VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by rr at 2011-07-22 20:55:21
Systém Microsoft Windows XP Professional Service Pack 1
System drive E: has 6 GB (8%) free of 76 GB
Total RAM: 511 MB (32% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:55:27, on 22.7.2011
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\Explorer.EXE
E:\WINDOWS\update.tray-8-0\svchost.exe
E:\WINDOWS\System32\WgaTray.exe
E:\Program Files\MSI\BToes Bluetooth Software\BTTray.exe
E:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
E:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
E:\Program Files\Sony Corporation\Picture Package\Picture Package Menu\SonyTray.exe
E:\Program Files\Adobe Media Player\Adobe Media Player.exe
E:\WINDOWS\System32\Ati2evxx.exe
E:\Program Files\MSI\BToes Bluetooth Software\bin\btwdins.exe
E:\WINDOWS\system32\cisvc.exe
E:\Program Files\LogMeIn Hamachi\hamachi-2.exe
E:\Program Files\ICQ6Toolbar\ICQ Service.exe
E:\Program Files\Java\jre6\bin\jqs.exe
E:\Documents and Settings\rr\Application Data\MyPokerLab\Pokernet\Pokernet Service.exe
E:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
E:\Program Files\Spyware Terminator\sp_rsser.exe
E:\WINDOWS\update.2\svchost.exe
E:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\update.1\svchost.exe
E:\WINDOWS\update.2\svchost.exe
E:\Program Files\Internet Explorer\iexplore.exe
E:\WINDOWS\sysdriver32.exe
E:\WINDOWS\sysdriver32.exe
E:\WINDOWS\update.2\svchost.exe
E:\Program Files\Internet Explorer\iexplore.exe
E:\PROGRA~1\Crawler\Toolbar\CToolbar.exe
E:\WINDOWS\update.5.0\svchost.exe
E:\ATI\Support\11-6_xp32_dd_ccc_ocl\Bin\InstallManagerApp.exe
E:\Documents and Settings\rr\Desktop\RSIT.exe
E:\Program Files\trend micro\rr.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT1098640
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60327
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - E:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: (no name) - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - (no file)
R3 - URLSearchHook: (no name) - {ecdee021-0d17-467f-a1ff-c7a115230949} - (no file)
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - E:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - E:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - E:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: GamePlayLabsBHO - {984A9162-8891-4D19-8CFE-17648BB4E1EC} - E:\Documents and Settings\rr\Local Settings\Application Data\Browser Plugin\BHO.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - E:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: &Rádio - {8E718888-423F-11D2-876E-00A0C9082467} - E:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - E:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - E:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - E:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PinnacleDriverCheck] E:\WINDOWS\System32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [Adobe Photo Downloader] "E:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "E:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [wxpdrv] E:\WINDOWS\services32.exe
O4 - HKLM\..\Run: [tray_ico0] E:\WINDOWS\update.tray-8-0\svchost.exe
O4 - HKLM\..\Run: [6115129.exe] "E:\DOCUME~1\rr\LOCALS~1\Temp\6115129.exe"
O4 - HKLM\..\Run: [sysdriver32.exe] "E:\WINDOWS\sysdriver32.exe" rezerv
O4 - HKLM\..\Run: [sysdriver32_.exe] "E:\WINDOWS\sysdriver32_.exe" rezerv
O4 - HKLM\..\Run: [6220198.exe] "E:\WINDOWS\TEMP\6220198.exe"
O4 - HKLM\..\Run: [69601593-loader2.exe] "E:\WINDOWS\TEMP\69601593-loader2.exe"
O4 - HKLM\..\Run: [64699402-loader2.exe] "E:\WINDOWS\TEMP\64699402-loader2.exe"
O4 - HKLM\..\Run: [11422859-loader2.exe] "E:\WINDOWS\TEMP\11422859-loader2.exe"
O4 - HKLM\..\Run: [9526500.exe] "E:\WINDOWS\TEMP\9526500.exe"
O4 - HKLM\..\Run: [83114693-loader2.exe] "E:\WINDOWS\TEMP\83114693-loader2.exe"
O4 - HKCU\..\Run: [MSMSGS] "E:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PcSync] E:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [swg] "E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O4 - Startup: Adobe Media Player.lnk = E:\Program Files\Adobe Media Player\Adobe Media Player.exe
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = E:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Picture Package Menu.lnk = ?
O4 - Global Startup: Picture Package VCD Maker.lnk = ?
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://E:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
O8 - Extra context menu item: Send To &Bluetooth - E:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - E:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - E:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - E:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - E:\WINDOWS\web\related.htm
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - E:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - E:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie.htm
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - E:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - E:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: PokerTime - {1C5F27AD-1F34-406B-8733-509FB6D70763} - E:\Microgaming\Poker\PokerTimeMPP\MPPoker.exe (HKCU)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... ader55.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - E:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - E:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - E:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - E:\WINDOWS\System32\browseui.dll
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Unknown owner - E:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe (file missing)
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Unknown owner - E:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - E:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - E:\Program Files\MSI\BToes Bluetooth Software\bin\btwdins.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - E:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - E:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - E:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: ICQ Service - Unknown owner - E:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Pml Driver HPZ12 - HP - E:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Pokernet - Badbeat.com - E:\Documents and Settings\rr\Application Data\MyPokerLab\Pokernet\Pokernet Service.exe
O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - E:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - E:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: srviecheck - Unknown owner - E:\WINDOWS\update.2\svchost.exe
O23 - Service: srvsysdriver32 - Unknown owner - E:\WINDOWS\sysdriver32.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - E:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: wxpdrivers - Unknown owner - E:\WINDOWS\update.1\svchost.exe
O24 - Desktop Component 0: (no name) - http://www.fanpop.com/images/buttons/add-button.gif

