VIRY.CZ

Zdravim.Na flashce se mi najednou vytvořila složka My folder se souborem system.exe a soubor autorun.inf.Nic nešlo smazat,použil jsem USBfix nic,pak flash disinfector,pak šli soubory smazat a vytvořila se složka autorun.inf.Když ju přeformátuju,sem zas na začátku.Takže v compu je asi něco špatně.Jo a soubor autorun.inf obsahoval toto:
;4kdP3145IIbX36[
[autorun]
;282=a5JH1Om%I787
open=system.exe
;Q54Sj2j8EE4Pr4%2B7L4734W=K53Cs0aQ2Qi3z35
icon=%SystemRoot%\System32\SHELL32.dll,4
;n772518zC3u1z04l99S91ICU8ZY8lpt244xz%wg4
;306W1VXb[6\34\1K%28jteu%717H\D21
shell\\open\\command=system.exe
;3V91Fky62380Mr39\\%96782xXc887HY
;mL0y297DJ[[v6hM6fR169G9=7115H4qo6bbN4
shell\\explore\\command=system.exe
;6173S2L78V32Gf2]8]RDY12215E64kdP3145I
;IbX36[282=a5JH1
useautoplay=1
;Om%I7870C37y[F1
;T8J60=WkQ54
:GOTO NUL
;Sj2j8EE4Pr4%2
Tady je můj log s rsit i se zastrčenou a fixnuto flashkou:
Logfile of random's system information tool 1.07 (written by random/random)
Run by Pepa at 2010-07-07 02:33:29
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 19 GB (27%) free of 70 GB
Total RAM: 2047 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:33:31, on 7.7.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\PixArt\PAC7302\Monitor.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\RivaTuner v2.20\Tools\RivaTunerStatisticsServer\RivaTunerStatisticsServer.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\RivaTuner v2.20\RivaTuner.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\SpeedFan\speedfan.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
F:\StDo\RSIT.exe
C:\Program Files\trend micro\Pepa.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "C:\Program Files\RivaTuner v2.20\RivaTuner.exe" /S
O4 - HKLM\..\Run: [PAC7302_Monitor] C:\WINDOWS\PixArt\PAC7302\Monitor.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [RivaTunerStatisticsServer] "C:\Program Files\RivaTuner v2.20\Tools\RivaTunerStatisticsServer\RivaTunerStatisticsServer.exe" /s
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RivaTuner] "C:\Program Files\RivaTuner v2.20\RivaTuner.exe" /T
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [WebcamMaxAutoRun] "C:\Program Files\WebcamMax\WebcamMax.exe" -a
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: SpeedFan.lnk = C:\Program Files\SpeedFan\speedfan.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 8320 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000123B4-9B42-4900-B3F7-F4B073EFC214}]
Octh Class - C:\Program Files\Orbitdownloader\orbitcth.dll [2010-02-10 240912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-12 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2009-06-30 520192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-10 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-10 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2008-11-10 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2009-06-30 520192]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2006-12-18 868352]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2006-07-13 729088]
"RivaTunerStartupDaemon"=C:\Program Files\RivaTuner v2.20\RivaTuner.exe [2008-11-19 2727936]
"PAC7302_Monitor"=C:\WINDOWS\PixArt\PAC7302\Monitor.exe [2006-11-03 319488]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2010-03-02 282792]
"RivaTunerStatisticsServer"=C:\Program Files\RivaTuner v2.20\Tools\RivaTunerStatisticsServer\RivaTunerStatisticsServer.exe [2008-11-19 57344]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-06-07 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-06-07 13902440]
"RivaTuner"=C:\Program Files\RivaTuner v2.20\RivaTuner.exe [2008-11-19 2727936]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-07-24 490952]
"WEBTRAN"= []
"OEXPRESS"= []
"WebcamMaxAutoRun"=C:\Program Files\WebcamMax\WebcamMax.exe [2010-04-06 6040408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ManyCam]
C:\Program Files\ManyCam 2.4\ManyCam.exe [2010-04-21 1824040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
nwiz.exe /installquiet []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-10 144792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^REALTEK RTL8185 Wireless LAN Utility.lnk]
C:\PROGRA~1\REALTE~1\RtWLan.exe [2006-05-22 675840]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe

C:\Documents and Settings\Pepa\Nabídka Start\Programy\Po spuštění
SpeedFan.lnk - C:\Program Files\SpeedFan\speedfan.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2008-05-02 72208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=36
"NoDriveAutoRun"=0xFFFFFFFF

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Java\jre6\launch4j-tmp\frd.exe"="C:\Program Files\Java\jre6\launch4j-tmp\frd.exe:*:Enabled:Java(TM) Platform SE binary"
"D:\Hry\COD4\iw3mp.exe"="D:\Hry\COD4\iw3mp.exe:*:Enabled:iw3mp"
"D:\Hry\COD 5\CoDWaW.exe"="D:\Hry\COD 5\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"D:\Hry\COD 5\CoDWaWmp.exe"="D:\Hry\COD 5\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"E:\Program Files\Codemasters\DiRT2\dirt2_game.exe"="E:\Program Files\Codemasters\DiRT2\dirt2_game.exe:*:Disabled:DiRT2"
"E:\Program Files\GSC World Publishing\S.T.A.L.K.E.R. - Call of Pripyat\bin\xrEngine.exe"="E:\Program Files\GSC World Publishing\S.T.A.L.K.E.R. - Call of Pripyat\bin\xrEngine.exe:*:Disabled:S.T.A.L.K.E.R. - Call of Pripyat (CLI)"
"E:\Program Files\GSC World Publishing\S.T.A.L.K.E.R. - Call of Pripyat\bin\dedicated\xrEngine.exe"="E:\Program Files\GSC World Publishing\S.T.A.L.K.E.R. - Call of Pripyat\bin\dedicated\xrEngine.exe:*:Disabled:S.T.A.L.K.E.R. - Call of Pripyat (SRV)"
"C:\Program Files\Orbitdownloader\orbitdm.exe"="C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit"
"C:\Program Files\Orbitdownloader\orbitnet.exe"="C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"F:\Steam\steamapps\common\unreal tournament 3\Binaries\UT3.exe"="F:\Steam\steamapps\common\unreal tournament 3\Binaries\UT3.exe:*:Enabled:UT3"
"E:\Program Files\Team JPN\Mass Effect 2\Binaries\MassEffect2.exe"="E:\Program Files\Team JPN\Mass Effect 2\Binaries\MassEffect2.exe:*:Disabled:Mass Effect 2"
"F:\Steam\steamapps\common\left 4 dead\left4dead.exe"="F:\Steam\steamapps\common\left 4 dead\left4dead.exe:*:Enabled:Left 4 Dead"
"F:\Steam\steamapps\nasapan\diprip warm up\hl2.exe"="F:\Steam\steamapps\nasapan\diprip warm up\hl2.exe:*:Enabled:hl2"
"F:\Steam\Steam.exe"="F:\Steam\Steam.exe:*:Enabled:Steam"
"F:\Steam\steamapps\skoonk\diprip warm up\hl2.exe"="F:\Steam\steamapps\skoonk\diprip warm up\hl2.exe:*:Enabled:hl2"
"F:\Steam\steamapps\skoonk\insurgency\hl2.exe"="F:\Steam\steamapps\skoonk\insurgency\hl2.exe:*:Enabled:hl2"
"F:\Steam\steamapps\skoonk\team fortress 2\hl2.exe"="F:\Steam\steamapps\skoonk\team fortress 2\hl2.exe:*:Enabled:hl2"
"F:\Steam\steamapps\skoonk\half-life 2 deathmatch\hl2.exe"="F:\Steam\steamapps\skoonk\half-life 2 deathmatch\hl2.exe:*:Enabled:hl2"
"F:\Steam\steamapps\skoonk\pirates, vikings, and knights ii\hl2.exe"="F:\Steam\steamapps\skoonk\pirates, vikings, and knights ii\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"E:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\conviction_game.exe"="E:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\conviction_game.exe:*:Enabled:Tom Clancy's Splinter Cell Conviction"
"E:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\gu.exe"="E:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\gu.exe:*:Enabled:Tom Clancy's Splinter Cell Conviction Update"
"D:\APPS\SkypePortable\App\Skype\Phone\Skype.exe"="D:\APPS\SkypePortable\App\Skype\Phone\Skype.exe:*:Enabled:Skype "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-07-07 02:33:29 ----D---- C:\rsit
2010-07-07 02:27:30 ----D---- C:\Program Files\trend micro
2010-07-07 02:07:33 ----RASHD---- C:\Autorun.inf
2010-07-05 15:46:15 ----D---- C:\Documents and Settings\Pepa\Data aplikací\Skype
2010-07-05 01:57:16 ----RSH---- C:\Documents and Settings\Pepa\Data aplikací\mwvcpb.exe
2010-07-05 01:57:16 ----RA---- C:\Documents and Settings\Pepa\Data aplikací\BGl0K.txt
2010-07-05 01:57:15 ----RA---- C:\Documents and Settings\Pepa\Data aplikací\F0j6I.txt
2010-07-05 01:57:15 ----A---- C:\Documents and Settings\Pepa\Data aplikací\DRO8C.tmp.exe
2010-07-05 01:57:15 ----A---- C:\Documents and Settings\Pepa\Data aplikací\DRO8C.tmp
2010-07-03 20:41:41 ----D---- C:\Documents and Settings\Pepa\Data aplikací\Skype-BackupBySkypePortable
2010-06-16 16:18:35 ----A---- C:\WINDOWS\system32\OpenCL.dll
2010-06-16 16:18:35 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2010-06-16 16:18:35 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2010-06-16 16:18:35 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2010-06-16 16:18:33 ----A---- C:\WINDOWS\system32\nvcuda.dll
2010-06-16 16:18:33 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2010-06-16 16:18:33 ----A---- C:\WINDOWS\system32\nvcodins.dll
2010-06-16 16:18:33 ----A---- C:\WINDOWS\system32\nvcod.dll
2010-06-16 16:18:33 ----A---- C:\WINDOWS\system32\nvapi.dll
2010-06-11 13:22:47 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2010-06-11 13:22:43 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2010-06-11 13:22:39 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2010-06-11 13:20:04 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2010-06-11 13:20:00 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-06-11 13:19:50 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$

