VIRY.CZ

Čaute, mám problém s Recyclerem. Combofix mi už z něj odstranil jeden vir, ale tenhle tam stále zůstává. Tady je LOG

ComboFix 10-04-14.01 - Marek 15.04.2010 10:18:06.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.2046.532 [GMT 2:00]
Spuštěný z: c:\users\Marek\Downloads\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-2933781903-1387361503-385486750-500
c:\$recycle.bin\S-1-5-21-586373795-292172335-1709522114-500
c:\users\Marek\AppData\Roaming\avdrn.dat
c:\users\Marek\AppData\Roaming\Microsoft\Internet Explorer\qiPSearchbar.dll
G:\Autorun.inf

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-03-15 do 2010-04-15 )))))))))))))))))))))))))))))))
.

2010-04-15 08:26 . 2010-04-15 08:28 -------- d-----w- c:\users\Marek\AppData\Local\temp
2010-04-15 08:26 . 2010-04-15 08:26 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-04-14 19:10 . 2010-04-14 19:11 -------- d-----w- c:\windows\system32\ca-ES
2010-04-14 19:10 . 2010-04-14 19:11 -------- d-----w- c:\windows\system32\eu-ES
2010-04-14 19:10 . 2010-04-14 19:11 -------- d-----w- c:\windows\system32\vi-VN
2010-04-14 18:52 . 2010-04-14 18:52 -------- d-----w- c:\windows\system32\EventProviders
2010-04-14 18:44 . 2010-04-14 18:15 15880 ----a-w- c:\windows\system32\lsdelete.exe
2010-04-14 18:15 . 2010-02-04 15:53 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-04-14 18:15 . 2010-04-14 18:15 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-04-14 18:11 . 2010-04-14 18:11 -------- dc-h--w- c:\programdata\{74D08EB8-01D1-4BAE-91E3-F30C1B031AC6}
2010-04-14 18:10 . 2010-04-14 18:15 -------- d-----w- c:\programdata\Lavasoft
2010-04-14 18:10 . 2010-04-14 18:12 -------- d-----w- c:\program files\Lavasoft
2010-04-14 11:02 . 2010-02-23 11:10 212992 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-04-14 11:02 . 2010-02-23 11:10 79360 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2010-04-14 11:02 . 2010-02-23 11:10 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-04-14 11:02 . 2010-03-04 17:33 430080 ----a-w- c:\windows\system32\vbscript.dll
2010-04-14 11:02 . 2010-02-18 14:07 904576 ----a-w- c:\windows\system32\drivers\tcpip.sys
2010-04-14 11:02 . 2010-02-18 13:30 200704 ----a-w- c:\windows\system32\iphlpsvc.dll
2010-04-14 11:02 . 2010-02-18 11:28 25088 ----a-w- c:\windows\system32\drivers\tunnel.sys
2010-04-14 11:01 . 2009-12-23 11:33 172032 ----a-w- c:\windows\system32\wintrust.dll
2010-04-14 11:01 . 2010-01-13 17:34 98304 ----a-w- c:\windows\system32\cabview.dll
2010-04-01 11:20 . 2010-04-01 11:20 -------- d-----w- c:\users\Marek\AppData\Local\Apple Computer
2010-03-31 20:59 . 2010-02-12 10:48 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-03-31 10:38 . 2010-03-31 10:41 -------- d-----w- c:\program files\QuickTime
2010-03-31 10:38 . 2010-03-31 10:38 -------- d-----w- c:\programdata\Apple Computer
2010-03-31 10:36 . 2010-03-09 15:42 834048 ----a-w- c:\windows\system32\wininet.dll
2010-03-31 10:36 . 2010-03-09 16:25 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-03-31 10:34 . 2010-03-31 10:34 -------- d-----w- c:\program files\Common Files\Apple
2010-03-31 10:33 . 2010-03-31 10:33 -------- d-----w- c:\users\Marek\AppData\Local\Apple
2010-03-31 10:33 . 2010-03-31 10:33 -------- d-----w- c:\program files\Apple Software Update
2010-03-31 10:33 . 2010-03-31 10:33 -------- d-----w- c:\programdata\Apple

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-15 08:29 . 2009-12-11 19:54 -------- d-----w- c:\users\Marek\AppData\Roaming\Skype
2010-04-15 08:27 . 2009-10-30 19:08 31871 ----a-w- c:\programdata\nvModes.dat
2010-04-15 08:26 . 2009-11-03 19:16 12 ----a-w- c:\windows\bthservsdp.dat
2010-04-15 08:23 . 2009-10-30 22:26 598832 ----a-w- c:\windows\system32\perfh005.dat
2010-04-15 08:23 . 2009-10-30 22:26 114992 ----a-w- c:\windows\system32\perfc005.dat
2010-04-15 07:23 . 2010-02-04 22:31 0 ----a-w- c:\users\Marek\AppData\Local\prvlcl.dat
2010-04-15 07:14 . 2009-11-07 18:16 -------- d-----w- c:\users\Marek\AppData\Roaming\skypePM
2010-04-14 20:35 . 2009-12-18 11:31 -------- d-----w- c:\programdata\avg9
2010-04-14 19:11 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2010-04-14 19:11 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-04-14 19:11 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2010-04-14 19:11 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2010-04-14 19:11 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2010-04-14 19:11 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2010-04-14 19:11 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2010-04-14 19:10 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2010-04-14 19:10 . 2009-10-30 15:13 -------- d-----w- c:\programdata\NVIDIA
2010-04-14 18:27 . 2009-10-30 13:46 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-04-14 18:24 . 2009-10-30 13:46 -------- d-----w- c:\programdata\Symantec
2010-04-14 13:16 . 2009-12-26 22:21 -------- d-----w- c:\program files\Vodafone
2010-04-14 09:44 . 2010-01-10 21:26 1 ----a-w- c:\users\Marek\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-04-09 15:39 . 2009-11-09 13:46 -------- d-----w- c:\program files\Common Files\Adobe
2010-04-08 15:17 . 2009-11-10 12:59 -------- d-----w- c:\program files\Google
2010-03-16 21:19 . 2009-12-09 12:10 7592 ----a-w- c:\users\Marek\AppData\Local\d3d9caps.dat
2010-03-13 13:32 . 2009-12-18 11:31 242696 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-03-13 13:32 . 2010-03-13 13:32 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-03-13 13:32 . 2009-12-18 11:31 29512 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-03-13 13:31 . 2009-12-18 11:31 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-03-08 10:04 . 2010-01-21 19:09 573440 ----a-w- c:\users\Marek\AppData\Roaming\GRETECH\GomPlayer\GrLauncherTempSetup.exe
2010-03-07 09:46 . 2010-03-07 09:46 -------- d-----w- c:\programdata\TVU Networks
2010-03-02 21:19 . 2010-02-26 04:26 16 ----a-w- c:\users\Marek\AppData\Roaming\rbuwzv.dat
2010-02-28 14:16 . 2009-11-01 19:16 55040 ----a-w- c:\users\Marek\AppData\Local\GDIPFONTCACHEV1.DAT
2010-02-26 06:06 . 2010-02-26 06:06 2626360 ----a-w- c:\users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\lfj16jxj.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
2010-02-20 23:06 . 2010-03-11 04:15 24064 ----a-w- c:\windows\system32\nshhttp.dll
2010-02-20 23:05 . 2010-03-11 04:15 30720 ----a-w- c:\windows\system32\httpapi.dll
2010-02-20 20:53 . 2010-03-11 04:15 411648 ----a-w- c:\windows\system32\drivers\http.sys
2010-02-04 15:53 . 2010-04-14 18:11 2954656 -c--a-w- c:\programdata\{74D08EB8-01D1-4BAE-91E3-F30C1B031AC6}\Ad-AwareInstaller.exe
2010-01-25 12:00 . 2010-02-23 19:37 471552 ----a-w- c:\windows\system32\secproc_isv.dll
2010-01-25 12:00 . 2010-02-23 19:37 152576 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-01-25 12:00 . 2010-02-23 19:37 152064 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-01-25 12:00 . 2010-02-23 19:37 471552 ----a-w- c:\windows\system32\secproc.dll
2010-01-25 11:58 . 2010-02-23 19:37 332288 ----a-w- c:\windows\system32\msdrm.dll
2010-01-25 08:21 . 2010-02-23 19:37 526336 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-01-25 08:21 . 2010-02-23 19:37 346624 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-01-25 08:21 . 2010-02-23 19:37 518144 ----a-w- c:\windows\system32\RMActivate.exe
2010-01-25 08:21 . 2010-02-23 19:37 347136 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-01-23 09:26 . 2010-02-23 19:38 2048 ----a-w- c:\windows\system32\tzres.dll
2010-01-15 18:12 . 2010-01-15 14:40 38183936 ----a-w- c:\users\Marek\AppData\Roaming\Samsung\New PC Studio\LiveUpdate\Setup_For_Full_Update_IH2_7.exe
2010-01-15 14:40 . 2010-01-15 14:40 69632 ----a-w- c:\users\Marek\AppData\Roaming\Samsung\New PC Studio\DriverChecker.exe
2009-08-31 16:55 . 2009-10-30 15:56 118000 ----a-w- c:\program files\mozilla firefox\components\qippipe.dll
2006-05-03 10:06 . 2010-01-16 12:47 163328 --sh--r- c:\windows\System32\flvDX.dll
2007-02-21 11:47 . 2010-01-16 12:47 31232 --sh--r- c:\windows\System32\msfDX.dll
2008-03-16 13:30 . 2010-01-16 12:47 216064 --sh--r- c:\windows\System32\nbDX.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-11 2153472]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-10-09 25623336]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-03-12 153136]
"AutoStartNPSAgent"="c:\program files\Samsung\Samsung New PC Studio\NPSAgent.exe" [2009-04-02 102400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2007-01-17 634880]
"RtHDVCpl"="RtHDVCpl.exe" [2007-10-09 4702208]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-10-24 178712]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2007-12-19 468264]
"QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-09-19 202032]
"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-09-04 554320]
"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2007-08-16 218408]
"DpAgent"="c:\program files\DigitalPersona\Bin\dpagent.exe" [2007-09-20 671744]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2009-07-01 37888]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-09 153136]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-21 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]

c:\users\Marek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-10-5 393216]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli DPPWDFLT

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):20,1b,16,2c,07,dc,ca,01

R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2009-11-10 135664]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-03-20 90112]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-03-20 14976]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-03-20 121856]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [2010-02-04 64288]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2009-12-04 691696]
S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\Drivers\avgldx86.sys [2010-03-13 216200]
S1 AvgTdiX;AVG Free Network Redirector;c:\windows\System32\Drivers\avgtdix.sys [2010-03-13 242696]
S2 avg9emc;AVG Free E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [2010-03-13 916760]
S2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [2010-03-13 308064]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2009-03-31 233472]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2010-04-14 1265264]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2009-03-31 36608]

--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - FSUSBEXDISK

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
.
Obsah adresáře 'Naplánované úlohy'

2010-04-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-11-10 12:59]

2010-04-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-11-10 12:59]
.
.
------- Doplňkový sken -------
.
uStart Page = start.qip.ru
uDefault_Search_URL = hxxp://search.qip.ru
uInternet Settings,ProxyOverride = local
uSearchAssistant = hxxp://search.qip.ru/ie
uSearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
FF - ProfilePath - c:\users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\lfj16jxj.default\
FF - prefs.js: browser.search.selectedEngine - QIP Search
FF - prefs.js: browser.startup.homepage - hxxp://google.cz/
FF - prefs.js: keyword.URL - hxxp://search.qip.ru/search?from=FF&query=
FF - component: c:\program files\AVG\AVG9\Firefox\components\avgssff.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\lfj16jxj.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKLM-Run-NPSStartup - (no file)

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-15 10:28
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll iaStor.sys spbn.sys >>UNKNOWN [0x849D0938]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0x8819dd24
\Driver\ACPI -> acpi.sys @ 0x807b9d68
\Driver\atapi -> 0x84a1a1f8
\Driver\iaStor -> iaStor.sys @ 0x87aca580
IoDeviceObjectType ->\Device\Harddisk0\DR0 ->Warning: possible MBR rootkit infection !
user & kernel MBR OK

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'lsass.exe'(676)
c:\windows\system32\DPPWDFLT.dll

- - - - - - - > 'Explorer.exe'(6116)
c:\program files\DigitalPersona\Bin\DpoFeedb.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\windows\system32\WLANExt.exe
c:\program files\DigitalPersona\Bin\DpHostW.exe
c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\program files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
c:\program files\AVG\AVG9\avgnsx.exe
c:\windows\system32\nvvsvc.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\program files\Hewlett-Packard\Shared\hpqWmiEx.exe
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\program files\AVG\AVG9\avgrsx.exe
c:\program files\AVG\AVG9\avgchsvx.exe
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\program files\HP\QuickPlay\Kernel\TV\QPSched.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\servicing\TrustedInstaller.exe
c:\windows\system32\conime.exe
c:\windows\RtHDVCpl.exe
c:\windows\ehome\ehmsas.exe
c:\program files\OpenOffice.org 3\program\soffice.exe
c:\program files\Common Files\Ahead\Lib\NMIndexingService.exe
c:\program files\OpenOffice.org 3\program\soffice.bin
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Skype\Plugin Manager\skypePM.exe
c:\program files\Hewlett-Packard\HP Health Check\hphc_service.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
.
**************************************************************************
.
Celkový čas: 2010-04-15 10:36:09 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-04-15 08:36

Před spuštěním: Volných bajtů: 113 285 423 104
Po spuštění: Volných bajtů: 113 249 185 792

- - End Of File - - 5BDE6D99E85ECBB3328F661610CE08E0

Hezké odpoledne

A combofix Vám poradil kdo?

Zapojte do pc všechny usb klíče, flashky...co používáte

Stáhněte na plochu UsbFix
-spusťte, zvolte jazyk E - potvrdťe enter
-klikněte na volbu 2 - enter
- po skenu sem vložte log , pokud na Vás nevyskočí, najdete ho C:\UsbFix.txt

Četl jsem to tady na foru. Ale tady je ten LOG z USBfixu. A díky moc za rady

############################## | UsbFix V6.104 |

User : Marek (Administrators) # MAREK-PC
Update on 14/04/2010 by El Desaparecido , C_XX & Chimay8
Start at: 13:49:36 | 15.4.2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz
Microsoft® Windows Vista™ Home Premium (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 7.0.6002.18005
Windows Firewall Status : Enabled

C:\ -> Local Fixed Disk # 149,05 Go (105,59 Go free) # NTFS
D:\ -> CD-ROM Disc
E:\ -> CD-ROM Disc
F:\ -> CD-ROM Disc
G:\ -> Local Fixed Disk # 931,51 Go (820,43 Go free) [Iomega HDD] # NTFS

################## | Files # Infected Folders |

Deleted ! C:\$Recycle.Bin\S-1-5-21-2933781903-1387361503-385486750-1000
Deleted ! G:\autorun.inf
Deleted ! G:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx
Deleted ! G:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665
Deleted ! G:\$Recycle.Bin\S-1-5-21-2933781903-1387361503-385486750-1000
Deleted ! G:\Recycler\S-1-5-21-1993962763-746137067-725345543-1003

################## | Registry |

Deleted ! [HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"
Deleted ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"

################## | Mountpoints2 |

################## | Listing of the present files |

[15.04.2010 13:48|--a------|2531] C:\aaw7boot.log
[18.09.2006 23:43|--a------|24] C:\autoexec.bat
[11.04.2009 08:36|-rahs----|333257] C:\bootmgr
[15.04.2010 10:36|--a------|23532] C:\ComboFix.txt
[18.09.2006 23:43|--a------|10] C:\config.sys
[?|?|?] C:\hiberfil.sys
[13.12.2009 15:07|-rahs----|0] C:\IO.SYS
[15.04.2010 10:40|--a------|23532] C:\LOG REPORT.txt
[16.01.2010 14:08|--a------|26659] C:\Mix-1-300x166.jpg
[13.12.2009 15:07|-rahs----|0] C:\MSDOS.SYS
[?|?|?] C:\pagefile.sys
[15.04.2010 13:52|--a------|1944] C:\UsbFix.txt
[02.10.2009 11:28|--a------|735891456] G:\Burn After Reading.avi
[02.10.2009 10:53|--a------|87116] G:\Burn After Reading.srt
[07.07.2009 14:45|--a------|1024115012] G:\Cesty kolem svŘta USA N rodnˇ parky DVDRip.avi
[03.10.2009 17:10|--a------|649580104] G:\Kult h kov‚ho kýˇ§e.avi
[19.12.2008 16:46|--a------|730466304] G:\Ledove ostri.avi
[10.08.2009 17:10|--a------|732934144] G:\Ruzovy.Panter.2.2009.BRRip.XviD.CZ-WoodoX.of.UCU.avi
[04.09.2009 16:23|--a------|737251328] G:\The Boat That Rocked.avi
[04.09.2009 16:09|--a------|120450] G:\The Boat That Rocked.srt
[12.02.2009 23:25|--a------|47104] G:\zivotopis.doc

################## | Vaccination |

# C:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).
# G:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).

################## | Upload |

Please send the file : C:\UsbFix_Upload_Me_Marek-PC.zip : http://chiquitine.changelog.fr/Sample/Upload.php
Thank you for your contribution .

################## | ! End of report # UsbFix V6.104 ! |

Jednotka G je externí disk? Nechte ji připojenou

Klikněte mi do podpisu na SVI a podle návodu zapněte a vypněte obnovu systému,

Stáhněte http://www.f-secure.com/v-descs/worm_w3 ... p_al.shtml

odpojte se od internetu a programy spusťte v nouzovém režimu (po restartu mačkejte F8) a vyberte nouzový režim
- logy vložte sem

poprosím o log ze Rsitu

Téměř každý rádce má v podpisu napsánmo, že se nemá používat combofix na vlastní pěst. Můžete si poškodit systém, navíc automaticky maže některé stopy po virech v registru - čímž maskuje stopy. Kdybych nepoužila USBfix, ani bych nevěděla, že máte na externím disku confickera

Tak tady je log z RSIT po tom co jsi mi řekla

Díky moc

Logfile of random's system information tool 1.06 (written by random/random)
Run by Marek at 2010-04-15 16:52:03
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 108 GB (71%) free of 153 GB
Total RAM: 2046 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:52:29, on 15.4.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Program Files\DigitalPersona\Bin\DpAgent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Users\Marek\Downloads\RSIT.exe
C:\Program Files\trend micro\Marek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\System32\avgrsstx.dll
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 7866 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2010-04-02 1602912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-15 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-03-28 1045800]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2007-01-17 634880]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-10-09 4702208]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2007-10-24 178712]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2007-12-19 468264]
"QlbCtrl"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2007-09-19 202032]
"OnScreenDisplay"=C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [2007-09-04 554320]
"UCam_Menu"=C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2007-08-17 218408]
"DpAgent"=C:\Program Files\DigitalPersona\Bin\dpagent.exe [2007-09-20 671744]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2009-07-01 37888]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-09 153136]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-03-12 153136]
"AutoStartNPSAgent"=C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [2009-04-02 102400]

C:\Users\Marek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\Windows\System32\avgrsstx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
DPPWDFLT

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=255
"NoDriveTypeAutoRun"=255
"HonorAutoRunSetting"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2010-04-15 16:52:04 ----D---- C:\Program Files\trend micro
2010-04-15 16:52:03 ----D---- C:\rsit
2010-04-15 16:41:58 ----A---- C:\Windows\ntbtlog.txt
2010-04-15 13:52:46 ----RASHD---- C:\autorun.inf
2010-04-15 13:49:34 ----A---- C:\UsbFix.txt
2010-04-15 13:45:57 ----D---- C:\UsbFix
2010-04-15 13:44:09 ----D---- C:\ProgramData\Sun
2010-04-15 13:43:41 ----A---- C:\Windows\system32\deployJava1.dll
2010-04-15 12:08:40 ----D---- C:\Program Files\Microsoft Silverlight
2010-04-15 10:52:32 ----D---- C:\Program Files\Windows Portable Devices
2010-04-15 10:44:52 ----A---- C:\Windows\system32\UIRibbonRes.dll
2010-04-15 10:44:52 ----A---- C:\Windows\system32\UIRibbon.dll
2010-04-15 10:44:52 ----A---- C:\Windows\system32\UIAnimation.dll
2010-04-15 10:44:33 ----A---- C:\Windows\system32\WMPhoto.dll
2010-04-15 10:44:33 ----A---- C:\Windows\system32\cdd.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\xpsservices.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\XpsRasterService.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\XpsPrint.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\WindowsCodecs.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2010-04-15 10:44:32 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\OpcServices.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\FntCache.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\dxgi.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\dxdiagn.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\dxdiag.exe
2010-04-15 10:44:32 ----A---- C:\Windows\system32\DWrite.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\d3d11.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\d3d10warp.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\d3d10level9.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\d3d10core.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\d3d10_1core.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\d3d10_1.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\d3d10.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\d2d1.dll
2010-04-15 10:44:18 ----A---- C:\Windows\system32\WPDShextAutoplay.exe
2010-04-15 10:44:18 ----A---- C:\Windows\system32\wpdbusenum.dll
2010-04-15 10:44:18 ----A---- C:\Windows\system32\BthMtpContextHandler.dll
2010-04-15 10:44:16 ----A---- C:\Windows\system32\PortableDeviceConnectApi.dll
2010-04-15 10:44:15 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2010-04-15 10:44:15 ----A---- C:\Windows\system32\wpdshext.dll
2010-04-15 10:44:15 ----A---- C:\Windows\system32\WpdMtpUS.dll
2010-04-15 10:44:15 ----A---- C:\Windows\system32\WpdMtp.dll
2010-04-15 10:44:15 ----A---- C:\Windows\system32\WpdConns.dll
2010-04-15 10:44:15 ----A---- C:\Windows\system32\wpd_ci.dll
2010-04-15 10:44:14 ----A---- C:\Windows\system32\WPDSp.dll
2010-04-15 10:44:14 ----A---- C:\Windows\system32\PortableDeviceWMDRM.dll
2010-04-15 10:44:14 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2010-04-15 10:44:14 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2010-04-15 10:44:14 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2010-04-15 10:43:45 ----A---- C:\Windows\system32\oleaccrc.dll
2010-04-15 10:43:45 ----A---- C:\Windows\system32\oleacc.dll
2010-04-15 10:43:44 ----A---- C:\Windows\system32\UIAutomationCore.dll
2010-04-15 10:40:49 ----A---- C:\LOG REPORT.txt
2010-04-15 10:36:11 ----D---- C:\Windows\temp
2010-04-15 10:36:09 ----A---- C:\ComboFix.txt
2010-04-15 10:28:07 ----D---- C:\$RECYCLE.BIN
2010-04-15 10:16:17 ----A---- C:\Windows\zip.exe
2010-04-15 10:16:17 ----A---- C:\Windows\SWSC.exe
2010-04-15 10:16:17 ----A---- C:\Windows\SWREG.exe
2010-04-15 10:16:17 ----A---- C:\Windows\sed.exe
2010-04-15 10:16:17 ----A---- C:\Windows\PEV.exe
2010-04-15 10:16:17 ----A---- C:\Windows\NIRCMD.exe
2010-04-15 10:16:17 ----A---- C:\Windows\MBR.exe
2010-04-15 10:16:17 ----A---- C:\Windows\grep.exe
2010-04-15 10:16:04 ----D---- C:\Windows\ERDNT
2010-04-15 10:11:55 ----AD---- C:\Qoobox
2010-04-15 10:11:39 ----A---- C:\Windows\SWXCACLS.exe
2010-04-15 09:21:24 ----A---- C:\Windows\system32\gameux.dll
2010-04-15 09:21:23 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-04-15 09:21:23 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-04-14 21:10:42 ----D---- C:\Windows\system32\vi-VN
2010-04-14 21:10:42 ----D---- C:\Windows\system32\eu-ES
2010-04-14 21:10:42 ----D---- C:\Windows\system32\ca-ES
2010-04-14 20:52:06 ----D---- C:\Windows\system32\EventProviders
2010-04-14 20:44:24 ----A---- C:\Windows\system32\lsdelete.exe
2010-04-14 20:11:59 ----HDC---- C:\ProgramData\{74D08EB8-01D1-4BAE-91E3-F30C1B031AC6}
2010-04-14 20:10:48 ----D---- C:\ProgramData\Lavasoft
2010-04-14 20:10:48 ----D---- C:\Program Files\Lavasoft
2010-04-14 13:02:52 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-04-14 13:02:52 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-04-14 13:02:50 ----A---- C:\Windows\system32\vbscript.dll
2010-04-14 13:02:44 ----A---- C:\Windows\system32\iphlpsvc.dll
2010-04-14 13:01:43 ----A---- C:\Windows\system32\wintrust.dll
2010-04-14 13:01:34 ----A---- C:\Windows\system32\cabview.dll
2010-04-09 17:39:43 ----D---- C:\Program Files\Adobe
2010-03-31 22:59:26 ----A---- C:\Windows\system32\browserchoice.exe
2010-03-31 12:38:10 ----D---- C:\Program Files\QuickTime
2010-03-31 12:38:09 ----D---- C:\ProgramData\Apple Computer
2010-03-31 12:36:58 ----A---- C:\Windows\system32\mshtml.dll
2010-03-31 12:36:56 ----A---- C:\Windows\system32\ieframe.dll
2010-03-31 12:36:53 ----A---- C:\Windows\system32\wininet.dll
2010-03-31 12:36:52 ----A---- C:\Windows\system32\urlmon.dll
2010-03-31 12:36:45 ----A---- C:\Windows\system32\ieapfltr.dll
2010-03-31 12:36:44 ----A---- C:\Windows\system32\mshtmled.dll
2010-03-31 12:36:44 ----A---- C:\Windows\system32\ieui.dll
2010-03-31 12:36:44 ----A---- C:\Windows\system32\iepeers.dll
2010-03-31 12:36:43 ----A---- C:\Windows\system32\ieencode.dll
2010-03-31 12:34:17 ----D---- C:\Program Files\Common Files\Apple
2010-03-31 12:33:29 ----D---- C:\ProgramData\Apple
2010-03-31 12:33:29 ----D---- C:\Program Files\Apple Software Update

======List of files/folders modified in the last 1 months======

2010-04-15 16:52:04 ----RD---- C:\Program Files
2010-04-15 16:51:50 ----D---- C:\Users\Marek\AppData\Roaming\Skype
2010-04-15 16:49:54 ----D---- C:\Windows\system32\Tasks
2010-04-15 16:49:29 ----D---- C:\Windows\tracing
2010-04-15 16:47:36 ----D---- C:\Windows\System32
2010-04-15 16:47:36 ----D---- C:\Windows\inf
2010-04-15 16:47:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-04-15 16:46:30 ----D---- C:\Windows\system32\drivers
2010-04-15 16:42:42 ----D---- C:\Windows\Tasks
2010-04-15 16:41:58 ----D---- C:\Windows
2010-04-15 16:39:54 ----SHD---- C:\Windows\Installer
2010-04-15 16:03:45 ----D---- C:\Users\Marek\AppData\Roaming\skypePM
2010-04-15 15:51:59 ----A---- C:\Windows\NeroDigital.ini
2010-04-15 14:09:41 ----D---- C:\Users\Marek\AppData\Roaming\Ahead
2010-04-15 13:44:09 ----D---- C:\ProgramData
2010-04-15 13:44:08 ----D---- C:\Program Files\Common Files\Java
2010-04-15 13:43:35 ----A---- C:\Windows\system32\javaws.exe
2010-04-15 13:43:35 ----A---- C:\Windows\system32\javaw.exe
2010-04-15 13:43:35 ----A---- C:\Windows\system32\java.exe
2010-04-15 13:43:32 ----D---- C:\Program Files\Java
2010-04-15 11:20:09 ----D---- C:\Windows\Microsoft.NET
2010-04-15 11:20:03 ----RSD---- C:\Windows\assembly
2010-04-15 11:10:40 ----D---- C:\Windows\rescache
2010-04-15 11:05:31 ----D---- C:\Windows\Prefetch
2010-04-15 11:05:31 ----D---- C:\Windows\Debug
2010-04-15 10:52:32 ----D---- C:\Windows\system32\wbem
2010-04-15 10:52:32 ----D---- C:\Windows\system32\cs-CZ
2010-04-15 10:52:30 ----D---- C:\Windows\system32\zh-TW
2010-04-15 10:52:30 ----D---- C:\Windows\system32\zh-HK
2010-04-15 10:52:30 ----D---- C:\Windows\system32\zh-CN
2010-04-15 10:52:30 ----D---- C:\Windows\system32\uk-UA
2010-04-15 10:52:30 ----D---- C:\Windows\system32\tr-TR
2010-04-15 10:52:30 ----D---- C:\Windows\system32\th-TH
2010-04-15 10:52:30 ----D---- C:\Windows\system32\sv-SE
2010-04-15 10:52:30 ----D---- C:\Windows\system32\sr-Latn-CS
2010-04-15 10:52:30 ----D---- C:\Windows\system32\sl-SI
2010-04-15 10:52:30 ----D---- C:\Windows\system32\sk-SK
2010-04-15 10:52:30 ----D---- C:\Windows\system32\ru-RU
2010-04-15 10:52:30 ----D---- C:\Windows\system32\ro-RO
2010-04-15 10:52:30 ----D---- C:\Windows\system32\pt-PT
2010-04-15 10:52:30 ----D---- C:\Windows\system32\pt-BR
2010-04-15 10:52:30 ----D---- C:\Windows\system32\pl-PL
2010-04-15 10:52:30 ----D---- C:\Windows\system32\nl-NL
2010-04-15 10:52:30 ----D---- C:\Windows\system32\nb-NO
2010-04-15 10:52:30 ----D---- C:\Windows\system32\lv-LV
2010-04-15 10:52:30 ----D---- C:\Windows\system32\lt-LT
2010-04-15 10:52:30 ----D---- C:\Windows\system32\ko-KR
2010-04-15 10:52:30 ----D---- C:\Windows\system32\ja-JP
2010-04-15 10:52:30 ----D---- C:\Windows\system32\it-IT
2010-04-15 10:52:30 ----D---- C:\Windows\system32\hu-HU
2010-04-15 10:52:30 ----D---- C:\Windows\system32\hr-HR
2010-04-15 10:52:30 ----D---- C:\Windows\system32\he-IL
2010-04-15 10:52:30 ----D---- C:\Windows\system32\fr-FR
2010-04-15 10:52:30 ----D---- C:\Windows\system32\fi-FI
2010-04-15 10:52:30 ----D---- C:\Windows\system32\et-EE
2010-04-15 10:52:30 ----D---- C:\Windows\system32\es-ES
2010-04-15 10:52:30 ----D---- C:\Windows\system32\en-US
2010-04-15 10:52:30 ----D---- C:\Windows\system32\el-GR
2010-04-15 10:52:30 ----D---- C:\Windows\system32\de-DE
2010-04-15 10:52:30 ----D---- C:\Windows\system32\da-DK
2010-04-15 10:52:30 ----D---- C:\Windows\system32\bg-BG
2010-04-15 10:52:30 ----D---- C:\Windows\system32\ar-SA
2010-04-15 10:45:10 ----D---- C:\Windows\winsxs
2010-04-15 10:45:00 ----D---- C:\Windows\system32\catroot
2010-04-15 10:44:59 ----D---- C:\Windows\system32\catroot2
2010-04-15 10:43:26 ----D---- C:\Windows\AppPatch
2010-04-15 10:28:41 ----A---- C:\Windows\system.ini
2010-04-15 10:22:54 ----D---- C:\Program Files\Common Files
2010-04-14 22:35:55 ----D---- C:\ProgramData\avg9
2010-04-14 21:18:09 ----D---- C:\boot
2010-04-14 21:11:17 ----D---- C:\Program Files\Windows Mail
2010-04-14 21:11:17 ----D---- C:\Program Files\Windows Calendar
2010-04-14 21:11:17 ----D---- C:\Program Files\Movie Maker
2010-04-14 21:11:16 ----D---- C:\Program Files\Windows Sidebar
2010-04-14 21:11:16 ----D---- C:\Program Files\Windows Photo Gallery
2010-04-14 21:11:16 ----D---- C:\Program Files\Windows Media Player
2010-04-14 21:11:16 ----D---- C:\Program Files\Windows Journal
2010-04-14 21:11:16 ----D---- C:\Program Files\Windows Collaboration
2010-04-14 21:11:16 ----D---- C:\Program Files\Internet Explorer
2010-04-14 21:11:16 ----D---- C:\Program Files\Common Files\System
2010-04-14 21:11:14 ----D---- C:\Windows\servicing
2010-04-14 21:11:14 ----D---- C:\Windows\ehome
2010-04-14 21:11:14 ----D---- C:\Program Files\Windows Defender
2010-04-14 21:11:12 ----D---- C:\Windows\IME
2010-04-14 21:11:11 ----D---- C:\Windows\system32\XPSViewer
2010-04-14 21:11:11 ----D---- C:\Windows\system32\oobe
2010-04-14 21:11:11 ----D---- C:\Windows\system32\migration
2010-04-14 21:11:10 ----D---- C:\Windows\system32\AdvancedInstallers
2010-04-14 21:11:09 ----D---- C:\Windows\system32\SLUI
2010-04-14 21:11:09 ----D---- C:\Windows\system32\setup
2010-04-14 21:11:09 ----D---- C:\Windows\system32\manifeststore
2010-04-14 21:11:09 ----D---- C:\Windows\system32\cs
2010-04-14 21:11:07 ----D---- C:\Windows\system32\migwiz
2010-04-14 21:10:46 ----RSD---- C:\Windows\Fonts
2010-04-14 21:10:42 ----D---- C:\Windows\system32\Boot
2010-04-14 21:10:11 ----D---- C:\ProgramData\NVIDIA
2010-04-14 21:09:12 ----D---- C:\Windows\system32\RTCOM
2010-04-14 20:27:42 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-04-14 20:24:03 ----D---- C:\ProgramData\Symantec
2010-04-14 20:15:53 ----DC---- C:\Windows\system32\DRVSTORE
2010-04-14 15:16:48 ----D---- C:\Program Files\Vodafone
2010-04-09 17:39:48 ----D---- C:\ProgramData\Adobe
2010-04-09 17:39:48 ----D---- C:\Program Files\Common Files\Adobe
2010-04-08 17:17:09 ----D---- C:\Program Files\Google
2010-04-06 19:52:54 ----A---- C:\Windows\system32\mrt.exe
2010-04-03 18:27:35 ----D---- C:\Program Files\Mozilla Firefox
2010-03-17 17:32:05 ----A---- C:\Windows\SIERRA.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\Windows\System32\Drivers\avgldx86.sys [2010-03-13 216200]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\Windows\System32\Drivers\avgmfx86.sys [2010-03-13 29512]
R1 AvgTdiX;AVG Free Network Redirector; C:\Windows\System32\Drivers\avgtdix.sys [2010-03-13 242696]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2010-01-02 281760]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-01-02 25888]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-03-21 37376]
R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\Windows\system32\DRIVERS\ATSwpDrv.sys [2007-08-28 146560]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-10-08 1044472]
R3 CmBatt;Ovladač baterie Microsoft ACPI Control Method Battery; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [2009-03-31 36608]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 HpqRemHid;HP Remote Control HID Device; C:\Windows\system32\DRIVERS\HpqRemHid.sys [2007-07-11 7168]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-10-09 1970712]
R3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-10-03 9905096]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-09-18 98816]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2007-01-17 983936]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-03-28 199472]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
S3 a1x5ozdg;a1x5ozdg; C:\Windows\system32\drivers\a1x5ozdg.sys []
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-10-08 1044472]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2008-01-21 987648]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm60x32.sys [2006-11-02 429056]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-03-20 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-03-20 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-03-20 121856]
S3 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys [2007-10-25 5632]
S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2008-01-21 654336]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avg9emc;AVG Free E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2010-03-13 916760]
R2 avg9wd;AVG Free WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-03-13 308064]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 DpHost;Biometric Authentication Service; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2007-09-20 299008]
R2 FsUsbExService;FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [2009-03-31 233472]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-09-19 65536]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe [2006-05-02 135168]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2007-10-24 358936]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2010-04-14 1265264]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-10-03 219752]
R2 QPCapSvc;QuickPlay Background Capture Service (QBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [2007-12-19 271760]
R2 QPSched;QuickPlay Task Scheduler (QTS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [2007-12-19 112016]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-09 272024]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-11-10 135664]
S3 Com4Qlb;Com4Qlb; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe [2007-03-05 110592]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-15 774144]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592]

-----------------EOF-----------------

odinstalujte všechny virtuální jednotky (Daemon nebo alcohol)

Stáhněte SPTD http://www.duplexsecure.com/en/downloads
-vyberte verzi podle svého operačního systému. SPTD for Windows (32 bit) nebo (64b)
-uložte na plochu a spusťte
- zvolte možnost Uninstall
- restart PC

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

DDS::
uDefault_Search_URL = hxxp://search.qip.ru
uSearchAssistant = hxxp://search.qip.ru/ie
uSearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip

Firefox::
FF - ProfilePath - c:\users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\lfj16jxj.default\
FF - prefs.js: keyword.URL - hxxp://search.qip.ru/search?from=FF&query=

registry::
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=-

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:

Obrázek

-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

A neztratím tím třeba nějaké soubory nebo záložky v Mozzile?

Unninstal nejde píše to No SPTD version was detected

Nevadí, pokračujte combofixem

Tak tady je výsledek

ComboFix 10-04-14.01 - Marek 15.04.2010 20:49:50.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.2046.954 [GMT 2:00]
Spuštěný z: c:\users\Marek\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\Marek\Desktop\CFScript.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-03-15 do 2010-04-15 )))))))))))))))))))))))))))))))
.

2010-04-15 18:57 . 2010-04-15 18:57 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-04-15 18:57 . 2010-04-15 18:57 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-04-15 17:48 . 2010-04-15 17:48 -------- d-----w- c:\users\Marek\.oces
2010-04-15 14:52 . 2010-04-15 14:52 -------- d-----w- c:\program files\trend micro
2010-04-15 14:52 . 2010-04-15 14:55 -------- d-----w- C:\rsit
2010-04-15 11:52 . 2010-04-15 11:52 1599 ----a-w- C:\UsbFix_Upload_Me_Marek-PC.zip
2010-04-15 11:45 . 2010-04-15 11:52 -------- d-----w- C:\UsbFix
2010-04-15 11:43 . 2010-04-15 11:43 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-04-15 10:08 . 2010-04-15 10:08 -------- d-----w- c:\program files\Microsoft Silverlight
2010-04-15 08:52 . 2010-04-15 08:52 -------- d-----w- c:\program files\Windows Portable Devices
2010-04-15 08:43 . 2009-10-08 21:08 234496 ----a-w- c:\windows\system32\oleacc.dll
2010-04-15 08:43 . 2009-10-08 21:07 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2010-04-15 08:43 . 2009-10-08 21:08 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2010-04-15 08:26 . 2010-04-15 18:57 -------- d-----w- c:\users\Marek\AppData\Local\temp
2010-04-15 07:21 . 2010-01-06 15:39 1696256 ----a-w- c:\windows\system32\gameux.dll
2010-04-15 07:21 . 2010-01-06 15:38 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2010-04-15 07:21 . 2010-01-06 13:30 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2010-04-14 19:10 . 2010-04-14 19:11 -------- d-----w- c:\windows\system32\ca-ES
2010-04-14 19:10 . 2010-04-14 19:11 -------- d-----w- c:\windows\system32\eu-ES
2010-04-14 19:10 . 2010-04-14 19:11 -------- d-----w- c:\windows\system32\vi-VN
2010-04-14 18:52 . 2010-04-14 18:52 -------- d-----w- c:\windows\system32\EventProviders
2010-04-14 18:44 . 2010-04-14 18:15 15880 ----a-w- c:\windows\system32\lsdelete.exe
2010-04-14 18:11 . 2010-04-14 18:11 -------- dc-h--w- c:\programdata\{74D08EB8-01D1-4BAE-91E3-F30C1B031AC6}
2010-04-14 18:11 . 2010-02-04 15:53 2954656 -c--a-w- c:\programdata\{74D08EB8-01D1-4BAE-91E3-F30C1B031AC6}\Ad-AwareInstaller.exe
2010-04-14 18:10 . 2010-04-14 18:15 -------- d-----w- c:\programdata\Lavasoft
2010-04-14 18:10 . 2010-04-14 18:12 -------- d-----w- c:\program files\Lavasoft
2010-04-14 11:02 . 2010-02-23 11:10 212992 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-04-14 11:02 . 2010-02-23 11:10 79360 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2010-04-14 11:02 . 2010-02-23 11:10 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-04-14 11:02 . 2010-02-18 14:07 3600776 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-04-14 11:02 . 2010-02-18 14:07 3548040 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-04-14 11:02 . 2010-03-04 17:33 430080 ----a-w- c:\windows\system32\vbscript.dll
2010-04-14 11:02 . 2010-02-18 14:07 904576 ----a-w- c:\windows\system32\drivers\tcpip.sys
2010-04-14 11:02 . 2010-02-18 13:30 200704 ----a-w- c:\windows\system32\iphlpsvc.dll
2010-04-14 11:02 . 2010-02-18 11:28 25088 ----a-w- c:\windows\system32\drivers\tunnel.sys
2010-04-14 11:01 . 2009-12-23 11:33 172032 ----a-w- c:\windows\system32\wintrust.dll
2010-04-14 11:01 . 2010-01-13 17:34 98304 ----a-w- c:\windows\system32\cabview.dll
2010-04-01 11:20 . 2010-04-01 11:20 -------- d-----w- c:\users\Marek\AppData\Local\Apple Computer
2010-03-31 20:59 . 2010-02-12 10:48 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-03-31 10:38 . 2010-03-31 10:41 -------- d-----w- c:\program files\QuickTime
2010-03-31 10:38 . 2010-03-31 10:38 -------- d-----w- c:\programdata\Apple Computer
2010-03-31 10:36 . 2010-03-09 15:42 834048 ----a-w- c:\windows\system32\wininet.dll
2010-03-31 10:36 . 2010-03-09 16:25 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-03-31 10:34 . 2010-03-31 10:34 -------- d-----w- c:\program files\Common Files\Apple
2010-03-31 10:33 . 2010-03-31 10:33 -------- d-----w- c:\users\Marek\AppData\Local\Apple
2010-03-31 10:33 . 2010-03-31 10:33 -------- d-----w- c:\program files\Apple Software Update
2010-03-31 10:33 . 2010-03-31 10:33 -------- d-----w- c:\programdata\Apple

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-15 18:47 . 2009-12-11 19:54 -------- d-----w- c:\users\Marek\AppData\Roaming\Skype
2010-04-15 18:24 . 2010-02-04 22:31 0 ----a-w- c:\users\Marek\AppData\Local\prvlcl.dat
2010-04-15 18:18 . 2009-10-30 22:26 598832 ----a-w- c:\windows\system32\perfh005.dat
2010-04-15 18:18 . 2009-10-30 22:26 114992 ----a-w- c:\windows\system32\perfc005.dat
2010-04-15 18:13 . 2009-11-07 18:16 -------- d-----w- c:\users\Marek\AppData\Roaming\skypePM
2010-04-15 18:11 . 2009-10-30 19:08 31871 ----a-w- c:\programdata\nvModes.dat
2010-04-15 18:10 . 2009-12-04 00:02 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-04-15 18:09 . 2009-11-03 19:16 12 ----a-w- c:\windows\bthservsdp.dat
2010-04-15 16:21 . 2010-01-10 21:26 1 ----a-w- c:\users\Marek\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-04-15 14:50 . 2009-12-09 12:10 7808 ----a-w- c:\users\Marek\AppData\Local\d3d9caps.dat
2010-04-15 12:09 . 2009-12-14 14:31 -------- d-----w- c:\users\Marek\AppData\Roaming\Ahead
2010-04-15 11:44 . 2009-10-30 14:39 -------- d-----w- c:\program files\Common Files\Java
2010-04-15 11:43 . 2009-10-30 14:39 -------- d-----w- c:\program files\Java
2010-04-15 08:52 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2010-04-15 08:47 . 2010-04-15 08:47 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
2010-04-15 08:47 . 2010-04-15 08:47 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2010-04-14 20:35 . 2009-12-18 11:31 -------- d-----w- c:\programdata\avg9
2010-04-14 19:11 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2010-04-14 19:11 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-04-14 19:11 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2010-04-14 19:11 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2010-04-14 19:11 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2010-04-14 19:11 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2010-04-14 19:11 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2010-04-14 19:10 . 2009-10-30 15:13 -------- d-----w- c:\programdata\NVIDIA
2010-04-14 18:27 . 2009-10-30 13:46 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-04-14 18:24 . 2009-10-30 13:46 -------- d-----w- c:\programdata\Symantec
2010-04-14 13:16 . 2009-12-26 22:21 -------- d-----w- c:\program files\Vodafone
2010-04-09 15:39 . 2009-11-09 13:46 -------- d-----w- c:\program files\Common Files\Adobe
2010-04-08 15:17 . 2009-11-10 12:59 -------- d-----w- c:\program files\Google
2010-03-13 13:32 . 2009-12-18 11:31 242696 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-03-13 13:32 . 2010-03-13 13:32 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-03-13 13:32 . 2009-12-18 11:31 29512 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-03-13 13:31 . 2009-12-18 11:31 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-03-08 10:04 . 2010-01-21 19:09 573440 ----a-w- c:\users\Marek\AppData\Roaming\GRETECH\GomPlayer\GrLauncherTempSetup.exe
2010-03-07 09:46 . 2010-03-07 09:46 -------- d-----w- c:\programdata\TVU Networks
2010-03-02 21:19 . 2010-02-26 04:26 16 ----a-w- c:\users\Marek\AppData\Roaming\rbuwzv.dat
2010-02-28 14:16 . 2009-11-01 19:16 55040 ----a-w- c:\users\Marek\AppData\Local\GDIPFONTCACHEV1.DAT
2010-02-26 06:06 . 2010-02-26 06:06 2626360 ----a-w- c:\users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\lfj16jxj.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
2010-02-20 23:06 . 2010-03-11 04:15 24064 ----a-w- c:\windows\system32\nshhttp.dll
2010-02-20 23:05 . 2010-03-11 04:15 30720 ----a-w- c:\windows\system32\httpapi.dll
2010-02-20 20:53 . 2010-03-11 04:15 411648 ----a-w- c:\windows\system32\drivers\http.sys
2010-02-04 15:53 . 2010-04-14 18:15 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-01-25 12:00 . 2010-02-23 19:37 471552 ----a-w- c:\windows\system32\secproc_isv.dll
2010-01-25 12:00 . 2010-02-23 19:37 152576 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-01-25 12:00 . 2010-02-23 19:37 152064 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-01-25 12:00 . 2010-02-23 19:37 471552 ----a-w- c:\windows\system32\secproc.dll
2010-01-25 11:58 . 2010-02-23 19:37 332288 ----a-w- c:\windows\system32\msdrm.dll
2010-01-25 08:21 . 2010-02-23 19:37 526336 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-01-25 08:21 . 2010-02-23 19:37 346624 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-01-25 08:21 . 2010-02-23 19:37 518144 ----a-w- c:\windows\system32\RMActivate.exe
2010-01-25 08:21 . 2010-02-23 19:37 347136 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-01-23 09:26 . 2010-02-23 19:38 2048 ----a-w- c:\windows\system32\tzres.dll
2009-08-31 16:55 . 2009-10-30 15:56 118000 ----a-w- c:\program files\mozilla firefox\components\qippipe.dll
2006-05-03 10:06 . 2010-01-16 12:47 163328 --sh--r- c:\windows\System32\flvDX.dll
2007-02-21 11:47 . 2010-01-16 12:47 31232 --sh--r- c:\windows\System32\msfDX.dll
2008-03-16 13:30 . 2010-01-16 12:47 216064 --sh--r- c:\windows\System32\nbDX.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-11 2153472]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-10-09 25623336]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-03-12 153136]
"AutoStartNPSAgent"="c:\program files\Samsung\Samsung New PC Studio\NPSAgent.exe" [2009-04-02 102400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2007-01-17 634880]
"RtHDVCpl"="RtHDVCpl.exe" [2007-10-09 4702208]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-10-24 178712]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2007-12-19 468264]
"QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-09-19 202032]
"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-09-04 554320]
"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2007-08-16 218408]
"DpAgent"="c:\program files\DigitalPersona\Bin\dpagent.exe" [2007-09-20 671744]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2009-07-01 37888]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-09 153136]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-21 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]

c:\users\Marek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-10-5 393216]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli DPPWDFLT

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):20,1b,16,2c,07,dc,ca,01

R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2009-11-10 135664]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-03-20 90112]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-03-20 14976]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-03-20 121856]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [x]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [2010-02-04 64288]
S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\Drivers\avgldx86.sys [2010-03-13 216200]
S1 AvgTdiX;AVG Free Network Redirector;c:\windows\System32\Drivers\avgtdix.sys [2010-03-13 242696]
S2 avg9emc;AVG Free E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [2010-03-13 916760]
S2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [2010-03-13 308064]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2009-03-31 233472]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2010-04-14 1265264]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2009-03-31 36608]

--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - FSUSBEXDISK

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'

2010-04-15 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-02-04 18:15]

2010-04-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-11-10 12:59]

2010-04-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-11-10 12:59]
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = local
uSearchAssistant = hxxp://search.qip.ru/ie
uSearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
FF - ProfilePath - c:\users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\lfj16jxj.default\
FF - prefs.js: browser.search.selectedEngine - QIP Search
FF - prefs.js: browser.startup.homepage - hxxp://google.cz/
FF - component: c:\program files\AVG\AVG9\Firefox\components\avgssff.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\lfj16jxj.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-15 20:57
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'lsass.exe'(664)
c:\windows\system32\DPPWDFLT.dll

- - - - - - - > 'Explorer.exe'(4372)
c:\program files\DigitalPersona\Bin\DpoFeedb.dll
.
Celkový čas: 2010-04-15 20:59:29
ComboFix-quarantined-files.txt 2010-04-15 18:59
ComboFix2.txt 2010-04-15 08:36

Před spuštěním: Volných bajtů: 112 953 585 664
Po spuštění: Volných bajtů: 112 937 488 384

- - End Of File - - 57D7235FCAAF1C21481637952BE5D802

Tuto složku znáte?
c:\users\Marek\.oces

Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.

***********

Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir

***********

Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

Obrázek

záložka čistič
- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner

Obrázek

záložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy

ok

zavřít

Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.

***********

Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-vyčistí tempy a po použitých programech

***********

Vložte nový log ze RSIT a řekněte co počítač, jak se chová, už je vše v pořádku?

c:\users\Marek\.oces tuhle složku neznám. Mám ji smazat?
Jinak Ccleaner používám už dlouho

Díky moc za všechny rady

Ani jsem nečekal, že mi tolik pomůžete

Můžete do té složky nejdřív kouknout?

.oces - opensign - lib, plugins
lib - MicrosoftCryptoApi_0_3.dll
plugins - 6složek v názvu mají kombinaci cca 20písmen a čísel

Tohle je log z RSIT

Logfile of random's system information tool 1.06 (written by random/random)
Run by Marek at 2010-04-15 22:25:47
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 108 GB (71%) free of 153 GB
Total RAM: 2046 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:26:25, on 15.4.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\DigitalPersona\Bin\DpAgent.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Marek\Downloads\RSIT.exe
C:\Program Files\trend micro\Marek.exe
C:\Windows\system32\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\System32\avgrsstx.dll
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 7611 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2010-04-02 1602912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-15 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-03-28 1045800]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2007-01-17 634880]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-10-09 4702208]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2007-10-24 178712]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2007-12-19 468264]
"QlbCtrl"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2007-09-19 202032]
"OnScreenDisplay"=C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [2007-09-04 554320]
"UCam_Menu"=C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2007-08-17 218408]
"DpAgent"=C:\Program Files\DigitalPersona\Bin\dpagent.exe [2007-09-20 671744]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2009-07-01 37888]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-09 153136]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-03-12 153136]
"AutoStartNPSAgent"=C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [2009-04-02 102400]

C:\Users\Marek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\Windows\System32\avgrsstx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
DPPWDFLT

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=255
"NoDriveTypeAutoRun"=255
"HonorAutoRunSetting"=0
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"HonorAutoRunSetting"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2010-04-15 22:25:47 ----D---- C:\rsit
2010-04-15 20:59:31 ----D---- C:\Windows\temp
2010-04-15 20:59:04 ----SHD---- C:\$RECYCLE.BIN
2010-04-15 16:52:04 ----D---- C:\Program Files\trend micro
2010-04-15 13:52:46 ----RAD---- C:\autorun.inf
2010-04-15 13:49:34 ----A---- C:\UsbFix.txt
2010-04-15 13:44:09 ----D---- C:\ProgramData\Sun
2010-04-15 13:43:41 ----A---- C:\Windows\system32\deployJava1.dll
2010-04-15 12:08:40 ----D---- C:\Program Files\Microsoft Silverlight
2010-04-15 10:52:32 ----D---- C:\Program Files\Windows Portable Devices
2010-04-15 10:44:52 ----A---- C:\Windows\system32\UIRibbonRes.dll
2010-04-15 10:44:52 ----A---- C:\Windows\system32\UIRibbon.dll
2010-04-15 10:44:52 ----A---- C:\Windows\system32\UIAnimation.dll
2010-04-15 10:44:33 ----A---- C:\Windows\system32\WMPhoto.dll
2010-04-15 10:44:33 ----A---- C:\Windows\system32\cdd.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\xpsservices.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\XpsRasterService.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\XpsPrint.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\WindowsCodecs.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2010-04-15 10:44:32 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\OpcServices.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\FntCache.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\dxgi.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\dxdiagn.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\dxdiag.exe
2010-04-15 10:44:32 ----A---- C:\Windows\system32\DWrite.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\d3d11.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\d3d10warp.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\d3d10level9.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\d3d10core.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\d3d10_1core.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\d3d10_1.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\d3d10.dll
2010-04-15 10:44:32 ----A---- C:\Windows\system32\d2d1.dll
2010-04-15 10:44:18 ----A---- C:\Windows\system32\WPDShextAutoplay.exe
2010-04-15 10:44:18 ----A---- C:\Windows\system32\wpdbusenum.dll
2010-04-15 10:44:18 ----A---- C:\Windows\system32\BthMtpContextHandler.dll
2010-04-15 10:44:16 ----A---- C:\Windows\system32\PortableDeviceConnectApi.dll
2010-04-15 10:44:15 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2010-04-15 10:44:15 ----A---- C:\Windows\system32\wpdshext.dll
2010-04-15 10:44:15 ----A---- C:\Windows\system32\WpdMtpUS.dll
2010-04-15 10:44:15 ----A---- C:\Windows\system32\WpdMtp.dll
2010-04-15 10:44:15 ----A---- C:\Windows\system32\WpdConns.dll
2010-04-15 10:44:15 ----A---- C:\Windows\system32\wpd_ci.dll
2010-04-15 10:44:14 ----A---- C:\Windows\system32\WPDSp.dll
2010-04-15 10:44:14 ----A---- C:\Windows\system32\PortableDeviceWMDRM.dll
2010-04-15 10:44:14 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2010-04-15 10:44:14 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2010-04-15 10:44:14 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2010-04-15 10:43:45 ----A---- C:\Windows\system32\oleaccrc.dll
2010-04-15 10:43:45 ----A---- C:\Windows\system32\oleacc.dll
2010-04-15 10:43:44 ----A---- C:\Windows\system32\UIAutomationCore.dll
2010-04-15 10:40:49 ----A---- C:\LOG REPORT.txt
2010-04-15 10:16:04 ----D---- C:\Windows\ERDNT
2010-04-15 09:21:24 ----A---- C:\Windows\system32\gameux.dll
2010-04-15 09:21:23 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-04-15 09:21:23 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-04-14 21:10:42 ----D---- C:\Windows\system32\vi-VN
2010-04-14 21:10:42 ----D---- C:\Windows\system32\eu-ES
2010-04-14 21:10:42 ----D---- C:\Windows\system32\ca-ES
2010-04-14 20:52:06 ----D---- C:\Windows\system32\EventProviders
2010-04-14 20:44:24 ----A---- C:\Windows\system32\lsdelete.exe
2010-04-14 20:11:59 ----HDC---- C:\ProgramData\{74D08EB8-01D1-4BAE-91E3-F30C1B031AC6}
2010-04-14 20:10:48 ----D---- C:\ProgramData\Lavasoft
2010-04-14 20:10:48 ----D---- C:\Program Files\Lavasoft
2010-04-14 13:02:52 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-04-14 13:02:52 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-04-14 13:02:50 ----A---- C:\Windows\system32\vbscript.dll
2010-04-14 13:02:44 ----A---- C:\Windows\system32\iphlpsvc.dll
2010-04-14 13:01:43 ----A---- C:\Windows\system32\wintrust.dll
2010-04-14 13:01:34 ----A---- C:\Windows\system32\cabview.dll
2010-04-09 17:39:43 ----D---- C:\Program Files\Adobe
2010-03-31 22:59:26 ----A---- C:\Windows\system32\browserchoice.exe
2010-03-31 12:38:10 ----D---- C:\Program Files\QuickTime
2010-03-31 12:38:09 ----D---- C:\ProgramData\Apple Computer
2010-03-31 12:36:58 ----A---- C:\Windows\system32\mshtml.dll
2010-03-31 12:36:56 ----A---- C:\Windows\system32\ieframe.dll
2010-03-31 12:36:53 ----A---- C:\Windows\system32\wininet.dll
2010-03-31 12:36:52 ----A---- C:\Windows\system32\urlmon.dll
2010-03-31 12:36:45 ----A---- C:\Windows\system32\ieapfltr.dll
2010-03-31 12:36:44 ----A---- C:\Windows\system32\mshtmled.dll
2010-03-31 12:36:44 ----A---- C:\Windows\system32\ieui.dll
2010-03-31 12:36:44 ----A---- C:\Windows\system32\iepeers.dll
2010-03-31 12:36:43 ----A---- C:\Windows\system32\ieencode.dll
2010-03-31 12:34:17 ----D---- C:\Program Files\Common Files\Apple
2010-03-31 12:33:29 ----D---- C:\ProgramData\Apple
2010-03-31 12:33:29 ----D---- C:\Program Files\Apple Software Update

======List of files/folders modified in the last 1 months======

2010-04-15 22:24:05 ----D---- C:\Users\Marek\AppData\Roaming\Skype
2010-04-15 22:23:11 ----D---- C:\Windows\system32\Tasks
2010-04-15 22:18:37 ----D---- C:\Windows
2010-04-15 21:09:14 ----D---- C:\Windows\System32
2010-04-15 21:09:14 ----D---- C:\Windows\inf
2010-04-15 21:09:14 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-04-15 20:57:17 ----A---- C:\Windows\system.ini
2010-04-15 20:53:32 ----D---- C:\Windows\system32\drivers
2010-04-15 20:53:32 ----D---- C:\Windows\AppPatch
2010-04-15 20:53:31 ----D---- C:\Program Files\Common Files
2010-04-15 20:49:09 ----D---- C:\Windows\tracing
2010-04-15 20:19:09 ----D---- C:\Windows\Tasks
2010-04-15 20:13:18 ----D---- C:\Users\Marek\AppData\Roaming\skypePM
2010-04-15 20:10:47 ----D---- C:\Program Files\DAEMON Tools Lite
2010-04-15 16:52:04 ----RD---- C:\Program Files
2010-04-15 16:39:54 ----SHD---- C:\Windows\Installer
2010-04-15 15:51:59 ----A---- C:\Windows\NeroDigital.ini
2010-04-15 14:09:41 ----D---- C:\Users\Marek\AppData\Roaming\Ahead
2010-04-15 13:44:09 ----D---- C:\ProgramData
2010-04-15 13:44:08 ----D---- C:\Program Files\Common Files\Java
2010-04-15 13:43:35 ----A---- C:\Windows\system32\javaws.exe
2010-04-15 13:43:35 ----A---- C:\Windows\system32\javaw.exe
2010-04-15 13:43:35 ----A---- C:\Windows\system32\java.exe
2010-04-15 13:43:32 ----D---- C:\Program Files\Java
2010-04-15 11:20:09 ----D---- C:\Windows\Microsoft.NET
2010-04-15 11:20:03 ----RSD---- C:\Windows\assembly
2010-04-15 11:10:40 ----D---- C:\Windows\rescache
2010-04-15 11:05:31 ----D---- C:\Windows\Prefetch
2010-04-15 11:05:31 ----D---- C:\Windows\Debug
2010-04-15 10:52:32 ----D---- C:\Windows\system32\wbem
2010-04-15 10:52:32 ----D---- C:\Windows\system32\cs-CZ
2010-04-15 10:52:30 ----D---- C:\Windows\system32\zh-TW
2010-04-15 10:52:30 ----D---- C:\Windows\system32\zh-HK
2010-04-15 10:52:30 ----D---- C:\Windows\system32\zh-CN
2010-04-15 10:52:30 ----D---- C:\Windows\system32\uk-UA
2010-04-15 10:52:30 ----D---- C:\Windows\system32\tr-TR
2010-04-15 10:52:30 ----D---- C:\Windows\system32\th-TH
2010-04-15 10:52:30 ----D---- C:\Windows\system32\sv-SE
2010-04-15 10:52:30 ----D---- C:\Windows\system32\sr-Latn-CS
2010-04-15 10:52:30 ----D---- C:\Windows\system32\sl-SI
2010-04-15 10:52:30 ----D---- C:\Windows\system32\sk-SK
2010-04-15 10:52:30 ----D---- C:\Windows\system32\ru-RU
2010-04-15 10:52:30 ----D---- C:\Windows\system32\ro-RO
2010-04-15 10:52:30 ----D---- C:\Windows\system32\pt-PT
2010-04-15 10:52:30 ----D---- C:\Windows\system32\pt-BR
2010-04-15 10:52:30 ----D---- C:\Windows\system32\pl-PL
2010-04-15 10:52:30 ----D---- C:\Windows\system32\nl-NL
2010-04-15 10:52:30 ----D---- C:\Windows\system32\nb-NO
2010-04-15 10:52:30 ----D---- C:\Windows\system32\lv-LV
2010-04-15 10:52:30 ----D---- C:\Windows\system32\lt-LT
2010-04-15 10:52:30 ----D---- C:\Windows\system32\ko-KR
2010-04-15 10:52:30 ----D---- C:\Windows\system32\ja-JP
2010-04-15 10:52:30 ----D---- C:\Windows\system32\it-IT
2010-04-15 10:52:30 ----D---- C:\Windows\system32\hu-HU
2010-04-15 10:52:30 ----D---- C:\Windows\system32\hr-HR
2010-04-15 10:52:30 ----D---- C:\Windows\system32\he-IL
2010-04-15 10:52:30 ----D---- C:\Windows\system32\fr-FR
2010-04-15 10:52:30 ----D---- C:\Windows\system32\fi-FI
2010-04-15 10:52:30 ----D---- C:\Windows\system32\et-EE
2010-04-15 10:52:30 ----D---- C:\Windows\system32\es-ES
2010-04-15 10:52:30 ----D---- C:\Windows\system32\en-US
2010-04-15 10:52:30 ----D---- C:\Windows\system32\el-GR
2010-04-15 10:52:30 ----D---- C:\Windows\system32\de-DE
2010-04-15 10:52:30 ----D---- C:\Windows\system32\da-DK
2010-04-15 10:52:30 ----D---- C:\Windows\system32\bg-BG
2010-04-15 10:52:30 ----D---- C:\Windows\system32\ar-SA
2010-04-15 10:45:10 ----D---- C:\Windows\winsxs
2010-04-15 10:45:00 ----D---- C:\Windows\system32\catroot
2010-04-15 10:44:59 ----D---- C:\Windows\system32\catroot2
2010-04-14 22:35:55 ----D---- C:\ProgramData\avg9
2010-04-14 21:18:09 ----D---- C:\boot
2010-04-14 21:11:17 ----D---- C:\Program Files\Windows Mail
2010-04-14 21:11:17 ----D---- C:\Program Files\Windows Calendar
2010-04-14 21:11:17 ----D---- C:\Program Files\Movie Maker
2010-04-14 21:11:16 ----D---- C:\Program Files\Windows Sidebar
2010-04-14 21:11:16 ----D---- C:\Program Files\Windows Photo Gallery
2010-04-14 21:11:16 ----D---- C:\Program Files\Windows Media Player
2010-04-14 21:11:16 ----D---- C:\Program Files\Windows Journal
2010-04-14 21:11:16 ----D---- C:\Program Files\Windows Collaboration
2010-04-14 21:11:16 ----D---- C:\Program Files\Internet Explorer
2010-04-14 21:11:16 ----D---- C:\Program Files\Common Files\System
2010-04-14 21:11:14 ----D---- C:\Windows\servicing
2010-04-14 21:11:14 ----D---- C:\Windows\ehome
2010-04-14 21:11:14 ----D---- C:\Program Files\Windows Defender
2010-04-14 21:11:12 ----D---- C:\Windows\IME
2010-04-14 21:11:11 ----D---- C:\Windows\system32\XPSViewer
2010-04-14 21:11:11 ----D---- C:\Windows\system32\oobe
2010-04-14 21:11:11 ----D---- C:\Windows\system32\migration
2010-04-14 21:11:10 ----D---- C:\Windows\system32\AdvancedInstallers
2010-04-14 21:11:09 ----D---- C:\Windows\system32\SLUI
2010-04-14 21:11:09 ----D---- C:\Windows\system32\setup
2010-04-14 21:11:09 ----D---- C:\Windows\system32\manifeststore
2010-04-14 21:11:09 ----D---- C:\Windows\system32\cs
2010-04-14 21:11:07 ----D---- C:\Windows\system32\migwiz
2010-04-14 21:10:46 ----RSD---- C:\Windows\Fonts
2010-04-14 21:10:42 ----D---- C:\Windows\system32\Boot
2010-04-14 21:10:11 ----D---- C:\ProgramData\NVIDIA
2010-04-14 21:09:12 ----D---- C:\Windows\system32\RTCOM
2010-04-14 20:27:42 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-04-14 20:24:03 ----D---- C:\ProgramData\Symantec
2010-04-14 20:15:53 ----DC---- C:\Windows\system32\DRVSTORE
2010-04-14 15:16:48 ----D---- C:\Program Files\Vodafone
2010-04-09 17:39:48 ----D---- C:\ProgramData\Adobe
2010-04-09 17:39:48 ----D---- C:\Program Files\Common Files\Adobe
2010-04-08 17:17:09 ----D---- C:\Program Files\Google
2010-04-06 19:52:54 ----A---- C:\Windows\system32\mrt.exe
2010-04-03 18:27:35 ----D---- C:\Program Files\Mozilla Firefox
2010-03-17 17:32:05 ----A---- C:\Windows\SIERRA.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\Windows\System32\Drivers\avgldx86.sys [2010-03-13 216200]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\Windows\System32\Drivers\avgmfx86.sys [2010-03-13 29512]
R1 AvgTdiX;AVG Free Network Redirector; C:\Windows\System32\Drivers\avgtdix.sys [2010-03-13 242696]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2010-01-02 281760]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-01-02 25888]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-03-21 37376]
R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\Windows\system32\DRIVERS\ATSwpDrv.sys [2007-08-28 146560]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-10-08 1044472]
R3 CmBatt;Ovladač baterie Microsoft ACPI Control Method Battery; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [2009-03-31 36608]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 HpqRemHid;HP Remote Control HID Device; C:\Windows\system32\DRIVERS\HpqRemHid.sys [2007-07-11 7168]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-10-09 1970712]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-10-03 9905096]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-09-18 98816]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2007-01-17 983936]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-03-28 199472]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-10-08 1044472]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2008-01-21 987648]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm60x32.sys [2006-11-02 429056]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-03-20 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-03-20 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-03-20 121856]
S3 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys [2007-10-25 5632]
S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2008-01-21 654336]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avg9emc;AVG Free E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2010-03-13 916760]
R2 avg9wd;AVG Free WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-03-13 308064]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 DpHost;Biometric Authentication Service; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2007-09-20 299008]
R2 FsUsbExService;FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [2009-03-31 233472]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-09-19 65536]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe [2006-05-02 135168]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2007-10-24 358936]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2010-04-14 1265264]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-10-03 219752]
R2 QPCapSvc;QuickPlay Background Capture Service (QBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [2007-12-19 271760]
R2 QPSched;QuickPlay Task Scheduler (QTS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [2007-12-19 112016]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-09 272024]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-11-10 135664]
S3 Com4Qlb;Com4Qlb; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe [2007-03-05 110592]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-15 774144]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592]

-----------------EOF-----------------

VIRY.CZ

Problém s Recyclerem na ex. harddisku

Problém s Recyclerem na ex. harddisku

Re: Problém s Recyclerem na ex. harddisku

Re: Problém s Recyclerem na ex. harddisku

Re: Problém s Recyclerem na ex. harddisku

Re: Problém s Recyclerem na ex. harddisku

Re: Problém s Recyclerem na ex. harddisku

Re: Problém s Recyclerem na ex. harddisku

Re: Problém s Recyclerem na ex. harddisku

Re: Problém s Recyclerem na ex. harddisku

Re: Problém s Recyclerem na ex. harddisku

Re: Problém s Recyclerem na ex. harddisku

Re: Problém s Recyclerem na ex. harddisku

Re: Problém s Recyclerem na ex. harddisku

Re: Problém s Recyclerem na ex. harddisku

Re: Problém s Recyclerem na ex. harddisku