--
End of file - 12044 bytes

======Scheduled tasks folder======

E:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1100 series#1115396095.job
E:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
E:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
E:\WINDOWS\tasks\iMeshNAG.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - E:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2005-09-24 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
E:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2008-06-19 1190912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - E:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-04-24 1377576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{984A9162-8891-4D19-8CFE-17648BB4E1EC}]
GamePlayLabsBHO Class - E:\Documents and Settings\rr\Local Settings\Application Data\Browser Plugin\BHO.dll [2011-03-08 432640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - E:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-06-20 305328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E718888-423F-11D2-876E-00A0C9082467} - &Rádio - E:\WINDOWS\System32\msdxm.ocx [2003-03-31 842268]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler Toolbar - E:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2008-06-19 1190912]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - E:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-06-01 962808]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - E:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - E:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-06-20 305328]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=E:\WINDOWS\SOUNDMAN.EXE [2003-11-13 62464]
"QuickTime Task"=E:\Program Files\QuickTime\qttask.exe [2005-08-17 77824]
"PinnacleDriverCheck"=E:\WINDOWS\System32\PSDrvCheck.exe [2003-12-04 406016]
"Adobe Photo Downloader"=E:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe [2005-06-07 57344]
"SpywareTerminator"=E:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe [2008-05-06 1817600]
"wxpdrv"=E:\WINDOWS\services32.exe [2011-07-21 1178112]
"tray_ico"= []
"tray_ico0"=E:\WINDOWS\update.tray-8-0\svchost.exe [2011-07-21 1178112]
"tray_ico1"= []
"tray_ico2"= []
"tray_ico3"= []
"tray_ico4"= []
"6115129.exe"=E:\DOCUME~1\rr\LOCALS~1\Temp\6115129.exe [2011-07-21 232960]
"sysdriver32.exe"=E:\WINDOWS\sysdriver32.exe [2011-07-22 249344]
"sysdriver32_.exe"=E:\WINDOWS\sysdriver32_.exe [2011-07-22 249344]
"6220198.exe"=E:\WINDOWS\TEMP\6220198.exe [2011-07-21 232960]
"69601593-loader2.exe"=E:\WINDOWS\TEMP\69601593-loader2.exe [2011-07-21 245760]
"64699402-loader2.exe"=E:\WINDOWS\TEMP\64699402-loader2.exe [2011-07-21 245760]
"11422859-loader2.exe"=E:\WINDOWS\TEMP\11422859-loader2.exe [2011-07-22 249344]
"9526500.exe"=E:\WINDOWS\TEMP\9526500.exe [2011-07-22 249344]
"83114693-loader2.exe"=E:\WINDOWS\TEMP\83114693-loader2.exe [2011-07-22 249344]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"=E:\Program Files\Messenger\msmsgs.exe [2004-11-16 1670144]
"PcSync"=E:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [2005-08-27 860160]
"swg"=E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-05-21 68856]

E:\Documents and Settings\All Users\Start Menu\Programs\Startup
Adobe Reader Speed Launch.lnk - E:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
Bluetooth.lnk - E:\Program Files\MSI\BToes Bluetooth Software\BTTray.exe
hp psc 1000 series.lnk - E:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
hpoddt01.exe.lnk - E:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
Microsoft Office.lnk - E:\Program Files\Microsoft Office\Office10\OSA.EXE
Picture Package Menu.lnk - E:\Program Files\Sony Corporation\Picture Package\Picture Package Menu\SonyTray.exe
Picture Package VCD Maker.lnk - E:\Program Files\Sony Corporation\Picture Package\Picture Package Applications\Residence.exe

E:\Documents and Settings\rr\Start Menu\Programs\Startup
Adobe Media Player.lnk - E:\Program Files\Adobe Media Player\Adobe Media Player.exe
PowerReg Scheduler.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
E:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wxpdrivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\wxpdrivers]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
"EnableSecureUIAPaths"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"E:\Documents and Settings\rr\My Documents\Stažené soubory\facebook-pic000934519.exe"="e:\windows\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"
"E:\Documents and Settings\rr\My Documents\Downloads\Flash-Player.exe"="E:\Documents and Settings\rr\My Documents\Downloads\Flash-Player.exe:*:Enabled:E:\Documents and Settings\rr\My Documents\Downloads\Flash-Player.exe"
"E:\WINDOWS\update.1\svchost.exe"="E:\WINDOWS\update.1\svchost.exe:*:Enabled:E:\WINDOWS\update.1\svchost.exe"
"E:\WINDOWS\services32.exe"="E:\WINDOWS\services32.exe:*:Enabled:E:\WINDOWS\services32.exe"
"E:\WINDOWS\update.2\svchost.exe"="E:\WINDOWS\update.2\svchost.exe:*:Enabled:E:\WINDOWS\update.2\svchost.exe"
"E:\WINDOWS\update.tray-8-0\svchost.exe"="E:\WINDOWS\update.tray-8-0\svchost.exe:*:Enabled:E:\WINDOWS\update.tray-8-0\svchost.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=E:\WINDOWS\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"vidc.iv50"=ir50_32.dll
"msacm.iac2"=E:\WINDOWS\System32\iac25_32.ax
"VIDC.IV41"=ir41_32.dll
"VIDC.MKVC"=KMVIDC32.DLL
"VIDC.MJPG"=Pvmjpg21.dll
"VIDC.PIM1"=pclepim1.dll
"VIDC.I420"=vdrcodec.dll
"VIDC.WMV3"=wmv9vcm.dll
"vidc.VP60"=E:\WINDOWS\System32\vp6vfw.dll
"vidc.VP61"=E:\WINDOWS\System32\vp6vfw.dll

======List of files/folders created in the last 1 month======

2011-07-22 20:48:32 ----D---- E:\Program Files\trend micro
2011-07-22 20:48:26 ----D---- E:\rsit
2011-07-22 20:47:40 ----D---- E:\ATI
2011-07-22 20:35:47 ----D---- E:\WINDOWS\ufa
2011-07-22 20:35:47 ----D---- E:\WINDOWS\phoenix
2011-07-22 20:35:46 ----D---- E:\WINDOWS\rpcminer
2011-07-22 20:34:12 ----A---- E:\WINDOWS\btc_client_iplist.txt
2011-07-21 19:19:54 ----HD---- E:\WINDOWS\update.5.0
2011-07-21 14:03:06 ----D---- E:\WINDOWS\av_ico
2011-07-21 13:41:43 ----A---- E:\WINDOWS\ddh_iplist.txt
2011-07-21 13:41:36 ----A---- E:\WINDOWS\l1rezerv.exe
2011-07-21 13:41:21 ----A---- E:\WINDOWS\systemup.exe
2011-07-21 13:15:31 ----A---- E:\WINDOWS\new111.exe
2011-07-21 13:15:00 ----A---- E:\WINDOWS\unrar.exe
2011-07-21 13:13:38 ----A---- E:\WINDOWS\iecheck_iplist.txt
2011-07-21 13:13:13 ----HD---- E:\WINDOWS\update.2
2011-07-21 13:12:20 ----A---- E:\WINDOWS\iplist.txt
2011-07-21 13:06:11 ----A---- E:\WINDOWS\sysdriver32_.exe
2011-07-21 13:05:57 ----A---- E:\WINDOWS\sysdriver32.exe
2011-07-21 13:05:41 ----A---- E:\WINDOWS\front_ip_list.txt
2011-07-21 13:03:26 ----HD---- E:\WINDOWS\update.1
2011-07-21 13:02:50 ----HD---- E:\WINDOWS\update.tray-8-0-lnk
2011-07-21 13:02:50 ----HD---- E:\WINDOWS\update.tray-8-0
2011-07-21 12:49:46 ----A---- E:\WINDOWS\winlog-ids.txt
2011-07-21 12:49:46 ----A---- E:\WINDOWS\winlog-dirs.txt
2011-07-21 12:49:35 ----A---- E:\WINDOWS\services32.exe
2011-07-05 19:49:01 ----D---- E:\Program Files\LogMeIn Hamachi

======List of files/folders modified in the last 1 month======

2011-07-22 20:49:32 ----D---- E:\WINDOWS\Prefetch
2011-07-22 20:48:32 ----RD---- E:\Program Files
2011-07-22 20:48:11 ----D---- E:\WINDOWS\Temp
2011-07-22 20:35:47 ----D---- E:\WINDOWS
2011-07-21 19:27:50 ----D---- E:\Documents and Settings\All Users\Application Data\Spyware Terminator
2011-07-21 19:27:42 ----D---- E:\Program Files\Spyware Terminator
2011-07-21 19:26:26 ----D---- E:\Documents and Settings\rr\Application Data\Spyware Terminator
2011-07-21 19:22:32 ----A---- E:\WINDOWS\SchedLgU.Txt
2011-07-21 19:05:59 ----D---- E:\Program Files\Mozilla Firefox
2011-07-21 15:01:25 ----D---- E:\WINDOWS\system32
2011-07-21 14:03:20 ----SHD---- E:\System Volume Information
2011-07-21 14:03:20 ----D---- E:\WINDOWS\System32\Restore
2011-07-21 14:02:42 ----SHD---- E:\WINDOWS\CSC
2011-07-21 13:13:38 ----D---- E:\WINDOWS\System32\drivers\etc
2011-07-21 13:03:36 ----A---- E:\boot.ini
2011-07-05 19:49:29 ----SHD---- E:\WINDOWS\Installer
2011-07-05 19:49:14 ----D---- E:\WINDOWS\System32\CatRoot2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 avgntmgr;avgntmgr; E:\WINDOWS\SYSTEM32\DRIVERS\avgntmgr.sys [2009-05-31 22360]
R0 Imagedrv;Imagedrv; E:\WINDOWS\System32\DRIVERS\imagedrv.sys [2003-03-30 89184]
R0 sonypvl2;sonypvl2; E:\WINDOWS\System32\drivers\sonypvl2.sys [2003-07-26 19478]
R0 sptd;sptd; E:\WINDOWS\System32\Drivers\sptd.sys [2010-08-30 697328]
R0 viasraid;viasraid; E:\WINDOWS\system32\drivers\viasraid.sys [2003-06-12 75904]
R1 AFS2K;AFS2k; E:\WINDOWS\System32\drivers\AFS2K.sys [2004-10-08 35840]
R1 avgntdd;avgntdd; E:\WINDOWS\SYSTEM32\DRIVERS\avgntdd.sys [2009-05-31 45400]
R1 avipbb;avipbb; E:\WINDOWS\System32\DRIVERS\avipbb.sys [2009-05-31 75096]
R1 cdrbsvsd;cdrbsvsd; E:\WINDOWS\System32\drivers\cdrbsvsd.sys [2003-12-04 13566]
R1 PCLEPCI;PCLEPCI; \??\E:\WINDOWS\System32\Drivers\PCLEPCI.SYS []
R1 sonypvf2;sonypvf2; E:\WINDOWS\System32\drivers\sonypvf2.sys [2003-08-20 635012]
R1 sonypvt2;sonypvt2; E:\WINDOWS\System32\drivers\sonypvt2.sys [2003-08-20 431236]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\E:\WINDOWS\System32\drivers\sp_rsdrv2.sys []
R1 ssmdrv;ssmdrv; E:\WINDOWS\System32\DRIVERS\ssmdrv.sys [2007-03-01 28352]
R1 StarOpen;StarOpen; E:\WINDOWS\System32\drivers\StarOpen.sys [2006-07-24 5632]
R2 BTSERIAL;Bluetooth Serial Driver; \??\E:\WINDOWS\System32\drivers\btserial.sys []
R2 BTSLBCSP;Bluetooth Port Client Driver; \??\E:\WINDOWS\System32\drivers\btslbcsp.sys []
R2 Fallback;Fallback; E:\WINDOWS\System32\DRIVERS\HSF_FALL.sys [2001-08-17 289887]
R2 Fsks;Fsks; E:\WINDOWS\System32\DRIVERS\HSF_FSKS.sys [2001-08-17 115807]
R2 K56;K56; E:\WINDOWS\System32\DRIVERS\HSF_K56K.sys [2001-08-17 391199]
R2 MASPINT;MASPINT; E:\WINDOWS\System32\drivers\MASPINT.sys [2000-03-30 8096]
R2 SoftFax;SoftFax; E:\WINDOWS\System32\DRIVERS\HSF_FAXX.sys [2001-08-17 199711]
R2 Tones;Tones; E:\WINDOWS\System32\DRIVERS\HSF_TONE.sys [2001-08-17 50751]
R2 V124;V124; E:\WINDOWS\System32\DRIVERS\HSF_V124.sys [2001-08-17 488383]
R3 ALCXSENS;Service for WDM 3D Audio Driver; E:\WINDOWS\system32\drivers\ALCXSENS.SYS [2003-11-13 391680]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); E:\WINDOWS\system32\drivers\ALCXWDM.SYS [2003-11-13 481596]
R3 ASAPIW2k;ASAPIW2K; E:\WINDOWS\system32\drivers\ASAPIW2k.sys [2003-12-04 11264]
R3 ati2mtag;ati2mtag; E:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2003-06-25 587264]
R3 basic2;basic2; E:\WINDOWS\System32\DRIVERS\HSF_BSC2.sys [2001-08-17 67167]
R3 BTKRNL;Bluetooth Bus Enumerator; E:\WINDOWS\System32\DRIVERS\btkrnl.sys [2005-03-30 1340698]
R3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; E:\WINDOWS\System32\DRIVERS\fetnd5bv.sys [2004-12-16 42496]
R3 hamachi;Hamachi Network Interface; E:\WINDOWS\System32\DRIVERS\hamachi.sys [2010-02-03 26176]
R3 hsf_msft;hsf_msft; E:\WINDOWS\System32\DRIVERS\HSF_MSFT.sys [2001-08-17 542879]
R3 Rksample;Rksample; E:\WINDOWS\System32\DRIVERS\HSF_SAMP.sys [2001-08-17 57471]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; E:\WINDOWS\System32\Drivers\RootMdm.sys [2003-03-31 5888]
R3 seehcri;Sony Ericsson seehcri Device Driver; E:\WINDOWS\System32\DRIVERS\seehcri.sys [2008-01-09 27632]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; E:\WINDOWS\System32\DRIVERS\usbuhci.sys [2003-03-31 19328]
S1 sonypvd2;sonypvd2; E:\WINDOWS\System32\DRIVERS\sonypvd2.sys [2003-06-24 64093]
S3 a30nk5wo;a30nk5wo; E:\WINDOWS\System32\drivers\a30nk5wo.sys []
S3 BTDriver;Bluetooth Virtual Communications Driver; E:\WINDOWS\System32\DRIVERS\btport.sys [2005-03-30 30299]
S3 btwmodem;Bluetooth Modem; E:\WINDOWS\System32\DRIVERS\btwmodem.sys [2005-03-30 30125]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; E:\WINDOWS\System32\Drivers\btwusb.sys [2005-03-30 55448]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; E:\WINDOWS\System32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; E:\WINDOWS\System32\DRIVERS\HPZid412.sys [2003-04-07 51024]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; E:\WINDOWS\System32\DRIVERS\HPZipr12.sys [2003-04-07 16080]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; E:\WINDOWS\System32\DRIVERS\HPZius12.sys [2003-04-07 21456]
S3 Nokia USB Generic;Nokia USB Generic; E:\WINDOWS\system32\drivers\nmwcdc.sys [2005-08-10 7278]
S3 Nokia USB Modem;Nokia USB Modem; E:\WINDOWS\system32\drivers\nmwcdcm.sys [2005-08-10 10991]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; E:\WINDOWS\system32\drivers\nmwcd.sys [2005-08-10 128797]
S3 Nokia USB Port;Nokia USB Port; E:\WINDOWS\system32\drivers\nmwcdcj.sys [2005-08-10 10991]
S3 pnicml;pnicml; \??\E:\DOCUME~1\rr\LOCALS~1\Temp\pnicml.sys []
S3 s117bus;Sony Ericsson Device 117 driver (WDM); E:\WINDOWS\System32\DRIVERS\s117bus.sys [2007-06-25 82984]
S3 s117mdfl;Sony Ericsson Device 117 USB WMC Modem Filter; E:\WINDOWS\System32\DRIVERS\s117mdfl.sys [2007-06-25 14888]
S3 s117mdm;Sony Ericsson Device 117 USB WMC Modem Driver; E:\WINDOWS\System32\DRIVERS\s117mdm.sys [2007-06-25 108456]
S3 s117mgmt;Sony Ericsson Device 117 USB WMC Device Management Drivers (WDM); E:\WINDOWS\System32\DRIVERS\s117mgmt.sys [2007-06-25 100264]
S3 s117nd5;Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (NDIS); E:\WINDOWS\System32\DRIVERS\s117nd5.sys [2007-06-25 22952]
S3 s117obex;Sony Ericsson Device 117 USB WMC OBEX Interface; E:\WINDOWS\System32\DRIVERS\s117obex.sys [2007-06-25 98344]
S3 s117unic;Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (WDM); E:\WINDOWS\System32\DRIVERS\s117unic.sys [2007-06-25 98856]
S3 sermouse;Serial Mouse Driver; E:\WINDOWS\System32\DRIVERS\sermouse.sys [2001-08-17 17664]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); E:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); E:\WINDOWS\System32\DRIVERS\ss_bus.sys [2005-08-30 58320]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; E:\WINDOWS\System32\DRIVERS\ss_mdfl.sys [2005-08-30 8304]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; E:\WINDOWS\System32\DRIVERS\ss_mdm.sys [2005-08-30 94000]
S3 tap0901;TAP-Win32 Adapter V9; E:\WINDOWS\System32\DRIVERS\tap0901.sys [2010-08-20 26112]
S3 usbccgp;Microsoft USB Generic Parent Driver; E:\WINDOWS\System32\DRIVERS\usbccgp.sys [2002-08-29 28160]
S3 usbprint;Microsoft USB PRINTER Class; E:\WINDOWS\System32\DRIVERS\usbprint.sys [2002-08-29 24960]
S3 usbscan;USB Scanner Driver; E:\WINDOWS\System32\DRIVERS\usbscan.sys [2002-08-29 14208]
S3 usbser;Motorola USB Modem Driver; E:\WINDOWS\System32\DRIVERS\usbser.sys [2001-08-17 24192]
S3 USBSTOR;USB Mass Storage Driver; E:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2002-08-29 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; E:\WINDOWS\System32\Ati2evxx.exe [2003-06-25 294912]
R2 btwdins;Bluetooth Service; E:\Program Files\MSI\BToes Bluetooth Software\bin\btwdins.exe [2005-03-30 254007]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; E:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2011-05-25 1336712]
R2 ICQ Service;ICQ Service; E:\Program Files\ICQ6Toolbar\ICQ Service.exe [2009-06-01 222968]
R2 JavaQuickStarterService;Java Quick Starter; E:\Program Files\Java\jre6\bin\jqs.exe [2010-06-02 153376]
R2 Pokernet;Pokernet; E:\Documents and Settings\rr\Application Data\MyPokerLab\Pokernet\Pokernet Service.exe [2011-06-02 520192]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; E:\Program Files\Spyware Terminator\sp_rsser.exe [2008-05-06 606720]
R2 srviecheck;srviecheck; E:\WINDOWS\update.2\svchost.exe [2011-07-21 483328]
R2 srvsysdriver32;srvsysdriver32; E:\WINDOWS\sysdriver32.exe [2011-07-22 249344]
R2 StarWindServiceAE;StarWind AE Service; E:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R2 wxpdrivers;wxpdrivers; E:\WINDOWS\update.1\svchost.exe [2011-07-21 1178112]
S2 AntiVirService;Avira AntiVir Personal – Free Antivirus Guard; E:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe []
S2 AntiVirScheduler;Avira AntiVir Personal – Free Antivirus Scheduler; E:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe []
S2 gupdate;Služba Google Update (gupdate); E:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-02 135664]
S3 aspnet_state;ASP.NET State Service; E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 gupdatem;Služba Google Update (gupdatem); E:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-02 135664]
S3 gusvc;Google Software Updater; E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-07-14 182768]
S3 IDriverT;InstallDriver Table Manager; E:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Pml Driver HPZ12;Pml Driver HPZ12; E:\WINDOWS\System32\HPZipm12.exe [2003-04-07 65795]
S3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion; E:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2010-10-26 155344]

-----------------EOF-----------------

Vítám tě u nás

vyzkoušej postup kolegy stell a logy dávej postupně do svých odpovědí
http://virusstell.blogspot.com/2011/07/ ... t-vir.html

kdybys měl problém, tak se ozvi

ďakujem...mám teraz problém nejak sa neviem pohnúť s tým ROGUEKILLERom len mi vyskočí tabulka a blikajúca medzera

Nejde ani v nouzovém režimu?

Zdravim
no stlac 2-na klavesnici a stlac enter
Prepac motji

no nudzoveho režimu mi nešlo prepnúť robím to v normálnom vadí to??? no stačím 2 a ptm enter a nič sa nedeje

premenuj ikonu Roguekiller na winlogon.exe, vsak tam to mam v blogu v navode.
ak nepojde treba spustit niekolkokrat, win7.pravy klik a spustit ako administrator

vieš nie som nejaký majster v týchto veciach treba na mňa pomaly

Ano, tak je najlepsie, len pomaly, ak nieco nepojde pis, a logy vkladaj sem do fora.
kolega Cernohous alebo ja to potom dokonci s tebou

spravil som ako si povedal a stále to nejde :/

Stiahni na plochu>>2x klik a spust-po skane sa vytvori log>>log.txt >vloz sem
exeHelper
Ak vypise>>"Error deleting file">>spust program este raz a obidva logy vloz sem,

a znova spust RogueKiller a pokracuj podla navodu.

bo, co sa deje?? ja dnes uz koncim, kolegyna motji. alebo cernohous bude pokracovat, teda dufam.

no aj po 3. spustení mi nedalo žiadny log a vypísalo že aplikáciu je nutné ukončiť ospravedlňujeme sa atd atd

no to blokuju Malware, a tieto hlasky su falosne.
takze este raz
1: stiahnes tento program a spustis
http://download.bleepingcomputer.com/gr ... eRiNiT.exe
ak zostane visiet na ploche, nechaj to tam, a spust este raz.
ak dostanes hlasku, hlasky su falosne nerob to co pise, ale spust znova
a pokracuj RogueKiller

vypíše že inštalácia zlyhala...aj tie kroky čo máš na blogu nič mi nejde spraviť niektoré nejde ani spustiť niektoré uknčí počas....seká mi tu PC ledva vám toto napíšem aaaach porazííí ma tu