VIRY.CZ

Po zapnuti PC som zistil ze sa mi internet výrazne spomalil a potom som zistil ze moja IP adresa je 116.255.24.45 z Austrálie, pricom mam net od t.comu

Moze to byt tym ze vcera som surfoval "anonymne" pomocou programu Platinum HideIP
avsak dnes po vypnuti programu sa moja Ip nezmenila

Log:

Logfile of random's system information tool 1.08 (written by random/random)
Run by Owner at 2010-12-13 15:42:47
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 2 GB (6%) free of 30 GB
Total RAM: 1534 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:42:50, on 13. 12. 2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\LMabcoms.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Opera\Opera.exe
C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Documents and Settings\Owner\Local Settings\Data aplikací\Opera\Opera\temporary_downloads\RSIT.exe
C:\Program Files\trend micro\Owner.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=;ftp=;https=;
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [VMonitorVMUVC] "C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe" VMUVC
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Owner\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Topcom Wireless LAN Utility.lnk = C:\Program Files\TOPCOM\Common\Topcom_USB_4001g.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Eyeline Video System (EyelineService) - Unknown owner - C:\Program Files\NCH Software\Eyeline\eyeline.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lmab_device - Unknown owner - C:\WINDOWS\system32\LMabcoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 3534 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1292428093-2000478354-725345543-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1292428093-2000478354-725345543-1003UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-11-02 19580520]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-07-20 7581696]
"nwiz"=nwiz.exe /install []
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"VMonitorVMUVC"=C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe [2007-12-20 135168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-18 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2010-04-16 3872080]
"Google Update"=C:\Documents and Settings\Owner\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2010-04-24 136176]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-10-13 1694208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2010-09-02 13351304]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Topcom Wireless LAN Utility.lnk - C:\Program Files\TOPCOM\Common\Topcom_USB_4001g.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2006-06-19 702768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-08-24 133120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\WINDOWS\system32\LMabcoms.exe"="C:\WINDOWS\system32\LMabcoms.exe:*:Enabled:Lexmark Enhanced TCP/IP"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======File associations======

.reg - open - "regedit.exe" "%1"

======List of files/folders created in the last 1 months======

2010-12-12 19:02:10 ----D---- C:\Documents and Settings\Owner\Data aplikací\Thunderbird
2010-12-12 18:47:29 ----D---- C:\Program Files\Mozilla Thunderbird
2010-12-12 13:55:41 ----D---- C:\Program Files\DesiatimiPrstami
2010-12-11 14:05:28 ----D---- C:\Program Files\Runtime Software
2010-12-08 22:05:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\NCH Swift Sound
2010-12-08 22:05:50 ----D---- C:\Program Files\NCH Swift Sound
2010-12-08 18:51:25 ----D---- C:\Documents and Settings\Owner\Data aplikací\NCH Software
2010-12-08 18:51:02 ----D---- C:\Program Files\NCH Software
2010-12-08 18:51:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\NCH Software
2010-12-08 18:36:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-12-08 18:35:52 ----D---- C:\Program Files\LEDSET
2010-12-08 16:36:09 ----D---- C:\WINDOWS\VMUVC
2010-12-08 16:35:52 ----A---- C:\WINDOWS\system32\VvFtCtrl.dll
2010-12-08 16:35:52 ----A---- C:\WINDOWS\system32\VMUVC.dll
2010-12-08 16:35:52 ----A---- C:\WINDOWS\system32\drivers\vvftUVC.sys
2010-12-08 16:35:52 ----A---- C:\WINDOWS\system32\drivers\VMUVC.sys
2010-12-08 16:35:49 ----A---- C:\WINDOWS\system32\DIFxAPI.dll
2010-12-08 16:35:30 ----D---- C:\Program Files\Vimicro Corporation
2010-12-08 16:35:13 ----D---- C:\Documents and Settings\Owner\Data aplikací\InstallShield
2010-12-08 16:34:48 ----A---- C:\WINDOWS\system32\drivers\MSTEE.sys
2010-12-08 16:34:32 ----A---- C:\WINDOWS\system32\drivers\NdisIP.sys
2010-12-08 16:34:29 ----A---- C:\WINDOWS\system32\drivers\StreamIP.sys
2010-12-08 16:34:27 ----A---- C:\WINDOWS\system32\drivers\SLIP.sys
2010-12-08 16:34:24 ----A---- C:\WINDOWS\system32\drivers\WSTCODEC.SYS
2010-12-08 16:34:22 ----A---- C:\WINDOWS\system32\drivers\NABTSFEC.sys
2010-12-08 16:34:19 ----A---- C:\WINDOWS\system32\drivers\CCDECODE.sys
2010-12-08 16:34:07 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2010-12-08 16:34:07 ----A---- C:\WINDOWS\system32\drivers\usbvideo.sys
2010-12-06 20:13:08 ----D---- C:\.file_store_32
2010-12-02 23:19:39 ----D---- C:\Documents and Settings\Owner\Data aplikací\Screaming Bee
2010-12-02 23:18:17 ----D---- C:\Program Files\Screaming Bee
2010-12-02 23:14:15 ----D---- C:\vcs5BGEffects
2010-12-02 23:13:18 ----D---- C:\Program Files\AV Vcs 6.0 DIAMOND
2010-11-27 22:37:32 ----D---- C:\Program Files\Perfect Uninstaller
2010-11-27 22:23:26 ----D---- C:\ProgramData
2010-11-27 22:19:06 ----A---- C:\WINDOWS\system32\TURegOpt.exe
2010-11-27 22:19:03 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2010-11-27 22:18:20 ----D---- C:\Documents and Settings\Owner\Data aplikací\TuneUp Software
2010-11-27 22:18:00 ----D---- C:\Program Files\TuneUp Utilities 2011
2010-11-27 22:17:44 ----D---- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
2010-11-27 22:17:32 ----SHD---- C:\Documents and Settings\All Users\Data aplikací\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2010-11-27 21:48:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\Tacsoftware
2010-11-27 21:48:19 ----A---- C:\WINDOWS\system32\VBPrnDlg.dll
2010-11-27 21:48:19 ----A---- C:\WINDOWS\system32\vbalIcoM6.dll
2010-11-27 21:48:19 ----A---- C:\WINDOWS\system32\SSubTmr6.dll
2010-11-27 21:48:18 ----A---- C:\WINDOWS\system32\LicObj.dll
2010-11-27 21:48:15 ----A---- C:\WINDOWS\system32\SkyLt3Lt.dll
2010-11-27 21:48:10 ----D---- C:\Program Files\Multiple Choice Quiz Maker
2010-11-27 20:30:09 ----D---- C:\qw
2010-11-27 20:07:03 ----A---- C:\WINDOWS\system32\msvcr100.dll
2010-11-27 20:07:03 ----A---- C:\WINDOWS\system32\msvcp100.dll
2010-11-27 20:05:58 ----D---- C:\Program Files\XYLIO
2010-11-24 22:11:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\Agnitum
2010-11-24 21:18:57 ----D---- C:\Documents and Settings\Owner\Data aplikací\Deckadance16
2010-11-23 22:30:42 ----A---- C:\WINDOWS\vncutil.exe
2010-11-23 22:30:40 ----A---- C:\WINDOWS\system32\RtkCoInstXP.dll
2010-11-23 22:30:40 ----A---- C:\WINDOWS\RtkAudioService.exe
2010-11-23 22:30:37 ----A---- C:\WINDOWS\system32\drivers\Monfilt.sys
2010-11-23 22:30:35 ----A---- C:\WINDOWS\system32\drivers\Ambfilt.sys
2010-11-23 22:30:34 ----D---- C:\Program Files\Realtek
2010-11-23 22:30:28 ----A---- C:\WINDOWS\RtlExUpd.dll
2010-11-23 21:34:13 ----D---- C:\Program Files\AC3Filter
2010-11-20 18:48:39 ----D---- C:\Program Files\Xvid
2010-11-20 18:48:39 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-11-20 18:48:39 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-11-20 18:48:37 ----D---- C:\Program Files\FDRLab
2010-11-20 18:41:13 ----D---- C:\Program Files\Wondershare
2010-11-16 23:46:33 ----D---- C:\Documents and Settings\Owner\Data aplikací\Nik Software
2010-11-16 23:20:34 ----D---- C:\WINDOWS\MSSecurityNS
2010-11-16 23:20:34 ----D---- C:\WINDOWS\MSSecurityNi

======List of files/folders modified in the last 1 months======

2010-12-13 15:42:49 ----D---- C:\Program Files\Trend Micro
2010-12-13 15:42:48 ----D---- C:\WINDOWS\Temp
2010-12-13 15:37:52 ----D---- C:\WINDOWS\Prefetch
2010-12-13 11:10:16 ----D---- C:\WINDOWS\system32
2010-12-13 01:03:01 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-12-12 18:47:29 ----RD---- C:\Program Files
2010-12-12 15:50:59 ----D---- C:\Documents and Settings\Owner\Data aplikací\vlc
2010-12-12 12:43:16 ----A---- C:\Documents and Settings\Owner\Data aplikací\ArbiAuth.ini
2010-12-11 14:17:25 ----A---- C:\WINDOWS\win.ini
2010-12-11 13:56:09 ----D---- C:\WINDOWS
2010-12-11 00:23:06 ----D---- C:\Program Files\Mozilla Firefox
2010-12-09 19:08:01 ----D---- C:\WINDOWS\Minidump
2010-12-09 18:43:15 ----D---- C:\Documents and Settings\Owner\Data aplikací\Skype
2010-12-09 17:45:01 ----D---- C:\Documents and Settings\Owner\Data aplikací\dvdcss
2010-12-09 17:28:59 ----D---- C:\WINDOWS\system32\CatRoot2
2010-12-09 16:03:22 ----D---- C:\Documents and Settings\Owner\Data aplikací\skypePM
2010-12-08 18:35:56 ----SHD---- C:\WINDOWS\Installer
2010-12-08 18:10:02 ----HD---- C:\WINDOWS\inf
2010-12-08 18:04:08 ----D---- C:\WINDOWS\system32\CatRoot
2010-12-08 18:02:27 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-12-08 18:02:22 ----D---- C:\WINDOWS\system32\drivers
2010-12-08 16:36:09 ----D---- C:\WINDOWS\twain_32
2010-12-08 16:36:00 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-12-08 16:35:52 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-12-08 16:35:29 ----HD---- C:\Program Files\InstallShield Installation Information
2010-12-08 16:35:05 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-11-29 18:02:12 ----D---- C:\Documents and Settings\Owner\Data aplikací\Adobe
2010-11-29 17:49:26 ----RSD---- C:\WINDOWS\Fonts
2010-11-28 23:20:15 ----A---- C:\Documents and Settings\Owner\Data aplikací\RSBot_Accounts.ini
2010-11-27 22:19:10 ----D---- C:\WINDOWS\system32\config
2010-11-26 13:49:25 ----D---- C:\WINDOWS\.jagex_cache_32
2010-11-24 21:14:38 ----D---- C:\Program Files\VstPlugins
2010-11-23 22:31:22 ----D---- C:\WINDOWS\system32\RTCOM
2010-11-21 13:58:56 ----D---- C:\Program Files\PlatinumHideIP
2010-11-21 13:42:54 ----D---- C:\Program Files\XeroBank
2010-11-20 23:39:48 ----D---- C:\Program Files\Native Instruments
2010-11-20 23:39:48 ----D---- C:\Program Files\Common Files\Native Instruments
2010-11-20 11:35:10 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-11-16 23:21:29 ----D---- C:\WINDOWS\WinSxS

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2005-08-13 61312]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-05-16 691696]
R1 AmdK8;AMD-Prozessortreiber; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-06-18 43520]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2010-08-03 55256]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-18 14848]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-04-15 20747]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-08-04 140752]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2010-07-29 134512]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2004-08-18 88448]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2004-08-18 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2004-08-18 55936]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-18 60800]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2010-07-29 32608]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-18 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-11-02 6188648]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-18 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-07-20 3685152]
R3 RT73;Topcom Skyr@cer USB 4001g Driver; C:\WINDOWS\system32\DRIVERS\rt73.sys [2005-11-24 245248]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-07-11 84096]
R3 SCREAMINGBDRIVER;Screaming Bee Audio; C:\WINDOWS\system32\drivers\ScreamingBAudio.sys [2009-12-01 34384]
R3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2006-01-20 930308]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-18 31616]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 arfzj7ic;arfzj7ic; C:\WINDOWS\system32\drivers\arfzj7ic.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\WINDOWS\system32\DRIVERS\s1039bus.sys [2009-11-19 98672]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s1039mdfl.sys [2009-11-19 14960]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s1039mdm.sys [2009-11-19 124016]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s1039mgmt.sys [2009-11-19 117872]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\WINDOWS\system32\DRIVERS\s1039nd5.sys [2009-11-19 25456]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s1039obex.sys [2009-11-19 113904]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\WINDOWS\system32\DRIVERS\s1039unic.sys [2009-11-19 123504]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-18 26496]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2004-08-03 78464]
S3 VMUVC;Vimicro Camera Service VMUVC; C:\WINDOWS\System32\Drivers\VMUVC.sys [2010-01-12 252928]
S3 vvftUVC;Vimicro Camera Filter Service VMUVC; C:\WINDOWS\system32\drivers\vvftUVC.sys [2008-07-01 398720]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-08-12 810144]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-12 153376]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-07-20 143426]
R2 NwSapAgent;Agent SAP; C:\WINDOWS\system32\svchost.exe [2004-08-18 14336]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2004-08-18 14336]
R3 lmab_device;lmab_device; C:\WINDOWS\system32\LMabcoms.exe [2005-06-14 491520]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-24 136176]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-08-12 33584]
S3 EyelineService;Eyeline Video System; C:\Program Files\NCH Software\Eyeline\eyeline.exe [2010-12-08 675844]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NIHardwareService;NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [2009-12-08 3616768]

-----------------EOF-----------------

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware