VIRY.CZ

Dobrý den,
Pár dní zpět jsem jako pravidelný uživatel Facebooku chytl onen virus, o kterém se zde již psalo. Můj notebook od té doby není zcela v pořádku, proto se obracím na Vás.
Jelikož je doporučeno, aby byl problém s každým řešen individuelně, tak zakládám nové tema. Mám tedy jako první krok vložit log z RSIT, nebo z něčeho jiného ?
Předem děkuji komukoli, kdo se mě ujme.

Zdravim, pekny vecer preji a vitam Vas u nas na foru

Dekuji za dodrzeni onoho pravidla

Vlozte mi sem log z RSIT a podivame se na to

Takže konečně zasílám slíbený log. S nakaženým počítačem ta práce opravdu není jednoduchá.


Logfile of random's system information tool 1.09 (written by random/random)
Run by Adam at 2011-07-22 21:39:44
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 116 GB (39%) free of 293 GB
Total RAM: 3068 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:40:13, on 22.7.2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Safe mode with network support

Running processes:
C:\Windows\Explorer.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\Explorer.exe
C:\Users\Adam\Downloads\RSIT.exe
C:\Users\Adam\Downloads\RSIT.exe
C:\Program Files\trend micro\Adam.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.icq.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:25578
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Program Files\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfir.dll
O1 - Hosts: ::1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: RadioBar Toolbar - {5B291E6C-9A74-4034-971B-A4B007A0B315} - C:\Program Files\RadioBar\toolbar.ni.dll
O2 - BHO: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfir.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Program Files\Internet Explorer\qipsearchbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\PROGRA~1\GOOGLE~1\BAE.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\listicka.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfir.dll
O3 - Toolbar: RadioBar Toolbar - {5B291E6C-9A74-4034-971B-A4B007A0B315} - C:\Program Files\RadioBar\toolbar.ni.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Nástroje Lištičky - {1EA00BE1-6E54-4E2A-8099-680300BF23E1} - C:\Program Files\Seznam.cz\toolbar\toolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files\Sony\ISB Utility\ISBMgr.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [MarketingTools] C:\Program Files\Sony\Marketing Tools\MarketingTools.exe
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [THCS] C:\Windows\system32\drivers\imon\PKSERV~1.EXE
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [wcmdmgr] C:\Windows\wt\wcmdmgrl.exe -launch
O4 - HKLM\..\Run: [TkBellExe] "c:\program files\real\realplayer\Update\realsched.exe" -osboot
O4 - HKLM\..\Run: [InstaLAN] "C:\Program Files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe" startup
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Kalendar] C:\Program Files\Kalendar\kalendar.exe
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.5\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: Psi.lnk = C:\Program Files\Psi\psi.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: QIP Infium - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP Infium\infium.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\drivers\imon\pklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\drivers\imon\pklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\drivers\imon\pklsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... oader5.cab
O16 - DPF: {26ACAE6F-BC95-44B4-9150-61E4D20D5C2E} (Activex Control) - http://mhd.frag.cz/loadgame_et.cab
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} (Windows Live OneCare safety scanner control) - http://cdn.scan.onecare.live.com/resour ... cctrl2.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: toolbarchrome - {718733BC-AD64-4E5F-AC18-A85FBD75D54D} - C:\Program Files\RadioBar\toolbar.ni.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: AffinegyService - Affinegy, Inc. - C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe
O23 - Service: Belkin Local Backup Service - Unknown owner - C:\Program Files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe
O23 - Service: Belkin Network USB Helper - Unknown owner - C:\Program Files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (file missing)
O23 - Service: ESET Service (ekrn) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Update Service (gupdate1c9895355c451b0) (gupdate1c9895355c451b0) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NSUService - Sony Corporation - C:\Program Files\Sony\Network Utility\NSUService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: VAIO Media plus Content Importer (SOHCImp) - Sony Corporation - C:\Program Files\Sony\VAIO Media plus\SOHCImp.exe
O23 - Service: VAIO Media plus Digital Media Server (SOHDms) - Sony Corporation - C:\Program Files\Sony\VAIO Media plus\SOHDms.exe
O23 - Service: VAIO Media plus Device Searcher (SOHDs) - Sony Corporation - C:\Program Files\Sony\VAIO Media plus\SOHDs.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Power Management - Sony Corporation - C:\Program Files\Sony\VAIO Power Management\SPMService.exe
O23 - Service: VAIO Content Folder Watcher (VCFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: Stardock WindowBlinds (WindowBlinds) - Stardock Corporation - C:\PROGRA~1\Stardock\OBJECT~2\WINDOW~1\VistaSrv.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 17782 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Google Software Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\nbc3h20c.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://start.icq.com/"
prefs.js - "extensions.enabledItems" - "plugin2@gameplaylabs.com:2.0, {76063e7f-3558-4b68-8287-54eb6512adc0}:2.8.0, {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9, {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17, info@lingea.com:1.2, {20a82645-c095-46ed-80e3-08825760534b}:1.1, {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.1, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.19"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.2.6&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0]
"Description"=DivX® Player Plugin for VOD Content
"Path"=C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa2,version=2.0.0]
"Description"=Picasa2 plugin
"Path"=C:\Program Files\Picasa2\npPicasa2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pack.google.com/Google Updater;version=13]
"Description"=Google Updater
"Path"=C:\Program Files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@parallelgraphics.com/Cortona]
"Description"=Cortona VRML Plugin
"Path"=C:\Program Files\Common Files\ParallelGraphics\Cortona\npCortona.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=12.0.1.609]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=c:\program files\real\realplayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=12.0.1.609]
"Description"=RealJukebox Netscape Plugin
"Path"=c:\program files\real\realplayer\Netscape6\nprjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.609]
"Description"=RealPlayer(tm) HTML5VideoShim Plug-In
"Path"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.609]
"Description"=12.0.1.609
"Path"=c:\program files\real\realplayer\Netscape6\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll

C:\Program Files\Mozilla Firefox\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
AskHPRFF.js
binary.manifest
browsercomps.dll
GoogleDesktopMozilla.dll
GoogleDesktopMozillaStub.js
GoogleDesktopMozillaStub.xpt
nppl3260.xpt
nsjsrealplayerplugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeploytk.dll
npDivxPlayerPlugin.dll
nppdf32.dll
nppl3260.dll
nprjplug.dll
nprpjplug.dll
nsIDivxPlayerPlugin.xpt
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
googledesktop.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\nbc3h20c.default\extensions\
info@lingea.com
plugin2@gameplaylabs.com
{20a82645-c095-46ed-80e3-08825760534b}
{76063e7f-3558-4b68-8287-54eb6512adc0}
{800b5000-a755-47e1-992b-48a1c1357f07}

C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\nbc3h20c.default\searchplugins\
icq-search.xml
icqplugin-1.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin.gif
icqplugin.src
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2011-01-30 64928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-12-16 382720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5B291E6C-9A74-4034-971B-A4B007A0B315}]
RadioBar Toolbar - C:\Program Files\RadioBar\toolbar.ni.dll [2010-01-11 451808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
XfireXO Toolbar - C:\Program Files\XfireXO\tbXfir.dll [2010-02-22 2353176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - C:\Program Files\Internet Explorer\qipsearchbar.dll [2009-07-09 150768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-05-25 305328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2007-05-10 321120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA6319C0-31B7-401E-A518-A07C3DB8F777}]
CBrowserHelperObject Object - C:\PROGRA~1\GOOGLE~1\BAE.dll [2006-06-23 98304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-05-26 1385864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-12-29 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Lištička - C:\Program Files\Seznam.cz\listicka.dll [2011-03-15 2201600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2007-05-10 321120]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-09-06 1048888]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - XfireXO Toolbar - C:\Program Files\XfireXO\tbXfir.dll [2010-02-22 2353176]
{5B291E6C-9A74-4034-971B-A4B007A0B315} - RadioBar Toolbar - C:\Program Files\RadioBar\toolbar.ni.dll [2010-01-11 451808]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-05-26 1385864]
{1EA00BE1-6E54-4E2A-8099-680300BF23E1} - Nástroje Lištičky - C:\Program Files\Seznam.cz\toolbar\toolbar.dll [2011-03-10 183808]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-05-25 305328]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-06-23 6111232]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-07-04 1295656]
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [2008-10-14 623992]
""= []
"ISBMgr.exe"=C:\Program Files\Sony\ISB Utility\ISBMgr.exe [2008-04-04 317280]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-12-29 149280]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2010-08-31 30192]
"MarketingTools"=C:\Program Files\Sony\Marketing Tools\MarketingTools.exe [2008-09-18 24576]
"NWEReboot"= []
"googletalk"=C:\Program Files\Google\Google Talk\googletalk.exe [2007-01-01 3739648]
"Windows Mobile-based device management"=C:\Windows\WindowsMobile\wmdSync.exe [2008-01-21 215552]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-10-14 49152]
"hpqSRMon"=C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [2007-08-22 80896]
"Skytel"=C:\Windows\Skytel.exe [2008-06-23 1826816]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-06-07 13539872]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-06-07 92704]
"THCS"=C:\Windows\system32\drivers\imon\PKSERV~1.EXE [2010-01-25 688128]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe /hide /waitservice []
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-06-03 1144104]
"wcmdmgr"=C:\Windows\wt\wcmdmgrl.exe [1999-12-09 20480]
"TkBellExe"=c:\program files\real\realplayer\Update\realsched.exe [2010-12-16 274608]
"InstaLAN"=C:\Program Files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe [2010-07-28 1485208]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2010-11-30 997408]
"Malwarebytes' Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2010-12-20 963976]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Kalendar"=C:\Program Files\Kalendar\kalendar.exe [2005-11-09 580608]
"ICQ"=C:\Program Files\ICQ7.5\ICQ.exe [2011-06-29 124216]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Psi.lnk - C:\Program Files\Psi\psi.exe
Stardock ObjectDock.lnk - C:\Program Files\Stardock\ObjectDock\ObjectDock.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\VESWinlogon]
C:\Windows\system32\VESWinlogon.dll [2008-07-16 98304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WBSrv]
C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll [2010-06-07 198960]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=2
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"DisallowRun"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"VIDC.dvsd"=C:\Program Files\Common Files\Sony Shared\VideoLib\sonydv.dll
"VIDC.MPG4"=mpg4c32.dll
"VIDC.MP42"=mpg4c32.dll
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.siren"=sirenacm.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.XFR1"=xfcodec.dll
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-07-22 21:31:32 ----D---- C:\rsit
2011-07-22 21:31:32 ----D---- C:\Program Files\trend micro
2011-07-22 14:24:01 ----D---- C:\Users\Adam\AppData\Roaming\PCTools
2011-07-22 04:30:01 ----D---- C:\Program Files\PC Tools Security
2011-07-22 04:30:01 ----D---- C:\Program Files\Common Files\PC Tools
2011-07-19 14:42:55 ----D---- C:\Windows\pss
2011-07-18 20:35:09 ----D---- C:\Program Files\Emsisoft Anti-Malware
2011-07-17 23:09:22 ----SHD---- C:\found.000
2011-07-17 21:34:29 ----HD---- C:\Windows\update.1
2011-07-17 21:31:41 ----HD---- C:\Windows\update.tray-3-0-lnk
2011-07-17 21:31:41 ----HD---- C:\Windows\update.tray-3-0
2011-07-17 21:31:41 ----HD---- C:\Windows\update.tray-2-0-lnk
2011-07-17 21:31:41 ----HD---- C:\Windows\update.tray-2-0
2011-07-17 21:31:41 ----HD---- C:\Windows\update.tray-15-0-lnk
2011-07-17 21:31:41 ----HD---- C:\Windows\update.tray-15-0
2011-07-17 21:31:41 ----HD---- C:\Windows\update.tray-14-0-lnk
2011-07-17 21:31:41 ----HD---- C:\Windows\update.tray-14-0
2011-07-13 12:21:26 ----A---- C:\Windows\system32\drivers\bthport.sys
2011-07-13 12:21:25 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2011-07-13 12:21:19 ----A---- C:\Windows\system32\win32k.sys
2011-07-13 12:21:14 ----A---- C:\Windows\system32\kernel32.dll
2011-07-13 12:20:50 ----A---- C:\Windows\system32\winsrv.dll
2011-07-13 12:20:50 ----A---- C:\Windows\system32\csrsrv.dll
2011-06-30 09:28:51 ----D---- C:\ProgramData\Skype Extras
2011-06-29 09:45:01 ----A---- C:\Windows\system32\schannel.dll

======List of files/folders modified in the last 1 month======

2011-07-22 21:31:32 ----RD---- C:\Program Files
2011-07-22 21:13:48 ----A---- C:\Windows\ntbtlog.txt
2011-07-22 21:02:53 ----D---- C:\Windows\Temp
2011-07-22 21:00:05 ----D---- C:\Windows\system32\wbem
2011-07-22 21:00:05 ----D---- C:\Windows
2011-07-22 20:59:09 ----D---- C:\Windows\system32\config
2011-07-22 20:58:49 ----D---- C:\Windows\wt
2011-07-22 20:58:49 ----D---- C:\Windows\Tasks
2011-07-22 20:58:48 ----D---- C:\Windows\system32\Tasks
2011-07-22 20:58:48 ----D---- C:\Windows\system32\spool
2011-07-22 20:58:48 ----D---- C:\Windows\system32\Msdtc
2011-07-22 20:58:48 ----D---- C:\Windows\system32\drivers\imon
2011-07-22 20:58:48 ----D---- C:\Windows\system32\drivers\etc
2011-07-22 20:58:48 ----D---- C:\Windows\system32\drivers
2011-07-22 20:58:48 ----D---- C:\Windows\system32\CodeIntegrity
2011-07-22 20:58:48 ----D---- C:\Windows\system32\catroot2
2011-07-22 20:58:48 ----D---- C:\Windows\System32
2011-07-22 20:58:47 ----D---- C:\Windows\inf
2011-07-22 20:58:44 ----D---- C:\Users\Adam\AppData\Roaming\BitTorrent
2011-07-22 20:58:39 ----HD---- C:\ProgramData\IMPKL
2011-07-22 20:58:39 ----D---- C:\ProgramData\FLEXnet
2011-07-22 20:58:35 ----HD---- C:\ProgramData
2011-07-22 20:58:35 ----D---- C:\ProgramData\ESET
2011-07-22 20:58:34 ----D---- C:\Program Files\Microsoft Security Client
2011-07-22 20:58:33 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-07-22 20:58:33 ----D---- C:\Program Files\IrfanView
2011-07-22 20:58:29 ----D---- C:\Program Files\ESET
2011-07-22 20:58:29 ----D---- C:\Program Files\DesetiPrsty
2011-07-22 20:58:29 ----D---- C:\Program Files\Bus Driver
2011-07-22 20:58:24 ----D---- C:\Windows\registration
2011-07-22 20:46:20 ----AD---- C:\ProgramData\TEMP
2011-07-22 20:46:16 ----D---- C:\ProgramData\PC Tools
2011-07-22 19:13:14 ----SHD---- C:\System Volume Information
2011-07-22 04:30:01 ----D---- C:\Program Files\Common Files
2011-07-22 03:46:52 ----D---- C:\Program Files\Mozilla Firefox
2011-07-22 03:14:29 ----D---- C:\Windows\Minidump
2011-07-20 13:59:11 ----D---- C:\Windows\Debug
2011-07-20 12:51:18 ----D---- C:\Program Files\Browser Plugin
2011-07-18 03:17:40 ----D---- C:\Users\Adam\AppData\Roaming\.purple
2011-07-18 03:17:19 ----A---- C:\log.txt
2011-07-18 03:16:28 ----HD---- C:\Windows\system32\GroupPolicy
2011-07-18 03:08:15 ----D---- C:\Users\Adam\AppData\Roaming\ICQ
2011-07-18 03:03:38 ----SD---- C:\Users\Adam\AppData\Roaming\Microsoft
2011-07-17 22:59:56 ----D---- C:\Users\Adam\AppData\Roaming\Skype
2011-07-17 22:56:30 ----D---- C:\ProgramData\Easybits GO
2011-07-17 22:43:23 ----D---- C:\Windows\Prefetch
2011-07-17 21:51:54 ----D---- C:\Users\Adam\AppData\Roaming\go
2011-07-17 21:42:34 ----D---- C:\ProgramData\NVIDIA
2011-07-17 21:32:06 ----SHD---- C:\$Recycle.Bin
2011-07-17 02:51:13 ----D---- C:\ProgramData\Google Updater
2011-07-14 17:11:20 ----D---- C:\Windows\winsxs
2011-07-14 17:01:08 ----D---- C:\Windows\system32\catroot
2011-07-14 03:02:24 ----A---- C:\Windows\system32\mrt.exe
2011-07-04 12:17:16 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-07-01 14:13:54 ----D---- C:\Program Files\Opera
2011-06-30 09:33:14 ----SHD---- C:\Windows\Installer
2011-06-30 08:10:44 ----D---- C:\ProgramData\Microsoft Help
2011-06-30 03:52:05 ----D---- C:\Windows\Microsoft.NET
2011-06-30 03:51:27 ----RSD---- C:\Windows\assembly
2011-06-30 03:43:28 ----D---- C:\Program Files\ICQ7.5
2011-06-30 03:33:31 ----RSD---- C:\Windows\Fonts
2011-06-24 13:53:12 ----D---- C:\Program Files\Google

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2008-04-22 312344]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2010-06-10 45648]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2008-06-20 68608]
R2 risdptsk;risdptsk; C:\Windows\system32\DRIVERS\risdptsk.sys [2008-06-20 46592]
R3 Dot4;Ovladač MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-21 131584]
R3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-21 36864]
R3 NETw5v32;Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit ; C:\Windows\system32\DRIVERS\NETw5v32.sys [2008-04-28 3658752]
R3 SFEP;Sony Firmware Extension Parser; C:\Windows\system32\DRIVERS\SFEP.sys [2008-03-10 9344]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-07-04 199728]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2008-06-07 299008]
S1 DMICall;Sony DMI Call service; C:\Windows\system32\DRIVERS\DMICall.sys [2008-07-12 10216]
S1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-05-14 107256]
S1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-10-24 165264]
S1 MpKsl09f258d4;MpKsl09f258d4; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{DCAF4C38-10EE-4944-8F08-0A3316BBC99B}\MpKsl09f258d4.sys []
S1 MpKsl192c4dde;MpKsl192c4dde; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B3160241-7BED-4086-9095-B5D6BA5E4BCA}\MpKsl192c4dde.sys []
S1 MpKsl1d9e9719;MpKsl1d9e9719; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{3AFB2707-B329-4AF5-A69C-BD247B5797FF}\MpKsl1d9e9719.sys []
S1 MpKsl43b017b3;MpKsl43b017b3; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{DA1B66BB-F2DB-4847-9644-4E9F8975D9F5}\MpKsl43b017b3.sys []
S1 MpKsl9fd96f37;MpKsl9fd96f37; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{93533AFD-D97D-4838-AB16-26DE47FE9275}\MpKsl9fd96f37.sys []
S1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]
S1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656]
S2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-05-14 114472]
S2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2009-05-14 93312]
S2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2008-07-04 12672]
S2 regi;regi; \??\C:\Windows\system32\drivers\regi.sys [2007-04-18 11032]
S2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2008-07-04 8704]
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-06-07 909824]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-21 508416]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-06-17 30208]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2008-07-05 84008]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2008-07-05 108072]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2008-07-05 29736]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2008-07-05 18088]
S3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-21 16384]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2008-07-04 985600]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]
S3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2008-07-04 209408]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-06-23 2126688]
S3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-10-24 43392]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2010-10-24 54144]
S3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-06-07 7478976]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
S3 sxuptp;SXUPTP Driver; C:\Windows\system32\DRIVERS\sxuptp.sys [2009-06-22 247320]
S3 taphss;Anchorfree HSS Adapter; C:\Windows\system32\DRIVERS\taphss.sys [2010-01-09 32768]
S3 TcUsb;TC USB Kernel Driver; C:\Windows\System32\Drivers\tcusb.sys [2008-05-31 50576]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-04-11 15872]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-06-07 131000]
S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2008-07-04 661504]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2010-11-11 11736]
S2 AdobeActiveFileMonitor6.0;Adobe Active File Monitor V6; C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [2007-09-11 124832]
S2 AffinegyService;AffinegyService; C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe [2010-07-28 569752]
S2 Belkin Local Backup Service;Belkin Local Backup Service; C:\Program Files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe [2010-02-17 152064]
S2 Belkin Network USB Helper;Belkin Network USB Helper; C:\Program Files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe [2010-02-09 49152]
S2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2008-07-01 539176]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe []
S2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2008-05-01 815104]
S2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S2 gupdate1c9895355c451b0;Google Update Service (gupdate1c9895355c451b0); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-07 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-25 183280]
S2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-09-06 247096]
S2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-05 112152]
S2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 21504]
S2 NSUService;NSUService; C:\Program Files\Sony\Network Utility\NSUService.exe [2008-06-28 299008]
S2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-06-07 196608]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 21504]
S2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2008-05-01 466944]
S2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2009-12-17 185640]
S2 VAIO Event Service;VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [2008-07-16 182112]
S2 VAIO Power Management;VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2008-06-20 411488]
S2 VCFw;VAIO Content Folder Watcher; C:\Program Files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2008-06-20 415744]
S2 VzCdbSvc;VAIO Entertainment Database Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [2008-05-22 192512]
S2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S2 WindowBlinds;Stardock WindowBlinds; C:\PROGRA~1\Stardock\OBJECT~2\WINDOW~1\VistaSrv.exe [2009-06-04 230648]
S2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
S2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2008-07-04 386560]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe []
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-08-02 654848]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2010-08-31 30192]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-07 133104]
S3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 MSCSPTISRV;MSCSPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [2008-05-20 53248]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 206360]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PACSPTISVR;PACSPTISVR; C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [2008-05-20 53248]
S3 SOHCImp;VAIO Media plus Content Importer; C:\Program Files\Sony\VAIO Media plus\SOHCImp.exe [2008-05-21 103712]
S3 SOHDms;VAIO Media plus Digital Media Server; C:\Program Files\Sony\VAIO Media plus\SOHDms.exe [2008-05-21 353568]
S3 SOHDs;VAIO Media plus Device Searcher; C:\Program Files\Sony\VAIO Media plus\SOHDs.exe [2008-05-21 62752]
S3 SPTISRV;Sony SPTI Service; C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe [2008-05-20 77824]
S3 VAIO Entertainment TV Device Arbitration Service;VAIO Entertainment TV Device Arbitration Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [2008-05-22 73728]
S3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2008-06-12 337184]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface; C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [2008-06-12 83232]
S3 Vcsw;VAIO Entertainment UPnP Client Adapter; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [2008-06-19 279848]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

-----------------EOF-----------------

Odinstalujte ten NOD32, ktery asi moc legalni neni, navic se tam pere s MSE

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

• Pokud ho havet blokuje, pouzijte jeden z nasledujicich

  motji píše: Rkill EXE:
  http://download.bleepingcomputer.com/grinler/rkill.exe
  
  Rkill SCR:
  http://download.bleepingcomputer.com/grinler/rkill.scr
  
  Rkill PIF:
  http://download.bleepingcomputer.com/grinler/rkill.pif

• Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
• Spustte tradicne dvojklikem - program probehne temer okamzite a ukonci i svou cinnost
• RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
• Ted nerestartujte PC - prisli byste o ucinek RKillu

Aplikujte exeHelper by Raktor

• Linky ke stazeni
  • COM soubor http://vyosek.ic.cz/BE/exeHelper.com
  • SCR soubor http://vyosek.ic.cz/BE/exeHelper.scr
• Utilitu staci spustit jako Spravce (klik pravym mysidlem), probehne oprava a vznikne log exehelperlog.txt

Aplikujte RogueKiller

stell píše: pouzijes RogueKiller>.spustis>>stlac 2> [enter] log vloz sem
http://www.viry.cz/forum/viewtopic.php? ... 05#p981205

Jeste znovu RogueKiller ale nyni s moznosti 3 a pote jeste jednou s moznosti 4

RKill, eXeHelper i RogueKiller by mely udelat logy, vlozte mi je sem

ESET je definitivně pryč, vrhnu se tedy na to ostatní. Kdyby byly jakékoli problémy, tak se ozvu, jinak až budou hotovy všechny logy.

Ok, postupne je sem sypejte

Takže, jsem hotov.

This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 22.07.2011 at 23:28:26.
Operating System: Windows Vista (TM) Home Premium


Processes terminated by Rkill or while it was running:

C:\PROGRA~1\Stardock\OBJECT~2\WINDOW~1\VistaSrv.exe
C:\PROGRA~1\Stardock\OBJECT~2\WINDOW~1\WBVista.exe
C:\PROGRA~1\Stardock\OBJECT~2\WINDOW~1\WBVista.exe
C:\PROGRA~1\Stardock\OBJECT~2\WINDOW~1\WBVista.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe


Rkill completed on 22.07.2011 at 23:28:32.



exeHelper by Raktor
Build 20100414
Run at 23:52:22 on 07/22/11
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
Checking for bad processes...
Checking for bad files...
Checking for bad registry entries...
Resetting filetype association for .exe
Resetting filetype association for .com
Resetting userinit and shell values...
Resetting policies...
--Finished--

exeHelper by Raktor
Build 20100414
Run at 23:54:41 on 07/22/11
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
Checking for bad processes...
Checking for bad files...
Checking for bad registry entries...
Resetting filetype association for .exe
Resetting filetype association for .com
Resetting userinit and shell values...
Resetting policies...
--Finished--

RogueKiller V5.2.7 [06/30/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html

Operating System: Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Started in : Normal mode
User: Adam [Admin rights]
Mode: Remove -- Date : 07/23/2011 00:03:22

Bad processes: 0

Registry Entries: 4
[PROXY IE] HKCU\[...]\Internet Settings : ProxyServer (http=127.0.0.1:25578) -> NOT REMOVED, USE PROXYFIX
[HJPOL] HKCU\[...]\Explorer : DisallowRun (1) -> DELETED
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

HOSTS File:
127.0.0.1 localhost
::1 localhost
69.65.50.146 www.google.com.au
69.65.50.146 www.google.be
69.65.50.146 www.google.com.br
69.65.50.146 www.google.ca
69.65.50.146 www.google.ch
69.65.50.146 www.google.de
69.65.50.146 www.google.dk
69.65.50.146 www.google.fr
69.65.50.146 www.google.ie
69.65.50.146 www.google.it
69.65.50.146 www.google.co.jp
69.65.50.146 www.google.nl
69.65.50.146 www.google.no
69.65.50.146 www.google.co.nz
69.65.50.146 www.google.pl
69.65.50.146 www.google.se
69.65.50.146 www.google.co.za
69.65.50.146 www.bing.com
[...]


Finished : << RKreport[1].txt >>
RKreport[1].txt


RogueKiller V5.2.7 [06/30/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html

Operating System: Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Started in : Normal mode
User: Adam [Admin rights]
Mode: HOSTSFix -- Date : 07/23/2011 00:04:32

Bad processes: 0

HOSTS File:
127.0.0.1 localhost
::1 localhost
69.65.50.146 www.google.com.au
69.65.50.146 www.google.be
69.65.50.146 www.google.com.br
69.65.50.146 www.google.ca
69.65.50.146 www.google.ch
69.65.50.146 www.google.de
69.65.50.146 www.google.dk
69.65.50.146 www.google.fr
69.65.50.146 www.google.ie
69.65.50.146 www.google.it
69.65.50.146 www.google.co.jp
69.65.50.146 www.google.nl
69.65.50.146 www.google.no
69.65.50.146 www.google.co.nz
69.65.50.146 www.google.pl
69.65.50.146 www.google.se
69.65.50.146 www.google.co.za
69.65.50.146 www.bing.com
[...]


Resetted HOSTS:
127.0.0.1 localhost

Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt


RogueKiller V5.2.7 [06/30/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html

Operating System: Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Started in : Normal mode
User: Adam [Admin rights]
Mode: ProxyFix -- Date : 07/23/2011 00:04:57

Bad processes: 0

Registry Entries: 1
[PROXY IE] HKCU\[...]\Internet Settings : ProxyServer (http=127.0.0.1:25578) -> DELETED

Finished : << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt

Vyborne, pujdeme dale

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

Combofix zde :

ComboFix 11-07-23.01 - Adam 23.07.2011 9:28.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3068.1452 [GMT 2:00]
Spuštěný z: c:\users\Adam\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Outdated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Outdated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\ANTIGEN.exe
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\ANTIGEN.tmp
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\cb.exe
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\cb.sys
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\CLSV.dll
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\DBOLE.exe
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\dudl.sys
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\eb.exe
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\energy.drv
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\exec.drv
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\fix.tmp
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\FS.sys
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\FW.sys
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\gid.drv
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\grid.exe
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\hymt.exe
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\hymt.tmp
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\kernel32.sys
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\pal.drv
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\pal.tmp
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\PE.dll
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\PE.exe
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\PE.sys
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\runddl.sys
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\SICKBOY.drv
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\snl2w.tmp
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\std.tmp
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\tempdoc.dll
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\tempdoc.drv
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\tjd.drv
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\tjd.exe
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Recent\tjd.tmp
c:\users\Adam\SimTr.exe
c:\windows\proc_list1.log
c:\windows\system32\AutoRun.inf
c:\windows\system32\config.dat
c:\windows\system32\drivers\etc\lmhosts
c:\windows\update.1
c:\windows\winsetupapi.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-06-23 do 2011-07-23 )))))))))))))))))))))))))))))))
.
.
2011-07-23 07:39 . 2011-07-23 07:39 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-07-22 20:33 . 2011-07-22 20:33 28752 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2595B0A4-F209-4371-B51B-FE58182C885C}\MpKslbadfd1a7.sys
2011-07-22 19:31 . 2011-07-22 19:39 -------- d-----w- c:\program files\trend micro
2011-07-22 19:31 . 2011-07-22 19:33 -------- d-----w- C:\rsit
2011-07-22 19:23 . 2010-11-30 09:43 439632 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{39C8B1E1-659E-4B77-B1E5-B5C85D3A300B}\gapaengine.dll
2011-07-22 19:01 . 2011-01-13 09:41 5890896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2595B0A4-F209-4371-B51B-FE58182C885C}\mpengine.dll
2011-07-22 12:24 . 2011-07-22 12:24 -------- d-----w- c:\users\Adam\AppData\Roaming\PCTools
2011-07-22 02:30 . 2011-07-22 18:46 -------- d-----w- c:\program files\PC Tools Security
2011-07-22 02:30 . 2011-07-22 18:46 -------- d-----w- c:\program files\Common Files\PC Tools
2011-07-20 15:22 . 2011-07-20 18:21 -------- d-----w- c:\users\Adam\DoctorWeb
2011-07-18 18:35 . 2011-07-18 23:58 -------- d-----w- c:\program files\Emsisoft Anti-Malware
2011-07-17 21:09 . 2011-07-17 21:09 -------- d-----w- C:\found.000
2011-07-17 19:31 . 2011-07-18 12:26 -------- d--h--w- c:\windows\update.tray-3-0-lnk
2011-07-17 19:31 . 2011-07-18 12:26 -------- d--h--w- c:\windows\update.tray-15-0-lnk
2011-07-17 19:31 . 2011-07-18 12:26 -------- d--h--w- c:\windows\update.tray-14-0-lnk
2011-07-17 19:31 . 2011-07-18 12:26 -------- d--h--w- c:\windows\update.tray-2-0-lnk
2011-07-17 19:31 . 2011-07-18 01:03 -------- d--h--w- c:\windows\update.tray-3-0
2011-07-17 19:31 . 2011-07-18 01:03 -------- d--h--w- c:\windows\update.tray-2-0
2011-07-17 19:31 . 2011-07-18 01:03 -------- d--h--w- c:\windows\update.tray-15-0
2011-07-17 19:31 . 2011-07-18 01:03 -------- d--h--w- c:\windows\update.tray-14-0
2011-07-13 10:21 . 2011-04-21 13:55 508416 ----a-w- c:\windows\system32\drivers\bthport.sys
2011-07-13 10:21 . 2009-06-17 13:23 30208 ----a-w- c:\windows\system32\drivers\BTHUSB.SYS
2011-07-13 10:21 . 2011-06-02 13:34 2043392 ----a-w- c:\windows\system32\win32k.sys
2011-07-13 10:20 . 2011-04-20 15:55 375808 ----a-w- c:\windows\system32\winsrv.dll
2011-07-13 10:20 . 2011-04-20 15:50 49152 ----a-w- c:\windows\system32\csrsrv.dll
2011-06-30 07:28 . 2011-07-12 10:15 -------- d-----w- c:\programdata\Skype Extras
2011-06-29 07:45 . 2011-04-29 15:59 276992 ----a-w- c:\windows\system32\schannel.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-07 15:55 . 2010-10-25 10:02 7074640 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-05-02 17:16 . 2011-06-16 12:19 739328 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-29 13:25 . 2011-06-16 12:19 146432 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-04-29 13:25 . 2011-06-16 12:19 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-04-29 13:24 . 2011-06-16 12:18 214016 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-04-29 13:24 . 2011-06-16 12:18 79872 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-04-29 13:24 . 2011-06-16 12:18 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2009-02-24 19:34 . 2009-02-24 19:34 1044480 ----a-w- c:\program files\opera\program\plugins\libdivx.dll
2009-02-24 19:34 . 2009-02-24 19:34 200704 ----a-w- c:\program files\opera\program\plugins\ssldivx.dll
2011-05-06 21:45 . 2011-05-06 21:45 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2010-08-30 23:03 . 2009-11-13 19:30 119808 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-05-26 1385864]
"{5e5ab302-7f65-44cd-8211-c1d4caaccea3}"= "c:\program files\XfireXO\tbXfir.dll" [2010-02-22 2353176]
.
[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
.
[HKEY_CLASSES_ROOT\clsid\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5B291E6C-9A74-4034-971B-A4B007A0B315}]
2010-01-11 10:18 451808 ----a-w- c:\program files\RadioBar\toolbar.ni.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
2010-02-22 11:05 2353176 ----a-w- c:\program files\XfireXO\tbXfir.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-05-26 13:23 1385864 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{5e5ab302-7f65-44cd-8211-c1d4caaccea3}"= "c:\program files\XfireXO\tbXfir.dll" [2010-02-22 2353176]
"{5B291E6C-9A74-4034-971B-A4B007A0B315}"= "c:\program files\RadioBar\toolbar.ni.dll" [2010-01-11 451808]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-05-26 1385864]
"{1EA00BE1-6E54-4E2A-8099-680300BF23E1}"= "c:\program files\Seznam.cz\toolbar\toolbar.dll" [2011-03-10 183808]
.
[HKEY_CLASSES_ROOT\clsid\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
.
[HKEY_CLASSES_ROOT\clsid\{5b291e6c-9a74-4034-971b-a4b007a0b315}]
[HKEY_CLASSES_ROOT\Pugi.PugiObj.1]
[HKEY_CLASSES_ROOT\TypeLib\{810FCC0F-2CA3-414a-B8C8-550910C8B664}]
[HKEY_CLASSES_ROOT\Pugi.PugiObj]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CLASSES_ROOT\clsid\{1ea00be1-6e54-4e2a-8099-680300bf23e1}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-05-26 1385864]
"{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3}"= "c:\program files\XfireXO\tbXfir.dll" [2010-02-22 2353176]
"{5B291E6C-9A74-4034-971B-A4B007A0B315}"= "c:\program files\RadioBar\toolbar.ni.dll" [2010-01-11 451808]
"{34AB3C4C-DA1A-4067-96F4-31452C7CFE65}"= "c:\program files\Seznam.cz\listicka.dll" [2011-03-15 2201600]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CLASSES_ROOT\clsid\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
.
[HKEY_CLASSES_ROOT\clsid\{5b291e6c-9a74-4034-971b-a4b007a0b315}]
[HKEY_CLASSES_ROOT\Pugi.PugiObj.1]
[HKEY_CLASSES_ROOT\TypeLib\{810FCC0F-2CA3-414a-B8C8-550910C8B664}]
[HKEY_CLASSES_ROOT\Pugi.PugiObj]
.
[HKEY_CLASSES_ROOT\clsid\{34ab3c4c-da1a-4067-96f4-31452c7cfe65}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Kalendar"="c:\program files\Kalendar\kalendar.exe" [2005-11-09 580608]
"ICQ"="c:\program files\ICQ7.5\ICQ.exe" [2011-06-29 124216]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2008-06-23 6111232]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-07-04 1295656]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2008-10-14 623992]
"ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2008-04-04 317280]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-12-29 149280]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2010-08-30 30192]
"MarketingTools"="c:\program files\Sony\Marketing Tools\MarketingTools.exe" [2008-09-18 24576]
"googletalk"="c:\program files\Google\Google Talk\googletalk.exe" [2007-01-01 3739648]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2008-01-21 215552]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-14 49152]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2007-08-22 80896]
"Skytel"="Skytel.exe" [2008-06-23 1826816]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-06-07 13539872]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-06-07 92704]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-06-03 1144104]
"wcmdmgr"="c:\windows\wt\wcmdmgrl.exe" [1999-12-09 20480]
"TkBellExe"="c:\program files\real\realplayer\Update\realsched.exe" [2010-12-16 274608]
"InstaLAN"="c:\program files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe" [2010-07-28 1485208]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 997408]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-01-30 35736]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-15 932288]
.
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Psi.lnk - c:\program files\Psi\psi.exe [2007-10-14 8699392]
Stardock ObjectDock.lnk - c:\program files\Stardock\ObjectDock\ObjectDock.exe [N/A]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-7-1 768552]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 2 (0x2)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2008-07-16 01:04 98304 ----a-w- c:\windows\System32\VESWinlogon.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2010-06-07 13:59 198960 ----a-w- c:\program files\Stardock\Object Desktop\WindowBlinds\WbSrv.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001
.
R1 MpKsl09f258d4;MpKsl09f258d4;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DCAF4C38-10EE-4944-8F08-0A3316BBC99B}\MpKsl09f258d4.sys [x]
R1 MpKsl192c4dde;MpKsl192c4dde;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B3160241-7BED-4086-9095-B5D6BA5E4BCA}\MpKsl192c4dde.sys [x]
R1 MpKsl1d9e9719;MpKsl1d9e9719;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{3AFB2707-B329-4AF5-A69C-BD247B5797FF}\MpKsl1d9e9719.sys [x]
R1 MpKsl43b017b3;MpKsl43b017b3;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DA1B66BB-F2DB-4847-9644-4E9F8975D9F5}\MpKsl43b017b3.sys [x]
R1 MpKsl9fd96f37;MpKsl9fd96f37;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{93533AFD-D97D-4838-AB16-26DE47FE9275}\MpKsl9fd96f37.sys [x]
R2 Belkin Local Backup Service;Belkin Local Backup Service;c:\program files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe [2010-02-17 152064]
R2 Belkin Network USB Helper;Belkin Network USB Helper;c:\program files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe [2010-02-09 49152]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate1c9895355c451b0;Google Update Service (gupdate1c9895355c451b0);c:\program files\Google\Update\GoogleUpdate.exe [2009-02-07 133104]
R3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2010-08-30 30192]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2009-02-07 133104]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2010-10-24 54144]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 206360]
R3 SOHCImp;VAIO Media plus Content Importer;c:\program files\Sony\VAIO Media plus\SOHCImp.exe [2008-05-21 103712]
R3 SOHDms;VAIO Media plus Digital Media Server;c:\program files\Sony\VAIO Media plus\SOHDms.exe [2008-05-21 353568]
R3 SOHDs;VAIO Media plus Device Searcher;c:\program files\Sony\VAIO Media plus\SOHDs.exe [2008-05-21 62752]
R3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2008-06-12 337184]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [2008-06-12 83232]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2009-05-14 107256]
S1 MpKslbadfd1a7;MpKslbadfd1a7;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2595B0A4-F209-4371-B51B-FE58182C885C}\MpKslbadfd1a7.sys [2011-07-22 28752]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2009-05-14 93312]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [2010-09-06 247096]
S2 NSUService;NSUService;c:\program files\Sony\Network Utility\NSUService.exe [2008-06-28 299008]
S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-04-18 11032]
S2 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2009-12-17 185640]
S2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe [2008-06-20 411488]
S2 VCFw;VAIO Content Folder Watcher;c:\program files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2008-06-20 415744]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2008-07-05 29736]
S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-10-24 43392]
S3 NETw5v32;Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit ;c:\windows\system32\DRIVERS\NETw5v32.sys [2008-04-28 3658752]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [2008-03-10 9344]
S3 sxuptp;SXUPTP Driver;c:\windows\system32\DRIVERS\sxuptp.sys [2009-06-22 247320]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MPKSLBADFD1A7
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'
.
2011-07-22 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-09-18 13:04]
.
2011-07-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-07 18:38]
.
2011-07-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-07 18:38]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
IE: {{0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - c:\program files\Seznam.cz\listicka.dll
LSP: c:\windows\system32\drivers\imon\pklsp.dll
TCP: DhcpNameServer = 10.0.0.138
Handler: toolbarchrome - {718733BC-AD64-4e5f-AC18-A85FBD75D54D} - c:\program files\RadioBar\toolbar.ni.dll
DPF: {26ACAE6F-BC95-44B4-9150-61E4D20D5C2E} - hxxp://mhd.frag.cz/loadgame_et.cab
FF - ProfilePath - c:\users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\nbc3h20c.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://start.icq.com/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.2.6&q=
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
HKLM-Run-NWEReboot - (no file)
AddRemove-FlatOut Ultimate Carnage - d:\games\FlatOut Ultimate Carnage\Uninstall.exe
AddRemove-{7B63B2922B174135AFC0E1377DD81EC2} - c:\program files\DivX\DivXCodecUninstall.exe
.
.
.
**************************************************************************
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory:
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b4
.
Celkový čas: 2011-07-23 09:43:43
ComboFix-quarantined-files.txt 2011-07-23 07:43
.
Před spuštěním: Volných bajtů: 119 427 936 256
Po spuštění: Volných bajtů: 132 410 507 264
.
- - End Of File - - F552B8D478B91185EEC1CCA6EA076849

Omlouvam se za zdrzeni, pracovni povinnosti

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  KillAll::
  
  RegLock::
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  
  Firefox::
  FF - ProfilePath - c:\users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\nbc3h20c.default\
  FF - prefs.js: browser.search.selectedEngine - ICQ Search
  FF - prefs.js: browser.startup.homepage - hxxp://start.icq.com/
  FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_result ... r=1.2.6&q=
  
  DDS::
  Handler: toolbarchrome - {718733BC-AD64-4e5f-AC18-A85FBD75D54D} - c:\program files\RadioBar\toolbar.ni.dll
  
  Folder::
  c:\program files\RadioBar
  c:\program files\ICQ6Toolbar
  c:\program files\Ask.com
  c:\users\Adam\DoctorWeb
  c:\program files\Emsisoft Anti-Malware
  c:\windows\update.tray-3-0-lnk
  c:\windows\update.tray-15-0-lnk
  c:\windows\update.tray-14-0-lnk
  c:\windows\update.tray-2-0-lnk
  c:\windows\update.tray-3-0
  c:\windows\update.tray-2-0
  c:\windows\update.tray-15-0
  c:\windows\update.tray-14-0
  
  File::
  c:\windows\Tasks\Google Software Updater.job
  c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  c:\program files\XfireXO\tbXfir.dll
  
  Driver::
  ICQ Service
  gupdatem
  gupdate1c9895355c451b0
  
  Registry::
  [-HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "SunJavaUpdateSched"=-
  "HP Software Update"=-
  "DivXUpdate"=-
  "TkBellExe"=-
  "Malwarebytes' Anti-Malware (reboot)"=-
  "Adobe Reader Speed Launcher"=-
  "Adobe ARM"=-
  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
  "{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
  "{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3}"=-
  "{5B291E6C-9A74-4034-971B-A4B007A0B315}"=-
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
  "{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
  "{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3}"=-
  "{5B291E6C-9A74-4034-971B-A4B007A0B315}"=-
  [-HKEY_CLASSES_ROOT\clsid\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
  [-HKEY_CLASSES_ROOT\clsid\{5b291e6c-9a74-4034-971b-a4b007a0b315}]
  [-HKEY_CLASSES_ROOT\Pugi.PugiObj.1]
  [-HKEY_CLASSES_ROOT\TypeLib\{810FCC0F-2CA3-414a-B8C8-550910C8B664}]
  [-HKEY_CLASSES_ROOT\Pugi.PugiObj]
  [-HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
  [-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
  [-HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
  [-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
  [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5B291E6C-9A74-4034-971B-A4B007A0B315}]
  [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
  [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
  "{00000000-6E41-4FD3-8538-502F5495E5FC}"=-
  "{5e5ab302-7f65-44cd-8211-c1d4caaccea3}"=-
  
  Reboot::

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

Zdravím, přeji hezký večer. Omlouvat se nemusíte, níže přikládám log.


ComboFix 11-07-23.01 - Adam 23.07.2011 20:50:50.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3068.1302 [GMT 2:00]
Spuštěný z: c:\users\Adam\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Adam\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Outdated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Outdated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\program files\XfireXO\tbXfir.dll"
"c:\windows\Tasks\Google Software Updater.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Ask.com
c:\program files\Ask.com\cobrand.ico
c:\program files\Ask.com\config.xml
c:\program files\Ask.com\favicon.ico
c:\program files\Ask.com\fv_e426.ico
c:\program files\Ask.com\GenericAskToolbar.dll
c:\program files\Ask.com\mupcfg.xml
c:\program files\Ask.com\SaUpdate.exe
c:\program files\Ask.com\UpdateTask.exe
c:\program files\Emsisoft Anti-Malware
c:\program files\Emsisoft Anti-Malware\a2cmd_readme.txt
c:\program files\Emsisoft Anti-Malware\a2heur.dat
c:\program files\Emsisoft Anti-Malware\a2hosts.dat
c:\program files\Emsisoft Anti-Malware\a2trust.dat
c:\program files\Emsisoft Anti-Malware\a2wl.dat
c:\program files\Emsisoft Anti-Malware\de-de.chm
c:\program files\Emsisoft Anti-Malware\Emsisoft.url
c:\program files\Emsisoft Anti-Malware\en-us.chm
c:\program files\Emsisoft Anti-Malware\fr-fr.chm
c:\program files\Emsisoft Anti-Malware\infected.txt
c:\program files\Emsisoft Anti-Malware\Languages\ar-sa.lng
c:\program files\Emsisoft Anti-Malware\Languages\bg-bg.lng
c:\program files\Emsisoft Anti-Malware\Languages\ca-es.lng
c:\program files\Emsisoft Anti-Malware\Languages\cn-cn.lng
c:\program files\Emsisoft Anti-Malware\Languages\cz-cz.lng
c:\program files\Emsisoft Anti-Malware\Languages\de-de.lng
c:\program files\Emsisoft Anti-Malware\Languages\en-us.lng
c:\program files\Emsisoft Anti-Malware\Languages\es-es.lng
c:\program files\Emsisoft Anti-Malware\Languages\fi-fi.lng
c:\program files\Emsisoft Anti-Malware\Languages\fr-fr.lng
c:\program files\Emsisoft Anti-Malware\Languages\hr-hr.lng
c:\program files\Emsisoft Anti-Malware\Languages\hu-hu.lng
c:\program files\Emsisoft Anti-Malware\Languages\it-it.lng
c:\program files\Emsisoft Anti-Malware\Languages\ja-jp.lng
c:\program files\Emsisoft Anti-Malware\Languages\nl-nl.lng
c:\program files\Emsisoft Anti-Malware\Languages\pl-pl.lng
c:\program files\Emsisoft Anti-Malware\Languages\pt-br.lng
c:\program files\Emsisoft Anti-Malware\Languages\ru-ru.lng
c:\program files\Emsisoft Anti-Malware\Languages\sl-si.lng
c:\program files\Emsisoft Anti-Malware\Languages\sr-sp.lng
c:\program files\Emsisoft Anti-Malware\Languages\sv-se.lng
c:\program files\Emsisoft Anti-Malware\Languages\tr-tr.lng
c:\program files\Emsisoft Anti-Malware\Languages\ua-ua.lng
c:\program files\Emsisoft Anti-Malware\Languages\vi-vn.lng
c:\program files\Emsisoft Anti-Malware\Languages\zh-tw.lng
c:\program files\Emsisoft Anti-Malware\license_de.rtf
c:\program files\Emsisoft Anti-Malware\license_en.rtf
c:\program files\Emsisoft Anti-Malware\Logs\a-squared.db3
c:\program files\Emsisoft Anti-Malware\Signatures\20100901.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100902.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100903.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100906.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100907.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100909.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100911.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100913.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100914.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100916.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100917.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100920.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100921.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100922.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100923.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100924.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100927.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100928.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100929.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20100930.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101001.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101004.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101005.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101006.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101007.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101009.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101011.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101012.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101013.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101015.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101016.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101018.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101019.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101020.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101021.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101023.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101025.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101026.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101027.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101028.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101029.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101101.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101103.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101104.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101105.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101108.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101109.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101110.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101111.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101112.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101115.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101116.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101118.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101119.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101122.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101123.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101124.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101125.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101127.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101129.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101130.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101202.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101203.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101207.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101208.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101209.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101211.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101213.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101214.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101215.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101216.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101217.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101220.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101221.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101222.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101223.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101224.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101227.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101228.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20101230.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110101.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110103.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110104.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110105.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110106.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110107.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110110.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110111.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110112.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110113.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110114.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110117.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110118.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110119.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110120.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110121.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110124.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110125.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110127.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110128.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110131.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110201.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110202.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110203.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110204.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110207.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110208.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110209.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110210.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110211.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110214.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110216.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110217.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110218.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110221.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110222.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110223.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110224.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110225.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110228.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110301.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110302.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110303.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110304.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110307.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110308.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110309.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110310.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110312.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110313.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110314.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110315.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110316.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110318.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110320.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110321.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110324.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110325.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110329.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110331.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110402.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110403.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110404.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110405.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110406.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110407.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110408.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110411.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110412.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110413.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110414.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110415.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110418.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110419.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110420.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110421.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110422.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110426.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110427.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110428.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110429.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110502.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110503.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110504.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110505.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110506.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110510.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110511.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110512.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110513.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110516.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110517.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110518.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110519.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110520.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110523.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110524.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110525.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110527.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110528.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110530.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110601.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110602.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110603.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110604.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110606.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110607.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110608.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110609.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110610.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110613.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110614.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110615.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110616.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110617.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110621.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110622.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110623.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110625.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110627.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110628.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110630.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110701.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110702.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110704.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110705.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110706.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110707.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110709.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110712.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110714.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110715.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110716.sig
c:\program files\Emsisoft Anti-Malware\Signatures\20110718.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000101.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000102.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000103.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000104.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000105.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000106.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000107.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000108.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000109.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000110.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000111.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000112.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000113.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000114.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000115.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000116.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000117.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000118.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000119.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000120.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000121.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000122.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000123.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000124.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000125.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000126.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000127.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000128.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000129.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000201.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000202.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000203.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000204.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000205.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000206.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000207.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000208.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000209.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000210.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000211.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000212.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000213.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000214.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000215.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000216.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000217.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000301.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000401.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000601.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000602.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000701.sig
c:\program files\Emsisoft Anti-Malware\Signatures\30000702.sig
c:\program files\Emsisoft Anti-Malware\unins000.dat
c:\program files\Emsisoft Anti-Malware\unins000.msg
c:\program files\ICQ6Toolbar
c:\program files\ICQ6Toolbar\config.xml
c:\program files\ICQ6Toolbar\Icons.bmp
c:\program files\ICQ6Toolbar\ICQ Service.exe
c:\program files\ICQ6Toolbar\icq6Toolbar.ico
c:\program files\ICQ6Toolbar\ICQToolBar.dll
c:\program files\ICQ6Toolbar\ICQUnToolbar.exe
c:\program files\ICQ6Toolbar\logo_small.gif
c:\program files\ICQ6Toolbar\ServiceStarter.exe
c:\program files\ICQ6Toolbar\short.wav
c:\program files\ICQ6Toolbar\Version.txt
c:\program files\ICQ6Toolbar\voucher.bmp
c:\program files\ICQ6Toolbar\voucher2.bmp
c:\program files\RadioBar
c:\program files\RadioBar\configuration.xml
c:\program files\RadioBar\icon_logo.bmp
c:\program files\RadioBar\images.bmp
c:\program files\RadioBar\INSTALL.LOG
c:\program files\RadioBar\latestVersion.txt
c:\program files\RadioBar\lip.exe
c:\program files\RadioBar\radio\ajax.js
c:\program files\RadioBar\radio\bg.gif
c:\program files\RadioBar\radio\bg.jpg
c:\program files\RadioBar\radio\bg.png
c:\program files\RadioBar\radio\equ_animated.gif
c:\program files\RadioBar\radio\equ_off.png
c:\program files\RadioBar\radio\lines.png
c:\program files\RadioBar\radio\minus.png
c:\program files\RadioBar\radio\play.png
c:\program files\RadioBar\radio\play_hover.png
c:\program files\RadioBar\radio\plus.png
c:\program files\RadioBar\radio\radio.html
c:\program files\RadioBar\radio\radio.js
c:\program files\RadioBar\radio\radio2.js
c:\program files\RadioBar\radio\stations.xml
c:\program files\RadioBar\radio\stop.png
c:\program files\RadioBar\radio\stop_hover.png
c:\program files\RadioBar\thisversion.txt
c:\program files\RadioBar\TollbarHome.rtf
c:\program files\RadioBar\toolbar.ni.dll
c:\program files\RadioBar\Uninstall.exe
c:\program files\RadioBar\UNWISE.EXE
c:\program files\XfireXO\tbXfir.dll
c:\users\Adam\DoctorWeb
c:\users\Adam\DoctorWeb\CureIt.log
c:\windows\Tasks\Google Software Updater.job
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\update.tray-14-0-lnk
c:\windows\update.tray-14-0
c:\windows\update.tray-15-0-lnk
c:\windows\update.tray-15-0
c:\windows\update.tray-2-0-lnk
c:\windows\update.tray-2-0
c:\windows\update.tray-3-0-lnk
c:\windows\update.tray-3-0
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_gupdate1c9895355c451b0
-------\Service_gupdatem
-------\Service_ICQ Service
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-06-23 do 2011-07-23 )))))))))))))))))))))))))))))))
.
.
2011-07-23 19:01 . 2011-07-23 19:09 -------- d-----w- c:\users\Adam\AppData\Local\temp
2011-07-23 19:01 . 2011-07-23 19:01 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-07-22 20:33 . 2011-07-22 20:33 28752 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2595B0A4-F209-4371-B51B-FE58182C885C}\MpKslbadfd1a7.sys
2011-07-22 19:31 . 2011-07-22 19:39 -------- d-----w- c:\program files\trend micro
2011-07-22 19:31 . 2011-07-22 19:33 -------- d-----w- C:\rsit
2011-07-22 19:23 . 2010-11-30 09:43 439632 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{39C8B1E1-659E-4B77-B1E5-B5C85D3A300B}\gapaengine.dll
2011-07-22 19:01 . 2011-01-13 09:41 5890896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2595B0A4-F209-4371-B51B-FE58182C885C}\mpengine.dll
2011-07-22 12:24 . 2011-07-22 12:24 -------- d-----w- c:\users\Adam\AppData\Roaming\PCTools
2011-07-22 02:30 . 2011-07-22 18:46 -------- d-----w- c:\program files\PC Tools Security
2011-07-22 02:30 . 2011-07-22 18:46 -------- d-----w- c:\program files\Common Files\PC Tools
2011-07-17 21:09 . 2011-07-17 21:09 -------- d-----w- C:\found.000
2011-07-13 10:21 . 2011-04-21 13:55 508416 ----a-w- c:\windows\system32\drivers\bthport.sys
2011-07-13 10:21 . 2009-06-17 13:23 30208 ----a-w- c:\windows\system32\drivers\BTHUSB.SYS
2011-07-13 10:20 . 2011-04-20 15:50 49152 ----a-w- c:\windows\system32\csrsrv.dll
2011-06-30 07:28 . 2011-07-12 10:15 -------- d-----w- c:\programdata\Skype Extras
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-07 15:55 . 2010-10-25 10:02 7074640 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-06-02 13:34 . 2011-07-13 10:21 2043392 ----a-w- c:\windows\system32\win32k.sys
2011-05-02 17:16 . 2011-06-16 12:19 739328 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-29 15:59 . 2011-06-29 07:45 276992 ----a-w- c:\windows\system32\schannel.dll
2011-04-29 13:25 . 2011-06-16 12:19 146432 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-04-29 13:25 . 2011-06-16 12:19 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-04-29 13:24 . 2011-06-16 12:18 214016 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-04-29 13:24 . 2011-06-16 12:18 79872 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-04-29 13:24 . 2011-06-16 12:18 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2009-02-24 19:34 . 2009-02-24 19:34 1044480 ----a-w- c:\program files\opera\program\plugins\libdivx.dll
2009-02-24 19:34 . 2009-02-24 19:34 200704 ----a-w- c:\program files\opera\program\plugins\ssldivx.dll
2011-05-06 21:45 . 2011-05-06 21:45 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2010-08-30 23:03 . 2009-11-13 19:30 119808 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{1EA00BE1-6E54-4E2A-8099-680300BF23E1}"= "c:\program files\Seznam.cz\toolbar\toolbar.dll" [2011-03-10 183808]
.
[HKEY_CLASSES_ROOT\clsid\{1ea00be1-6e54-4e2a-8099-680300bf23e1}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{34AB3C4C-DA1A-4067-96F4-31452C7CFE65}"= "c:\program files\Seznam.cz\listicka.dll" [2011-03-15 2201600]
.
[HKEY_CLASSES_ROOT\clsid\{34ab3c4c-da1a-4067-96f4-31452c7cfe65}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Kalendar"="c:\program files\Kalendar\kalendar.exe" [2005-11-09 580608]
"ICQ"="c:\program files\ICQ7.5\ICQ.exe" [2011-06-29 124216]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2008-06-23 6111232]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-07-04 1295656]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2008-10-14 623992]
"ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2008-04-04 317280]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2010-08-30 30192]
"MarketingTools"="c:\program files\Sony\Marketing Tools\MarketingTools.exe" [2008-09-18 24576]
"googletalk"="c:\program files\Google\Google Talk\googletalk.exe" [2007-01-01 3739648]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2008-01-21 215552]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2007-08-22 80896]
"Skytel"="Skytel.exe" [2008-06-23 1826816]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-06-07 13539872]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-06-07 92704]
"wcmdmgr"="c:\windows\wt\wcmdmgrl.exe" [1999-12-09 20480]
"InstaLAN"="c:\program files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe" [2010-07-28 1485208]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 997408]
.
c:\users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Psi.lnk - c:\program files\Psi\psi.exe [2007-10-14 8699392]
Stardock ObjectDock.lnk - c:\program files\Stardock\ObjectDock\ObjectDock.exe [N/A]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-7-1 768552]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 2 (0x2)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2008-07-16 01:04 98304 ----a-w- c:\windows\System32\VESWinlogon.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2010-06-07 13:59 198960 ----a-w- c:\program files\Stardock\Object Desktop\WindowBlinds\WbSrv.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R1 MpKsl09f258d4;MpKsl09f258d4;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DCAF4C38-10EE-4944-8F08-0A3316BBC99B}\MpKsl09f258d4.sys [x]
R1 MpKsl192c4dde;MpKsl192c4dde;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B3160241-7BED-4086-9095-B5D6BA5E4BCA}\MpKsl192c4dde.sys [x]
R1 MpKsl1d9e9719;MpKsl1d9e9719;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{3AFB2707-B329-4AF5-A69C-BD247B5797FF}\MpKsl1d9e9719.sys [x]
R1 MpKsl43b017b3;MpKsl43b017b3;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DA1B66BB-F2DB-4847-9644-4E9F8975D9F5}\MpKsl43b017b3.sys [x]
R1 MpKsl9fd96f37;MpKsl9fd96f37;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{93533AFD-D97D-4838-AB16-26DE47FE9275}\MpKsl9fd96f37.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2010-08-30 30192]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-10-24 43392]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2010-10-24 54144]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 206360]
R3 SOHCImp;VAIO Media plus Content Importer;c:\program files\Sony\VAIO Media plus\SOHCImp.exe [2008-05-21 103712]
R3 SOHDms;VAIO Media plus Digital Media Server;c:\program files\Sony\VAIO Media plus\SOHDms.exe [2008-05-21 353568]
R3 SOHDs;VAIO Media plus Device Searcher;c:\program files\Sony\VAIO Media plus\SOHDs.exe [2008-05-21 62752]
R3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2008-06-12 337184]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [2008-06-12 83232]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2009-05-14 107256]
S1 MpKslbadfd1a7;MpKslbadfd1a7;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{2595B0A4-F209-4371-B51B-FE58182C885C}\MpKslbadfd1a7.sys [2011-07-22 28752]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656]
S2 Belkin Local Backup Service;Belkin Local Backup Service;c:\program files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe [2010-02-17 152064]
S2 Belkin Network USB Helper;Belkin Network USB Helper;c:\program files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe [2010-02-09 49152]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2009-05-14 93312]
S2 NSUService;NSUService;c:\program files\Sony\Network Utility\NSUService.exe [2008-06-28 299008]
S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-04-18 11032]
S2 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2009-12-17 185640]
S2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe [2008-06-20 411488]
S2 VCFw;VAIO Content Folder Watcher;c:\program files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2008-06-20 415744]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2008-07-05 29736]
S3 NETw5v32;Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit ;c:\windows\system32\DRIVERS\NETw5v32.sys [2008-04-28 3658752]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [2008-03-10 9344]
S3 sxuptp;SXUPTP Driver;c:\windows\system32\DRIVERS\sxuptp.sys [2009-06-22 247320]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'
.
2011-07-23 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-09-18 13:04]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
IE: {{0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - c:\program files\Seznam.cz\listicka.dll
LSP: c:\windows\system32\drivers\imon\pklsp.dll
TCP: DhcpNameServer = 10.0.0.138
DPF: {26ACAE6F-BC95-44B4-9150-61E4D20D5C2E} - hxxp://mhd.frag.cz/loadgame_et.cab
FF - ProfilePath - c:\users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\nbc3h20c.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-ICQToolbar - c:\program files\ICQ6Toolbar\ICQUnToolbar.exe
AddRemove-RadioBar - c:\program files\RadioBar\UNINSTALL.exe
.
.
.
**************************************************************************
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory:
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(1808)
c:\windows\system32\btmmhook.dll
c:\windows\System32\drivers\imon\anti_end.dll
c:\windows\system32\btncopy.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\Microsoft Security Client\Antimalware\MsMpEng.exe
c:\progra~1\Stardock\OBJECT~2\WINDOW~1\VistaSrv.exe
c:\progra~1\Stardock\OBJECT~2\WINDOW~1\WBVista.exe
c:\windows\system32\rundll32.exe
c:\progra~1\Stardock\OBJECT~2\WINDOW~1\WBVista.exe
c:\windows\system32\WLANExt.exe
c:\windows\System32\lpksetup.exe
c:\progra~1\Stardock\OBJECT~2\WINDOW~1\WBVista.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\program files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
c:\program files\Belkin\Router Setup and Monitor\BelkinService.exe
c:\program files\Sony\VAIO Update 4\VAIOUpdt.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\program files\Intel\WiFi\bin\EvtEng.exe
c:\program files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
c:\program files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
c:\program files\Common Files\Intel\WirelessCommon\RegSrvc.exe
c:\program files\Sony\VAIO Event Service\VESMgr.exe
c:\windows\system32\DllHost.exe
c:\program files\Sony\VAIO Event Service\VESMgrSub.exe
c:\windows\system32\DllHost.exe
c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\windows\system32\WUDFHost.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\DRIVERS\xaudio.exe
c:\program files\Sony\VAIO Power Management\SPMgr.exe
c:\windows\servicing\TrustedInstaller.exe
c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
c:\windows\system32\conime.exe
c:\windows\System32\drivers\imon\pkservice.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\wt\wcmdmgr.exe
c:\program files\WIDCOMM\Bluetooth Software\BtStackServer.exe
c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe
c:\program files\HP\Digital Imaging\bin\hpqbam08.exe
c:\program files\HP\Digital Imaging\bin\hpqgpc01.exe
c:\program files\Synaptics\SynTP\SynTPHelper.exe
c:\windows\system32\RacAgent.exe
.
**************************************************************************
.
Celkový čas: 2011-07-23 21:19:45 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-07-23 19:17
ComboFix2.txt 2011-07-23 07:43
.
Před spuštěním: Volných bajtů: 131 721 752 576
Po spuštění: Volných bajtů: 131 287 408 640
.
- - End Of File - - 9084AD3A27610C03F1E1554F8DF0DB1F

Jak se chova PC

PC nyní nevykazuje žádné potíže, MSE funguje, internet běží, je už vyčištěn ?
Popřípadě jaké jsou další kroky ?
Děkuji.

Tak jeste uklidime

Odinstalujte Combofix

• Start - Spustit (nebo pouzijte klavesobou zkratku Win+R)
• Napiste ComboFix /UninstallA
• Stisknete Enter
• Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis)
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse