VIRY.CZ

Eset on-line skener, našel tři infiltrace, dvě odstranil, prosím o kontrolu logu.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Ferda Mravenec at 2011-11-26 08:55:25
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 195 GB (64%) free of 305 GB
Total RAM: 2047 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:55:34, on 26.11.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Opera\opera.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Ferda Mravenec\Plocha\RSIT.exe
C:\Program Files\trend micro\Ferda Mravenec.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: {1A03F196-9617-4CA0-842B-A83CEECB022B} - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

--
End of file - 8122 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IType_exe.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-02-11 1246600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-18 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2008-03-01 1443072]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2006-11-17 577536]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-09-25 98304]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe [2005-07-23 172032]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-09-07 37296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]
"LVCOMSX"=C:\WINDOWS\system32\LVCOMSX.EXE [2004-10-08 221184]
"LogitechVideoRepair"=C:\Program Files\Logitech\Video\ISStart.exe [2004-10-08 458752]
"LogitechVideoTray"=C:\Program Files\Logitech\Video\LogiTray.exe [2004-10-08 217088]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2005-09-25 155648]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"itype"=C:\Program Files\Microsoft IntelliType Pro\itype.exe [2011-08-10 1313640]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-09-06 413696]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"LogitechSoftwareUpdate"=C:\Program Files\Logitech\Video\ManifestEngine.exe [2004-10-08 196608]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-09-23 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=lvcodec2.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"midi"=wdmaud.drv
"wave"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave2"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer2"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"wave3"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"wave4"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
"wave5"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux4"=wdmaud.drv

======List of files/folders created in the last 1 month======

2011-11-26 08:55:26 ----D---- C:\Program Files\trend micro
2011-11-25 22:43:06 ----D---- C:\WINDOWS\LastGood
2011-11-18 12:45:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\OMSI AM
2011-11-11 13:53:28 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2011-11-11 13:53:28 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2011-11-11 13:53:25 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2011-11-11 13:53:24 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2011-11-11 13:53:24 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2011-11-11 13:53:23 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2011-11-11 13:53:21 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2011-11-10 17:17:40 ----D---- C:\Program Files\Aerosoft
2011-11-09 11:33:34 ----D---- C:\Program Files\Common Files\Apple
2011-11-09 11:33:27 ----D---- C:\Program Files\QuickTime
2011-11-09 11:33:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
2011-11-08 09:56:31 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2011-11-08 09:56:31 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2011-11-08 09:56:30 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2011-11-08 09:56:30 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2011-11-08 09:56:28 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2011-11-08 09:56:28 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2011-11-08 09:56:26 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2011-11-08 09:56:25 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2011-11-08 09:56:24 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2011-11-08 09:56:24 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2011-11-08 09:56:22 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2011-11-08 09:56:22 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2011-11-08 09:56:20 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2011-11-08 09:56:19 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2011-11-08 09:56:16 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2011-11-08 09:56:16 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2011-11-08 09:56:14 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2011-11-08 09:56:13 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2011-11-08 09:56:11 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2011-11-08 09:56:11 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2011-11-08 09:56:09 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2011-11-08 09:56:08 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2011-11-08 09:56:08 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2011-11-08 09:56:07 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2011-11-08 09:56:07 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2011-11-08 09:56:05 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2011-11-08 09:56:04 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2011-11-08 09:56:03 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2011-11-08 09:56:02 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2011-11-08 09:56:01 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2011-11-08 09:55:58 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2011-11-08 09:55:57 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2011-11-08 09:55:57 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2011-11-08 09:55:56 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2011-11-08 09:55:56 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2011-11-08 09:55:56 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2011-11-08 09:55:55 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2011-11-08 09:55:54 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2011-11-08 09:55:54 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2011-11-08 09:55:53 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2011-11-08 09:55:53 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2011-11-08 09:55:52 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2011-11-08 09:55:41 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2011-11-08 09:55:41 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2011-11-08 09:55:39 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2011-11-08 09:55:38 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2011-11-08 09:55:38 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2011-11-08 09:55:36 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2011-11-08 09:55:28 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2011-11-08 09:45:08 ----D---- C:\Documents and Settings\Ferda Mravenec\Data aplikací\ProtectDisc
2011-11-08 09:40:01 ----D---- C:\Documents and Settings\Ferda Mravenec\Data aplikací\InstallShield
2011-11-02 07:57:51 ----A---- C:\WINDOWS\system32\d3d9caps.dat
2011-10-27 13:23:51 ----D---- C:\Program Files\Common Files\Java
2011-10-27 13:22:02 ----A---- C:\WINDOWS\system32\javaws.exe
2011-10-27 13:22:02 ----A---- C:\WINDOWS\system32\javaw.exe
2011-10-27 13:22:02 ----A---- C:\WINDOWS\system32\java.exe

======List of files/folders modified in the last 1 month======

2011-11-26 08:55:31 ----D---- C:\WINDOWS\Prefetch
2011-11-26 08:55:27 ----D---- C:\WINDOWS\temp
2011-11-26 08:55:26 ----RD---- C:\Program Files
2011-11-25 22:43:07 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-11-25 22:43:06 ----AD---- C:\WINDOWS
2011-11-25 22:27:26 ----D---- C:\WINDOWS\system32
2011-11-25 21:52:26 ----D---- C:\WINDOWS\system32\CatRoot2
2011-11-25 21:47:26 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-11-21 23:45:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-11-19 23:03:45 ----SHD---- C:\WINDOWS\Installer
2011-11-18 10:36:07 ----D---- C:\WINDOWS\system32\drivers
2011-11-18 00:37:29 ----D---- C:\WINDOWS\Minidump
2011-11-16 15:40:55 ----D---- C:\Program Files\Opera
2011-11-16 13:58:10 ----D---- C:\WINDOWS\system32\config
2011-11-15 11:24:57 ----HD---- C:\WINDOWS\inf
2011-11-14 13:35:08 ----SD---- C:\Documents and Settings\Ferda Mravenec\Data aplikací\Microsoft
2011-11-13 21:38:15 ----D---- C:\WINDOWS\Debug
2011-11-13 18:56:08 ----A---- C:\WINDOWS\NeroDigital.ini
2011-11-13 17:46:31 ----D---- C:\Documents and Settings\Ferda Mravenec\Data aplikací\ICQ
2011-11-13 17:46:28 ----D---- C:\Documents and Settings\Ferda Mravenec\Data aplikací\Skype
2011-11-13 17:44:21 ----D---- C:\Documents and Settings\Ferda Mravenec\Data aplikací\skypePM
2011-11-11 13:53:30 ----D---- C:\WINDOWS\system32\DirectX
2011-11-11 13:53:03 ----D---- C:\Config.Msi
2011-11-11 13:53:02 ----D---- C:\WINDOWS\WinSxS
2011-11-11 12:54:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-11-11 12:53:15 ----HD---- C:\WINDOWS\$hf_mig$
2011-11-10 17:17:36 ----HD---- C:\Program Files\InstallShield Installation Information
2011-11-09 11:33:34 ----D---- C:\Program Files\Common Files
2011-11-09 09:59:18 ----A---- C:\WINDOWS\system32\MRT.exe
2011-11-08 09:55:52 ----RSD---- C:\WINDOWS\assembly
2011-10-30 08:57:26 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-10-27 13:22:00 ----D---- C:\Program Files\Java

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R1 easdrv;easdrv; C:\WINDOWS\system32\DRIVERS\easdrv.sys [2008-03-01 29704]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2008-03-01 54280]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 eamon;EAMON; C:\WINDOWS\system32\DRIVERS\eamon.sys [2008-03-01 39944]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2008-03-01 71176]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-03-08 4027840]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-09-23 4481024]
R3 CamDrL;Logitech QuickCam Pro 3000(CamDrl); C:\WINDOWS\system32\DRIVERS\Camdrl.sys [2004-10-08 326656]
R3 EL90XBC;3Com EtherLink XL 90XB/C Adapter Driver; C:\WINDOWS\system32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2008-03-01 30728]
R3 es1371;Creative AudioPCI (ES1371,ES1373) (WDM); C:\WINDOWS\system32\drivers\es1371mp.sys [2001-08-17 40704]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2004-10-08 22016]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys []
S1 InCDRm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BTHMODEM;Ovladač komunikace modemu Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-13 37888]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 catchme;catchme; \??\C:\DOCUME~1\FERDAM~1\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 GT680xNT;ColorPage-Vivid 1200X; C:\WINDOWS\system32\drivers\gt680x.sys [2003-02-27 17376]
S3 h643331;h643331; C:\WINDOWS\system32\drivers\h643331.sys []
S3 hid3331;hid3331; C:\WINDOWS\system32\drivers\hid3331.sys [2008-05-19 41024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 vaxscsi;vaxscsi; C:\WINDOWS\System32\Drivers\vaxscsi.sys [2011-04-17 223128]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S4 a347bus;a347bus; C:\WINDOWS\system32\DRIVERS\a347bus.sys [2004-04-30 160640]
S4 a347scsi;a347scsi; C:\WINDOWS\System32\Drivers\a347scsi.sys [2004-04-30 5248]
S4 InCDFs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys []
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-09-23 602112]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 ekrn;Eset Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2007-12-21 468224]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-10-03 147456]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
R2 UxTuneUp;TuneUp Design Expansion; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-09-25 593920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;Eset HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2008-03-01 19200]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Dobrý den

