VIRY.CZ

ogfile of random's system information tool 1.08 (written by random/random)
Run by hp at 2010-11-14 22:24:06
Microsoft® Windows Vista™ Home Basic Service Pack 2
System drive C: has 149 GB (65%) free of 230 GB
Total RAM: 1978 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:25:09, on 14.11.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\ICQ7.0\ICQ.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\hp\Downloads\RSIT.exe
C:\Program Files\trend micro\hp.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.seznam.cz/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... io&pf=cnnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... io&pf=cnnb
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = IE 4.01 (Microsoft Internet Explorer)
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {339a0dff-d9af-439b-92bc-636220fb3dae} - C:\Program Files\SmileyCentralIE_1w\bar\1.bin\1wSrcAs.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: TBSB02843 - {22E4A387-EBFC-442B-B46A-4E7957176FE0} - C:\Program Files\Facicons\tbcore3.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Toolbar BHO - {55cde9e7-696c-47c4-8e21-7210b8aeb103} - C:\PROGRA~1\SMILEY~3\bar\1.bin\1wbar.dll
O2 - BHO: Search Assistant BHO - {5ed22e89-62fa-47ec-bd8d-374d849d436c} - C:\Program Files\SmileyCentralIE_1w\bar\1.bin\1wSrcAs.dll
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Facicons - {7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149} - C:\Program Files\Facicons\tbcore3.dll
O3 - Toolbar: SmileyCentral - {d3ca5551-fc2e-4d09-8ece-263607acf9fc} - C:\Program Files\SmileyCentralIE_1w\bar\1.bin\1wbar.dll
O3 - Toolbar: CrowdStar Gamebar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.0\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\Windows\System32\bgsvcgen.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Program Files\SMINST\BLService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: SmileyCentral Service (SmileyCentral_1vService) - SmileyCentral - C:\PROGRA~1\SMILEY~2\bar\1.bin\1vbarsvc.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 9053 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2010-09-22 61888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22E4A387-EBFC-442B-B46A-4E7957176FE0}]
TBSB02843 Class - C:\Program Files\Facicons\tbcore3.dll [2010-06-18 2604032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-11-12 382720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{55cde9e7-696c-47c4-8e21-7210b8aeb103}]
Toolbar BHO - C:\PROGRA~1\SMILEY~3\bar\1.bin\1wbar.dll [2010-10-21 675840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5ed22e89-62fa-47ec-bd8d-374d849d436c}]
Search Assistant BHO - C:\Program Files\SmileyCentralIE_1w\bar\1.bin\1wSrcAs.dll [2010-10-21 53248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7C554162-8CB7-45A4-B8F4-8EA1C75885F9}]
AOL Toolbar BHO - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll [2008-07-02 1185120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
CrowdStar Gamebar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-09-28 1400712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-09-15 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{DE9C389F-3316-41A7-809B-AA305ED9D922} - AOL Toolbar - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll [2008-07-02 1185120]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-04-12 1018616]
{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149} - Facicons - C:\Program Files\Facicons\tbcore3.dll [2010-06-18 2604032]
{d3ca5551-fc2e-4d09-8ece-263607acf9fc} - SmileyCentral - C:\Program Files\SmileyCentralIE_1w\bar\1.bin\1wbar.dll [2010-10-21 675840]
{D4027C7F-154A-4066-A1AD-4243D8127440} - CrowdStar Gamebar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-09-28 1400712]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-04-17 1049896]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2008-08-01 202032]
""= []
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2008-04-15 488752]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2008-09-23 468264]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-08-12 2215064]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-09-02 13351304]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]
"ICQ"=C:\Program Files\ICQ7.0\ICQ.exe [2010-10-27 133432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-08-25 228864]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-11-14 22:24:08 ----D---- C:\Program Files\trend micro
2010-11-14 22:24:06 ----D---- C:\rsit
2010-11-14 00:05:14 ----D---- C:\ProgramData\ESET
2010-11-13 21:03:07 ----D---- C:\Program Files\ESET
2010-11-13 19:35:18 ----D---- C:\Program Files\Internet Explorer
2010-11-12 19:15:22 ----D---- C:\Program Files\Common Files\xing shared
2010-11-11 19:24:21 ----A---- C:\Windows\system32\TURegOpt.exe
2010-11-11 19:24:16 ----A---- C:\Windows\system32\uxtuneup.dll
2010-11-11 19:24:16 ----A---- C:\Windows\system32\authuitu.dll
2010-11-11 19:23:21 ----D---- C:\Program Files\TuneUp Utilities 2011
2010-11-11 19:21:24 ----SHD---- C:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2010-11-10 15:40:47 ----A---- C:\Windows\system32\rmoc3260.dll
2010-11-10 15:40:19 ----A---- C:\Windows\system32\pndx5032.dll
2010-11-10 15:40:19 ----A---- C:\Windows\system32\pndx5016.dll
2010-11-10 15:40:17 ----A---- C:\Windows\system32\pncrt.dll
2010-11-10 15:40:08 ----A---- C:\Windows\system32\msvcr71.dll
2010-11-10 15:40:08 ----A---- C:\Windows\system32\msvcp71.dll
2010-11-09 21:29:16 ----D---- C:\Program Files\real
2010-11-07 00:27:10 ----D---- C:\Program Files\GIANTS Software
2010-11-06 23:19:37 ----D---- C:\ebe61b774d99606b281cd3a7
2010-11-05 10:00:55 ----D---- C:\Users\hp\AppData\Roaming\Toolbar4
2010-11-05 10:00:02 ----D---- C:\Windows\system32\IE700
2010-11-05 09:27:50 ----D---- C:\Program Files\Microsoft.NET
2010-11-05 01:19:46 ----HD---- C:\msdownld.tmp
2010-11-05 01:19:35 ----D---- C:\builds
2010-11-05 00:25:09 ----D---- C:\Program Files\Microsoft Silverlight
2010-11-05 00:24:01 ----D---- C:\Windows\system32\WindowsPowerShell
2010-11-05 00:22:23 ----A---- C:\Windows\system32\winrsmgr.dll
2010-11-05 00:22:04 ----A---- C:\Windows\system32\wsmprovhost.exe
2010-11-05 00:22:04 ----A---- C:\Windows\system32\winrshost.exe
2010-11-05 00:22:04 ----A---- C:\Windows\system32\winrs.exe
2010-11-05 00:22:03 ----A---- C:\Windows\system32\wsmplpxy.dll
2010-11-05 00:22:03 ----A---- C:\Windows\system32\winrssrv.dll
2010-11-05 00:22:00 ----A---- C:\Windows\system32\wevtfwd.dll
2010-11-05 00:22:00 ----A---- C:\Windows\system32\wecutil.exe
2010-11-05 00:22:00 ----A---- C:\Windows\system32\wecsvc.dll
2010-11-05 00:22:00 ----A---- C:\Windows\system32\wecapi.dll
2010-11-05 00:21:59 ----A---- C:\Windows\system32\WsmRes.dll
2010-11-05 00:21:59 ----A---- C:\Windows\system32\pwrshplugin.dll
2010-11-05 00:21:53 ----A---- C:\Windows\system32\winrm.vbs
2010-11-05 00:21:50 ----A---- C:\Windows\system32\WsmWmiPl.dll
2010-11-05 00:21:50 ----A---- C:\Windows\system32\WsmAuto.dll
2010-11-05 00:21:49 ----A---- C:\Windows\system32\WsmSvc.dll
2010-11-05 00:21:49 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2010-11-05 00:21:49 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2010-11-05 00:21:49 ----A---- C:\Windows\system32\winrscmd.dll
2010-11-05 00:16:22 ----D---- C:\Windows\system32\x64
2010-11-04 23:52:24 ----D---- C:\Program Files\Seznam.cz
2010-11-04 23:52:23 ----HD---- C:\Windows\msdownld.tmp
2010-11-03 18:53:29 ----A---- C:\Windows\system32\msfeeds.dll
2010-11-03 18:53:29 ----A---- C:\Windows\system32\licmgr10.dll
2010-11-03 18:53:29 ----A---- C:\Windows\system32\jsproxy.dll
2010-11-03 18:53:28 ----A---- C:\Windows\system32\mshta.exe
2010-11-03 18:53:28 ----A---- C:\Windows\system32\msfeedssync.exe
2010-11-03 18:53:28 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-11-03 18:53:28 ----A---- C:\Windows\system32\jscript.dll
2010-11-03 18:53:28 ----A---- C:\Windows\system32\inseng.dll
2010-11-03 18:53:27 ----A---- C:\Windows\system32\webcheck.dll
2010-11-03 18:53:27 ----A---- C:\Windows\system32\vbscript.dll
2010-11-03 18:53:27 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2010-11-03 18:53:27 ----A---- C:\Windows\system32\SetDepNx.exe
2010-11-03 18:53:27 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2010-11-03 18:53:27 ----A---- C:\Windows\system32\pngfilt.dll
2010-11-03 18:53:27 ----A---- C:\Windows\system32\jscript9.dll
2010-11-03 18:53:26 ----A---- C:\Windows\system32\url.dll
2010-11-03 18:53:26 ----A---- C:\Windows\system32\admparse.dll
2010-11-03 18:53:25 ----A---- C:\Windows\system32\urlmon.dll
2010-11-03 18:53:25 ----A---- C:\Windows\system32\msls31.dll
2010-11-03 18:53:25 ----A---- C:\Windows\system32\mshtmler.dll
2010-11-03 18:53:25 ----A---- C:\Windows\system32\mshtmled.dll
2010-11-03 18:53:24 ----A---- C:\Windows\system32\occache.dll
2010-11-03 18:53:24 ----A---- C:\Windows\system32\mshtml.dll
2010-11-03 18:53:23 ----A---- C:\Windows\system32\msrating.dll
2010-11-03 18:53:23 ----A---- C:\Windows\system32\ieakui.dll
2010-11-03 18:53:23 ----A---- C:\Windows\system32\ieaksie.dll
2010-11-03 18:53:23 ----A---- C:\Windows\system32\ieakeng.dll
2010-11-03 18:53:23 ----A---- C:\Windows\system32\IEAdvpack.dll
2010-11-03 18:53:19 ----A---- C:\Windows\system32\iedkcs32.dll
2010-11-03 18:53:19 ----A---- C:\Windows\system32\ieapfltr.dll
2010-11-03 18:53:19 ----A---- C:\Windows\system32\dxtrans.dll
2010-11-03 18:53:19 ----A---- C:\Windows\system32\dxtmsft.dll
2010-11-03 18:53:14 ----A---- C:\Windows\system32\advpack.dll
2010-11-03 18:53:09 ----A---- C:\Windows\system32\ieUnatt.exe
2010-11-03 18:53:09 ----A---- C:\Windows\system32\ie4uinit.exe
2010-11-03 18:53:09 ----A---- C:\Windows\system32\icardie.dll
2010-11-03 18:53:08 ----A---- C:\Windows\system32\imgutil.dll
2010-11-03 18:53:08 ----A---- C:\Windows\system32\ieui.dll
2010-11-03 18:53:08 ----A---- C:\Windows\system32\iesysprep.dll
2010-11-03 18:53:02 ----A---- C:\Windows\system32\iexpress.exe
2010-11-03 18:52:51 ----A---- C:\Windows\system32\ieframe.dll
2010-11-03 18:52:50 ----A---- C:\Windows\system32\iesetup.dll
2010-11-03 18:52:50 ----A---- C:\Windows\system32\iertutil.dll
2010-11-03 18:52:50 ----A---- C:\Windows\system32\iernonce.dll
2010-11-03 18:52:50 ----A---- C:\Windows\system32\iepeers.dll
2010-11-03 18:52:49 ----A---- C:\Windows\system32\wininet.dll
2010-11-03 18:52:49 ----A---- C:\Windows\system32\wextract.exe
2010-11-01 20:31:08 ----A---- C:\Windows\system32\XpsRasterService.dll
2010-11-01 20:31:08 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2010-11-01 20:31:07 ----A---- C:\Windows\system32\mfreadwrite.dll
2010-11-01 20:31:07 ----A---- C:\Windows\system32\mfmp4src.dll
2010-11-01 20:31:07 ----A---- C:\Windows\system32\MFHEAACdec.dll
2010-11-01 20:31:07 ----A---- C:\Windows\system32\d3d10_1core.dll
2010-11-01 20:31:07 ----A---- C:\Windows\system32\d3d10_1.dll
2010-11-01 20:31:06 ----A---- C:\Windows\system32\MFH264Dec.dll
2010-11-01 20:31:06 ----A---- C:\Windows\system32\d3d10warp.dll
2010-11-01 20:31:05 ----A---- C:\Windows\system32\FntCache.dll
2010-11-01 20:31:05 ----A---- C:\Windows\system32\DWrite.dll
2010-11-01 20:31:04 ----A---- C:\Windows\system32\d2d1.dll
2010-11-01 20:29:30 ----D---- C:\Program Files\Feedback Tool
2010-10-27 08:50:35 ----A---- C:\Windows\system32\gameux.dll
2010-10-27 08:50:33 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-10-27 08:50:32 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-10-21 18:43:24 ----D---- C:\Program Files\SmileyCentralIE_1w
2010-10-21 18:39:04 ----D---- C:\Program Files\Facicons
2010-10-20 16:46:29 ----D---- C:\Program Files\SmileyCentral_1v
2010-10-20 16:46:16 ----D---- C:\Program Files\SmileyCentral_1vEI
2010-10-18 09:08:06 ----A---- C:\Windows\system32\javaws.exe
2010-10-18 09:08:06 ----A---- C:\Windows\system32\javaw.exe
2010-10-18 09:08:06 ----A---- C:\Windows\system32\java.exe

======List of files/folders modified in the last 1 months======

2010-11-14 22:24:54 ----D---- C:\Windows\Temp
2010-11-14 22:24:20 ----D---- C:\Windows\Prefetch
2010-11-14 22:24:08 ----RD---- C:\Program Files
2010-11-14 22:18:10 ----SHD---- C:\System Volume Information
2010-11-14 22:02:29 ----D---- C:\Windows
2010-11-14 22:02:03 ----A---- C:\ProgramData\hpqp.ini
2010-11-14 22:01:46 ----D---- C:\Users\hp\AppData\Roaming\Skype
2010-11-14 17:25:45 ----D---- C:\Users\hp\AppData\Roaming\skypePM
2010-11-14 15:26:00 ----SHD---- C:\Windows\Installer
2010-11-14 15:25:45 ----D---- C:\Windows\System32
2010-11-14 15:11:40 ----D---- C:\Windows\system32\Tasks
2010-11-14 00:07:29 ----D---- C:\Windows\system32\drivers
2010-11-14 00:07:28 ----D---- C:\Windows\system32\catroot
2010-11-14 00:07:27 ----D---- C:\Windows\inf
2010-11-14 00:05:14 ----HD---- C:\ProgramData
2010-11-13 20:11:26 ----D---- C:\Windows\rescache
2010-11-13 19:56:36 ----D---- C:\Windows\winsxs
2010-11-13 19:44:10 ----RD---- C:\Windows\Offline Web Pages
2010-11-13 19:44:10 ----D---- C:\Windows\system32\wbem
2010-11-13 19:44:10 ----D---- C:\Windows\system32\migration
2010-11-13 19:44:10 ----D---- C:\Windows\system32\en-US
2010-11-13 19:44:10 ----D---- C:\Windows\PolicyDefinitions
2010-11-13 19:44:04 ----SD---- C:\Windows\Downloaded Program Files
2010-11-13 16:13:49 ----D---- C:\Windows\system
2010-11-12 19:15:22 ----D---- C:\Program Files\Common Files
2010-11-11 20:08:14 ----D---- C:\Windows\Minidump
2010-11-11 19:26:24 ----D---- C:\ProgramData\TuneUp Software
2010-11-11 19:23:39 ----D---- C:\Users\hp\AppData\Roaming\TuneUp Software
2010-11-11 19:07:56 ----D---- C:\Users\hp\AppData\Roaming\???????sAppData
2010-11-10 18:47:52 ----D---- C:\Program Files\Mozilla Firefox
2010-11-10 18:27:44 ----D---- C:\Windows\system32\catroot2
2010-11-10 17:10:29 ----D---- C:\Program Files\Windows Mail
2010-11-10 17:04:03 ----A---- C:\Windows\system32\mrt.exe
2010-11-10 15:41:57 ----D---- C:\Users\hp\AppData\Roaming\Real
2010-11-07 02:42:54 ----D---- C:\Windows\system32\config
2010-11-07 02:42:28 ----D---- C:\Windows\Tasks
2010-11-07 02:42:28 ----D---- C:\Windows\system32\spool
2010-11-07 02:42:28 ----D---- C:\Windows\system32\Msdtc
2010-11-07 02:42:27 ----D---- C:\Windows\system32\cs-CZ
2010-11-07 02:42:27 ----D---- C:\Windows\system32\CodeIntegrity
2010-11-07 02:42:26 ----D---- C:\Windows\Microsoft.NET
2010-11-07 02:41:44 ----D---- C:\Windows\registration
2010-11-06 17:04:59 ----RSD---- C:\Windows\assembly
2010-11-05 09:31:22 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-11-05 00:26:50 ----SD---- C:\ProgramData\Microsoft
2010-11-04 03:05:22 ----D---- C:\Program Files\Ask.com
2010-11-03 12:58:45 ----D---- C:\Windows\Logs
2010-11-01 20:47:43 ----D---- C:\Program Files\ICQ7.0
2010-11-01 20:28:54 ----D---- C:\Windows\SoftwareDistribution
2010-10-27 09:25:14 ----D---- C:\Windows\AppPatch
2010-10-21 20:27:00 ----HD---- C:\Program Files\InstallShield Installation Information
2010-10-21 19:45:19 ----D---- C:\Nostale(CZ)
2010-10-19 10:41:44 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-18 09:07:58 ----D---- C:\Program Files\Java

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-09-07 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 cdrbsdrv;cdrbsdrv; C:\Windows\system32\drivers\cdrbsdrv.sys [2005-05-10 32256]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-07-29 136632]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 96920]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-18 12672]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2007-10-18 8704]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-09-05 1183744]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT32.sys [2008-10-03 222208]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2007-11-01 985600]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2007-11-01 208896]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2010-08-25 9024512]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI; C:\Windows\system32\drivers\IntcHdmi.sys [2008-06-29 112128]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-06-10 123904]
R3 RTSTOR;Realtek USB 2.0 Card Reader; C:\Windows\system32\drivers\RTSTOR.SYS [2008-09-19 61952]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-04-17 199344]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [2010-10-07 10064]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2007-11-01 661504]
S3 Axtmvflt;Axesstel USB Filter Service; C:\Windows\system32\DRIVERS\Axtmvflt.sys [2007-03-22 3456]
S3 Axtmvmdm;Axesstel USB Modem; C:\Windows\system32\DRIVERS\Axtmvmdm.sys [2007-03-26 40064]
S3 Axtmvprt;Axesstel Diagnostic Port; C:\Windows\System32\Drivers\Axtmvprt.sys [2007-03-26 38784]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-11-26 23040]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2008-11-26 507904]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2008-11-26 30208]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S3 FlashUSB;FlashUSB; C:\Windows\system32\DRIVERS\FlashUSB.sys [2009-05-12 16896]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 LgBttPort;LGE Bluetooth TransPort; C:\Windows\system32\DRIVERS\lgbtport.sys []
S3 lgbusenum;LG Bluetooth Bus Enumerator; C:\Windows\system32\DRIVERS\lgbtbus.sys []
S3 LGVMODEM;LGE Virtual Modem; C:\Windows\system32\DRIVERS\lgvmodem.sys []
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [2008-03-29 21248]
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [2008-03-29 20096]
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2008-01-21 2225664]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-11-26 149504]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]
S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgusbbus.sys []
S3 UsbDiag;LGE Mobile USB Serial Port; C:\Windows\system32\DRIVERS\lgusbdiag.sys []
S3 USBModem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgusbmodem.sys []
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-02 194048]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 bgsvcgen;B's Recorder GOLD Library General Service; C:\Windows\System32\bgsvcgen.exe [2006-09-22 118784]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-08-12 810144]
R2 ezSharedSvc;Easybits Shared Services for Windows; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-10-09 94208]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-06-09 73728]
R2 McciCMService;McciCMService; C:\Program Files\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
R2 Recovery Service for Windows;Recovery Service for Windows; C:\Program Files\SMINST\BLService.exe [2008-10-06 365952]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2008-09-15 241734]
R2 SmileyCentral_1vService;SmileyCentral Service; C:\PROGRA~1\SMILEY~2\bar\1.bin\1vbarsvc.exe [2010-10-20 28766]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-07-06 173352]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [2010-10-27 1483072]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2007-10-18 386560]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-04-03 193840]
R3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2008-05-01 165192]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-07-01 136176]
S3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-08-12 33584]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 usnjsvc;Služba Čtení deníku USN sdílených složek programu Messenger; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

-----------------EOF-----------------

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

ComboFix 10-11-15.06 - hp 16.11.2010 16:36:12.1.2 - x86
Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1250.420.1029.18.1978.1233 [GMT 1:00]
Spuštěný z: c:\users\hp\Downloads\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý

.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-3599652446-2039361306-1615905274-1000\$RPF6W8R\ieproxy.dll
c:\program files\Facicons\tbHElper.dll
c:\users\hp\AppData\Roaming\Desktopicon
c:\users\hp\AppData\Roaming\Desktopicon\eBay.ico
c:\users\hp\AppData\Roaming\Desktopicon\uninst.exe
c:\users\hp\AppData\Roaming\Microsoft\Windows\Recent\Untitled.URL
c:\windows\system32\vbzlib1.dll

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_usnjsvc


((((((((((((((((((((((((( Soubory vytvořené od 2010-10-16 do 2010-11-16 )))))))))))))))))))))))))))))))
.

2010-11-16 15:32 . 2010-11-16 15:33 -------- d-----w- C:\32788R22FWJFW
2010-11-14 21:24 . 2010-11-14 21:25 -------- d-----w- c:\program files\trend micro
2010-11-14 21:24 . 2010-11-14 21:25 -------- d-----w- C:\rsit
2010-11-13 20:03 . 2010-11-13 23:05 -------- d-----w- c:\program files\ESET
2010-11-12 18:15 . 2010-11-12 18:15 -------- d-----w- c:\program files\Common Files\xing shared
2010-11-12 18:13 . 2010-11-12 18:13 100352 ----a-w- c:\program files\Mozilla Firefox\plugins\nprpjplug.dll
2010-11-12 09:51 . 2010-10-07 23:21 6146896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{1CDF3ACE-C4CE-41D3-B44B-4798A789428C}\mpengine.dll
2010-11-11 18:24 . 2010-10-27 17:25 31552 ----a-w- c:\windows\system32\TURegOpt.exe
2010-11-11 18:24 . 2010-10-27 17:21 21312 ----a-w- c:\windows\system32\authuitu.dll
2010-11-11 18:24 . 2010-10-27 17:21 29504 ----a-w- c:\windows\system32\uxtuneup.dll
2010-11-11 18:23 . 2010-11-11 18:24 -------- d-----w- c:\program files\TuneUp Utilities 2011
2010-11-11 18:21 . 2010-11-11 18:21 -------- d-sh--w- c:\programdata\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2010-11-10 15:23 . 2010-10-07 11:37 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2010-11-10 14:41 . 2010-11-12 18:16 11776 ----a-w- c:\program files\Mozilla Firefox\plugins\nprjplug.dll
2010-11-10 14:40 . 2010-11-12 18:14 151776 ----a-w- c:\program files\Mozilla Firefox\plugins\nppl3260.dll
2010-11-10 14:40 . 2010-11-12 18:12 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-11-10 14:40 . 2010-11-12 18:12 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-11-09 20:29 . 2010-11-10 14:41 -------- d-----w- c:\program files\real
2010-11-06 23:27 . 2010-11-06 23:27 -------- d-----w- c:\program files\GIANTS Software
2010-11-06 22:19 . 2010-11-06 22:19 -------- d-----w- C:\ebe61b774d99606b281cd3a7
2010-11-06 00:07 . 2010-11-06 00:07 -------- d-----w- c:\users\hp\AppData\Local\Apps
2010-11-05 09:00 . 2010-11-05 09:00 -------- d-----w- c:\users\hp\AppData\Roaming\Toolbar4
2010-11-05 09:00 . 2010-11-07 01:42 -------- d-----w- c:\windows\system32\IE700
2010-11-05 08:27 . 2010-11-05 08:27 -------- d-----w- c:\program files\Microsoft.NET
2010-11-05 00:42 . 2010-11-05 00:43 -------- d-----w- c:\users\hp\AppData\Local\MigWiz
2010-11-05 00:19 . 2010-11-05 00:34 -------- d-----w- C:\msdownld.tmp
2010-11-05 00:19 . 2010-11-05 00:19 -------- d-----w- C:\builds
2010-11-04 23:25 . 2010-11-07 01:42 -------- d-----w- c:\program files\Microsoft Silverlight
2010-11-04 23:22 . 2009-10-09 21:56 2048 ----a-w- c:\windows\system32\winrsmgr.dll
2010-11-04 23:22 . 2009-10-09 21:56 12800 ----a-w- c:\windows\system32\wsmprovhost.exe
2010-11-04 23:22 . 2009-10-09 21:56 20480 ----a-w- c:\windows\system32\winrshost.exe
2010-11-04 23:22 . 2009-10-09 21:56 40448 ----a-w- c:\windows\system32\winrs.exe
2010-11-04 23:22 . 2009-10-09 21:56 10240 ----a-w- c:\windows\system32\wsmplpxy.dll
2010-11-04 23:22 . 2009-10-09 21:56 10240 ----a-w- c:\windows\system32\winrssrv.dll
2010-11-04 23:22 . 2009-10-09 21:55 79872 ----a-w- c:\windows\system32\wecutil.exe
2010-11-04 23:22 . 2009-10-09 21:55 146944 ----a-w- c:\windows\system32\wecsvc.dll
2010-11-04 23:22 . 2009-10-09 21:55 81408 ----a-w- c:\windows\system32\wevtfwd.dll
2010-11-04 23:22 . 2009-10-09 21:55 56320 ----a-w- c:\windows\system32\wecapi.dll
2010-11-04 23:21 . 2009-10-09 21:56 41472 ----a-w- c:\windows\system32\pwrshplugin.dll
2010-11-04 23:21 . 2009-10-09 21:55 54272 ----a-w- c:\windows\system32\WsmRes.dll
2010-11-04 23:21 . 2009-08-01 06:27 201184 ----a-w- c:\windows\system32\winrm.vbs
2010-11-04 23:21 . 2009-10-09 21:56 214016 ----a-w- c:\windows\system32\WsmWmiPl.dll
2010-11-04 23:21 . 2009-10-09 21:56 145408 ----a-w- c:\windows\system32\WsmAuto.dll
2010-11-04 23:21 . 2009-10-09 21:56 1181696 ----a-w- c:\windows\system32\WsmSvc.dll
2010-11-04 23:21 . 2009-10-09 21:56 241152 ----a-w- c:\windows\system32\winrscmd.dll
2010-11-04 23:21 . 2009-10-09 21:56 246272 ----a-w- c:\windows\system32\WSManHTTPConfig.exe
2010-11-04 23:21 . 2009-10-09 21:55 252416 ----a-w- c:\windows\system32\WSManMigrationPlugin.dll
2010-11-04 23:16 . 2010-11-04 23:16 -------- d-----w- c:\windows\system32\x64
2010-11-04 22:52 . 2010-11-13 19:54 -------- d-----w- c:\program files\Seznam.cz
2010-11-04 22:52 . 2010-11-06 22:52 -------- d--h--w- c:\windows\msdownld.tmp
2010-11-03 17:52 . 2010-08-31 23:42 75264 ----a-w- c:\windows\system32\iesetup.dll
2010-11-03 17:52 . 2010-08-31 23:44 1122304 ----a-w- c:\windows\system32\wininet.dll
2010-11-03 17:52 . 2010-08-31 23:42 149504 ----a-w- c:\windows\system32\wextract.exe
2010-11-01 19:31 . 2010-08-17 23:54 280064 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2010-11-01 19:31 . 2010-08-17 23:54 135680 ----a-w- c:\windows\system32\XpsRasterService.dll
2010-11-01 19:31 . 2010-08-17 23:51 357376 ----a-w- c:\windows\system32\MFHEAACdec.dll
2010-11-01 19:31 . 2010-08-17 23:51 261632 ----a-w- c:\windows\system32\mfreadwrite.dll
2010-11-01 19:31 . 2010-08-17 23:51 302592 ----a-w- c:\windows\system32\mfmp4src.dll
2010-11-01 19:31 . 2010-08-17 23:48 161280 ----a-w- c:\windows\system32\d3d10_1.dll
2010-11-01 19:31 . 2010-08-17 23:48 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2010-11-01 19:31 . 2010-08-17 23:52 979456 ----a-w- c:\windows\system32\MFH264Dec.dll
2010-11-01 19:31 . 2010-08-17 23:49 1174528 ----a-w- c:\windows\system32\d3d10warp.dll
2010-11-01 19:31 . 2010-08-17 23:49 1068032 ----a-w- c:\windows\system32\DWrite.dll
2010-11-01 19:31 . 2010-08-17 23:49 797184 ----a-w- c:\windows\system32\FntCache.dll
2010-11-01 19:31 . 2010-08-17 23:50 680960 ----a-w- c:\windows\system32\d2d1.dll
2010-11-01 19:29 . 2010-11-03 12:04 -------- d-----w- c:\program files\Feedback Tool
2010-10-27 07:50 . 2010-08-26 16:34 1696256 ----a-w- c:\windows\system32\gameux.dll
2010-10-27 07:50 . 2010-08-26 16:33 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2010-10-27 07:50 . 2010-08-26 14:23 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2010-10-21 19:21 . 2010-10-21 19:21 -------- d-----w- c:\users\hp\AppData\Local\Mainsoft
2010-10-21 17:43 . 2010-10-21 17:43 -------- d-----w- c:\program files\SmileyCentralIE_1w
2010-10-21 17:39 . 2010-11-16 15:44 -------- d-----w- c:\program files\Facicons
2010-10-20 15:46 . 2010-10-20 15:46 -------- d-----w- c:\program files\SmileyCentral_1v

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-19 09:41 . 2010-02-28 09:23 222080 ------w- c:\windows\system32\MpSigStub.exe
2010-09-15 02:50 . 2010-04-17 07:45 472808 ----a-w- c:\windows\system32\deployJava1.dll
2010-09-13 13:56 . 2010-10-13 08:24 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2010-09-08 09:17 . 2010-09-08 09:17 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-09-08 09:17 . 2010-09-08 09:17 69632 ----a-w- c:\windows\system32\QuickTime.qts
2010-09-07 16:12 . 2010-07-12 20:04 38848 ----a-w- c:\windows\avastSS.scr
2010-09-07 16:11 . 2010-02-27 22:26 167592 ----a-w- c:\windows\system32\aswBoot.exe
2010-09-07 15:52 . 2010-02-27 22:27 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-09-07 15:52 . 2010-02-27 22:27 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-09-07 15:47 . 2010-02-27 22:27 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-09-07 15:47 . 2010-02-27 22:27 50768 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-09-07 15:47 . 2010-02-27 22:27 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-09-06 16:20 . 2010-10-13 08:24 125952 ----a-w- c:\windows\system32\srvsvc.dll
2010-09-06 16:19 . 2010-10-13 08:24 17920 ----a-w- c:\windows\system32\netevent.dll
2010-09-06 13:45 . 2010-10-13 08:24 304128 ----a-w- c:\windows\system32\drivers\srv.sys
2010-09-06 13:45 . 2010-10-13 08:24 145408 ----a-w- c:\windows\system32\drivers\srv2.sys
2010-09-06 13:45 . 2010-10-13 08:24 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys
2010-08-31 15:46 . 2010-10-13 08:23 954752 ----a-w- c:\windows\system32\mfc40.dll
2010-08-31 15:46 . 2010-10-13 08:22 954288 ----a-w- c:\windows\system32\mfc40u.dll
2010-08-31 15:44 . 2010-10-13 08:22 531968 ----a-w- c:\windows\system32\comctl32.dll
2010-08-31 13:27 . 2010-10-13 08:22 2038272 ----a-w- c:\windows\system32\win32k.sys
2010-08-26 16:37 . 2010-10-13 08:23 157184 ----a-w- c:\windows\system32\t2embed.dll
2010-08-26 16:33 . 2010-10-27 07:50 173056 ----a-w- c:\windows\apppatch\AcXtrnal.dll
2010-08-26 16:33 . 2010-10-27 07:50 2159616 ----a-w- c:\windows\apppatch\AcGenral.dll
2010-08-26 16:33 . 2010-10-27 07:50 542720 ----a-w- c:\windows\apppatch\AcLayers.dll
2010-08-26 16:33 . 2010-10-27 07:50 458752 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2010-08-25 18:46 . 2010-08-25 18:46 8198680 ----a-w- c:\windows\system32\TVWSetup.exe
2010-08-25 18:45 . 2009-12-18 08:11 948760 ----a-w- c:\windows\system32\igxpun.exe
2010-08-25 18:45 . 2008-07-10 22:27 136216 ----a-w- c:\windows\system32\igfxtray.exe
2010-08-25 18:45 . 2008-07-10 22:27 266776 ----a-w- c:\windows\system32\igfxsrvc.exe
2010-08-25 18:45 . 2008-07-10 22:27 170520 ----a-w- c:\windows\system32\igfxpers.exe
2010-08-25 18:45 . 2010-08-25 18:45 179224 ----a-w- c:\windows\system32\igfxext.exe
2010-08-25 18:45 . 2008-07-10 22:27 171032 ----a-w- c:\windows\system32\hkcmd.exe
2010-08-25 18:45 . 2010-08-25 18:45 3156504 ----a-w- c:\windows\system32\GfxUI.exe
2010-08-25 18:39 . 2010-08-25 18:39 81920 ----a-w- c:\windows\system32\igfxCoIn_v2202.dll
2010-08-25 18:31 . 2010-08-25 18:31 9024512 ----a-w- c:\windows\system32\drivers\igdkmd32.sys
2010-08-25 18:31 . 2008-07-06 20:15 4967424 ----a-w- c:\windows\system32\igdumd32.dll
2010-08-25 18:28 . 2008-07-06 20:10 571904 ----a-w- c:\windows\system32\igdumdx32.dll
2010-08-25 18:23 . 2010-08-25 18:23 4411904 ----a-w- c:\windows\system32\igd10umd32.dll
2010-08-25 18:09 . 2010-08-25 18:09 11040256 ----a-w- c:\windows\system32\ig4icd32.dll
2010-08-25 18:02 . 2010-08-25 18:02 86016 ----a-w- c:\windows\system32\igfxrsky.lrc
2010-08-25 18:02 . 2010-08-25 18:02 85504 ----a-w- c:\windows\system32\igfxrslv.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86528 ----a-w- c:\windows\system32\igfxresn.lrc
2010-08-25 18:02 . 2010-08-25 18:02 85504 ----a-w- c:\windows\system32\igfxrtrk.lrc
2010-08-25 18:02 . 2010-08-25 18:02 85504 ----a-w- c:\windows\system32\igfxrsve.lrc
2010-08-25 18:02 . 2010-08-25 18:02 84992 ----a-w- c:\windows\system32\igfxrtha.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86016 ----a-w- c:\windows\system32\igfxrrus.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86016 ----a-w- c:\windows\system32\igfxrptg.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86016 ----a-w- c:\windows\system32\igfxrplk.lrc
2010-08-25 18:02 . 2010-08-25 18:02 85504 ----a-w- c:\windows\system32\igfxrptb.lrc
2010-08-25 18:02 . 2010-08-25 18:02 85504 ----a-w- c:\windows\system32\igfxrnor.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86016 ----a-w- c:\windows\system32\igfxrita.lrc
2010-08-25 18:02 . 2010-08-25 18:02 85504 ----a-w- c:\windows\system32\igfxrhun.lrc
2010-08-25 18:02 . 2010-08-25 18:02 84480 ----a-w- c:\windows\system32\igfxrheb.lrc
2010-08-25 18:02 . 2010-08-25 18:02 82944 ----a-w- c:\windows\system32\igfxrkor.lrc
2010-08-25 18:02 . 2010-08-25 18:02 82944 ----a-w- c:\windows\system32\igfxrjpn.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86528 ----a-w- c:\windows\system32\igfxrfra.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86528 ----a-w- c:\windows\system32\igfxrell.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86016 ----a-w- c:\windows\system32\igfxrnld.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86016 ----a-w- c:\windows\system32\igfxrdeu.lrc
2010-08-25 18:02 . 2010-08-25 18:02 85504 ----a-w- c:\windows\system32\igfxrfin.lrc
2010-08-25 18:02 . 2010-08-25 18:02 84992 ----a-w- c:\windows\system32\igfxrdan.lrc
2010-08-25 18:02 . 2010-08-25 18:02 84480 ----a-w- c:\windows\system32\igfxrara.lrc
2010-08-25 18:02 . 2010-08-25 18:02 81920 ----a-w- c:\windows\system32\igfxrcht.lrc
2010-08-25 18:02 . 2010-08-25 18:02 81920 ----a-w- c:\windows\system32\igfxrchs.lrc
2010-08-25 18:02 . 2008-07-06 19:43 85504 ----a-w- c:\windows\system32\igfxrcsy.lrc
2010-08-25 18:00 . 2010-08-25 18:00 23552 ----a-w- c:\windows\system32\igfxexps.dll
2010-08-25 18:00 . 2010-08-25 18:00 194560 ----a-w- c:\windows\system32\igfxpph.dll
2010-08-25 17:59 . 2010-08-25 17:59 115200 ----a-w- c:\windows\system32\igfxcpl.cpl
2010-08-25 17:59 . 2008-07-06 19:39 261632 ----a-w- c:\windows\system32\igfxTMM.dll
2010-08-25 17:59 . 2008-07-06 19:38 57344 ----a-w- c:\windows\system32\igfxsrvc.dll
2010-08-25 17:59 . 2010-08-25 17:59 130048 ----a-w- c:\windows\system32\igfxdo.dll
2010-08-25 17:59 . 2008-07-06 19:37 94720 ----a-w- c:\windows\system32\hccutils.dll
2010-08-25 17:59 . 2010-08-25 17:59 120320 ----a-w- c:\windows\system32\gfxSrvc.dll
2010-08-25 17:59 . 2010-08-25 17:59 4096 ----a-w- c:\windows\system32\IGFXDEVLib.dll
2010-08-25 17:59 . 2010-08-25 17:59 85504 ----a-w- c:\windows\system32\igfxrenu.lrc
2010-08-25 17:59 . 2008-07-06 19:37 228864 ----a-w- c:\windows\system32\igfxdev.dll
2010-08-25 17:59 . 2008-07-06 19:37 828928 ----a-w- c:\windows\system32\igfxress.dll
2010-08-25 17:52 . 2010-08-25 17:52 452440 ----a-w- c:\windows\system32\d3dx10_40.dll
2010-08-25 17:52 . 2010-08-25 17:52 208896 ----a-w- c:\windows\system32\iglhsip32.dll
2010-08-25 17:52 . 2010-08-25 17:52 143360 ----a-w- c:\windows\system32\iglhcp32.dll
2010-08-20 16:05 . 2010-10-13 08:22 867328 ----a-w- c:\windows\system32\wmpmde.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{339a0dff-d9af-439b-92bc-636220fb3dae}"= "c:\program files\SmileyCentralIE_1w\bar\1.bin\1wSrcAs.dll" [2010-10-21 53248]

[HKEY_CLASSES_ROOT\clsid\{339a0dff-d9af-439b-92bc-636220fb3dae}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{22E4A387-EBFC-442B-B46A-4E7957176FE0}]
2010-06-18 16:01 2604032 ------w- c:\program files\Facicons\tbcore3.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{55cde9e7-696c-47c4-8e21-7210b8aeb103}]
2010-10-21 17:43 675840 ----a-w- c:\progra~1\SMILEY~3\bar\1.bin\1wbar.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5ed22e89-62fa-47ec-bd8d-374d849d436c}]
2010-10-21 17:43 53248 ----a-w- c:\program files\SmileyCentralIE_1w\bar\1.bin\1wSrcAs.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-09-28 21:44 1400712 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}"= "c:\program files\Facicons\tbcore3.dll" [2010-06-18 2604032]
"{d3ca5551-fc2e-4d09-8ece-263607acf9fc}"= "c:\program files\SmileyCentralIE_1w\bar\1.bin\1wbar.dll" [2010-10-21 675840]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712]

[HKEY_CLASSES_ROOT\clsid\{7124c800-b6b8-4a2e-bec0-8b9eccea2149}]
[HKEY_CLASSES_ROOT\TBSB02843.TBSB02843.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\TBSB02843.TBSB02843]

[HKEY_CLASSES_ROOT\clsid\{d3ca5551-fc2e-4d09-8ece-263607acf9fc}]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712]
"{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}"= "c:\program files\Facicons\tbcore3.dll" [2010-06-18 2604032]
"{D3CA5551-FC2E-4D09-8ECE-263607ACF9FC}"= "c:\program files\SmileyCentralIE_1w\bar\1.bin\1wbar.dll" [2010-10-21 675840]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CLASSES_ROOT\clsid\{7124c800-b6b8-4a2e-bec0-8b9eccea2149}]
[HKEY_CLASSES_ROOT\TBSB02843.TBSB02843.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\TBSB02843.TBSB02843]

[HKEY_CLASSES_ROOT\clsid\{d3ca5551-fc2e-4d09-8ece-263607acf9fc}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-09-02 13351304]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"ICQ"="c:\program files\ICQ7.0\ICQ.exe" [2010-10-27 133432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-17 1049896]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2008-08-01 202032]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-09-07 2838912]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2008-04-15 488752]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-09-23 468264]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-08-12 2215064]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"LightScribe Control Panel"=c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"HP Health Check Scheduler"=c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
"HP Software Update"=c:\program files\Hp\HP Software Update\HPWuSchd2.exe
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"TkBellExe"="c:\program files\real\realplayer\Update\realsched.exe" -osboot
"IgfxTray"=c:\windows\system32\igfxtray.exe
"HotKeysCmds"=c:\windows\system32\hkcmd.exe
"Persistence"=c:\windows\system32\igfxpers.exe
"TO2SSM_McciTrayApp"=c:\program files\TO2SSM\McciTrayApp.exe
"UpdatePSTShortCut"="c:\program files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "c:\program files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
"NeroFilterCheck"=c:\program files\Common Files\Ahead\Lib\NeroCheck.exe
"SmileyCentralIE_1w Browser Plugin Loader"=c:\progra~1\SMILEY~3\bar\1.bin\1wbrmon.exe
"UpdateLBPShortCut"="c:\program files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "c:\program files\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
"UpdateP2GoShortCut"="c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "c:\program files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
"UpdatePDIRShortCut"="c:\program files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "c:\program files\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0"
"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "c:\program files\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-07-01 136176]
R3 Axtmvflt;Axesstel USB Filter Service;c:\windows\system32\DRIVERS\Axtmvflt.sys [2007-03-22 3456]
R3 Axtmvmdm;Axesstel USB Modem;c:\windows\system32\DRIVERS\Axtmvmdm.sys [2007-03-26 40064]
R3 Axtmvprt;Axesstel Diagnostic Port;c:\windows\system32\Drivers\Axtmvprt.sys [2007-03-26 38784]
R3 FlashUSB;FlashUSB;c:\windows\system32\DRIVERS\FlashUSB.sys [2009-05-12 16896]
R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\DRIVERS\lgbtport.sys [x]
R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\DRIVERS\lgbtbus.sys [x]
R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\DRIVERS\lgvmodem.sys [x]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S1 aswSP;aswSP; [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-07-29 136632]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-08-12 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 96920]
S2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2008-01-21 21504]
S2 Recovery Service for Windows;Recovery Service for Windows;c:\program files\SMINST\BLService.exe [2008-10-06 365952]
S2 SmileyCentral_1vService;SmileyCentral Service;c:\progra~1\SMILEY~2\bar\1.bin\1vbarsvc.exe [2010-10-20 28766]
S2 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2010-07-06 173352]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [2010-10-27 1483072]
S3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-04-03 193840]
S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2008-06-29 112128]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [2010-10-07 10064]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
ezSharedSvc

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 09:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'

2010-11-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-01 20:25]

2010-11-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-01 20:25]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=cs_cz&c=91&bd=Presario&pf=cnnb
FF - ProfilePath - c:\users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\wvzetkm0.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=CDS&o=16205&locale=en_US&apn_uid=DFDB564E-2432-4D65-8D27-55F32B88AA38&apn_ptnrs=QR&apn_sauid=0C2AB7E0-6AB5-45EC-A8F8-34B78216904A&apn_dtid=&q=
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - component: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll
FF - component: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordlegacyext.dll
FF - component: c:\users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\wvzetkm0.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll
FF - component: c:\users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\wvzetkm0.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\RadioWMPCore.dll
FF - plugin: c:\program files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npkimi.dll
FF - plugin: c:\program files\SmileyCentral_1v\bar\1.bin\NP1vStub.dll
FF - plugin: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
FF - plugin: c:\users\hp\Desktop\DivX\DivX Player\npDivxPlayerPlugin.dll
FF - plugin: c:\users\hp\Desktop\DivX\DivX Web Player\npdivx32.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-eBay Icon - c:\users\hp\AppData\Roaming\Desktopicon\uninst.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-16 16:50
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\windows\system32\WLANExt.exe
c:\program files\Google\Update\1.2.183.39\GoogleCrashHandler.exe
c:\windows\System32\bgsvcgen.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\Motive\McciCMService.exe
c:\program files\CyberLink\Shared files\RichVideo.exe
c:\windows\system32\DRIVERS\xaudio.exe
c:\program files\TeamViewer\Version5\TeamViewer.exe
c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
c:\windows\servicing\TrustedInstaller.exe
c:\windows\system32\conime.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
c:\program files\Skype\Plugin Manager\skypePM.exe
c:\program files\Hewlett-Packard\HP Health Check\hphc_service.exe
c:\program files\Synaptics\SynTP\SynTPHelper.exe
.
**************************************************************************
.
Celkový čas: 2010-11-16 16:55:54 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-11-16 15:55

Před spuštěním: Volných bajtů: 152 086 028 288
Po spuštění: Volných bajtů: 151 711 846 400

Current=1 Default=1 Failed=0 LastKnownGood=10 Sets=1,2,3,4,5,6,7,8,9,10
- - End Of File - - 11032D10C30EBA99583D2F7364B7F4FC

Ještě dočistíme. Přesuňte ComboFix na plochu. Otevřte poznámkový blok a zkopírujte do něj:

Folder::
c:\program files\Ask.com

Registry::
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"=-
[-HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
[-HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

dobrý večer, ani po těchto krocích, které jste mi napsal se mi nepodařilo internet explorer 8 rozeběhnout. hlásí mi to stále to samé. IE se stáhne, ale další kroky instalace, aktualizace už neproběhnou.

Dejte ještě poslední log z CF.

ComboFix 10-11-15.06 - hp 18.11.2010 19:35:12.3.2 - x86
Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1250.420.1029.18.1978.842 [GMT 1:00]
Spuštěný z: c:\users\hp\Downloads\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý

.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Předchozí spuštění -------
.
c:\program files\Ask.com
c:\program files\Ask.com\cb_1cf3.ico
c:\program files\Ask.com\cobrand.ico
c:\program files\Ask.com\config.xml
c:\program files\Ask.com\favicon.ico
c:\program files\Ask.com\fv_1b1e.ico
c:\program files\Ask.com\GenericAskToolbar.dll
c:\program files\Ask.com\mupcfg.xml
c:\program files\Ask.com\SaUpdate.exe
c:\program files\Ask.com\UpdateTask.exe

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-10-18 do 2010-11-18 )))))))))))))))))))))))))))))))
.

2010-11-18 18:44 . 2010-11-18 18:45 -------- d-----w- c:\users\hp\AppData\Local\temp
2010-11-18 18:44 . 2010-11-18 18:44 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-11-16 22:44 . 2010-10-07 23:21 6146896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{64559426-622E-431C-A4C5-F0629C959AD9}\mpengine.dll
2010-11-16 15:36 . 2010-11-16 15:36 -------- d-----w- c:\users\hp\AppData\Local\ESET
2010-11-14 21:24 . 2010-11-14 21:25 -------- d-----w- c:\program files\trend micro
2010-11-14 21:24 . 2010-11-14 21:25 -------- d-----w- C:\rsit
2010-11-13 20:03 . 2010-11-13 23:05 -------- d-----w- c:\program files\ESET
2010-11-12 18:15 . 2010-11-12 18:15 -------- d-----w- c:\program files\Common Files\xing shared
2010-11-12 18:13 . 2010-11-12 18:13 100352 ----a-w- c:\program files\Mozilla Firefox\plugins\nprpjplug.dll
2010-11-11 18:24 . 2010-10-27 17:25 31552 ----a-w- c:\windows\system32\TURegOpt.exe
2010-11-11 18:24 . 2010-10-27 17:21 21312 ----a-w- c:\windows\system32\authuitu.dll
2010-11-11 18:24 . 2010-10-27 17:21 29504 ----a-w- c:\windows\system32\uxtuneup.dll
2010-11-11 18:23 . 2010-11-11 18:24 -------- d-----w- c:\program files\TuneUp Utilities 2011
2010-11-11 18:21 . 2010-11-11 18:21 -------- d-sh--w- c:\programdata\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2010-11-10 15:23 . 2010-10-07 11:37 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2010-11-10 14:41 . 2010-11-12 18:16 11776 ----a-w- c:\program files\Mozilla Firefox\plugins\nprjplug.dll
2010-11-10 14:40 . 2010-11-12 18:14 151776 ----a-w- c:\program files\Mozilla Firefox\plugins\nppl3260.dll
2010-11-10 14:40 . 2010-11-12 18:12 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-11-10 14:40 . 2010-11-12 18:12 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-11-09 20:29 . 2010-11-10 14:41 -------- d-----w- c:\program files\real
2010-11-06 23:27 . 2010-11-06 23:27 -------- d-----w- c:\program files\GIANTS Software
2010-11-06 22:19 . 2010-11-06 22:19 -------- d-----w- C:\ebe61b774d99606b281cd3a7
2010-11-06 00:07 . 2010-11-06 00:07 -------- d-----w- c:\users\hp\AppData\Local\Apps
2010-11-05 09:00 . 2010-11-05 09:00 -------- d-----w- c:\users\hp\AppData\Roaming\Toolbar4
2010-11-05 09:00 . 2010-11-07 01:42 -------- d-----w- c:\windows\system32\IE700
2010-11-05 08:27 . 2010-11-05 08:27 -------- d-----w- c:\program files\Microsoft.NET
2010-11-05 00:42 . 2010-11-05 00:43 -------- d-----w- c:\users\hp\AppData\Local\MigWiz
2010-11-05 00:19 . 2010-11-05 00:34 -------- d-----w- C:\msdownld.tmp
2010-11-05 00:19 . 2010-11-05 00:19 -------- d-----w- C:\builds
2010-11-04 23:25 . 2010-11-07 01:42 -------- d-----w- c:\program files\Microsoft Silverlight
2010-11-04 23:22 . 2009-10-09 21:56 2048 ----a-w- c:\windows\system32\winrsmgr.dll
2010-11-04 23:22 . 2009-10-09 21:56 12800 ----a-w- c:\windows\system32\wsmprovhost.exe
2010-11-04 23:22 . 2009-10-09 21:56 20480 ----a-w- c:\windows\system32\winrshost.exe
2010-11-04 23:22 . 2009-10-09 21:56 40448 ----a-w- c:\windows\system32\winrs.exe
2010-11-04 23:22 . 2009-10-09 21:56 10240 ----a-w- c:\windows\system32\wsmplpxy.dll
2010-11-04 23:22 . 2009-10-09 21:56 10240 ----a-w- c:\windows\system32\winrssrv.dll
2010-11-04 23:22 . 2009-10-09 21:55 79872 ----a-w- c:\windows\system32\wecutil.exe
2010-11-04 23:22 . 2009-10-09 21:55 146944 ----a-w- c:\windows\system32\wecsvc.dll
2010-11-04 23:22 . 2009-10-09 21:55 81408 ----a-w- c:\windows\system32\wevtfwd.dll
2010-11-04 23:22 . 2009-10-09 21:55 56320 ----a-w- c:\windows\system32\wecapi.dll
2010-11-04 23:21 . 2009-10-09 21:56 41472 ----a-w- c:\windows\system32\pwrshplugin.dll
2010-11-04 23:21 . 2009-10-09 21:55 54272 ----a-w- c:\windows\system32\WsmRes.dll
2010-11-04 23:21 . 2009-08-01 06:27 201184 ----a-w- c:\windows\system32\winrm.vbs
2010-11-04 23:21 . 2009-10-09 21:56 214016 ----a-w- c:\windows\system32\WsmWmiPl.dll
2010-11-04 23:21 . 2009-10-09 21:56 145408 ----a-w- c:\windows\system32\WsmAuto.dll
2010-11-04 23:21 . 2009-10-09 21:56 1181696 ----a-w- c:\windows\system32\WsmSvc.dll
2010-11-04 23:21 . 2009-10-09 21:56 241152 ----a-w- c:\windows\system32\winrscmd.dll
2010-11-04 23:21 . 2009-10-09 21:56 246272 ----a-w- c:\windows\system32\WSManHTTPConfig.exe
2010-11-04 23:21 . 2009-10-09 21:55 252416 ----a-w- c:\windows\system32\WSManMigrationPlugin.dll
2010-11-04 23:16 . 2010-11-04 23:16 -------- d-----w- c:\windows\system32\x64
2010-11-04 22:52 . 2010-11-17 17:30 -------- d-----w- c:\program files\Seznam.cz
2010-11-04 22:52 . 2010-11-17 17:30 -------- d--h--w- c:\windows\msdownld.tmp
2010-11-03 17:52 . 2010-08-31 23:42 75264 ----a-w- c:\windows\system32\iesetup.dll
2010-11-03 17:52 . 2010-08-31 23:44 1122304 ----a-w- c:\windows\system32\wininet.dll
2010-11-03 17:52 . 2010-08-31 23:42 149504 ----a-w- c:\windows\system32\wextract.exe
2010-11-01 19:31 . 2010-08-17 23:54 280064 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2010-11-01 19:31 . 2010-08-17 23:54 135680 ----a-w- c:\windows\system32\XpsRasterService.dll
2010-11-01 19:31 . 2010-08-17 23:51 357376 ----a-w- c:\windows\system32\MFHEAACdec.dll
2010-11-01 19:31 . 2010-08-17 23:51 261632 ----a-w- c:\windows\system32\mfreadwrite.dll
2010-11-01 19:31 . 2010-08-17 23:51 302592 ----a-w- c:\windows\system32\mfmp4src.dll
2010-11-01 19:31 . 2010-08-17 23:48 161280 ----a-w- c:\windows\system32\d3d10_1.dll
2010-11-01 19:31 . 2010-08-17 23:48 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2010-11-01 19:31 . 2010-08-17 23:52 979456 ----a-w- c:\windows\system32\MFH264Dec.dll
2010-11-01 19:31 . 2010-08-17 23:49 1174528 ----a-w- c:\windows\system32\d3d10warp.dll
2010-11-01 19:31 . 2010-08-17 23:49 1068032 ----a-w- c:\windows\system32\DWrite.dll
2010-11-01 19:31 . 2010-08-17 23:49 797184 ----a-w- c:\windows\system32\FntCache.dll
2010-11-01 19:31 . 2010-08-17 23:50 680960 ----a-w- c:\windows\system32\d2d1.dll
2010-11-01 19:29 . 2010-11-03 12:04 -------- d-----w- c:\program files\Feedback Tool
2010-10-27 07:50 . 2010-08-26 16:34 1696256 ----a-w- c:\windows\system32\gameux.dll
2010-10-27 07:50 . 2010-08-26 16:33 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2010-10-27 07:50 . 2010-08-26 14:23 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2010-10-21 19:21 . 2010-10-21 19:21 -------- d-----w- c:\users\hp\AppData\Local\Mainsoft
2010-10-21 17:43 . 2010-10-21 17:43 -------- d-----w- c:\program files\SmileyCentralIE_1w
2010-10-21 17:39 . 2010-11-16 15:44 -------- d-----w- c:\program files\Facicons
2010-10-20 15:46 . 2010-10-20 15:46 -------- d-----w- c:\program files\SmileyCentral_1v

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-19 09:41 . 2010-02-28 09:23 222080 ------w- c:\windows\system32\MpSigStub.exe
2010-09-15 02:50 . 2010-04-17 07:45 472808 ----a-w- c:\windows\system32\deployJava1.dll
2010-09-13 13:56 . 2010-10-13 08:24 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2010-09-08 09:17 . 2010-09-08 09:17 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-09-08 09:17 . 2010-09-08 09:17 69632 ----a-w- c:\windows\system32\QuickTime.qts
2010-09-07 16:12 . 2010-07-12 20:04 38848 ----a-w- c:\windows\avastSS.scr
2010-09-07 16:11 . 2010-02-27 22:26 167592 ----a-w- c:\windows\system32\aswBoot.exe
2010-09-07 15:52 . 2010-02-27 22:27 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-09-07 15:52 . 2010-02-27 22:27 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-09-07 15:47 . 2010-02-27 22:27 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-09-07 15:47 . 2010-02-27 22:27 50768 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-09-07 15:47 . 2010-02-27 22:27 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-09-06 16:20 . 2010-10-13 08:24 125952 ----a-w- c:\windows\system32\srvsvc.dll
2010-09-06 16:19 . 2010-10-13 08:24 17920 ----a-w- c:\windows\system32\netevent.dll
2010-09-06 13:45 . 2010-10-13 08:24 304128 ----a-w- c:\windows\system32\drivers\srv.sys
2010-09-06 13:45 . 2010-10-13 08:24 145408 ----a-w- c:\windows\system32\drivers\srv2.sys
2010-09-06 13:45 . 2010-10-13 08:24 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys
2010-08-31 15:46 . 2010-10-13 08:23 954752 ----a-w- c:\windows\system32\mfc40.dll
2010-08-31 15:46 . 2010-10-13 08:22 954288 ----a-w- c:\windows\system32\mfc40u.dll
2010-08-31 15:44 . 2010-10-13 08:22 531968 ----a-w- c:\windows\system32\comctl32.dll
2010-08-31 13:27 . 2010-10-13 08:22 2038272 ----a-w- c:\windows\system32\win32k.sys
2010-08-26 16:37 . 2010-10-13 08:23 157184 ----a-w- c:\windows\system32\t2embed.dll
2010-08-26 16:33 . 2010-10-27 07:50 173056 ----a-w- c:\windows\apppatch\AcXtrnal.dll
2010-08-26 16:33 . 2010-10-27 07:50 2159616 ----a-w- c:\windows\apppatch\AcGenral.dll
2010-08-26 16:33 . 2010-10-27 07:50 542720 ----a-w- c:\windows\apppatch\AcLayers.dll
2010-08-26 16:33 . 2010-10-27 07:50 458752 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2010-08-25 18:46 . 2010-08-25 18:46 8198680 ----a-w- c:\windows\system32\TVWSetup.exe
2010-08-25 18:45 . 2009-12-18 08:11 948760 ----a-w- c:\windows\system32\igxpun.exe
2010-08-25 18:45 . 2008-07-10 22:27 136216 ----a-w- c:\windows\system32\igfxtray.exe
2010-08-25 18:45 . 2008-07-10 22:27 266776 ----a-w- c:\windows\system32\igfxsrvc.exe
2010-08-25 18:45 . 2008-07-10 22:27 170520 ----a-w- c:\windows\system32\igfxpers.exe
2010-08-25 18:45 . 2010-08-25 18:45 179224 ----a-w- c:\windows\system32\igfxext.exe
2010-08-25 18:45 . 2008-07-10 22:27 171032 ----a-w- c:\windows\system32\hkcmd.exe
2010-08-25 18:45 . 2010-08-25 18:45 3156504 ----a-w- c:\windows\system32\GfxUI.exe
2010-08-25 18:39 . 2010-08-25 18:39 81920 ----a-w- c:\windows\system32\igfxCoIn_v2202.dll
2010-08-25 18:31 . 2010-08-25 18:31 9024512 ----a-w- c:\windows\system32\drivers\igdkmd32.sys
2010-08-25 18:31 . 2008-07-06 20:15 4967424 ----a-w- c:\windows\system32\igdumd32.dll
2010-08-25 18:28 . 2008-07-06 20:10 571904 ----a-w- c:\windows\system32\igdumdx32.dll
2010-08-25 18:23 . 2010-08-25 18:23 4411904 ----a-w- c:\windows\system32\igd10umd32.dll
2010-08-25 18:09 . 2010-08-25 18:09 11040256 ----a-w- c:\windows\system32\ig4icd32.dll
2010-08-25 18:02 . 2010-08-25 18:02 86016 ----a-w- c:\windows\system32\igfxrsky.lrc
2010-08-25 18:02 . 2010-08-25 18:02 85504 ----a-w- c:\windows\system32\igfxrslv.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86528 ----a-w- c:\windows\system32\igfxresn.lrc
2010-08-25 18:02 . 2010-08-25 18:02 85504 ----a-w- c:\windows\system32\igfxrtrk.lrc
2010-08-25 18:02 . 2010-08-25 18:02 85504 ----a-w- c:\windows\system32\igfxrsve.lrc
2010-08-25 18:02 . 2010-08-25 18:02 84992 ----a-w- c:\windows\system32\igfxrtha.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86016 ----a-w- c:\windows\system32\igfxrrus.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86016 ----a-w- c:\windows\system32\igfxrptg.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86016 ----a-w- c:\windows\system32\igfxrplk.lrc
2010-08-25 18:02 . 2010-08-25 18:02 85504 ----a-w- c:\windows\system32\igfxrptb.lrc
2010-08-25 18:02 . 2010-08-25 18:02 85504 ----a-w- c:\windows\system32\igfxrnor.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86016 ----a-w- c:\windows\system32\igfxrita.lrc
2010-08-25 18:02 . 2010-08-25 18:02 85504 ----a-w- c:\windows\system32\igfxrhun.lrc
2010-08-25 18:02 . 2010-08-25 18:02 84480 ----a-w- c:\windows\system32\igfxrheb.lrc
2010-08-25 18:02 . 2010-08-25 18:02 82944 ----a-w- c:\windows\system32\igfxrkor.lrc
2010-08-25 18:02 . 2010-08-25 18:02 82944 ----a-w- c:\windows\system32\igfxrjpn.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86528 ----a-w- c:\windows\system32\igfxrfra.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86528 ----a-w- c:\windows\system32\igfxrell.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86016 ----a-w- c:\windows\system32\igfxrnld.lrc
2010-08-25 18:02 . 2010-08-25 18:02 86016 ----a-w- c:\windows\system32\igfxrdeu.lrc
2010-08-25 18:02 . 2010-08-25 18:02 85504 ----a-w- c:\windows\system32\igfxrfin.lrc
2010-08-25 18:02 . 2010-08-25 18:02 84992 ----a-w- c:\windows\system32\igfxrdan.lrc
2010-08-25 18:02 . 2010-08-25 18:02 84480 ----a-w- c:\windows\system32\igfxrara.lrc
2010-08-25 18:02 . 2010-08-25 18:02 81920 ----a-w- c:\windows\system32\igfxrcht.lrc
2010-08-25 18:02 . 2010-08-25 18:02 81920 ----a-w- c:\windows\system32\igfxrchs.lrc
2010-08-25 18:02 . 2008-07-06 19:43 85504 ----a-w- c:\windows\system32\igfxrcsy.lrc
2010-08-25 18:00 . 2010-08-25 18:00 23552 ----a-w- c:\windows\system32\igfxexps.dll
2010-08-25 18:00 . 2010-08-25 18:00 194560 ----a-w- c:\windows\system32\igfxpph.dll
2010-08-25 17:59 . 2010-08-25 17:59 115200 ----a-w- c:\windows\system32\igfxcpl.cpl
2010-08-25 17:59 . 2008-07-06 19:39 261632 ----a-w- c:\windows\system32\igfxTMM.dll
2010-08-25 17:59 . 2008-07-06 19:38 57344 ----a-w- c:\windows\system32\igfxsrvc.dll
2010-08-25 17:59 . 2010-08-25 17:59 130048 ----a-w- c:\windows\system32\igfxdo.dll
2010-08-25 17:59 . 2008-07-06 19:37 94720 ----a-w- c:\windows\system32\hccutils.dll
2010-08-25 17:59 . 2010-08-25 17:59 120320 ----a-w- c:\windows\system32\gfxSrvc.dll
2010-08-25 17:59 . 2010-08-25 17:59 4096 ----a-w- c:\windows\system32\IGFXDEVLib.dll
2010-08-25 17:59 . 2010-08-25 17:59 85504 ----a-w- c:\windows\system32\igfxrenu.lrc
2010-08-25 17:59 . 2008-07-06 19:37 228864 ----a-w- c:\windows\system32\igfxdev.dll
2010-08-25 17:59 . 2008-07-06 19:37 828928 ----a-w- c:\windows\system32\igfxress.dll
2010-08-25 17:52 . 2010-08-25 17:52 452440 ----a-w- c:\windows\system32\d3dx10_40.dll
2010-08-25 17:52 . 2010-08-25 17:52 208896 ----a-w- c:\windows\system32\iglhsip32.dll
2010-08-25 17:52 . 2010-08-25 17:52 143360 ----a-w- c:\windows\system32\iglhcp32.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{339a0dff-d9af-439b-92bc-636220fb3dae}"= "c:\program files\SmileyCentralIE_1w\bar\1.bin\1wSrcAs.dll" [2010-10-21 53248]

[HKEY_CLASSES_ROOT\clsid\{339a0dff-d9af-439b-92bc-636220fb3dae}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{22E4A387-EBFC-442B-B46A-4E7957176FE0}]
2010-06-18 16:01 2604032 ------w- c:\program files\Facicons\tbcore3.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{55cde9e7-696c-47c4-8e21-7210b8aeb103}]
2010-10-21 17:43 675840 ----a-w- c:\progra~1\SMILEY~3\bar\1.bin\1wbar.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5ed22e89-62fa-47ec-bd8d-374d849d436c}]
2010-10-21 17:43 53248 ----a-w- c:\program files\SmileyCentralIE_1w\bar\1.bin\1wSrcAs.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}"= "c:\program files\Facicons\tbcore3.dll" [2010-06-18 2604032]
"{d3ca5551-fc2e-4d09-8ece-263607acf9fc}"= "c:\program files\SmileyCentralIE_1w\bar\1.bin\1wbar.dll" [2010-10-21 675840]

[HKEY_CLASSES_ROOT\clsid\{7124c800-b6b8-4a2e-bec0-8b9eccea2149}]
[HKEY_CLASSES_ROOT\TBSB02843.TBSB02843.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\TBSB02843.TBSB02843]

[HKEY_CLASSES_ROOT\clsid\{d3ca5551-fc2e-4d09-8ece-263607acf9fc}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}"= "c:\program files\Facicons\tbcore3.dll" [2010-06-18 2604032]
"{D3CA5551-FC2E-4D09-8ECE-263607ACF9FC}"= "c:\program files\SmileyCentralIE_1w\bar\1.bin\1wbar.dll" [2010-10-21 675840]

[HKEY_CLASSES_ROOT\clsid\{7124c800-b6b8-4a2e-bec0-8b9eccea2149}]
[HKEY_CLASSES_ROOT\TBSB02843.TBSB02843.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\TBSB02843.TBSB02843]

[HKEY_CLASSES_ROOT\clsid\{d3ca5551-fc2e-4d09-8ece-263607acf9fc}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-09-02 13351304]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"ICQ"="c:\program files\ICQ7.0\ICQ.exe" [2010-10-27 133432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-17 1049896]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2008-08-01 202032]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-09-07 2838912]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2008-04-15 488752]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-09-23 468264]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-08-12 2215064]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"LightScribe Control Panel"=c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"HP Health Check Scheduler"=c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
"HP Software Update"=c:\program files\Hp\HP Software Update\HPWuSchd2.exe
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"TkBellExe"="c:\program files\real\realplayer\Update\realsched.exe" -osboot
"IgfxTray"=c:\windows\system32\igfxtray.exe
"HotKeysCmds"=c:\windows\system32\hkcmd.exe
"Persistence"=c:\windows\system32\igfxpers.exe
"TO2SSM_McciTrayApp"=c:\program files\TO2SSM\McciTrayApp.exe
"UpdatePSTShortCut"="c:\program files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "c:\program files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
"NeroFilterCheck"=c:\program files\Common Files\Ahead\Lib\NeroCheck.exe
"SmileyCentralIE_1w Browser Plugin Loader"=c:\progra~1\SMILEY~3\bar\1.bin\1wbrmon.exe
"UpdateLBPShortCut"="c:\program files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "c:\program files\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
"UpdateP2GoShortCut"="c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "c:\program files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
"UpdatePDIRShortCut"="c:\program files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "c:\program files\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0"
"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "c:\program files\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-07-01 136176]
R3 Axtmvflt;Axesstel USB Filter Service;c:\windows\system32\DRIVERS\Axtmvflt.sys [2007-03-22 3456]
R3 Axtmvmdm;Axesstel USB Modem;c:\windows\system32\DRIVERS\Axtmvmdm.sys [2007-03-26 40064]
R3 Axtmvprt;Axesstel Diagnostic Port;c:\windows\system32\Drivers\Axtmvprt.sys [2007-03-26 38784]
R3 FlashUSB;FlashUSB;c:\windows\system32\DRIVERS\FlashUSB.sys [2009-05-12 16896]
R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\DRIVERS\lgbtport.sys [x]
R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\DRIVERS\lgbtbus.sys [x]
R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\DRIVERS\lgvmodem.sys [x]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S1 aswSP;aswSP; [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-07-29 136632]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-08-12 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 96920]
S2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2008-01-21 21504]
S2 Recovery Service for Windows;Recovery Service for Windows;c:\program files\SMINST\BLService.exe [2008-10-06 365952]
S2 SmileyCentral_1vService;SmileyCentral Service;c:\progra~1\SMILEY~2\bar\1.bin\1vbarsvc.exe [2010-10-20 28766]
S2 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2010-07-06 173352]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [2010-10-27 1483072]
S3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-04-03 193840]
S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2008-06-29 112128]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [2010-10-07 10064]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
ezSharedSvc

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 09:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'

2010-11-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-01 20:25]

2010-11-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-01 20:25]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=cs_cz&c=91&bd=Presario&pf=cnnb
IE: {{0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - c:\program files\Seznam.cz\listicka.dll
FF - ProfilePath - c:\users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\wvzetkm0.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=CDS&o=16205&locale=en_US&apn_uid=DFDB564E-2432-4D65-8D27-55F32B88AA38&apn_ptnrs=QR&apn_sauid=0C2AB7E0-6AB5-45EC-A8F8-34B78216904A&apn_dtid=&q=
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - component: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll
FF - component: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordlegacyext.dll
FF - component: c:\users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\wvzetkm0.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll
FF - component: c:\users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\wvzetkm0.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\RadioWMPCore.dll
FF - plugin: c:\program files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npkimi.dll
FF - plugin: c:\program files\SmileyCentral_1v\bar\1.bin\NP1vStub.dll
FF - plugin: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
FF - plugin: c:\users\hp\Desktop\DivX\DivX Player\npDivxPlayerPlugin.dll
FF - plugin: c:\users\hp\Desktop\DivX\DivX Web Player\npdivx32.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----

c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-18 19:45
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Celkový čas: 2010-11-18 19:47:34
ComboFix-quarantined-files.txt 2010-11-18 18:47
ComboFix2.txt 2010-11-16 15:55

Před spuštěním: Volných bajtů: 160 213 364 736
Po spuštění: Volných bajtů: 159 644 872 704

Current=1 Default=1 Failed=0 LastKnownGood=10 Sets=1,2,3,4,5,6,7,8,9,10
- - End Of File - - A2A582560E24E5AD08CBD5E4F7502F5C

Log již vypadá čistý. Dává instalace IE nějakou chybovou hlášku?

právě, že nedává.
na těchto stránkách začínám instalaci

http://software.seznam.cz/ie?browser=visty

začne instalace, první část je stažení souboru, které proběhne bez problémů, potom začíná vlastní instalace, ale ta již neproběhne. instalační okno ukáže pouze to, že instalace nebyla provedena, stejně tak stažení aktualizací IE 8 a nabídne restart systému kvůli odstranění. nic jiného.

při instalaci IE 9 beta verze ze stránek

http://windows.microsoft.com/cs-cz/inte ... /worldwide

mi to hlásí toto:

INSTALACE APLIKACE INTERNET EXPLORER NEBYLA DOKONČENA
INSTALAČNÍ PROGRAM NEMŮŽE POKRAČOVAT, PROTOŽE V POČÍTAČI JE JIŽ NAINSTALOVÁNA
NOVĚJŠÍ VERZE APLIKACE INTERNET EXPLORER.


nic víc to nenahlásí. chjo

On systém hlásí, že má nainstalovánu neznámou verzi:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:25:09, on 14.11.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Zkuste obnovu systém před datum, než jste z reinstalem začal a pak zkuste znovu reinstalovat.

mohla bych vás poprosit o postup jak toho docílit? předem vám mockrát děkuji

Programy>příslušenství>systémové nástroje>obnovení systému.

dobrý večer, tak v té tabulce již není datum obnovy, které potřebuji.
poslední datum je 18.11.2010 a já bych se potřebovala dostat na datum cca 10.11.2010, je možné se k tomuto datu nějakým způsobem dopracovat?

Zkusíme to tak, že přesvědčíme systém, že IE není nainstalován. Start>spustit>(napsat) regedit>OK. Vyhledáme tento klíč:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}

a jeho hodnotu nastavíme v klíči IsInstalled na 0 . Pak zkuste znovu instalaci.

už jsem z toho na prášky chichichi. opět jsem vše udělala jakbylo napsáno a stále stejný problém. Soubor IE 8 se sice stáhne, ale instalace nedokončí. Jak jsem již psala minule. (