VIRY.CZ

• Logfile of random's system information tool 1.06 (written by random/random)
  Run by Chlapci at 2010-04-16 17:32:09
  Systém Microsoft Windows XP Professional Service Pack 3
  System drive C: has 73 GB (48%) free of 153 GB
  Total RAM: 3070 MB (66% free)
  
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 17:32:25, on 16.4.2010
  Platform: Windows XP SP3 (WinNT 5.01.2600)
  MSIE: Internet Explorer v8.00 (8.00.6001.18702)
  Boot mode: Normal
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
  C:\Program Files\Java\jre6\bin\jqs.exe
  C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
  C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
  C:\WINDOWS\System32\nvsvc32.exe
  C:\WINDOWS\system32\IoctlSvc.exe
  C:\WINDOWS\system32\PnkBstrA.exe
  C:\WINDOWS\System32\svchost.exe
  C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
  C:\WINDOWS\system32\wscntfy.exe
  C:\WINDOWS\Explorer.EXE
  C:\WINDOWS\RTHDCPL.EXE
  C:\WINDOWS\system32\RUNDLL32.EXE
  C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
  C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
  C:\Program Files\Winamp\winampa.exe
  C:\Program Files\Common Files\Java\Java Update\jusched.exe
  C:\WINDOWS\system32\ctfmon.exe
  C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
  C:\Program Files\DAEMON Tools Lite\DTLite.exe
  C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
  C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
  C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
  C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
  C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  C:\QIP Infium JadrisPack\infium.exe
  C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  C:\Program Files\Valve\Steam\Steam.exe
  C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  C:\WINDOWS\system32\wuauclt.exe
  C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  C:\WINDOWS\system32\msiexec.exe
  C:\Documents and Settings\Chlapci\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  C:\Documents and Settings\Chlapci\My Documents\Downloads\RSIT.exe
  C:\Program Files\trend micro\Chlapci.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.cas.sk
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://cas.sk/
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
  O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
  O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
  O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
  O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
  O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\JM\JMInsIDE.exe
  O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\System32\JMRaidSetup.exe boot
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
  O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
  O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
  O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
  O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
  O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
  O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
  O4 - HKCU\..\Run: [EVEREST AutoStart] C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
  O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
  O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
  O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/5.0_(Windows;_U;_Windows_NT_5.1;_en-US)_AppleWebKit/533.3_(KHTML,_like_Gecko)_Chrome/5.0.360.4_Safari/533.3" -"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/533.3 (KHTML, like Gecko) Chrome/5.0.360.4 Safari/533.3"
  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
  O4 - Startup: Orezávač obrazovky a spúšťač programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
  O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
  O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
  O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
  O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
  O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
  O9 - Extra button: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
  O9 - Extra 'Tools' menuitem: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm (file missing)
  O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
  O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
  O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
  O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
  O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 7887455468
  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
  O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
  O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
  O18 - Filter hijack: text/html - {574940E0-1B7A-4881-8FA3-1E809714B156} - C:\Documents and Settings\Chlapci\AppData\LocalLow\Microńoft\redir.dll
  O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe
  O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
  O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
  O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
  O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
  O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
  O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
  O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
  O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
  
  --
  End of file - 10320 bytes
  
  ======Registry dump======
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
  Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
  Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
  Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
  Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-09 41760]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
  JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-03-09 79648]
  
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-04-12 16132608]
  "Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
  "JMB36X IDE Setup"=C:\WINDOWS\JM\JMInsIDE.exe [2006-10-30 36864]
  "36X Raid Configurer"=C:\WINDOWS\System32\JMRaidSetup.exe [2007-02-06 1953792]
  "NvCplDaemon"=C:\WINDOWS\System32\NvCpl.dll [2007-06-28 8466432]
  "nwiz"=nwiz.exe /install []
  "NvMediaCenter"=C:\WINDOWS\System32\NvMcTray.dll [2007-06-28 81920]
  "egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-02-06 2021400]
  "GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
  "WinampAgent"=C:\Program Files\Winamp\winampa.exe [2010-01-14 37888]
  "NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2008-06-19 570664]
  "NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-06-08 2221352]
  "SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
  "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
  "Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
  
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
  "EVEREST AutoStart"=C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe [2009-10-02 2430048]
  "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
  "IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-06-24 1840424]
  
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
  "Shockwave Updater"=C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1151601.exe [2009-07-21 468408]
  
  C:\Documents and Settings\Chlapci\Start Menu\Programs\Startup
  Orezávač obrazovky a spúšťač programu OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
  RocketDock.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
  TransBar.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
  UberIcon.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
  Y'z Shadow.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
  C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
  WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
  "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
  
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
  "dontdisplaylastusername"=0
  "legalnoticecaption"=
  "legalnoticetext"=
  "shutdownwithoutlogon"=1
  "undockwithoutlogon"=1
  
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
  "NoDriveTypeAutoRun"=145
  
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
  "NoResolveTrack"=
  "HonorAutoRunSetting"=
  
  [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
  "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
  "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
  "C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
  "C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
  "C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
  "C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
  "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
  "C:\Program Files\Valve\Steam\SteamApps\simaniky\counter-strike\hl.exe"="C:\Program Files\Valve\Steam\SteamApps\simaniky\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
  "C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx9.exe"="C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9"
  "C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx10.exe"="C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10"
  "C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Launcher.exe"="C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update"
  "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
  "C:\QIP Infium JadrisPack\infium.exe"="C:\QIP Infium JadrisPack\infium.exe:*:Enabled:QIP Infium"
  "C:\Program Files\Activision\Wolfenstein\MP\Wolf2MP.exe"="C:\Program Files\Activision\Wolfenstein\MP\Wolf2MP.exe:*:Enabled:Wolfenstein(TM) "
  "C:\Program Files\Activision\Wolfenstein\MP\Wolf2MPLite.exe"="C:\Program Files\Activision\Wolfenstein\MP\Wolf2MPLite.exe:*:Enabled:Wolfenstein(TM) "
  "C:\Program Files\Left 4 Dead\left4dead.exe"="C:\Program Files\Left 4 Dead\left4dead.exe:*:Enabled:left4dead"
  "C:\Program Files\Eidos\Batman Arkham Asylum\Binaries\ShippingPC-BmGame.exe"="C:\Program Files\Eidos\Batman Arkham Asylum\Binaries\ShippingPC-BmGame.exe:*:Enabled:Batman: Arkham Asylum"
  "C:\Program Files\Codemasters\DiRT\DiRT.exe"="C:\Program Files\Codemasters\DiRT\DiRT.exe:*:Enabled:DiRT Executable"
  "C:\Program Files\VentSrv\ventrilo_srv.exe"="C:\Program Files\VentSrv\ventrilo_srv.exe:*:Enabled:ventrilo_srv"
  "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
  
  [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
  "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
  "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
  
  ======List of files/folders created in the last 1 months======
  
  2010-04-16 17:32:09 ----D---- C:\rsit
  2010-04-16 17:32:09 ----D---- C:\Program Files\trend micro
  2010-04-14 07:41:14 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
  2010-04-14 07:39:17 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
  2010-04-14 07:39:06 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
  2010-04-14 07:39:01 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
  2010-04-14 07:38:49 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
  2010-04-14 07:38:38 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
  2010-04-13 15:02:13 ----D---- C:\Program Files\Adobe
  2010-04-12 19:32:10 ----D---- C:\Program Files\JPEG Resampler
  2010-04-12 19:31:28 ----D---- C:\Documents and Settings\Chlapci\Application Data\Jpeg Resampler
  2010-04-07 14:41:39 ----A---- C:\WINDOWS\system32\CBMSchpr.dll
  2010-04-06 14:50:33 ----D---- C:\Program Files\Robster Productions
  2010-03-31 20:34:12 ----D---- C:\Program Files\Ventrilo
  2010-03-31 20:33:52 ----D---- C:\WINDOWS\system32\appmgmt
  2010-03-31 20:19:42 ----D---- C:\Documents and Settings\Chlapci\Application Data\Ventrilo
  2010-03-31 20:17:10 ----D---- C:\Program Files\VentSrv
  2010-03-30 19:40:53 ----D---- C:\Documents and Settings\All Users\Application Data\Sun
  2010-03-30 19:40:52 ----D---- C:\Program Files\Common Files\Java
  2010-03-30 19:40:42 ----A---- C:\WINDOWS\system32\javaws.exe
  2010-03-30 19:40:42 ----A---- C:\WINDOWS\system32\javaw.exe
  2010-03-30 19:40:41 ----A---- C:\WINDOWS\system32\java.exe
  2010-03-23 17:46:30 ----D---- C:\Program Files\Get Styles
  2010-03-21 23:38:33 ----D---- C:\Program Files\Alex Buturuga
  2010-03-20 17:39:27 ----D---- C:\Documents and Settings\Chlapci\Application Data\UDC Profiles
  2010-03-20 17:38:39 ----A---- C:\WINDOWS\system32\udcpm.dll
  2010-03-20 17:38:29 ----D---- C:\Program Files\Universal Document Converter
  
  ======List of files/folders modified in the last 1 months======
  
  2010-04-16 17:32:25 ----D---- C:\WINDOWS\Temp
  2010-04-16 17:32:15 ----D---- C:\WINDOWS\Prefetch
  2010-04-16 17:32:09 ----RD---- C:\Program Files
  2010-04-16 17:31:54 ----SHD---- C:\WINDOWS\Installer
  2010-04-16 17:31:37 ----D---- C:\Program Files\TuneUp Utilities 2009
  2010-04-16 17:31:12 ----SD---- C:\WINDOWS\Tasks
  2010-04-16 17:31:12 ----D---- C:\WINDOWS\system32
  2010-04-16 17:10:20 ----D---- C:\WINDOWS\system32\CatRoot2
  2010-04-16 17:08:01 ----A---- C:\WINDOWS\system32\everest_cpl.ini
  2010-04-16 08:33:47 ----A---- C:\WINDOWS\SchedLgU.Txt
  2010-04-15 22:19:14 ----D---- C:\Documents and Settings\Chlapci\Application Data\Skype
  2010-04-15 22:11:37 ----D---- C:\Documents and Settings\Chlapci\Application Data\skypePM
  2010-04-14 12:52:24 ----D---- C:\WINDOWS
  2010-04-14 07:41:19 ----HD---- C:\WINDOWS\inf
  2010-04-14 07:41:17 ----RSHDC---- C:\WINDOWS\system32\dllcache
  2010-04-14 07:39:23 ----A---- C:\WINDOWS\imsins.BAK
  2010-04-14 07:39:16 ----HD---- C:\WINDOWS\$hf_mig$
  2010-04-14 07:39:08 ----D---- C:\WINDOWS\system32\drivers
  2010-04-14 07:38:18 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
  2010-04-13 15:27:33 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
  2010-04-13 15:02:23 ----D---- C:\Program Files\Common Files\Adobe
  2010-04-11 20:10:52 ----SD---- C:\Documents and Settings\Chlapci\Application Data\Microsoft
  2010-04-11 10:56:03 ----D---- C:\Documents and Settings\Chlapci\Application Data\Macromedia
  2010-04-11 10:55:06 ----D---- C:\WINDOWS\system32\Macromed
  2010-04-06 19:54:52 ----A---- C:\WINDOWS\NeroDigital.ini
  2010-04-06 19:52:54 ----A---- C:\WINDOWS\system32\MRT.exe
  2010-03-31 20:34:04 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
  2010-03-31 09:27:10 ----D---- C:\Program Files\Internet Explorer
  2010-03-30 21:08:21 ----D---- C:\WINDOWS\system32\Adobe
  2010-03-30 21:08:19 ----D---- C:\Documents and Settings\Chlapci\Application Data\Adobe
  2010-03-30 20:39:04 ----D---- C:\Documents and Settings\Chlapci\Application Data\uTorrent
  2010-03-30 19:40:52 ----D---- C:\Program Files\Common Files
  2010-03-30 19:40:30 ----D---- C:\Program Files\Java
  2010-03-28 09:54:48 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
  2010-03-23 14:09:01 ----D---- C:\Program Files\Opera
  2010-03-22 14:36:51 ----D---- C:\WINDOWS\SHELLNEW
  2010-03-22 14:36:50 ----RD---- C:\WINDOWS\Web
  
  ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
  
  R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-02-06 106208]
  R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-02-06 93336]
  R1 intelppm;Intel Processor Driver; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 36352]
  R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-02-06 113448]
  R3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-14 60800]
  R3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt []
  R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\System32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
  R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
  R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-23 4402176]
  R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\DRIVERS\LVUSBSta.sys [2004-10-11 22016]
  R3 mouhid;Mouse HID Driver; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2002-08-29 12160]
  R3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-14 61824]
  R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2007-06-28 6807328]
  R3 PID_0928;Labtec WebCam(PID_0928); C:\WINDOWS\system32\DRIVERS\LV561AV.SYS [2004-10-11 211712]
  R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\System32\DRIVERS\Rtenicxp.sys [2007-03-01 90496]
  R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-14 30208]
  R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-14 59520]
  R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-14 20608]
  S3 a0idhy8h;a0idhy8h; C:\WINDOWS\system32\drivers\a0idhy8h.sys []
  S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
  S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
  S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
  S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
  S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
  S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2009-10-06 17664]
  S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2009-10-06 22016]
  S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\WINDOWS\system32\drivers\nmwcdnsu.sys [2009-10-06 136704]
  S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\WINDOWS\system32\drivers\nmwcdnsuc.sys [2009-10-06 8320]
  S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
  S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
  S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
  S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2009-10-06 7936]
  S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
  S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2009-10-06 7936]
  S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
  S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
  S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
  S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
  S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
  S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
  
  ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
  
  R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-02-06 727720]
  R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-03-09 153376]
  R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
  R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-06-08 877864]
  R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\System32\nvsvc32.exe [2007-06-28 155716]
  R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
  R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-03-10 66872]
  R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
  R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
  S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
  S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
  S3 DfSdkS;Defragmentation-Service; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe [2009-08-24 406016]
  S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-02-06 20680]
  S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
  S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
  S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
  S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
  S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
  S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-10-27 657408]
  S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
  S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
  
  -----------------EOF-----------------

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

• ComboFix 10-04-15.05 - Chlapci 16.04.2010 18:27:42.1.2 - x86
  Systém Microsoft Windows XP Professional 5.1.2600.3.1250.421.1033.18.3070.2691 [GMT 2:00]
  Running from: c:\documents and settings\Chlapci\Desktop\ComboFix.exe
  AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Outdated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
  * Resident AV is active
  
  .
  
  ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
  .
  
  c:\windows\OPTIONS\CABS\_desktop.ini
  c:\windows\system32\detoured.dll
  c:\windows\system32\Thumbs.db
  
  .
  ((((((((((((((((((((((((( Files Created from 2010-03-16 to 2010-04-16 )))))))))))))))))))))))))))))))
  .
  
  2010-04-16 16:27 . 2010-04-16 16:27 -------- d-----w- c:\documents and settings\Chlapci\Local Settings\Application Data\ESET
  2010-04-16 15:32 . 2010-04-16 15:32 -------- d-----w- C:\rsit
  2010-04-16 15:32 . 2010-04-16 15:32 -------- d-----w- c:\program files\trend micro
  2010-04-12 17:32 . 2010-04-12 17:32 -------- d-----w- c:\program files\JPEG Resampler
  2010-04-12 17:31 . 2010-04-12 17:31 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Jpeg Resampler
  2010-04-07 12:41 . 2009-04-26 08:01 626688 ----a-w- c:\windows\system32\CBMSchpr.dll
  2010-04-06 12:50 . 2010-04-06 12:50 -------- d-----w- c:\program files\Robster Productions
  2010-03-31 18:34 . 2010-03-31 18:34 -------- d-----w- c:\program files\Ventrilo
  2010-03-31 18:19 . 2010-03-31 18:22 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Ventrilo
  2010-03-31 18:17 . 2010-03-31 18:34 -------- d-----w- c:\program files\VentSrv
  2010-03-30 17:40 . 2010-03-30 17:40 -------- d-----w- c:\program files\Common Files\Java
  2010-03-30 17:40 . 2010-03-30 17:40 503808 ----a-w- c:\documents and settings\Chlapci\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-3e8d8cf5-n\msvcp71.dll
  2010-03-30 17:40 . 2010-03-30 17:40 499712 ----a-w- c:\documents and settings\Chlapci\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-3e8d8cf5-n\jmc.dll
  2010-03-30 17:40 . 2010-03-30 17:40 348160 ----a-w- c:\documents and settings\Chlapci\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-3e8d8cf5-n\msvcr71.dll
  2010-03-30 17:40 . 2010-03-30 17:40 61440 ----a-w- c:\documents and settings\Chlapci\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-3cfab918-n\decora-sse.dll
  2010-03-30 17:40 . 2010-03-30 17:40 12800 ----a-w- c:\documents and settings\Chlapci\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-3cfab918-n\decora-d3d.dll
  2010-03-23 15:46 . 2010-03-23 15:49 -------- d-----w- c:\program files\Get Styles
  2010-03-23 15:46 . 2010-03-23 15:46 -------- d-----w- c:\documents and settings\Chlapci\AppData
  2010-03-21 21:38 . 2010-03-21 21:38 -------- d-----w- c:\program files\Alex Buturuga
  2010-03-21 14:54 . 2010-03-21 14:54 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\ESET
  2010-03-20 15:39 . 2010-04-13 12:59 -------- d-----w- c:\documents and settings\Chlapci\Application Data\UDC Profiles
  2010-03-20 15:38 . 2009-09-04 14:09 34680 ----a-w- c:\windows\system32\udcpm.dll
  2010-03-20 15:38 . 2010-03-20 15:38 -------- d-----w- c:\program files\Universal Document Converter
  
  .
  (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
  .
  2010-04-16 16:24 . 2010-03-06 13:05 4980736 ---ha-w- c:\documents and settings\Chlapci\NTUSER.DAT
  2010-04-16 15:31 . 2010-03-12 06:46 -------- d-----w- c:\program files\TuneUp Utilities 2009
  2010-04-15 20:19 . 2010-03-06 16:24 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Skype
  2010-04-15 20:11 . 2010-03-06 16:25 -------- d-----w- c:\documents and settings\Chlapci\Application Data\skypePM
  2010-04-14 05:38 . 2010-03-06 13:53 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
  2010-04-13 13:02 . 2010-03-06 13:45 -------- d-----w- c:\program files\Common Files\Adobe
  2010-04-13 12:59 . 2010-03-20 15:39 -------- d-----w- c:\documents and settings\Chlapci\Application Data\UDC Profiles
  2010-04-12 17:31 . 2010-04-12 17:31 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Jpeg Resampler
  2010-04-11 18:10 . 2010-03-06 13:05 -------- d-s---w- c:\documents and settings\Chlapci\Application Data\Microsoft
  2010-04-11 08:56 . 2010-03-06 13:54 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Macromedia
  2010-03-31 18:34 . 2010-03-13 00:22 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
  2010-03-31 18:22 . 2010-03-31 18:19 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Ventrilo
  2010-03-30 19:08 . 2010-03-06 13:54 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Adobe
  2010-03-30 18:39 . 2010-03-07 20:02 -------- d-----w- c:\documents and settings\Chlapci\Application Data\uTorrent
  2010-03-30 17:40 . 2010-03-06 22:08 -------- d-----w- c:\program files\Java
  2010-03-23 12:09 . 2010-03-06 15:53 -------- d-----w- c:\program files\Opera
  2010-03-16 19:46 . 2010-03-06 13:30 71048 ----a-w- c:\documents and settings\Chlapci\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
  2010-03-15 13:44 . 2010-03-15 13:44 -------- d-----w- c:\documents and settings\All Users\Application Data\Blizzard
  2010-03-15 11:35 . 2010-03-07 09:52 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Nokia
  2010-03-15 11:31 . 2010-03-07 09:50 -------- d-----w- c:\program files\Nokia
  2010-03-15 11:17 . 2010-03-07 09:52 -------- d-----w- c:\documents and settings\Chlapci\Application Data\PC Suite
  2010-03-15 11:17 . 2010-03-15 11:17 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
  2010-03-15 11:17 . 2010-03-15 11:17 0 ---ha-w- c:\windows\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
  2010-03-13 20:45 . 2010-03-06 13:09 -------- d-----w- c:\program files\Common Files\InstallShield
  2010-03-13 15:28 . 2010-03-13 15:28 -------- d-----w- c:\program files\Windows Media Bonus Pack for Windows XP
  2010-03-13 15:25 . 2010-03-13 15:25 -------- d-----w- c:\program files\Windows Media Connect 2
  2010-03-13 15:19 . 2010-03-06 13:09 -------- d--h--w- c:\program files\InstallShield Installation Information
  2010-03-13 15:19 . 2010-03-13 15:19 -------- d-----w- c:\program files\Codemasters
  2010-03-13 09:55 . 2010-03-13 09:55 -------- d-----w- c:\program files\MSXML 4.0
  2010-03-13 00:23 . 2010-03-13 00:23 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
  2010-03-13 00:22 . 2010-03-13 00:22 -------- d-----w- c:\program files\AGEIA Technologies
  2010-03-13 00:14 . 2010-03-13 00:14 -------- d-----w- c:\program files\Eidos
  2010-03-12 23:19 . 2010-03-12 22:47 -------- d-----w- c:\program files\Left 4 Dead
  2010-03-12 21:34 . 2010-03-12 21:34 -------- d-----w- c:\program files\Activision
  2010-03-12 21:00 . 2010-03-07 09:53 -------- d-----w- c:\documents and settings\Chlapci\Application Data\DAEMON Tools Lite
  2010-03-12 19:56 . 2010-03-07 08:06 152576 ----a-w- c:\documents and settings\Chlapci\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
  2010-03-12 19:55 . 2010-03-07 08:06 79488 ----a-w- c:\documents and settings\Chlapci\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
  2010-03-12 19:47 . 2010-03-12 19:47 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Nero
  2010-03-12 19:46 . 2010-03-12 19:44 -------- d-----w- c:\program files\Common Files\Nero
  2010-03-12 19:44 . 2010-03-12 19:44 -------- d-----w- c:\documents and settings\All Users\Application Data\Nero
  2010-03-12 19:44 . 2010-03-12 19:44 -------- d-----w- c:\program files\Nero
  2010-03-12 18:39 . 2010-03-12 18:39 -------- d-----w- c:\program files\Codec Pack - All In 1
  2010-03-12 18:38 . 2010-03-12 18:39 737280 ----a-w- c:\windows\iun6002.exe
  2010-03-12 11:48 . 2010-03-10 13:38 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
  2010-03-12 11:47 . 2010-03-10 13:38 103736 ----a-w- c:\windows\system32\PnkBstrB.exe
  2010-03-12 06:46 . 2010-03-12 06:46 -------- d-----w- c:\documents and settings\Chlapci\Application Data\TuneUp Software
  2010-03-12 06:46 . 2010-03-12 06:46 -------- d-----w- c:\documents and settings\All Users\Application Data\TuneUp Software
  2010-03-12 06:45 . 2010-03-12 06:45 -------- d-sh--w- c:\documents and settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
  2010-03-10 13:43 . 2010-03-10 13:38 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
  2010-03-10 13:21 . 2010-03-10 13:21 -------- d-----w- c:\program files\Electronic Arts
  2010-03-10 06:15 . 2002-08-29 12:00 420352 ----a-w- c:\windows\system32\vbscript.dll
  2010-03-09 02:28 . 2010-03-06 22:09 411368 ----a-w- c:\windows\system32\deploytk.dll
  2010-03-08 21:32 . 2010-03-08 21:32 -------- d-----w- c:\program files\Reference Assemblies
  2010-03-07 21:19 . 2010-03-07 21:19 -------- d-----w- c:\program files\uTorrent
  2010-03-07 13:55 . 2010-03-07 13:55 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Ubisoft
  2010-03-07 13:54 . 2010-03-07 13:54 -------- d-----w- c:\documents and settings\All Users\Application Data\Ubisoft
  2010-03-07 13:47 . 2010-03-07 13:47 -------- d-----w- c:\program files\Ubisoft
  2010-03-07 13:12 . 2010-03-07 13:12 -------- d-----w- c:\program files\MSXML 6.0
  2010-03-07 10:15 . 2010-03-07 09:53 -------- d-----w- c:\program files\DAEMON Tools Lite
  2010-03-07 09:53 . 2010-03-07 09:53 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
  2010-03-07 09:53 . 2010-03-07 09:53 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Lite
  2010-03-07 09:52 . 2010-03-07 09:52 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Suite
  2010-03-07 09:51 . 2010-03-07 09:51 -------- d-----w- c:\program files\Common Files\PCSuite
  2010-03-07 09:51 . 2010-03-07 09:51 -------- d-----w- c:\program files\Common Files\Nokia
  2010-03-07 09:51 . 2010-03-07 09:51 -------- d-----w- c:\program files\DIFX
  2010-03-07 09:51 . 2010-03-07 09:51 -------- d-----w- c:\program files\PC Connectivity Solution
  2010-03-07 09:50 . 2010-03-07 09:50 95232 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{19DC9559-9C20-4A46-A67D-7ECBA52A2788}\Installer\CommonCustomActions\pcswpcsi.exe
  2010-03-07 09:50 . 2010-03-07 09:50 8192 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{19DC9559-9C20-4A46-A67D-7ECBA52A2788}\Installer\CommonCustomActions\UninstCCD.exe
  2010-03-07 09:50 . 2010-03-07 09:50 61440 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{19DC9559-9C20-4A46-A67D-7ECBA52A2788}\Installer\CommonCustomActions\UninstPCSFEMsi.exe
  2010-03-07 09:50 . 2010-03-07 09:50 10240 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{19DC9559-9C20-4A46-A67D-7ECBA52A2788}\Installer\CommonCustomActions\UninstPCS.exe
  2010-03-07 09:49 . 2010-03-07 09:49 -------- d-----w- c:\documents and settings\Chlapci\Application Data\DAEMON Tools Pro
  2010-03-07 09:49 . 2010-03-07 09:49 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Pro
  2010-03-06 23:04 . 2010-03-06 14:03 -------- d-----w- c:\program files\Microsoft Works
  2010-03-06 22:31 . 2010-03-06 22:31 15872 ----a-r- c:\documents and settings\Chlapci\Application Data\Microsoft\Installer\{048298C9-A4D3-490B-9FF9-AB023A9238F3}\Icon048298C9.exe
  2010-03-06 22:31 . 2010-03-06 22:31 -------- d-----w- c:\program files\Valve
  2010-03-06 22:11 . 2010-03-06 22:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Installations
  2010-03-06 22:08 . 2010-03-06 22:08 152576 ----a-w- c:\documents and settings\Chlapci\Application Data\Sun\Java\jre1.6.0_15\lzma.dll
  2010-03-06 22:07 . 2010-03-07 09:50 34686912 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{19DC9559-9C20-4A46-A67D-7ECBA52A2788}\Nokia_PC_Suite_slk_web.exe
  2010-03-06 22:07 . 2010-03-06 22:07 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Sun
  2010-03-06 21:49 . 2010-03-06 21:45 7277 ----a-w- c:\windows\BricoPackFoldersDelete.cmd
  2010-03-06 21:49 . 2010-03-06 21:49 65549 ----a-w- c:\windows\BricoPackUninst.cmd
  2010-03-06 21:49 . 2002-08-29 12:00 218624 ----a-w- c:\windows\system32\uxtheme.dll
  2010-03-06 21:45 . 2010-03-06 21:45 -------- d-----w- c:\program files\Guitar Pro 5
  2010-03-06 21:22 . 2010-03-06 13:01 6538 ----a-w- c:\windows\PCHealth\HelpCtr\PackageStore\SkuStore.bin
  2010-03-06 21:22 . 2010-03-06 13:01 166455 ----a-w- c:\windows\PCHealth\HelpCtr\OfflineCache\index.dat
  2010-03-06 16:25 . 2010-03-06 16:25 48 ---ha-w- c:\windows\system32\ezsidmv.dat
  2010-03-06 16:09 . 2010-03-06 16:08 -------- d-----r- c:\program files\Skype
  2010-03-06 16:08 . 2010-03-06 16:08 -------- d-----w- c:\program files\Common Files\Skype
  2010-03-06 16:08 . 2010-03-06 16:07 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
  2010-03-06 15:53 . 2010-03-06 15:53 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Opera
  2010-03-06 14:54 . 2010-03-06 14:54 -------- d-----w- c:\program files\Ashampoo
  2010-03-06 14:24 . 2010-03-06 14:24 -------- d-----w- c:\program files\Lavalys
  2010-03-06 14:16 . 2010-03-06 14:16 -------- d-----w- c:\documents and settings\Chlapci\Application Data\WinRAR
  2010-03-06 14:09 . 2010-03-06 14:05 -------- d-----w- c:\documents and settings\Chlapci\Application Data\Winamp
  2010-03-06 14:08 . 2010-03-06 14:05 -------- d-----w- c:\program files\Winamp
  2010-03-06 14:03 . 2010-03-06 14:03 -------- d-----w- c:\program files\MSBuild
  2010-03-06 13:32 . 2010-03-06 13:32 -------- d-----w- c:\program files\ESET
  2010-03-06 13:32 . 2010-03-06 13:32 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET
  2010-03-06 13:26 . 2010-03-06 13:01 8972 ----a-w- c:\windows\PCHealth\HelpCtr\Config\Cntstore.bin
  2010-03-06 13:09 . 2010-03-06 13:09 -------- d-----w- c:\program files\Realtek
  .
  
  ------- Sigcheck -------
  
  [-] 2009-08-06 . 0B6DABD6FFF1AD42A3CD65A1C7EE8F35 . 68832 . . [7.4.7600.226] . . c:\windows\ServicePackFiles\i386\wuauclt.exe
  [-] 2009-08-06 . 0B6DABD6FFF1AD42A3CD65A1C7EE8F35 . 68832 . . [7.4.7600.226] . . c:\windows\system32\wuauclt.exe
  [7] 2009-08-06 . 62BB79160F86CD962F312C68C6239BFD . 53472 . . [7.4.7600.226] . . c:\windows\system32\dllcache\wuauclt.exe
  [7] 2008-04-14 . ED7262E52C31CF1625B65039102BC16C . 111104 . . [5.4.3790.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wuauclt.exe
  [7] 2004-08-03 . 4126D27CECE4471E00E425411F7306B5 . 111104 . . [5.4.3790.2180] . . c:\windows\$NtServicePackUninstall$\wuauclt.exe
  [7] 2004-08-03 . 4126D27CECE4471E00E425411F7306B5 . 111104 . . [5.4.3790.2180] . . c:\windows\SoftwareDistribution\Download\2d8407673ea9865ef7cd775540e3a36b\backup\wuauclt.exe
  
  [-] 2008-04-14 . 561A50497324F378E30F55D09B4E1258 . 975872 . . [6.00.2900.5512] . . c:\windows\explorer.exe
  [-] 2008-04-14 . 561A50497324F378E30F55D09B4E1258 . 975872 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
  [7] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\explorer.exe
  [7] 2004-08-03 . A0732187050030AE399B241436565E64 . 1032192 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\explorer.exe
  [7] 2004-08-03 . A0732187050030AE399B241436565E64 . 1032192 . . [6.00.2900.2180] . . c:\windows\SoftwareDistribution\Download\2d8407673ea9865ef7cd775540e3a36b\backup\explorer.exe
  .
  ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
  .
  .
  *Note* empty entries & legit default entries are not shown
  REGEDIT4
  
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "EVEREST AutoStart"="c:\program files\Lavalys\EVEREST Ultimate Edition\everest.exe" [2009-10-01 2430048]
  "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]
  "IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424]
  
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
  "Shockwave Updater"="c:\windows\system32\Adobe\Shockwave 11\SwHelper_1151601.exe" [2009-07-21 468408]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "RTHDCPL"="RTHDCPL.EXE" [2007-04-12 16132608]
  "JMB36X IDE Setup"="c:\windows\JM\JMInsIDE.exe" [2006-10-30 36864]
  "36X Raid Configurer"="c:\windows\System32\JMRaidSetup.exe" [2007-02-06 1953792]
  "NvCplDaemon"="c:\windows\System32\NvCpl.dll" [2007-06-28 8466432]
  "nwiz"="nwiz.exe" [2007-06-28 1626112]
  "NvMediaCenter"="c:\windows\System32\NvMcTray.dll" [2007-06-28 81920]
  "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-02-06 2021400]
  "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
  "WinampAgent"="c:\program files\Winamp\winampa.exe" [2010-01-13 37888]
  "NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2008-06-19 570664]
  "NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-06-08 2221352]
  "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
  "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-21 35760]
  "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
  
  [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
  "CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
  
  c:\documents and settings\Chlapci\Start Menu\Programs\Startup\
  Orez vaź obrazovky a spŁçśaź programu OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
  RocketDock.lnk - c:\windows\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe [2007-3-19 630784]
  TransBar.lnk - c:\windows\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe [2005-6-1 65536]
  UberIcon.lnk - c:\windows\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe [2006-5-21 180224]
  Y'z Shadow.lnk - c:\windows\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe [2006-5-21 155648]
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
  "NoResolveTrack"= 1 (0x1)
  
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
  @="Driver"
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
  "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
  "%windir%\\system32\\sessmgr.exe"=
  "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
  "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
  "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
  "c:\\Program Files\\Opera\\opera.exe"=
  "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
  "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
  "c:\\Program Files\\Valve\\Steam\\SteamApps\\simaniky\\counter-strike\\hl.exe"=
  "c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx9.exe"=
  "c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx10.exe"=
  "c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Launcher.exe"=
  "c:\\Program Files\\uTorrent\\uTorrent.exe"=
  "c:\\QIP Infium JadrisPack\\infium.exe"=
  "c:\\Program Files\\Activision\\Wolfenstein\\MP\\Wolf2MP.exe"=
  "c:\\Program Files\\Activision\\Wolfenstein\\MP\\Wolf2MPLite.exe"=
  "c:\\Program Files\\Left 4 Dead\\left4dead.exe"=
  "c:\\Program Files\\Eidos\\Batman Arkham Asylum\\Binaries\\ShippingPC-BmGame.exe"=
  "c:\\Program Files\\Codemasters\\DiRT\\DiRT.exe"=
  "c:\\Program Files\\Skype\\Phone\\Skype.exe"=
  
  R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [6.2.2009 15:23 106208]
  R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [14.11.2007 16:06 93336]
  R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [6.2.2009 15:23 727720]
  S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [7.3.2010 11:53 691696]
  S3 DfSdkS;Defragmentation-Service;c:\program files\Ashampoo\Ashampoo WinOptimizer 6\DfSdkS.exe [6.3.2010 16:58 406016]
  S3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [6.3.2010 16:24 27248]
  S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [7.3.2010 11:50 136704]
  S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [7.3.2010 11:50 8320]
  .
  .
  ------- Supplementary Scan -------
  .
  uStart Page = hxxp://cas.sk/
  IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
  IE: {{14CD42DD-ABCD-3586-DCAB-40E3693E3737} - c:\program files\Get Styles\ct.htm
  IE: {{898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
  DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
  DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
  .
  
  **************************************************************************
  
  catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
  Rootkit scan 2010-04-16 18:33
  Windows 5.1.2600 Service Pack 3 NTFS
  
  scanning hidden processes ...
  
  scanning hidden autostart entries ...
  
  scanning hidden files ...
  
  scan completed successfully
  hidden files: 0
  
  **************************************************************************
  
  [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\EverestDriver]
  "ImagePath"="\??\c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt"
  .
  --------------------- LOCKED REGISTRY KEYS ---------------------
  
  [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
  @Denied: (A 2) (Everyone)
  @="FlashBroker"
  "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10f_ActiveX.exe,-101"
  
  [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
  "Enabled"=dword:00000001
  
  [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
  @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10f_ActiveX.exe"
  
  [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
  @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  
  [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
  @Denied: (A 2) (Everyone)
  @="IFlashBroker4"
  
  [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
  @="{00020424-0000-0000-C000-000000000046}"
  
  [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
  @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  "Version"="1.0"
  .
  Completion time: 2010-04-16 18:35:32
  ComboFix-quarantined-files.txt 2010-04-16 16:35
  
  Pre-Run: 76 123 017 216 bytes free
  Post-Run: 11 adresárov, 76 988 895 232 voľných bajtov
  
  WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
  [boot loader]
  timeout=2
  default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
  [operating systems]
  c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
  multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn
  
  - - End Of File - - C186EF5C0E46C9BFBD328B55047739D0