Avast hlasi problem

[NeoFan]

zdravim,avast mi zacal hlasit tuto aplikaciu,,,
name: autorun.inf virus: VBS:malware-gen

prosim o pomoc

Logfile of random's system information tool 1.08 (written by random/random)
Run by makapusa at 2010-08-19 22:15:53
Microsoft® Windows Vista™ Enterprise Service Pack 1
System drive C: has 89 GB (59%) free of 150 GB
Total RAM: 3071 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:16:03 PM, on 8/19/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18498)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
D:\games\Steam\Steam.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Users\makapusa\AppData\Local\Digsby\App\lib\digsby-app.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Users\makapusa\AppData\Local\Digsby\App\lib\aspell\bin\aspell.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Opera\Opera.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Users\makapusa\AppData\Roaming\hidserv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\makapusa\Desktop\RSIT.exe
C:\Program Files\trend micro\makapusa.exe
C:\Program Files\Windows NT\Accessories\WORDPAD.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [WinSys2] C:\Windows\system32\winsys2.exe
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Windows Update System] C:\Users\makapusa\AppData\Roaming\hidserv.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [Steam] "D:\games\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Windows Update System] C:\Users\makapusa\AppData\Roaming\hidserv.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: Digsby.lnk = C:\Users\makapusa\AppData\Local\Digsby\App\digsby.exe
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 6178 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-08-16 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"WinSys2"=C:\Windows\system32\winsys2.exe []
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-06-28 2837864]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-18 421888]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-07-21 141608]
"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [2010-07-13 47904]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"Windows Update System"=C:\Users\makapusa\AppData\Roaming\hidserv.exe [2010-08-16 331776]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2002-01-01 327472]
"Steam"=D:\games\Steam\Steam.exe [2010-07-22 1238352]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-05-13 26192168]
"Windows Update System"=C:\Users\makapusa\AppData\Roaming\hidserv.exe [2010-08-16 331776]

C:\Users\makapusa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Digsby.lnk - C:\Users\makapusa\AppData\Local\Digsby\App\digsby.exe
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"Windows Update System"="C:\Users\makapusa\AppData\Roaming\hidserv.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 3 months======

2010-08-19 22:14:36 ----D---- C:\Program Files\trend micro
2010-08-19 22:14:31 ----D---- C:\rsit
2010-08-19 22:06:31 ----RSH---- C:\Users\makapusa\AppData\Roaming\hidserv.exe
2010-08-17 09:27:05 ----D---- C:\Program Files\Microsoft Silverlight
2010-08-17 01:02:45 ----A---- C:\Windows\system32\drivers\VBoxDrv.sys
2010-08-17 01:02:31 ----A---- C:\Windows\system32\drivers\VBoxUSBMon.sys
2010-08-17 01:02:24 ----D---- C:\Program Files\Oracle
2010-08-16 16:58:36 ----D---- C:\Program Files\Sun
2010-08-16 00:27:38 ----D---- C:\Program Files\Common Files\Java
2010-08-16 00:26:51 ----A---- C:\Windows\system32\javaws.exe
2010-08-16 00:26:51 ----A---- C:\Windows\system32\javaw.exe
2010-08-16 00:26:51 ----A---- C:\Windows\system32\java.exe
2010-08-15 21:48:20 ----D---- C:\xampp
2010-08-15 21:34:54 ----D---- C:\Windows\system32\http%3a%2f%2fcygwin.mirrors.hoobly.com%2f
2010-08-15 21:34:39 ----D---- C:\cygwin
2010-08-12 22:31:26 ----A---- C:\Windows\system32\iccvid.dll
2010-08-12 22:31:20 ----A---- C:\Windows\system32\mshtml.dll
2010-08-12 22:31:20 ----A---- C:\Windows\system32\ieapfltr.dll
2010-08-12 22:31:19 ----A---- C:\Windows\system32\urlmon.dll
2010-08-12 22:31:19 ----A---- C:\Windows\system32\ieframe.dll
2010-08-12 22:31:18 ----A---- C:\Windows\system32\wininet.dll
2010-08-12 22:31:18 ----A---- C:\Windows\system32\occache.dll
2010-08-12 22:31:18 ----A---- C:\Windows\system32\mstime.dll
2010-08-12 22:31:18 ----A---- C:\Windows\system32\mshtmled.dll
2010-08-12 22:31:18 ----A---- C:\Windows\system32\msfeeds.dll
2010-08-12 22:31:18 ----A---- C:\Windows\system32\jsproxy.dll
2010-08-12 22:31:18 ----A---- C:\Windows\system32\iertutil.dll
2010-08-12 22:31:18 ----A---- C:\Windows\system32\iepeers.dll
2010-08-12 22:31:18 ----A---- C:\Windows\system32\ieencode.dll
2010-08-12 22:31:18 ----A---- C:\Windows\system32\iedkcs32.dll
2010-08-12 22:31:18 ----A---- C:\Windows\system32\ieaksie.dll
2010-08-12 22:31:14 ----A---- C:\Windows\system32\schannel.dll
2010-08-12 22:31:08 ----A---- C:\Windows\system32\win32k.sys
2010-08-12 22:31:07 ----A---- C:\Windows\system32\rtutils.dll
2010-08-12 22:31:06 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-08-12 22:31:06 ----A---- C:\Windows\system32\drivers\srv.sys
2010-08-12 22:31:04 ----A---- C:\Windows\system32\msxml3.dll
2010-08-12 22:30:58 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-08-12 22:30:58 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-08-12 22:30:56 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-08-09 23:37:00 ----D---- C:\Users\makapusa\AppData\Roaming\dvdcss
2010-08-08 18:59:22 ----D---- C:\Users\makapusa\AppData\Roaming\Apple Computer
2010-08-08 18:58:42 ----DC---- C:\Windows\system32\DRVSTORE
2010-08-08 18:58:42 ----A---- C:\Windows\system32\GEARAspi.dll
2010-08-08 18:58:42 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2010-08-08 18:57:36 ----D---- C:\Program Files\iPod
2010-08-08 18:57:32 ----D---- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-08-08 18:57:32 ----D---- C:\Program Files\iTunes
2010-08-08 17:39:59 ----D---- C:\Users\makapusa\AppData\Roaming\OpenOffice.org
2010-08-08 15:57:47 ----D---- C:\ProgramData\Apple Computer
2010-08-08 15:57:47 ----D---- C:\Program Files\QuickTime
2010-08-08 15:57:22 ----D---- C:\Program Files\Apple Software Update
2010-08-08 15:55:37 ----D---- C:\Program Files\Bonjour
2010-08-08 15:55:16 ----D---- C:\ProgramData\Apple
2010-08-08 15:55:16 ----D---- C:\Program Files\Common Files\Apple
2010-08-05 14:08:04 ----A---- C:\Windows\system32\drivers\VBoxNetFlt.sys
2010-08-05 14:08:04 ----A---- C:\Windows\system32\drivers\VBoxNetAdp.sys
2010-08-05 14:08:02 ----A---- C:\Windows\system32\VBoxNetFltNotify.dll
2010-08-03 07:28:28 ----D---- C:\Program Files\JRE
2010-08-03 07:27:51 ----D---- C:\Program Files\OpenOffice.org 3
2010-08-03 07:27:16 ----D---- C:\ProgramData\Sun
2010-08-03 07:26:53 ----A---- C:\Windows\system32\deployJava1.dll
2010-08-03 07:26:15 ----D---- C:\Program Files\Java
2010-08-03 03:47:04 ----A---- C:\Windows\system32\shell32.dll
2010-07-31 14:43:25 ----D---- C:\Users\makapusa\AppData\Roaming\skypePM
2010-07-31 14:42:52 ----D---- C:\Users\makapusa\AppData\Roaming\Skype
2010-07-31 14:42:18 ----D---- C:\Program Files\Common Files\Skype
2010-07-31 14:42:12 ----RD---- C:\Program Files\Skype
2010-07-31 14:42:09 ----D---- C:\ProgramData\Skype
2010-07-28 11:12:34 ----D---- C:\Users\makapusa\AppData\Roaming\vlc
2010-07-28 11:09:45 ----D---- C:\Program Files\VideoLAN
2010-07-28 03:21:03 ----A---- C:\Windows\system32\newdev.exe
2010-07-28 03:21:03 ----A---- C:\Windows\system32\newdev.dll
2010-07-27 23:33:11 ----D---- C:\ProgramData\Blizzard Entertainment
2010-07-27 22:52:04 ----A---- C:\Windows\system32\drivers\sptd.sys
2010-07-27 22:51:34 ----D---- C:\Program Files\DAEMON Tools Lite
2010-07-27 22:51:14 ----D---- C:\Users\makapusa\AppData\Roaming\DAEMON Tools Lite
2010-07-27 22:51:13 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-07-27 22:41:21 ----D---- C:\ProgramData\WindowsSearch
2010-07-27 22:38:29 ----D---- C:\Users\makapusa\AppData\Roaming\WinRAR
2010-07-27 22:33:02 ----D---- C:\Program Files\Universal Extractor
2010-07-27 21:38:56 ----D---- C:\ProgramData\Adobe
2010-07-27 21:38:43 ----D---- C:\Program Files\Common Files\Adobe
2010-07-27 21:38:43 ----D---- C:\Program Files\Adobe
2010-07-27 16:28:59 ----D---- C:\Windows\system32\appmgmt
2010-07-27 03:00:44 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-07-27 03:00:44 ----A---- C:\Windows\system32\PresentationHost.exe
2010-07-27 03:00:44 ----A---- C:\Windows\system32\netfxperf.dll
2010-07-27 03:00:44 ----A---- C:\Windows\system32\mscoree.dll
2010-07-27 03:00:44 ----A---- C:\Windows\system32\dfshim.dll
2010-07-27 01:07:50 ----D---- C:\ProgramData\Google
2010-07-27 01:07:50 ----D---- C:\Program Files\Google
2010-07-26 15:22:51 ----A---- C:\Windows\system32\winhttp.dll
2010-07-23 03:39:10 ----A---- C:\Windows\system32\msshooks.dll
2010-07-23 03:39:09 ----A---- C:\Windows\system32\thawbrkr.dll
2010-07-23 03:39:09 ----A---- C:\Windows\system32\SearchFilterHost.exe
2010-07-23 03:39:09 ----A---- C:\Windows\system32\propsys.dll
2010-07-23 03:39:09 ----A---- C:\Windows\system32\propdefs.dll
2010-07-23 03:39:09 ----A---- C:\Windows\system32\msstrc.dll
2010-07-23 03:39:09 ----A---- C:\Windows\system32\mssprxy.dll
2010-07-23 03:39:09 ----A---- C:\Windows\system32\mssitlb.dll
2010-07-23 03:39:09 ----A---- C:\Windows\system32\msshsq.dll
2010-07-23 03:39:09 ----A---- C:\Windows\system32\msscb.dll
2010-07-23 03:39:08 ----A---- C:\Windows\system32\xmlfilter.dll
2010-07-23 03:39:08 ----A---- C:\Windows\system32\wsepno.dll
2010-07-23 03:39:08 ----A---- C:\Windows\system32\srchadmin.dll
2010-07-23 03:39:08 ----A---- C:\Windows\system32\rtffilt.dll
2010-07-23 03:39:08 ----A---- C:\Windows\system32\offfilt.dll
2010-07-23 03:39:08 ----A---- C:\Windows\system32\nlhtml.dll
2010-07-23 03:39:08 ----A---- C:\Windows\system32\msscntrs.dll
2010-07-23 03:39:08 ----A---- C:\Windows\system32\mimefilt.dll
2010-07-23 03:39:08 ----A---- C:\Windows\system32\korwbrkr.dll
2010-07-23 03:39:08 ----A---- C:\Windows\system32\chsbrkr.dll
2010-07-23 03:39:07 ----A---- C:\Windows\system32\tquery.dll
2010-07-23 03:39:07 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2010-07-23 03:39:07 ----A---- C:\Windows\system32\SearchIndexer.exe
2010-07-23 03:39:07 ----A---- C:\Windows\system32\mssvp.dll
2010-07-23 03:39:07 ----A---- C:\Windows\system32\mssrch.dll
2010-07-23 03:39:07 ----A---- C:\Windows\system32\mssphtb.dll
2010-07-23 03:39:07 ----A---- C:\Windows\system32\mssph.dll
2010-07-23 03:39:07 ----A---- C:\Windows\system32\chtbrkr.dll
2010-07-23 03:24:46 ----A---- C:\Windows\system32\browserchoice.exe
2010-07-23 03:10:42 ----A---- C:\Windows\system32\infocardapi.dll
2010-07-23 03:10:41 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2010-07-23 03:10:40 ----A---- C:\Windows\system32\icardres.dll
2010-07-23 03:10:40 ----A---- C:\Windows\system32\icardagt.exe
2010-07-23 03:10:38 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2010-07-23 03:08:26 ----D---- C:\Users\makapusa\AppData\Roaming\InfraRecorder
2010-07-23 03:08:18 ----D---- C:\Program Files\InfraRecorder
2010-07-23 03:04:12 ----A---- C:\Windows\system32\mscorier.dll
2010-07-23 03:04:06 ----A---- C:\Windows\system32\mscories.dll
2010-07-23 03:02:11 ----A---- C:\Windows\system32\nshhttp.dll
2010-07-23 03:02:08 ----A---- C:\Windows\system32\httpapi.dll
2010-07-23 03:02:08 ----A---- C:\Windows\system32\drivers\http.sys
2010-07-23 01:45:51 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2010-07-23 01:45:30 ----D---- C:\ProgramData\Blizzard
2010-07-22 22:37:46 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-07-22 22:37:43 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-07-22 22:37:43 ----A---- C:\Windows\system32\x3daudio1_2.dll
2010-07-22 22:37:43 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-07-22 22:37:43 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-07-22 22:37:43 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-07-22 22:37:42 ----A---- C:\Windows\system32\xinput1_3.dll
2010-07-22 22:37:42 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-07-22 22:37:42 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-07-22 22:37:42 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-07-22 22:37:42 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-07-22 22:37:41 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-07-22 22:37:41 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-07-22 22:37:41 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-07-22 22:37:41 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-07-22 22:37:41 ----A---- C:\Windows\system32\d3dx10.dll
2010-07-22 22:37:41 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-07-22 22:37:40 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-07-22 22:37:40 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-07-22 22:37:40 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-07-22 22:37:40 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-07-22 22:37:38 ----A---- C:\Windows\system32\xinput1_2.dll
2010-07-22 22:37:38 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-07-22 22:37:36 ----A---- C:\Windows\system32\xinput1_1.dll
2010-07-22 22:37:36 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-07-22 22:37:36 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-07-22 22:37:31 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-07-22 22:37:30 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-07-22 22:37:30 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-07-22 22:37:30 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-07-22 22:37:28 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-07-22 22:37:27 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-07-22 22:37:27 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-07-22 21:52:54 ----A---- C:\Users\makapusa\AppData\Roaming\PnkBstrK.sys
2010-07-22 21:37:16 ----D---- C:\ProgramData\TrackMania
2010-07-22 20:29:34 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2010-07-22 20:29:31 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2010-07-22 20:29:20 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2010-07-22 20:24:46 ----A---- C:\Windows\system32\atl.dll
2010-07-22 20:24:42 ----A---- C:\Windows\system32\t2embed.dll
2010-07-22 20:24:39 ----A---- C:\Windows\system32\IPSECSVC.DLL
2010-07-22 20:24:34 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-07-22 20:24:30 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2010-07-22 20:24:27 ----A---- C:\Windows\system32\msxml6.dll
2010-07-22 20:24:22 ----A---- C:\Windows\system32\wlansvc.dll
2010-07-22 20:24:22 ----A---- C:\Windows\system32\wlansec.dll
2010-07-22 20:24:22 ----A---- C:\Windows\system32\wlanmsm.dll
2010-07-22 20:24:22 ----A---- C:\Windows\system32\L2SecHC.dll
2010-07-22 20:24:05 ----A---- C:\Windows\system32\netiohlp.dll
2010-07-22 20:24:04 ----A---- C:\Windows\system32\TCPSVCS.EXE
2010-07-22 20:24:04 ----A---- C:\Windows\system32\NETSTAT.EXE
2010-07-22 20:24:04 ----A---- C:\Windows\system32\HOSTNAME.EXE
2010-07-22 20:24:04 ----A---- C:\Windows\system32\finger.exe
2010-07-22 20:24:04 ----A---- C:\Windows\system32\ARP.EXE
2010-07-22 20:24:03 ----A---- C:\Windows\system32\ROUTE.EXE
2010-07-22 20:24:03 ----A---- C:\Windows\system32\netevent.dll
2010-07-22 20:24:03 ----A---- C:\Windows\system32\MRINFO.EXE
2010-07-22 20:23:01 ----A---- C:\Windows\system32\msv1_0.dll
2010-07-22 20:22:53 ----A---- C:\Windows\system32\inetcomm.dll
2010-07-22 20:22:49 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2010-07-22 20:22:48 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2010-07-22 20:22:48 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2010-07-22 20:22:44 ----A---- C:\Windows\system32\pacerprf.dll
2010-07-22 20:22:44 ----A---- C:\Windows\system32\drivers\pacer.sys
2010-07-22 20:22:30 ----A---- C:\Windows\system32\WMVCORE.DLL
2010-07-22 20:22:30 ----A---- C:\Windows\system32\mf.dll
2010-07-22 20:22:21 ----A---- C:\Windows\system32\asycfilt.dll
2010-07-22 20:22:19 ----A---- C:\Windows\system32\vbscript.dll
2010-07-22 20:22:18 ----A---- C:\Windows\system32\gdi32.dll
2010-07-22 20:22:12 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-07-22 20:22:10 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-07-22 20:21:44 ----A---- C:\Windows\system32\tzres.dll
2010-07-22 20:21:07 ----A---- C:\Windows\system32\xolehlp.dll
2010-07-22 20:21:07 ----A---- C:\Windows\system32\msdtcprx.dll
2010-07-22 20:21:05 ----A---- C:\Windows\system32\wkssvc.dll
2010-07-22 20:21:01 ----A---- C:\Windows\system32\mstscax.dll
2010-07-22 20:20:57 ----A---- C:\Windows\system32\es.dll
2010-07-22 20:20:52 ----A---- C:\Windows\system32\wmpeffects.dll
2010-07-22 20:20:40 ----A---- C:\Windows\system32\netapi32.dll
2010-07-22 20:20:38 ----A---- C:\Windows\system32\fontsub.dll
2010-07-22 20:20:38 ----A---- C:\Windows\system32\dciman32.dll
2010-07-22 20:20:38 ----A---- C:\Windows\system32\atmlib.dll
2010-07-22 20:20:38 ----A---- C:\Windows\system32\atmfd.dll
2010-07-22 20:20:05 ----A---- C:\Windows\system32\localspl.dll
2010-07-22 20:20:01 ----A---- C:\Windows\explorer.exe
2010-07-22 20:19:54 ----A---- C:\Windows\system32\wdigest.dll
2010-07-22 20:19:54 ----A---- C:\Windows\system32\kerberos.dll
2010-07-22 20:19:53 ----A---- C:\Windows\system32\lsasrv.dll
2010-07-22 20:19:53 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2010-07-22 20:19:52 ----A---- C:\Windows\system32\secur32.dll
2010-07-22 20:19:52 ----A---- C:\Windows\system32\lsass.exe
2010-07-22 20:19:40 ----A---- C:\Windows\system32\kd1394.dll
2010-07-22 20:19:39 ----A---- C:\Windows\system32\ci.dll
2010-07-22 20:19:38 ----A---- C:\Windows\system32\winresume.exe
2010-07-22 20:19:38 ----A---- C:\Windows\system32\winload.exe
2010-07-22 20:19:36 ----A---- C:\Windows\system32\srdelayed.exe
2010-07-22 20:19:36 ----A---- C:\Windows\system32\srcore.dll
2010-07-22 20:19:36 ----A---- C:\Windows\system32\srclient.dll
2010-07-22 20:19:36 ----A---- C:\Windows\system32\setbcdlocale.dll
2010-07-22 20:19:36 ----A---- C:\Windows\system32\rstrui.exe
2010-07-22 20:19:35 ----A---- C:\Windows\system32\kbd106n.dll
2010-07-22 20:19:01 ----A---- C:\Windows\system32\rpcss.dll
2010-07-22 20:19:00 ----A---- C:\Windows\system32\sdohlp.dll
2010-07-22 20:19:00 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2010-07-22 20:19:00 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2010-07-22 20:19:00 ----A---- C:\Windows\system32\iasrecst.dll
2010-07-22 20:19:00 ----A---- C:\Windows\system32\iashost.exe
2010-07-22 20:19:00 ----A---- C:\Windows\system32\iasdatastore.dll
2010-07-22 20:19:00 ----A---- C:\Windows\system32\iasads.dll
2010-07-22 20:18:48 ----A---- C:\Windows\system32\ieUnatt.exe
2010-07-22 20:18:37 ----A---- C:\Windows\system32\drivers\tunnel.sys
2010-07-22 20:18:36 ----A---- C:\Windows\system32\iphlpsvc.dll
2010-07-22 20:18:30 ----A---- C:\Windows\system32\jscript.dll
2010-07-22 20:18:27 ----A---- C:\Windows\system32\quartz.dll
2010-07-22 20:18:20 ----A---- C:\Windows\system32\kernel32.dll
2010-07-22 20:18:19 ----A---- C:\Windows\system32\apilogen.dll
2010-07-22 20:18:19 ----A---- C:\Windows\system32\amxread.dll
2010-07-22 20:18:17 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2010-07-22 20:18:17 ----A---- C:\Windows\system32\WindowsCodecs.dll
2010-07-22 20:18:17 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2010-07-22 20:18:16 ----A---- C:\Windows\system32\Faultrep.dll
2010-07-22 20:18:15 ----A---- C:\Windows\system32\wersvc.dll
2010-07-22 20:18:14 ----A---- C:\Windows\system32\win32spl.dll
2010-07-22 20:18:13 ----A---- C:\Windows\system32\emdmgmt.dll
2010-07-22 20:18:12 ----A---- C:\Windows\system32\drivers\nwifi.sys
2010-07-22 20:18:12 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2010-07-22 20:18:12 ----A---- C:\Windows\system32\dataclen.dll
2010-07-22 20:18:12 ----A---- C:\Windows\system32\cdd.dll
2010-07-22 20:18:11 ----A---- C:\Windows\system32\drivers\rmcast.sys
2010-07-22 20:18:05 ----A---- C:\Windows\system32\wmpdxm.dll
2010-07-22 20:17:18 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-07-22 20:17:18 ----A---- C:\Windows\system32\RMActivate.exe
2010-07-22 20:17:17 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-07-22 20:17:14 ----A---- C:\Windows\system32\secproc_isv.dll
2010-07-22 20:17:14 ----A---- C:\Windows\system32\secproc.dll
2010-07-22 20:17:14 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-07-22 20:17:13 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-07-22 20:17:13 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-07-22 20:17:13 ----A---- C:\Windows\system32\msdrm.dll
2010-07-22 20:17:03 ----A---- C:\Windows\system32\WMNetMgr.dll
2010-07-22 20:17:03 ----A---- C:\Windows\system32\logagent.exe
2010-07-22 20:16:45 ----A---- C:\Windows\system32\gameux.dll
2010-07-22 20:16:27 ----A---- C:\Windows\system32\wshext.dll
2010-07-22 20:16:26 ----A---- C:\Windows\system32\wscript.exe
2010-07-22 20:16:26 ----A---- C:\Windows\system32\scrrun.dll
2010-07-22 20:16:26 ----A---- C:\Windows\system32\scrobj.dll
2010-07-22 20:16:26 ----A---- C:\Windows\system32\cscript.exe
2010-07-22 20:16:20 ----A---- C:\Windows\system32\msasn1.dll
2010-07-22 20:16:15 ----A---- C:\Windows\system32\connect.dll
2010-07-22 20:16:12 ----A---- C:\Windows\system32\rpcrt4.dll
2010-07-22 20:15:56 ----A---- C:\Windows\system32\rastls.dll
2010-07-22 20:15:56 ----A---- C:\Windows\system32\raschap.dll
2010-07-22 20:15:47 ----A---- C:\Windows\system32\WSDApi.dll
2010-07-22 20:15:25 ----A---- C:\Windows\system32\msvidc32.dll
2010-07-22 20:15:24 ----A---- C:\Windows\system32\tsbyuv.dll
2010-07-22 20:15:24 ----A---- C:\Windows\system32\msyuv.dll
2010-07-22 20:15:24 ----A---- C:\Windows\system32\msrle32.dll
2010-07-22 20:15:24 ----A---- C:\Windows\system32\iyuv_32.dll
2010-07-22 20:15:23 ----A---- C:\Windows\system32\msvfw32.dll
2010-07-22 20:15:23 ----A---- C:\Windows\system32\mciavi32.dll
2010-07-22 20:15:23 ----A---- C:\Windows\system32\avifil32.dll
2010-07-22 20:15:23 ----A---- C:\Windows\system32\avicap32.dll
2010-07-22 20:15:09 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2010-07-22 20:14:39 ----A---- C:\Windows\system32\wmp.dll
2010-07-22 20:14:37 ----A---- C:\Windows\system32\unregmp2.exe
2010-07-22 20:14:35 ----A---- C:\Windows\system32\spwmp.dll
2010-07-22 20:14:35 ----A---- C:\Windows\system32\dxmasf.dll
2010-07-22 20:14:34 ----A---- C:\Windows\system32\wmploc.DLL
2010-07-22 19:57:21 ----N---- C:\Windows\system32\MpSigStub.exe
2010-07-22 19:55:41 ----A---- C:\Windows\system32\wintrust.dll
2010-07-22 19:55:30 ----A---- C:\Windows\system32\cabview.dll
2010-07-22 19:32:07 ----D---- C:\Program Files\Common Files\Steam

======List of files/folders modified in the last 3 months======

2010-08-19 22:16:03 ----D---- C:\Windows\Temp
2010-08-19 22:16:00 ----D---- C:\Windows\Prefetch
2010-08-19 22:14:36 ----RD---- C:\Program Files
2010-08-19 22:09:56 ----D---- C:\Users\makapusa\AppData\Roaming\uTorrent
2010-08-19 03:48:58 ----SHD---- C:\System Volume Information
2010-08-18 02:05:06 ----D---- C:\Windows\System32
2010-08-18 02:05:06 ----D---- C:\Windows\inf
2010-08-18 02:05:06 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-08-18 01:59:02 ----D---- C:\ProgramData\NVIDIA
2010-08-17 18:27:46 ----D---- C:\Windows
2010-08-17 09:27:17 ----SHD---- C:\Windows\Installer
2010-08-17 09:27:17 ----SD---- C:\ProgramData\Microsoft
2010-08-17 01:03:20 ----D---- C:\Windows\system32\drivers
2010-08-17 01:03:19 ----D---- C:\Windows\system32\catroot
2010-08-16 00:27:38 ----D---- C:\Program Files\Common Files
2010-08-13 11:39:45 ----D---- C:\Users\makapusa\AppData\Roaming\Opera
2010-08-13 11:30:26 ----D---- C:\Windows\Microsoft.NET
2010-08-13 11:30:20 ----RSD---- C:\Windows\assembly
2010-08-13 11:24:33 ----D---- C:\Windows\winsxs
2010-08-13 11:11:59 ----D---- C:\Program Files\Movie Maker
2010-08-13 11:11:59 ----D---- C:\Program Files\Internet Explorer
2010-08-13 03:00:47 ----D---- C:\Windows\system32\catroot2
2010-08-13 03:00:25 ----D---- C:\Program Files\Windows Mail
2010-08-12 12:32:16 ----D---- C:\Program Files\Opera
2010-08-08 19:03:55 ----D---- C:\Windows\system32\drivers\UMDF
2010-08-08 18:57:32 ----HD---- C:\ProgramData
2010-08-08 15:57:25 ----D---- C:\Windows\system32\Tasks
2010-08-08 14:59:57 ----D---- C:\Windows\system32\NDF
2010-08-03 07:28:42 ----RSD---- C:\Windows\Fonts
2010-08-02 15:26:37 ----D---- C:\Windows\system32\WDI
2010-07-27 22:54:08 ----D---- C:\Windows\system32\LogFiles
2010-07-27 21:47:06 ----D---- C:\Users\makapusa\AppData\Roaming\Adobe
2010-07-27 10:12:50 ----SD---- C:\Windows\Downloaded Program Files
2010-07-27 03:35:56 ----D---- C:\Windows\rescache
2010-07-27 03:18:42 ----D---- C:\Windows\system32\wbem
2010-07-27 03:18:42 ----D---- C:\Windows\system32\en-US
2010-07-27 03:18:42 ----D---- C:\Windows\system32\drivers\en-US
2010-07-27 02:35:23 ----D---- C:\Windows\Tasks
2010-07-23 04:57:54 ----D---- C:\Windows\Logs
2010-07-23 04:18:40 ----D---- C:\Windows\PolicyDefinitions
2010-07-23 04:18:40 ----D---- C:\Windows\AppPatch
2010-07-23 04:18:39 ----D---- C:\Windows\system32\Boot
2010-07-23 04:18:38 ----D---- C:\Windows\system32\migration
2010-07-23 04:18:37 ----D---- C:\Windows\system32\manifeststore
2010-07-23 04:18:31 ----D---- C:\Windows\system32\XPSViewer
2010-07-23 04:18:17 ----D---- C:\Program Files\Windows Media Player
2010-07-23 03:00:52 ----D---- C:\Windows\SoftwareDistribution
2010-07-22 20:41:09 ----D---- C:\Users\makapusa\AppData\Roaming\Digsby
2010-07-22 20:41:09 ----D---- C:\ProgramData\Digsby
2010-06-28 23:57:12 ----A---- C:\Windows\system32\aswBoot.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 fvevol;BitLocker Drive Encryption Filter Driver; C:\Windows\System32\DRIVERS\fvevol.sys [2008-01-21 145464]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-07-27 691696]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-06-28 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-06-28 165456]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-06-28 46672]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2010-08-05 143184]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2010-08-05 41936]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-06-28 17744]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-06-28 50256]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2009-08-21 66592]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-09-28 9509832]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2006-11-02 47104]
R3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2010-08-05 100496]
R3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2010-08-05 111312]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S3 aga1k7ak;aga1k7ak; C:\Windows\system32\drivers\aga1k7ak.sys []
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 ivusb;Initio Driver for USB Default Controller; C:\Windows\system32\DRIVERS\ivusb.sys [2010-03-10 24216]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2010-04-19 41984]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-09-27 215656]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2009-09-27 240232]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-07-21 540968]
R3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2010-07-22 407336]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-07-27 135664]

-----------------EOF-----------------

[NeoFan]

zdravim...ospravedlnujem sa za duplicitu... ani nechapem ako sa to stalo

[motji]

Hezké dopoledne

Zapojte do pc všechny usb klíče, flashky...co používáte

Použijte USB fix
http://www.viry.cz/forum/viewtopic.php?f=24&t=102308


Před stažením vypněte rezidentní štít antiviru, má na Usbfix falešnou detekci
-spusťte
-klikněte na volbu deletion , potvrdte enter
- po skenu sem vložte log , pokud na Vás nevyskočí, najdete ho C:\UsbFix.txt

[NeoFan]

taktiez pekne popoludnie

############################## | UsbFix 7.020 | [Deletion]

User: makapusa (Administrator) # MAKAPUSA-PC [System manufacturer System Product Name]
Updated 12/08/10 by El Desaparecido / C_XX
Started at 19:30:40 | 20/08/2010
Website: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com

CPU: AMD Athlon(tm) X2 Dual Core Processor BE-2400
CPU 2: AMD Athlon(tm) X2 Dual Core Processor BE-2400
Microsoft® Windows Vista™ Enterprise (6.0.6001 32-Bit) # Service Pack 1
Internet Explorer 7.0.6001.18000

Windows Firewall: Enabled
RAM -> 3071 Mb
C:\ (%systemdrive%) -> Fixed drive # 146 Gb (88 Mb free - 60%) [] # NTFS
D:\ -> Fixed drive # 1251 Gb (969 Mb free - 78%) [] # NTFS
E:\ -> CD-ROM
F:\ -> Removable drive # 964 Mb (963 Mb free - 100%) [] # FAT
G:\ -> CD-ROM

################## | Files # Infected Folders |

Deleted ! F:\AEXRGYH\DFG-2352-26235-2322322-624621221-2622255\w89e85t5.exe
Deleted ! F:\Autorun.inf

################## | Registry |


################## | Mountpoints2 |

Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{99d4ea3b-fe93-11d5-9db0-0019cbd682a0}

################## | Listing |

[20/08/2010 - 19:36:46 | SHD ] C:\$Recycle.Bin
[18/09/2006 - 23:43:36 | A | 24] C:\autoexec.bat
[01/01/2002 - 10:42:20 | SHD ] C:\Boot
[21/01/2008 - 04:24:17 | RASH | 333203] C:\bootmgr
[01/01/2002 - 10:42:22 | RAS | 8192] C:\BOOTSECT.BAK
[18/09/2006 - 23:43:37 | A | 10] C:\config.sys
[15/08/2010 - 21:51:17 | D ] C:\cygwin
[02/11/2006 - 15:01:53 | SHD ] C:\Documents and Settings
[20/08/2010 - 14:21:47 | ASH | 3220430848] C:\hiberfil.sys
[01/01/2002 - 02:00:13 | D ] C:\NVIDIA
[20/08/2010 - 14:21:46 | ASH | 3534229504] C:\pagefile.sys
[21/01/2008 - 04:32:06 | D ] C:\PerfLogs
[19/08/2010 - 22:14:36 | RD ] C:\Program Files
[08/08/2010 - 18:57:32 | HD ] C:\ProgramData
[19/08/2010 - 22:14:56 | D ] C:\rsit
[20/08/2010 - 18:40:32 | SHD ] C:\System Volume Information
[20/08/2010 - 19:36:46 | D ] C:\UsbFix
[20/08/2010 - 19:30:46 | A | 2009] C:\UsbFix.txt
[01/01/2002 - 01:53:17 | RD ] C:\Users
[17/08/2010 - 18:27:46 | D ] C:\Windows
[20/08/2010 - 19:36:46 | SHD ] D:\$RECYCLE.BIN
[09/08/2010 - 17:54:57 | RD ] D:\File Inbox
[19/08/2010 - 22:09:15 | D ] D:\games
[11/08/2010 - 23:05:09 | RD ] D:\movies
[12/08/2010 - 10:54:56 | RD ] D:\music
[01/08/2010 - 15:26:10 | D ] D:\New Folder
[08/08/2010 - 21:44:06 | RD ] D:\pictures
[22/07/2010 - 19:44:40 | SHD ] D:\System Volume Information
[17/08/2010 - 18:18:07 | D ] D:\tmp
[22/07/2010 - 19:28:06 | D ] D:\torrent
[19/08/2010 - 22:46:08 | D ] D:\virtualbox
[17/08/2010 - 18:55:51 | RD ] D:\webserver
[19/08/2010 - 22:10:20 | RSHD ] F:\AEXRGYH

################## | Vaccin |

C:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
D:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
F:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)

################## | Upload |

Please send the file: C:\UsbFix_Upload_Me_MAKAPUSA-PC.zip
http://chiquitine.changelog.fr/Sample/Upload.php
Thank you for your contribution.

################## | E.O.F |



################## | Vaccin |

(!) This computer is not vaccinated!

################## | E.O.F |

[motji]

Zapojte do pc všechny usb klíče, flashky...co používáte



Stáhněte na plochu, ukončete všechna aktivní okna a spusťte ComboFix - http://download.bleepingcomputer.com/sUBs/ComboFix.exe


- ComboFix je třeba spustit pod účtem s právy administrátora

- Před použitím vypněte všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary

- Po spuštění se zobrazí podmínky užití, potvrďte je stiskem tlačítka Ano

- Dále postupujte dle pokynů, během aplikování ComboFixu neklikejte do zobrazujícího se okna

- Po dokončení skenování, trvajícího maximálně 10 minut, by měl program vytvořit log - C:\ComboFix.txt, zkopírujte celý jeho obsah sem

[NeoFan]

ComboFix 10-08-20.01 - makapusa 08/21/2010 14:39:35.1.2 - x86
Microsoft® Windows Vista™ Enterprise 6.0.6001.1.1252.1.1033.18.3071.2123 [GMT 2:00]
Running from: c:\users\makapusa\Desktop\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\makapusa\AppData\Roaming\hidserv.exe
c:\windows\system32\Startup.exe

.
((((((((((((((((((((((((( Files Created from 2010-07-21 to 2010-08-21 )))))))))))))))))))))))))))))))
.

2010-08-21 12:45 . 2010-08-21 12:45 -------- d-----w- c:\users\makapusa\AppData\Local\temp
2010-08-21 12:45 . 2010-08-21 12:45 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-08-20 17:36 . 2010-08-20 17:36 194745 ----a-w- C:\UsbFix_Upload_Me_MAKAPUSA-PC.zip
2010-08-20 13:37 . 2010-08-20 17:36 -------- d-----w- C:\UsbFix
2010-08-19 20:14 . 2010-08-19 20:15 -------- d-----w- c:\program files\trend micro
2010-08-19 20:14 . 2010-08-19 20:14 -------- d-----w- C:\rsit
2010-08-17 14:39 . 2010-08-17 16:56 -------- d-----w- c:\users\makapusa\hsperfdata_makapusa
2010-08-17 10:40 . 2010-08-17 10:40 47364 ----a-w- c:\programdata\Blizzard Entertainment\Battle.net\Cache\Download\Scan.dll
2010-08-17 07:27 . 2010-08-17 07:27 -------- d-----w- c:\program files\Microsoft Silverlight
2010-08-16 23:06 . 2010-08-20 12:42 -------- d-----w- c:\users\makapusa\.VirtualBox
2010-08-16 23:02 . 2010-08-05 12:08 143184 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2010-08-16 23:02 . 2010-08-05 12:08 41936 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2010-08-16 23:02 . 2010-08-16 23:02 -------- d-----w- c:\program files\Oracle
2010-08-16 14:58 . 2010-08-16 14:58 -------- d-----w- c:\program files\Sun
2010-08-15 22:27 . 2010-08-15 22:27 -------- d-----w- c:\program files\Common Files\Java
2010-08-15 19:34 . 2010-08-15 19:37 -------- d-----w- c:\windows\system32\http%3a%2f%2fcygwin.mirrors.hoobly.com%2f
2010-08-15 19:34 . 2010-08-15 19:51 -------- d-----w- C:\cygwin
2010-08-12 20:30 . 2010-06-08 17:00 3598216 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-08-12 20:30 . 2010-06-08 17:00 3545992 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-08-12 20:30 . 2010-06-16 15:59 898952 ----a-w- c:\windows\system32\drivers\tcpip.sys
2010-08-09 21:37 . 2010-08-09 21:37 -------- d-----w- c:\users\makapusa\AppData\Roaming\dvdcss
2010-08-08 16:59 . 2010-08-11 09:22 -------- d-----w- c:\users\makapusa\AppData\Local\Apple Computer
2010-08-08 16:59 . 2010-08-08 17:04 -------- d-----w- c:\users\makapusa\AppData\Roaming\Apple Computer
2010-08-08 16:58 . 2010-08-16 23:02 -------- dc----w- c:\windows\system32\DRVSTORE
2010-08-08 16:58 . 2009-05-18 11:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2010-08-08 16:58 . 2008-04-17 10:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2010-08-05 12:08 . 2010-08-05 12:08 111312 ----a-w- c:\windows\system32\drivers\VBoxNetFlt.sys
2010-08-05 12:08 . 2010-08-05 12:08 100496 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2010-08-05 12:08 . 2010-08-05 12:08 133648 ----a-w- c:\windows\system32\VBoxNetFltNotify.dll
2010-08-03 05:28 . 2010-08-03 05:28 -------- d-----w- c:\program files\JRE
2010-08-03 05:27 . 2010-08-03 05:28 -------- d-----w- c:\program files\OpenOffice.org 3
2010-08-03 05:26 . 2010-08-15 22:26 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-08-03 05:26 . 2010-08-16 14:57 -------- d-----w- c:\program files\Java
2010-07-31 12:43 . 2010-08-20 15:12 -------- d-----w- c:\users\makapusa\AppData\Roaming\skypePM
2010-07-31 12:42 . 2010-08-20 17:30 -------- d-----w- c:\users\makapusa\AppData\Roaming\Skype
2010-07-31 12:42 . 2010-07-31 12:42 -------- d-----w- c:\program files\Common Files\Skype
2010-07-31 12:42 . 2010-08-15 20:48 -------- d-----r- c:\program files\Skype
2010-07-31 12:42 . 2010-07-31 12:42 -------- d-----w- c:\programdata\Skype
2010-07-28 09:12 . 2010-08-04 19:16 -------- d-----w- c:\users\makapusa\AppData\Roaming\vlc
2010-07-28 09:09 . 2010-07-28 09:09 -------- d-----w- c:\program files\VideoLAN
2010-07-28 01:21 . 2008-09-03 03:59 468992 ----a-w- c:\windows\system32\newdev.dll
2010-07-28 01:21 . 2008-09-03 03:58 74752 ----a-w- c:\windows\system32\newdev.exe
2010-07-27 21:33 . 2010-08-19 18:05 -------- d-----w- c:\programdata\Blizzard Entertainment
2010-07-27 20:52 . 2010-07-27 20:52 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-07-27 20:51 . 2010-07-27 20:52 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-07-27 20:51 . 2010-07-27 20:55 -------- d-----w- c:\users\makapusa\AppData\Roaming\DAEMON Tools Lite
2010-07-27 20:51 . 2010-07-27 20:51 -------- d-----w- c:\programdata\DAEMON Tools Lite
2010-07-27 20:41 . 2010-07-27 20:41 -------- d-----w- c:\programdata\WindowsSearch
2010-07-27 20:33 . 2010-07-27 20:33 -------- d-----w- c:\program files\Universal Extractor
2010-07-27 19:38 . 2010-07-27 19:39 -------- d-----w- c:\program files\Common Files\Adobe
2010-07-27 19:37 . 2010-07-27 19:47 -------- d-----w- c:\users\makapusa\AppData\Local\Adobe
2010-07-27 01:00 . 2009-11-08 08:55 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2010-07-27 01:00 . 2009-11-08 08:55 49472 ----a-w- c:\windows\system32\netfxperf.dll
2010-07-27 01:00 . 2009-11-08 08:55 297808 ----a-w- c:\windows\system32\mscoree.dll
2010-07-27 01:00 . 2009-11-08 08:55 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2010-07-27 01:00 . 2009-11-08 08:55 1130824 ----a-w- c:\windows\system32\dfshim.dll
2010-07-27 00:26 . 2010-07-27 00:26 509552 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb9CF.tmp.exe
2010-07-27 00:25 . 2010-07-27 14:30 -------- d-----w- c:\users\makapusa\AppData\Local\Google
2010-07-26 23:07 . 2010-07-27 20:36 -------- d-----w- c:\program files\Google
2010-07-26 22:34 . 2010-07-27 14:27 -------- d-----w- c:\users\makapusa\AppData\Local\BearShare
2010-07-26 22:33 . 2010-07-26 22:33 -------- d-----w- c:\users\makapusa\AppData\Local\PackageAware
2010-07-26 13:22 . 2009-08-24 12:16 378368 ----a-w- c:\windows\system32\winhttp.dll
2010-07-23 01:24 . 2010-02-12 10:48 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-07-23 01:10 . 2008-06-20 01:14 97800 ----a-w- c:\windows\system32\infocardapi.dll
2010-07-23 01:10 . 2008-06-20 01:14 105016 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2010-07-23 01:10 . 2008-06-20 01:14 11264 ----a-w- c:\windows\system32\icardres.dll
2010-07-23 01:10 . 2008-06-20 01:14 622080 ----a-w- c:\windows\system32\icardagt.exe
2010-07-23 01:10 . 2008-06-20 01:14 781344 ----a-w- c:\windows\system32\PresentationNative_v0300.dll
2010-07-23 01:08 . 2010-07-23 01:11 -------- d-----w- c:\users\makapusa\AppData\Roaming\InfraRecorder
2010-07-23 01:08 . 2010-07-23 01:08 -------- d-----w- c:\program files\InfraRecorder
2010-07-23 01:04 . 2008-07-27 18:03 158720 ----a-w- c:\windows\system32\mscorier.dll
2010-07-23 01:04 . 2008-07-27 18:03 83968 ----a-w- c:\windows\system32\mscories.dll
2010-07-23 01:02 . 2010-02-20 23:39 24064 ----a-w- c:\windows\system32\nshhttp.dll
2010-07-23 01:02 . 2010-02-20 23:37 31232 ----a-w- c:\windows\system32\httpapi.dll
2010-07-23 01:02 . 2010-02-20 21:18 411136 ----a-w- c:\windows\system32\drivers\http.sys
2010-07-22 23:45 . 2010-08-19 19:55 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment
2010-07-22 23:45 . 2010-07-22 23:45 -------- d-----w- c:\programdata\Blizzard
2010-07-22 20:22 . 2010-07-22 20:22 -------- d-----w- c:\users\makapusa\AppData\Local\Screamer Radio
2010-07-22 19:53 . 2010-07-22 19:53 -------- d-----w- c:\users\makapusa\AppData\Local\PunkBuster
2010-07-22 19:52 . 2010-07-22 19:52 139152 ----a-w- c:\users\makapusa\AppData\Roaming\PnkBstrK.sys
2010-07-22 19:37 . 2010-07-22 19:45 -------- d-----w- c:\programdata\TrackMania
2010-07-22 18:29 . 2008-06-26 01:45 12240896 ----a-w- c:\windows\system32\NlsLexicons0007.dll
2010-07-22 18:29 . 2008-06-26 01:45 2644480 ----a-w- c:\windows\system32\NlsLexicons0009.dll
2010-07-22 18:29 . 2008-06-26 03:29 801280 ----a-w- c:\windows\system32\NaturalLanguage6.dll
2010-07-22 18:23 . 2009-09-10 17:30 213504 ----a-w- c:\windows\system32\msv1_0.dll
2010-07-22 18:21 . 2010-04-23 13:55 2048 ----a-w- c:\windows\system32\tzres.dll
2010-07-22 18:21 . 2008-06-06 03:27 38912 ----a-w- c:\windows\system32\xolehlp.dll
2010-07-22 18:21 . 2008-06-06 03:27 562176 ----a-w- c:\windows\system32\msdtcprx.dll
2010-07-22 18:21 . 2009-06-10 12:12 160256 ----a-w- c:\windows\system32\wkssvc.dll
2010-07-22 18:21 . 2009-06-04 12:34 2066432 ----a-w- c:\windows\system32\mstscax.dll
2010-07-22 18:20 . 2008-04-18 05:48 269312 ----a-w- c:\windows\system32\es.dll
2010-07-22 18:20 . 2008-06-26 03:29 303616 ----a-w- c:\windows\system32\wmpeffects.dll
2010-07-22 18:20 . 2010-05-26 16:16 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-07-22 18:20 . 2010-05-26 14:25 289792 ----a-w- c:\windows\system32\atmfd.dll
2010-07-22 18:20 . 2009-10-19 14:24 72704 ----a-w- c:\windows\system32\fontsub.dll
2010-07-22 18:20 . 2009-06-15 15:20 10240 ----a-w- c:\windows\system32\dciman32.dll
2010-07-22 18:20 . 2009-04-23 12:42 636928 ----a-w- c:\windows\system32\localspl.dll
2010-07-22 18:20 . 2008-10-29 06:29 2927104 ----a-w- c:\windows\explorer.exe
2010-07-22 18:17 . 2010-01-25 08:35 523776 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-07-22 18:17 . 2010-01-25 08:34 511488 ----a-w- c:\windows\system32\RMActivate.exe
2010-07-22 18:17 . 2010-01-25 08:34 347136 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-07-22 18:17 . 2010-01-25 12:48 472576 ----a-w- c:\windows\system32\secproc_isv.dll
2010-07-22 18:17 . 2010-01-25 12:48 472064 ----a-w- c:\windows\system32\secproc.dll
2010-07-22 18:17 . 2010-01-25 08:35 346624 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-07-22 18:17 . 2010-01-25 12:48 151040 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-07-22 18:17 . 2010-01-25 12:48 151040 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-07-22 18:17 . 2010-01-25 12:45 329216 ----a-w- c:\windows\system32\msdrm.dll
2010-07-22 18:17 . 2008-06-23 01:59 996352 ----a-w- c:\windows\system32\WMNetMgr.dll
2010-07-22 18:17 . 2008-06-23 01:58 94720 ----a-w- c:\windows\system32\logagent.exe
2010-07-22 18:16 . 2008-03-08 04:21 1695744 ----a-w- c:\windows\system32\gameux.dll
2010-07-22 18:16 . 2008-05-08 21:59 90112 ----a-w- c:\windows\system32\wshext.dll
2010-07-22 18:16 . 2008-05-08 21:59 180224 ----a-w- c:\windows\system32\scrobj.dll
2010-07-22 18:16 . 2008-05-08 21:59 172032 ----a-w- c:\windows\system32\scrrun.dll
2010-07-22 18:16 . 2008-05-08 21:59 155648 ----a-w- c:\windows\system32\wscript.exe
2010-07-22 18:16 . 2008-05-08 21:58 135168 ----a-w- c:\windows\system32\cscript.exe
2010-07-22 18:16 . 2009-09-04 12:24 61440 ----a-w- c:\windows\system32\msasn1.dll
2010-07-22 18:16 . 2008-10-21 05:25 1645568 ----a-w- c:\windows\system32\connect.dll
2010-07-22 18:16 . 2009-04-23 12:43 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2010-07-22 18:14 . 2009-09-10 15:21 310784 ----a-w- c:\windows\system32\unregmp2.exe
2010-07-22 18:14 . 2009-07-14 12:59 4096 ----a-w- c:\windows\system32\dxmasf.dll
2010-07-22 18:14 . 2009-07-14 12:58 7680 ----a-w- c:\windows\system32\spwmp.dll
2010-07-22 18:14 . 2009-09-10 15:21 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2010-07-22 17:57 . 2010-05-21 12:14 221568 ------w- c:\windows\system32\MpSigStub.exe
2010-07-22 17:55 . 2009-12-23 12:43 171520 ----a-w- c:\windows\system32\wintrust.dll
2010-07-22 17:55 . 2010-01-15 00:04 98304 ----a-w- c:\windows\system32\cabview.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-21 12:36 . 2001-12-31 23:59 -------- d-----w- c:\programdata\NVIDIA
2010-08-21 12:36 . 2002-01-01 00:02 35180 ----a-w- c:\programdata\nvModes.dat
2010-08-20 17:23 . 2002-01-01 00:05 -------- d-----w- c:\users\makapusa\AppData\Roaming\uTorrent
2010-08-13 01:00 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-08-12 10:32 . 2001-12-31 23:54 -------- d-----w- c:\program files\Opera
2010-08-08 17:13 . 2001-12-31 23:53 1356 ----a-w- c:\users\makapusa\AppData\Local\d3d9caps.dat
2010-08-08 17:03 . 2010-08-08 17:03 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
2010-08-08 17:03 . 2010-08-08 13:55 -------- d-----w- c:\programdata\Apple
2010-08-08 16:58 . 2010-08-08 16:57 -------- d-----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-08-08 16:58 . 2010-08-08 16:57 -------- d-----w- c:\program files\iTunes
2010-08-08 16:57 . 2010-08-08 16:57 -------- d-----w- c:\program files\iPod
2010-08-08 16:57 . 2010-08-08 13:55 -------- d-----w- c:\program files\Common Files\Apple
2010-08-08 16:57 . 2010-08-08 13:57 -------- d-----w- c:\programdata\Apple Computer
2010-08-08 16:56 . 2010-08-08 16:56 73000 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.2.1.5\SetupAdmin.exe
2010-08-08 15:40 . 2010-08-08 15:40 1 ----a-w- c:\users\makapusa\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-08-08 15:39 . 2010-08-08 15:39 -------- d-----w- c:\users\makapusa\AppData\Roaming\OpenOffice.org
2010-08-08 13:58 . 2010-08-08 13:57 -------- d-----w- c:\program files\QuickTime
2010-08-08 13:57 . 2010-08-08 13:57 -------- d-----w- c:\program files\Apple Software Update
2010-08-08 13:55 . 2010-08-08 13:55 -------- d-----w- c:\program files\Bonjour
2010-08-03 10:04 . 2001-12-31 23:53 54560 ----a-w- c:\users\makapusa\AppData\Local\GDIPFONTCACHEV1.DAT
2010-07-31 12:43 . 2010-07-31 12:43 56 ---ha-w- c:\programdata\ezsidmv.dat
2010-07-23 02:18 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2010-07-22 18:41 . 2001-12-31 23:59 -------- d-----w- c:\users\makapusa\AppData\Roaming\Digsby
2010-07-22 18:41 . 2001-12-31 23:59 -------- d-----w- c:\programdata\Digsby
2010-06-28 21:57 . 2002-01-01 00:06 38848 ----a-w- c:\windows\avastSS.scr
2010-06-28 21:57 . 2002-01-01 00:06 165032 ----a-w- c:\windows\system32\aswBoot.exe
2010-06-28 21:37 . 2002-01-01 00:07 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-06-28 21:37 . 2002-01-01 00:07 165456 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-06-28 21:33 . 2002-01-01 00:07 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-06-28 21:32 . 2002-01-01 00:07 50256 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-06-28 21:32 . 2002-01-01 00:07 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-06-28 16:17 . 2010-08-12 20:31 833024 ----a-w- c:\windows\system32\wininet.dll
2010-06-28 16:13 . 2010-08-12 20:31 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-06-21 13:18 . 2010-08-12 20:31 2036736 ----a-w- c:\windows\system32\win32k.sys
2010-06-18 16:43 . 2010-08-12 20:31 36352 ----a-w- c:\windows\system32\rtutils.dll
2010-06-18 14:43 . 2010-08-12 20:31 302080 ----a-w- c:\windows\system32\drivers\srv.sys
2010-06-18 14:43 . 2010-08-12 20:31 144896 ----a-w- c:\windows\system32\drivers\srv2.sys
2010-06-11 15:31 . 2010-08-12 20:31 274432 ----a-w- c:\windows\system32\schannel.dll
2010-06-11 15:30 . 2010-08-12 20:31 1257472 ----a-w- c:\windows\system32\msxml3.dll
2010-05-27 19:16 . 2010-08-12 20:31 81920 ----a-w- c:\windows\system32\iccvid.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2002-01-01 327472]
"Steam"="d:\games\Steam\Steam.exe" [2010-07-22 1238352]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-05-13 26192168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-06-28 2837864]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-18 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-07-21 141608]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-07-13 47904]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

c:\users\makapusa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Digsby.lnk - c:\users\makapusa\AppData\Local\Digsby\App\digsby.exe [2010-3-3 141488]
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-07-27 135664]
R3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys [2010-03-10 24216]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2010-07-27 691696]
S1 aswSP;aswSP; [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2010-08-05 143184]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2010-08-05 41936]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-06-28 50256]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2009-09-27 240232]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2009-08-21 66592]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2010-08-05 100496]
S3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [2010-08-05 111312]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
.
Contents of the 'Scheduled Tasks' folder

2010-08-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-27 00:34]

2010-08-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-27 00:34]
.
.
------- Supplementary Scan -------
.
uInternet Settings,ProxyOverride = *.local
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
.
- - - - ORPHANS REMOVED - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKCU-Run-Windows Update System - c:\users\makapusa\AppData\Roaming\hidserv.exe
HKLM-Run-WinSys2 - c:\windows\system32\winsys2.exe
HKLM-Run-Windows Update System - c:\users\makapusa\AppData\Roaming\hidserv.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-21 14:45
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2010-08-21 14:47:49
ComboFix-quarantined-files.txt 2010-08-21 12:47

Pre-Run: 94,349,324,288 bytes free
Post-Run: 94,360,342,528 bytes free

Current=1 Default=1 Failed=0 LastKnownGood=10 Sets=1,2,3,4,5,6,7,8,9,10
- - End Of File - - 63E539B1CF0B8306629DA54390D75249

[motji]

Jak to vypadá s počítačem?



Otestujte na www.virustotal.com

c:\windows\system32\DRIVERS\ivusb.sys


-Do okénka zkopírujte cestu k souboru , pokud napíše, že soubor byl už testován, dejte otestovat znovu.
-Sem vložte link s výsledky.

[NeoFan]

avast uz nic nehlasi....

Kód: Vybrat vše

http://www.virustotal.com/file-scan/report.html?id=403ddfff5a9a671a20ac5b81639b5fa4b613fc5e38730afdb2176458f121f7a3-1282483285

[motji]

Ještě zapojte všechny flešky a pod

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

FixCSet::

Dirlook::
C:\cygwin

Folder::
F:\AEXRGYH

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

[NeoFan]

Log som radsej dal na uloz.to kvoli velkosti... nezmestil sa

Kód: Vybrat vše

http://uloz.to/5670087/log.txt
http://uloz.to/5670089/combofix.txt

[motji]

MOhl by jste mi je sem prosím vložit, kvůli přehlednosti?
jak to vypadá s počítačem?

[NeoFan]

bohuzial nepojde to.... "Vaše zpráva obsahuje 466000 znaků. Maximální povolený počet znaků je 60000."

[motji]

Dobře, já to projdu tak

[motji]

Dejte soubor otestovat na http://www.virustotal.com

c:\windows\system32\wininit.exe
c:\windows\system32\newdev.dll
c:\windows\system32\newdev.exe
c:\cygwin\bin\bash.exe.stackdump


-Na virustotalu dáte procházet, a do spodního okénka nakopírujete přímo cestu k souboru a dáte odeslat
-z prohlížeče zkopírujete adresu ke stránce s výsledky
-pokud se Vás zeptá, dejte soubor otestovat znovu, tak aby to byl soubor z Vašeho počítače

[NeoFan]

http://www.virustotal.com/file-scan/rep ... 1282779800

http://www.virustotal.com/file-scan/rep ... 1282779852

http://www.virustotal.com/file-scan/rep ... 1282779891

http://www.virustotal.com/file-scan/rep ... 1282779969