======List of files/folders modified in the last 1 months======

2027-04-06 10:18:24 ----A---- C:\WINDOWS\system32\VB5StKit.dll
2027-04-06 10:18:24 ----A---- C:\WINDOWS\ST5UNST.EXE
2010-07-07 02:27:30 ----RD---- C:\Program Files
2010-07-07 02:26:21 ----AD---- C:\WINDOWS
2010-07-07 02:24:59 ----D---- C:\WINDOWS\Temp
2010-07-07 02:24:59 ----D---- C:\WINDOWS\system32\CatRoot2
2010-07-07 02:24:44 ----D---- C:\Program Files\SpeedFan
2010-07-07 02:23:32 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-07-07 02:07:30 ----SHD---- C:\RECYCLER
2010-07-07 02:00:50 ----D---- C:\WINDOWS\system32\config
2010-07-07 01:25:26 ----A---- C:\WINDOWS\wincmd.ini
2010-07-07 00:38:35 ----D---- C:\WINDOWS\system32\NtmsData
2010-07-07 00:27:53 ----D---- C:\WINDOWS\Registration
2010-07-07 00:06:12 ----D---- C:\Program Files\Spyware Terminator
2010-07-06 23:47:17 ----SHD---- C:\$RECYCLE.BIN
2010-07-06 23:34:39 ----D---- C:\WINDOWS\system32
2010-07-06 23:34:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2010-07-06 23:29:08 ----D---- C:\Documents and Settings\Pepa\Data aplikací\Spyware Terminator
2010-07-06 03:32:38 ----D---- C:\Documents and Settings\Pepa\Data aplikací\HLSW
2010-07-06 03:26:28 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-07-05 14:56:42 ----D---- C:\Documents and Settings\Pepa\Data aplikací\FileZilla
2010-07-04 20:45:52 ----D---- C:\Documents and Settings\Pepa\Data aplikací\Orbit
2010-07-04 15:42:38 ----D---- C:\WINDOWS\Prefetch
2010-07-04 15:38:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Ubisoft
2010-07-04 15:34:58 ----D---- C:\WINDOWS\inf
2010-07-04 15:34:39 ----RSD---- C:\WINDOWS\assembly
2010-07-04 15:34:16 ----D---- C:\WINDOWS\system32\DirectX
2010-07-04 15:34:13 ----SHD---- C:\WINDOWS\Installer
2010-07-04 15:29:50 ----HD---- C:\Program Files\InstallShield Installation Information
2010-07-03 23:00:11 ----D---- C:\Program Files\Mozilla Thunderbird
2010-07-03 04:08:59 ----A---- C:\WINDOWS\WTRAN32.INI
2010-06-30 05:15:53 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-06-28 02:43:59 ----D---- C:\Program Files\Mozilla Firefox
2010-06-26 18:08:58 ----A---- C:\WINDOWS\win.ini
2010-06-23 13:57:37 ----D---- C:\WINDOWS\Microsoft.NET
2010-06-23 11:15:59 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-06-23 11:15:47 ----D---- C:\WINDOWS\WinSxS
2010-06-16 16:24:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\NVIDIA
2010-06-16 16:19:57 ----D---- C:\WINDOWS\Help
2010-06-16 16:19:57 ----D---- C:\Program Files\NVIDIA Corporation
2010-06-16 16:19:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\NVIDIA Corporation
2010-06-16 16:19:04 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-06-16 16:18:56 ----D---- C:\WINDOWS\system32\drivers
2010-06-16 16:18:56 ----D---- C:\WINDOWS\system32\CatRoot
2010-06-16 14:48:26 ----D---- C:\Program Files\CCleaner
2010-06-15 22:44:30 ----D---- C:\WINDOWS\Debug
2010-06-11 13:22:43 ----HD---- C:\WINDOWS\$hf_mig$
2010-06-11 13:22:32 ----D---- C:\Program Files\Internet Explorer
2010-06-11 13:22:27 ----D---- C:\WINDOWS\ie8updates
2010-06-08 01:57:00 ----A---- C:\WINDOWS\system32\nv4_disp.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2010-03-01 124784]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2008-07-21 24392]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2008-11-02 56572]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2009-08-20 21035]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-07-27 281760]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2010-02-16 60936]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-07-27 25888]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2007-01-16 293888]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2006-08-07 93952]
R3 AnyDVD;AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [2008-12-01 103360]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys [2008-02-29 20240]
R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver; C:\WINDOWS\system32\DRIVERS\ManyCam.sys [2008-01-14 21632]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-06-08 10531200]
R3 PAC7302;PAC7302 VGA USB Camera; C:\WINDOWS\system32\DRIVERS\PAC7302.SYS [2007-06-14 457856]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-09-19 47360]
R3 RivaTuner32;RivaTuner32; \??\C:\Program Files\RivaTuner v2.20\RivaTuner32.sys []
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-06-29 142592]
R3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2006-03-17 392960]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 a3307i56;a3307i56; C:\WINDOWS\system32\drivers\a3307i56.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2008-05-02 17536]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2008-05-02 20864]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 rtl8185;Realtek RTL8185 54M Wireless LAN Network Adapter Driver; C:\WINDOWS\system32\DRIVERS\rtl8185.sys [2006-05-09 300672]
S3 SjyPkt;SjyPkt; \??\C:\WINDOWS\System32\Drivers\SjyPkt.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2008-05-02 8064]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2009-02-09 7808]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-01-18 83328]
S3 xnacc;Microsoft Common Controller For Windows Driver Service; C:\WINDOWS\system32\DRIVERS\xnacc.sys [2006-06-01 509440]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2010-04-20 267432]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2010-02-24 135336]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-06-07 154728]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-05-26 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-07-06 219128]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-12-11 488960]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-01-04 136120]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe [2008-05-02 121360]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-06-02 637952]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

ahoj
Presun ComboFix
na plochu (ak tam este nie je)

otvor si Poznamkovy blok - notepad

do neho zkopiruj skript z nasledujiceho okna:
uloz vytvoreny textovy soubor ako CFScript.txt na plochu

po ulozeni uchop vytvoreny skript lavym tlacitkom mysi a presun ho nad ikonu Combofixu, nad nim skript upust:



po aplikacii by mal vzniknut dalsi log, ten vloz sem

ComboFix 10-07-06.03 - Pepa 07.07.2010 12:28:50.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2047.1652 [GMT 2:00]
Spuštěný z: c:\documents and settings\Pepa\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Pepa\Plocha\CFScript.txt
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
.
ADS - WINDOWS: deleted 24 bytes in 1 streams.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Administrator\Data aplikací\mwvcpb.exe
c:\documents and settings\Pepa\Data aplikací\DRO8C.tmp.exe
c:\documents and settings\Pepa\Data aplikací\mwvcpb.exe

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-06-07 do 2010-07-07 )))))))))))))))))))))))))))))))
.

2010-07-07 00:33 . 2010-07-07 00:33 -------- d-----w- C:\rsit
2010-07-07 00:27 . 2010-07-07 00:33 -------- d-----w- c:\program files\trend micro
2010-06-16 14:19 . 2010-06-16 14:24 217180 ----a-w- c:\windows\system32\nvdrsdb0.bin
2010-06-16 14:19 . 2010-06-16 14:24 1 ----a-w- c:\windows\system32\nvdrssel.bin
2010-06-16 14:19 . 2010-06-16 14:24 217180 ----a-w- c:\windows\system32\nvdrsdb1.bin
2010-06-16 14:18 . 2010-06-07 23:57 61440 ----a-w- c:\windows\system32\OpenCL.dll
2010-06-16 14:18 . 2010-06-07 23:57 2632296 ----a-w- c:\windows\system32\nvcuvenc.dll
2010-06-16 14:18 . 2010-06-07 23:57 2165352 ----a-w- c:\windows\system32\nvcuvid.dll
2010-06-16 14:18 . 2010-06-07 23:57 15192064 ----a-w- c:\windows\system32\nvoglnt.dll
2010-06-16 14:18 . 2010-06-07 23:57 4554752 ----a-w- c:\windows\system32\nvcuda.dll
2010-06-16 14:18 . 2010-06-07 23:57 232040 ----a-w- c:\windows\system32\nvcodins.dll
2010-06-16 14:18 . 2010-06-07 23:57 232040 ----a-w- c:\windows\system32\nvcod.dll
2010-06-16 14:18 . 2010-06-07 23:57 2186342 ----a-w- c:\windows\system32\nvdata.bin
2010-06-16 14:18 . 2010-06-07 23:57 1359872 ----a-w- c:\windows\system32\nvapi.dll
2010-06-16 14:18 . 2010-06-07 23:57 10256384 ----a-w- c:\windows\system32\nvcompiler.dll
2010-06-11 10:36 . 2010-05-06 10:35 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2027-04-06 08:18 . 2010-05-23 02:14 71680 ----a-w- c:\windows\ST5UNST.EXE
2027-04-06 08:18 . 2010-05-23 02:14 29696 ----a-w- c:\windows\system32\VB5StKit.dll
2010-07-07 10:12 . 2008-09-19 15:52 -------- d-----w- c:\program files\SpeedFan
2010-07-06 22:06 . 2009-03-04 15:45 -------- d-----w- c:\program files\Spyware Terminator
2010-07-06 01:26 . 2008-09-20 22:23 138592 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-07-06 01:26 . 2008-09-20 22:23 219128 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-07-04 13:29 . 2008-09-19 14:15 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-07-03 21:00 . 2008-09-19 14:43 -------- d-----w- c:\program files\Mozilla Thunderbird
2010-06-23 09:15 . 2001-10-25 12:00 78052 ----a-w- c:\windows\system32\perfc005.dat
2010-06-23 09:15 . 2001-10-25 12:00 429024 ----a-w- c:\windows\system32\perfh005.dat
2010-06-16 14:19 . 2010-04-12 03:14 -------- d-----w- c:\program files\NVIDIA Corporation
2010-06-16 12:48 . 2009-03-04 20:14 -------- d-----w- c:\program files\CCleaner
2010-06-07 23:57 . 2010-04-12 03:11 10531200 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2010-06-07 23:57 . 2010-04-12 03:11 6300544 ----a-w- c:\windows\system32\nv4_disp.dll
2010-05-26 19:36 . 2008-09-20 22:23 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-05-26 19:36 . 2008-12-31 14:57 2373712 ----a-w- c:\windows\system32\pbsvc.exe
2010-05-06 10:35 . 2001-10-25 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-05-02 08:09 . 2001-10-25 12:00 1851264 ----a-w- c:\windows\system32\win32k.sys
2010-04-20 05:32 . 2001-10-25 12:00 285696 ----a-w- c:\windows\system32\atmfd.dll
.

------- Sigcheck -------

[-] 2008-11-15 13:54 . C3A2915C71AE6F225EB906C25CCD29B5 . 24064 . . [1.0.0.5] . . c:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2008-11-15 13:54 . C3A2915C71AE6F225EB906C25CCD29B5 . 24064 . . [1.0.0.5] . . c:\windows\system32\ctfmon.exe
[7] 2004-08-17 . A5BAA91475167161DEA02BA3C4CA4F59 . 15360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ctfmon.exe
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-07-24 490952]
"WebcamMaxAutoRun"="c:\program files\WebcamMax\WebcamMax.exe" [2010-04-05 6040408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-12-18 868352]
"RivaTunerStartupDaemon"="c:\program files\RivaTuner v2.20\RivaTuner.exe" [2008-11-19 2727936]
"PAC7302_Monitor"="c:\windows\PixArt\PAC7302\Monitor.exe" [2006-11-03 319488]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-03-02 282792]
"RivaTunerStatisticsServer"="c:\program files\RivaTuner v2.20\Tools\RivaTunerStatisticsServer\RivaTunerStatisticsServer.exe" [2008-11-19 57344]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-06-07 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-06-07 13902440]
"RivaTuner"="c:\program files\RivaTuner v2.20\RivaTuner.exe" [2008-11-19 2727936]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-11-15 24064]

c:\documents and settings\Pepa\Nabˇdka Start\Programy\Po spuçtŘnˇ\
SpeedFan.lnk - c:\program files\SpeedFan\speedfan.exe [2009-4-22 3921528]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2008-9-20 805392]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2008-05-02 00:42 72208 ----a-w- c:\program files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^REALTEK RTL8185 Wireless LAN Utility.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\REALTEK RTL8185 Wireless LAN Utility.lnk
backup=c:\windows\pss\REALTEK RTL8185 Wireless LAN Utility.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ManyCam]
2010-04-21 08:26 1824040 ----a-w- c:\program files\ManyCam 2.4\ManyCam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2008-11-09 23:15 144792 ----a-w- c:\program files\Java\jre6\bin\jusched.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\HLSW\\hlsw.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Java\\jre6\\launch4j-tmp\\frd.exe"=
"d:\\Hry\\COD4\\iw3mp.exe"=
"d:\\Hry\\COD 5\\CoDWaW.exe"=
"d:\\Hry\\COD 5\\CoDWaWmp.exe"=
"e:\\Program Files\\Codemasters\\DiRT2\\dirt2_game.exe"=
"e:\\Program Files\\GSC World Publishing\\S.T.A.L.K.E.R. - Call of Pripyat\\bin\\xrEngine.exe"=
"e:\\Program Files\\GSC World Publishing\\S.T.A.L.K.E.R. - Call of Pripyat\\bin\\dedicated\\xrEngine.exe"=
"c:\\Program Files\\Orbitdownloader\\orbitdm.exe"=
"c:\\Program Files\\Orbitdownloader\\orbitnet.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"f:\\Steam\\steamapps\\common\\unreal tournament 3\\Binaries\\UT3.exe"=
"f:\\Steam\\steamapps\\common\\left 4 dead\\left4dead.exe"=
"f:\\Steam\\Steam.exe"=
"f:\\Steam\\steamapps\\skoonk\\diprip warm up\\hl2.exe"=
"f:\\Steam\\steamapps\\skoonk\\insurgency\\hl2.exe"=
"f:\\Steam\\steamapps\\skoonk\\team fortress 2\\hl2.exe"=
"f:\\Steam\\steamapps\\skoonk\\half-life 2 deathmatch\\hl2.exe"=
"f:\\Steam\\steamapps\\skoonk\\pirates, vikings, and knights ii\\hl2.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"e:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\conviction_game.exe"=
"e:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\gu.exe"=
"d:\\APPS\\SkypePortable\\App\\Skype\\Phone\\Skype.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [5.4.2010 18:46 135336]
R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\system32\drivers\ManyCam.sys [14.1.2008 12:06 21632]
S3 SjyPkt;SjyPkt;c:\windows\system32\drivers\SjyPkt.sys [20.8.2009 13:42 13532]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [19.9.2008 23:29 717296]
.
.
------- Doplňkový sken -------
.
IE: &Download by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/201
IE: &Grab video by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/204
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Do&wnload selected by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/203
IE: Down&load all by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/202
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
FF - ProfilePath - c:\documents and settings\Pepa\Data aplikací\Mozilla\Firefox\Profiles\11t9ll4k.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/|http://www.idnes.cz/
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?sourceid=navclient&hl=cs&q=
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Picasa2\npPicasa2.dll
FF - plugin: c:\program files\Picasa2\npPicasa3.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKCU-Run-WEBTRAN - (no file)
HKCU-Run-OEXPRESS - (no file)
MSConfigStartUp-nwiz - nwiz.exe
AddRemove-LucasArts' Curse of Monkey Island - c:\program files\LucasArts\Curse\DeIsL1.isu



**************************************************************************
skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory:

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-776561741-117609710-725345543-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:ae,1f,a7,89,56,74,ce,55,48,8d,7c,b0,30,53,39,e3,5a,ba,03,54,b3,33,de,
fb,a7,c8,c1,48,85,a5,4f,24,34,86,b1,9d,9f,51,2b,69,da,f9,0e,1d,97,1d,14,2b,\
"??"=hex:34,bc,6e,28,7d,21,bd,ff,ea,46,46,bd,e1,0e,2f,80

[HKEY_USERS\S-1-5-21-776561741-117609710-725345543-1003\Software\SecuROM\License information*]
"datasecu"=hex:bf,bd,c6,10,c2,72,09,f6,7e,60,d7,f9,d0,75,1b,d6,b6,a7,66,7a,6d,
d2,30,83,9c,ea,93,98,83,68,6d,2a,b9,ae,27,5f,84,4d,4a,77,11,91,ef,bd,e1,3b,\
"rkeysecu"=hex:b1,c8,2b,fe,c1,33,5e,48,77,91,fc,84,c5,e4,93,53
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(772)
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
c:\program files\common files\logishrd\bluetooth\LBTServ.dll
.
Celkový čas: 2010-07-07 12:32:33
ComboFix-quarantined-files.txt 2010-07-07 10:32

Před spuštěním: Volných bajtů: 20 093 452 288
Po spuštění: Volných bajtů: 20 063 883 264

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn

- - End Of File - - E06ABD495DF7234F7453D17BA58CF771

OKI - pouzi Tebou spominany USBFix - log vloz

User: Pepa (Administrator) # PEPA-PC [ ]
Updated 05/07/10 by El Desaparecido / C_XX
Started at 14:29:17 | 07/07/2010
Website: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com

CPU: Genuine Intel(R) CPU 2160 @ 1.80GHz
CPU 2: Genuine Intel(R) CPU 2160 @ 1.80GHz
Systém Microsoft Windows XP Professional (5.1.2600 32-Bit) # Service Pack 3
Internet Explorer 8.0.6001.18702

Windows Firewall: Enabled
Antivirus: AntiVir Desktop 10.0.1.44 [Enabled | Updated]
RAM -> 2047 Mb
C:\ (%systemdrive%) -> Fixed drive # 68 Gb (19 Mb free - 27%) [] # NTFS
D:\ -> Fixed drive # 81 Gb (12 Mb free - 15%) [Disk] # NTFS
E:\ -> Fixed drive # 65 Gb (24 Mb free - 38%) [Disk] # NTFS
F:\ -> Fixed drive # 401 Gb (8 Mb free - 2%) [Disk] # NTFS
G:\ -> CD-ROM
H:\ -> CD-ROM
I:\ -> CD-ROM
J:\ -> Removable drive # 4 Gb (4 Mb free - 100%) [STORE N GO] # FAT32

################## | Files # Infected Folders |


################## | Registry |

Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives

################## | Mountpoints2 |


################## | Listing |

[19/09/2008 - 15:43:04 | A | 0] C:\AUTOEXEC.BAT
[07/07/2010 - 02:07:33 | RAD ] C:\Autorun.inf
[06/05/2010 - 03:08:57 | A | 211] C:\Boot.bak
[07/07/2010 - 12:28:10 | RASH | 281] C:\boot.ini
[25/10/2001 - 14:00:00 | RASH | 4952] C:\Bootfont.bin
[07/07/2010 - 12:28:10 | RASHD ] C:\cmdcons
[03/08/2004 - 23:00:04 | A | 261312] C:\cmldr
[07/07/2010 - 12:32:36 | D ] C:\ComboFix
[07/07/2010 - 12:32:34 | A | 16216] C:\ComboFix.txt
[19/09/2008 - 15:43:04 | A | 0] C:\CONFIG.SYS
[08/12/2008 - 17:03:09 | D ] C:\Documents and Settings
[20/09/2008 - 04:37:49 | D ] C:\Genius
[19/09/2008 - 15:43:04 | RASH | 0] C:\IO.SYS
[19/09/2008 - 15:43:04 | RASH | 0] C:\MSDOS.SYS
[21/09/2008 - 14:05:26 | RD ] C:\MSOCache
[19/09/2008 - 15:53:30 | RASH | 47564] C:\NTDETECT.COM
[19/09/2008 - 17:27:33 | RASH | 250576] C:\ntldr
[07/07/2010 - 14:20:04 | ASH | 2145386496] C:\pagefile.sys
[07/07/2010 - 02:27:30 | RD ] C:\Program Files
[07/07/2010 - 12:32:36 | D ] C:\Qoobox
[15/12/2008 - 04:46:29 | D ] C:\RCT3
[07/07/2010 - 14:34:43 | SHD ] C:\RECYCLER
[07/07/2010 - 02:33:32 | D ] C:\rsit
[13/04/2010 - 16:27:29 | SHD ] C:\System Volume Information
[27/06/2009 - 04:09:00 | D ] C:\totalcmd
[18/10/2009 - 23:36:08 | D ] C:\TRANSLAT
[07/07/2010 - 14:34:43 | D ] C:\UsbFix
[07/07/2010 - 14:34:44 | A | 1042] C:\UsbFix.txt
[07/07/2010 - 12:32:35 | AD ] C:\WINDOWS
[06/07/2010 - 23:47:17 | D ] D:\$RECYCLE.BIN
[29/06/2010 - 01:47:29 | D ] D:\APPS
[07/07/2010 - 02:07:33 | RAD ] D:\Autorun.inf
[11/05/2010 - 19:31:57 | D ] D:\dokuments
[03/02/2010 - 00:26:50 | D ] D:\Hry
[18/06/2010 - 17:39:12 | D ] D:\Indie ga
[08/06/2010 - 18:56:56 | D ] D:\MP3
[18/06/2010 - 17:39:12 | D ] D:\old school game
[07/07/2010 - 14:34:43 | SHD ] D:\RECYCLER
[20/09/2008 - 04:12:25 | SHD ] D:\System Volume Information
[14/06/2010 - 14:42:01 | D ] D:\Tom.Clancys.Splinter.Cell.Conviction-SKIDROW
[26/06/2010 - 18:09:06 | D ] D:\_DVD_ IMAGE
[24/06/2010 - 00:58:59 | D ] D:\__ZALOHA
[07/07/2010 - 02:07:33 | RAD ] E:\Autorun.inf
[04/07/2010 - 15:29:51 | D ] E:\Program Files
[07/07/2010 - 14:34:43 | SHD ] E:\RECYCLER
[07/07/2010 - 03:23:44 | SHD ] E:\System Volume Information
[06/07/2010 - 23:47:17 | D ] F:\$RECYCLE.BIN
[07/07/2010 - 02:07:33 | RAD ] F:\Autorun.inf
[09/05/2010 - 18:31:19 | D ] F:\Dokument
[27/05/2010 - 17:12:42 | D ] F:\DVD
[10/02/2010 - 16:05:57 | D ] F:\DVDFab
[17/06/2010 - 04:53:50 | D ] F:\GB
[12/06/2010 - 00:19:05 | D ] F:\MP3
[07/07/2010 - 14:34:43 | SHD ] F:\RECYCLER
[07/07/2010 - 12:14:07 | D ] F:\StDo
[18/03/2010 - 16:14:53 | D ] F:\Steam
[10/06/2009 - 17:41:51 | SHD ] F:\System Volume Information
[14/04/2010 - 23:51:31 | D ] F:\Temp
[03/07/2010 - 21:30:29 | D ] F:\Video
[08/03/2010 - 14:51:38 | D ] F:\vido
[07/07/2010 - 02:53:34 | D ] J:\autorun.inf

################## | Vaccin |

C:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
D:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
E:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
F:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
J:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)

################## | E.O.F |

vypada to OK - su este nejake problemy

Moc díky,vypadá to že vše je v pořádku.Ještě dotaz,mám si změnit hesla nebo mi nic nehrozí?A na discích D a F se mi vytvořili složky $RECYCLE.BIN můžu je smazat?

za malo
hesla radsej zmen - mnoho smejdov zneuzivajucich autorun.inf kradne hesla
pokial su tie adresare prazdne, tak ich mazat nemusis