Nějak zlobí pc
Napsal: 31 říj 2010 14:02
Můžete mi mrknout na log ? Díkes
Logfile of random's system information tool 1.08 (written by random/random)
Run by Michal at 2010-10-31 12:46:13
Microsoft® Windows Vista™ Home Basic
System drive C: has 23 GB (20%) free of 114 GB
Total RAM: 3002 MB (50% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:46:25, on 31.10.2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16982)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\Multimedia Mouse Driver\v5\KMConfig.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Users\Michal\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Program Files\Multimedia Mouse Driver\v5\KMProcess.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\conime.exe
C:\Program Files\SpacialAudio\SAMBC\SAMBC.exe
C:\Program Files\ICQ7.2\ICQ.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Michal\Downloads\RSIT (1).exe
C:\Program Files\trend micro\Michal.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:25488
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = plimus.com,www.plimus.com,regnow.com,www.regnow.com,
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [PrzyspieszKomputer] "C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe"
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [KMConfig] "C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe" KMConfig.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: 20Dollars2Surf.lnk = C:\Program Files\20Dollars2Surf\20dollars2surf.exe
O4 - Global Startup: Pinnacle Streaming Server.lnk = C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Michal\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - Firebird Project - C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - Firebird Project - C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe
O23 - Service: mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit (mi-raysat_3dsmax2010_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe
O23 - Service: RaySat_3dsmax8 Server (mi-raysat_3dsmax8) - Unknown owner - C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: Stardock WindowBlinds (WindowBlinds) - Stardock Corporation - C:\Program Files\Stardock\MyColors\VistaSrv.exe
--
End of file - 8887 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Norton Security Scan for Michal.job
C:\Windows\tasks\PCConfidential.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2010-07-28 325408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-28 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2010-07-30 1006264]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-06-03 1144104]
"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2010-09-15 1094224]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
"PrzyspieszKomputer"=C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe [2010-08-15 890104]
"amd_dc_opt"=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-10 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-10 175128]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-10 153624]
"KMConfig"=C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe [2007-03-06 212992]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-07-30 1232896]
"Google Update"=C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-09-02 13351304]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-09-16 328568]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe [2009-03-28 3325952]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
20Dollars2Surf.lnk - C:\Program Files\20Dollars2Surf\20dollars2surf.exe
Pinnacle Streaming Server.lnk - C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-10 215040]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2010-10-31 10:03:36 ----D---- C:\Program Files\SpacialAudio
2010-10-31 10:03:25 ----A---- C:\Windows\system32\GDS32.DLL
2010-10-31 10:02:07 ----D---- C:\Program Files\Firebird
2010-10-31 09:54:21 ----D---- C:\Program Files\VirtualDJ
2010-10-28 22:00:15 ----D---- C:\rsit
2010-10-28 21:54:03 ----D---- C:\Program Files\CCleaner
2010-10-28 20:46:35 ----HD---- C:\Windows\PIF
2010-10-28 16:51:20 ----SHD---- C:\$RECYCLE.BIN
2010-10-28 16:51:16 ----D---- C:\Windows\temp
2010-10-28 16:51:14 ----A---- C:\ComboFix.txt
2010-10-28 10:52:08 ----D---- C:\Users\Michal\AppData\Roaming\Malwarebytes
2010-10-28 10:52:01 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2010-10-28 10:51:59 ----D---- C:\ProgramData\Malwarebytes
2010-10-28 10:51:59 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-10-28 10:51:59 ----A---- C:\Windows\system32\drivers\mbam.sys
2010-10-27 22:25:05 ----D---- C:\Windows\ERDNT
2010-10-27 21:49:03 ----D---- C:\Program Files\trend micro
2010-10-27 19:44:46 ----D---- C:\Program Files\CamStudio
2010-10-27 10:47:50 ----D---- C:\Program Files\Winamp Detect
2010-10-27 10:47:20 ----D---- C:\Users\Michal\AppData\Roaming\Winamp
2010-10-27 10:47:20 ----D---- C:\Program Files\Winamp
2010-10-26 11:27:00 ----D---- C:\Program Files\ICQ6.5
2010-10-26 11:16:31 ----D---- C:\Program Files\ICQ7.2
2010-10-25 21:13:14 ----D---- C:\Program Files\CPUID
2010-10-25 21:13:14 ----A---- C:\Windows\system32\drivers\cpuz132_x32.sys
2010-10-24 21:56:00 ----D---- C:\Program Files\TED Notepad
2010-10-24 19:09:38 ----D---- C:\Users\Michal\AppData\Roaming\dvdcss
2010-10-24 19:07:03 ----D---- C:\Users\Michal\AppData\Roaming\vlc
2010-10-24 19:05:48 ----D---- C:\Program Files\VideoLAN
2010-10-24 17:39:25 ----A---- C:\Windows\system32\drivers\Ltn_stk7070P.sys
2010-10-24 17:37:34 ----D---- C:\Program Files\MSXML 4.0
2010-10-24 17:36:20 ----N---- C:\Windows\system32\MASE32.DLL
2010-10-24 17:36:20 ----N---- C:\Windows\system32\MASD32.DLL
2010-10-24 17:36:19 ----N---- C:\Windows\system32\MAMC32.DLL
2010-10-24 17:36:19 ----N---- C:\Windows\system32\MACD32.DLL
2010-10-24 17:36:19 ----N---- C:\Windows\system32\MA32.DLL
2010-10-24 17:35:52 ----N---- C:\Windows\system32\MSVCRTD.DLL
2010-10-24 17:35:52 ----N---- C:\Windows\system32\msvcr71d.dll
2010-10-24 17:35:51 ----N---- C:\Windows\system32\msvcr70d.dll
2010-10-24 17:35:51 ----N---- C:\Windows\system32\msvcp71d.dll
2010-10-24 17:35:51 ----N---- C:\Windows\system32\msvcp70d.dll
2010-10-24 17:35:51 ----N---- C:\Windows\system32\mfc71d.dll
2010-10-24 17:35:51 ----N---- C:\Windows\system32\HHActiveX.dll
2010-10-24 17:35:50 ----A---- C:\Windows\system32\DivXEncSettings.txt
2010-10-24 17:35:38 ----N---- C:\Windows\system32\MFC71u.dll
2010-10-24 17:35:38 ----N---- C:\Windows\system32\MFC71.dll
2010-10-24 17:35:37 ----N---- C:\Windows\system32\msvcr80.dll
2010-10-24 17:35:37 ----N---- C:\Windows\system32\msvcp80.dll
2010-10-24 17:35:37 ----N---- C:\Windows\system32\atl71.dll
2010-10-24 17:35:36 ----D---- C:\Program Files\Pinnacle
2010-10-24 17:29:43 ----D---- C:\ProgramData\Pinnacle
2010-10-24 17:03:48 ----D---- C:\Program Files\Multimedia Mouse Driver
2010-10-24 05:46:47 ----D---- C:\ProgramData\Electronic Arts
2010-10-22 13:05:11 ----A---- C:\Windows\system32\vp6vfw.dll
2010-10-22 13:04:55 ----D---- C:\Program Files\Microsoft WSE
2010-10-22 12:45:04 ----D---- C:\Program Files\Electronic Arts
2010-10-18 15:51:19 ----D---- C:\Users\Michal\AppData\Roaming\OpenOffice.org
2010-10-18 15:47:06 ----D---- C:\Program Files\OpenOffice.org 3
2010-10-15 06:06:26 ----D---- C:\Users\Michal\AppData\Roaming\PSpad
2010-10-15 06:06:00 ----D---- C:\Program Files\PSPad editor
2010-10-15 05:40:52 ----D---- C:\Program Files\SoftMaker Viewer
2010-10-15 05:40:52 ----A---- C:\Windows\unTMV.exe
2010-10-15 05:39:24 ----D---- C:\Program Files\Doc Convertor
2010-10-12 16:38:47 ----D---- C:\Users\Michal\AppData\Roaming\TuxPaint
2010-10-12 16:38:34 ----D---- C:\Program Files\TuxPaint
2010-10-12 14:19:14 ----D---- C:\Program Files\Altar Games
2010-10-12 14:14:55 ----D---- C:\Program Files\ABCgames Cheater
2010-10-11 15:24:22 ----D---- C:\Program Files\Scorpions WinCheater
2010-10-11 15:19:57 ----D---- C:\Program Files\1C
2010-10-09 20:46:17 ----D---- C:\Program Files\Google
2010-10-07 08:08:04 ----D---- C:\Program Files\Share Rapid Uploader
======List of files/folders modified in the last 1 months======
2010-10-31 11:58:57 ----D---- C:\Program Files\Mozilla Firefox
2010-10-31 11:55:13 ----D---- C:\Users\Michal\AppData\Roaming\ICQ
2010-10-31 10:53:38 ----SHD---- C:\Windows\Installer
2010-10-31 10:11:49 ----SHD---- C:\System Volume Information
2010-10-31 10:05:16 ----D---- C:\Users\Michal\AppData\Roaming\Skype
2010-10-31 10:03:36 ----D---- C:\Program Files
2010-10-31 10:03:26 ----D---- C:\Windows\System32
2010-10-31 10:03:19 ----D---- C:\Windows\winsxs
2010-10-31 09:54:39 ----RSD---- C:\Windows\Fonts
2010-10-31 09:54:39 ----D---- C:\Windows\inf
2010-10-31 09:54:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-31 09:51:30 ----D---- C:\Users\Michal\AppData\Roaming\uTorrent
2010-10-31 09:51:06 ----D---- C:\Users\Michal\AppData\Roaming\skypePM
2010-10-31 08:35:33 ----D---- C:\Program Files\MSECache
2010-10-30 17:49:33 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-10-28 22:24:35 ----HD---- C:\Program Files\iSafe AllInOne Keylogger
2010-10-28 21:56:01 ----D---- C:\Windows\Debug
2010-10-28 21:56:01 ----D---- C:\Windows
2010-10-28 21:47:07 ----D---- C:\Windows\Tasks
2010-10-28 21:13:34 ----D---- C:\Program Files\Common Files
2010-10-28 16:49:30 ----A---- C:\Windows\system.ini
2010-10-28 16:49:22 ----D---- C:\Windows\system32\drivers\etc
2010-10-28 16:48:41 ----D---- C:\ProgramData
2010-10-28 16:45:43 ----D---- C:\Windows\system32\drivers
2010-10-28 16:45:43 ----D---- C:\Windows\AppPatch
2010-10-27 21:04:51 ----D---- C:\Games
2010-10-27 20:38:25 ----D---- C:\Program Files\ICQ6Toolbar
2010-10-27 16:32:19 ----D---- C:\Users\Michal\AppData\Roaming\FileZilla
2010-10-27 11:21:07 ----D---- C:\Users\Michal\AppData\Roaming\TeamViewer
2010-10-26 11:49:01 ----D---- C:\Users\Michal\AppData\Roaming\Adobe
2010-10-26 11:30:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-10-26 11:30:16 ----D---- C:\ProgramData\ICQ
2010-10-25 13:58:26 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-10-24 18:56:48 ----D---- C:\Windows\Prefetch
2010-10-24 18:56:46 ----D---- C:\Program Files\AVS4YOU
2010-10-24 18:46:55 ----D---- C:\Windows\system32\catroot
2010-10-24 17:36:20 ----A---- C:\Windows\win.ini
2010-10-24 17:35:14 ----D---- C:\ProgramData\Adobe
2010-10-24 17:34:33 ----D---- C:\Program Files\Common Files\Adobe
2010-10-24 17:34:14 ----D---- C:\Program Files\Adobe
2010-10-24 12:15:33 ----D---- C:\.mpr_file_store_32
2010-10-22 13:05:10 ----SD---- C:\Users\Michal\AppData\Roaming\Microsoft
2010-10-22 13:05:10 ----RSD---- C:\Windows\assembly
2010-10-22 11:54:10 ----D---- C:\Windows\system32\WDI
2010-10-22 04:59:13 ----D---- C:\Windows\system32\catroot2
2010-10-19 21:51:33 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-15 08:47:55 ----D---- C:\.file_store_32
2010-10-14 13:55:32 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2010-10-13 22:56:27 ----A---- C:\Windows\system32\mrt.exe
2010-10-13 15:41:51 ----D---- C:\Program Files\Microsoft Security Essentials
2010-10-09 20:46:28 ----D---- C:\Windows\system32\Tasks
2010-10-07 12:56:59 ----D---- C:\Fraps
2010-10-02 09:37:03 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-10-02 09:37:01 ----A---- C:\Windows\system32\pbsvc.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 151216]
R2 cpuz132;cpuz132; \??\C:\Windows\system32\drivers\cpuz132_x32.sys [2009-03-27 12672]
R3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-01-09 1093120]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2010-07-30 19456]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2006-11-02 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2010-07-30 29184]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-10 4744704]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2006-11-02 49664]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-12-23 138240]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2006-11-02 132352]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2010-07-30 220160]
S3 catchme;catchme; \??\C:\Users\Michal\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\ialmnt5.sys [2006-11-02 1302492]
S3 Ltn_stk7070P;PCTV based TV tuner device; C:\Windows\system32\DRIVERS\Ltn_stk7070P.sys [2007-06-14 466048]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 Ph3xIB32;Philips 713x Inbox PCI TV Card; C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2007-04-03 1131136]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2010-08-13 72704]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2006-11-02 22016]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe [2009-07-22 81920]
R2 KMWDSERVICE;Keyboard And Mouse Communication Service; C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe [2007-05-08 2179072]
R2 mi-raysat_3dsmax2010_32;mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit; C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe [2009-03-12 86016]
R2 mi-raysat_3dsmax8;RaySat_3dsmax8 Server; C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe [2005-09-21 65536]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17904]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-10-02 75064]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-09-24 1960744]
R2 WindowBlinds;Stardock WindowBlinds; C:\Program Files\Stardock\MyColors\VistaSrv.exe [2009-06-09 230704]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe [2009-07-22 2736128]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-26 651720]
-----------------EOF-----------------
Logfile of random's system information tool 1.08 (written by random/random)
Run by Michal at 2010-10-31 12:46:13
Microsoft® Windows Vista™ Home Basic
System drive C: has 23 GB (20%) free of 114 GB
Total RAM: 3002 MB (50% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:46:25, on 31.10.2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16982)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\Multimedia Mouse Driver\v5\KMConfig.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Users\Michal\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Program Files\Multimedia Mouse Driver\v5\KMProcess.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\conime.exe
C:\Program Files\SpacialAudio\SAMBC\SAMBC.exe
C:\Program Files\ICQ7.2\ICQ.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Michal\Downloads\RSIT (1).exe
C:\Program Files\trend micro\Michal.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:25488
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = plimus.com,www.plimus.com,regnow.com,www.regnow.com,
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [PrzyspieszKomputer] "C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe"
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [KMConfig] "C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe" KMConfig.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: 20Dollars2Surf.lnk = C:\Program Files\20Dollars2Surf\20dollars2surf.exe
O4 - Global Startup: Pinnacle Streaming Server.lnk = C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Michal\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - Firebird Project - C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - Firebird Project - C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe
O23 - Service: mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit (mi-raysat_3dsmax2010_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe
O23 - Service: RaySat_3dsmax8 Server (mi-raysat_3dsmax8) - Unknown owner - C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: Stardock WindowBlinds (WindowBlinds) - Stardock Corporation - C:\Program Files\Stardock\MyColors\VistaSrv.exe
--
End of file - 8887 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Norton Security Scan for Michal.job
C:\Windows\tasks\PCConfidential.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2010-07-28 325408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-28 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2010-07-30 1006264]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-06-03 1144104]
"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2010-09-15 1094224]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
"PrzyspieszKomputer"=C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe [2010-08-15 890104]
"amd_dc_opt"=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-10 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-10 175128]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-10 153624]
"KMConfig"=C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe [2007-03-06 212992]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-07-30 1232896]
"Google Update"=C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-09-02 13351304]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-09-16 328568]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe [2009-03-28 3325952]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
20Dollars2Surf.lnk - C:\Program Files\20Dollars2Surf\20dollars2surf.exe
Pinnacle Streaming Server.lnk - C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-10 215040]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2010-10-31 10:03:36 ----D---- C:\Program Files\SpacialAudio
2010-10-31 10:03:25 ----A---- C:\Windows\system32\GDS32.DLL
2010-10-31 10:02:07 ----D---- C:\Program Files\Firebird
2010-10-31 09:54:21 ----D---- C:\Program Files\VirtualDJ
2010-10-28 22:00:15 ----D---- C:\rsit
2010-10-28 21:54:03 ----D---- C:\Program Files\CCleaner
2010-10-28 20:46:35 ----HD---- C:\Windows\PIF
2010-10-28 16:51:20 ----SHD---- C:\$RECYCLE.BIN
2010-10-28 16:51:16 ----D---- C:\Windows\temp
2010-10-28 16:51:14 ----A---- C:\ComboFix.txt
2010-10-28 10:52:08 ----D---- C:\Users\Michal\AppData\Roaming\Malwarebytes
2010-10-28 10:52:01 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2010-10-28 10:51:59 ----D---- C:\ProgramData\Malwarebytes
2010-10-28 10:51:59 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-10-28 10:51:59 ----A---- C:\Windows\system32\drivers\mbam.sys
2010-10-27 22:25:05 ----D---- C:\Windows\ERDNT
2010-10-27 21:49:03 ----D---- C:\Program Files\trend micro
2010-10-27 19:44:46 ----D---- C:\Program Files\CamStudio
2010-10-27 10:47:50 ----D---- C:\Program Files\Winamp Detect
2010-10-27 10:47:20 ----D---- C:\Users\Michal\AppData\Roaming\Winamp
2010-10-27 10:47:20 ----D---- C:\Program Files\Winamp
2010-10-26 11:27:00 ----D---- C:\Program Files\ICQ6.5
2010-10-26 11:16:31 ----D---- C:\Program Files\ICQ7.2
2010-10-25 21:13:14 ----D---- C:\Program Files\CPUID
2010-10-25 21:13:14 ----A---- C:\Windows\system32\drivers\cpuz132_x32.sys
2010-10-24 21:56:00 ----D---- C:\Program Files\TED Notepad
2010-10-24 19:09:38 ----D---- C:\Users\Michal\AppData\Roaming\dvdcss
2010-10-24 19:07:03 ----D---- C:\Users\Michal\AppData\Roaming\vlc
2010-10-24 19:05:48 ----D---- C:\Program Files\VideoLAN
2010-10-24 17:39:25 ----A---- C:\Windows\system32\drivers\Ltn_stk7070P.sys
2010-10-24 17:37:34 ----D---- C:\Program Files\MSXML 4.0
2010-10-24 17:36:20 ----N---- C:\Windows\system32\MASE32.DLL
2010-10-24 17:36:20 ----N---- C:\Windows\system32\MASD32.DLL
2010-10-24 17:36:19 ----N---- C:\Windows\system32\MAMC32.DLL
2010-10-24 17:36:19 ----N---- C:\Windows\system32\MACD32.DLL
2010-10-24 17:36:19 ----N---- C:\Windows\system32\MA32.DLL
2010-10-24 17:35:52 ----N---- C:\Windows\system32\MSVCRTD.DLL
2010-10-24 17:35:52 ----N---- C:\Windows\system32\msvcr71d.dll
2010-10-24 17:35:51 ----N---- C:\Windows\system32\msvcr70d.dll
2010-10-24 17:35:51 ----N---- C:\Windows\system32\msvcp71d.dll
2010-10-24 17:35:51 ----N---- C:\Windows\system32\msvcp70d.dll
2010-10-24 17:35:51 ----N---- C:\Windows\system32\mfc71d.dll
2010-10-24 17:35:51 ----N---- C:\Windows\system32\HHActiveX.dll
2010-10-24 17:35:50 ----A---- C:\Windows\system32\DivXEncSettings.txt
2010-10-24 17:35:38 ----N---- C:\Windows\system32\MFC71u.dll
2010-10-24 17:35:38 ----N---- C:\Windows\system32\MFC71.dll
2010-10-24 17:35:37 ----N---- C:\Windows\system32\msvcr80.dll
2010-10-24 17:35:37 ----N---- C:\Windows\system32\msvcp80.dll
2010-10-24 17:35:37 ----N---- C:\Windows\system32\atl71.dll
2010-10-24 17:35:36 ----D---- C:\Program Files\Pinnacle
2010-10-24 17:29:43 ----D---- C:\ProgramData\Pinnacle
2010-10-24 17:03:48 ----D---- C:\Program Files\Multimedia Mouse Driver
2010-10-24 05:46:47 ----D---- C:\ProgramData\Electronic Arts
2010-10-22 13:05:11 ----A---- C:\Windows\system32\vp6vfw.dll
2010-10-22 13:04:55 ----D---- C:\Program Files\Microsoft WSE
2010-10-22 12:45:04 ----D---- C:\Program Files\Electronic Arts
2010-10-18 15:51:19 ----D---- C:\Users\Michal\AppData\Roaming\OpenOffice.org
2010-10-18 15:47:06 ----D---- C:\Program Files\OpenOffice.org 3
2010-10-15 06:06:26 ----D---- C:\Users\Michal\AppData\Roaming\PSpad
2010-10-15 06:06:00 ----D---- C:\Program Files\PSPad editor
2010-10-15 05:40:52 ----D---- C:\Program Files\SoftMaker Viewer
2010-10-15 05:40:52 ----A---- C:\Windows\unTMV.exe
2010-10-15 05:39:24 ----D---- C:\Program Files\Doc Convertor
2010-10-12 16:38:47 ----D---- C:\Users\Michal\AppData\Roaming\TuxPaint
2010-10-12 16:38:34 ----D---- C:\Program Files\TuxPaint
2010-10-12 14:19:14 ----D---- C:\Program Files\Altar Games
2010-10-12 14:14:55 ----D---- C:\Program Files\ABCgames Cheater
2010-10-11 15:24:22 ----D---- C:\Program Files\Scorpions WinCheater
2010-10-11 15:19:57 ----D---- C:\Program Files\1C
2010-10-09 20:46:17 ----D---- C:\Program Files\Google
2010-10-07 08:08:04 ----D---- C:\Program Files\Share Rapid Uploader
======List of files/folders modified in the last 1 months======
2010-10-31 11:58:57 ----D---- C:\Program Files\Mozilla Firefox
2010-10-31 11:55:13 ----D---- C:\Users\Michal\AppData\Roaming\ICQ
2010-10-31 10:53:38 ----SHD---- C:\Windows\Installer
2010-10-31 10:11:49 ----SHD---- C:\System Volume Information
2010-10-31 10:05:16 ----D---- C:\Users\Michal\AppData\Roaming\Skype
2010-10-31 10:03:36 ----D---- C:\Program Files
2010-10-31 10:03:26 ----D---- C:\Windows\System32
2010-10-31 10:03:19 ----D---- C:\Windows\winsxs
2010-10-31 09:54:39 ----RSD---- C:\Windows\Fonts
2010-10-31 09:54:39 ----D---- C:\Windows\inf
2010-10-31 09:54:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-31 09:51:30 ----D---- C:\Users\Michal\AppData\Roaming\uTorrent
2010-10-31 09:51:06 ----D---- C:\Users\Michal\AppData\Roaming\skypePM
2010-10-31 08:35:33 ----D---- C:\Program Files\MSECache
2010-10-30 17:49:33 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-10-28 22:24:35 ----HD---- C:\Program Files\iSafe AllInOne Keylogger
2010-10-28 21:56:01 ----D---- C:\Windows\Debug
2010-10-28 21:56:01 ----D---- C:\Windows
2010-10-28 21:47:07 ----D---- C:\Windows\Tasks
2010-10-28 21:13:34 ----D---- C:\Program Files\Common Files
2010-10-28 16:49:30 ----A---- C:\Windows\system.ini
2010-10-28 16:49:22 ----D---- C:\Windows\system32\drivers\etc
2010-10-28 16:48:41 ----D---- C:\ProgramData
2010-10-28 16:45:43 ----D---- C:\Windows\system32\drivers
2010-10-28 16:45:43 ----D---- C:\Windows\AppPatch
2010-10-27 21:04:51 ----D---- C:\Games
2010-10-27 20:38:25 ----D---- C:\Program Files\ICQ6Toolbar
2010-10-27 16:32:19 ----D---- C:\Users\Michal\AppData\Roaming\FileZilla
2010-10-27 11:21:07 ----D---- C:\Users\Michal\AppData\Roaming\TeamViewer
2010-10-26 11:49:01 ----D---- C:\Users\Michal\AppData\Roaming\Adobe
2010-10-26 11:30:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-10-26 11:30:16 ----D---- C:\ProgramData\ICQ
2010-10-25 13:58:26 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-10-24 18:56:48 ----D---- C:\Windows\Prefetch
2010-10-24 18:56:46 ----D---- C:\Program Files\AVS4YOU
2010-10-24 18:46:55 ----D---- C:\Windows\system32\catroot
2010-10-24 17:36:20 ----A---- C:\Windows\win.ini
2010-10-24 17:35:14 ----D---- C:\ProgramData\Adobe
2010-10-24 17:34:33 ----D---- C:\Program Files\Common Files\Adobe
2010-10-24 17:34:14 ----D---- C:\Program Files\Adobe
2010-10-24 12:15:33 ----D---- C:\.mpr_file_store_32
2010-10-22 13:05:10 ----SD---- C:\Users\Michal\AppData\Roaming\Microsoft
2010-10-22 13:05:10 ----RSD---- C:\Windows\assembly
2010-10-22 11:54:10 ----D---- C:\Windows\system32\WDI
2010-10-22 04:59:13 ----D---- C:\Windows\system32\catroot2
2010-10-19 21:51:33 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-15 08:47:55 ----D---- C:\.file_store_32
2010-10-14 13:55:32 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2010-10-13 22:56:27 ----A---- C:\Windows\system32\mrt.exe
2010-10-13 15:41:51 ----D---- C:\Program Files\Microsoft Security Essentials
2010-10-09 20:46:28 ----D---- C:\Windows\system32\Tasks
2010-10-07 12:56:59 ----D---- C:\Fraps
2010-10-02 09:37:03 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-10-02 09:37:01 ----A---- C:\Windows\system32\pbsvc.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 151216]
R2 cpuz132;cpuz132; \??\C:\Windows\system32\drivers\cpuz132_x32.sys [2009-03-27 12672]
R3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-01-09 1093120]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2010-07-30 19456]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2006-11-02 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2010-07-30 29184]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-10 4744704]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2006-11-02 49664]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-12-23 138240]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2006-11-02 132352]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2010-07-30 220160]
S3 catchme;catchme; \??\C:\Users\Michal\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\ialmnt5.sys [2006-11-02 1302492]
S3 Ltn_stk7070P;PCTV based TV tuner device; C:\Windows\system32\DRIVERS\Ltn_stk7070P.sys [2007-06-14 466048]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 Ph3xIB32;Philips 713x Inbox PCI TV Card; C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2007-04-03 1131136]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2010-08-13 72704]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2006-11-02 22016]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe [2009-07-22 81920]
R2 KMWDSERVICE;Keyboard And Mouse Communication Service; C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe [2007-05-08 2179072]
R2 mi-raysat_3dsmax2010_32;mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit; C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe [2009-03-12 86016]
R2 mi-raysat_3dsmax8;RaySat_3dsmax8 Server; C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe [2005-09-21 65536]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17904]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-10-02 75064]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-09-24 1960744]
R2 WindowBlinds;Stardock WindowBlinds; C:\Program Files\Stardock\MyColors\VistaSrv.exe [2009-06-09 230704]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe [2009-07-22 2736128]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-26 651720]
-----------------EOF-----------------