Dobry vecer . tiez mam problem s fb virom. Notebook mi ide pustit iba v nudzovom rezime.
Logfile of random's system information tool 1.09 (written by random/random)
Run by Spravca at 2011-07-30 19:52:17
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 163 GB (74%) free of 221 GB
Total RAM: 1976 MB (78% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:52:41, on 30. 7. 2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Safe mode with network support
Running processes:
C:\windows\Explorer.EXE
C:\windows\system32\ctfmon.exe
C:\Users\Spravca\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Spravca\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Spravca\Downloads\RSIT.exe
C:\Program Files\trend micro\Spravca.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... ll&pf=cmnb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... ll&pf=cmnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... ll&pf=cmnb
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6173\SiteAdv.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (file missing)
O2 - BHO: Pomocník pri prihlasovaní v sieti Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6173\SiteAdv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (file missing)
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [MVS Splash] C:\Program Files\McAfee\Managed VirusScan\Agent\Splash.exe
O4 - HKLM\..\Run: [McAfee Managed Services Tray] C:\Program Files\McAfee\Managed VirusScan\Agent\StartMyAgtTry.Exe
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6173\SiteAdv.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\soundmax.exe /tray
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [aswAhAScr.dll] "C:\Program Files\AVAST Software\Avast\aswRegSvr.exe" "C:\Program Files\AVAST Software\Avast\AhAScr.dll"
O4 - HKCU\..\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [Google Update] "C:\Users\Spravca\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: T-Mobile Communication Centre.lnk = C:\Program Files\T-Mobile Communication Centre\TMCC.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://*.mcafee.com (HKLM)
O15 - Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://www.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://*.mcafee.com (HKLM)
O15 - ESC Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://www.mcafeeasap.com (HKLM)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\windows\system32\AEADISRV.EXE
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: EngineServer - McAfee, Inc. - C:\PROGRA~1\McAfee\MANAGE~1\VScan\ENGINE~1.EXE
O23 - Service: Mobility Manager Service (FMMService) - Flarion Technologies, Inc. - C:\PROGRA~1\T-MOBI~1\drivers\82A885~1\FMMSER~1.EXE
O23 - Service: FOFDM Upgrade (FOFDMUpgrade) - Paradoxx Software - C:\PROGRA~1\T-MOBI~1\FOFDMU~1.EXE
O23 - Service: HP Health Check Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPBOID.EXE
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard - C:\windows\system32\Hpservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McShield - McAfee, Inc. - C:\PROGRA~1\McAfee\MANAGE~1\VScan\McShield.exe
O23 - Service: McAfee Virus and Spyware Protection Service (myAgtSvc) - McAfee, Inc. - C:\Program Files\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\6173\SAService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
--
End of file - 9361 bytes
======Scheduled tasks folder======
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1477078727-1654777056-1478667540-1001Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1477078727-1654777056-1478667540-1001UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{089FD14D-132B-48FC-8861-0048AE113215}]
C:\Program Files\SiteAdvisor\6173\SiteAdv.dll [2007-08-28 910624]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v sieti Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-04 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0BF43445-2F28-4351-9252-17FE6E806AA0} - McAfee SiteAdvisor - C:\Program Files\SiteAdvisor\6173\SiteAdv.dll [2007-08-28 910624]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-07-28 288312]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-08-25 186904]
"PDF Complete"=C:\Program Files\PDF Complete\pdfsty.exe [2009-06-18 563736]
"WirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2009-07-23 498744]
"MVS Splash"=C:\Program Files\McAfee\Managed VirusScan\Agent\Splash.exe [2009-07-16 562496]
"McAfee Managed Services Tray"=C:\Program Files\McAfee\Managed VirusScan\Agent\StartMyAgtTry.Exe [2009-07-16 95552]
"SiteAdvisor"=C:\Program Files\SiteAdvisor\6173\SiteAdv.exe [2007-08-28 36640]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-09-17 1721640]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2009-08-02 141848]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2009-08-02 174104]
"Persistence"=C:\windows\system32\igfxpers.exe [2009-08-02 151064]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-05-18 1314816]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\soundmax.exe [2009-05-18 3866624]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-06-08 37296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"aswAhAScr.dll"=C:\Program Files\AVAST Software\Avast\aswRegSvr.exe C:\Program Files\AVAST Software\Avast\AhAScr.dll []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"HPADVISOR"=C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [2009-07-16 1668664]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2009-06-17 2363392]
"Google Update"=C:\Users\Spravca\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-26 136176]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
T-Mobile Communication Centre.lnk - C:\Program Files\T-Mobile Communication Centre\TMCC.exe
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2009-07-28 216576]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.siren"=sirenacm.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2011-07-30 19:52:17 ----D---- C:\rsit
2011-07-30 19:52:17 ----D---- C:\Program Files\trend micro
2011-07-30 19:00:02 ----D---- C:\ProgramData\AVAST Software
2011-07-30 19:00:02 ----D---- C:\Program Files\AVAST Software
2011-07-30 18:53:12 ----A---- C:\windows\ntbtlog.txt
2011-07-30 14:44:56 ----HD---- C:\ProgramData\Common Files
2011-07-30 14:44:04 ----D---- C:\ProgramData\MFAData
2011-07-29 17:57:25 ----D---- C:\Users\Spravca\AppData\Roaming\ESET
2011-07-29 17:52:43 ----D---- C:\Program Files\ESET
2011-07-29 17:19:40 ----D---- C:\Users\Spravca\AppData\Roaming\Malwarebytes
2011-07-29 17:19:34 ----D---- C:\ProgramData\Malwarebytes
2011-07-29 17:19:31 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-07-29 16:30:02 ----D---- C:\ProgramData\Comodo
2011-07-29 16:29:39 ----D---- C:\ProgramData\Comodo Downloader
2011-07-29 16:19:17 ----D---- C:\Program Files\COMODO
2011-07-29 16:01:50 ----HD---- C:\VritualRoot
2011-07-29 15:42:31 ----HD---- C:\windows\update.tray-5-0
2011-07-27 09:14:54 ----HD---- C:\windows\update.tray-3-0-lnk
2011-07-27 09:14:54 ----HD---- C:\windows\update.tray-3-0
2011-07-26 17:53:18 ----D---- C:\ProgramData\Uniblue
2011-07-20 22:10:23 ----D---- C:\windows\phoenix
2011-07-20 22:09:30 ----HD---- C:\windows\update.2
2011-07-20 22:09:10 ----HD---- C:\windows\update.5.0
2011-07-20 22:05:56 ----D---- C:\windows\av_ico
2011-07-20 22:04:57 ----HD---- C:\windows\update.1
2011-07-20 22:04:53 ----HD---- C:\windows\update.tray-9-0-lnk
2011-07-20 22:04:53 ----HD---- C:\windows\update.tray-9-0
2011-07-14 09:54:16 ----D---- C:\windows\system32\SPReview
2011-07-13 23:22:55 ----A---- C:\windows\system32\KernelBase.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-07-13 23:22:54 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-07-13 23:22:53 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-07-13 23:22:50 ----A---- C:\windows\system32\fsquirt.exe
2011-07-13 23:22:50 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2011-07-13 23:22:50 ----A---- C:\windows\system32\drivers\bthport.sys
2011-07-13 23:22:49 ----A---- C:\windows\system32\kernel32.dll
2011-07-13 23:22:49 ----A---- C:\windows\system32\conhost.exe
2011-07-13 23:22:48 ----A---- C:\windows\system32\winsrv.dll
2011-07-13 23:22:44 ----A---- C:\windows\system32\win32k.sys
2011-07-10 19:33:51 ----D---- C:\Program Files\AMR to MP3 Converter
2011-07-08 17:20:08 ----A---- C:\windows\system32\wininet.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\urlmon.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\SetIEInstalledDate.exe
2011-07-08 17:20:08 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2011-07-08 17:20:08 ----A---- C:\windows\system32\msrating.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\msls31.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\mshtmler.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\msfeedssync.exe
2011-07-08 17:20:08 ----A---- C:\windows\system32\msfeedsbs.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\jsproxy.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\iertutil.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\ieakeng.dll
2011-07-08 17:20:08 ----A---- C:\windows\system32\IEAdvpack.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\wextract.exe
2011-07-08 17:20:07 ----A---- C:\windows\system32\webcheck.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\vbscript.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\url.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\pngfilt.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\occache.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\mshtmled.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\mshtml.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\mshta.exe
2011-07-08 17:20:07 ----A---- C:\windows\system32\msfeeds.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\licmgr10.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\jscript9.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\inseng.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\iexpress.exe
2011-07-08 17:20:07 ----A---- C:\windows\system32\ieUnatt.exe
2011-07-08 17:20:07 ----A---- C:\windows\system32\ieui.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\iesysprep.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\iesetup.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\iernonce.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\ieframe.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\iedkcs32.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\ieapfltr.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\ieapfltr.dat
2011-07-08 17:20:07 ----A---- C:\windows\system32\ieakui.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\ieaksie.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\ie4uinit.exe
2011-07-08 17:20:07 ----A---- C:\windows\system32\icardie.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\dxtrans.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\dxtmsft.dll
2011-07-08 17:20:07 ----A---- C:\windows\system32\admparse.dll
2011-07-08 17:20:06 ----A---- C:\windows\system32\jscript.dll
2011-07-08 17:20:06 ----A---- C:\windows\system32\imgutil.dll
2011-07-08 17:20:06 ----A---- C:\windows\system32\iepeers.dll
======List of files/folders modified in the last 1 month======
2011-07-31 04:51:39 ----D---- C:\windows\system32\config
2011-07-31 04:51:36 ----D---- C:\windows\winsxs
2011-07-31 04:51:36 ----D---- C:\windows\system32\DriverStore
2011-07-31 04:51:36 ----D---- C:\windows\system32\catroot2
2011-07-31 04:51:30 ----D---- C:\windows\Tasks
2011-07-31 04:51:30 ----D---- C:\windows\TAPI
2011-07-31 04:51:30 ----D---- C:\windows\system32\wfp
2011-07-31 04:51:30 ----D---- C:\windows\system32\wbem
2011-07-31 04:51:30 ----D---- C:\windows\system32\sysprep
2011-07-31 04:51:30 ----D---- C:\windows\system32\sppui
2011-07-31 04:51:30 ----D---- C:\windows\system32\sk-SK
2011-07-31 04:51:30 ----D---- C:\windows\system32\Setup
2011-07-31 04:51:30 ----D---- C:\windows\system32\oobe
2011-07-31 04:51:30 ----D---- C:\windows\system32\migwiz
2011-07-31 04:51:30 ----D---- C:\windows\system32\migration
2011-07-31 04:51:30 ----D---- C:\windows\system32\manifeststore
2011-07-31 04:51:30 ----D---- C:\windows\system32\es-ES
2011-07-31 04:51:30 ----D---- C:\windows\system32\en-US
2011-07-31 04:51:30 ----D---- C:\windows\system32\en
2011-07-31 04:51:29 ----RSD---- C:\windows\Fonts
2011-07-31 04:51:29 ----D---- C:\windows\system32\drivers\UMDF
2011-07-31 04:51:29 ----D---- C:\windows\system32\drivers\etc
2011-07-31 04:51:29 ----D---- C:\windows\system32\drivers\en-US
2011-07-31 04:51:29 ----D---- C:\windows\system32\Dism
2011-07-31 04:51:29 ----D---- C:\windows\system32\da-DK
2011-07-31 04:51:29 ----D---- C:\windows\system32\cs-CZ
2011-07-31 04:51:29 ----D---- C:\windows\system32\Boot
2011-07-31 04:51:29 ----D---- C:\windows\system32\AdvancedInstallers
2011-07-31 04:51:29 ----D---- C:\windows\servicing
2011-07-31 04:51:29 ----D---- C:\windows\rescache
2011-07-31 04:51:29 ----D---- C:\windows\PolicyDefinitions
2011-07-31 04:51:29 ----D---- C:\windows\ehome
2011-07-31 04:51:29 ----D---- C:\windows\AppPatch
2011-07-31 04:51:29 ----D---- C:\Program Files\Windows Sidebar
2011-07-31 04:51:29 ----D---- C:\Program Files\Windows Portable Devices
2011-07-31 04:51:29 ----D---- C:\Program Files\Windows Photo Viewer
2011-07-31 04:51:29 ----D---- C:\Program Files\Windows Media Player
2011-07-31 04:51:29 ----D---- C:\Program Files\Windows Mail
2011-07-31 04:51:29 ----D---- C:\Program Files\Windows Journal
2011-07-31 04:51:29 ----D---- C:\Program Files\Windows Defender
2011-07-31 04:51:29 ----D---- C:\Program Files\Internet Explorer
2011-07-31 04:51:29 ----D---- C:\Program Files\DVD Maker
2011-07-31 04:50:51 ----D---- C:\windows\system32\Tasks
2011-07-31 04:50:51 ----D---- C:\windows\system32\spp
2011-07-31 04:50:50 ----D---- C:\windows\system32\Speech
2011-07-31 04:50:50 ----D---- C:\windows\system32\NDF
2011-07-31 04:50:50 ----D---- C:\windows\system32\MUI
2011-07-31 04:50:48 ----D---- C:\windows\system32\CodeIntegrity
2011-07-31 04:50:47 ----D---- C:\windows\security
2011-07-31 04:50:39 ----D---- C:\windows\AppCompat
2011-07-31 04:50:39 ----D---- C:\Users\Spravca\AppData\Roaming\vlc
2011-07-31 04:50:39 ----D---- C:\Users\Spravca\AppData\Roaming\GHISLER
2011-07-31 04:50:38 ----D---- C:\Program Files\T-Mobile Communication Centre
2011-07-31 04:50:38 ----D---- C:\Program Files\PDF Complete
2011-07-31 04:50:35 ----D---- C:\Program Files\LSI SoftModem
2011-07-31 04:50:35 ----D---- C:\Program Files\FreeCell Wizard
2011-07-31 04:50:35 ----D---- C:\Program Files\Common Files\microsoft shared
2011-07-31 04:50:35 ----D---- C:\Program Files\Common Files\LightScribe
2011-07-31 04:49:43 ----D---- C:\windows\registration
2011-07-31 04:44:20 ----D---- C:\windows\system32\catroot
2011-07-31 04:44:00 ----D---- C:\windows\Microsoft.NET
2011-07-31 04:42:58 ----RSD---- C:\windows\assembly
2011-07-31 04:42:36 ----D---- C:\ProgramData\McAfee
2011-07-31 04:42:17 ----D---- C:\Program Files\McAfee
2011-07-31 04:42:12 ----RHD---- C:\MSOCache
2011-07-30 19:52:17 ----RD---- C:\Program Files
2011-07-30 19:28:45 ----D---- C:\windows\System32
2011-07-30 19:28:45 ----D---- C:\windows\inf
2011-07-30 19:28:45 ----A---- C:\windows\system32\PerfStringBackup.INI
2011-07-30 19:10:48 ----D---- C:\Windows
2011-07-30 19:00:10 ----D---- C:\windows\system32\drivers
2011-07-30 19:00:02 ----HD---- C:\ProgramData
2011-07-30 18:53:42 ----SHD---- C:\System Volume Information
2011-07-30 15:03:11 ----D---- C:\windows\Temp
2011-07-30 14:40:54 ----D---- C:\windows\Panther
2011-07-30 14:17:19 ----D---- C:\windows\debug
2011-07-30 13:42:41 ----A---- C:\ProgramData\HPWALog.txt
2011-07-30 13:29:28 ----D---- C:\Users\Spravca\AppData\Roaming\SiteAdvisor
2011-07-30 07:54:14 ----D---- C:\windows\Prefetch
2011-07-29 08:16:12 ----D---- C:\ProgramData\PDFC
2011-07-28 19:26:40 ----D---- C:\email
2011-07-27 19:16:26 ----D---- C:\windows\system32\LogFiles
2011-07-20 10:42:18 ----D---- C:\windows\tracing
2011-07-14 09:59:37 ----A---- C:\windows\system32\msclmd.dll
2011-07-14 08:47:26 ----A---- C:\windows\system32\MRT.exe
2011-07-14 08:47:23 ----SHD---- C:\windows\Installer
2011-07-14 08:47:23 ----SHD---- C:\Config.Msi
2011-07-14 08:47:18 ----D---- C:\ProgramData\Microsoft Help
2011-07-08 17:20:59 ----D---- C:\windows\Logs
2011-07-08 17:16:15 ----D---- C:\Program Files\Microsoft Office
2011-07-06 22:44:04 ----D---- C:\Users\Spravca\AppData\Roaming\Skype
2011-07-06 22:31:27 ----D---- C:\Users\Spravca\AppData\Roaming\skypePM
2011-07-05 23:35:59 ----D---- C:\totalcmd
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
R0 hpdskflt;HP Filter; C:\windows\system32\DRIVERS\hpdskflt.sys [2009-07-08 25656]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-08-07 330264]
R0 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 PxHelp20;PxHelp20; C:\windows\System32\Drivers\PxHelp20.sys [2009-07-09 45200]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 storvsc;storvsc; C:\windows\system32\drivers\storvsc.sys [2010-11-20 28032]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 mfetdik;McAfee Inc. mfetdik; C:\windows\system32\drivers\mfetdik.sys [2009-05-16 55336]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 Accelerometer;HP Accelerometer; C:\windows\system32\DRIVERS\Accelerometer.sys [2009-07-08 33848]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 15872]
R3 NETw5s32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 32 Bit; C:\windows\system32\DRIVERS\NETw5s32.sys [2010-01-13 6755840]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-09-17 245424]
S1 mfehidk;McAfee Inc. mfehidk; C:\windows\system32\drivers\mfehidk.sys [2009-05-16 214024]
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\ADIHdAud.sys [2009-05-18 381440]
S3 AgereSoftModem;Agere Systems Soft Modem; C:\windows\system32\DRIVERS\AGRSM.sys [2009-07-27 1161664]
S3 amdagp;AMD AGP Bus Filter Driver; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 atikmdag;atikmdag; C:\windows\system32\drivers\atikmdag.sys [2009-07-14 4194816]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BthEnum;Bluetooth Request Block Driver; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Bluetooth Port Driver; C:\windows\System32\Drivers\BTHport.sys [2011-04-28 393728]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2009-07-01 86056]
S3 btwavdt;Bluetooth AVDT; C:\windows\system32\DRIVERS\btwavdt.sys [2009-07-01 108072]
S3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-08 29472]
S3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2009-07-01 18344]
S3 Dot4;MS IEEE-1284.4 Driver; C:\windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\windows\system32\drivers\Dot4Prt.sys [2010-11-20 16384]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 FlrnUSB;Leadtek USB Network Interface; C:\windows\system32\DRIVERS\LtkUSB.sys [2011-06-09 41907]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2009-07-28 5924864]
S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI; C:\windows\system32\drivers\IntcHdmi.sys [2009-05-26 122368]
S3 MfeAVFK;McAfee Inc. MfeAVFK; C:\windows\system32\drivers\MfeAVFK.sys [2009-05-16 79816]
S3 MfeBOPK;McAfee Inc. MfeBOPK; C:\windows\system32\drivers\MfeBOPK.sys [2009-05-16 35272]
S3 MfeRKDK;McAfee Inc. MfeRKDK; C:\windows\system32\drivers\MfeRKDK.sys [2009-05-16 34248]
S3 NETw1v32;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 32 Bit; C:\windows\system32\DRIVERS\NETw1v32.sys [2009-07-21 5958656]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168]
S3 NWUSBModem;Novatel Wireless USB Modem Driver; C:\windows\system32\DRIVERS\nwusbmdm.sys [2011-06-09 166144]
S3 NWUSBPort;Novatel Wireless USB Status Port Driver; C:\windows\system32\DRIVERS\nwusbser.sys [2011-06-09 166144]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; C:\windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\windows\system32\DRIVERS\snp2uvc.sys [2009-07-02 1765168]
S3 TPM;TPM; C:\windows\system32\drivers\tpm.sys [2009-07-14 30720]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;USB Scanner Driver; C:\windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
S2 AEADIFilters;Andrea ADI Filters Service; C:\windows\system32\AEADISRV.EXE [2008-07-15 90112]
S2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-07-27 14336]
S2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-30 582944]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\windows\System32\svchost.exe [2009-07-14 20992]
S2 EngineServer;EngineServer; C:\PROGRA~1\McAfee\MANAGE~1\VScan\ENGINE~1.EXE [2009-06-03 14144]
S2 FMMService;Mobility Manager Service; C:\PROGRA~1\T-MOBI~1\drivers\82A885~1\FMMSER~1.EXE [2011-06-09 40960]
S2 FOFDMUpgrade;FOFDM Upgrade; C:\PROGRA~1\T-MOBI~1\FOFDMU~1.EXE [2009-04-06 180224]
S2 HP Health Check Service;HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2011-02-23 125496]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-01-25 92216]
S2 hpsrv;HP Service; C:\windows\system32\Hpservice.exe [2009-07-08 26168]
S2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-08-25 354840]
S2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-06-17 73728]
S2 McShield;McShield; C:\PROGRA~1\McAfee\MANAGE~1\VScan\McShield.exe [2009-06-03 144704]
S2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
S2 myAgtSvc;McAfee Virus and Spyware Protection Service; C:\Program Files\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe [2009-07-16 221024]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 20992]
S2 pdfcDispatcher;PDF Document Manager; C:\Program Files\PDF Complete\pdfsvc.exe [2009-06-18 635416]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2009-07-14 20992]
S2 SiteAdvisor Service;SiteAdvisor Service; C:\Program Files\SiteAdvisor\6173\SAService.exe [2009-09-20 341280]
S2 yksvc;Marvell Yukon Service; C:\windows\System32\svchost.exe [2009-07-14 20992]
S3 AppMgmt;@appmgmts.dll,-3250; C:\windows\system32\svchost.exe [2009-07-14 20992]
S3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
S3 HP Port Resolver;HP Port Resolver; C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPBPRO.EXE [2005-05-20 81920]
S3 HP Status Server;HP Status Server; C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPBOID.EXE [2004-10-16 73728]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2011-01-25 791608]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\windows\System32\svchost.exe [2009-07-14 20992]
S3 RoxMediaDB10;RoxMediaDB10; c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-13 1120752]
S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2009-04-30 74392]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2010-06-22 1343400]
-----------------EOF-----------------
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
facebook virus
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: facebook virus
isiel som na programy a sucasti. nasiel som tam 2 programy od mcafee, dal som odinstalovat alebo zmenit ale ani pri jednom z nich sa nic nestalo.
Re: facebook virus
Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org
Verzia databázy: 7328
Windows 6.1.7601 Service Pack 1 (Safe Mode)
Internet Explorer 9.0.8112.16421
30. 7. 2011 20:35:19
mbam-log-2011-07-30 (20-35-19).txt
Typ kontroly: Rýchla kontrola
Objektov kontrolovaných: 160136
Uplynutý čas: 2 min, 47 sek
Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 0
Infikované súbory: 0
Infikované služby pamäte:
(Škodlivé položky neboli zistené)
Infikované moduly pamäte:
(Škodlivé položky neboli zistené)
Infikované registračné kľúče:
(Škodlivé položky neboli zistené)
Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)
Infikované položky registračných dát:
(Škodlivé položky neboli zistené)
Infikované priečinky:
(Škodlivé položky neboli zistené)
Infikované súbory:
(Škodlivé položky neboli zistené)
www.malwarebytes.org
Verzia databázy: 7328
Windows 6.1.7601 Service Pack 1 (Safe Mode)
Internet Explorer 9.0.8112.16421
30. 7. 2011 20:35:19
mbam-log-2011-07-30 (20-35-19).txt
Typ kontroly: Rýchla kontrola
Objektov kontrolovaných: 160136
Uplynutý čas: 2 min, 47 sek
Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 0
Infikované súbory: 0
Infikované služby pamäte:
(Škodlivé položky neboli zistené)
Infikované moduly pamäte:
(Škodlivé položky neboli zistené)
Infikované registračné kľúče:
(Škodlivé položky neboli zistené)
Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)
Infikované položky registračných dát:
(Škodlivé položky neboli zistené)
Infikované priečinky:
(Škodlivé položky neboli zistené)
Infikované súbory:
(Škodlivé položky neboli zistené)
Re: facebook virus
Nyní použijeme větší kalibr tak že pozorně čti, protože tenhle softík netoleruje chyby.
Stáhni a ulož na plochu ComboFix,
spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.
Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,
pak ještě jednou klik na ANO a už to jede.
Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.
Při skenovaní může být PC i restartováno nelekat se.
Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,
protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.
Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt
(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.
V případě nejasností je ZDE obrázkový návod.
Stáhni a ulož na plochu ComboFix,
spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.
Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,
pak ještě jednou klik na ANO a už to jede.
Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.
Při skenovaní může být PC i restartováno nelekat se.
Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,
protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.
Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt
(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.
V případě nejasností je ZDE obrázkový návod.
Re: facebook virus
vypol som firewall, ale okrem toho mcafee ktoreho antivirova kontrola je vypnuta som nenasiel ziadny antivir pretoze vzdy ked nejaky otec stiahol tak mu ho virus zablokoval a on nasledne ten antivir odstranil. jedine co mi tu ostava je ten Malware ale s tym asi netreba nic robit. je to v poriadku? pytam sa aby nahodou potom nejaka chyba nenabehla.
Re: facebook virus
ComboFix 11-07-31.01 - Spravca . 07. 2011 21:32:30.1.2 - x86 NETWORK
Microsoft Windows 7 Professional 6.1.7601.1.1250.421.1051.18.1976.1398 [GMT 2:00]
Running from: c:\users\Spravca\Downloads\ComboFix.exe
AV: McAfee® Total Protection™ for Small Business *Disabled/Outdated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: McAfee® Total Protection™ for Small Business *Disabled/Outdated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\$NtUninstallKB50661$
c:\windows\$NtUninstallKB50661$\1310225410\{1B372133-BFFA-4dba-9CCF-5474BED6A9F6}
c:\windows\$NtUninstallKB50661$\1310225410\click.tlb
c:\windows\$NtUninstallKB50661$\1310225410\L\xadqgnnk
c:\windows\$NtUninstallKB50661$\1310225410\loader.tlb
c:\windows\$NtUninstallKB50661$\1310225410\U\@00000001
c:\windows\$NtUninstallKB50661$\1310225410\U\@000000c0
c:\windows\$NtUninstallKB50661$\1310225410\U\@000000cb
c:\windows\$NtUninstallKB50661$\1310225410\U\@000000cf
c:\windows\$NtUninstallKB50661$\1310225410\U\@80000000
c:\windows\$NtUninstallKB50661$\1310225410\U\@800000c0
c:\windows\$NtUninstallKB50661$\1310225410\U\@800000cb
c:\windows\$NtUninstallKB50661$\1310225410\U\@800000cf
c:\windows\$NtUninstallKB50661$\2530957522
c:\windows\iun6002.exe
c:\windows\phoenix
c:\windows\update.1
c:\windows\update.2
c:\windows\update.5.0
.
.
((((((((((((((((((((((((( Files Created from 2011-06-28 to 2011-07-30 )))))))))))))))))))))))))))))))
.
.
2011-07-30 19:27 . 2011-07-30 19:27 -------- d-----w- C:\32788R22FWJFW
2011-07-30 18:30 . 2010-11-29 15:42 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-30 18:30 . 2010-11-29 15:42 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-07-30 17:52 . 2011-07-30 17:52 -------- d-----w- C:\rsit
2011-07-30 17:52 . 2011-07-30 17:52 -------- d-----w- c:\program files\trend micro
2011-07-30 17:00 . 2011-07-30 17:12 -------- d-----w- c:\program files\AVAST Software
2011-07-30 17:00 . 2011-07-30 17:10 -------- d-----w- c:\programdata\AVAST Software
2011-07-30 12:45 . 2011-07-30 12:45 -------- d-----w- c:\users\Spravca\AppData\Local\COMODO
2011-07-30 12:44 . 2011-07-30 12:44 -------- d--h--w- c:\programdata\Common Files
2011-07-30 12:44 . 2011-07-31 02:18 -------- d-----w- c:\programdata\MFAData
2011-07-29 15:57 . 2011-07-29 15:57 -------- d-----w- c:\users\Spravca\AppData\Local\ESET
2011-07-29 15:52 . 2011-07-29 15:52 -------- d-----w- c:\program files\ESET
2011-07-29 15:19 . 2011-07-29 15:19 -------- d-----w- c:\users\Spravca\AppData\Roaming\Malwarebytes
2011-07-29 15:19 . 2011-07-29 15:19 -------- d-----w- c:\programdata\Malwarebytes
2011-07-29 15:19 . 2011-07-30 18:30 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-07-29 14:30 . 2011-07-29 14:36 -------- d-----w- c:\programdata\Comodo
2011-07-29 14:29 . 2011-07-31 02:18 -------- d-----w- c:\programdata\Comodo Downloader
2011-07-29 14:19 . 2011-07-30 12:47 -------- d-----w- c:\program files\COMODO
2011-07-29 14:01 . 2011-07-29 14:01 -------- d-----w- C:\VritualRoot
2011-07-29 13:42 . 2011-07-30 11:48 -------- d--h--w- c:\windows\update.tray-5-0
2011-07-27 07:14 . 2011-07-30 12:40 -------- d--h--w- c:\windows\update.tray-3-0-lnk
2011-07-27 07:14 . 2011-07-30 11:48 -------- d--h--w- c:\windows\update.tray-3-0
2011-07-26 15:53 . 2011-07-26 15:53 -------- d-----w- c:\programdata\Uniblue
2011-07-21 10:34 . 2011-07-26 15:18 -------- d-----w- c:\users\Spravca\AppData\Local\ElevatedDiagnostics
2011-07-20 20:05 . 2011-07-31 02:18 -------- d-----w- c:\windows\av_ico
2011-07-20 20:04 . 2011-07-30 12:40 -------- d--h--w- c:\windows\update.tray-9-0-lnk
2011-07-20 20:04 . 2011-07-30 11:48 -------- d--h--w- c:\windows\update.tray-9-0
2011-07-14 07:54 . 2011-07-31 02:50 -------- d-----w- c:\windows\system32\SPReview
2011-07-10 17:33 . 2011-07-10 17:33 -------- d-----w- c:\program files\AMR to MP3 Converter
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-14 07:59 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2011-06-09 13:50 . 2011-06-09 13:51 166144 ----a-w- c:\windows\system32\drivers\nwusbser.sys
2011-06-09 13:50 . 2011-06-09 13:51 166144 ----a-w- c:\windows\system32\drivers\nwusbmdm.sys
2011-06-09 13:50 . 2011-06-09 13:50 41907 ----a-w- c:\windows\system32\drivers\LtkUSB.sys
2011-05-24 10:44 . 2011-06-29 05:18 293376 ----a-w- c:\windows\system32\umpnpmgr.dll
2011-05-04 04:34 . 2011-06-29 05:18 1549312 ----a-w- c:\windows\system32\tquery.dll
2011-05-04 04:32 . 2011-06-29 05:18 666624 ----a-w- c:\windows\system32\mssvp.dll
2011-05-04 04:32 . 2011-06-29 05:18 337408 ----a-w- c:\windows\system32\mssph.dll
2011-05-04 04:32 . 2011-06-29 05:18 1401344 ----a-w- c:\windows\system32\mssrch.dll
2011-05-04 04:32 . 2011-06-29 05:18 197120 ----a-w- c:\windows\system32\mssphtb.dll
2011-05-04 04:32 . 2011-06-29 05:18 59392 ----a-w- c:\windows\system32\msscntrs.dll
2011-05-04 04:28 . 2011-06-29 05:18 427520 ----a-w- c:\windows\system32\SearchIndexer.exe
2011-05-04 04:28 . 2011-06-29 05:18 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe
2011-05-04 04:28 . 2011-06-29 05:18 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe
2011-05-04 02:52 . 2011-03-16 17:55 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-05-03 04:30 . 2011-06-16 05:18 741376 ----a-w- c:\windows\system32\inetcomm.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HPADVISOR"="c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2009-07-16 1668664]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-06-17 2363392]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-07-27 288312]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-08-25 186904]
"PDF Complete"="c:\program files\PDF Complete\pdfsty.exe" [2009-06-18 563736]
"WirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
"MVS Splash"="c:\program files\McAfee\Managed VirusScan\Agent\Splash.exe" [2009-07-16 562496]
"McAfee Managed Services Tray"="c:\program files\McAfee\Managed VirusScan\Agent\StartMyAgtTry.Exe" [2009-07-16 95552]
"SiteAdvisor"="c:\program files\SiteAdvisor\6173\SiteAdv.exe" [2007-08-28 36640]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-09-17 1721640]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-08-02 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-08-02 174104]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-08-02 151064]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2009-05-18 1314816]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-06-08 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-11-29 443728]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-30 795936]
T-Mobile Communication Centre.lnk - c:\program files\T-Mobile Communication Centre\TMCC.exe [2011-6-9 749568]
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2009-4-3 525664]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-01-25 92216]
R2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2009-07-08 26168]
R2 myAgtSvc;McAfee Virus and Spyware Protection Service;c:\program files\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe [2009-07-16 221024]
R2 pdfcDispatcher;PDF Document Manager;c:\program files\PDF Complete\pdfsvc.exe [2009-06-18 635416]
R2 yksvc;Marvell Yukon Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
R3 FlrnUSB;Leadtek USB Network Interface;c:\windows\system32\DRIVERS\LtkUSB.sys [2011-06-09 41907]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2009-05-25 122368]
R3 NETw1v32;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw1v32.sys [2009-07-20 5958656]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 RoxMediaDB10;RoxMediaDB10;c:\program files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-13 1120752]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-22 1343400]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S3 NETw5s32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 32 Bit;c:\windows\system32\DRIVERS\NETw5s32.sys [2010-01-13 6755840]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-07-20 313856]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
yksvcs REG_MULTI_SZ yksvc
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-06-17 19:11 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2011-07-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1477078727-1654777056-1478667540-1001Core.job
- c:\users\Spravca\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-26 18:38]
.
2011-07-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1477078727-1654777056-1478667540-1001UA.job
- c:\users\Spravca\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-26 18:38]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.sk/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=sk_SK&c=92&bd=all&pf=cmnb
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Trusted Zone: //about.htm/
Trusted Zone: //Exclude.htm/
Trusted Zone: //LanguageSelection.htm/
Trusted Zone: //Message.htm/
Trusted Zone: //MyAgttryCmd.htm/
Trusted Zone: //MyAgttryNag.htm/
Trusted Zone: //MyNotification.htm/
Trusted Zone: //NOCLessUpdate.htm/
Trusted Zone: //quarantine.htm/
Trusted Zone: //ScanNow.htm/
Trusted Zone: //strings.vbs/
Trusted Zone: //Template.htm/
Trusted Zone: //Update.htm/
Trusted Zone: //VirFound.htm/
Trusted Zone: mcafee.com\*
Trusted Zone: mcafeeasap.com\betavscan
Trusted Zone: mcafeeasap.com\vs
Trusted Zone: mcafeeasap.com\www
TCP: DhcpNameServer = 192.168.1.1
.
- - - - ORPHANS REMOVED - - - -
.
HKLM-RunOnce-aswAhAScr.dll - c:\program files\AVAST Software\Avast\aswRegSvr.exe
AddRemove-Look@LAN_1.0 - c:\windows\iun6002.exe
AddRemove-LSI Soft Modem - c:\windows\agrsmdel
AddRemove-MVS - c:\program files\McAfee\Managed VirusScan\Agent\myinx
AddRemove-{E92D47A1-D27D-430A-8368-0BAFD956507D} - c:\program files\InstallShield Installation Information\{E92D47A1-D27D-430A-8368-0BAFD956507D}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-07-30 21:38:26
ComboFix-quarantined-files.txt 2011-07-30 19:38
.
Pre-Run: 171 064 414 208 bytes free
Post-Run: 171 300 352 000 bytes free
.
- - End Of File - - 01C3B37D3FD8A03CA9EFDD75B6BAAAE3
Microsoft Windows 7 Professional 6.1.7601.1.1250.421.1051.18.1976.1398 [GMT 2:00]
Running from: c:\users\Spravca\Downloads\ComboFix.exe
AV: McAfee® Total Protection™ for Small Business *Disabled/Outdated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: McAfee® Total Protection™ for Small Business *Disabled/Outdated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\$NtUninstallKB50661$
c:\windows\$NtUninstallKB50661$\1310225410\{1B372133-BFFA-4dba-9CCF-5474BED6A9F6}
c:\windows\$NtUninstallKB50661$\1310225410\click.tlb
c:\windows\$NtUninstallKB50661$\1310225410\L\xadqgnnk
c:\windows\$NtUninstallKB50661$\1310225410\loader.tlb
c:\windows\$NtUninstallKB50661$\1310225410\U\@00000001
c:\windows\$NtUninstallKB50661$\1310225410\U\@000000c0
c:\windows\$NtUninstallKB50661$\1310225410\U\@000000cb
c:\windows\$NtUninstallKB50661$\1310225410\U\@000000cf
c:\windows\$NtUninstallKB50661$\1310225410\U\@80000000
c:\windows\$NtUninstallKB50661$\1310225410\U\@800000c0
c:\windows\$NtUninstallKB50661$\1310225410\U\@800000cb
c:\windows\$NtUninstallKB50661$\1310225410\U\@800000cf
c:\windows\$NtUninstallKB50661$\2530957522
c:\windows\iun6002.exe
c:\windows\phoenix
c:\windows\update.1
c:\windows\update.2
c:\windows\update.5.0
.
.
((((((((((((((((((((((((( Files Created from 2011-06-28 to 2011-07-30 )))))))))))))))))))))))))))))))
.
.
2011-07-30 19:27 . 2011-07-30 19:27 -------- d-----w- C:\32788R22FWJFW
2011-07-30 18:30 . 2010-11-29 15:42 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-30 18:30 . 2010-11-29 15:42 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-07-30 17:52 . 2011-07-30 17:52 -------- d-----w- C:\rsit
2011-07-30 17:52 . 2011-07-30 17:52 -------- d-----w- c:\program files\trend micro
2011-07-30 17:00 . 2011-07-30 17:12 -------- d-----w- c:\program files\AVAST Software
2011-07-30 17:00 . 2011-07-30 17:10 -------- d-----w- c:\programdata\AVAST Software
2011-07-30 12:45 . 2011-07-30 12:45 -------- d-----w- c:\users\Spravca\AppData\Local\COMODO
2011-07-30 12:44 . 2011-07-30 12:44 -------- d--h--w- c:\programdata\Common Files
2011-07-30 12:44 . 2011-07-31 02:18 -------- d-----w- c:\programdata\MFAData
2011-07-29 15:57 . 2011-07-29 15:57 -------- d-----w- c:\users\Spravca\AppData\Local\ESET
2011-07-29 15:52 . 2011-07-29 15:52 -------- d-----w- c:\program files\ESET
2011-07-29 15:19 . 2011-07-29 15:19 -------- d-----w- c:\users\Spravca\AppData\Roaming\Malwarebytes
2011-07-29 15:19 . 2011-07-29 15:19 -------- d-----w- c:\programdata\Malwarebytes
2011-07-29 15:19 . 2011-07-30 18:30 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-07-29 14:30 . 2011-07-29 14:36 -------- d-----w- c:\programdata\Comodo
2011-07-29 14:29 . 2011-07-31 02:18 -------- d-----w- c:\programdata\Comodo Downloader
2011-07-29 14:19 . 2011-07-30 12:47 -------- d-----w- c:\program files\COMODO
2011-07-29 14:01 . 2011-07-29 14:01 -------- d-----w- C:\VritualRoot
2011-07-29 13:42 . 2011-07-30 11:48 -------- d--h--w- c:\windows\update.tray-5-0
2011-07-27 07:14 . 2011-07-30 12:40 -------- d--h--w- c:\windows\update.tray-3-0-lnk
2011-07-27 07:14 . 2011-07-30 11:48 -------- d--h--w- c:\windows\update.tray-3-0
2011-07-26 15:53 . 2011-07-26 15:53 -------- d-----w- c:\programdata\Uniblue
2011-07-21 10:34 . 2011-07-26 15:18 -------- d-----w- c:\users\Spravca\AppData\Local\ElevatedDiagnostics
2011-07-20 20:05 . 2011-07-31 02:18 -------- d-----w- c:\windows\av_ico
2011-07-20 20:04 . 2011-07-30 12:40 -------- d--h--w- c:\windows\update.tray-9-0-lnk
2011-07-20 20:04 . 2011-07-30 11:48 -------- d--h--w- c:\windows\update.tray-9-0
2011-07-14 07:54 . 2011-07-31 02:50 -------- d-----w- c:\windows\system32\SPReview
2011-07-10 17:33 . 2011-07-10 17:33 -------- d-----w- c:\program files\AMR to MP3 Converter
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-14 07:59 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2011-06-09 13:50 . 2011-06-09 13:51 166144 ----a-w- c:\windows\system32\drivers\nwusbser.sys
2011-06-09 13:50 . 2011-06-09 13:51 166144 ----a-w- c:\windows\system32\drivers\nwusbmdm.sys
2011-06-09 13:50 . 2011-06-09 13:50 41907 ----a-w- c:\windows\system32\drivers\LtkUSB.sys
2011-05-24 10:44 . 2011-06-29 05:18 293376 ----a-w- c:\windows\system32\umpnpmgr.dll
2011-05-04 04:34 . 2011-06-29 05:18 1549312 ----a-w- c:\windows\system32\tquery.dll
2011-05-04 04:32 . 2011-06-29 05:18 666624 ----a-w- c:\windows\system32\mssvp.dll
2011-05-04 04:32 . 2011-06-29 05:18 337408 ----a-w- c:\windows\system32\mssph.dll
2011-05-04 04:32 . 2011-06-29 05:18 1401344 ----a-w- c:\windows\system32\mssrch.dll
2011-05-04 04:32 . 2011-06-29 05:18 197120 ----a-w- c:\windows\system32\mssphtb.dll
2011-05-04 04:32 . 2011-06-29 05:18 59392 ----a-w- c:\windows\system32\msscntrs.dll
2011-05-04 04:28 . 2011-06-29 05:18 427520 ----a-w- c:\windows\system32\SearchIndexer.exe
2011-05-04 04:28 . 2011-06-29 05:18 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe
2011-05-04 04:28 . 2011-06-29 05:18 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe
2011-05-04 02:52 . 2011-03-16 17:55 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-05-03 04:30 . 2011-06-16 05:18 741376 ----a-w- c:\windows\system32\inetcomm.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HPADVISOR"="c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2009-07-16 1668664]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-06-17 2363392]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-07-27 288312]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-08-25 186904]
"PDF Complete"="c:\program files\PDF Complete\pdfsty.exe" [2009-06-18 563736]
"WirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
"MVS Splash"="c:\program files\McAfee\Managed VirusScan\Agent\Splash.exe" [2009-07-16 562496]
"McAfee Managed Services Tray"="c:\program files\McAfee\Managed VirusScan\Agent\StartMyAgtTry.Exe" [2009-07-16 95552]
"SiteAdvisor"="c:\program files\SiteAdvisor\6173\SiteAdv.exe" [2007-08-28 36640]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-09-17 1721640]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-08-02 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-08-02 174104]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-08-02 151064]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2009-05-18 1314816]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-06-08 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-11-29 443728]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-30 795936]
T-Mobile Communication Centre.lnk - c:\program files\T-Mobile Communication Centre\TMCC.exe [2011-6-9 749568]
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2009-4-3 525664]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-01-25 92216]
R2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2009-07-08 26168]
R2 myAgtSvc;McAfee Virus and Spyware Protection Service;c:\program files\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe [2009-07-16 221024]
R2 pdfcDispatcher;PDF Document Manager;c:\program files\PDF Complete\pdfsvc.exe [2009-06-18 635416]
R2 yksvc;Marvell Yukon Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
R3 FlrnUSB;Leadtek USB Network Interface;c:\windows\system32\DRIVERS\LtkUSB.sys [2011-06-09 41907]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2009-05-25 122368]
R3 NETw1v32;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw1v32.sys [2009-07-20 5958656]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 RoxMediaDB10;RoxMediaDB10;c:\program files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-13 1120752]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-22 1343400]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S3 NETw5s32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 32 Bit;c:\windows\system32\DRIVERS\NETw5s32.sys [2010-01-13 6755840]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-07-20 313856]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
yksvcs REG_MULTI_SZ yksvc
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-06-17 19:11 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2011-07-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1477078727-1654777056-1478667540-1001Core.job
- c:\users\Spravca\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-26 18:38]
.
2011-07-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1477078727-1654777056-1478667540-1001UA.job
- c:\users\Spravca\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-26 18:38]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.sk/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=sk_SK&c=92&bd=all&pf=cmnb
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Trusted Zone: //about.htm/
Trusted Zone: //Exclude.htm/
Trusted Zone: //LanguageSelection.htm/
Trusted Zone: //Message.htm/
Trusted Zone: //MyAgttryCmd.htm/
Trusted Zone: //MyAgttryNag.htm/
Trusted Zone: //MyNotification.htm/
Trusted Zone: //NOCLessUpdate.htm/
Trusted Zone: //quarantine.htm/
Trusted Zone: //ScanNow.htm/
Trusted Zone: //strings.vbs/
Trusted Zone: //Template.htm/
Trusted Zone: //Update.htm/
Trusted Zone: //VirFound.htm/
Trusted Zone: mcafee.com\*
Trusted Zone: mcafeeasap.com\betavscan
Trusted Zone: mcafeeasap.com\vs
Trusted Zone: mcafeeasap.com\www
TCP: DhcpNameServer = 192.168.1.1
.
- - - - ORPHANS REMOVED - - - -
.
HKLM-RunOnce-aswAhAScr.dll - c:\program files\AVAST Software\Avast\aswRegSvr.exe
AddRemove-Look@LAN_1.0 - c:\windows\iun6002.exe
AddRemove-LSI Soft Modem - c:\windows\agrsmdel
AddRemove-MVS - c:\program files\McAfee\Managed VirusScan\Agent\myinx
AddRemove-{E92D47A1-D27D-430A-8368-0BAFD956507D} - c:\program files\InstallShield Installation Information\{E92D47A1-D27D-430A-8368-0BAFD956507D}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-07-30 21:38:26
ComboFix-quarantined-files.txt 2011-07-30 19:38
.
Pre-Run: 171 064 414 208 bytes free
Post-Run: 171 300 352 000 bytes free
.
- - End Of File - - 01C3B37D3FD8A03CA9EFDD75B6BAAAE3
Re: facebook virus
Pokud jsi tak ještě neučinil, přesuň Combofix na plochu
otevři si Poznámkový blok
do něj zkopíruj skript z následujícího okna:
ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,
po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:
Po aplikaci na Tebe vypadne další log, zkopíruj ho sem
Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,
v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci
otevři si Poznámkový blok
do něj zkopíruj skript z následujícího okna:
Kód: Vybrat vše
KillAll::
Folder::
c:\windows\update.tray-5-0
c:\windows\update.tray-3-0-lnk
c:\windows\update.tray-3-0
c:\windows\av_ico
c:\windows\update.tray-9-0-lnk
c:\windows\update.tray-9-0
RegLock::
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:
Po aplikaci na Tebe vypadne další log, zkopíruj ho sem
Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,
v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci
Re: facebook virus
po dokonceni a restartovani som to zkopiroval ale ked chcem zapnut prehliadac tak mi napise ze polozka bola presunuta premenovana alebo zmazana. a pyta sa ma to ci ju chcem odstranit. Co mam robit?? pisem z 2.pc
Re: facebook virus
ani google chrome ani IE
Re: facebook virus
cely cas som v nudzovom rezime. mam aj tak skusit?
Přispějete na provoz fóra?