VIRY.CZ

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrator at 2010-06-01 13:37:25
Microsoft Windows XP Professional Service Pack 3
System drive C: has 3 GB (30%) free of 10 GB
Total RAM: 3070 MB (86% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:37:30, on 1.6.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Administrator\Desktop\Programy\RSIT.exe
C:\Documents and Settings\Administrator\My Documents\Softy\Administrator.exe

O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{E399171A-0022-4731-809C-8A0173DA1EA0}: NameServer = 92.245.2.245,85.248.106.190
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O20 - Winlogon Notify: AutorunsDisabled - C:\WINDOWS\
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: COMODO livePCsupport Service (CLPSLS) - COMODO - C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 3111 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Kernel and Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2008-02-29 76304]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-05-06 2815192]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-04-03 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-04-03 13670504]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-04-13 1135912]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2010-04-09 2029456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [2008-12-16 165144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe [2008-12-16 962128]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe [2007-09-20 202024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMSX]
C:\WINDOWS\system32\LVCOMSX.EXE [2005-07-19 221184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MP10_EnsureFileVer]
C:\WINDOWS\inf\unregmp2.exe [2008-04-14 208896]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nektra OEAPI]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OEXPRESS]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
C:\WINDOWS\RTHDCPL.EXE [2009-01-13 18084864]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe [2009-11-20 434176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2010-02-18 2012912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2008-12-16 4375032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Start Menu^Programs^Startup^ubisoft register.lnk]
C:\PROGRA~1\Ubi Soft\Register\schedule.exe [2002-12-19 32768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"OMSI download service"=2
"LBTServ"=3
"IDriverT"=3
"JavaQuickStarterService"=2
"TuneUp.UtilitiesSvc"=2
"TuneUp.Defrag"=3
"idsvc"=3
"DfSdkS"=3

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=" C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AutorunsDisabled]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-08-24 133120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableStatusMessages"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveTrack"=1
"NoResolveSearch"=1
"NoInstrumentation"=1
"NoStartMenuMFUprogramsList"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoResolveTrack"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Vuze\Azureus.exe"="C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus / Vuze"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"D:\Hry\Street Fighter 4\StreetFighterIV.exe"="D:\Hry\Street Fighter 4\StreetFighterIV.exe:*:Enabled:STREET FIGHTER IV"
"D:\Hry\AC 2\AssassinsCreedIIGame.exe"="D:\Hry\AC 2\AssassinsCreedIIGame.exe:*:Enabled:Assassin's Creed II"
"D:\Hry\AC 2\AssassinsCreedII.exe"="D:\Hry\AC 2\AssassinsCreedII.exe:*:Enabled:Assassin's Creed II Update"
"D:\Hry\AC 2\UPlayBrowser.exe"="D:\Hry\AC 2\UPlayBrowser.exe:*:Enabled:Assassin's Creed II Uplay"
"D:\Hry\Prototype\prototypef.exe"="D:\Hry\Prototype\prototypef.exe:*:Enabled:Prototype(TM)"
"D:\Hry\Dragon Age\bin_ship\daorigins.exe"="D:\Hry\Dragon Age\bin_ship\daorigins.exe:*:Enabled:Dragon Age: Origins"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-06-01 11:33:50 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-05-31 13:20:22 ----HD---- C:\VritualRoot
2010-05-31 13:17:01 ----D---- C:\Documents and Settings\All Users\Application Data\COMODO
2010-05-31 13:14:44 ----D---- C:\Program Files\COMODO
2010-05-29 16:23:12 ----D---- C:\Program Files\Common Files\DivX Shared
2010-05-28 13:53:04 ----RHD---- C:\Documents and Settings\Administrator\Application Data\SecuROM
2010-05-24 21:00:35 ----D---- C:\Program Files\Scorpions WinCheater
2010-05-21 16:47:52 ----D---- C:\WinSetupFromUSB
2010-05-21 13:12:50 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-05-21 13:12:50 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2010-05-19 20:45:23 ----RA---- C:\WINDOWS\system32\InstMed.exe
2010-05-19 20:45:18 ----A---- C:\WINDOWS\system32\LVUI2RC.dll
2010-05-19 20:45:18 ----A---- C:\WINDOWS\system32\LVUI2.dll
2010-05-19 20:45:18 ----A---- C:\WINDOWS\system32\lvcodec2.dll
2010-05-19 20:45:17 ----A---- C:\WINDOWS\system32\lvcoinst.ini
2010-05-19 20:45:17 ----A---- C:\WINDOWS\system32\lvcoinst.dll
2010-05-19 20:28:45 ----A---- C:\WINDOWS\_delis32.ini
2010-05-18 19:14:36 ----D---- C:\Program Files\7-Zip
2010-05-18 14:57:28 ----D---- C:\WINDOWS\Internet Logs
2010-05-18 14:26:57 ----SHD---- C:\WINDOWS\ftpcache
2010-05-16 12:21:02 ----D---- C:\Documents and Settings\Administrator\Application Data\Malwarebytes
2010-05-16 12:20:53 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-05-16 12:20:53 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-05-15 11:51:27 ----D---- C:\WINDOWS\system32\URTTEMP
2010-05-12 18:56:21 ----A---- C:\WINDOWS\system32\SNWValid.dll
2010-05-12 18:56:21 ----A---- C:\WINDOWS\system32\SierraNW.dll
2010-05-12 18:55:41 ----A---- C:\WINDOWS\SIERRA.INI
2010-05-12 17:04:22 ----D---- C:\Program Files\DOSBox-0.74
2010-05-12 13:44:53 ----A---- C:\WINDOWS\iun6002.exe
2010-05-12 13:44:50 ----D---- C:\Program Files\Codec Pack - All In 1
2010-05-11 20:49:17 ----D---- C:\Program Files\Common Files\Java
2010-05-11 20:49:08 ----A---- C:\WINDOWS\system32\javaws.exe
2010-05-11 20:49:08 ----A---- C:\WINDOWS\system32\javaw.exe
2010-05-11 20:49:08 ----A---- C:\WINDOWS\system32\java.exe
2010-05-11 20:42:22 ----D---- C:\Program Files\Redsystem
2010-05-11 11:20:03 ----HD---- C:\WINDOWS\system32\GroupPolicy
2010-05-11 10:47:00 ----D---- C:\Program Files\CleanUp!
2010-05-10 12:49:07 ----RA---- C:\WINDOWS\system32\xmltok.dll
2010-05-10 12:49:07 ----RA---- C:\WINDOWS\system32\xmlparse.dll
2010-05-10 12:49:07 ----RA---- C:\WINDOWS\system32\xmlinst.exe
2010-05-10 12:49:07 ----RA---- C:\WINDOWS\system32\VB5DB.DLL
2010-05-10 12:49:07 ----D---- C:\Program Files\Ubi Soft
2010-05-09 10:26:47 ----A---- C:\WINDOWS\system32\TURegOpt.exe
2010-05-09 10:26:46 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2010-05-09 10:26:42 ----D---- C:\Documents and Settings\Administrator\Application Data\TuneUp Software
2010-05-09 10:26:38 ----D---- C:\Program Files\TuneUp Utilities 2010
2010-05-09 10:26:33 ----D---- C:\Documents and Settings\All Users\Application Data\TuneUp Software
2010-05-09 10:26:28 ----SHD---- C:\Documents and Settings\All Users\Application Data\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-05-08 22:06:22 ----SHD---- C:\System Volume Information
2010-05-03 14:19:23 ----D---- C:\Documents and Settings\All Users\Application Data\NOS

======List of files/folders modified in the last 1 months======

2010-06-01 13:34:44 ----D---- C:\WINDOWS\Temp
2010-06-01 11:34:06 ----D---- C:\WINDOWS\Prefetch
2010-06-01 11:33:50 ----D---- C:\WINDOWS
2010-06-01 11:32:18 ----D---- C:\Documents and Settings\Administrator\Application Data\Azureus
2010-06-01 10:34:12 ----D---- C:\Documents and Settings\Administrator\Application Data\Skype
2010-06-01 10:33:39 ----D---- C:\Documents and Settings\Administrator\Application Data\skypePM
2010-06-01 09:33:16 ----D---- C:\WINDOWS\system32\CatRoot2
2010-05-31 20:34:16 ----HD---- C:\Program Files\InstallShield Installation Information
2010-05-31 20:06:06 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2010-05-31 19:31:50 ----A---- C:\error.txt
2010-05-31 13:15:50 ----SHD---- C:\WINDOWS\Installer
2010-05-31 13:15:42 ----D---- C:\WINDOWS\system32\drivers
2010-05-31 13:15:42 ----D---- C:\WINDOWS\system32
2010-05-31 13:14:44 ----RD---- C:\Program Files
2010-05-31 13:14:42 ----D---- C:\Documents and Settings\All Users\Application Data\Comodo Downloader
2010-05-29 16:24:37 ----D---- C:\Documents and Settings\All Users\Application Data\DivX
2010-05-29 16:23:19 ----D---- C:\Program Files\DivX
2010-05-29 16:23:12 ----D---- C:\Program Files\Common Files
2010-05-28 18:46:08 ----HD---- C:\WINDOWS\inf
2010-05-28 18:45:48 ----RSD---- C:\WINDOWS\assembly
2010-05-28 18:45:35 ----D---- C:\WINDOWS\system32\DirectX
2010-05-28 18:45:22 ----D---- C:\WINDOWS\WinSxS
2010-05-27 17:17:47 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-05-27 17:03:01 ----AC---- C:\WINDOWS\NeroDigital.ini
2010-05-27 17:02:44 ----D---- C:\Documents and Settings\Administrator\Application Data\vlc
2010-05-23 11:37:44 ----D---- C:\Documents and Settings\Administrator\Application Data\MyPhoneExplorer
2010-05-22 22:13:06 ----SD---- C:\Documents and Settings\Administrator\Application Data\Microsoft
2010-05-21 17:18:58 ----D---- C:\Program Files\Common Files\Acronis
2010-05-21 17:18:56 ----D---- C:\Program Files\Acronis
2010-05-21 13:37:04 ----D---- C:\Documents and Settings\Administrator\Application Data\SystemRequirementsLab
2010-05-21 13:12:58 ----D---- C:\WINDOWS\SoftwareDistribution
2010-05-21 13:12:51 ----D---- C:\WINDOWS\Help
2010-05-20 19:47:13 ----SHD---- C:\WINDOWS\CSC
2010-05-20 19:46:18 ----SH---- C:\boot.ini
2010-05-20 19:46:18 ----AC---- C:\WINDOWS\win.ini
2010-05-20 19:46:18 ----AC---- C:\WINDOWS\system.ini
2010-05-20 19:35:02 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-05-19 20:46:53 ----D---- C:\WINDOWS\twain_32
2010-05-19 20:45:13 ----D---- C:\Program Files\Common Files\Logitech
2010-05-19 20:41:05 ----D---- C:\Program Files\Common Files\Logishrd
2010-05-19 20:41:03 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-05-19 20:33:50 ----D---- C:\WINDOWS\system32\CatRoot
2010-05-15 14:28:09 ----D---- C:\Program Files\Ubisoft
2010-05-15 12:02:19 ----D---- C:\Program Files\Java
2010-05-15 11:52:08 ----D---- C:\WINDOWS\Registration
2010-05-15 11:51:41 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-05-11 20:49:03 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-05-11 11:02:15 ----D---- C:\WINDOWS\pss
2010-05-11 10:44:37 ----D---- C:\WINDOWS\system32\LogFiles
2010-05-10 22:01:27 ----D---- C:\Documents and Settings\All Users\Application Data\Sun
2010-05-10 22:00:06 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2010-05-09 10:26:47 ----D---- C:\WINDOWS\system32\config
2010-05-07 12:11:10 ----D---- C:\Program Files\Vuze
2010-05-06 22:59:36 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-05-06 21:14:36 ----D---- C:\Documents and Settings\Administrator\Application Data\Opera
2010-05-04 13:16:13 ----D---- C:\WINDOWS\Logs
2010-05-03 14:23:51 ----D---- C:\Program Files\Opera

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-05-06 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-05-06 164048]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-05-06 46672]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2010-04-09 225344]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2010-04-09 25240]
R1 EIO_XP;EIO_XP; \??\C:\WINDOWS\system32\drivers\EIO_XP.sys []
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [2006-02-25 16877]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-05-06 19024]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-05-06 100432]
R2 rspndr;Link-Layer Topology Discovery Responder; C:\WINDOWS\system32\DRIVERS\rspndr.sys [2008-05-29 62848]
R2 tifsfilter;Acronis True Image FS Filter; C:\WINDOWS\system32\DRIVERS\tifsfilt.sys [2010-02-26 44704]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-05-06 23376]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-01-20 5027840]
R3 L8042mou;SetPoint PS/2 Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\L8042mou.Sys [2008-02-29 63120]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2008-02-29 35344]
R3 LMouKE;SetPoint Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouKE.Sys [2008-02-29 79120]
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\WINDOWS\System32\Drivers\LUsbFilt.Sys [2008-02-29 28944]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2005-05-27 22016]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-04-04 10232128]
R3 QCMerced;Logitech QuickCam Communicate; C:\WINDOWS\system32\DRIVERS\LVCM.sys [2005-05-27 1317152]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-10-30 117888]
R3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-24 30336]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbstor;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 VM650FVM11;UMAX AstraSlim Scanner ProdID x0104; C:\WINDOWS\System32\Drivers\USB650C.sys [2001-05-24 10830]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 abclh3mt;abclh3mt; C:\WINDOWS\system32\drivers\abclh3mt.sys []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM); C:\WINDOWS\system32\DRIVERS\s1018bus.sys [2009-03-25 86824]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s1018mdfl.sys [2009-03-25 15016]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s1018mdm.sys [2009-03-25 114728]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s1018mgmt.sys [2009-03-25 106208]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS); C:\WINDOWS\system32\DRIVERS\s1018nd5.sys [2009-03-25 26024]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s1018obex.sys [2009-03-25 104744]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM); C:\WINDOWS\system32\DRIVERS\s1018unic.sys [2009-03-25 109864]
S3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys []
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-08-24 38656]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R2 CLPSLS;COMODO livePCsupport Service; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe [2010-02-19 148744]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2010-04-09 1769216]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-04-03 154216]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
S3 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [2008-12-16 554264]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S4 DfSdkS;Defragmentation-Service; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe [2009-08-24 406016]
S4 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S4 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-05-11 153376]
S4 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe [2008-05-02 121360]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-09-20 382248]
S4 OMSI download service;Sony Ericsson OMSI download service; C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
S4 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe []
S4 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-05-09 435016]
S4 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2010-02-25 1047880]

-----------------EOF-----------------

zdravím

C:\WINDOWS\inf\unregmp2.exe otestujte na VIRUSTOTALu

jednoduchý návod: po načtení stránky, kliknout na Procházet, najít cestu k výše zmíněnému souboru a kliknout na tlačítko Odeslat soubor; pokud vyskočí hláška, že soubor byl už testován, ignorujte to a proveďte sken znova; po ukončení skenu sem vložte výsledky buď zkopírováním textu nebo vložením odkazu

Soubor 101B820A00B04C03302203825075800073DC38F6.exe přijatý 2010.03.29 13:27:36 (UTC)
Současný stav: Dokončeno
Výsledek: 0/42 (0.00%)
Formátované Formátované
Vytisknout výsledky Vytisknout výsledky
Antivirus Verze Poslední aktualizace Výsledek
a-squared 4.5.0.50 2010.03.29 -
AhnLab-V3 5.0.0.2 2010.03.29 -
AntiVir 7.10.5.247 2010.03.29 -
Antiy-AVL 2.0.3.7 2010.03.29 -
Authentium 5.2.0.5 2010.03.29 -
Avast 4.8.1351.0 2010.03.29 -
Avast5 5.0.332.0 2010.03.29 -
AVG 9.0.0.787 2010.03.29 -
BitDefender 7.2 2010.03.29 -
CAT-QuickHeal 10.00 2010.03.29 -
ClamAV 0.96.0.0-git 2010.03.29 -
Comodo 4426 2010.03.29 -
DrWeb 5.0.2.03220 2010.03.29 -
eSafe 7.0.17.0 2010.03.28 -
eTrust-Vet 35.2.7394 2010.03.29 -
F-Prot 4.5.1.85 2010.03.29 -
F-Secure 9.0.15370.0 2010.03.29 -
Fortinet 4.0.14.0 2010.03.29 -
GData 19 2010.03.29 -
Ikarus T3.1.1.80.0 2010.03.29 -
Jiangmin 13.0.900 2010.03.29 -
K7AntiVirus 7.10.1004 2010.03.22 -
Kaspersky 7.0.0.125 2010.03.29 -
McAfee 5934 2010.03.28 -
McAfee+Artemis 5934 2010.03.28 -
McAfee-GW-Edition 6.8.5 2010.03.29 -
Microsoft 1.5605 2010.03.29 -
NOD32 4982 2010.03.29 -
Norman 6.04.10 2010.03.29 -
nProtect 2009.1.8.0 2010.03.29 -
Panda 10.0.2.2 2010.03.28 -
PCTools 7.0.3.5 2010.03.29 -
Prevx 3.0 2010.03.29 -
Rising 22.41.00.04 2010.03.29 -
Sophos 4.52.0 2010.03.29 -
Sunbelt 6112 2010.03.29 -
Symantec 20091.2.0.41 2010.03.29 -
TheHacker 6.5.2.0.247 2010.03.29 -
TrendMicro 9.120.0.1004 2010.03.29 -
VBA32 3.12.12.2 2010.03.29 -
ViRobot 2010.3.29.2250 2010.03.29 -
VirusBuster 5.0.27.0 2010.03.29 -
Rozšiřující informace
File size: 208896 bytes
MD5 : 0a429c99cae89cbd00d0451a5402c3a1
SHA1 : 2abf1ea432480317c6e0e97def9e1bba76c6160d
SHA256: 056a7c104a68827bf26b92d5978d8df4abc31bdc8da70f96e723adef17aaf00e
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1641E
timedatestamp.....: 0x4802530E (Sun Apr 13 20:38:06 2008)
machinetype.......: 0x14C (Intel I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x2CB22 0x2D000 5.94 10fe5df729f9c429fef09b24e70a9687
.data 0x2E000 0x362C 0x1000 3.19 7c99287d6e7d460c411ff44b84066d39
.rsrc 0x32000 0x3DE8 0x4000 3.52 04550e582ff0b4648af6103d057b58be

( 0 imports )


( 0 exports )
TrID : File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
ThreatExpert: http://www.threatexpert.com/report.aspx ... 1a5402c3a1
ssdeep: 3072:xtkwP3n314oNx0iJKmmzuVaVvOTwl/lAwSLRjhRx/hrulRBTH7PLC6m:x+wP3nzql/uNRjhR7uRB71
sigcheck: publisher....: Microsoft Corporation
copyright....: (C) Microsoft Corporation. All rights reserved.
product......: Microsoft(R) Windows Media Player
description..: Microsoft Windows Media Player Setup Utility
original name: unregmp2
internal name: unregmp2
file version.: 9.00.00.4503
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
PEiD : -
RDS : NSRL Reference Data Set

log je ok

Ďakujem,a pekný deň prajem

nemáte vůbec zač