/11/05 11:55:59 | 000,576,000 | ---- | M] (OldTimer Tools) -- C:\Users\Peťo\Desktop\OTL.exe
MOD - [2010/08/31 16:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- C:\ComboFix\PEV.cfx -- (PEVSystemStart)
SRV - File not found [Auto | Stopped] -- c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (LiveUpdate Notice Ex)
SRV - File not found [Auto | Stopped] -- C:\Program Files\Portrait Displays\HP My Display\dtsrvc.exe -- (DTSRVC)
SRV - [2010/11/02 21:24:27 | 000,030,192 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe -- (GoogleDesktopManager-051210-111108)
SRV - [2010/09/22 23:21:24 | 001,493,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
SRV - [2010/09/22 15:33:04 | 000,051,040 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV - [2010/09/07 16:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010/09/07 16:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010/09/07 16:11:59 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010/03/18 12:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/15 11:50:36 | 001,142,224 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - [2010/03/11 11:09:22 | 000,366,840 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2009/09/25 02:27:04 | 000,793,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache)
SRV - [2008/01/29 17:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe -- (LiveUpdate Notice Service)
SRV - [2008/01/19 08:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/09/26 16:23:48 | 002,999,664 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE -- (LiveUpdate)
SRV - [2007/09/26 16:23:48 | 000,554,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe -- (Plánovač automatické aktualizace LiveUpdate)
SRV - [2007/06/14 19:31:36 | 000,355,096 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\PEO~1\AppData\Local\Temp\cpuz132\cpuz132_x32.sys -- (cpuz132)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2010/09/22 23:21:24 | 000,039,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\fssfltr.sys -- (fssfltr)
DRV - [2010/09/07 15:52:25 | 000,046,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2010/09/07 15:52:03 | 000,165,584 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2010/09/07 15:47:46 | 000,023,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2010/09/07 15:47:30 | 000,050,768 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2010/09/07 15:47:07 | 000,017,744 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010/03/29 10:06:14 | 000,218,592 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\PCTCore.sys -- (PCTCore)
DRV - [2009/04/11 05:45:24 | 000,113,664 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rmcast.sys -- (RMCAST) RMCAST (Pgm)
DRV - [2009/03/16 12:09:46 | 000,022,528 | ---- | M] (Feitian Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rockey4.sys -- (ROCKEYNT)
DRV - [2009/03/16 12:09:46 | 000,013,824 | ---- | M] (Feitian Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Rockey4USB.sys -- (Rockey_USB)
DRV - [2008/01/19 07:14:09 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\scsiscan.sys -- (scsiscan)
DRV - [2007/10/01 09:21:08 | 001,129,344 | ---- | M] (Hauppauge Computer Works) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HCW85BDA.sys -- (HCW85BDA)
DRV - [2007/08/28 01:59:00 | 007,574,976 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2007/07/31 17:45:50 | 000,076,800 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ser2pl.sys -- (Ser2pl)
DRV - [2007/07/11 11:21:00 | 001,793,880 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007/06/14 21:30:28 | 000,304,920 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\iastor.sys -- (iaStor)
DRV - [2007/03/26 10:54:28 | 000,005,376 | --S- | M] (Gteko Ltd.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\hpsunidr.sys -- (hpsunidr)
DRV - [2006/11/02 10:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300)
DRV - [2006/11/02 10:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx)
DRV - [2006/11/02 10:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor)
DRV - [2006/11/02 10:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci)
DRV - [2006/11/02 10:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci)
DRV - [2006/11/02 10:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV)
DRV - [2006/11/02 10:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320)
DRV - [2006/11/02 10:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2)
DRV - [2006/11/02 10:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid)
DRV - [2006/11/02 10:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx)
DRV - [2006/11/02 10:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata)
DRV - [2006/11/02 10:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m)
DRV - [2006/11/02 10:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid)
DRV - [2006/11/02 10:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960)
DRV - [2006/11/02 10:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp)
DRV - [2006/11/02 10:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4)
DRV - [2006/11/02 10:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor)
DRV - [2006/11/02 10:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx)
DRV - [2006/11/02 10:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas)
DRV - [2006/11/02 10:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI)
DRV - [2006/11/02 10:50:10 | 000,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2)
DRV - [2006/11/02 10:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs)
DRV - [2006/11/02 10:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc)
DRV - [2006/11/02 10:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid)
DRV - [2006/11/02 10:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi)
DRV - [2006/11/02 10:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS)
DRV - [2006/11/02 10:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx)
DRV - [2006/11/02 10:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC)
DRV - [2006/11/02 10:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3)
DRV - [2006/11/02 10:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x)
DRV - [2006/11/02 10:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi)
DRV - [2006/11/02 10:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas)
DRV - [2006/11/02 10:49:30 | 000,017,512 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide)
DRV - [2006/11/02 10:49:28 | 000,016,488 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide)
DRV - [2006/11/02 10:49:20 | 000,014,952 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide)
DRV - [2006/11/02 09:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV - [2006/11/02 09:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer)
DRV - [2006/11/02 09:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp)
DRV - [2006/11/02 09:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo)
DRV - [2006/11/02 09:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm)
DRV - [2006/11/02 09:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm)
DRV - [2006/11/02 08:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi)
DRV - [2006/11/02 08:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1807514103-992746668-557511064-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.centrum.sk/http://www.elzarus.sk/ [binary data]
IE - HKU\S-1-5-21-1807514103-992746668-557511064-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
IE - HKU\S-1-5-21-1807514103-992746668-557511064-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..\URLSearchHook: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-1807514103-992746668-557511064-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.google.sk/"
FF - prefs.js..extensions.enabledItems: {000a9d1c-beef-4f90-9363-039d445309b8}:0.5.36.0
FF - prefs.js..keyword.URL: "http://www.google.com/search?sourceid=n ... t&hl=sk&q="

FF - HKLM\software\mozilla\Firefox\Extensions\\{000a9d1c-beef-4f90-9363-039d445309b8}: C:\Program Files\Google\Google Gears\Firefox\ [2010/03/07 14:21:34 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2010/11/02 21:35:04 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/11/02 21:27:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/11/02 21:27:56 | 000,000,000 | ---D | M]

[2010/11/03 18:34:20 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\mozilla\Extensions
[2010/11/04 23:02:27 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\mozilla\Firefox\Profiles\p241d0hu.default\extensions
[2010/11/03 22:59:50 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Peťo\AppData\Roaming\mozilla\Firefox\Profiles\p241d0hu.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/11/02 21:27:57 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009/12/22 05:19:35 | 000,001,583 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\atlas-sk.xml
[2009/12/22 05:19:35 | 000,001,380 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\azet-sk.xml
[2009/12/22 05:19:35 | 000,001,479 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\dunaj-sk.xml
[2009/12/22 05:19:35 | 000,001,473 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slovnik-sk.xml
[2009/12/22 05:19:35 | 000,001,104 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-sk.xml
[2009/12/22 05:19:35 | 000,000,830 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\zoznam-sk.xml

O1 HOSTS File: ([2010/11/04 22:53:51 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Messenger Companion Helper) - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.)
O2 - BHO: (Google Gears Helper) - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..\Toolbar\WebBrowser: (no name) - {1392B8D2-5C05-419F-A8F6-B9F15A596612} - No CLSID value found.
O3 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
O4 - HKLM..\Run: [Google Quick Search Box] C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe (Google Inc.)
O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation)
O4 - HKLM..\Run: [KBD] C:\hp\KBD\KbdStub.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [OsdMaestro] C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe (OsdMaestro)
O4 - HKLM..\Run: [PivotSoftware] C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe ()
O4 - HKLM..\Run: [RegistryMechanic] File not found
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SunJavaUpdateReg] C:\Windows\System32\jureg.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Symantec PIF AlertEng] C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (Symantec Corporation)
O4 - HKLM..\Run: [TradeManager] C:\Program Files\Alibaba\TradeManager\TradeManager.exe (Alibaba)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1807514103-992746668-557511064-1000..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKLM..\RunOnce: [Launcher] C:\Windows\SMINST\Launcher.exe (soft thinks)
O8 - Extra context menu item: WikiKomentáře Google... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll (Google Inc.)
O9 - Extra Button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Nastavenia rozšírenia &Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.)
O9 - Extra Button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Eurotran XP - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Eurotran XP\etnxp.dll ()
O9 - Extra 'Tools' menuitem : Eurotran XP... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Eurotran XP\etnxp.dll ()
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..Trusted Domains: drsr.sk ([www] https in Dôveryhodné lokality)
O15 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..Trusted Domains: t-com.sk ([moj] https in Dôveryhodné lokality)
O15 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {813A45F9-744F-435F-A815-19E2DF35A9D8} http://www.o2c.de/download/o2cplayerac.cab (O2C-Player - area constructor view (ELECO Software GmbH))
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {B1953AD6-C50E-11D3-B020-00A0C9251384} http://www.o2c.de/download/o2cplayer.cab (O2C-Player (ELECO Software GmbH))
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} http://a532.g.akamai.net/f/532/6712/5m/ ... taller.exe (Virtools WebPlayer Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Peťo\Pictures\venkovni1.jpg
O24 - Desktop BackupWallPaper: C:\Users\Peťo\Pictures\venkovni1.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/09/07 13:30:41 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

[CLEARALLRESTOREPOINTS]
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 7 Days ==========

[2010/11/05 13:59:53 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Desktop\OTL
[2010/11/05 11:55:57 | 000,576,000 | ---- | C] (OldTimer Tools) -- C:\Users\Peťo\Desktop\OTL.exe
[2010/11/05 03:03:52 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Roaming\Windows Live Writer
[2010/11/05 03:03:52 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Local\Windows Live Writer
[2010/11/05 02:32:20 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData
[2010/11/05 00:57:06 | 000,000,000 | ---D | C] -- C:\Combofixspakovaný5.11
[2010/11/04 22:56:08 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2010/11/04 22:53:48 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2010/11/04 22:42:43 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2010/11/04 22:39:52 | 000,000,000 | ---D | C] -- C:\32788R22FWJFW
[2010/11/04 21:49:10 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\NAVODY
[2010/11/04 21:44:59 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\OBJEDNAVKY
[2010/11/04 21:43:17 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\DOMACNOSŤ
[2010/11/04 21:42:34 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\REVIZIE
[2010/11/04 21:41:01 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\Cenik- predaj
[2010/11/04 21:40:14 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\Cenik-dodavateľ
[2010/11/04 21:39:44 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\ELEKTRO
[2010/11/04 21:38:31 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\Cenové ponuky - odoslané
[2010/11/04 21:32:11 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\A-Sport
[2010/11/04 21:11:46 | 000,000,000 | ---D | C] -- C:\Users\Peťo\SUBORY z PLOCHY
[2010/11/04 19:40:18 | 000,000,000 | R--D | C] -- C:\Users\Peťo\Desktop\Links
[2010/11/04 19:13:41 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Links
[2010/11/04 13:10:57 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2010/11/04 12:18:48 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Local\GHISLER
[2010/11/04 12:05:23 | 000,000,000 | ---D | C] -- C:\Program Files\totalcmd
[2010/11/04 12:05:23 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Roaming\GHISLER
[2010/11/03 18:34:01 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Local\Mozilla
[2010/11/03 18:34:00 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Roaming\Mozilla
[2010/11/03 13:05:10 | 000,000,000 | ---D | C] -- C:\Program Files\Hijack This.HJT
[2010/11/03 10:41:50 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Roaming\Malwarebytes
[2010/11/03 10:41:42 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010/11/03 10:41:40 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010/11/03 10:41:40 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/11/03 10:41:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010/11/03 10:41:06 | 006,153,352 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Peťo\Desktop\3mbam-setup-1.46.exe
[2010/11/03 10:09:37 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2010/11/02 21:41:59 | 000,233,136 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctgntdi.sys
[2010/11/02 21:41:59 | 000,100,136 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctwfpfilter.sys
[2010/11/02 21:41:53 | 000,218,592 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTCore.sys
[2010/11/02 21:41:53 | 000,088,040 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTAppEvent.sys
[2010/11/02 21:41:42 | 000,063,360 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctplsg.sys
[2010/11/02 21:41:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PC Tools
[2010/11/02 21:40:59 | 000,000,000 | ---D | C] -- C:\Program Files\Spyware Doctor
[2010/11/02 21:40:59 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Roaming\PC Tools
[2010/11/02 21:40:59 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Tools
[2010/11/02 21:27:48 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2010/11/02 21:25:23 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\Moje gadgety Google
[2010/10/31 06:34:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Real
[2010/10/31 06:34:28 | 000,000,000 | ---D | C] -- C:\Program Files\Real
[2010/10/31 06:20:37 | 000,000,000 | RH-D | C] -- C:\AHCache
[2010/10/29 17:32:58 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Local\FLVService
[2010/10/29 17:32:49 | 000,000,000 | ---D | C] -- C:\Windows\Freecorder
[2010/10/29 17:31:29 | 000,000,000 | ---D | C] -- C:\Windows\Applian FLV Player

========== Files - Modified Within 7 Days ==========

[2010/11/05 14:05:59 | 000,000,420 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{59BDEC23-5F85-4E56-890A-5843EB7F0193}.job
[2010/11/05 14:02:23 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/11/05 14:02:23 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/11/05 13:31:04 | 000,001,000 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/11/05 13:11:01 | 000,001,018 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1807514103-992746668-557511064-1000UA.job
[2010/11/05 11:55:59 | 000,576,000 | ---- | M] (OldTimer Tools) -- C:\Users\Peťo\Desktop\OTL.exe
[2010/11/05 11:31:00 | 000,000,996 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/11/05 11:11:00 | 000,000,966 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1807514103-992746668-557511064-1000Core.job
[2010/11/05 10:08:42 | 000,650,790 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010/11/05 10:08:42 | 000,125,162 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010/11/05 10:08:42 | 000,092,194 | ---- | M] () -- C:\Windows\System32\perfh01B.dat
[2010/11/05 10:08:42 | 000,031,868 | ---- | M] () -- C:\Windows\System32\perfc01B.dat
[2010/11/05 10:02:30 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl
[2010/11/05 10:02:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/11/05 10:02:11 | 3219,611,648 | -HS- | M] () -- C:\hiberfil.sys
[2010/11/05 00:04:07 | 000,084,590 | ---- | M] () -- C:\Users\Peťo\Desktop\Qoobox.rar
[2010/11/04 22:55:21 | 396,710,176 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2010/11/04 22:53:51 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2010/11/04 20:30:18 | 000,151,552 | ---- | M] () -- C:\Users\Peťo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/04 17:02:29 | 000,031,007 | ---- | M] () -- C:\Users\Peťo\AppData\Roaming\UserTile.png
[2010/11/04 16:21:03 | 000,000,804 | ---- | M] () -- C:\Users\Peťo\Desktop\Total Commander.lnk
[2010/11/04 16:17:34 | 000,002,587 | ---- | M] () -- C:\Users\Peťo\Desktop\Microsoft Office Excel 2007.lnk
[2010/11/04 14:35:47 | 000,002,872 | ---- | M] () -- C:\Windows\ST5UNST.002
[2010/11/04 10:35:23 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2010/11/04 10:32:00 | 000,009,264 | ---- | M] () -- C:\Windows\System32\msqtvcap.dat
[2010/11/03 14:38:52 | 000,000,806 | ---- | M] () -- C:\Users\Peťo\Desktop\CCleaner.lnk
[2010/11/03 10:27:30 | 006,153,352 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Peťo\Desktop\3mbam-setup-1.46.exe
[2010/11/02 21:28:01 | 000,001,726 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010/10/31 06:55:18 | 000,199,904 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\System32\rmoc3260.dll
[2010/10/31 06:55:08 | 000,006,656 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\System32\pndx5016.dll
[2010/10/31 06:55:08 | 000,005,632 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\System32\pndx5032.dll
[2010/10/29 17:15:47 | 042,636,446 | ---- | M] () -- C:\Users\Peťo\Desktop\ESBE_LTC_a_VTC_ventily.zip

========== Files Created - No Company Name ==========

[2010/11/05 00:04:06 | 000,084,590 | ---- | C] () -- C:\Users\Peťo\Desktop\Qoobox.rar
[2010/11/04 22:55:21 | 396,710,176 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2010/11/04 14:35:32 | 000,002,872 | ---- | C] () -- C:\Windows\ST5UNST.002
[2010/11/04 12:05:28 | 000,000,804 | ---- | C] () -- C:\Users\Peťo\Desktop\Total Commander.lnk
[2010/11/04 12:05:24 | 000,000,545 | ---- | C] () -- C:\Windows\UC.PIF
[2010/11/04 12:05:24 | 000,000,545 | ---- | C] () -- C:\Windows\RAR.PIF
[2010/11/04 12:05:24 | 000,000,545 | ---- | C] () -- C:\Windows\PKZIP.PIF
[2010/11/04 12:05:24 | 000,000,545 | ---- | C] () -- C:\Windows\PKUNZIP.PIF
[2010/11/04 12:05:24 | 000,000,545 | ---- | C] () -- C:\Windows\NOCLOSE.PIF
[2010/11/04 12:05:24 | 000,000,545 | ---- | C] () -- C:\Windows\LHA.PIF
[2010/11/04 12:05:24 | 000,000,545 | ---- | C] () -- C:\Windows\ARJ.PIF
[2010/11/03 14:38:52 | 000,000,806 | ---- | C] () -- C:\Users\Peťo\Desktop\CCleaner.lnk
[2010/11/02 21:41:59 | 000,007,387 | ---- | C] () -- C:\Windows\System32\drivers\pctgntdi.cat
[2010/11/02 21:41:53 | 000,007,412 | ---- | C] () -- C:\Windows\System32\drivers\PCTAppEvent.cat
[2010/11/02 21:41:53 | 000,007,383 | ---- | C] () -- C:\Windows\System32\drivers\pctcore.cat
[2010/11/02 21:41:42 | 000,007,383 | ---- | C] () -- C:\Windows\System32\drivers\pctplsg.cat
[2010/11/02 21:28:01 | 000,001,726 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010/10/29 17:15:47 | 042,636,446 | ---- | C] () -- C:\Users\Peťo\Desktop\ESBE_LTC_a_VTC_ventily.zip
[2010/06/02 05:35:58 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini
[2010/01/12 19:26:02 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009/12/18 09:02:42 | 000,000,680 | ---- | C] () -- C:\Users\Peťo\AppData\Local\d3d9caps.dat
[2009/08/08 01:56:11 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2008/05/02 15:16:08 | 000,002,304 | ---- | C] () -- C:\Windows\System32\Machnm32.sys
[2008/04/19 11:11:55 | 000,000,000 | ---- | C] () -- C:\Windows\Irremote.ini
[2008/04/14 16:50:40 | 000,031,007 | ---- | C] () -- C:\Users\Peťo\AppData\Roaming\UserTile.png
[2008/04/14 14:08:42 | 000,147,456 | ---- | C] () -- C:\Windows\System32\VegaShEx.dll
[2008/04/14 14:08:34 | 000,091,136 | ---- | C] () -- C:\Windows\System32\Lfkodak.dll
[2008/04/14 14:08:33 | 000,308,224 | ---- | C] () -- C:\Windows\System32\Lffpx7.dll
[2008/03/29 20:00:23 | 000,008,861 | ---- | C] () -- C:\ProgramData\LUUnInstall.LiveUpdate
[2008/03/23 10:51:55 | 000,164,352 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2008/03/23 10:51:49 | 000,755,027 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2008/03/23 10:51:49 | 000,159,839 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2008/03/23 10:51:48 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2008/03/23 10:51:45 | 000,007,680 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2008/03/18 23:44:29 | 000,004,967 | ---- | C] () -- C:\ProgramData\dbvvomjc.bpt
[2008/03/18 23:44:26 | 000,000,191 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2008/03/18 23:44:26 | 000,000,145 | ---- | C] () -- C:\Windows\ODBC.INI
[2008/03/18 23:14:19 | 003,907,640 | ---- | C] () -- C:\Windows\System32\gsdll32.dll
[2008/02/02 13:56:09 | 000,151,552 | ---- | C] () -- C:\Users\Peťo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/02/02 13:24:38 | 000,000,000 | ---- | C] () -- C:\Users\Peťo\AppData\Roaming\wklnhst.dat
[2007/09/07 13:22:27 | 000,000,343 | ---- | C] () -- C:\ProgramData\hpzinstall.log
[2007/09/07 13:19:34 | 000,006,257 | ---- | C] () -- C:\Windows\HCWPNP.INI
[2007/09/07 13:19:15 | 000,066,048 | ---- | C] () -- C:\Windows\System32\hcwxds.dll
[2007/09/07 13:09:33 | 000,327,680 | ---- | C] () -- C:\Windows\System32\pythoncom25.dll
[2007/09/07 13:09:33 | 000,102,400 | ---- | C] () -- C:\Windows\System32\pywintypes25.dll
[2007/07/19 16:07:52 | 000,000,000 | ---- | C] () -- C:\Windows\System32\px.ini
[2006/12/13 22:01:36 | 000,520,192 | ---- | C] () -- C:\Windows\System32\CddbPlaylist2Roxio.dll
[2006/12/13 22:01:36 | 000,204,800 | ---- | C] () -- C:\Windows\System32\CddbFileTaggerRoxio.dll
[2006/11/02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/10/30 01:00:00 | 000,028,672 | ---- | C] () -- C:\Windows\System32\besched.dll
[2004/11/19 09:56:00 | 000,032,768 | ---- | C] () -- C:\Windows\System32\RYDLL32.DLL
[2003/10/02 01:00:00 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lockout.dll
[2003/10/02 01:00:00 | 000,045,056 | ---- | C] () -- C:\Windows\System32\lockres.dll
[2002/05/15 03:58:48 | 000,618,496 | ---- | C] () -- C:\Windows\System32\dXQGridEdit.dll
[1996/08/20 15:08:46 | 000,026,112 | ---- | C] () -- C:\Windows\System32\angel32.dll

========== LOP Check ==========

[2008/03/18 23:14:29 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\AutoCAD DWG to PDF Converter
[2008/04/17 11:57:52 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Autodesk
[2009/03/09 11:38:04 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2008/04/15 06:37:03 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\DisplayTune
[2008/03/16 16:32:44 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Downloaded Installations
[2010/11/04 16:21:06 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\GHISLER
[2009/06/23 12:19:47 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Kabe
[2010/06/28 08:46:29 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Metrel
[2008/02/02 13:22:10 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\muvee Technologies
[2010/04/13 18:00:38 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Opera
[2010/06/02 05:36:14 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Panasonic
[2008/07/21 15:41:49 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\PeerNetworking
[2008/03/18 16:59:16 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\ProfiCAD
[2008/04/14 14:08:07 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Složka odesílání Share-to-Web
[2010/11/04 13:58:14 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Software Informer
[2008/02/06 22:12:24 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\STORMWARE
[2008/04/14 12:53:43 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Template
[2010/04/06 06:49:21 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Uniblue
[2010/11/05 03:03:52 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Windows Live Writer
[2010/06/22 08:56:07 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\WorkXPlore3D
[2010/11/05 03:34:44 | 000,032,494 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010/11/05 14:05:59 | 000,000,420 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{59BDEC23-5F85-4E56-890A-5843EB7F0193}.job

========== Purity Check ==========



========== Custom Scans ==========


< :otl >

< SRV - File not found [Auto | Stopped] -- C:\ComboFix\PEV.cfx -- (PEVSystemStart) >

< SRV - File not found [Auto | Stopped] -- c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (LiveUpdate Notice Ex) >

< SRV - File not found [Auto | Stopped] -- C:\Program Files\Portrait Displays\HP My Display\dtsrvc.exe -- (DTSRVC) >

< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) >

< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) >

< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp) >

< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\PEO~1\AppData\Local\Temp\cpuz132\cpuz132_x32.sys -- (cpuz132) >

< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\PEO~1\AppData\Local\Temp\catchme.sys -- (catchme) >

< DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive) >

< IE - HKU\S-1-5-21-1807514103-992746668-557511064-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.centrum.sk/http://www.elzarus.sk/ [binary data] >
Invalid Switch: [binary data]


< IE - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..\URLSearchHook: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - Reg Error: Key error. File not found >

< FF - prefs.js..keyword.URL: "http://www.google.com/search?sourceid=n ... t&hl=sk&q=" >

< O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found. >

< O4 - HKLM..\Run: [] File not found >

< O13 - gopher Prefix: missing >

< O15 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..Trusted Domains: drsr.sk ([www] https in Dôveryhodné lokality) >

< O15 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..Trusted Domains: localhost ([]http in Local intranet) >

< O15 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..Trusted Domains: t-com.sk ([moj] https in Dôveryhodné lokality) >

< O15 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..Trusted Ranges: GD ([http] in Local intranet) >

< @Alternate Data Stream - 158 bytes -> C:\ProgramData\TEMP:DFC5A2B2 >

< @Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:FA5F15C4 >

< @Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:A8ADE5D8 >

< >

< :reg >

< [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] >

< "ehTray.exe"=- >

< "Google Update"=- >

< "Skype"=- >

< "swg"=- >

< [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] >

< "Adobe Reader Speed Launcher"=- >

< "SunJavaUpdateReg"=- >

< ""=- >

< "RegistryMechanic"=- >

< "TkBellExe"=- >

< >

< :files >

< C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk >
[2008/02/02 20:41:30 | 000,001,954 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk

< C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk >
[2008/02/02 20:41:30 | 000,001,912 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk

< C:\Windows\tasks\Google Software Updater.job >
[2010/06/13 10:16:58 | 000,000,956 | ---- | M] () -- C:\Windows\Tasks\Google Software Updater.job

< C:\Windows\tasks\GoogleUpdateTaskMachineCore.job >
[2010/11/05 11:31:00 | 000,000,996 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

< C:\Windows\tasks\GoogleUpdateTaskMachineUA.job >
[2010/11/05 13:31:04 | 000,001,000 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1807514103-992746668-557511064-1000Core.job >
[2010/11/05 11:11:00 | 000,000,966 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1807514103-992746668-557511064-1000Core.job

< C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1807514103-992746668-557511064-1000UA.job >
[2010/11/05 13:11:01 | 000,001,018 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1807514103-992746668-557511064-1000UA.job

< C:\Windows\tasks\User_Feed_Synchronization-{59BDEC23-5F85-4E56-890A-5843EB7F0193}.job >
[2010/11/05 14:05:59 | 000,000,420 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{59BDEC23-5F85-4E56-890A-5843EB7F0193}.job

< %windir%\system32\*.tmp.dll /s >

< %windir%\system32\SET*.tmp /s >
[1 C:\Windows\system32\spool\drivers\w32x86\{53580478-F6CE-4466-B22C-D84E240AFFFC}\*.tmp files -> C:\Windows\system32\spool\drivers\w32x86\{53580478-F6CE-4466-B22C-D84E240AFFFC}\*.tmp -> ]

< %windir%\*.tmp /s >
[8 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[9 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\System32\DriverStore\FileRepository\hpqratpk.inf_cb20525b\*.tmp files -> C:\Windows\System32\DriverStore\FileRepository\hpqratpk.inf_cb20525b\*.tmp -> ]
[1 C:\Windows\System32\spool\drivers\w32x86\{53580478-F6CE-4466-B22C-D84E240AFFFC}\*.tmp files -> C:\Windows\System32\spool\drivers\w32x86\{53580478-F6CE-4466-B22C-D84E240AFFFC}\*.tmp -> ]
[1 C:\Windows\twain_32\*.tmp files -> C:\Windows\twain_32\*.tmp -> ]

< >

< :commands >

< [RESETHOSTS] >

< [EMPTYTEMP] >

< [EMPTYFLASH] >

========== Alternate Data Streams ==========

@Alternate Data Stream - 158 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:FA5F15C4
@Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:A8ADE5D8

< End of report >

Re: posím o preventivku mal som security tol

Napsal: 05 lis 2010 14:31
od ruso
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verzia databázy: 5050

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18975

5. 11. 2010 14:31:03
mbam-log-2010-11-05 (14-31-03).txt

Typ kontroly: Rýchla kontrola
Objektov kontrolovaných: 147185
Uplynulý čas: 8 min, 42 sek

Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 0
Infikované súbory: 0

Infikované služby pamäte:
(Škodlivé položky neboli zistené)

Infikované moduly pamäte:
(Škodlivé položky neboli zistené)

Infikované registračné kľúče:
(Škodlivé položky neboli zistené)

Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)

Infikované položky registračných dát:
(Škodlivé položky neboli zistené)

Infikované priečinky:
(Škodlivé položky neboli zistené)

Infikované súbory:
(Škodlivé položky neboli zistené)

Re: posím o preventivku mal som security tol

Napsal: 05 lis 2010 14:42
od vyosek
:arrow: Ted log z opravy OTL a kompletni sken pres MBAM

Re: posím o preventivku mal som security tol

Napsal: 05 lis 2010 14:48
od ruso
toto je opravený OTL ?
OTL logfile created on: 5. 11. 2010 14:05:25 - Run 2
OTL by OldTimer - Version 3.2.17.2 Folder = C:\Users\Peťo\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18975)
Locale: 0000041B | Country: Slovenská republika | Language: SKY | Date Format: d. M. yyyy

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 50,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 77,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 225,71 Gb Total Space | 151,18 Gb Free Space | 66,98% Space Free | Partition Type: NTFS
Drive D: | 7,18 Gb Total Space | 1,63 Gb Free Space | 22,78% Space Free | Partition Type: NTFS
Drive F: | 111,79 Gb Total Space | 62,12 Gb Free Space | 55,57% Space Free | Partition Type: NTFS

Computer Name: PETO | User Name: Peťo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2010/11/05 11:55:59 | 000,576,000 | ---- | M] (OldTimer Tools) -- C:\Users\Peťo\Desktop\OTL.exe
PRC - [2010/11/02 21:26:10 | 000,126,976 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
PRC - [2010/11/02 21:24:27 | 000,030,192 | ---- | M] (Google) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
PRC - [2010/10/22 10:26:19 | 000,134,808 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\1.2.183.39\GoogleCrashHandler.exe
PRC - [2010/10/22 10:06:44 | 000,134,808 | ---- | M] (Google Inc.) -- C:\Users\Peťo\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
PRC - [2010/09/08 05:25:50 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
PRC - [2010/09/07 16:12:02 | 002,838,912 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010/09/07 16:11:59 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010/01/12 19:22:48 | 000,039,408 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
PRC - [2009/12/22 18:50:54 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009/10/11 04:17:36 | 000,055,072 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\jureg.exe
PRC - [2009/04/11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008/07/24 10:40:00 | 003,073,424 | ---- | M] (Alibaba) -- C:\Program Files\Alibaba\TradeManager\TradeManager.exe
PRC - [2008/01/29 17:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
PRC - [2008/01/19 08:38:38 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
PRC - [2008/01/19 08:33:27 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
PRC - [2007/09/26 16:23:48 | 000,554,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
PRC - [2007/07/06 12:06:52 | 004,669,440 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2007/06/14 19:31:36 | 000,355,096 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2007/06/14 19:31:32 | 000,178,968 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2007/04/18 16:01:34 | 000,065,536 | ---- | M] (Hewlett-Packard Company) -- C:\hp\support\hpsysdrv.exe
PRC - [2007/02/15 12:59:00 | 000,118,784 | ---- | M] (OsdMaestro) -- C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
PRC - [2007/02/09 11:17:30 | 000,694,008 | ---- | M] () -- C:\Program Files\Portrait Displays\Pivot Software\Floater.exe
PRC - [2007/02/09 11:17:26 | 000,694,008 | ---- | M] () -- C:\Program Files\Portrait Displays\Pivot Software\wpCtrl.exe
PRC - [2007/01/11 12:26:56 | 000,063,112 | ---- | M] (CANON INC.) -- C:\Windows\System32\CNAB4RPK.EXE


========== Modules (SafeList) ==========

MOD - [2010/11/05 11:55:59 | 000,576,000 | ---- | M] (OldTimer Tools) -- C:\Users\Peťo\Desktop\OTL.exe
MOD - [2010/08/31 16:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- C:\ComboFix\PEV.cfx -- (PEVSystemStart)
SRV - File not found [Auto | Stopped] -- c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (LiveUpdate Notice Ex)
SRV - File not found [Auto | Stopped] -- C:\Program Files\Portrait Displays\HP My Display\dtsrvc.exe -- (DTSRVC)
SRV - [2010/11/02 21:24:27 | 000,030,192 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe -- (GoogleDesktopManager-051210-111108)
SRV - [2010/09/22 23:21:24 | 001,493,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
SRV - [2010/09/22 15:33:04 | 000,051,040 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV - [2010/09/07 16:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010/09/07 16:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010/09/07 16:11:59 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010/03/18 12:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/15 11:50:36 | 001,142,224 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - [2010/03/11 11:09:22 | 000,366,840 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2009/09/25 02:27:04 | 000,793,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache)
SRV - [2008/01/29 17:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe -- (LiveUpdate Notice Service)
SRV - [2008/01/19 08:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/09/26 16:23:48 | 002,999,664 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE -- (LiveUpdate)
SRV - [2007/09/26 16:23:48 | 000,554,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe -- (Plánovač automatické aktualizace LiveUpdate)
SRV - [2007/06/14 19:31:36 | 000,355,096 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\PEO~1\AppData\Local\Temp\cpuz132\cpuz132_x32.sys -- (cpuz132)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2010/09/22 23:21:24 | 000,039,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\fssfltr.sys -- (fssfltr)
DRV - [2010/09/07 15:52:25 | 000,046,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2010/09/07 15:52:03 | 000,165,584 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2010/09/07 15:47:46 | 000,023,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2010/09/07 15:47:30 | 000,050,768 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2010/09/07 15:47:07 | 000,017,744 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010/03/29 10:06:14 | 000,218,592 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\PCTCore.sys -- (PCTCore)
DRV - [2009/04/11 05:45:24 | 000,113,664 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rmcast.sys -- (RMCAST) RMCAST (Pgm)
DRV - [2009/03/16 12:09:46 | 000,022,528 | ---- | M] (Feitian Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rockey4.sys -- (ROCKEYNT)
DRV - [2009/03/16 12:09:46 | 000,013,824 | ---- | M] (Feitian Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Rockey4USB.sys -- (Rockey_USB)
DRV - [2008/01/19 07:14:09 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\scsiscan.sys -- (scsiscan)
DRV - [2007/10/01 09:21:08 | 001,129,344 | ---- | M] (Hauppauge Computer Works) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HCW85BDA.sys -- (HCW85BDA)
DRV - [2007/08/28 01:59:00 | 007,574,976 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2007/07/31 17:45:50 | 000,076,800 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ser2pl.sys -- (Ser2pl)
DRV - [2007/07/11 11:21:00 | 001,793,880 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007/06/14 21:30:28 | 000,304,920 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\iastor.sys -- (iaStor)
DRV - [2007/03/26 10:54:28 | 000,005,376 | --S- | M] (Gteko Ltd.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\hpsunidr.sys -- (hpsunidr)
DRV - [2006/11/02 10:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300)
DRV - [2006/11/02 10:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx)
DRV - [2006/11/02 10:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor)
DRV - [2006/11/02 10:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci)
DRV - [2006/11/02 10:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci)
DRV - [2006/11/02 10:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV)
DRV - [2006/11/02 10:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320)
DRV - [2006/11/02 10:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2)
DRV - [2006/11/02 10:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid)
DRV - [2006/11/02 10:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx)
DRV - [2006/11/02 10:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata)
DRV - [2006/11/02 10:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m)
DRV - [2006/11/02 10:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid)
DRV - [2006/11/02 10:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960)
DRV - [2006/11/02 10:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp)
DRV - [2006/11/02 10:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4)
DRV - [2006/11/02 10:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor)
DRV - [2006/11/02 10:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx)
DRV - [2006/11/02 10:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas)
DRV - [2006/11/02 10:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI)
DRV - [2006/11/02 10:50:10 | 000,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2)
DRV - [2006/11/02 10:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs)
DRV - [2006/11/02 10:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc)
DRV - [2006/11/02 10:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid)
DRV - [2006/11/02 10:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi)
DRV - [2006/11/02 10:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS)
DRV - [2006/11/02 10:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx)
DRV - [2006/11/02 10:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC)
DRV - [2006/11/02 10:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3)
DRV - [2006/11/02 10:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x)
DRV - [2006/11/02 10:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi)
DRV - [2006/11/02 10:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas)
DRV - [2006/11/02 10:49:30 | 000,017,512 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide)
DRV - [2006/11/02 10:49:28 | 000,016,488 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide)
DRV - [2006/11/02 10:49:20 | 000,014,952 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide)
DRV - [2006/11/02 09:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV - [2006/11/02 09:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer)
DRV - [2006/11/02 09:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp)
DRV - [2006/11/02 09:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo)
DRV - [2006/11/02 09:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm)
DRV - [2006/11/02 09:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm)
DRV - [2006/11/02 08:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi)
DRV - [2006/11/02 08:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1807514103-992746668-557511064-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.centrum.sk/http://www.elzarus.sk/ [binary data]
IE - HKU\S-1-5-21-1807514103-992746668-557511064-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
IE - HKU\S-1-5-21-1807514103-992746668-557511064-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..\URLSearchHook: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-1807514103-992746668-557511064-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.google.sk/"
FF - prefs.js..extensions.enabledItems: {000a9d1c-beef-4f90-9363-039d445309b8}:0.5.36.0
FF - prefs.js..keyword.URL: "http://www.google.com/search?sourceid=n ... t&hl=sk&q="

FF - HKLM\software\mozilla\Firefox\Extensions\\{000a9d1c-beef-4f90-9363-039d445309b8}: C:\Program Files\Google\Google Gears\Firefox\ [2010/03/07 14:21:34 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2010/11/02 21:35:04 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/11/02 21:27:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/11/02 21:27:56 | 000,000,000 | ---D | M]

[2010/11/03 18:34:20 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\mozilla\Extensions
[2010/11/04 23:02:27 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\mozilla\Firefox\Profiles\p241d0hu.default\extensions
[2010/11/03 22:59:50 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Peťo\AppData\Roaming\mozilla\Firefox\Profiles\p241d0hu.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/11/02 21:27:57 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009/12/22 05:19:35 | 000,001,583 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\atlas-sk.xml
[2009/12/22 05:19:35 | 000,001,380 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\azet-sk.xml
[2009/12/22 05:19:35 | 000,001,479 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\dunaj-sk.xml
[2009/12/22 05:19:35 | 000,001,473 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slovnik-sk.xml
[2009/12/22 05:19:35 | 000,001,104 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-sk.xml
[2009/12/22 05:19:35 | 000,000,830 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\zoznam-sk.xml

O1 HOSTS File: ([2010/11/04 22:53:51 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Messenger Companion Helper) - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.)
O2 - BHO: (Google Gears Helper) - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..\Toolbar\WebBrowser: (no name) - {1392B8D2-5C05-419F-A8F6-B9F15A596612} - No CLSID value found.
O3 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
O4 - HKLM..\Run: [Google Quick Search Box] C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe (Google Inc.)
O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation)
O4 - HKLM..\Run: [KBD] C:\hp\KBD\KbdStub.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [OsdMaestro] C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe (OsdMaestro)
O4 - HKLM..\Run: [PivotSoftware] C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe ()
O4 - HKLM..\Run: [RegistryMechanic] File not found
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SunJavaUpdateReg] C:\Windows\System32\jureg.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Symantec PIF AlertEng] C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (Symantec Corporation)
O4 - HKLM..\Run: [TradeManager] C:\Program Files\Alibaba\TradeManager\TradeManager.exe (Alibaba)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1807514103-992746668-557511064-1000..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKLM..\RunOnce: [Launcher] C:\Windows\SMINST\Launcher.exe (soft thinks)
O8 - Extra context menu item: WikiKomentáře Google... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll (Google Inc.)
O9 - Extra Button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Nastavenia rozšírenia &Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.)
O9 - Extra Button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Eurotran XP - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Eurotran XP\etnxp.dll ()
O9 - Extra 'Tools' menuitem : Eurotran XP... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Eurotran XP\etnxp.dll ()
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..Trusted Domains: drsr.sk ([www] https in Dôveryhodné lokality)
O15 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..Trusted Domains: t-com.sk ([moj] https in Dôveryhodné lokality)
O15 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {813A45F9-744F-435F-A815-19E2DF35A9D8} http://www.o2c.de/download/o2cplayerac.cab (O2C-Player - area constructor view (ELECO Software GmbH))
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {B1953AD6-C50E-11D3-B020-00A0C9251384} http://www.o2c.de/download/o2cplayer.cab (O2C-Player (ELECO Software GmbH))
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} http://a532.g.akamai.net/f/532/6712/5m/ ... taller.exe (Virtools WebPlayer Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Peťo\Pictures\venkovni1.jpg
O24 - Desktop BackupWallPaper: C:\Users\Peťo\Pictures\venkovni1.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/09/07 13:30:41 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

[CLEARALLRESTOREPOINTS]
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 7 Days ==========

[2010/11/05 13:59:53 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Desktop\OTL
[2010/11/05 11:55:57 | 000,576,000 | ---- | C] (OldTimer Tools) -- C:\Users\Peťo\Desktop\OTL.exe
[2010/11/05 03:03:52 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Roaming\Windows Live Writer
[2010/11/05 03:03:52 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Local\Windows Live Writer
[2010/11/05 02:32:20 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData
[2010/11/05 00:57:06 | 000,000,000 | ---D | C] -- C:\Combofixspakovaný5.11
[2010/11/04 22:56:08 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2010/11/04 22:53:48 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2010/11/04 22:42:43 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2010/11/04 22:39:52 | 000,000,000 | ---D | C] -- C:\32788R22FWJFW
[2010/11/04 21:49:10 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\NAVODY
[2010/11/04 21:44:59 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\OBJEDNAVKY
[2010/11/04 21:43:17 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\DOMACNOSŤ
[2010/11/04 21:42:34 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\REVIZIE
[2010/11/04 21:41:01 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\Cenik- predaj
[2010/11/04 21:40:14 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\Cenik-dodavateľ
[2010/11/04 21:39:44 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\ELEKTRO
[2010/11/04 21:38:31 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\Cenové ponuky - odoslané
[2010/11/04 21:32:11 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\A-Sport
[2010/11/04 21:11:46 | 000,000,000 | ---D | C] -- C:\Users\Peťo\SUBORY z PLOCHY
[2010/11/04 19:40:18 | 000,000,000 | R--D | C] -- C:\Users\Peťo\Desktop\Links
[2010/11/04 19:13:41 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Links
[2010/11/04 13:10:57 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2010/11/04 12:18:48 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Local\GHISLER
[2010/11/04 12:05:23 | 000,000,000 | ---D | C] -- C:\Program Files\totalcmd
[2010/11/04 12:05:23 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Roaming\GHISLER
[2010/11/03 18:34:01 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Local\Mozilla
[2010/11/03 18:34:00 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Roaming\Mozilla
[2010/11/03 13:05:10 | 000,000,000 | ---D | C] -- C:\Program Files\Hijack This.HJT
[2010/11/03 10:41:50 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Roaming\Malwarebytes
[2010/11/03 10:41:42 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010/11/03 10:41:40 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010/11/03 10:41:40 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/11/03 10:41:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010/11/03 10:41:06 | 006,153,352 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Peťo\Desktop\3mbam-setup-1.46.exe
[2010/11/03 10:09:37 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2010/11/02 21:41:59 | 000,233,136 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctgntdi.sys
[2010/11/02 21:41:59 | 000,100,136 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctwfpfilter.sys
[2010/11/02 21:41:53 | 000,218,592 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTCore.sys
[2010/11/02 21:41:53 | 000,088,040 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTAppEvent.sys
[2010/11/02 21:41:42 | 000,063,360 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctplsg.sys
[2010/11/02 21:41:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PC Tools
[2010/11/02 21:40:59 | 000,000,000 | ---D | C] -- C:\Program Files\Spyware Doctor
[2010/11/02 21:40:59 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Roaming\PC Tools
[2010/11/02 21:40:59 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Tools
[2010/11/02 21:27:48 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2010/11/02 21:25:23 | 000,000,000 | ---D | C] -- C:\Users\Peťo\Documents\Moje gadgety Google
[2010/10/31 06:34:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Real
[2010/10/31 06:34:28 | 000,000,000 | ---D | C] -- C:\Program Files\Real
[2010/10/31 06:20:37 | 000,000,000 | RH-D | C] -- C:\AHCache
[2010/10/29 17:32:58 | 000,000,000 | ---D | C] -- C:\Users\Peťo\AppData\Local\FLVService
[2010/10/29 17:32:49 | 000,000,000 | ---D | C] -- C:\Windows\Freecorder
[2010/10/29 17:31:29 | 000,000,000 | ---D | C] -- C:\Windows\Applian FLV Player

========== Files - Modified Within 7 Days ==========

[2010/11/05 14:05:59 | 000,000,420 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{59BDEC23-5F85-4E56-890A-5843EB7F0193}.job
[2010/11/05 14:02:23 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/11/05 14:02:23 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/11/05 13:31:04 | 000,001,000 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/11/05 13:11:01 | 000,001,018 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1807514103-992746668-557511064-1000UA.job
[2010/11/05 11:55:59 | 000,576,000 | ---- | M] (OldTimer Tools) -- C:\Users\Peťo\Desktop\OTL.exe
[2010/11/05 11:31:00 | 000,000,996 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/11/05 11:11:00 | 000,000,966 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1807514103-992746668-557511064-1000Core.job
[2010/11/05 10:08:42 | 000,650,790 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010/11/05 10:08:42 | 000,125,162 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010/11/05 10:08:42 | 000,092,194 | ---- | M] () -- C:\Windows\System32\perfh01B.dat
[2010/11/05 10:08:42 | 000,031,868 | ---- | M] () -- C:\Windows\System32\perfc01B.dat
[2010/11/05 10:02:30 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl
[2010/11/05 10:02:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/11/05 10:02:11 | 3219,611,648 | -HS- | M] () -- C:\hiberfil.sys
[2010/11/05 00:04:07 | 000,084,590 | ---- | M] () -- C:\Users\Peťo\Desktop\Qoobox.rar
[2010/11/04 22:55:21 | 396,710,176 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2010/11/04 22:53:51 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2010/11/04 20:30:18 | 000,151,552 | ---- | M] () -- C:\Users\Peťo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/04 17:02:29 | 000,031,007 | ---- | M] () -- C:\Users\Peťo\AppData\Roaming\UserTile.png
[2010/11/04 16:21:03 | 000,000,804 | ---- | M] () -- C:\Users\Peťo\Desktop\Total Commander.lnk
[2010/11/04 16:17:34 | 000,002,587 | ---- | M] () -- C:\Users\Peťo\Desktop\Microsoft Office Excel 2007.lnk
[2010/11/04 14:35:47 | 000,002,872 | ---- | M] () -- C:\Windows\ST5UNST.002
[2010/11/04 10:35:23 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2010/11/04 10:32:00 | 000,009,264 | ---- | M] () -- C:\Windows\System32\msqtvcap.dat
[2010/11/03 14:38:52 | 000,000,806 | ---- | M] () -- C:\Users\Peťo\Desktop\CCleaner.lnk
[2010/11/03 10:27:30 | 006,153,352 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Peťo\Desktop\3mbam-setup-1.46.exe
[2010/11/02 21:28:01 | 000,001,726 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010/10/31 06:55:18 | 000,199,904 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\System32\rmoc3260.dll
[2010/10/31 06:55:08 | 000,006,656 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\System32\pndx5016.dll
[2010/10/31 06:55:08 | 000,005,632 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\System32\pndx5032.dll
[2010/10/29 17:15:47 | 042,636,446 | ---- | M] () -- C:\Users\Peťo\Desktop\ESBE_LTC_a_VTC_ventily.zip

========== Files Created - No Company Name ==========

[2010/11/05 00:04:06 | 000,084,590 | ---- | C] () -- C:\Users\Peťo\Desktop\Qoobox.rar
[2010/11/04 22:55:21 | 396,710,176 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2010/11/04 14:35:32 | 000,002,872 | ---- | C] () -- C:\Windows\ST5UNST.002
[2010/11/04 12:05:28 | 000,000,804 | ---- | C] () -- C:\Users\Peťo\Desktop\Total Commander.lnk
[2010/11/04 12:05:24 | 000,000,545 | ---- | C] () -- C:\Windows\UC.PIF
[2010/11/04 12:05:24 | 000,000,545 | ---- | C] () -- C:\Windows\RAR.PIF
[2010/11/04 12:05:24 | 000,000,545 | ---- | C] () -- C:\Windows\PKZIP.PIF
[2010/11/04 12:05:24 | 000,000,545 | ---- | C] () -- C:\Windows\PKUNZIP.PIF
[2010/11/04 12:05:24 | 000,000,545 | ---- | C] () -- C:\Windows\NOCLOSE.PIF
[2010/11/04 12:05:24 | 000,000,545 | ---- | C] () -- C:\Windows\LHA.PIF
[2010/11/04 12:05:24 | 000,000,545 | ---- | C] () -- C:\Windows\ARJ.PIF
[2010/11/03 14:38:52 | 000,000,806 | ---- | C] () -- C:\Users\Peťo\Desktop\CCleaner.lnk
[2010/11/02 21:41:59 | 000,007,387 | ---- | C] () -- C:\Windows\System32\drivers\pctgntdi.cat
[2010/11/02 21:41:53 | 000,007,412 | ---- | C] () -- C:\Windows\System32\drivers\PCTAppEvent.cat
[2010/11/02 21:41:53 | 000,007,383 | ---- | C] () -- C:\Windows\System32\drivers\pctcore.cat
[2010/11/02 21:41:42 | 000,007,383 | ---- | C] () -- C:\Windows\System32\drivers\pctplsg.cat
[2010/11/02 21:28:01 | 000,001,726 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010/10/29 17:15:47 | 042,636,446 | ---- | C] () -- C:\Users\Peťo\Desktop\ESBE_LTC_a_VTC_ventily.zip
[2010/06/02 05:35:58 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini
[2010/01/12 19:26:02 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009/12/18 09:02:42 | 000,000,680 | ---- | C] () -- C:\Users\Peťo\AppData\Local\d3d9caps.dat
[2009/08/08 01:56:11 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2008/05/02 15:16:08 | 000,002,304 | ---- | C] () -- C:\Windows\System32\Machnm32.sys
[2008/04/19 11:11:55 | 000,000,000 | ---- | C] () -- C:\Windows\Irremote.ini
[2008/04/14 16:50:40 | 000,031,007 | ---- | C] () -- C:\Users\Peťo\AppData\Roaming\UserTile.png
[2008/04/14 14:08:42 | 000,147,456 | ---- | C] () -- C:\Windows\System32\VegaShEx.dll
[2008/04/14 14:08:34 | 000,091,136 | ---- | C] () -- C:\Windows\System32\Lfkodak.dll
[2008/04/14 14:08:33 | 000,308,224 | ---- | C] () -- C:\Windows\System32\Lffpx7.dll
[2008/03/29 20:00:23 | 000,008,861 | ---- | C] () -- C:\ProgramData\LUUnInstall.LiveUpdate
[2008/03/23 10:51:55 | 000,164,352 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2008/03/23 10:51:49 | 000,755,027 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2008/03/23 10:51:49 | 000,159,839 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2008/03/23 10:51:48 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2008/03/23 10:51:45 | 000,007,680 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2008/03/18 23:44:29 | 000,004,967 | ---- | C] () -- C:\ProgramData\dbvvomjc.bpt
[2008/03/18 23:44:26 | 000,000,191 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2008/03/18 23:44:26 | 000,000,145 | ---- | C] () -- C:\Windows\ODBC.INI
[2008/03/18 23:14:19 | 003,907,640 | ---- | C] () -- C:\Windows\System32\gsdll32.dll
[2008/02/02 13:56:09 | 000,151,552 | ---- | C] () -- C:\Users\Peťo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/02/02 13:24:38 | 000,000,000 | ---- | C] () -- C:\Users\Peťo\AppData\Roaming\wklnhst.dat
[2007/09/07 13:22:27 | 000,000,343 | ---- | C] () -- C:\ProgramData\hpzinstall.log
[2007/09/07 13:19:34 | 000,006,257 | ---- | C] () -- C:\Windows\HCWPNP.INI
[2007/09/07 13:19:15 | 000,066,048 | ---- | C] () -- C:\Windows\System32\hcwxds.dll
[2007/09/07 13:09:33 | 000,327,680 | ---- | C] () -- C:\Windows\System32\pythoncom25.dll
[2007/09/07 13:09:33 | 000,102,400 | ---- | C] () -- C:\Windows\System32\pywintypes25.dll
[2007/07/19 16:07:52 | 000,000,000 | ---- | C] () -- C:\Windows\System32\px.ini
[2006/12/13 22:01:36 | 000,520,192 | ---- | C] () -- C:\Windows\System32\CddbPlaylist2Roxio.dll
[2006/12/13 22:01:36 | 000,204,800 | ---- | C] () -- C:\Windows\System32\CddbFileTaggerRoxio.dll
[2006/11/02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/10/30 01:00:00 | 000,028,672 | ---- | C] () -- C:\Windows\System32\besched.dll
[2004/11/19 09:56:00 | 000,032,768 | ---- | C] () -- C:\Windows\System32\RYDLL32.DLL
[2003/10/02 01:00:00 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lockout.dll
[2003/10/02 01:00:00 | 000,045,056 | ---- | C] () -- C:\Windows\System32\lockres.dll
[2002/05/15 03:58:48 | 000,618,496 | ---- | C] () -- C:\Windows\System32\dXQGridEdit.dll
[1996/08/20 15:08:46 | 000,026,112 | ---- | C] () -- C:\Windows\System32\angel32.dll

========== LOP Check ==========

[2008/03/18 23:14:29 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\AutoCAD DWG to PDF Converter
[2008/04/17 11:57:52 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Autodesk
[2009/03/09 11:38:04 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2008/04/15 06:37:03 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\DisplayTune
[2008/03/16 16:32:44 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Downloaded Installations
[2010/11/04 16:21:06 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\GHISLER
[2009/06/23 12:19:47 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Kabe
[2010/06/28 08:46:29 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Metrel
[2008/02/02 13:22:10 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\muvee Technologies
[2010/04/13 18:00:38 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Opera
[2010/06/02 05:36:14 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Panasonic
[2008/07/21 15:41:49 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\PeerNetworking
[2008/03/18 16:59:16 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\ProfiCAD
[2008/04/14 14:08:07 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Složka odesílání Share-to-Web
[2010/11/04 13:58:14 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Software Informer
[2008/02/06 22:12:24 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\STORMWARE
[2008/04/14 12:53:43 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Template
[2010/04/06 06:49:21 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Uniblue
[2010/11/05 03:03:52 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\Windows Live Writer
[2010/06/22 08:56:07 | 000,000,000 | ---D | M] -- C:\Users\Peťo\AppData\Roaming\WorkXPlore3D
[2010/11/05 03:34:44 | 000,032,494 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010/11/05 14:05:59 | 000,000,420 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{59BDEC23-5F85-4E56-890A-5843EB7F0193}.job

========== Purity Check ==========



========== Custom Scans ==========


< :otl >

< SRV - File not found [Auto | Stopped] -- C:\ComboFix\PEV.cfx -- (PEVSystemStart) >

< SRV - File not found [Auto | Stopped] -- c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (LiveUpdate Notice Ex) >

< SRV - File not found [Auto | Stopped] -- C:\Program Files\Portrait Displays\HP My Display\dtsrvc.exe -- (DTSRVC) >

< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) >

< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) >

< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp) >

< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\PEO~1\AppData\Local\Temp\cpuz132\cpuz132_x32.sys -- (cpuz132) >

< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\PEO~1\AppData\Local\Temp\catchme.sys -- (catchme) >

< DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive) >

< IE - HKU\S-1-5-21-1807514103-992746668-557511064-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.centrum.sk/http://www.elzarus.sk/ [binary data] >
Invalid Switch: [binary data]


< IE - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..\URLSearchHook: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - Reg Error: Key error. File not found >

< FF - prefs.js..keyword.URL: "http://www.google.com/search?sourceid=n ... t&hl=sk&q=" >

< O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found. >

< O4 - HKLM..\Run: [] File not found >

< O13 - gopher Prefix: missing >

< O15 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..Trusted Domains: drsr.sk ([www] https in Dôveryhodné lokality) >

< O15 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..Trusted Domains: localhost ([]http in Local intranet) >

< O15 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..Trusted Domains: t-com.sk ([moj] https in Dôveryhodné lokality) >

< O15 - HKU\S-1-5-21-1807514103-992746668-557511064-1000\..Trusted Ranges: GD ([http] in Local intranet) >

< @Alternate Data Stream - 158 bytes -> C:\ProgramData\TEMP:DFC5A2B2 >

< @Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:FA5F15C4 >

< @Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:A8ADE5D8 >

< >

< :reg >

< [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] >

< "ehTray.exe"=- >

< "Google Update"=- >

< "Skype"=- >

< "swg"=- >

< [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] >

< "Adobe Reader Speed Launcher"=- >

< "SunJavaUpdateReg"=- >

< ""=- >

< "RegistryMechanic"=- >

< "TkBellExe"=- >

< >

< :files >

< C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk >
[2008/02/02 20:41:30 | 000,001,954 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk

< C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk >
[2008/02/02 20:41:30 | 000,001,912 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk

< C:\Windows\tasks\Google Software Updater.job >
[2010/06/13 10:16:58 | 000,000,956 | ---- | M] () -- C:\Windows\Tasks\Google Software Updater.job

< C:\Windows\tasks\GoogleUpdateTaskMachineCore.job >
[2010/11/05 11:31:00 | 000,000,996 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

< C:\Windows\tasks\GoogleUpdateTaskMachineUA.job >
[2010/11/05 13:31:04 | 000,001,000 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1807514103-992746668-557511064-1000Core.job >
[2010/11/05 11:11:00 | 000,000,966 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1807514103-992746668-557511064-1000Core.job

< C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1807514103-992746668-557511064-1000UA.job >
[2010/11/05 13:11:01 | 000,001,018 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1807514103-992746668-557511064-1000UA.job

< C:\Windows\tasks\User_Feed_Synchronization-{59BDEC23-5F85-4E56-890A-5843EB7F0193}.job >
[2010/11/05 14:05:59 | 000,000,420 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{59BDEC23-5F85-4E56-890A-5843EB7F0193}.job

< %windir%\system32\*.tmp.dll /s >

< %windir%\system32\SET*.tmp /s >
[1 C:\Windows\system32\spool\drivers\w32x86\{53580478-F6CE-4466-B22C-D84E240AFFFC}\*.tmp files -> C:\Windows\system32\spool\drivers\w32x86\{53580478-F6CE-4466-B22C-D84E240AFFFC}\*.tmp -> ]

< %windir%\*.tmp /s >
[8 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[9 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\System32\DriverStore\FileRepository\hpqratpk.inf_cb20525b\*.tmp files -> C:\Windows\System32\DriverStore\FileRepository\hpqratpk.inf_cb20525b\*.tmp -> ]
[1 C:\Windows\System32\spool\drivers\w32x86\{53580478-F6CE-4466-B22C-D84E240AFFFC}\*.tmp files -> C:\Windows\System32\spool\drivers\w32x86\{53580478-F6CE-4466-B22C-D84E240AFFFC}\*.tmp -> ]
[1 C:\Windows\twain_32\*.tmp files -> C:\Windows\twain_32\*.tmp -> ]

< >

< :commands >

< [RESETHOSTS] >

< [EMPTYTEMP] >

< [EMPTYFLASH] >

========== Alternate Data Streams ==========

@Alternate Data Stream - 158 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:FA5F15C4
@Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:A8ADE5D8

< End of report >

Re: posím o preventivku mal som security tol

Napsal: 05 lis 2010 14:50
od vyosek
Ne, to jste klikl na Searh, musite vlozit skript a kliknout na FIX :!:

Re: posím o preventivku mal som security tol

Napsal: 05 lis 2010 14:56
od ruso
na ploche monitora som našiel ešte toto
2x desktop.ini

1
[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21799

2.
[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21769
IconResource=%SystemRoot%\system32\imageres.dll,-183

mám to vymazať ?

Re: posím o preventivku mal som security tol

Napsal: 05 lis 2010 14:58
od vyosek
:arrow: Dejte mi uz hlavne log at vim co se provedlo

:arrow: Jsou to skryte soubory a OTL je odkrylo, zakryjte je takto: Start - Ovladaci panely - moznosti slozky - zobrazeni - nezobrazovat skryte soubory a slozky

Re: posím o preventivku mal som security tol

Napsal: 05 lis 2010 15:34
od ruso
dal som určite fix aj bežal
neviem najsť OTL
kde ho hladať
beži malw

Re: posím o preventivku mal som security tol

Napsal: 05 lis 2010 15:41
od vyosek
Takze znovu: spustte OTL, vlozte skript a kliknete na tlacitko co je v cervenem krouzku na obrazku
Obrázek
Log na Vas po restartu vypadne, pripadne bude ulozen v C:\_OTL\MovedFiles jako soubor ve tvaru DatumAplikace_CasAplikace.txt

Re: posím o preventivku mal som security tol

Napsal: 05 lis 2010 15:46
od ruso
bol tam
All processes killed
========== OTL ==========
Service PEVSystemStart stopped successfully!
Service PEVSystemStart deleted successfully!
File C:\ComboFix\PEV.cfx not found.
Service LiveUpdate Notice Ex stopped successfully!
Service LiveUpdate Notice Ex deleted successfully!
File c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe not found.
Service DTSRVC stopped successfully!
Service DTSRVC deleted successfully!
File C:\Program Files\Portrait Displays\HP My Display\dtsrvc.exe not found.
Service NwlnkFwd stopped successfully!
Service NwlnkFwd deleted successfully!
File C:\Windows\System32\DRIVERS\nwlnkfwd.sys not found.
Service NwlnkFlt stopped successfully!
Service NwlnkFlt deleted successfully!
File C:\Windows\System32\DRIVERS\nwlnkflt.sys not found.
Service IpInIp stopped successfully!
Service IpInIp deleted successfully!
File C:\Windows\System32\DRIVERS\ipinip.sys not found.
Service cpuz132 stopped successfully!
Service cpuz132 deleted successfully!
File C:\Users\PEO~1\AppData\Local\Temp\cpuz132\cpuz132_x32.sys not found.
Error: No service named catchme was found to stop!
Service\Driver key catchme not found.
File C:\Users\PEO~1\AppData\Local\Temp\catchme.sys not found.
Service blbdrive stopped successfully!
Service blbdrive deleted successfully!
File C:\Windows\System32\drivers\blbdrive.sys not found.
HKU\S-1-5-21-1807514103-992746668-557511064-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Secondary Start Pages| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-1807514103-992746668-557511064-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1392b8d2-5c05-419f-a8f6-b9f15a596612}\ not found.
Prefs.js: "http://www.google.com/search?sourceid=n ... t&hl=sk&q=" removed from keyword.URL
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-1807514103-992746668-557511064-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\drsr.sk\www\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-1807514103-992746668-557511064-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\localhost\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-1807514103-992746668-557511064-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\t-com.sk\moj\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1807514103-992746668-557511064-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\GD\\http deleted successfully.
ADS C:\ProgramData\TEMP:DFC5A2B2 deleted successfully.
ADS C:\ProgramData\TEMP:FA5F15C4 deleted successfully.
ADS C:\ProgramData\TEMP:A8ADE5D8 deleted successfully.
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ehTray.exe deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Skype deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\swg deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateReg deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\RegistryMechanic deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TkBellExe not found.
========== FILES ==========
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk moved successfully.
C:\Windows\tasks\Google Software Updater.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1807514103-992746668-557511064-1000Core.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1807514103-992746668-557511064-1000UA.job moved successfully.
C:\Windows\tasks\User_Feed_Synchronization-{59BDEC23-5F85-4E56-890A-5843EB7F0193}.job moved successfully.
File/Folder C:\Windows\system32\*.tmp.dll not found.
C:\Windows\system32\spool\drivers\w32x86\{53580478-F6CE-4466-B22C-D84E240AFFFC}\SETAABD.tmp moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2DF2.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3034.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7DB7.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP81A.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP85C2.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPD864.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE752.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEEF0.tmp folder moved successfully.
C:\Windows\Installer\MSI1A56.tmp moved successfully.
C:\Windows\Installer\MSI30F2.tmp moved successfully.
C:\Windows\Installer\MSI400D.tmp moved successfully.
C:\Windows\Installer\MSI56FC.tmp moved successfully.
C:\Windows\Installer\MSI856B.tmp moved successfully.
C:\Windows\Installer\MSIA834.tmp moved successfully.
C:\Windows\Installer\MSIB05F.tmp moved successfully.
C:\Windows\Installer\MSIBD1B.tmp moved successfully.
C:\Windows\Installer\MSIC1EF.tmp moved successfully.
File move failed. C:\Windows\System32\DriverStore\FileRepository\hpqratpk.inf_cb20525b\hpqgends.tmp scheduled to be moved on reboot.
C:\Windows\twain_32\hpqgends.tmp moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Peťo
->Temp folder emptied: 8460866 bytes
->Temporary Internet Files folder emptied: 12227069 bytes
->Java cache emptied: 245298869 bytes
->FireFox cache emptied: 61050148 bytes
->Google Chrome cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 140097 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1083100 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 13251227 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 13691873 bytes
RecycleBin emptied: 954 bytes

Total Files Cleaned = 339,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Peťo
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.17.2 log created on 11052010_141008

Re: posím o preventivku mal som security tol

Napsal: 05 lis 2010 15:47
od vyosek
Fajn, tohle by bylo...nechte dobehnout MBAM a log pak sem...

Re: posím o preventivku mal som security tol

Napsal: 05 lis 2010 16:07
od ruso
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verzia databázy: 5050

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18975

5. 11. 2010 16:05:02
mbam-log-2010-11-05 (16-05-02).txt

Typ kontroly: Úplná kontrola (C:\|D:\|F:\|)
Objektov kontrolovaných: 287830
Uplynulý čas: 1 hod, 16 min, 0 sek

Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 0
Infikované súbory: 0

Infikované služby pamäte:
(Škodlivé položky neboli zistené)

Infikované moduly pamäte:
(Škodlivé položky neboli zistené)

Infikované registračné kľúče:
(Škodlivé položky neboli zistené)

Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)

Infikované položky registračných dát:
(Škodlivé položky neboli zistené)

Infikované priečinky:
(Škodlivé položky neboli zistené)

Infikované súbory:
(Škodlivé položky neboli zistené)

Re: posím o preventivku mal som security tol

Napsal: 05 lis 2010 16:11
od vyosek
PC vypada cisty, chova se i tak :???: Jsou nejake problemy :???:

Re: posím o preventivku mal som security tol

Napsal: 05 lis 2010 16:24
od ruso
dal som ešte CCleaner
teraz ide OK uvidíme
Ďakujem pekne :lol:

Re: posím o preventivku mal som security tol

Napsal: 05 lis 2010 16:26
od vyosek
:arrow: T-Cleaner http://sweb.cz/Marinus/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Ccleaner
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za 14 dni

:arrow: Pokud nejsou problemy a ani dotazy, je to z me strany vse :turned:

Nemate zac, rad jsem pomohl :) Zase nekdy Obrázek
Všechny časy jsou v UTC+01:00
Stránka 3 z 3

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz