Stránka 5 z 6

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 20:08
od motji
Vložte log ze Rsitu a

:arrow: Stáhněte SecurityCheck http://screen317.spywareinfoforum.org/SecurityCheck.exe
-program spusťte a postupujte podle instrukcí. Log vložte zde :)

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 20:19
od michajlo
Results of screen317's Security Check version 0.99.1
Windows Vista Service Pack 2 (UAC is enabled)
``````````````````````````````
Antivirus/Firewall Check:

Windows Firewall Disabled!
DesetiPrsty5 5.2
Kaspersky Anti-Virus 2010
Kaspersky Anti-Virus 2010
WMIC entry does not exist for antivirus; attempting automatic update.
``````````````````````````````
Anti-malware/Other Utilities Check:

HijackThis 2.0.2
CCleaner
Wise Registry Cleaner Free 5.02
AusLogics Registry Cleaner
Java(TM) 6 Update 17
Java(TM) 6 Update 3
Out of date Java installed!
Adobe Flash Player 10
Adobe Reader 8 - Slovak
Out of date Adobe Reader installed!
``````````````````````````````
Process Check:
objlist.exe by Laurent

Kaspersky Lab Kaspersky Anti-Virus 2010 avp.exe
``````````````````````````````
DNS Vulnerability Check:

GREAT! (Not vulnerable to DNS cache poisoning)

`````````End of Log```````````

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 20:48
od michajlo
Ten firewall som hneď zapol :)

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 22:16
od motji
:arrow: Doporučila bych Vám jiný firewall , než ten ve windows, ten je nedostačující. Zde máte na výběr http://www.viry.cz/forum/viewforum.php?f=41

:arrow: Odinstalace staré Javy
http://www.viry.cz/forum/viewtopic.php?f=46&t=88290


:arrow: Stáhněte FileHippo.com UpdateChecker http://www.filehippo.com/updatechecker/FHSetup.exe
-nainstalujte a spustte.
-Vyhledá ve Vašem počítači programy, u kterých je ke stažení nová aktualizace. Tu Vám také nabídne
-program doporučiji spouštět jednou týdně


:arrow: Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

Folder::
C:\Users\Andrejko\AppData\Roaming\ESET
C:\Users\Andrejko\AppData\Roaming\TrojanHunter
C:\Program Files\TrojanHunter 5.1
C:\ProgramData\ESET
C:\Program Files\Panda Security
C:\ProgramData\Norton

Registry::
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8AA217B9-D729-4ee0-AED7-E93D695E94A2}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{87e15f13-02a9-11de-8b33-00037a8dd304}]

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:

Obrázek


-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 23:22
od michajlo
ComboFix 10-03-09.04 - Andrejko . 03. 2010 23:04:46.8.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.421.1051.18.3069.2316 [GMT 1:00]
Running from: c:\users\Andrejko\Downloads\ComboFix.exe
Command switches used :: c:\users\Andrejko\Desktop\CFScript.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Panda Security
c:\program files\Panda Security\ActiveScan 2.0\apicr.dll
c:\program files\Panda Security\ActiveScan 2.0\as2auditor.dll
c:\program files\Panda Security\ActiveScan 2.0\as2data.dll
c:\program files\Panda Security\ActiveScan 2.0\as2guiie.dll
c:\program files\Panda Security\ActiveScan 2.0\as2inst.dll
c:\program files\Panda Security\ActiveScan 2.0\as2scanner.dll
c:\program files\Panda Security\ActiveScan 2.0\as2stubie.dll
c:\program files\Panda Security\ActiveScan 2.0\as2uninst.exe
c:\program files\Panda Security\ActiveScan 2.0\asmdat.dll
c:\program files\Panda Security\ActiveScan 2.0\avdetect.ini
c:\program files\Panda Security\ActiveScan 2.0\ee366d2b2e4ede8287de879e85a0dcc2KRN_DATA
c:\program files\Panda Security\ActiveScan 2.0\ee366d2b2e4ede8287de879e85a0dcc2PSK_NM
c:\program files\Panda Security\ActiveScan 2.0\ee366d2b2e4ede8287de879e85a0dcc2PSK_NM2
c:\program files\Panda Security\ActiveScan 2.0\firewalldetect.ini
c:\program files\Panda Security\ActiveScan 2.0\kreexent.dll
c:\program files\Panda Security\ActiveScan 2.0\libcomm.dll
c:\program files\Panda Security\ActiveScan 2.0\libxml2.dll
c:\program files\Panda Security\ActiveScan 2.0\mapvfile.dll
c:\program files\Panda Security\ActiveScan 2.0\memvfile.dll
c:\program files\Panda Security\ActiveScan 2.0\microsoft.vc80.crt.manifest
c:\program files\Panda Security\ActiveScan 2.0\minicrypto.dll
c:\program files\Panda Security\ActiveScan 2.0\msvcp80.dll
c:\program files\Panda Security\ActiveScan 2.0\msvcr71.dll
c:\program files\Panda Security\ActiveScan 2.0\msvcr80.dll
c:\program files\Panda Security\ActiveScan 2.0\nanocache.fil2
c:\program files\Panda Security\ActiveScan 2.0\npwrapper.dll
c:\program files\Panda Security\ActiveScan 2.0\pav.sig
c:\program files\Panda Security\ActiveScan 2.0\pavboot.sys
c:\program files\Panda Security\ActiveScan 2.0\pavboot64.sys
c:\program files\Panda Security\ActiveScan 2.0\pavexcom.dll
c:\program files\Panda Security\ActiveScan 2.0\pavoe.dll
c:\program files\Panda Security\ActiveScan 2.0\pavsddl.dll
c:\program files\Panda Security\ActiveScan 2.0\pavvt.dll
c:\program files\Panda Security\ActiveScan 2.0\pavvts.dat
c:\program files\Panda Security\ActiveScan 2.0\pskads.dll
c:\program files\Panda Security\ActiveScan 2.0\pskahk.dll
c:\program files\Panda Security\ActiveScan 2.0\pskalloc.dll
c:\program files\Panda Security\ActiveScan 2.0\pskas.dll
c:\program files\Panda Security\ActiveScan 2.0\pskavs.dll
c:\program files\Panda Security\ActiveScan 2.0\pskcmp.dll
c:\program files\Panda Security\ActiveScan 2.0\pskfss.dll
c:\program files\Panda Security\ActiveScan 2.0\pskhtml.dll
c:\program files\Panda Security\ActiveScan 2.0\pskmdfs.dll
c:\program files\Panda Security\ActiveScan 2.0\pskmfs.dll
c:\program files\Panda Security\ActiveScan 2.0\psknc.dll
c:\program files\Panda Security\ActiveScan 2.0\pskpack.dll
c:\program files\Panda Security\ActiveScan 2.0\pskqhs.dll
c:\program files\Panda Security\ActiveScan 2.0\pskscs.dll
c:\program files\Panda Security\ActiveScan 2.0\pskutil.dll
c:\program files\Panda Security\ActiveScan 2.0\pskvfile.dll
c:\program files\Panda Security\ActiveScan 2.0\pskvfs.dll
c:\program files\Panda Security\ActiveScan 2.0\pskvm.dll
c:\program files\Panda Security\ActiveScan 2.0\psnden.dll
c:\program files\Panda Security\ActiveScan 2.0\psndsk.dll
c:\program files\Panda Security\ActiveScan 2.0\psnengav.dll
c:\program files\Panda Security\ActiveScan 2.0\psnengav.nsc
c:\program files\Panda Security\ActiveScan 2.0\psnfc.dll
c:\program files\Panda Security\ActiveScan 2.0\psnglkntex.dll
c:\program files\Panda Security\ActiveScan 2.0\psnhsh.dll
c:\program files\Panda Security\ActiveScan 2.0\psnkrnl.dll
c:\program files\Panda Security\ActiveScan 2.0\psnxprs.dll
c:\program files\Panda Security\ActiveScan 2.0\psqmgr.dll
c:\program files\Panda Security\ActiveScan 2.0\psqstore\Invent.QCF
c:\program files\Panda Security\ActiveScan 2.0\psqstore\Invent.QCF.ext
c:\program files\Panda Security\ActiveScan 2.0\psqstore\PSQ.CFG
c:\program files\Panda Security\ActiveScan 2.0\pssarf.dll
c:\program files\Panda Security\ActiveScan 2.0\psscan.dll
c:\program files\Panda Security\ActiveScan 2.0\psscoms.dll
c:\program files\Panda Security\ActiveScan 2.0\psscpu.dll
c:\program files\Panda Security\ActiveScan 2.0\pssdet.dll
c:\program files\Panda Security\ActiveScan 2.0\psspa.dll
c:\program files\Panda Security\ActiveScan 2.0\pssqem.dll
c:\program files\Panda Security\ActiveScan 2.0\pssuts.dll
c:\program files\Panda Security\ActiveScan 2.0\pssyschk.dll
c:\program files\Panda Security\ActiveScan 2.0\putczip.dll
c:\program files\Panda Security\ActiveScan 2.0\rkpavproc.sys
c:\program files\Panda Security\ActiveScan 2.0\rkpavproc64.sys
c:\program files\Panda Security\ActiveScan 2.0\scremlsp.exe
c:\program files\Panda Security\ActiveScan 2.0\vplatdis.dll
c:\program files\Panda Security\ActiveScan 2.0\vplatprc.dll
c:\program files\TrojanHunter 5.1
c:\program files\TrojanHunter 5.1\Debug.log
c:\program files\TrojanHunter 5.1\IL.ini
c:\program files\TrojanHunter 5.1\Scan Reports\2010-03-09_0535.txt
c:\programdata\Norton
c:\programdata\Norton\00000082\00000105\0000034c\cltLMS1.dat
c:\programdata\Norton\00000082\00000105\0000034c\cltLMS2.dat
c:\programdata\Norton\00000082\00000105\cltupgrade.dat
c:\programdata\Norton\00000082\00000105\key.txt
c:\programdata\Norton\symdata.xml
c:\users\Andrejko\AppData\Roaming\TrojanHunter
c:\users\Andrejko\AppData\Roaming\TrojanHunter\TreeState.dat

.
((((((((((((((((((((((((( Files Created from 2010-02-09 to 2010-03-09 )))))))))))))))))))))))))))))))
.

2010-03-09 22:13 . 2010-03-09 22:13 -------- d-----w- c:\users\Andrejko\AppData\Local\temp
2010-03-09 22:13 . 2010-03-09 22:13 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-03-09 22:13 . 2010-03-09 22:13 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-03-09 21:57 . 2010-03-09 21:57 318976 ----a-w- c:\windows\system32\CF30350.exe
2010-03-09 19:02 . 2010-03-09 19:06 -------- d-----w- c:\program files\trend micro
2010-03-09 19:02 . 2010-03-09 19:03 -------- d-----w- C:\rsit
2010-03-09 14:11 . 2010-03-09 14:11 80400 ----a-w- c:\programdata\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav9exec\9.0.0.736\fssync.dll
2010-03-09 14:11 . 2010-03-09 14:11 80400 ----a-w- c:\programdata\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.736\fssync.dll
2010-03-09 13:55 . 2010-03-09 13:55 95259 ----a-w- c:\windows\system32\drivers\klick.dat
2010-03-09 13:55 . 2010-03-09 13:55 108059 ----a-w- c:\windows\system32\drivers\klin.dat
2010-03-09 13:54 . 2010-03-09 13:54 -------- d-----w- c:\program files\Kaspersky Lab
2010-03-09 13:46 . 2010-03-09 13:46 -------- d-----w- c:\programdata\Kaspersky Lab Setup Files
2010-03-09 05:42 . 2010-03-09 05:42 -------- d-----w- c:\program files\AVG
2010-03-09 00:02 . 2010-03-09 00:02 -------- d-----w- c:\program files\Enigma Software Group
2010-03-08 22:23 . 2010-03-08 22:23 -------- d-----w- c:\users\Andrejko\AppData\Local\ESET
2010-03-08 21:38 . 2010-03-09 21:10 -------- d-----w- c:\programdata\Kaspersky Lab
2010-03-08 16:31 . 2010-03-08 16:31 16925 ----a-w- c:\windows\DIIUnin.dat
2010-03-08 16:31 . 2010-03-08 16:31 2829 ----a-w- c:\windows\DIIUnin.pif
2010-03-08 16:31 . 2010-03-08 16:31 94208 ----a-w- c:\windows\DIIUnin.exe
2010-03-08 16:29 . 2010-03-08 23:41 -------- d-----w- c:\program files\Diablo II
2010-03-07 22:20 . 2010-02-12 10:32 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-03-04 12:33 . 2010-03-04 12:33 -------- d-----w- c:\programdata\PC Suite
2010-03-04 12:33 . 2010-03-04 12:33 -------- d-----w- c:\users\Andrejko\AppData\Roaming\PC Suite
2010-03-04 12:28 . 2010-03-04 12:28 -------- d-----w- c:\programdata\Nokia
2010-03-04 12:24 . 2010-03-04 12:24 -------- d-----w- c:\program files\DIFX
2010-03-04 12:24 . 2008-08-26 08:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2010-03-04 12:24 . 2010-03-04 12:24 -------- d-----w- c:\program files\PC Connectivity Solution
2010-03-04 12:20 . 2009-12-30 10:30 91136 ----a-w- c:\windows\system32\nmwcdcls.dll
2010-03-04 12:20 . 2010-03-04 12:20 -------- d-----w- c:\program files\Nokia
2010-03-04 12:20 . 2010-03-04 12:20 -------- d-----w- c:\program files\Common Files\Nokia
2010-03-04 12:20 . 2010-03-02 14:59 34814832 ----a-w- c:\programdata\Installations\{D043E0F8-5EFA-4102-A863-08F39D9DF2F4}\NokiaSoftwareUpdaterSetup_sk.exe
2010-03-04 12:18 . 2010-03-04 12:18 36864 ----a-w- c:\programdata\Installations\{D043E0F8-5EFA-4102-A863-08F39D9DF2F4}\Installer\CommonCustomActions\Sleep.exe
2010-03-04 12:18 . 2010-03-04 12:18 3351812 ----a-w- c:\programdata\Installations\{D043E0F8-5EFA-4102-A863-08F39D9DF2F4}\Installer\CommonCustomActions\msxml6Exec.exe
2010-03-04 12:18 . 2010-03-04 12:18 3203453 ----a-w- c:\programdata\Installations\{D043E0F8-5EFA-4102-A863-08F39D9DF2F4}\Installer\CommonCustomActions\vcredistExec.exe
2010-03-04 12:18 . 2010-03-04 12:18 -------- d-----w- c:\programdata\Installations
2010-03-03 08:31 . 2010-03-03 08:31 -------- d-----w- C:\VJVod_Cache
2010-02-25 11:59 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-02-25 11:59 . 2010-02-25 11:59 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-25 11:59 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-02-24 12:42 . 2010-01-23 09:26 2048 ----a-w- c:\windows\system32\tzres.dll
2010-02-24 12:29 . 2010-01-25 12:00 471552 ----a-w- c:\windows\system32\secproc_isv.dll
2010-02-24 12:29 . 2010-01-25 12:00 471552 ----a-w- c:\windows\system32\secproc.dll
2010-02-24 12:29 . 2010-01-25 08:21 526336 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-02-24 12:29 . 2010-01-25 08:21 346624 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-02-24 12:29 . 2010-01-25 08:21 518144 ----a-w- c:\windows\system32\RMActivate.exe
2010-02-24 12:29 . 2010-01-25 08:21 347136 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-02-24 12:29 . 2010-01-25 12:00 152576 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-02-24 12:29 . 2010-01-25 12:00 152064 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-02-24 12:29 . 2010-01-25 11:58 332288 ----a-w- c:\windows\system32\msdrm.dll
2010-02-24 12:29 . 2010-01-06 15:39 1696256 ----a-w- c:\windows\system32\gameux.dll
2010-02-24 12:29 . 2010-01-06 15:38 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2010-02-24 12:29 . 2010-01-06 13:30 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2010-02-24 10:23 . 2010-02-24 10:28 -------- d-----w- c:\program files\Wise Registry Cleaner
2010-02-24 10:12 . 2010-02-24 10:12 -------- d-----w- c:\program files\VS Revo Group
2010-02-24 07:42 . 2010-03-09 05:41 -------- d-----w- c:\program files\ESET
2010-02-23 15:20 . 2010-02-24 08:16 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-17 11:39 . 2010-02-17 11:39 -------- d-----w- c:\program files\Ubisoft
2010-02-10 08:48 . 2009-12-11 11:43 302080 ----a-w- c:\windows\system32\drivers\srv.sys
2010-02-10 08:48 . 2009-12-11 11:43 98816 ----a-w- c:\windows\system32\drivers\srvnet.sys
2010-02-10 08:48 . 2009-12-08 20:01 3600456 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-02-10 08:48 . 2009-12-08 20:01 3548216 ----a-w- c:\windows\system32\ntoskrnl.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-09 19:10 . 2008-11-20 21:10 -------- d-----w- c:\programdata\Apple Computer
2010-03-09 13:49 . 2009-02-24 19:42 -------- d-----w- c:\users\Andrejko\AppData\Roaming\SUPERAntiSpyware.com
2010-03-09 13:49 . 2008-10-22 13:45 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-03-09 13:49 . 2009-02-24 19:42 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-03-09 06:13 . 2009-11-06 12:43 -------- d-----w- c:\program files\Stylish Profile
2010-03-08 23:41 . 2008-10-27 12:19 -------- d-----w- c:\program files\Common Files\Skype
2010-03-08 21:18 . 2008-04-24 06:44 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-03-08 20:02 . 2009-04-22 10:09 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-03-05 21:33 . 2008-10-22 13:53 1 ----a-w- c:\users\Andrejko\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-03-04 12:33 . 2010-03-04 12:33 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
2010-03-03 09:39 . 2009-07-23 20:21 680 ----a-w- c:\users\Andrejko\AppData\Local\d3d9caps.dat
2010-03-02 20:58 . 2008-11-28 14:33 -------- d-----w- c:\users\Andrejko\AppData\Roaming\dvdcss
2010-02-25 05:24 . 2009-04-23 18:34 130448 ----a-w- c:\users\Andrejko\AppData\Local\GDIPFONTCACHEV1.DAT
2010-02-24 22:58 . 2006-11-02 12:37 -------- d-----w- c:\program files\Microsoft Games
2010-02-24 10:41 . 2008-05-14 05:57 -------- d-----w- c:\program files\Microsoft Works
2010-02-13 21:11 . 2009-11-26 09:43 -------- d-----w- c:\program files\Activision
2010-02-11 21:41 . 2010-01-13 00:43 -------- d-----w- c:\programdata\Media Center Programs
2010-02-11 08:21 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-02-10 21:30 . 2008-04-24 07:18 -------- d-----w- c:\program files\Google
2010-01-31 10:30 . 2010-01-30 21:43 -------- d-----w- c:\program files\Pcsx2
2010-01-31 10:20 . 2010-01-31 10:20 -------- d-----w- c:\program files\Common Files\Apple
2010-01-31 10:20 . 2010-01-31 10:20 -------- d-----w- c:\program files\Apple Software Update
2010-01-31 10:20 . 2010-01-31 10:20 -------- d-----w- c:\programdata\Apple
2010-01-31 10:17 . 2010-01-31 10:17 -------- d-----w- c:\users\Andrejko\AppData\Roaming\Thinstall
2010-01-21 13:53 . 2010-01-21 13:53 18048 ----a-w- c:\windows\system32\drivers\ccdcmb.sys
2010-01-13 09:20 . 2010-01-13 09:20 -------- d-----w- c:\programdata\BioWare
2010-01-13 08:44 . 2010-01-13 07:23 -------- d-----w- c:\program files\Common Files\BioWare
2010-01-13 00:44 . 2008-10-26 15:59 -------- d-----w- c:\program files\AGEIA Technologies
2010-01-11 15:55 . 2010-01-11 15:54 -------- d-----w- c:\users\Andrejko\AppData\Roaming\uTorrent
2010-01-06 15:38 . 2010-02-24 12:29 173056 ----a-w- c:\windows\AppPatch\AcXtrnal.dll
2010-01-06 15:38 . 2010-02-24 12:29 542720 ----a-w- c:\windows\AppPatch\AcLayers.dll
2010-01-06 15:38 . 2010-02-24 12:29 458752 ----a-w- c:\windows\AppPatch\AcSpecfc.dll
2010-01-06 15:38 . 2010-02-24 12:29 2159616 ----a-w- c:\windows\AppPatch\AcGenral.dll
2010-01-06 10:18 . 2010-01-06 10:18 96 ----a-w- c:\users\Andrejko\AppData\Local\fusioncache.dat
2010-01-02 06:38 . 2010-01-24 20:46 916480 ----a-w- c:\windows\system32\wininet.dll
2010-01-02 06:32 . 2010-01-24 20:46 71680 ----a-w- c:\windows\system32\iesetup.dll
2010-01-02 06:32 . 2010-01-24 20:46 109056 ----a-w- c:\windows\system32\iesysprep.dll
2010-01-02 04:57 . 2010-01-24 20:46 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-12-30 10:30 . 2009-12-30 10:30 7936 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys
2009-12-30 10:30 . 2009-12-30 10:30 660480 ----a-w- c:\windows\system32\nmwcdcocls.dll
2009-12-30 10:30 . 2009-12-30 10:30 7936 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys
2009-12-30 10:30 . 2009-12-30 10:30 22016 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys
2009-12-30 10:25 . 2009-12-30 10:25 8320 ----a-w- c:\windows\system32\drivers\nmwcdnsuc.sys
2009-12-30 10:25 . 2009-12-30 10:25 137344 ----a-w- c:\windows\system32\drivers\nmwcdnsu.sys
2009-03-31 20:47 . 2009-04-22 10:33 324976 ----a-w- c:\program files\mozilla firefox\components\coFFPlgn.dll
2009-03-01 22:08 . 2009-03-01 21:15 895008 --sha-w- c:\windows\System32\drivers\fidbox.dat
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TOSCDSPD"="c:\program files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe" [2008-01-29 430080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2008-01-29 4911104]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1029416]
"ITSecMng"="c:\program files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe" [2007-09-28 75136]
"topi"="c:\program files\TOSHIBA\Toshiba Online Product Information\topi.exe" [2007-07-10 581632]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2007-10-25 413696]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2008-01-17 431456]
"HSON"="c:\program files\TOSHIBA\TBS\HSON.exe" [2007-10-31 54608]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2008-01-25 509816]
"00TCrdMain"="c:\program files\TOSHIBA\FlashCards\TCrdMain.exe" [2008-01-22 712704]
"Toshiba Registration"="c:\program files\Toshiba\Registration\ToshibaRegistration.exe" [2007-05-04 571024]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-03-07 198160]
"Skytel"="Skytel.exe" [2007-11-20 1826816]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"PinnacleDriverCheck"="c:\windows\system32\PSDrvCheck.exe" [2003-11-10 406016]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe" [2009-10-20 340456]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2009-3-25 113664]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\KASPER~1\KASPER~1\mzvkbd3.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk]
backup=c:\windows\pss\Bluetooth Manager.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-01-11 21:16 39792 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2009-10-30 11:57 369200 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Desktop SMS]
2007-06-18 08:51 1507328 ----a-w- c:\program files\IDM\Desktop SMS\DesktopSMS.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
2008-01-21 02:25 125952 ----a-w- c:\windows\ehome\ehtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2006-01-12 15:40 155648 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector]
2006-12-06 01:44 366400 ----a-w- c:\program files\Picasa2\PicasaMediaDetector.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
2009-04-11 06:28 1233920 ----a-w- c:\program files\Windows Sidebar\sidebar.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
2008-01-21 02:23 1008184 ----a-w- c:\program files\Windows Defender\MSASCui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile-based device management]
2008-01-21 02:23 215552 ----a-w- c:\windows\WindowsMobile\wmdSync.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):91,64,a1,74,da,51,ca,01

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2706454667-533331120-2221285752-1000]
"EnableNotificationsRef"=dword:00000001

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2009-11-25 691696]
R2 gupdate1ca5670872813c8;Služba Google Update (gupdate1ca5670872813c8);c:\program files\Google\Update\GoogleUpdate.exe [2009-10-26 133104]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2009-12-30 137344]
R3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2009-12-30 8320]
S0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2009-10-14 36880]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2009-11-03 21520]
S2 ConfigFree Service;ConfigFree Service;c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe [2007-12-25 40960]
S2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;c:\program files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [2007-12-03 126976]
S3 FwLnk;FwLnk Driver;c:\windows\system32\DRIVERS\FwLnk.sys [2006-11-20 7168]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2009-10-02 19472]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
vvdsvc REG_MULTI_SZ vvdsvc
.
Contents of the 'Scheduled Tasks' folder

2010-03-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-26 19:14]

2010-03-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-26 19:14]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.sk
mStart Page = about:blank
uInternet Settings,ProxyOverride = local
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: {4E7532CE-EE46-4735-BEC1-40CECF5761DC} = 10.0.0.254
FF - ProfilePath - c:\users\Andrejko\AppData\Roaming\Mozilla\Firefox\Profiles\vyyfj8i8.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.sk/
FF - component: c:\program files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru\components\KavLinkFilter.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\users\Andrejko\AppData\Roaming\Mozilla\Firefox\Profiles\vyyfj8i8.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\plugins\np_gp.dll

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".sk");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - ORPHANS REMOVED - - - -

MSConfigStartUp-QuickTime Task - c:\program files\QuickTime\QTTask.exe
AddRemove-ActiveScan 2.0 - c:\program files\Panda Security\ActiveScan 2.0\as2uninst.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-09 23:13
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Completion time: 2010-03-09 23:19:13
ComboFix-quarantined-files.txt 2010-03-09 22:19
ComboFix2.txt 2010-03-09 07:13

Pre-Run: 66 215 829 504 bytes free
Post-Run: 65 984 352 256 bytes free

- - End Of File - - E64B83B73070BD4828315C789F411A29

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 09 bře 2010 23:39
od motji
:arrow: Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


***********


:arrow: Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir



***********


:arrow: Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

Obrázekzáložka čistič
- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner

Obrázekzáložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy :arrow: ok :arrow: zavřít

Obrázek Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.


***********



:arrow: Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-vyčistí tempy a po použitých programech



***********

:arrow: Vložte nový log ze RSIT a řekněte co počítač, jak se chová, už je vše v pořádku?

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 10 bře 2010 00:03
od michajlo
Logfile of random's system information tool 1.06 (written by random/random)
Run by Andrejko at 2010-03-10 00:02:29
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 64 GB (54%) free of 119 GB
Total RAM: 3069 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 0:02:34, on 10. 3. 2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtblfs.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Andrejko\Downloads\RSIT(2).exe
C:\Program Files\trend micro\Andrejko.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Podpora odkazu pre aplikáciu Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\Windows\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe"
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: &Virtuální klávesnice - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: &Kontrola adres URL - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://appldnld.apple.com.edgesuite.net ... plugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {D4003189-95B1-4A2F-9A87-F2B03665960D} (VodClient Control Class) - http://www.vexcast.com/download/vexcast.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{4E7532CE-EE46-4735-BEC1-40CECF5761DC}: NameServer = 10.0.0.254
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Služba Google Update (gupdate1ca5670872813c8) (gupdate1ca5670872813c8) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 7506 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pre aplikáciu Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll [2009-10-20 68112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll [2009-10-20 268816]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-01-29 4911104]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-12-06 1029416]
"ITSecMng"=C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [2007-09-28 75136]
"topi"=C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe [2007-07-10 581632]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"Camera Assistant Software"=C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe [2007-10-25 413696]
"TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2008-01-17 431456]
"HSON"=C:\Program Files\TOSHIBA\TBS\HSON.exe [2007-10-31 54608]
"SmoothView"=C:\Program Files\Toshiba\SmoothView\SmoothView.exe [2008-01-25 509816]
"00TCrdMain"=C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2008-01-22 712704]
"Toshiba Registration"=C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe [2007-05-04 571024]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-03-07 198160]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"PinnacleDriverCheck"=C:\Windows\system32\PSDrvCheck.exe [2003-11-10 406016]
"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe [2009-10-20 340456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"TOSCDSPD"=C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [2008-01-29 430080]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Desktop SMS]
C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe [2007-06-18 1507328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
C:\Windows\ehome\ehTray.exe [2008-01-21 125952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector]
C:\Program Files\Picasa2\PicasaMediaDetector.exe [2006-12-06 366400]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile-based device management]
C:\Windows\WindowsMobile\wmdSync.exe [2008-01-21 215552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk]
C:\PROGRA~1\Toshiba\BLUETO~1\TosBtMng.exe [2008-01-25 2938184]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\Windows\system32\klogon.dll [2009-10-20 219664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"DisableStatusMessages"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=149
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-03-09 23:56:32 ----D---- C:\Program Files\trend micro
2010-03-09 23:56:31 ----D---- C:\rsit
2010-03-09 23:53:16 ----SHD---- C:\$RECYCLE.BIN
2010-03-09 23:19:17 ----D---- C:\Windows\temp
2010-03-09 14:54:14 ----D---- C:\Program Files\Kaspersky Lab
2010-03-09 14:46:17 ----D---- C:\ProgramData\Kaspersky Lab Setup Files
2010-03-09 06:42:04 ----D---- C:\Program Files\AVG
2010-03-09 06:31:53 ----D---- C:\Users\Andrejko\AppData\Roaming\ESET
2010-03-09 03:10:09 ----R---- C:\Windows\system32\streamhlp.dll
2010-03-09 01:02:01 ----D---- C:\Program Files\Enigma Software Group
2010-03-08 23:21:31 ----D---- C:\ProgramData\ESET
2010-03-08 22:38:39 ----D---- C:\ProgramData\Kaspersky Lab
2010-03-08 17:31:32 ----A---- C:\Windows\DIIUnin.exe
2010-03-08 17:29:21 ----D---- C:\Program Files\Diablo II
2010-03-07 23:20:55 ----A---- C:\Windows\system32\browserchoice.exe
2010-03-04 13:33:13 ----D---- C:\ProgramData\PC Suite
2010-03-04 13:33:07 ----D---- C:\Users\Andrejko\AppData\Roaming\PC Suite
2010-03-04 13:28:32 ----D---- C:\ProgramData\Nokia
2010-03-04 13:24:58 ----D---- C:\Program Files\DIFX
2010-03-04 13:24:00 ----D---- C:\Program Files\PC Connectivity Solution
2010-03-04 13:20:35 ----A---- C:\Windows\system32\nmwcdcls.dll
2010-03-04 13:20:07 ----D---- C:\Program Files\Nokia
2010-03-04 13:20:07 ----D---- C:\Program Files\Common Files\Nokia
2010-03-04 13:18:20 ----D---- C:\ProgramData\Installations
2010-03-03 09:31:36 ----HD---- C:\VJVod_Cache
2010-02-25 12:59:48 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-02-24 13:42:57 ----A---- C:\Windows\system32\jscript.dll
2010-02-24 13:42:25 ----A---- C:\Windows\system32\tzres.dll
2010-02-24 13:29:39 ----A---- C:\Windows\system32\secproc_isv.dll
2010-02-24 13:29:38 ----A---- C:\Windows\system32\secproc.dll
2010-02-24 13:29:38 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-02-24 13:29:38 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-02-24 13:29:38 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-02-24 13:29:38 ----A---- C:\Windows\system32\RMActivate.exe
2010-02-24 13:29:37 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-02-24 13:29:37 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-02-24 13:29:37 ----A---- C:\Windows\system32\msdrm.dll
2010-02-24 13:29:30 ----A---- C:\Windows\system32\gameux.dll
2010-02-24 13:29:30 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-02-24 13:29:29 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-02-24 11:23:27 ----D---- C:\Program Files\Wise Registry Cleaner
2010-02-24 11:12:46 ----D---- C:\Program Files\VS Revo Group
2010-02-24 08:42:27 ----D---- C:\Program Files\ESET
2010-02-23 16:47:38 ----D---- C:\Windows\pss
2010-02-23 16:20:07 ----N---- C:\Windows\system32\MpSigStub.exe
2010-02-17 12:39:54 ----D---- C:\Program Files\Ubisoft

======List of files/folders modified in the last 1 months======

2010-03-10 00:02:06 ----D---- C:\Windows\Prefetch
2010-03-09 23:59:44 ----D---- C:\Windows\inf
2010-03-09 23:59:44 ----AD---- C:\Windows\System32
2010-03-09 23:59:44 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-03-09 23:56:32 ----RD---- C:\Program Files
2010-03-09 23:46:20 ----D---- C:\Windows
2010-03-09 23:22:15 ----D---- C:\Windows\system32\catroot
2010-03-09 23:22:14 ----D---- C:\Windows\winsxs
2010-03-09 23:22:14 ----D---- C:\Windows\system32\catroot2
2010-03-09 23:20:01 ----SHD---- C:\System Volume Information
2010-03-09 23:14:04 ----A---- C:\Windows\system.ini
2010-03-09 23:12:58 ----D---- C:\ProgramData
2010-03-09 23:09:04 ----D---- C:\Windows\system32\drivers
2010-03-09 23:09:04 ----D---- C:\Windows\AppPatch
2010-03-09 23:09:03 ----D---- C:\Program Files\Common Files
2010-03-09 22:57:45 ----D---- C:\Windows\system32\en-US
2010-03-09 20:11:19 ----SHD---- C:\Windows\Installer
2010-03-09 20:10:36 ----D---- C:\ProgramData\Apple Computer
2010-03-09 14:49:04 ----D---- C:\Users\Andrejko\AppData\Roaming\SUPERAntiSpyware.com
2010-03-09 14:49:03 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-03-09 14:49:02 ----D---- C:\Program Files\SUPERAntiSpyware
2010-03-09 07:13:43 ----D---- C:\Program Files\Stylish Profile
2010-03-09 01:25:23 ----AD---- C:\ProgramData\TEMP
2010-03-09 01:02:06 ----D---- C:\Windows\system32\Tasks
2010-03-09 00:42:52 ----D---- C:\Windows\system32\Msdtc
2010-03-09 00:42:49 ----D---- C:\Windows\system32\wbem
2010-03-09 00:42:08 ----D---- C:\Windows\system32\config
2010-03-09 00:41:56 ----D---- C:\Windows\Tasks
2010-03-09 00:41:56 ----D---- C:\Windows\system32\spool
2010-03-09 00:41:55 ----D---- C:\Program Files\Common Files\Skype
2010-03-09 00:41:53 ----D---- C:\Windows\registration
2010-03-08 22:18:48 ----HD---- C:\Program Files\InstallShield Installation Information
2010-03-08 21:26:19 ----A---- C:\Windows\win.ini
2010-03-08 21:02:46 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-03-08 21:02:42 ----DC---- C:\Windows\system32\DRVSTORE
2010-03-04 22:06:08 ----D---- C:\Windows\Minidump
2010-03-02 21:58:37 ----D---- C:\Users\Andrejko\AppData\Roaming\dvdcss
2010-02-24 23:58:08 ----D---- C:\Program Files\Microsoft Games
2010-02-24 23:51:13 ----RSD---- C:\Windows\Fonts
2010-02-24 15:01:03 ----D---- C:\Windows\rescache
2010-02-24 14:42:26 ----D---- C:\Windows\system32\sk-SK
2010-02-24 13:51:27 ----D---- C:\Windows\WindowsMobile
2010-02-24 11:45:04 ----RSD---- C:\Windows\assembly
2010-02-24 11:43:40 ----D---- C:\Program Files\Common Files\microsoft shared
2010-02-24 11:41:54 ----D---- C:\Program Files\Microsoft Works
2010-02-23 16:47:35 ----SD---- C:\ProgramData\Microsoft
2010-02-23 15:53:54 ----D---- C:\Program Files\Mozilla Firefox
2010-02-13 22:11:31 ----D---- C:\Program Files\Activision
2010-02-11 22:52:57 ----D---- C:\Windows\Debug
2010-02-11 22:41:10 ----D---- C:\ProgramData\Media Center Programs
2010-02-11 09:21:04 ----D---- C:\Program Files\Windows Mail

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 kl1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2009-09-01 128016]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2010-03-09 311312]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2009-11-03 21520]
R1 Tosrfcom;Bluetooth RFCOMM; C:\Windows\System32\Drivers\tosrfcom.sys [2007-10-02 64128]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2008-02-15 46592]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400]
R3 AgereSoftModem;TOSHIBA V92 Software Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2006-11-28 1161888]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2008-01-30 3483648]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 FwLnk;FwLnk Driver; C:\Windows\system32\DRIVERS\FwLnk.sys [2006-11-20 7168]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-01-30 2058528]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys [2009-10-02 19472]
R3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2008-01-21 2225664]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2008-01-21 8192]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-12-28 104448]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-12-06 196400]
R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\Windows\system32\DRIVERS\tdcmdpst.sys [2006-10-18 16128]
R3 tosporte;Bluetooth COM Port; C:\Windows\system32\DRIVERS\tosporte.sys [2006-10-10 41600]
R3 tosrfbd;Bluetooth RFBUS; C:\Windows\system32\DRIVERS\tosrfbd.sys [2007-12-26 131584]
R3 tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys [2007-11-29 36608]
R3 tosrfec;Bluetooth ACPI; C:\Windows\system32\DRIVERS\tosrfec.sys [2006-10-23 9216]
R3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys [2007-11-29 74240]
R3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys [2005-01-07 18612]
R3 Tosrfusb;Bluetooth USB Controller; C:\Windows\system32\DRIVERS\tosrfusb.sys [2007-10-18 41856]
R3 usbvideo;Chicony USB 2.0 Camera; C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 UVCFTR;UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [2007-12-17 18432]
S3 ag1m8aqu;ag1m8aqu; C:\Windows\system32\drivers\ag1m8aqu.sys []
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-01-21 18048]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2009-12-30 22016]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsu.sys [2009-12-30 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsuc.sys [2009-12-30 8320]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2009-12-30 7936]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-04-11 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2009-12-30 7936]
S3 winusb;WinUSB Service; C:\Windows\system32\DRIVERS\winusb.sys [2009-04-11 31616]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2008-01-21 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2006-10-05 9216]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2008-01-30 643072]
R2 AVP;Kaspersky Anti-Virus; C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe [2009-10-20 340456]
R2 ConfigFree Service;ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [2007-12-25 40960]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 TNaviSrv;TOSHIBA Navi Support Service; C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe [2008-01-21 83312]
R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\Windows\system32\TODDSrv.exe [2007-11-21 129632]
R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe [2008-01-17 431456]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-09-28 128360]
R2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service; C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [2007-12-03 126976]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2006-08-23 49152]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S2 gupdate1ca5670872813c8;Služba Google Update (gupdate1ca5670872813c8); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-26 133104]
S2 vvdsvc;VJVodClientServices; C:\Windows\System32\svchost.exe [2008-01-21 21504]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 getPlusHelper;@C:\Program Files\NOS\bin\getPlus_Helper.dll,-101; C:\Windows\System32\svchost.exe [2008-01-21 21504]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-04-24 138168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-01-26 652800]

-----------------EOF-----------------

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 10 bře 2010 00:11
od michajlo
Počítač je v poriadku, všetko šlape :) ďakujem pekne za váš čas... Odkiaľ to všetko viete, aké programy napr. použiť? :) Akurát ten google vyhadzuje inojazyčné výsledky, no ale to sa dá prežiť.. :)

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 10 bře 2010 08:09
od motji
:arrow: Ještě smažte C:\Program Files\ESET

:arrow: Otevřete si Poznámkový blok a zkopírujte do něj text

Kód: Vybrat vše

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=-

 
-uložte jako (typ: všechny soubory) kde za název souboru zadáte "smazani.reg" bez uvozovek,
klikněte na uložit, pak na soubor standardně 2X klikněte a potvrďte dialogové okno.


Na ten google se ještě zeptám kolegů :) .
Odkud to vím? Praxe a Google :)

Není zač :)

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 10 bře 2010 11:51
od motji
:arrow: Nepoužíváte nějaký anonymizér?
:arrow: Zkuste v HJT fixnout ještě tento řádek
O1 - Hosts: ˙ţ127.0.0.1 localhost

:arrow: Tohle znáte - máte ve smlouvě s providerem?
NameServer = 10.0.0.254



/editováno/

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 10 bře 2010 17:35
od michajlo
:) Čo je to anonymizér??? Idem fixnúť toho localhosta... A ten nameServer mi nič nehovorí..

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 10 bře 2010 21:02
od motji
Anonymizér asi nepoužíváte, když nevíte, co to je :)
Anonymizér je služba, která maskuje především IP uživatele, verze jeho OS, prohlížeče, dále pak některé blokují scripty, cookies, při jeho toulkách netem
Zkontrolujte si, zda máte nastavení sítě - IP adresy podle smlouvy s poskytovatelem

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 10 bře 2010 21:30
od michajlo
Som na internáte a pripojený na wifi sieť :) Neviem, ako to mám skontrolovať... :)

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 10 bře 2010 21:32
od motji
Změnilo se po fixnutí v HJT něco?

Re: Prosím o kontrolu logu, zmenilo mi domovskú adresu

Napsal: 10 bře 2010 21:37
od michajlo
Nie, notebook ide perfektne, ale ten google je divný.. Zadám napr. slovo ,,záchod" :D , dám že ,,vyhľadať v slovenčine" a ono mi tam hodí české texty a stránky... :)