VIRY.CZ

Dobrý večer,prosim o kontrolu logu,nefungují mi aktualizace.Děkuji

http://imageshack.us/photo/my-images/15/chyban.jpg/




Logfile of random's system information tool 1.09 (written by random/random)
Run by dom at 2011-09-13 21:18:05
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 15 GB (22%) free of 66 GB
Total RAM: 2047 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:18:13, on 13.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\USB Safely Remove\USBSRService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\AntiLogger\AntiLogger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\WINDOWS\system32\AEADISRV.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton AntiVirus\Engine\19.1.0.28\ccSvcHst.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe
C:\Program Files\Norton AntiVirus\Engine\19.1.0.28\ccSvcHst.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Opera\opera.exe
C:\Documents and Settings\dom\Plocha\RSIT.exe
C:\Program Files\trend micro\dom.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: ::1 localhost
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\19.1.0.28\IPS\IPSBHO.DLL
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [AntiLogger] "C:\Program Files\AntiLogger\AntiLogger.exe" /minimized
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\WINDOWS\system32\AEADISRV.EXE
O23 - Service: CyberGhost VPN Client (CGVPNCliSrvc) - mobile concepts GmbH - C:\Program Files\CyberGhost VPN\CGVPNCliService.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Norton AntiVirus (NAV) - Symantec Corporation - C:\Program Files\Norton AntiVirus\Engine\19.1.0.28\ccSvcHst.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Seagate Scheduler2 Service (SgtSch2Svc) - Seagate - C:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe
O23 - Service: USB Safely Remove Assistant (USBSafelyRemoveService) - Unknown owner - C:\Program Files\USB Safely Remove\USBSRService.exe

--
End of file - 4825 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\dom\Data aplikací\Mozilla\Firefox\Profiles\57lkyadx.default

"{BBDA0591-3099-440a-AA10-41764D9DB4DB}"=C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\IPSFFPlgn\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mozilla.zeniko.ch/SumatraPDF_Browser_Plugin]
"Description"=SumatraPDF Browser Plugin
"Path"=C:\Program Files\SumatraPDF\npPdfViewer.dll

D:\Mozilla\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

D:\Mozilla\components\
binary.manifest
browsercomps.dll

D:\Mozilla\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\dom\Data aplikací\Mozilla\Firefox\Profiles\57lkyadx.default\extensions\
https-everywhere@eff.org

C:\Documents and Settings\dom\Data aplikací\Mozilla\Firefox\Profiles\57lkyadx.default\searchplugins\
askcom.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Norton Vulnerability Protection - C:\Program Files\Norton AntiVirus\Engine\19.1.0.28\IPS\IPSBHO.DLL [2011-07-25 210872]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-07-07 2554696]
"AntiLogger"=C:\Program Files\AntiLogger\AntiLogger.exe [2011-07-02 2856392]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-08-03 13892200]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\"C:]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
C:\Program Files\Seagate\DiscWizard\TimounterMonitor.exe [2009-11-02 906288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DiscWizardMonitor.exe]
C:\Program Files\Seagate\DiscWizard\DiscWizardMonitor.exe [2009-11-02 1346000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverScanner]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\WINDOWS\system32\NvCpl.dll [2011-08-03 13892200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
NvMCTray.dll,NvTaskbarInit -login []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2011-07-05 1632360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Seagate Scheduler2 Service]
C:\Program Files\Common Files\Seagate\Schedule2\schedhlp.exe [2009-11-02 136544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP]
C:\Program Files\Analog Devices\Core\smax4pnp.exe [2011-08-24 1310720]


askcom.xml

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [2011-05-04 551296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2011-07-19 113024]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
relog_ap

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SolutoService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro35]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro35.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SolutoService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vds]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=255
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\KONAMI\Pro Evolution Soccer 2011\pes2011.exe"="C:\Program Files\KONAMI\Pro Evolution Soccer 2011\pes2011.exe:*:Enabled:Pro Evolution Soccer 2011"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"midi"=wdmaud.drv
"wave"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2011-09-13 21:18:06 ----D---- C:\Program Files\trend micro
2011-09-13 21:18:05 ----D---- C:\rsit
2011-09-13 21:00:47 ----HD---- C:\Program Files\WindowsUpdate
2011-09-13 20:49:34 ----A---- C:\WINDOWS\imsins.BAK
2011-09-13 20:49:04 ----HDC---- C:\WINDOWS\ie8
2011-09-13 20:17:42 ----HD---- C:\Program Files\Uninstall Information
2011-09-13 18:32:17 ----D---- C:\Program Files\Microsoft Silverlight
2011-09-13 11:39:59 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
2011-09-13 11:39:59 ----A---- C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2011-09-13 11:39:58 ----D---- C:\Program Files\Symantec
2011-09-13 11:39:58 ----D---- C:\Program Files\Common Files\Symantec Shared
2011-09-13 11:38:09 ----D---- C:\WINDOWS\system32\drivers\NAV
2011-09-13 11:38:07 ----D---- C:\Program Files\Norton AntiVirus
2011-09-13 11:37:43 ----D---- C:\Program Files\NortonInstaller
2011-09-10 18:01:16 ----D---- C:\Program Files\Square Enix
2011-09-08 20:07:12 ----D---- C:\Program Files\Windows Sidebar
2011-09-08 20:04:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\PCSettings
2011-09-07 12:48:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2607712$
2011-09-06 08:38:23 ----D---- C:\Documents and Settings\dom\Data aplikací\NVIDIA
2011-09-04 09:18:49 ----D---- C:\Program Files\WinampControlBand
2011-09-02 10:31:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\IObit
2011-09-02 10:31:04 ----D---- C:\Program Files\IObit
2011-08-31 20:34:26 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2011-08-31 20:34:26 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2011-08-31 20:34:26 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2011-08-31 20:34:26 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2011-08-31 20:34:25 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2011-08-31 20:34:25 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2011-08-31 20:34:25 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2011-08-31 20:34:25 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2011-08-31 20:34:24 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2011-08-31 20:34:24 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2011-08-31 20:34:24 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2011-08-31 20:34:24 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2011-08-31 20:34:23 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2011-08-31 20:34:23 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2011-08-31 20:34:22 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2011-08-31 20:34:22 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2011-08-31 20:34:22 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2011-08-31 20:34:22 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2011-08-31 20:34:21 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2011-08-31 20:34:21 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2011-08-31 20:34:21 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2011-08-31 20:34:21 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2011-08-31 20:34:20 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2011-08-31 20:34:20 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2011-08-31 20:34:20 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2011-08-31 20:34:20 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2011-08-31 20:34:20 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2011-08-31 20:34:20 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2011-08-31 20:34:19 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2011-08-31 20:34:19 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2011-08-31 20:34:19 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2011-08-31 20:34:18 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2011-08-31 20:34:18 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2011-08-31 20:34:18 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2011-08-31 20:34:18 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2011-08-31 20:34:18 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2011-08-31 20:34:17 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2011-08-31 20:34:17 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2011-08-31 20:34:17 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2011-08-31 20:34:17 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2011-08-31 20:34:17 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2011-08-31 20:34:16 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2011-08-31 20:34:16 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2011-08-31 20:34:16 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2011-08-31 20:34:16 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2011-08-31 20:34:15 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2011-08-31 20:34:15 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2011-08-31 20:34:15 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2011-08-31 20:34:15 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2011-08-31 20:34:14 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2011-08-31 20:34:14 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2011-08-31 20:34:14 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2011-08-31 20:34:14 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2011-08-31 20:34:13 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2011-08-31 20:34:13 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2011-08-31 20:34:13 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2011-08-31 20:34:12 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2011-08-31 20:34:12 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2011-08-31 20:34:12 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2011-08-31 20:34:12 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2011-08-31 20:34:11 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2011-08-31 20:34:11 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2011-08-31 20:34:11 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2011-08-31 20:34:11 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2011-08-31 20:34:11 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2011-08-31 20:34:10 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2011-08-31 20:34:08 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2011-08-31 20:34:07 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2011-08-31 20:34:07 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2011-08-31 20:34:06 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2011-08-31 20:34:05 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2011-08-31 20:34:05 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2011-08-31 20:34:04 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2011-08-31 20:34:04 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2011-08-31 20:34:04 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2011-08-31 20:34:03 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2011-08-31 20:33:34 ----D---- C:\WINDOWS\Logs
2011-08-31 20:14:30 ----D---- C:\Program Files\2K Games
2011-08-31 18:18:10 ----D---- C:\Program Files\uTorrent
2011-08-31 18:17:17 ----D---- C:\Documents and Settings\dom\Data aplikací\uTorrent
2011-08-31 11:11:01 ----D---- C:\Program Files\Driver Magician
2011-08-31 11:11:01 ----A---- C:\WINDOWS\system32\XCEEDZIP.DLL
2011-08-31 11:11:01 ----A---- C:\WINDOWS\system32\XceedCry.dll
2011-08-29 12:21:41 ----A---- C:\WINDOWS\cdplayer.ini
2011-08-29 12:15:17 ----A---- C:\WINDOWS\system32\pncrt.dll
2011-08-29 12:07:56 ----D---- C:\Documents and Settings\dom\Data aplikací\DAEMON Tools Lite
2011-08-27 16:02:50 ----D---- C:\Program Files\Yamicsoft
2011-08-27 15:26:50 ----D---- C:\Documents and Settings\dom\Data aplikací\Tific
2011-08-26 12:11:51 ----D---- C:\Program Files\Seagate
2011-08-24 20:10:47 ----A---- C:\WINDOWS\system32\drivers\AliRtHub.sys
2011-08-24 20:10:47 ----A---- C:\WINDOWS\system32\drivers\AliHub.sys
2011-08-24 20:10:47 ----A---- C:\WINDOWS\system32\drivers\AliGP.sys
2011-08-24 20:10:47 ----A---- C:\WINDOWS\system32\drivers\AliEhci.sys
2011-08-24 20:07:42 ----A---- C:\WINDOWS\system32\drivers\point32.sys
2011-08-24 20:03:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\SonicFocus
2011-08-24 20:02:59 ----A---- C:\WINDOWS\system32\SmaxCo.dll
2011-08-24 20:02:59 ----A---- C:\WINDOWS\system32\SFFXSAPO.dll
2011-08-24 20:02:59 ----A---- C:\WINDOWS\system32\SFFXProc.dll
2011-08-24 20:02:59 ----A---- C:\WINDOWS\system32\SFFXMAPO.dll
2011-08-24 20:02:59 ----A---- C:\WINDOWS\system32\SFFXHAPO.dll
2011-08-24 20:02:59 ----A---- C:\WINDOWS\system32\SFFXDAPO.dll
2011-08-24 20:02:59 ----A---- C:\WINDOWS\system32\SFFXCPStr.dll
2011-08-24 20:02:59 ----A---- C:\WINDOWS\system32\SFFXCPBL.dll
2011-08-24 20:02:59 ----A---- C:\WINDOWS\system32\SFFXComm.dll
2011-08-24 20:02:59 ----A---- C:\WINDOWS\system32\AEADISRV.EXE
2011-08-24 20:02:59 ----A---- C:\WINDOWS\system32\AEADIExt.dll
2011-08-24 20:02:59 ----A---- C:\WINDOWS\system32\AEADIAPR.dll
2011-08-24 20:02:59 ----A---- C:\WINDOWS\system32\AEADIAPO.dll
2011-08-24 20:01:41 ----A---- C:\WINDOWS\system32\nvumpu.exe
2011-08-24 20:01:41 ----A---- C:\WINDOWS\system32\drivers\nvmpu401.sys
2011-08-24 19:59:17 ----A---- C:\WINDOWS\system32\drivers\Amps2prt.sys
2011-08-23 20:21:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2570791$
2011-08-20 21:48:40 ----A---- C:\WINDOWS\system32\nvgenco32.dll
2011-08-20 21:48:40 ----A---- C:\WINDOWS\system32\nvdispco32.dll
2011-08-15 18:56:06 ----D---- C:\Documents and Settings\dom\Data aplikací\Kristanix Software

======List of files/folders modified in the last 1 month======

2011-09-13 21:18:12 ----D---- C:\WINDOWS\Prefetch
2011-09-13 21:18:06 ----RD---- C:\Program Files
2011-09-13 21:18:00 ----D---- C:\WINDOWS\Temp
2011-09-13 21:12:19 ----D---- C:\WINDOWS\AppPatch
2011-09-13 21:11:11 ----D---- C:\WINDOWS\system32\CatRoot2
2011-09-13 21:11:11 ----D---- C:\WINDOWS\system32\CatRoot
2011-09-13 21:10:32 ----D---- C:\WINDOWS
2011-09-13 21:00:40 ----D---- C:\WINDOWS\system32
2011-09-13 20:52:46 ----SHD---- C:\System Volume Information
2011-09-13 20:51:21 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-09-13 20:51:21 ----HD---- C:\WINDOWS\inf
2011-09-13 20:51:21 ----D---- C:\WINDOWS\system32\cs-cz
2011-09-13 20:51:21 ----D---- C:\WINDOWS\Help
2011-09-13 20:51:21 ----D---- C:\Program Files\Internet Explorer
2011-09-13 20:50:45 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-09-13 20:50:24 ----D---- C:\WINDOWS\ie8updates
2011-09-13 20:49:22 ----D---- C:\WINDOWS\WBEM
2011-09-13 20:49:18 ----D---- C:\WINDOWS\Media
2011-09-13 20:45:20 ----D---- C:\WINDOWS\Debug
2011-09-13 20:37:50 ----SD---- C:\WINDOWS\Tasks
2011-09-13 20:30:54 ----SHD---- C:\WINDOWS\Installer
2011-09-13 20:30:54 ----SHD---- C:\Config.Msi
2011-09-13 19:21:31 ----A---- C:\WINDOWS\wincmd.ini
2011-09-13 18:56:35 ----D---- C:\WINDOWS\system32\DirectX
2011-09-13 18:56:16 ----RSD---- C:\WINDOWS\assembly
2011-09-13 18:32:24 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-09-13 18:08:45 ----A---- C:\WINDOWS\system32\sun_debug.txt
2011-09-13 18:08:44 ----A---- C:\WINDOWS\system32\sun_debug1.txt
2011-09-13 17:58:38 ----D---- C:\Downloads
2011-09-13 17:49:31 ----D---- C:\Program Files\Opera
2011-09-13 11:39:59 ----D---- C:\WINDOWS\system32\drivers
2011-09-13 11:39:58 ----D---- C:\Program Files\Common Files
2011-09-13 11:38:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2011-09-13 11:37:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller
2011-09-10 17:37:17 ----AD---- C:\FRD_0.85u1-final
2011-09-10 14:18:23 ----D---- C:\Documents and Settings\dom\Data aplikací\Skype
2011-09-07 17:29:03 ----D---- C:\WINDOWS\system32\Restore
2011-09-07 13:40:15 ----D---- C:\Program Files\COMODO
2011-09-07 12:35:46 ----HD---- C:\WINDOWS\$hf_mig$
2011-09-06 13:58:26 ----A---- C:\WINDOWS\system32\MRT.exe
2011-09-05 21:23:23 ----D---- C:\WINDOWS\Cursors
2011-09-04 11:31:50 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-09-03 12:17:22 ----A---- C:\WINDOWS\system32\crypt32.dll
2011-08-31 20:33:59 ----D---- C:\WINDOWS\Microsoft.NET
2011-08-31 11:16:25 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-08-31 11:16:20 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-08-30 08:59:22 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2011-08-30 08:59:17 ----D---- C:\Program Files\SpywareBlaster
2011-08-29 14:27:13 ----D---- C:\Program Files\KONAMI
2011-08-27 20:02:19 ----D---- C:\Program Files\CCleaner
2011-08-27 16:26:22 ----RD---- C:\WINDOWS\Web
2011-08-27 16:22:02 ----A---- C:\WINDOWS\ODBCINST.INI
2011-08-27 16:15:51 ----D---- C:\WINDOWS\system32\ias
2011-08-27 16:15:27 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2011-08-27 16:07:06 ----D---- C:\WINDOWS\system32\NtmsData
2011-08-27 16:02:53 ----SD---- C:\Documents and Settings\dom\Data aplikací\Microsoft
2011-08-27 15:24:43 ----D---- C:\Documents and Settings\dom\Data aplikací\Mozilla
2011-08-27 14:34:56 ----D---- C:\WINDOWS\system32\LogFiles
2011-08-26 12:12:06 ----D---- C:\Program Files\Common Files\Seagate
2011-08-25 21:15:17 ----D---- C:\Program Files\NVIDIA Corporation
2011-08-25 19:58:40 ----D---- C:\Documents and Settings\dom\Data aplikací\Zoner
2011-08-25 19:58:39 ----D---- C:\Documents and Settings\dom\Data aplikací\Nokia
2011-08-24 20:29:10 ----D---- C:\WINDOWS\Minidump
2011-08-24 20:03:14 ----D---- C:\WINDOWS\security
2011-08-23 08:31:56 ----D---- C:\WINDOWS\system32\drivers\etc
2011-08-21 20:34:23 ----D---- C:\Program Files\SUPERAntiSpyware

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 05732855;05732855; C:\WINDOWS\system32\DRIVERS\05732855.sys [2011-07-21 133208]
R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2011-07-07 97504]
R0 m5288;m5288; C:\WINDOWS\system32\DRIVERS\m5288.sys [2005-12-23 210304]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\System32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 oodrvled;oodrvled; C:\WINDOWS\system32\DRIVERS\oodrvled.sys [2011-03-02 25680]
R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2011-08-26 132224]
R0 SymDS;Symantec Data Store; C:\WINDOWS\system32\drivers\NAV\1301000.01C\SYMDS.SYS [2011-07-25 340088]
R0 SymEFA;Symantec Extended File Attributes; C:\WINDOWS\system32\drivers\NAV\1301000.01C\SYMEFA.SYS [2011-07-28 897656]
R0 tdrpman;Acronis Try&Decide and Restore Points filter; C:\WINDOWS\system32\DRIVERS\tdrpman.sys [2011-08-26 368480]
R0 timounter;Seagate DiscWizard Image Backup Archive Explorer; C:\WINDOWS\system32\DRIVERS\timntr.sys [2011-08-26 441760]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [2005-03-09 42496]
R1 AntiLog32;AntiLog32; \??\C:\Program Files\AntiLogger\AntiLog32.sys []
R1 BHDrvx86;BHDrvx86; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\BASHDefs\20110901.001\BHDrvx86.sys []
R1 ccSet_NAV;Norton AntiVirus Settings Manager; C:\WINDOWS\system32\drivers\NAV\1301000.01C\ccSetx86.sys [2011-08-08 132744]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2011-07-07 242600]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2011-07-07 29400]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-08-03 232512]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys []
R1 EIO;EIO; \??\C:\WINDOWS\system32\drivers\EIO.sys []
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R1 SRTSPX;Symantec Real Time Storage Protection (PEL); C:\WINDOWS\system32\drivers\NAV\1301000.01C\SRTSPX.SYS [2011-08-02 31864]
R1 SymIRON;Symantec Iron Driver; C:\WINDOWS\system32\drivers\NAV\1301000.01C\Ironx86.SYS [2011-07-25 149624]
R1 SYMTDI;Symantec Network Dispatch Driver; C:\WINDOWS\system32\drivers\NAV\1301000.01C\SYMTDI.SYS [2011-07-25 387192]
R2 ALIEHCD;ULi PCI to USB Enhanced Host Controller; C:\WINDOWS\System32\Drivers\ALIEHCI.sys [2011-08-24 84471]
R2 tifsfilter;Seagate DiscWizard FS Filter; C:\WINDOWS\system32\DRIVERS\tifsfilt.sys [2011-08-26 44384]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2011-08-24 380416]
R3 aliroothub;USB 2.0 Root Hub; C:\WINDOWS\system32\DRIVERS\AliRtHub.sys [2011-08-24 5304]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\System32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IDSxpx86;IDSxpx86; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\IPSDefs\20110912.030\IDSxpx86.sys []
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\System32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NAVENG;NAVENG; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\VirusDefs\20110912.033\NAVENG.SYS []
R3 NAVEX15;NAVEX15; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\VirusDefs\20110912.033\NAVEX15.SYS []
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2011-08-03 12542592]
R3 nvmpu401;Service for NVIDIA(R) nForce(TM) MIDI UART; C:\WINDOWS\system32\drivers\nvmpu401.sys [2011-08-24 10240]
R3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\system32\DRIVERS\point32.sys [2011-08-24 27792]
R3 SRTSP;Symantec Real Time Storage Protection; C:\WINDOWS\system32\drivers\NAV\1301000.01C\SRTSP.SYS [2011-08-02 566904]
R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
R3 tap0901;TAP-Win32 Adapter V9; C:\WINDOWS\system32\DRIVERS\tap0901.sys [2011-05-30 31368]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\WINDOWS\system32\DRIVERS\vcsvad.sys [2008-12-26 17792]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\System32\DRIVERS\yk51x86.sys [2011-05-26 298016]
S1 ccHP;Symantec Hash Provider; \??\C:\WINDOWS\system32\drivers\NAV\1000000.07D\ccHPx86.sys []
S3 Amps2prt;A4Tech PS/2 Port Mouse Driver; C:\WINDOWS\system32\DRIVERS\Amps2prt.sys [2011-08-24 14336]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-14 60800]
S3 asusgsb;ASUS Virtual Video Capture Device Driver; C:\WINDOWS\system32\drivers\asusgsb.sys [2007-07-12 12416]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\HdAudio.sys [2004-10-27 145920]
S3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-14 61824]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-05-18 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-05-18 23168]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\WINDOWS\system32\drivers\nmwcdnsu.sys [2011-05-18 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\WINDOWS\system32\drivers\nmwcdnsuc.sys [2011-05-18 8576]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2011-08-24 50688]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
S3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2005-08-11 393088]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\System32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\System32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-05-18 8192]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-05-18 8192]
S3 Video3D;ASUS Video3D Service; C:\WINDOWS\System32\Drivers\Video3D32.sys []
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]
S4 IObitUnlocker;IObitUnlocker; \??\C:\Program Files\IObit\IObit Unlocker\IObitUnlocker.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [2011-08-21 116608]
R2 AEADIFilters;Andrea ADI Filters Service; C:\WINDOWS\system32\AEADISRV.EXE [2011-08-24 90112]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-07-07 1793712]
R2 NAV;Norton AntiVirus; C:\Program Files\Norton AntiVirus\Engine\19.1.0.28\ccSvcHst.exe [2011-08-10 138760]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2011-08-03 146024]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-08-03 2255464]
R2 SgtSch2Svc;Seagate Scheduler2 Service; C:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe [2009-11-02 431456]
R2 USBSafelyRemoveService;USB Safely Remove Assistant; C:\Program Files\USB Safely Remove\USBSRService.exe [2011-08-04 257880]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 CGVPNCliSrvc;CyberGhost VPN Client; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2011-07-05 2428968]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Zdravím!
Poprosím o log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

Dobrý večer

ComboFix 11-09-13.03 - dom 13.09.2011 22:45:32.2.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2047.1153 [GMT 2:00]
Spuštěný z: c:\documents and settings\dom\Plocha\ComboFix.exe
AV: Norton AntiVirus *Disabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: COMODO Firewall *Enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\messenger\msmsgsin.exe
c:\windows\ehome\medctrro.exe
c:\windows\msmqinst.log
c:\windows\system32\mfc100deu.dll
c:\windows\system32\nvdispco3220140.dll
c:\windows\system32\nvdispco3220150.dll
c:\windows\system32\TZLog.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-13 do 2011-09-13 )))))))))))))))))))))))))))))))
.
.
2011-09-13 20:42 . 2011-09-13 20:42 -------- d--h--w- c:\documents and settings\dom\Okolní tiskárny
2011-09-13 19:18 . 2011-09-13 19:18 -------- d-----w- c:\program files\trend micro
2011-09-13 19:18 . 2011-09-13 19:18 -------- d-----w- C:\rsit
2011-09-13 18:49 . 2011-09-13 18:49 -------- dc-h--w- c:\windows\ie8
2011-09-13 16:32 . 2011-09-13 16:32 -------- d-----w- c:\program files\Microsoft Silverlight
2011-09-13 09:39 . 2011-09-13 09:39 60872 ----a-w- c:\windows\system32\S32EVNT1.DLL
2011-09-13 09:39 . 2011-09-13 09:39 127096 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2011-09-13 09:39 . 2011-09-13 09:43 -------- d-----w- c:\program files\Common Files\Symantec Shared
2011-09-13 09:39 . 2011-09-13 09:39 -------- d-----w- c:\program files\Symantec
2011-09-13 09:38 . 2011-09-13 09:38 -------- d-----w- c:\windows\system32\drivers\NAV
2011-09-13 09:38 . 2011-09-13 09:38 -------- d-----w- c:\program files\Norton AntiVirus
2011-09-13 09:37 . 2011-09-13 09:37 -------- d-----w- c:\program files\NortonInstaller
2011-09-10 16:28 . 2011-09-10 16:45 -------- d-----w- c:\documents and settings\dom\Local Settings\Data aplikací\dxhr
2011-09-10 16:28 . 2011-09-10 16:28 -------- d-----w- c:\documents and settings\dom\Local Settings\Data aplikací\28050
2011-09-10 16:01 . 2011-09-10 16:01 -------- d-----w- c:\program files\Square Enix
2011-09-08 18:07 . 2011-09-08 18:07 -------- d-----w- c:\program files\Windows Sidebar
2011-09-08 18:04 . 2011-09-08 18:04 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PCSettings
2011-09-06 06:38 . 2011-09-06 06:38 -------- d-----w- c:\documents and settings\dom\Data aplikací\NVIDIA
2011-09-04 07:18 . 2011-09-04 07:20 -------- d-----w- c:\program files\WinampControlBand
2011-09-02 08:31 . 2011-09-02 08:31 -------- d-----w- c:\documents and settings\All Users\Data aplikací\IObit
2011-09-02 08:31 . 2011-09-02 08:31 -------- d-----w- c:\program files\IObit
2011-08-31 18:33 . 2011-09-13 17:08 -------- d-----w- c:\windows\Logs
2011-08-31 18:24 . 2011-08-31 18:24 -------- d-----w- c:\documents and settings\dom\Local Settings\Data aplikací\2K Games
2011-08-31 18:14 . 2011-08-31 18:14 -------- d-----w- c:\program files\2K Games
2011-08-31 16:18 . 2011-08-31 16:18 -------- d-----w- c:\program files\uTorrent
2011-08-31 16:17 . 2011-09-13 17:08 -------- d-----w- c:\documents and settings\dom\Data aplikací\uTorrent
2011-08-31 16:17 . 2011-08-31 16:17 -------- d-----w- c:\documents and settings\dom\Local Settings\Data aplikací\uTorrent
2011-08-31 09:11 . 2011-09-10 19:05 -------- d-----w- c:\program files\Driver Magician
2011-08-31 09:11 . 2011-02-08 12:58 1882104 ----a-w- c:\windows\system32\Codejock.Controls.v15.0.1.ocx
2011-08-31 09:11 . 2005-01-12 09:19 456536 ----a-w- c:\windows\system32\XCEEDZIP.DLL
2011-08-31 09:11 . 2004-09-28 09:13 526184 ----a-w- c:\windows\system32\XceedCry.dll
2011-08-31 09:11 . 2004-08-11 13:55 110602 ----a-w- c:\windows\system32\xcdsfx32.bin
2011-08-31 09:11 . 2004-03-08 22:00 152848 ----a-w- c:\windows\system32\Comdlg32.ocx
2011-08-31 09:11 . 2004-03-08 22:00 132880 ----a-w- c:\windows\system32\Msinet.ocx
2011-08-29 10:07 . 2011-09-13 08:32 -------- d-----w- c:\documents and settings\dom\Data aplikací\DAEMON Tools Lite
2011-08-27 14:02 . 2011-08-27 14:02 -------- d-----w- c:\program files\Yamicsoft
2011-08-27 13:26 . 2011-08-27 13:26 -------- d-----w- c:\documents and settings\dom\Data aplikací\Tific
2011-08-27 12:46 . 2011-08-27 12:47 86359578 ----a-w- c:\documents and settings\dom\TRACE_BOOT+DRIVERS_1_1.BIN
2011-08-27 12:26 . 2011-08-27 12:26 -------- d--h--w- c:\documents and settings\dom\Okolní síť
2011-08-27 12:18 . 2011-08-27 12:18 -------- d-----w- c:\documents and settings\dom\Local Settings\Data aplikací\GHISLER
2011-08-26 10:11 . 2011-08-26 10:11 -------- d-----w- c:\program files\Seagate
2011-08-25 18:47 . 2011-08-25 18:47 -------- d-----w- c:\documents and settings\dom\Local Settings\Data aplikací\Mozilla
2011-08-25 18:24 . 2011-08-25 18:24 -------- d-----w- c:\documents and settings\dom\Local Settings\Data aplikací\Sun
2011-08-25 17:40 . 2011-08-25 17:40 22 --sha-w- c:\documents and settings\dom\Data aplikací\Sys2662.Config.Repository.bin
2011-08-24 18:10 . 2011-08-24 18:10 9658 ----a-w- c:\windows\system32\drivers\AliGP.sys
2011-08-24 18:10 . 2011-08-24 18:10 84471 ----a-w- c:\windows\system32\drivers\AliEhci.sys
2011-08-24 18:10 . 2011-08-24 18:10 5304 ----a-w- c:\windows\system32\drivers\AliRtHub.sys
2011-08-24 18:10 . 2011-08-24 18:10 32118 ----a-w- c:\windows\system32\drivers\AliHub.sys
2011-08-24 18:07 . 2011-08-24 18:07 27792 ----a-w- c:\windows\system32\drivers\point32.sys
2011-08-24 18:03 . 2011-08-24 18:03 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SonicFocus
2011-08-24 18:01 . 2011-08-24 18:01 114688 ----a-w- c:\windows\system32\nvumpu.exe
2011-08-24 18:01 . 2011-08-24 18:01 10240 ----a-w- c:\windows\system32\drivers\nvmpu401.sys
2011-08-24 17:59 . 2011-08-24 17:59 14336 ----a-w- c:\windows\system32\drivers\Amps2prt.sys
2011-08-24 17:53 . 2011-08-24 17:53 -------- d-----w- c:\documents and settings\All Users\Uniblue
2011-08-20 19:48 . 2011-08-03 11:49 914024 ----a-w- c:\windows\system32\nvdispco32.dll
2011-08-20 19:48 . 2011-08-03 11:49 875112 ----a-w- c:\windows\system32\nvgenco32.dll
2011-08-15 16:56 . 2011-08-15 16:56 -------- d-----w- c:\documents and settings\dom\Data aplikací\Kristanix Software
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-03 10:17 . 2002-09-23 12:00 602112 ----a-w- c:\windows\system32\crypt32.dll
2011-08-26 10:12 . 2011-06-06 20:58 44384 ----a-w- c:\windows\system32\drivers\tifsfilt.sys
2011-08-26 10:12 . 2011-06-06 20:58 441760 ----a-w- c:\windows\system32\drivers\timntr.sys
2011-08-26 10:12 . 2011-06-06 20:57 132224 ----a-w- c:\windows\system32\drivers\snapman.sys
2011-08-26 10:12 . 2011-06-06 20:57 368480 ----a-w- c:\windows\system32\drivers\tdrpman.sys
2011-08-24 18:03 . 2011-05-07 18:03 50688 ----a-w- c:\windows\system32\drivers\Rtnicxp.sys
2011-08-24 18:02 . 2011-04-30 07:48 380416 ----a-w- c:\windows\system32\drivers\ADIHdAud.sys
2011-08-23 18:18 . 2011-05-18 17:03 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-08-03 13:24 . 2011-08-03 13:24 232512 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-08-03 13:16 . 2011-05-07 18:22 128000 ----a-w- c:\windows\system32\javacpl.cpl
2011-08-03 13:16 . 2011-05-07 18:22 544656 ----a-w- c:\windows\system32\deployJava1.dll
2011-08-03 11:49 . 2011-04-07 20:16 600680 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll
2011-08-03 11:49 . 2011-04-07 20:16 54272 ----a-w- c:\windows\system32\nvwddi.dll
2011-08-03 11:49 . 2011-04-07 20:16 13892200 ----a-w- c:\windows\system32\nvcpl.dll
2011-08-03 11:49 . 2011-04-07 20:16 111208 ----a-w- c:\windows\system32\nvmctray.dll
2011-08-03 11:49 . 2011-04-07 20:16 146024 ----a-w- c:\windows\system32\nvsvc32.exe
2011-08-03 11:49 . 2011-04-07 20:16 145000 ----a-w- c:\windows\system32\nvcolor.exe
2011-08-03 11:49 . 2011-02-23 06:27 61440 ----a-w- c:\windows\system32\OpenCL.dll
2011-08-03 11:49 . 2011-02-23 06:27 5427200 ----a-w- c:\windows\system32\nvcuda.dll
2011-08-03 11:49 . 2011-02-23 06:27 2387560 ----a-w- c:\windows\system32\nvcuvid.dll
2011-08-03 11:49 . 2011-02-23 06:27 2090088 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-08-03 11:49 . 2011-02-23 06:27 17186816 ----a-w- c:\windows\system32\nvcompiler.dll
2011-08-03 11:49 . 2007-06-28 16:43 4210816 ----a-w- c:\windows\system32\nv4_disp.dll
2011-08-03 11:49 . 2007-06-28 16:43 2404864 ----a-w- c:\windows\system32\nvapi.dll
2011-08-03 11:49 . 2007-06-28 16:43 16191488 ----a-w- c:\windows\system32\nvoglnt.dll
2011-08-03 11:49 . 2007-06-28 16:43 12542592 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2011-07-21 19:18 . 2011-07-21 18:49 133208 ----a-w- c:\windows\system32\drivers\05732855.sys
2011-07-15 13:29 . 2002-09-23 12:00 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2002-09-23 12:00 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
2011-07-07 06:18 . 2010-12-28 23:42 285256 ----a-w- c:\windows\system32\guard32.dll
2011-07-07 06:18 . 2011-01-06 15:37 97504 ----a-w- c:\windows\system32\drivers\inspect.sys
2011-07-07 06:18 . 2011-01-06 15:37 29400 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2011-07-07 06:18 . 2011-01-06 15:37 17416 ----a-w- c:\windows\system32\drivers\cmderd.sys
2011-07-07 06:18 . 2011-01-06 15:37 242600 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2011-06-24 14:10 . 2011-04-30 07:16 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-06-23 18:31 . 2002-09-23 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2011-06-23 18:31 . 2002-09-23 12:00 43520 ------w- c:\windows\system32\licmgr10.dll
2011-06-23 18:31 . 2002-09-23 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-06-23 12:05 . 2011-04-30 08:05 385024 ------w- c:\windows\system32\html.iec
2011-06-20 17:44 . 2002-09-23 12:00 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-06-18 07:53 . 2011-06-09 09:18 16968 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-07-07 2554696]
"AntiLogger"="c:\program files\AntiLogger\AntiLogger.exe" [2011-07-02 2856392]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-08-03 13892200]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2011-05-04 17:54 551296 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\guard32.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\"C:
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\"C:\WINDOWS
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\"c:\windows\system32
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\"c:\windows\system32\cmd.exe"]
rmdir [X]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverScanner
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
2009-11-02 16:57 906288 ----a-w- c:\program files\Seagate\DiscWizard\TimounterMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-14 06:52 15360 ----a-w- c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2011-08-02 07:33 4910912 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DiscWizardMonitor.exe]
2009-11-02 16:49 1346000 ----a-w- c:\program files\Seagate\DiscWizard\DiscWizardMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2011-08-03 11:49 13892200 ----a-w- c:\windows\system32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2011-08-03 11:49 111208 ----a-w- c:\windows\system32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
2011-07-05 08:08 1632360 ----a-w- c:\program files\NVIDIA Corporation\nView\nwiz.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Seagate Scheduler2 Service]
2009-11-02 16:52 136544 ----a-w- c:\program files\Common Files\Seagate\Schedule2\schedhlp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP]
2011-08-24 18:02 1310720 ----a-w- c:\program files\Analog Devices\Core\smax4pnp.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2011\\pes2011.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
.
R0 05732855;05732855;c:\windows\system32\drivers\05732855.sys [21.7.2011 20:49 133208]
R0 m5288;m5288;c:\windows\system32\drivers\m5288.sys [8.5.2011 7:32 210304]
R0 oodrvled;oodrvled;c:\windows\system32\drivers\OODrvled.sys [2.3.2011 16:48 25680]
R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NAV\1301000.01C\SymDS.sys [13.9.2011 11:38 340088]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NAV\1301000.01C\SymEFA.sys [13.9.2011 11:38 897656]
R1 AntiLog32;AntiLog32;c:\program files\AntiLogger\AntiLog32.sys [2.7.2011 9:00 121560]
R1 BHDrvx86;BHDrvx86;c:\documents and settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\BASHDefs\20110901.001\BHDrvx86.sys [2.9.2011 2:04 815736]
R1 ccSet_NAV;Norton AntiVirus Settings Manager;c:\windows\system32\drivers\NAV\1301000.01C\ccSetx86.sys [13.9.2011 11:38 132744]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [6.1.2011 17:37 242600]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [6.1.2011 17:37 29400]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [3.8.2011 15:24 232512]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [22.7.2011 18:27 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [12.7.2011 23:55 67664]
R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NAV\1301000.01C\Ironx86.sys [13.9.2011 11:38 149624]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [19.7.2011 2:02 116608]
R2 ALIEHCD;ULi PCI to USB Enhanced Host Controller;c:\windows\system32\drivers\AliEhci.sys [24.8.2011 20:10 84471]
R2 NAV;Norton AntiVirus;c:\program files\Norton AntiVirus\Engine\19.1.0.28\ccSvcHst.exe [13.9.2011 11:38 138760]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [5.5.2011 21:08 2255464]
R2 SgtSch2Svc;Seagate Scheduler2 Service;c:\program files\Common Files\Seagate\Schedule2\schedul2.exe [2.11.2009 18:52 431456]
R2 USBSafelyRemoveService;USB Safely Remove Assistant;c:\program files\USB Safely Remove\USBSRService.exe [12.8.2011 19:40 257880]
R3 aliroothub;USB 2.0 Root Hub;c:\windows\system32\drivers\AliRtHub.sys [24.8.2011 20:10 5304]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [13.9.2011 11:43 105592]
R3 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\IPSDefs\20110912.030\IDSXpx86.sys [12.9.2011 6:25 356280]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM);c:\windows\system32\drivers\vcsvad.sys [4.6.2011 11:49 17792]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 Amps2prt;A4Tech PS/2 Port Mouse Driver;c:\windows\system32\drivers\Amps2prt.sys [24.8.2011 19:59 14336]
S3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\CyberGhost VPN\CGVPNCliService.exe [27.7.2011 21:17 2428968]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [31.7.2011 10:27 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [31.7.2011 10:27 8576]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
S4 IObitUnlocker;IObitUnlocker;c:\program files\IObit\IObit Unlocker\IObitUnlocker.sys [2.9.2011 10:31 27552]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
TCP: DhcpNameServer = 192.168.4.20
DPF: DirectAnimation Java Classes
DPF: Microsoft XML Parser for Java
FF - ProfilePath - c:\documents and settings\dom\Data aplikací\Mozilla\Firefox\Profiles\57lkyadx.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
SafeBoot-WudfPf
SafeBoot-WudfRd
SafeBoot-SolutoService
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-13 22:54
Windows 5.1.2600 Service Pack 3 NTFS
.
detected NTDLL code modification:
ZwClose
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\NAV]
"ImagePath"="\"c:\program files\Norton AntiVirus\Engine\19.1.0.28\ccSvcHst.exe\" /s \"NAV\" /m \"c:\program files\Norton AntiVirus\Engine\19.1.0.28\diMaster.dll\" /prefetch:1"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
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
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1500)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
- - - - - - - > 'lsass.exe'(1620)
c:\windows\system32\MPR.dll
c:\windows\system32\guard32.dll
.
- - - - - - - > 'explorer.exe'(3752)
c:\windows\system32\guard32.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\AEADISRV.EXE
c:\windows\system32\nvsvc32.exe
.
**************************************************************************
.
Celkový čas: 2011-09-13 22:57:48 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-09-13 20:57
.
Před spuštěním: Volných bajtů: 15 359 053 824
Po spuštění: Volných bajtů: 15 260 422 144
.
- - End Of File - - 42328FAB9B442269A86F50661C42C262

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

Collect::
c:\windows\system32\drivers\05732855.sys

Driver::
05732855

Uložte na plochu jako CFScript.txt. pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

ComboFix 11-09-13.03 - dom 13.09.2011 23:25:47.3.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2047.1428 [GMT 2:00]
Spuštěný z: c:\documents and settings\dom\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\dom\Plocha\CFScript.txt..txt
AV: Norton AntiVirus *Disabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: COMODO Firewall *Enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}
* Vytvořen nový Bod Obnovení
.
file zipped: c:\windows\system32\drivers\05732855.sys
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\drivers\05732855.sys
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_05732855
-------\Service_05732855
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-13 do 2011-09-13 )))))))))))))))))))))))))))))))
.
.
2011-09-13 20:42 . 2011-09-13 20:42 -------- d--h--w- c:\documents and settings\dom\Okolní tiskárny
2011-09-13 19:18 . 2011-09-13 19:18 -------- d-----w- c:\program files\trend micro
2011-09-13 19:18 . 2011-09-13 19:18 -------- d-----w- C:\rsit
2011-09-13 18:49 . 2011-09-13 18:49 -------- dc-h--w- c:\windows\ie8
2011-09-13 16:32 . 2011-09-13 16:32 -------- d-----w- c:\program files\Microsoft Silverlight
2011-09-13 09:39 . 2011-09-13 09:39 60872 ----a-w- c:\windows\system32\S32EVNT1.DLL
2011-09-13 09:39 . 2011-09-13 09:39 127096 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2011-09-13 09:39 . 2011-09-13 09:43 -------- d-----w- c:\program files\Common Files\Symantec Shared
2011-09-13 09:39 . 2011-09-13 09:39 -------- d-----w- c:\program files\Symantec
2011-09-13 09:38 . 2011-09-13 09:38 -------- d-----w- c:\windows\system32\drivers\NAV
2011-09-13 09:38 . 2011-09-13 09:38 -------- d-----w- c:\program files\Norton AntiVirus
2011-09-13 09:37 . 2011-09-13 09:37 -------- d-----w- c:\program files\NortonInstaller
2011-09-10 16:28 . 2011-09-10 16:45 -------- d-----w- c:\documents and settings\dom\Local Settings\Data aplikací\dxhr
2011-09-10 16:28 . 2011-09-10 16:28 -------- d-----w- c:\documents and settings\dom\Local Settings\Data aplikací\28050
2011-09-10 16:01 . 2011-09-10 16:01 -------- d-----w- c:\program files\Square Enix
2011-09-08 18:07 . 2011-09-08 18:07 -------- d-----w- c:\program files\Windows Sidebar
2011-09-08 18:04 . 2011-09-08 18:04 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PCSettings
2011-09-06 06:38 . 2011-09-06 06:38 -------- d-----w- c:\documents and settings\dom\Data aplikací\NVIDIA
2011-09-04 07:18 . 2011-09-04 07:20 -------- d-----w- c:\program files\WinampControlBand
2011-09-02 08:31 . 2011-09-02 08:31 -------- d-----w- c:\documents and settings\All Users\Data aplikací\IObit
2011-09-02 08:31 . 2011-09-02 08:31 -------- d-----w- c:\program files\IObit
2011-08-31 18:33 . 2011-09-13 17:08 -------- d-----w- c:\windows\Logs
2011-08-31 18:24 . 2011-08-31 18:24 -------- d-----w- c:\documents and settings\dom\Local Settings\Data aplikací\2K Games
2011-08-31 18:14 . 2011-08-31 18:14 -------- d-----w- c:\program files\2K Games
2011-08-31 16:18 . 2011-08-31 16:18 -------- d-----w- c:\program files\uTorrent
2011-08-31 16:17 . 2011-09-13 17:08 -------- d-----w- c:\documents and settings\dom\Data aplikací\uTorrent
2011-08-31 16:17 . 2011-08-31 16:17 -------- d-----w- c:\documents and settings\dom\Local Settings\Data aplikací\uTorrent
2011-08-31 09:11 . 2011-09-10 19:05 -------- d-----w- c:\program files\Driver Magician
2011-08-31 09:11 . 2011-02-08 12:58 1882104 ----a-w- c:\windows\system32\Codejock.Controls.v15.0.1.ocx
2011-08-31 09:11 . 2005-01-12 09:19 456536 ----a-w- c:\windows\system32\XCEEDZIP.DLL
2011-08-31 09:11 . 2004-09-28 09:13 526184 ----a-w- c:\windows\system32\XceedCry.dll
2011-08-31 09:11 . 2004-08-11 13:55 110602 ----a-w- c:\windows\system32\xcdsfx32.bin
2011-08-31 09:11 . 2004-03-08 22:00 152848 ----a-w- c:\windows\system32\Comdlg32.ocx
2011-08-31 09:11 . 2004-03-08 22:00 132880 ----a-w- c:\windows\system32\Msinet.ocx
2011-08-29 10:07 . 2011-09-13 08:32 -------- d-----w- c:\documents and settings\dom\Data aplikací\DAEMON Tools Lite
2011-08-27 14:02 . 2011-08-27 14:02 -------- d-----w- c:\program files\Yamicsoft
2011-08-27 13:26 . 2011-08-27 13:26 -------- d-----w- c:\documents and settings\dom\Data aplikací\Tific
2011-08-27 12:46 . 2011-08-27 12:47 86359578 ----a-w- c:\documents and settings\dom\TRACE_BOOT+DRIVERS_1_1.BIN
2011-08-27 12:26 . 2011-08-27 12:26 -------- d--h--w- c:\documents and settings\dom\Okolní síť
2011-08-27 12:18 . 2011-08-27 12:18 -------- d-----w- c:\documents and settings\dom\Local Settings\Data aplikací\GHISLER
2011-08-26 10:11 . 2011-08-26 10:11 -------- d-----w- c:\program files\Seagate
2011-08-25 18:47 . 2011-08-25 18:47 -------- d-----w- c:\documents and settings\dom\Local Settings\Data aplikací\Mozilla
2011-08-25 18:24 . 2011-08-25 18:24 -------- d-----w- c:\documents and settings\dom\Local Settings\Data aplikací\Sun
2011-08-25 17:40 . 2011-08-25 17:40 22 --sha-w- c:\documents and settings\dom\Data aplikací\Sys2662.Config.Repository.bin
2011-08-24 18:10 . 2011-08-24 18:10 9658 ----a-w- c:\windows\system32\drivers\AliGP.sys
2011-08-24 18:10 . 2011-08-24 18:10 84471 ----a-w- c:\windows\system32\drivers\AliEhci.sys
2011-08-24 18:10 . 2011-08-24 18:10 5304 ----a-w- c:\windows\system32\drivers\AliRtHub.sys
2011-08-24 18:10 . 2011-08-24 18:10 32118 ----a-w- c:\windows\system32\drivers\AliHub.sys
2011-08-24 18:07 . 2011-08-24 18:07 27792 ----a-w- c:\windows\system32\drivers\point32.sys
2011-08-24 18:03 . 2011-08-24 18:03 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SonicFocus
2011-08-24 18:01 . 2011-08-24 18:01 114688 ----a-w- c:\windows\system32\nvumpu.exe
2011-08-24 18:01 . 2011-08-24 18:01 10240 ----a-w- c:\windows\system32\drivers\nvmpu401.sys
2011-08-24 17:59 . 2011-08-24 17:59 14336 ----a-w- c:\windows\system32\drivers\Amps2prt.sys
2011-08-24 17:53 . 2011-08-24 17:53 -------- d-----w- c:\documents and settings\All Users\Uniblue
2011-08-20 19:48 . 2011-08-03 11:49 914024 ----a-w- c:\windows\system32\nvdispco32.dll
2011-08-20 19:48 . 2011-08-03 11:49 875112 ----a-w- c:\windows\system32\nvgenco32.dll
2011-08-15 16:56 . 2011-08-15 16:56 -------- d-----w- c:\documents and settings\dom\Data aplikací\Kristanix Software
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-03 10:17 . 2002-09-23 12:00 602112 ----a-w- c:\windows\system32\crypt32.dll
2011-08-26 10:12 . 2011-06-06 20:58 44384 ----a-w- c:\windows\system32\drivers\tifsfilt.sys
2011-08-26 10:12 . 2011-06-06 20:58 441760 ----a-w- c:\windows\system32\drivers\timntr.sys
2011-08-26 10:12 . 2011-06-06 20:57 132224 ----a-w- c:\windows\system32\drivers\snapman.sys
2011-08-26 10:12 . 2011-06-06 20:57 368480 ----a-w- c:\windows\system32\drivers\tdrpman.sys
2011-08-24 18:03 . 2011-05-07 18:03 50688 ----a-w- c:\windows\system32\drivers\Rtnicxp.sys
2011-08-24 18:02 . 2011-04-30 07:48 380416 ----a-w- c:\windows\system32\drivers\ADIHdAud.sys
2011-08-23 18:18 . 2011-05-18 17:03 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-08-03 13:24 . 2011-08-03 13:24 232512 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-08-03 13:16 . 2011-05-07 18:22 128000 ----a-w- c:\windows\system32\javacpl.cpl
2011-08-03 13:16 . 2011-05-07 18:22 544656 ----a-w- c:\windows\system32\deployJava1.dll
2011-08-03 11:49 . 2011-04-07 20:16 600680 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll
2011-08-03 11:49 . 2011-04-07 20:16 54272 ----a-w- c:\windows\system32\nvwddi.dll
2011-08-03 11:49 . 2011-04-07 20:16 13892200 ----a-w- c:\windows\system32\nvcpl.dll
2011-08-03 11:49 . 2011-04-07 20:16 111208 ----a-w- c:\windows\system32\nvmctray.dll
2011-08-03 11:49 . 2011-04-07 20:16 146024 ----a-w- c:\windows\system32\nvsvc32.exe
2011-08-03 11:49 . 2011-04-07 20:16 145000 ----a-w- c:\windows\system32\nvcolor.exe
2011-08-03 11:49 . 2011-02-23 06:27 61440 ----a-w- c:\windows\system32\OpenCL.dll
2011-08-03 11:49 . 2011-02-23 06:27 5427200 ----a-w- c:\windows\system32\nvcuda.dll
2011-08-03 11:49 . 2011-02-23 06:27 2387560 ----a-w- c:\windows\system32\nvcuvid.dll
2011-08-03 11:49 . 2011-02-23 06:27 2090088 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-08-03 11:49 . 2011-02-23 06:27 17186816 ----a-w- c:\windows\system32\nvcompiler.dll
2011-08-03 11:49 . 2007-06-28 16:43 4210816 ----a-w- c:\windows\system32\nv4_disp.dll
2011-08-03 11:49 . 2007-06-28 16:43 2404864 ----a-w- c:\windows\system32\nvapi.dll
2011-08-03 11:49 . 2007-06-28 16:43 16191488 ----a-w- c:\windows\system32\nvoglnt.dll
2011-08-03 11:49 . 2007-06-28 16:43 12542592 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2011-07-15 13:29 . 2002-09-23 12:00 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2002-09-23 12:00 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
2011-07-07 06:18 . 2010-12-28 23:42 285256 ----a-w- c:\windows\system32\guard32.dll
2011-07-07 06:18 . 2011-01-06 15:37 97504 ----a-w- c:\windows\system32\drivers\inspect.sys
2011-07-07 06:18 . 2011-01-06 15:37 29400 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2011-07-07 06:18 . 2011-01-06 15:37 17416 ----a-w- c:\windows\system32\drivers\cmderd.sys
2011-07-07 06:18 . 2011-01-06 15:37 242600 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2011-06-24 14:10 . 2011-04-30 07:16 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-06-23 18:31 . 2002-09-23 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2011-06-23 18:31 . 2002-09-23 12:00 43520 ------w- c:\windows\system32\licmgr10.dll
2011-06-23 18:31 . 2002-09-23 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-06-23 12:05 . 2011-04-30 08:05 385024 ------w- c:\windows\system32\html.iec
2011-06-20 17:44 . 2002-09-23 12:00 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-06-18 07:53 . 2011-06-09 09:18 16968 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-07-07 2554696]
"AntiLogger"="c:\program files\AntiLogger\AntiLogger.exe" [2011-07-02 2856392]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-08-03 13892200]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2011-05-04 17:54 551296 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\guard32.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
2009-11-02 16:57 906288 ----a-w- c:\program files\Seagate\DiscWizard\TimounterMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-14 06:52 15360 ----a-w- c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2011-08-02 07:33 4910912 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DiscWizardMonitor.exe]
2009-11-02 16:49 1346000 ----a-w- c:\program files\Seagate\DiscWizard\DiscWizardMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2011-08-03 11:49 13892200 ----a-w- c:\windows\system32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2011-08-03 11:49 111208 ----a-w- c:\windows\system32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
2011-07-05 08:08 1632360 ----a-w- c:\program files\NVIDIA Corporation\nView\nwiz.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Seagate Scheduler2 Service]
2009-11-02 16:52 136544 ----a-w- c:\program files\Common Files\Seagate\Schedule2\schedhlp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP]
2011-08-24 18:02 1310720 ----a-w- c:\program files\Analog Devices\Core\smax4pnp.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2011\\pes2011.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
.
R0 m5288;m5288;c:\windows\system32\drivers\m5288.sys [8.5.2011 7:32 210304]
R0 oodrvled;oodrvled;c:\windows\system32\drivers\OODrvled.sys [2.3.2011 16:48 25680]
R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NAV\1301000.01C\SymDS.sys [13.9.2011 11:38 340088]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NAV\1301000.01C\SymEFA.sys [13.9.2011 11:38 897656]
R1 AntiLog32;AntiLog32;c:\program files\AntiLogger\AntiLog32.sys [2.7.2011 9:00 121560]
R1 BHDrvx86;BHDrvx86;c:\documents and settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\BASHDefs\20110901.001\BHDrvx86.sys [2.9.2011 2:04 815736]
R1 ccSet_NAV;Norton AntiVirus Settings Manager;c:\windows\system32\drivers\NAV\1301000.01C\ccSetx86.sys [13.9.2011 11:38 132744]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [6.1.2011 17:37 242600]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [6.1.2011 17:37 29400]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [3.8.2011 15:24 232512]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [22.7.2011 18:27 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [12.7.2011 23:55 67664]
R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NAV\1301000.01C\Ironx86.sys [13.9.2011 11:38 149624]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [19.7.2011 2:02 116608]
R2 ALIEHCD;ULi PCI to USB Enhanced Host Controller;c:\windows\system32\drivers\AliEhci.sys [24.8.2011 20:10 84471]
R2 NAV;Norton AntiVirus;c:\program files\Norton AntiVirus\Engine\19.1.0.28\ccSvcHst.exe [13.9.2011 11:38 138760]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [5.5.2011 21:08 2255464]
R2 SgtSch2Svc;Seagate Scheduler2 Service;c:\program files\Common Files\Seagate\Schedule2\schedul2.exe [2.11.2009 18:52 431456]
R2 USBSafelyRemoveService;USB Safely Remove Assistant;c:\program files\USB Safely Remove\USBSRService.exe [12.8.2011 19:40 257880]
R3 aliroothub;USB 2.0 Root Hub;c:\windows\system32\drivers\AliRtHub.sys [24.8.2011 20:10 5304]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [13.9.2011 11:43 105592]
R3 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\IPSDefs\20110912.030\IDSXpx86.sys [12.9.2011 6:25 356280]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM);c:\windows\system32\drivers\vcsvad.sys [4.6.2011 11:49 17792]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 Amps2prt;A4Tech PS/2 Port Mouse Driver;c:\windows\system32\drivers\Amps2prt.sys [24.8.2011 19:59 14336]
S3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\CyberGhost VPN\CGVPNCliService.exe [27.7.2011 21:17 2428968]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [31.7.2011 10:27 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [31.7.2011 10:27 8576]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
S4 IObitUnlocker;IObitUnlocker;c:\program files\IObit\IObit Unlocker\IObitUnlocker.sys [2.9.2011 10:31 27552]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
TCP: DhcpNameServer = 192.168.4.20
DPF: DirectAnimation Java Classes
DPF: Microsoft XML Parser for Java
FF - ProfilePath - c:\documents and settings\dom\Data aplikací\Mozilla\Firefox\Profiles\57lkyadx.default\
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-13 23:33
Windows 5.1.2600 Service Pack 3 NTFS
.
detected NTDLL code modification:
ZwClose
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\NAV]
"ImagePath"="\"c:\program files\Norton AntiVirus\Engine\19.1.0.28\ccSvcHst.exe\" /s \"NAV\" /m \"c:\program files\Norton AntiVirus\Engine\19.1.0.28\diMaster.dll\" /prefetch:1"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
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
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1496)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
- - - - - - - > 'lsass.exe'(1616)
c:\windows\system32\MPR.dll
c:\windows\system32\guard32.dll
.
- - - - - - - > 'explorer.exe'(3772)
c:\windows\system32\guard32.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\AEADISRV.EXE
c:\windows\system32\nvsvc32.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Celkový čas: 2011-09-13 23:36:31 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-09-13 21:36
ComboFix2.txt 2011-09-13 20:57
.
Před spuštěním: Volných bajtů: 15 211 524 096
Po spuštění: Volných bajtů: 15 204 429 824
.
- - End Of File - - 7D69A42808ACCED9C58066B47AF40505
Nahr nˇ probŘhlo ŁspŘçnŘ

Zravím a děkuji,aktualizace opět fungují .
Mockrát díky

To jsem rád. Nemáte zač!