VIRY.CZ

Zdravim, PC nebylo kontrolovane cca dva roky ...poprosil bych o kontrolu

\\\\\\\\\\\\\

Logfile of random's system information tool 1.07 (written by random/random)
Run by Sylwia at 2010-06-30 14:06:23
Microsoft® Windows Vista™ Home Premium
System drive C: has 12 GB (16%) free of 77 GB
Total RAM: 2046 MB (37% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Norton Security Scan for Sylwia.job
C:\Windows\tasks\Program Norton Security Scan for Sylwia.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E8A6170-7264-4D0F-BEAE-D42A53123C75}]
C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll [2007-10-12 97960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2009-04-02 333192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
Winamp Toolbar Loader - C:\Program Files\Winamp Toolbar\winamptb.dll [2008-07-16 1266992]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.4.4.13.dll [2010-04-13 662776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-85B2-BC27FE9AAE2E}]
eGames Toolbar - C:\PROGRA~1\EGAMES~1\EGAMES~1.DLL [2007-08-29 1897472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-12-10 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocnik rejestracji usługi Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-01-15 263280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2010-01-15 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA6319C0-31B7-401E-A518-A07C3DB8F777}]
CBrowserHelperObject Object - C:\PROGRA~1\GOOGLE~1\BAE.dll [2006-06-23 98304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d51d388b-f5dc-471a-a1ce-5e2d671091c0}]
Mininova-Vuze Toolbar - C:\Program Files\Mininova-Vuze\tbMini.dll [2009-05-20 2085400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-12-10 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{90222687-F593-4738-B738-FBEE9C7B26DF} - Show Norton Toolbar - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll [2007-10-12 609424]
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Winamp Toolbar - C:\Program Files\Winamp Toolbar\winamptb.dll [2008-07-16 1266992]
{d51d388b-f5dc-471a-a1ce-5e2d671091c0} - Mininova-Vuze Toolbar - C:\Program Files\Mininova-Vuze\tbMini.dll [2009-05-20 2085400]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2009-04-02 333192]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-01-15 263280]
{4E7BD74F-2B8D-469E-85B2-BC27FE9AAE2E} - eGames Toolbar - C:\PROGRA~1\EGAMES~1\EGAMES~1.DLL [2007-08-29 1897472]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\WINDOWS\RtHDVCpl.exe [2007-04-08 4423680]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-03-10 835584]
"ISBMgr.exe"=C:\Program Files\Sony\ISB Utility\ISBMgr.exe [2007-09-19 311296]
"MarketingTools"=C:\Program Files\Sony\Marketing Tools\MarketingTools.exe [2007-11-27 36864]
"ccApp"=C:\Program Files\Common Files\Symantec Shared\ccApp.exe [2007-10-12 115816]
"Symantec PIF AlertEng"=C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2008-01-29 583048]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-11 417792]
"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-08-13 177440]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-01-22 141608]
""= []
"VirtualDrive"=C:\Program Files\FarStone\VirtualDrive\VDTask.exe [2008-11-06 170512]
"RAMDrive"=C:\Program Files\FarStone\VirtualDrive\VHD\RDTask.exe [2008-01-28 106496]
"Resume copy"=copyfstq.exe /startup []
"xln"=c:\cmos\xln.cpl [2010-06-17 947200]
"xlr"=c:\cmos\xlr.exe [2010-06-17 771072]
"xlb"=c:\cmos\xlb.cpl [2010-06-17 792576]
"xlr2"=c:\cmos\xlr2.exe [2010-06-17 771072]
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FsVdInstReboot"=1 []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2006-11-02 125440]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-02 201728]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\Windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe [2009-10-28 257440]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
WDDMStatus.lnk - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
WDSmartWare.lnk - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe

C:\Users\Sylwia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
CCC.lnk - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
OneNote 2007 Screen Clipper and Launcher.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\VESWinlogon]
C:\WINDOWS\SYSTEM32\VESWinlogon.dll [2007-08-15 98304]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\H]
shell\AutoRun\command - H:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I]
shell\AutoRun\command - I:\Setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\J]
shell\AutoRun\command - J:\Setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
shell\AutoRun\command - K:\AutorunArcanum.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\L]
shell\AutoRun\command - L:\AutorunArcanum.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{25824ee5-59a4-11dd-bd66-001e3d3a878a}]
shell\AutoRun\command - Z:\AutorunArcanum.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4eb640cd-d42f-11dd-904b-001e3d3a878a}]
shell\AutoRun\command - H:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4eb64117-d42f-11dd-904b-001e3d3a878a}]
shell\AutoRun\command - H:\wdsync.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4f7abb98-815d-11df-9af7-001e3d3a878a}]
shell\AutoRun\command - I:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a102a6c6-25bc-11df-9016-001e3d3a878a}]
shell\AutoRun\command - Q:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a102a6c7-25bc-11df-9016-001e3d3a878a}]
shell\AutoRun\command - R:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b81340b7-979c-11dd-8d26-001e3d3a878a}]
shell\AutoRun\command - I:\AutoTransfer.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ca752841-b17a-11dd-af7c-001e3d3a878a}]
shell\AutoRun\command - H:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ca752843-b17a-11dd-af7c-001e3d3a878a}]
shell\AutoRun\command - H:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d6409f39-5f0c-11dd-8475-001e3d3a878a}]
shell\AutoRun\command - H:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f131a616-5539-11dd-b4ac-001e3d3a878a}]
shell\AutoRun\command - H:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f131a631-5539-11dd-b4ac-001e3d3a878a}]
shell\AutoRun\command - H:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fef6d158-0dfb-11df-a9cb-001e3d3a878a}]
shell\AutoRun\command - "H:\WD SmartWare.exe" autoplay=true


======List of files/folders created in the last 1 months======

2010-06-30 14:06:25 ----D---- C:\Program Files\trend micro
2010-06-30 14:06:23 ----D---- C:\rsit
2010-06-30 13:55:03 ----D---- C:\ArchonMedia
2010-06-26 20:55:53 ----D---- C:\Program Files\DAEMON Tools Lite
2010-06-26 20:55:20 ----D---- C:\Users\Sylwia\AppData\Roaming\DAEMON Tools Lite
2010-06-26 20:55:18 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-06-17 16:48:20 ----D---- C:\datagyn
2010-06-17 16:48:00 ----HD---- C:\cmos
2010-06-06 21:44:55 ----A---- C:\Windows\reimage.ini
2010-06-06 21:44:31 ----D---- C:\rei
2010-06-06 21:44:27 ----D---- C:\Program Files\Reimage
2010-06-06 18:52:45 ----D---- C:\Program Files\Bullfrog
2010-06-06 18:52:38 ----A---- C:\Windows\unin0415.exe
2010-06-06 18:51:43 ----A---- C:\Windows\IsUninst.exe
2010-06-04 19:32:10 ----D---- C:\Downloads
2010-06-04 19:32:09 ----D---- C:\Users\Sylwia\AppData\Roaming\BitComet
2010-06-04 19:31:16 ----D---- C:\Program Files\BitComet
2010-06-02 13:12:14 ----A---- C:\Windows\system32\savapi3.dll
2010-06-02 13:12:12 ----A---- C:\Windows\system32\avgsdk.dll

======List of files/folders modified in the last 1 months======

2010-06-30 14:06:26 ----D---- C:\Windows\Prefetch
2010-06-30 14:06:25 ----RD---- C:\Program Files
2010-06-30 14:06:20 ----D---- C:\Windows\Temp
2010-06-30 13:55:06 ----SHD---- C:\Windows\Installer
2010-06-30 13:54:52 ----SHD---- C:\System Volume Information
2010-06-30 13:49:31 ----D---- C:\Users\Sylwia\AppData\Roaming\Skype
2010-06-30 08:09:43 ----D---- C:\Users\Sylwia\AppData\Roaming\skypePM
2010-06-28 17:01:49 ----D---- C:\Program Files\Mozilla Firefox
2010-06-28 16:55:47 ----D---- C:\Windows\System32
2010-06-28 16:55:47 ----D---- C:\Windows\inf
2010-06-28 16:55:47 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-06-26 21:40:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-06-26 21:25:35 ----AT---- C:\Windows\system32\SIntfNT.dll
2010-06-26 21:25:35 ----AT---- C:\Windows\system32\SIntf32.dll
2010-06-26 21:25:35 ----AT---- C:\Windows\system32\SIntf16.dll
2010-06-26 20:57:59 ----D---- C:\Windows\system32\drivers
2010-06-26 20:55:18 ----HD---- C:\ProgramData
2010-06-24 08:21:27 ----D---- C:\Windows\system32\catroot2
2010-06-07 23:05:06 ----D---- C:\Program Files\uTorrent
2010-06-07 11:23:59 ----SD---- C:\Users\Sylwia\AppData\Roaming\Microsoft
2010-06-06 21:44:59 ----D---- C:\Windows\system32\Tasks
2010-06-06 21:44:55 ----D---- C:\Windows
2010-06-06 18:52:46 ----D---- C:\Windows\system
2010-06-06 18:11:11 ----D---- C:\Users\Sylwia\AppData\Roaming\uTorrent

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 DMICall;Sony DMI Call service; C:\Windows\system32\DRIVERS\DMICall.sys [2007-09-19 10216]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2008-09-02 371248]
R1 IDSvix86;Symantec Intrusion Prevention Driver; \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData\idsdefs\20080911.001\IDSvix86.sys [2008-07-16 261680]
R1 SRTSPX;SRTSPX; C:\Windows\System32\Drivers\SRTSPX.SYS [2007-11-30 43696]
R1 SYMTDI;SYMTDI; C:\Windows\System32\Drivers\SYMTDI.SYS [2007-10-12 191544]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2007-09-05 12672]
R2 regi;regi; C:\Windows\system32\drivers\regi.sys [2007-04-18 11032]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2007-09-05 8192]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect; C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2007-10-30 17920]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-10-19 2930176]
R3 BthEnum;Usługa wyliczania Bluetooth; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-07-19 19456]
R3 BthPan;Urządzenie Bluetooth (sieć osobista); C:\Windows\system32\DRIVERS\bthpan.sys [2006-11-02 92160]
R3 BTHUSB;Sterownik USB odbiornika radiowego Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2008-07-19 29184]
R3 btwaudio;Urz1dzenie dYwiekowe Bluetooth; C:\Windows\system32\drivers\btwaudio.sys [2007-11-15 81448]
R3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2007-11-15 99880]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2007-11-15 28464]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2007-11-15 17448]
R3 CmBatt;Sterownik baterii Microsoft o metodzie kontroli ACPI; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-07-19 14208]
R3 fcdabus;fcdabus; C:\Windows\system32\DRIVERS\fcdabus.sys [2008-10-29 18448]
R3 fsRamDsk;RamDisk Drive Service; C:\Windows\system32\DRIVERS\fsRamDsk.sys [2007-06-23 43408]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2007-09-05 985600]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2007-09-05 207360]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-04-08 1761696]
R3 NETw4v32;Sterownik karty Intel(R) Wireless WiFi Link dla systemu Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-09-19 2222080]
R3 R5U870FLx86;R5U870 UVC Lower Filter ; C:\Windows\System32\Drivers\R5U870FLx86.sys [2007-10-17 73472]
R3 R5U870FUx86;R5U870 UVC Upper Filter ; C:\Windows\System32\Drivers\R5U870FUx86.sys [2007-10-17 43904]
R3 RFCOMM;Urządzenie Bluetooth (Protokół TDI RFCOMM); C:\Windows\system32\DRIVERS\rfcomm.sys [2006-11-02 49664]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-09-05 84480]
R3 SFEP;Sony Firmware Extension Parser; C:\Windows\system32\DRIVERS\SFEP.sys [2007-08-29 9344]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [2008-07-18 123952]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-03-10 181560]
R3 ti21sony;ti21sony; C:\Windows\system32\drivers\ti21sony.sys [2007-11-16 818688]
R3 usbvideo;R5U870 (UVC) ; C:\Windows\System32\Drivers\usbvideo.sys [2007-11-26 132608]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2007-09-05 659968]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
S3 amkrwmq1;amkrwmq1; C:\Windows\system32\drivers\amkrwmq1.sys []
S3 aprp8og8;aprp8og8; C:\Windows\system32\drivers\aprp8og8.sys []
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2007-10-16 743424]
S3 BTHPORT;Sterownik portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2008-07-19 220160]
S3 cpuz132;cpuz132; \??\C:\Users\Sylwia\AppData\Local\Temp\cpuz132\cpuz132_x32.sys []
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2007-03-01 92032]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys []
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 NAVENG;NAVENG; \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20080914.003\NAVENG.SYS []
S3 NAVEX15;NAVEX15; \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20080914.003\NAVEX15.SYS []
S3 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys [2007-04-14 418104]
S3 SRTSP;SRTSP; C:\Windows\System32\Drivers\SRTSP.SYS [2007-11-30 279088]
S3 SRTSPL;SRTSPL; C:\Windows\System32\Drivers\SRTSPL.SYS [2007-11-30 317616]
S3 SYMDNS;SYMDNS; C:\Windows\System32\Drivers\SYMDNS.SYS [2007-10-12 12984]
S3 SYMFW;SYMFW; C:\Windows\System32\Drivers\SYMFW.SYS [2007-10-12 145976]
S3 SYMIDS;SYMIDS; C:\Windows\System32\Drivers\SYMIDS.SYS [2007-10-12 40120]
S3 SYMNDISV;SYMNDISV; C:\Windows\System32\Drivers\SYMNDISV.SYS [2007-10-12 38200]
S3 SYMREDRV;SYMREDRV; C:\Windows\System32\Drivers\SYMREDRV.SYS [2007-10-12 27576]
S3 TcUsb;TC USB Kernel Driver; C:\Windows\System32\Drivers\tcusb.sys [2007-10-03 47376]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2009-07-09 39424]
S3 vaxscsi;vaxscsi; C:\Windows\System32\Drivers\vaxscsi.sys []
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2007-05-26 128104]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2006-11-02 39936]
S4 UIUSys;Conexant Setup API; C:\Windows\system32\DRIVERS\UIUSYS.SYS []
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-07-09 144712]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-10-19 610304]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2006-11-02 22016]
R2 ccEvtMgr;ccEvtMgr; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-10-12 108648]
R2 ccSetMgr;ccSetMgr; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-10-12 108648]
R2 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-10-12 108648]
R2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-05 112152]
R2 LiveUpdate Notice Ex;LiveUpdate Notice Service Ex; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-10-12 108648]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 uCamMonitor;CamMonitor; C:\Program Files\ArcSoft\Magic-i Visual Effects\uCamMonitor.exe [2007-10-31 125440]
R2 VAIO Event Service;VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [2007-08-15 182392]
R2 VzCdbSvc;VAIO Entertainment Database Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [2007-08-29 192512]
R2 VzFw;VAIO Entertainment File Import Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe [2007-08-29 131072]
R2 WDDMService;WD SmartWare Drive Manager; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2009-11-13 110592]
R2 WDSmartWareBackgroundService;WD SmartWare Background Service; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [2009-06-16 20480]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2007-09-05 386560]
R3 iPod Service;Usługa iPod; C:\Program Files\iPod\bin\iPodService.exe [2010-01-22 545576]
R3 Vcsw;VAIO Entertainment UPnP Client Adapter; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [2007-06-28 274432]
S2 gupdate1c9eed5b77254af;Usługa Google Update (gupdate1c9eed5b77254af); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-06-16 133104]
S2 LiveUpdate Notice Service;LiveUpdate Notice Service; C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2008-01-29 583048]
S3 comHost;COM Host; C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe [2007-10-12 49248]
S3 GoogleDesktopManager;GoogleDesktopManager; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2007-11-27 1838592]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-01-11 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2007-09-12 2999664]
S3 MSCSPTISRV;MSCSPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [2006-12-14 45056]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-27 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PACSPTISVR;PACSPTISVR; C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [2006-12-14 57344]
S3 SPTISRV;Sony SPTI Service; C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe [2006-12-14 69632]
S3 Symantec Core LC;Symantec Core LC; C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe [2008-07-18 1251720]
S3 VAIO Entertainment TV Device Arbitration Service;VAIO Entertainment TV Device Arbitration Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe [2007-06-28 73728]
S3 VAIOMediaPlatform-IntegratedServer-AppServer;VAIO Media Integrated Server; C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe [2007-06-21 2523136]
S3 VAIOMediaPlatform-IntegratedServer-HTTP;VAIO Media Integrated Server (HTTP); C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe [2007-06-21 397312]
S3 VAIOMediaPlatform-IntegratedServer-UPnP;VAIO Media Integrated Server (UPnP); C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe [2007-06-21 1089536]
S3 VAIOMediaPlatform-Mobile-Gateway;VAIO Media Gateway Server; C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe [2007-06-21 499712]
S3 VAIOMediaPlatform-UCLS-AppServer;VAIO Media Content Collection; C:\Program Files\Sony\VAIO Media Integrated Server\UCLS.exe [2007-01-11 745472]
S3 VAIOMediaPlatform-UCLS-HTTP;VAIO Media Content Collection (HTTP); C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe [2007-06-21 397312]
S3 VAIOMediaPlatform-UCLS-UPnP;VAIO Media Content Collection (UPnP); C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe [2007-06-21 1089536]
S3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2007-09-29 292128]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface; C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [2007-09-21 79136]

-----------------EOF-----------------

Cau. Jsem akorat u pritelkyne, a obcas je to tu nejaky zabrzdeny.

-----------\\ ToolBar S&D 1.2.9 XP/Vista

Microsoft® Windows Vista™ Home Premium ( v6.0.6000 )
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T8100 @ 2.10GHz )
BIOS : Ver 1.00PARTTBL
USER : Sylwia ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:75 Go (Free:11 Go)
D:\ (USB)
E:\ (USB)
F:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
G:\ (Local Disk) - NTFS - Total:64 Go (Free:34 Go)
I:\ (CD or DVD)
Q:\ (CD or DVD)
R:\ (CD or DVD)
S:\ (CD or DVD)
T:\ (CD or DVD)
U:\ (CD or DVD)
V:\ (CD or DVD)
W:\ (CD or DVD)
X:\ (CD or DVD)
Y:\ (CD or DVD)
Z:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
Option : [2] ( 2010-06-30|15:13 )

[ UAC => 0 ]
C:\Windows\iun6002.exe
C:\Users\Sylwia\AppData\Local\Temp\nsn1546.tmp

-----------\\ FIX

Deleted! - C:\Program Files\AskBarDis\bar
Deleted! - C:\Program Files\AskBarDis\unins000.dat
Deleted! - C:\Program Files\AskBarDis\unins000.exe
Deleted! - C:\Windows\iun6002.exe
Deleted! - C:\Users\Sylwia\AppData\Local\Temp\nsn1546.tmp
Deleted! - C:\Program Files\AskBarDis

-----------\\ Searching for Files - Folders ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dl ... r=iesearch"
"Start Page"="http://start.gametop.com/?utm_source=Ma ... dium=start"
"Search Bar"="http://www.microsoft.com/isapi/redir.dl ... r=iesearch"
"Url"="http://go.microsoft.com/fwlink/?LinkId=68929"
"Url"="http://go.microsoft.com/fwlink/?LinkId=44406"
"Url"="http://go.microsoft.com/fwlink/?LinkId=68928"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.msn.com/"
"Default_Page_URL"="http://www.club-vaio.com"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"


--------------------\\ Searching for other infections

--------------------\\ Cracks & Keygens ..

C:\Users\Sylwia\AppData\Local\VirtualStore\Program Files\Ja2\Data\ShadeTables\cracks.sha
C:\Users\Sylwia\AppData\Local\VirtualStore\Program Files\Ja2\Data\ShadeTables\cracks2.sha


[ UAC => 1 ]


1 - "C:\ToolBar SD\TB_1.txt" - 2010-06-30|15:15 - Option : [2]

-----------\\ Scan completed at 15:15:48,85

############################## | UsbFix 7.014 | [Deletion]

User: Sylwia (Administrator) # SYLWIA-PINK [Sony Corporation VGN-CR31S_P]
Updated 24/06/10 by El Desaparecido / C_XX
Started at 15:24:42 | 30/06/2010
Website: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com

CPU: Intel(R) Core(TM)2 Duo CPU T8100 @ 2.10GHz
CPU 2: Intel(R) Core(TM)2 Duo CPU T8100 @ 2.10GHz
Microsoft® Windows Vista™ Home Premium (6.0.6000 32-Bit) #
Internet Explorer 7.0.6000.16711

Windows Firewall: Disabled /!\
RAM -> 2046 Mb
C:\ (%systemdrive%) -> Fixed drive # 75 Gb (12 Mb free - 15%) [SYSTEMOS] # NTFS
F:\ -> CD-ROM
G:\ -> Fixed drive # 64 Gb (35 Mb free - 54%) [WUNIA] # NTFS
H:\ -> CD-ROM
I:\ -> CD-ROM
N:\ -> Fixed drive # 465 Gb (51 Mb free - 11%) [My Passport] # NTFS
O:\ -> Removable drive # 4 Gb (349 Mb free - 9%) [PHILIPS UFD] # FAT32
Q:\ -> CD-ROM
R:\ -> CD-ROM
S:\ -> CD-ROM
T:\ -> CD-ROM
U:\ -> CD-ROM
V:\ -> CD-ROM
W:\ -> CD-ROM
X:\ -> CD-ROM
Y:\ -> CD-ROM
Z:\ -> CD-ROM

################## | Files # Infected Folders |

Not deleted ! H:\Autorun.inf

################## | Registry |


################## | Mountpoints2 |

Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\H
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\J
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\L
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{25824ee5-59a4-11dd-bd66-001e3d3a878a}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{4eb640cd-d42f-11dd-904b-001e3d3a878a}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{4f7abb98-815d-11df-9af7-001e3d3a878a}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{a102a6c6-25bc-11df-9016-001e3d3a878a}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{b81340b7-979c-11dd-8d26-001e3d3a878a}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{ca752843-b17a-11dd-af7c-001e3d3a878a}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{d6409f39-5f0c-11dd-8475-001e3d3a878a}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{f131a616-5539-11dd-b4ac-001e3d3a878a}
Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{fef6d158-0dfb-11df-a9cb-001e3d3a878a}

################## | Listing |

[30/06/2010 - 15:27:47 | SHD ] C:\$Recycle.Bin
[30/06/2010 - 13:55:03 | D ] C:\ArchonMedia
[18/09/2006 - 22:43:36 | A | 24] C:\autoexec.bat
[27/11/2007 - 19:29:31 | D ] C:\Big Fish Games
[23/07/2008 - 23:55:17 | SHD ] C:\Boot
[19/01/2008 - 08:45:45 | RASH | 333203] C:\bootmgr
[26/11/2007 - 23:24:05 | RAS | 8192] C:\BOOTSECT.BAK
[17/06/2010 - 16:48:23 | HD ] C:\cmos
[18/09/2006 - 22:43:37 | A | 10] C:\config.sys
[17/06/2010 - 16:48:20 | D ] C:\datagyn
[20/12/2007 - 23:46:22 | D ] C:\Documentation
[02/11/2006 - 14:02:03 | SHD ] C:\Documents and Settings
[26/06/2010 - 21:53:16 | D ] C:\Downloads
[15/03/2010 - 18:57:35 | D ] C:\Games
[28/06/2010 - 16:48:59 | ASH | 2145837056] C:\hiberfil.sys
[03/01/2005 - 15:37:18 | AH | 17] C:\initrd.pam
[20/12/2007 - 23:39:03 | HD ] C:\InstantON
[20/12/2007 - 23:19:19 | D ] C:\Intel
[08/03/2010 - 18:08:04 | A | 261] C:\inVHDDrvLog.dat
[20/07/2008 - 20:54:03 | RASH | 0] C:\IO.SYS
[27/03/2007 - 23:33:48 | AH | 67] C:\kernel.pam
[20/07/2008 - 20:54:03 | RASH | 0] C:\MSDOS.SYS
[27/11/2007 - 19:23:08 | RHD ] C:\MSOCache
[28/06/2010 - 16:48:57 | ASH | 2459762688] C:\pagefile.sys
[30/06/2010 - 15:15:21 | RD ] C:\Program Files
[26/06/2010 - 20:55:18 | HD ] C:\ProgramData
[06/05/2001 - 02:07:04 | A | 192] C:\Reference.html
[06/06/2010 - 21:45:47 | D ] C:\rei
[30/06/2010 - 14:06:31 | D ] C:\rsit
[24/07/2008 - 17:30:39 | D ] C:\Sierra
[18/12/2008 - 14:41:18 | AH | 268] C:\sqmdata00.sqm
[20/12/2008 - 05:35:22 | AH | 268] C:\sqmdata01.sqm
[26/12/2008 - 09:51:11 | AH | 268] C:\sqmdata02.sqm
[26/12/2008 - 12:30:03 | AH | 268] C:\sqmdata03.sqm
[26/12/2008 - 12:40:12 | AH | 268] C:\sqmdata04.sqm
[26/12/2008 - 14:27:15 | AH | 268] C:\sqmdata05.sqm
[26/12/2008 - 18:16:48 | AH | 268] C:\sqmdata06.sqm
[26/12/2008 - 21:22:25 | AH | 268] C:\sqmdata07.sqm
[27/12/2008 - 17:04:16 | AH | 268] C:\sqmdata08.sqm
[17/01/2009 - 12:03:08 | AH | 268] C:\sqmdata09.sqm
[17/01/2009 - 23:05:39 | AH | 268] C:\sqmdata10.sqm
[20/01/2009 - 09:58:38 | AH | 268] C:\sqmdata11.sqm
[26/01/2009 - 14:10:34 | AH | 268] C:\sqmdata12.sqm
[27/01/2009 - 14:50:45 | AH | 268] C:\sqmdata13.sqm
[28/01/2009 - 01:01:04 | AH | 268] C:\sqmdata14.sqm
[28/01/2009 - 01:04:13 | AH | 268] C:\sqmdata15.sqm
[29/01/2009 - 00:50:05 | AH | 268] C:\sqmdata16.sqm
[29/01/2009 - 12:20:39 | AH | 268] C:\sqmdata17.sqm
[30/01/2009 - 11:50:28 | AH | 268] C:\sqmdata18.sqm
[02/02/2009 - 21:12:42 | AH | 268] C:\sqmdata19.sqm
[18/12/2008 - 14:41:18 | AH | 244] C:\sqmnoopt00.sqm
[20/12/2008 - 05:35:22 | AH | 244] C:\sqmnoopt01.sqm
[26/12/2008 - 09:51:11 | AH | 244] C:\sqmnoopt02.sqm
[26/12/2008 - 12:30:03 | AH | 244] C:\sqmnoopt03.sqm
[26/12/2008 - 12:40:12 | AH | 244] C:\sqmnoopt04.sqm
[26/12/2008 - 14:27:15 | AH | 244] C:\sqmnoopt05.sqm
[26/12/2008 - 18:16:48 | AH | 244] C:\sqmnoopt06.sqm
[26/12/2008 - 21:22:25 | AH | 244] C:\sqmnoopt07.sqm
[27/12/2008 - 17:04:16 | AH | 244] C:\sqmnoopt08.sqm
[17/01/2009 - 12:03:08 | AH | 244] C:\sqmnoopt09.sqm
[17/01/2009 - 23:05:36 | AH | 244] C:\sqmnoopt10.sqm
[20/01/2009 - 09:58:38 | AH | 244] C:\sqmnoopt11.sqm
[26/01/2009 - 14:10:34 | AH | 244] C:\sqmnoopt12.sqm
[27/01/2009 - 14:50:45 | AH | 244] C:\sqmnoopt13.sqm
[28/01/2009 - 01:01:04 | AH | 244] C:\sqmnoopt14.sqm
[28/01/2009 - 01:04:13 | AH | 244] C:\sqmnoopt15.sqm
[29/01/2009 - 00:50:05 | AH | 244] C:\sqmnoopt16.sqm
[29/01/2009 - 12:20:39 | AH | 244] C:\sqmnoopt17.sqm
[30/01/2009 - 11:50:28 | AH | 244] C:\sqmnoopt18.sqm
[02/02/2009 - 21:12:42 | AH | 244] C:\sqmnoopt19.sqm
[30/06/2010 - 13:54:52 | SHD ] C:\System Volume Information
[30/06/2010 - 15:15:48 | A | 2590] C:\TB.txt
[04/02/2010 - 00:19:42 | D ] C:\temp
[30/06/2010 - 15:15:48 | D ] C:\ToolBar SD
[30/06/2010 - 15:27:47 | D ] C:\UsbFix
[30/06/2010 - 15:24:49 | A | 5997] C:\UsbFix.txt
[27/12/2008 - 16:51:50 | RD ] C:\Users
[20/12/2007 - 23:33:31 | HD ] C:\WAUUPGRD
[30/06/2010 - 15:14:52 | D ] C:\Windows
[01/01/1995 - 01:00:00 | R | 44] F:\Track01.cda
[01/01/1995 - 01:00:00 | R | 44] F:\Track02.cda
[01/01/1995 - 01:00:00 | R | 44] F:\Track03.cda
[01/01/1995 - 01:00:00 | R | 44] F:\Track04.cda
[01/01/1995 - 01:00:00 | R | 44] F:\Track05.cda
[01/01/1995 - 01:00:00 | R | 44] F:\Track06.cda
[01/01/1995 - 01:00:00 | R | 44] F:\Track07.cda
[01/01/1995 - 01:00:00 | R | 44] F:\Track08.cda
[01/01/1995 - 01:00:00 | R | 44] F:\Track09.cda
[01/01/1995 - 01:00:00 | R | 44] F:\Track10.cda
[01/01/1995 - 01:00:00 | R | 44] F:\Track11.cda
[01/01/1995 - 01:00:00 | R | 44] F:\Track12.cda
[01/01/1995 - 01:00:00 | R | 44] F:\Track13.cda
[01/01/1995 - 01:00:00 | R | 44] F:\Track14.cda
[30/06/2010 - 15:27:47 | SHD ] G:\$RECYCLE.BIN
[07/06/2010 - 23:00:38 | D ] G:\Arcanum
[07/06/2010 - 22:39:06 | D ] G:\Avatar.TS.XviD-DEViSE- [ www.torrentday.com ]
[22/06/2010 - 16:30:09 | A | 366477738] G:\CSI.Miami.S08E01.HDTV.XviD-LOL.avi
[22/06/2010 - 16:45:09 | A | 367194996] G:\CSI.Miami.S08E02.HDTV.XviD-LOL.avi
[22/06/2010 - 16:54:40 | A | 366744004] G:\CSI.Miami.S08E03.HDTV.XviD-LOL.avi
[22/06/2010 - 16:40:29 | A | 366621252] G:\CSI.Miami.S08E04.HDTV.XviD-LOL.avi
[07/06/2010 - 23:01:29 | D ] G:\Did You Hear About The Morgans[2009.DvDRiP[NoRaR]L33t
[07/06/2010 - 23:02:21 | D ] G:\Fast and Furious (2009) DVDRip-MAXSPEED
[07/06/2010 - 23:03:13 | D ] G:\Felon[2008]DvDrip-aXXo
[21/01/2009 - 17:07:41 | A | 4382720] G:\French Bikini.mp3
[07/06/2010 - 23:04:15 | D ] G:\From Paris with Love (2010) R5 DVDRip XviD-MAXSPEED
[07/06/2010 - 23:04:15 | D ] G:\Gamer
[10/06/2010 - 19:27:47 | D ] G:\GRY
[07/06/2010 - 14:16:26 | D ] G:\Inglourious.Basterds.2009.PL.DVDRip.XviD-BRiLLANT
[21/06/2010 - 16:38:10 | D ] G:\Lost Season 2
[22/06/2010 - 05:54:21 | D ] G:\Lost Zagubieni_Dragonwarez.unl.pl
[21/01/2009 - 16:53:41 | A | 6430720] G:\Lovemachine.mp3
[04/02/2010 - 00:12:22 | RD ] G:\MOVIES
[08/01/2009 - 22:04:55 | D ] G:\Pictures
[07/06/2010 - 22:56:39 | D ] G:\Possession.2009.DVDRip.XviD-VoMiT.[www.USABIT.com]
[07/06/2010 - 14:34:31 | D ] G:\progz
[06/05/2001 - 02:07:04 | A | 192] G:\Reference.html
[07/06/2010 - 22:57:27 | D ] G:\Shrink.2009.LiMiTED.DVDRiP.XViD
[07/03/2010 - 18:42:42 | A | 1020524584] G:\Shutter.Island.Cam.V2.Xvid-Classified.avi
[21/01/2009 - 16:51:29 | A | 6152192] G:\Silicone.mp3
[21/01/2009 - 17:07:53 | A | 4317184] G:\Superpussy.mp3
[23/03/2010 - 15:18:41 | A | 26112] G:\Sylwia Czajkowska CV(2).doc
[16/08/2009 - 01:19:16 | A | 26112] G:\Sylwia Czajkowska CV.doc
[18/07/2008 - 00:20:56 | SHD ] G:\System Volume Information
[07/06/2010 - 22:58:16 | D ] G:\The.Fourth.Kind.DVDRip.XviD-DiAMOND
[18/06/2009 - 22:12:18 | A | 88] H:\autorun.inf
[14/11/2009 - 01:33:06 | AD ] H:\Extras
[13/11/2009 - 20:25:22 | A | 3687200] H:\Unlock.exe
[13/11/2009 - 22:42:23 | AD ] H:\User Manuals
[14/11/2009 - 01:30:12 | A | 1456475] H:\Virtual CD Manager.exe
[14/11/2009 - 01:33:33 | AD ] H:\WD SmartWare
[13/11/2009 - 20:25:22 | A | 3280672] H:\WD SmartWare.exe
[18/06/2009 - 18:06:24 | A | 695] H:\What is this.html
[30/06/2010 - 15:27:47 | SHD ] N:\$RECYCLE.BIN
[07/06/2010 - 13:47:07 | D ] N:\Arcanum
[07/06/2010 - 11:31:49 | D ] N:\Ciacho. 2010.DVDRip.XViD-N30CR4ZY
[07/06/2010 - 11:28:44 | D ] N:\Dungeon Keeper Gold [PL] [Full CD] + Dungoeon Keeper 2 [PL] [Full 2xCD]
[17/04/2010 - 19:26:05 | D ] N:\FILMOSY
[07/06/2010 - 14:52:11 | D ] N:\GIEROSY
[16/02/2010 - 11:09:11 | D ] N:\Muzyka
[07/06/2010 - 11:18:35 | D ] N:\Pendrive
[07/06/2010 - 11:29:47 | D ] N:\Prince of Persia The Sands of Time TS XViD - IMAGiNE [NO-RAR] - [ www.torrentday.com ]
[30/06/2010 - 15:25:36 | SHD ] N:\RECYCLER
[06/05/2001 - 02:07:04 | A | 192] N:\Reference.html
[05/04/2010 - 11:56:52 | SHD ] N:\System Volume Information
[26/05/2010 - 03:04:33 | A | 661108156] N:\???????. ????. ?????????.avi
[17/06/2010 - 17:23:14 | A | 735725568] O:\Damien-The.Omen.II[1978]DvDrip-aXXo.avi
[11/06/2010 - 03:38:00 | A | 365975552] O:\SDTV.CSI.MIAMI.S03E12PL.avi
[11/06/2010 - 03:39:40 | A | 367358206] O:\SDTV.CSI.MIAMI.S03E13PL.avi
[11/06/2010 - 03:26:08 | A | 366020608] O:\SDTV.CSI.MIAMI.S03E08PL.avi
[11/06/2010 - 03:31:24 | A | 365803520] O:\SDTV.CSI.MIAMI.S03E09PL.avi
[17/06/2010 - 17:23:16 | A | 736233472] O:\The.Omen[1976]DvDrip-aXXo.avi
[13/06/2010 - 12:12:18 | A | 34929] O:\The.Omen[1976]DvDrip-aXXo.txt
[13/06/2010 - 12:15:38 | A | 50626] O:\Damien-The.Omen.II[1978]DvDrip-aXXo.txt
[11/06/2010 - 02:03:48 | A | 366020608] O:\SDTV.CSI.MIAMI.S03E10PL.avi
[11/06/2010 - 03:34:56 | A | 365971456] O:\SDTV.CSI.MIAMI.S03E11PL.avi

################## | Vaccin |

C:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
G:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
N:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
O:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)

################## | Upload |

Please send the file: C:\UsbFix_Upload_Me_SYLWIA-PINK.zip
http://chiquitine.changelog.fr/Sample/Upload.php
Thank you for your contribution.

################## | E.O.F |

Logfile of random's system information tool 1.07 (written by random/random)
Run by Sylwia at 2010-06-30 16:12:34
Microsoft® Windows Vista™ Home Premium
System drive C: has 12 GB (15%) free of 77 GB
Total RAM: 2046 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:12:40, on 2010-06-30
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16711)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\WINDOWS\SYSTEM32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Sony\ISB Utility\ISBMgr.exe
C:\Program Files\Sony\Marketing Tools\MarketingTools.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\FarStone\VirtualDrive\VHD\RDTask.exe
C:\cmos\xlr.exe
C:\cmos\xlr2.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\system32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\WINDOWS\SYSTEM32\taskeng.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe
C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Windows\system32\conime.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Sylwia\Downloads\RSIT(2).exe
C:\Program Files\trend micro\Sylwia.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
R3 - URLSearchHook: Mininova-Vuze Toolbar - {d51d388b-f5dc-471a-a1ce-5e2d671091c0} - C:\Program Files\Mininova-Vuze\tbMini.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.4.4.13.dll
O2 - BHO: eGames Toolbar - {4E7BD74F-2B8D-469E-85B2-BC27FE9AAE2E} - C:\PROGRA~1\EGAMES~1\EGAMES~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Pomocnik rejestracji usługi Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\PROGRA~1\GOOGLE~1\BAE.dll
O2 - BHO: Mininova-Vuze Toolbar - {d51d388b-f5dc-471a-a1ce-5e2d671091c0} - C:\Program Files\Mininova-Vuze\tbMini.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: Mininova-Vuze Toolbar - {d51d388b-f5dc-471a-a1ce-5e2d671091c0} - C:\Program Files\Mininova-Vuze\tbMini.dll
O3 - Toolbar: eGames Toolbar - {4E7BD74F-2B8D-469E-85B2-BC27FE9AAE2E} - C:\PROGRA~1\EGAMES~1\EGAMES~1.DLL
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files\Sony\ISB Utility\ISBMgr.exe"
O4 - HKLM\..\Run: [MarketingTools] C:\Program Files\Sony\Marketing Tools\MarketingTools.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [VirtualDrive] "C:\Program Files\FarStone\VirtualDrive\VDTask.exe" /AutoRestore
O4 - HKLM\..\Run: [RAMDrive] "C:\Program Files\FarStone\VirtualDrive\VHD\RDTask.exe"
O4 - HKLM\..\Run: [Resume copy] copyfstq.exe /startup
O4 - HKLM\..\Run: [xln] c:\cmos\xln.cpl
O4 - HKLM\..\Run: [xlr] c:\cmos\xlr.exe
O4 - HKLM\..\Run: [xlb] c:\cmos\xlb.cpl
O4 - HKLM\..\Run: [xlr2] c:\cmos\xlr2.exe
O4 - HKLM\..\RunOnce: [FsVdInstReboot]
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA SIECIOWA')
O4 - .DEFAULT User Startup: CCC.lnk = ? (User 'Default user')
O4 - Startup: CCC.lnk = ?
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: WDDMStatus.lnk = C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
O4 - Global Startup: WDSmartWare.lnk = C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O8 - Extra context menu item: Pobierz wszystkie wideo za pomocą BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Pobierz za pomocą BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Wpis w blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Wpis w blogu w Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.4.4.13.dll/206 (file missing)
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/Shar ... /cabsa.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ccEvtMgr - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: ccSetMgr - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Usługa Google Update (gupdate1c9eed5b77254af) (gupdate1c9eed5b77254af) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Usługa iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: CamMonitor (uCamMonitor) - ArcSoft, Inc. - C:\Program Files\ArcSoft\Magic-i Visual Effects\uCamMonitor.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
O23 - Service: VAIO Media Content Collection (VAIOMediaPlatform-UCLS-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\UCLS.exe
O23 - Service: VAIO Media Content Collection (HTTP) (VAIOMediaPlatform-UCLS-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Content Collection (UPnP) (VAIOMediaPlatform-UCLS-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
O23 - Service: WD SmartWare Drive Manager (WDDMService) - WDC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
O23 - Service: WD SmartWare Background Service (WDSmartWareBackgroundService) - Memeo - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 15578 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Norton Security Scan for Sylwia.job
C:\Windows\tasks\Program Norton Security Scan for Sylwia.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E8A6170-7264-4D0F-BEAE-D42A53123C75}]
C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll [2007-10-12 97960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
Winamp Toolbar Loader - C:\Program Files\Winamp Toolbar\winamptb.dll [2008-07-16 1266992]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.4.4.13.dll [2010-04-13 662776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-85B2-BC27FE9AAE2E}]
eGames Toolbar - C:\PROGRA~1\EGAMES~1\EGAMES~1.DLL [2007-08-29 1897472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-12-10 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocnik rejestracji usługi Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-01-15 263280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2010-01-15 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA6319C0-31B7-401E-A518-A07C3DB8F777}]
CBrowserHelperObject Object - C:\PROGRA~1\GOOGLE~1\BAE.dll [2006-06-23 98304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d51d388b-f5dc-471a-a1ce-5e2d671091c0}]
Mininova-Vuze Toolbar - C:\Program Files\Mininova-Vuze\tbMini.dll [2009-05-20 2085400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-12-10 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{90222687-F593-4738-B738-FBEE9C7B26DF} - Show Norton Toolbar - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll [2007-10-12 609424]
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Winamp Toolbar - C:\Program Files\Winamp Toolbar\winamptb.dll [2008-07-16 1266992]
{d51d388b-f5dc-471a-a1ce-5e2d671091c0} - Mininova-Vuze Toolbar - C:\Program Files\Mininova-Vuze\tbMini.dll [2009-05-20 2085400]
{4E7BD74F-2B8D-469E-85B2-BC27FE9AAE2E} - eGames Toolbar - C:\PROGRA~1\EGAMES~1\EGAMES~1.DLL [2007-08-29 1897472]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-04-08 4423680]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-03-10 835584]
"ISBMgr.exe"=C:\Program Files\Sony\ISB Utility\ISBMgr.exe [2007-09-19 311296]
"MarketingTools"=C:\Program Files\Sony\Marketing Tools\MarketingTools.exe [2007-11-27 36864]
"ccApp"=C:\Program Files\Common Files\Symantec Shared\ccApp.exe [2007-10-12 115816]
"Symantec PIF AlertEng"=C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2008-01-29 583048]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-11 417792]
"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-08-13 177440]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-01-22 141608]
""= []
"VirtualDrive"=C:\Program Files\FarStone\VirtualDrive\VDTask.exe [2008-11-06 170512]
"RAMDrive"=C:\Program Files\FarStone\VirtualDrive\VHD\RDTask.exe [2008-01-28 106496]
"Resume copy"=copyfstq.exe /startup []
"xln"=c:\cmos\xln.cpl [2010-06-17 947200]
"xlr"=c:\cmos\xlr.exe [2010-06-17 771072]
"xlb"=c:\cmos\xlb.cpl [2010-06-17 792576]
"xlr2"=c:\cmos\xlr2.exe [2010-06-17 771072]
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FsVdInstReboot"=1 []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2006-11-02 125440]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-02 201728]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
WDDMStatus.lnk - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
WDSmartWare.lnk - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe

C:\Users\Sylwia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
CCC.lnk - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
OneNote 2007 Screen Clipper and Launcher.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
igfxdev.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\VESWinlogon]
C:\Windows\SYSTEM32\VESWinlogon.dll [2007-08-15 98304]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"FilterAdministratorToken"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0
"NoDriveAutoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I]
shell\AutoRun\command - I:\Setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
shell\AutoRun\command - K:\AutorunArcanum.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4eb64117-d42f-11dd-904b-001e3d3a878a}]
shell\AutoRun\command - H:\wdsync.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a102a6c7-25bc-11df-9016-001e3d3a878a}]
shell\AutoRun\command - R:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ca752841-b17a-11dd-af7c-001e3d3a878a}]
shell\AutoRun\command - H:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f131a631-5539-11dd-b4ac-001e3d3a878a}]
shell\AutoRun\command - H:\AutoRun.exe


======List of files/folders created in the last 1 months======

2010-06-30 15:27:50 ----RASHD---- C:\Autorun.inf
2010-06-30 15:24:42 ----A---- C:\UsbFix.txt
2010-06-30 15:24:21 ----D---- C:\UsbFix
2010-06-30 15:13:33 ----A---- C:\TB.txt
2010-06-30 15:13:13 ----D---- C:\ToolBar SD
2010-06-30 14:06:25 ----D---- C:\Program Files\trend micro
2010-06-30 14:06:23 ----D---- C:\rsit
2010-06-30 13:55:03 ----D---- C:\ArchonMedia
2010-06-26 20:55:53 ----D---- C:\Program Files\DAEMON Tools Lite
2010-06-26 20:55:20 ----D---- C:\Users\Sylwia\AppData\Roaming\DAEMON Tools Lite
2010-06-26 20:55:18 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-06-17 16:48:20 ----HD---- C:\datagyn
2010-06-17 16:48:00 ----HD---- C:\cmos
2010-06-06 21:44:55 ----A---- C:\Windows\reimage.ini
2010-06-06 21:44:31 ----D---- C:\rei
2010-06-06 21:44:27 ----D---- C:\Program Files\Reimage
2010-06-06 18:52:45 ----D---- C:\Program Files\Bullfrog
2010-06-06 18:52:38 ----A---- C:\Windows\unin0415.exe
2010-06-06 18:51:43 ----A---- C:\Windows\IsUninst.exe
2010-06-04 19:32:10 ----D---- C:\Downloads
2010-06-04 19:32:09 ----D---- C:\Users\Sylwia\AppData\Roaming\BitComet
2010-06-04 19:31:16 ----D---- C:\Program Files\BitComet
2010-06-02 13:12:14 ----A---- C:\Windows\system32\savapi3.dll
2010-06-02 13:12:12 ----A---- C:\Windows\system32\avgsdk.dll

======List of files/folders modified in the last 1 months======

2010-06-30 16:12:41 ----D---- C:\Windows\Prefetch
2010-06-30 16:12:36 ----D---- C:\Windows\Temp
2010-06-30 16:09:32 ----D---- C:\Windows\System32
2010-06-30 16:09:31 ----D---- C:\Windows\inf
2010-06-30 16:09:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-06-30 15:27:47 ----SHD---- C:\$Recycle.Bin
2010-06-30 15:19:18 ----D---- C:\Users\Sylwia\AppData\Roaming\Skype
2010-06-30 15:15:21 ----RD---- C:\Program Files
2010-06-30 15:14:52 ----D---- C:\Windows
2010-06-30 13:55:06 ----SHD---- C:\Windows\Installer
2010-06-30 13:54:52 ----SHD---- C:\System Volume Information
2010-06-30 08:09:43 ----D---- C:\Users\Sylwia\AppData\Roaming\skypePM
2010-06-28 17:01:49 ----D---- C:\Program Files\Mozilla Firefox
2010-06-26 21:40:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-06-26 21:25:35 ----AT---- C:\Windows\system32\SIntfNT.dll
2010-06-26 21:25:35 ----AT---- C:\Windows\system32\SIntf32.dll
2010-06-26 21:25:35 ----AT---- C:\Windows\system32\SIntf16.dll
2010-06-26 20:57:59 ----D---- C:\Windows\system32\drivers
2010-06-26 20:55:18 ----HD---- C:\ProgramData
2010-06-24 08:21:27 ----D---- C:\Windows\system32\catroot2
2010-06-07 23:05:06 ----D---- C:\Program Files\uTorrent
2010-06-07 11:23:59 ----SD---- C:\Users\Sylwia\AppData\Roaming\Microsoft
2010-06-06 21:44:59 ----D---- C:\Windows\system32\Tasks
2010-06-06 18:52:46 ----D---- C:\Windows\system
2010-06-06 18:11:11 ----D---- C:\Users\Sylwia\AppData\Roaming\uTorrent

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 DMICall;Sony DMI Call service; C:\Windows\system32\DRIVERS\DMICall.sys [2007-09-19 10216]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2008-09-02 371248]
R1 IDSvix86;Symantec Intrusion Prevention Driver; \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData\idsdefs\20080911.001\IDSvix86.sys [2008-07-16 261680]
R1 SRTSPX;SRTSPX; C:\Windows\System32\Drivers\SRTSPX.SYS [2007-11-30 43696]
R1 SYMTDI;SYMTDI; C:\Windows\System32\Drivers\SYMTDI.SYS [2007-10-12 191544]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2007-09-05 12672]
R2 regi;regi; C:\Windows\system32\drivers\regi.sys [2007-04-18 11032]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2007-09-05 8192]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect; C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2007-10-30 17920]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-10-19 2930176]
R3 BthEnum;Usługa wyliczania Bluetooth; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-07-19 19456]
R3 BthPan;Urządzenie Bluetooth (sieć osobista); C:\Windows\system32\DRIVERS\bthpan.sys [2006-11-02 92160]
R3 BTHUSB;Sterownik USB odbiornika radiowego Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2008-07-19 29184]
R3 btwaudio;Urz1dzenie dYwiekowe Bluetooth; C:\Windows\system32\drivers\btwaudio.sys [2007-11-15 81448]
R3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2007-11-15 99880]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2007-11-15 28464]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2007-11-15 17448]
R3 CmBatt;Sterownik baterii Microsoft o metodzie kontroli ACPI; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-07-19 14208]
R3 fcdabus;fcdabus; C:\Windows\system32\DRIVERS\fcdabus.sys [2008-10-29 18448]
R3 fsRamDsk;RamDisk Drive Service; C:\Windows\system32\DRIVERS\fsRamDsk.sys [2007-06-23 43408]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2007-09-05 985600]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2007-09-05 207360]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-04-08 1761696]
R3 NETw4v32;Sterownik karty Intel(R) Wireless WiFi Link dla systemu Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-09-19 2222080]
R3 R5U870FLx86;R5U870 UVC Lower Filter ; C:\Windows\System32\Drivers\R5U870FLx86.sys [2007-10-17 73472]
R3 R5U870FUx86;R5U870 UVC Upper Filter ; C:\Windows\System32\Drivers\R5U870FUx86.sys [2007-10-17 43904]
R3 RFCOMM;Urządzenie Bluetooth (Protokół TDI RFCOMM); C:\Windows\system32\DRIVERS\rfcomm.sys [2006-11-02 49664]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-09-05 84480]
R3 SFEP;Sony Firmware Extension Parser; C:\Windows\system32\DRIVERS\SFEP.sys [2007-08-29 9344]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [2008-07-18 123952]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-03-10 181560]
R3 ti21sony;ti21sony; C:\Windows\system32\drivers\ti21sony.sys [2007-11-16 818688]
R3 usbvideo;R5U870 (UVC) ; C:\Windows\System32\Drivers\usbvideo.sys [2007-11-26 132608]
R3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2007-09-05 659968]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
S3 a3w3hhw3;a3w3hhw3; C:\Windows\system32\drivers\a3w3hhw3.sys []
S3 acx8pgbk;acx8pgbk; C:\Windows\system32\drivers\acx8pgbk.sys []
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2007-10-16 743424]
S3 BTHPORT;Sterownik portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2008-07-19 220160]
S3 cpuz132;cpuz132; \??\C:\Users\Sylwia\AppData\Local\Temp\cpuz132\cpuz132_x32.sys []
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2007-03-01 92032]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys []
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 NAVENG;NAVENG; \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20080914.003\NAVENG.SYS []
S3 NAVEX15;NAVEX15; \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20080914.003\NAVEX15.SYS []
S3 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys [2007-04-14 418104]
S3 SRTSP;SRTSP; C:\Windows\System32\Drivers\SRTSP.SYS [2007-11-30 279088]
S3 SRTSPL;SRTSPL; C:\Windows\System32\Drivers\SRTSPL.SYS [2007-11-30 317616]
S3 SYMDNS;SYMDNS; C:\Windows\System32\Drivers\SYMDNS.SYS [2007-10-12 12984]
S3 SYMFW;SYMFW; C:\Windows\System32\Drivers\SYMFW.SYS [2007-10-12 145976]
S3 SYMIDS;SYMIDS; C:\Windows\System32\Drivers\SYMIDS.SYS [2007-10-12 40120]
S3 SYMNDISV;SYMNDISV; C:\Windows\System32\Drivers\SYMNDISV.SYS [2007-10-12 38200]
S3 SYMREDRV;SYMREDRV; C:\Windows\System32\Drivers\SYMREDRV.SYS [2007-10-12 27576]
S3 TcUsb;TC USB Kernel Driver; C:\Windows\System32\Drivers\tcusb.sys [2007-10-03 47376]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2009-07-09 39424]
S3 vaxscsi;vaxscsi; C:\Windows\System32\Drivers\vaxscsi.sys []
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2007-05-26 128104]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2006-11-02 39936]
S4 UIUSys;Conexant Setup API; C:\Windows\system32\DRIVERS\UIUSYS.SYS []
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-07-09 144712]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-10-19 610304]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2006-11-02 22016]
R2 ccEvtMgr;ccEvtMgr; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-10-12 108648]
R2 ccSetMgr;ccSetMgr; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-10-12 108648]
R2 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-10-12 108648]
R2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-05 112152]
R2 LiveUpdate Notice Ex;LiveUpdate Notice Service Ex; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-10-12 108648]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 uCamMonitor;CamMonitor; C:\Program Files\ArcSoft\Magic-i Visual Effects\uCamMonitor.exe [2007-10-31 125440]
R2 VAIO Event Service;VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [2007-08-15 182392]
R2 VzCdbSvc;VAIO Entertainment Database Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [2007-08-29 192512]
R2 VzFw;VAIO Entertainment File Import Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe [2007-08-29 131072]
R2 WDDMService;WD SmartWare Drive Manager; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2009-11-13 110592]
R2 WDSmartWareBackgroundService;WD SmartWare Background Service; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [2009-06-16 20480]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2007-09-05 386560]
R3 iPod Service;Usługa iPod; C:\Program Files\iPod\bin\iPodService.exe [2010-01-22 545576]
R3 Vcsw;VAIO Entertainment UPnP Client Adapter; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [2007-06-28 274432]
S2 gupdate1c9eed5b77254af;Usługa Google Update (gupdate1c9eed5b77254af); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-06-16 133104]
S2 LiveUpdate Notice Service;LiveUpdate Notice Service; C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2008-01-29 583048]
S3 comHost;COM Host; C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe [2007-10-12 49248]
S3 GoogleDesktopManager;GoogleDesktopManager; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2007-11-27 1838592]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-01-11 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2007-09-12 2999664]
S3 MSCSPTISRV;MSCSPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [2006-12-14 45056]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-27 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PACSPTISVR;PACSPTISVR; C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [2006-12-14 57344]
S3 SPTISRV;Sony SPTI Service; C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe [2006-12-14 69632]
S3 Symantec Core LC;Symantec Core LC; C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe [2008-07-18 1251720]
S3 VAIO Entertainment TV Device Arbitration Service;VAIO Entertainment TV Device Arbitration Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe [2007-06-28 73728]
S3 VAIOMediaPlatform-IntegratedServer-AppServer;VAIO Media Integrated Server; C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe [2007-06-21 2523136]
S3 VAIOMediaPlatform-IntegratedServer-HTTP;VAIO Media Integrated Server (HTTP); C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe [2007-06-21 397312]
S3 VAIOMediaPlatform-IntegratedServer-UPnP;VAIO Media Integrated Server (UPnP); C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe [2007-06-21 1089536]
S3 VAIOMediaPlatform-Mobile-Gateway;VAIO Media Gateway Server; C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe [2007-06-21 499712]
S3 VAIOMediaPlatform-UCLS-AppServer;VAIO Media Content Collection; C:\Program Files\Sony\VAIO Media Integrated Server\UCLS.exe [2007-01-11 745472]
S3 VAIOMediaPlatform-UCLS-HTTP;VAIO Media Content Collection (HTTP); C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe [2007-06-21 397312]
S3 VAIOMediaPlatform-UCLS-UPnP;VAIO Media Content Collection (UPnP); C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe [2007-06-21 1089536]
S3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2007-09-29 292128]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface; C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [2007-09-21 79136]

-----------------EOF-----------------

jeste nez to udelam, potreboval bych mensi radu

slecna pouziva firefox jak sis urcite vsimnul, mela pootevirany okna a ulozeny je jako 'session' ..ale nez jsem restartoval tak jsem vsechno pozaviral a ta moznost vratit vsechny celou session uz se neda ...existuje nejakej zpusob jak to vratit?

Naughty píše:Nejsem znalcem FF - zde zkus nektere forum zabyvajici se FF.

diky, zkusim na to nejak prijit...
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

http://www.virustotal.com/pl/analisis/b ... 1277912004

Ja pouzivam i Operu i Firefox ..Operu mam pro osobni veci a Firefox diky svym vynikajicim addonum na marketingovy veci. Ale popravde mam radsi firefox, i kdyz jsem operu pouzival uz nekolik let.

;;;;


ComboFix 10-06-29.04 - Sylwia 2010-06-30 18:03:17.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1250.48.1045.18.2046.1388 [GMT 1:00]
Uruchomiony z: c:\users\Sylwia\Downloads\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\cmos\id
c:\cmos\xlb.cpl
c:\cmos\xln.cpl
c:\cmos\xlr.exe
c:\cmos\xlr2.exe
C:\datagyn
c:\programdata\Solt Lake Software
c:\users\Sylwia\AppData\Roaming\ACD Systems\ACDSee\ImageDB.ddf
c:\users\Sylwia\Documents\My Documents.url
c:\windows\irunin.bmp
c:\windows\irunin.dat
c:\windows\irunin.ini
c:\windows\irunin.lng
c:\windows\xpsp1hfm.log

.
((((((((((((((((((((((((( Pliki utworzone od 2010-05-28 do 2010-06-30 )))))))))))))))))))))))))))))))
.

2010-06-30 14:27 . 2010-06-30 14:27 4326 ----a-w- C:\UsbFix_Upload_Me_SYLWIA-PINK.zip
2010-06-30 14:24 . 2010-06-30 14:27 -------- d-----w- C:\UsbFix
2010-06-30 14:13 . 2010-06-30 14:15 -------- d-----w- C:\ToolBar SD
2010-06-30 13:06 . 2010-06-30 15:12 -------- d-----w- c:\program files\trend micro
2010-06-30 13:06 . 2010-06-30 13:06 -------- d-----w- C:\rsit
2010-06-30 12:55 . 2010-06-30 12:55 31662 ----a-r- c:\users\Sylwia\AppData\Roaming\Microsoft\Installer\{7838E8A2-2341-4E3E-972E-378E29F6F774}\_89947CDA8C34C477134E9E.exe
2010-06-30 12:55 . 2010-06-30 12:55 31662 ----a-r- c:\users\Sylwia\AppData\Roaming\Microsoft\Installer\{7838E8A2-2341-4E3E-972E-378E29F6F774}\_5F4D1FE1D99778826EE3F5.exe
2010-06-30 12:55 . 2010-06-30 12:55 -------- d-----w- C:\ArchonMedia
2010-06-26 20:17 . 2010-06-26 20:17 18944 ----a-r- c:\users\Sylwia\AppData\Roaming\Microsoft\Installer\{08E9C35A-A0AE-43FA-AEA1-E4F58A87FBD1}\Icon7BD916931.exe
2010-06-26 20:17 . 2010-06-26 20:17 11264 ----a-r- c:\users\Sylwia\AppData\Roaming\Microsoft\Installer\{08E9C35A-A0AE-43FA-AEA1-E4F58A87FBD1}\Icon7BD91693.exe
2010-06-26 19:55 . 2010-06-26 19:56 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-06-26 19:55 . 2010-06-26 20:02 -------- d-----w- c:\users\Sylwia\AppData\Roaming\DAEMON Tools Lite
2010-06-26 19:55 . 2010-06-26 19:55 -------- d-----w- c:\programdata\DAEMON Tools Lite
2010-06-17 15:48 . 2010-06-30 17:08 -------- d-----w- C:\cmos
2010-06-06 20:44 . 2010-06-06 20:45 -------- d-----w- C:\rei
2010-06-06 20:44 . 2010-06-06 20:44 -------- d-----w- c:\program files\Reimage
2010-06-06 17:52 . 2010-06-06 17:52 -------- d-----w- c:\windows\system\KEEPER
2010-06-06 17:52 . 2010-06-06 17:52 -------- d-----w- c:\program files\Bullfrog
2010-06-06 17:52 . 1996-02-08 10:05 284160 ----a-w- c:\windows\unin0415.exe
2010-06-06 17:51 . 1997-06-02 11:32 314880 ----a-w- c:\windows\IsUninst.exe
2010-06-04 18:32 . 2010-06-26 20:53 -------- d-----w- C:\Downloads
2010-06-04 18:32 . 2010-06-27 06:23 -------- d-----w- c:\users\Sylwia\AppData\Roaming\BitComet
2010-06-04 18:31 . 2010-06-04 18:31 1440768 ----a-w- c:\users\Sylwia\AppData\Roaming\Mozilla\Firefox\Profiles\uhlm8s7a.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}\components\IBitCometExtension.dll
2010-06-04 18:31 . 2010-06-04 18:32 -------- d-----w- c:\program files\BitComet
2010-06-02 12:12 . 2010-06-02 12:12 352513 ----a-w- c:\windows\system32\savapi3.dll
2010-06-02 12:12 . 2010-06-02 12:12 1380403 ----a-w- c:\windows\system32\avgsdk.dll

.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-30 17:05 . 2008-07-23 22:31 57490 ----a-w- c:\windows\system32\perfh015.dat
2010-06-30 17:05 . 2008-07-23 22:31 13882 ----a-w- c:\windows\system32\perfc015.dat
2010-06-30 16:57 . 2007-11-26 23:34 836 ----a-w- c:\windows\bthservsdp.dat
2010-06-30 14:19 . 2008-07-19 19:43 -------- d-----w- c:\users\Sylwia\AppData\Roaming\Skype
2010-06-30 07:09 . 2008-07-19 19:45 -------- d-----w- c:\users\Sylwia\AppData\Roaming\skypePM
2010-06-26 20:40 . 2007-11-27 00:28 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-06-26 20:25 . 2008-07-25 20:37 21840 ----atw- c:\windows\system32\SIntfNT.dll
2010-06-26 20:25 . 2008-07-25 20:37 17212 ----atw- c:\windows\system32\SIntf32.dll
2010-06-26 20:25 . 2008-07-25 20:37 12067 ----atw- c:\windows\system32\SIntf16.dll
2010-06-26 19:56 . 2008-07-24 17:13 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-06-07 22:05 . 2008-07-18 19:31 -------- d-----w- c:\program files\uTorrent
2010-06-06 17:11 . 2008-07-18 19:31 -------- d-----w- c:\users\Sylwia\AppData\Roaming\uTorrent
2010-05-21 13:14 . 2009-10-11 11:39 221568 ------w- c:\windows\system32\MpSigStub.exe
2010-05-14 17:00 . 2010-05-14 17:00 -------- d-----w- c:\program files\Norton Security Scan
2010-05-14 17:00 . 2010-01-08 23:13 -------- d-----w- c:\programdata\Norton
2010-05-14 17:00 . 2010-01-08 23:13 -------- d-----w- c:\programdata\NortonInstaller
2010-04-13 00:00 . 2010-04-13 00:00 8851392 ----a-w- c:\users\Sylwia\AppData\Roaming\Azureus\tmp\AZU4726149968444102376.tmp\Vuze_4.4.0.0a_win32.exe
.

((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{57BCA5FA-5DBB-45a2-B558-1755C3F6253B}"= "c:\program files\Winamp Toolbar\winamptb.dll" [2008-07-16 1266992]
"{d51d388b-f5dc-471a-a1ce-5e2d671091c0}"= "c:\program files\Mininova-Vuze\tbMini.dll" [2009-05-20 2085400]

[HKEY_CLASSES_ROOT\clsid\{57bca5fa-5dbb-45a2-b558-1755c3f6253b}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch]

[HKEY_CLASSES_ROOT\clsid\{d51d388b-f5dc-471a-a1ce-5e2d671091c0}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4E7BD74F-2B8D-469E-85B2-BC27FE9AAE2E}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{d51d388b-f5dc-471a-a1ce-5e2d671091c0}]
2009-05-20 17:05 2085400 ----a-w- c:\program files\Mininova-Vuze\tbMini.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{d51d388b-f5dc-471a-a1ce-5e2d671091c0}"= "c:\program files\Mininova-Vuze\tbMini.dll" [2009-05-20 2085400]

[HKEY_CLASSES_ROOT\clsid\{d51d388b-f5dc-471a-a1ce-5e2d671091c0}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D51D388B-F5DC-471A-A1CE-5E2D671091C0}"= "c:\program files\Mininova-Vuze\tbMini.dll" [2009-05-20 2085400]

[HKEY_CLASSES_ROOT\clsid\{d51d388b-f5dc-471a-a1ce-5e2d671091c0}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2006-11-02 125440]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2007-04-08 4423680]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-03-10 835584]
"ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2007-09-19 311296]
"MarketingTools"="c:\program files\Sony\Marketing Tools\MarketingTools.exe" [2007-11-27 36864]
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2007-10-12 115816]
"Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 583048]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-01-22 141608]
"VirtualDrive"="c:\program files\FarStone\VirtualDrive\VDTask.exe" [2008-11-06 170512]
"RAMDrive"="c:\program files\FarStone\VirtualDrive\VHD\RDTask.exe" [2008-01-28 106496]
"Resume copy"="copyfstq.exe" [2002-03-24 46080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"FsVdInstReboot"="1 (0x1)" [X]

c:\users\Sylwia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
CCC.lnk - c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [2007-6-1 49152]
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-27 98632]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-10-30 748072]
WDDMStatus.lnk - c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe [2009-11-13 2057536]
WDSmartWare.lnk - c:\program files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe [2009-11-13 9117504]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"FilterAdministratorToken"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2007-08-15 04:05 98304 ----a-w- c:\windows\System32\VESWinlogon.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

R2 gupdate1c9eed5b77254af;Usługa Google Update (gupdate1c9eed5b77254af);c:\program files\Google\Update\GoogleUpdate.exe [2009-06-16 133104]
S1 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\Symantec\DEFINI~1\SymcData\idsdefs\20080911.001\IDSvix86.sys [2008-07-16 261680]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2007-10-30 17920]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2007-11-15 28464]


--- Inne Usługi/Sterowniki w Pamięci ---

*NewlyCreated* - COMHOST

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
.
Zawartość folderu 'Zaplanowane zadania'

2010-06-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-16 22:56]

2010-06-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-16 22:56]

2010-06-29 c:\windows\Tasks\Norton Security Scan for Sylwia.job
- c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-05-14 17:00]
.
.
------- Skan uzupełniający -------
.
mWindow Title =
uInternet Settings,ProxyOverride = *.local
IE: &Winamp Search - c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
IE: Pobierz wszystkie wideo za pomocą BitComet - c:\program files\BitComet\BitComet.exe/AddVideo.htm
IE: Pobierz wszystko za pomocą BitComet - c:\program files\BitComet\BitComet.exe/AddAllLink.htm
IE: Pobierz za pomocą BitComet - c:\program files\BitComet\BitComet.exe/AddLink.htm
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
FF - ProfilePath - c:\users\Sylwia\AppData\Roaming\Mozilla\Firefox\Profiles\uhlm8s7a.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1978305&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - component: c:\users\Sylwia\AppData\Roaming\Mozilla\Firefox\Profiles\uhlm8s7a.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}\components\IBitCometExtension.dll
FF - component: c:\users\Sylwia\AppData\Roaming\Mozilla\Firefox\Profiles\uhlm8s7a.default\extensions\{d51d388b-f5dc-471a-a1ce-5e2d671091c0}\components\FFExternalAlert.dll
FF - component: c:\users\Sylwia\AppData\Roaming\Mozilla\Firefox\Profiles\uhlm8s7a.default\extensions\{d51d388b-f5dc-471a-a1ce-5e2d671091c0}\components\RadioWMPCore.dll
FF - component: c:\users\Sylwia\AppData\Roaming\Mozilla\Firefox\Profiles\uhlm8s7a.default\extensions\radiobar@toolbar\components\toolbarhomewmp.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\NPBOARDS.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npganymedenet.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
FF - plugin: c:\programdata\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll

---- FIREFOX - SPOSÓB POSTĘPOWANIA ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - USUNIĘTO PUSTE WPISY - - - -

WebBrowser-{3041D03E-FD4B-44E0-B742-2D9B88305F98} - (no file)
HKLM-Run-xln - c:\cmos\xln.cpl
HKLM-Run-xlr - c:\cmos\xlr.exe
HKLM-Run-xlb - c:\cmos\xlb.cpl
HKLM-Run-xlr2 - c:\cmos\xlr2.exe
AddRemove-Ask Toolbar_is1 - c:\program files\AskBarDis\unins000.exe
AddRemove-TotalCopy_1.2_(Luki_Edition)_English - c:\windows\iun6002.exe
AddRemove-Winamp Toolbar for Firefox - c:\users\Sylwia\AppData\Roaming\Mozilla\Firefox\Profiles\uhlm8s7a.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\uninstall.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-06-30 18:08
Windows 6.0.6000 NTFS

skanowanie ukrytych procesów ...

skanowanie ukrytych wpisów autostartu ...

skanowanie ukrytych plików ...


c:\windows\TEMP\TMP0000003EF28A3AE9C6249143 524288 bytes

skanowanie pomyślnie ukończone
ukryte pliki: 1

**************************************************************************
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b4

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Czas ukończenia: 2010-06-30 18:10:51
ComboFix-quarantined-files.txt 2010-06-30 17:10

Przed: 12 186 738 688 bajtów wolnych
Po: 14 448 099 328 bajtów wolnych

- - End Of File - - F3C50AA5F6B41F604841FBCCA13B17CC

co s temy soubory?

rikala ze nechce zadny antivir ze to zpomaluje system zenska

jinak ano, je to polka a windows je taky polsky .)

porad nechapu, tyhle soubory:

c:\programdata\Solt Lake Software
c:\users\Sylwia\AppData\Roaming\ACD Systems\ACDSee\ImageDB.ddf

smazat v combofix ci je projet virus totalem

jinak, smazat toolbary pry muzem...a tim mbamem to projedu

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4261

Windows 6.0.6000
Internet Explorer 7.0.6000.16711

2010-06-30 20:24:18
mbam-log-2010-06-30 (20-24-18).txt

Scan type: Full scan (C:\|G:\|)
Objects scanned: 251401
Time elapsed: 1 hour(s), 2 minute(s), 9 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 9

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files\Mozilla Firefox\9140AF06BA3A95E0\9140AF06BA3A95E0 (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Users\Sylwia\Downloads\foto26.com (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Users\Sylwia\Favorites\Run Virus Scan.url (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\Users\Sylwia\Documents\My Music\My Music.url (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\Users\Sylwia\Documents\My Pictures\My Pictures.url (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\Users\Sylwia\Documents\My Videos\My Video.url (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Run Virus Scan.url (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Online Spyware Test.url (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Run Virus Scan.url (Trojan.Zlob) -> Quarantined and deleted successfully.

Diky, zitra za ni jedu tak ti to nahodim.

pokud mas vterinu mohl bys mrknout zase na jine pc?
http://viry.cz/forum/viewtopic.php?f=30&t=102466

diky