Malwarebytes' Anti-Malware

• Stáhneme,nainstalujeme a spustíme(pokud si nevíte rady jak,klikněte ZDE)
• Vybereme Úplná kontrola a klikneme na tlačítko Prohledat
• Program provede kontrolu počítače a na konci se vám objeví hláska,že bylo skenování dokončeno,tak potvrdíme tlačítkem OK
• Objeví se vám log,který mi sem vložte
• NIC NEMAZAT!!Program mívá občas falešné detekce,takže mazat budeme až po konzultaci

Malwarebytes' Anti-Malware
www.malwarebytes.org

Verze databáze:

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

26.11.2011 12:27:54
mbam-log-2011-11-26 (12-27-49).txt

Typ: Úplná kontrola (C:\|F:\|)
Kontrolované objekty: 359926
Uplynulý čas: 57 minut, 20 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 1

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\documents and settings\ferda mravenec\Plocha\instalační\acronis true image 9.0 cz\acronis.prod.kg\keygen.exe (Riskware.Tool.CK) -> No action taken.

Nalezenou položku mžete smazat

Pc by měl být bez havěti... jsou s PC nějaké problémy?



Doporučuji odinstalovat program Spybot - Search & Destroy , protože už má nejlepší léta za sebou a není již tak účinný proti novým hrozbám. Doporučuji nahradit za SUPERAntispyware, který používejte zhruba 1x za 14 dní jako preventivní sken ke svému AV

Netrápí vás modré obrazovky?

Modré obrazovky mě netrápí,- PC v posledních několika dnech ztratil na rychlosti připojení k netu (problém může být i na straně připojovatele), před několika dny několikrát nereagovala po zapnutí bezdrátová klávesnice připojená přes PS/2(přestože PC nekřičel po zapnutí, že klávesnici nemá připojenou) -problém se asi vyřešil sám.V průběhu dnešní noci, jak jsem uváděl na začátku, běžel ESET on line skener, který našel původně hrozby tři a dvě automaticky smazal.V posledních dnech když ve vyhledávači kliknu na nějaký odkkaz(stránku) velmi často vyskočí:404 NOT FOUND NGINX a stránka se ani po zastavení a opětovném načtení nenačte.(tento případ se mi dnes stal i u Google překladače).
Dík za pomoc

Pro úplnost musím ještě uvést, že jsem si včera stáhl jakési ovladače pro moji bezdrátovou klávesnici,(vše bylo popsáno tak jak jsem potřeboval). Staženy soubor byl .exe a po jeho spustění a) zmizel z plochy kam jsem ho stahoval, b) žádný ovladač se neinstaloval. A od této doby otvírání většiny stránek nejde-viz výše. I proto jsem spouštěl ten skener.

Nevím na kolik je Superantispyware paranoidní, ale našel:3x Critical Threats-1x Malware Trace, 2x Trojan.Agent/Gen-Krpytik
20x Tracking Objects

Vložte mi jeho log klidně sem..

Stáhněte program RogueKiller

• Spuste program
• Stiskněte klávesu 2 a enter
• Objeví se vám log a ten sem vložte
• Stějně tak opakujte s volbou 3 a 4 a vložte logy

Program nepoužívejte bez doporučení Rádce a pozorně se řiďte následujících pokynu,protože program netoleruje chyby a může dojít k úplnému poškození systému!!

• Stáhneme si Combofix
• Program uložíme nejlépe na Plochu
• Vypneme všechny rezidentní štíty.Jak antiviru,tak antispywaru a firewallu
• Vypneme všechny běžící aplikace (ICQ,prohlížeč,programy) a necháme pouze Combofix
• Spustíme Combofix.exe s administrátorským oprávněním
  U Windows XP se přihlásíme pod účtem správce
  Ve Windows 7 a Vista klikněte pravým tlačítkem myši na Combofix.exe a dejte ,,Spustit jako správce,,)
• Hned po startu programu na vás vyskočí licenční podmínky,tak potvrdíme tlačítkemANO
• Pokud vám Combofix nabídne instalaci Konzoly pro zotavení,tak souhlaste a nechte nainstalovat(zde je potřeba aktivní připojení na internet)
• Pokračujte dle pokynů programu a během skenování na nic neklikejte,na pc nepracujte(ICQ,jiné aplikace,internet..).Nechte počítač v klidu.
• Celý sken tvá mezi 5-15 min,ale pokud je v PC hodně havěti,tak se čas může lišit.
• Po skončení skenování(případném restartu počítače) se vám zobrazí log z Combofixu,který mi vložte sem(Kdyby se log nezobrazil,tak jej najdete zde: C:\ComboFix.txt
• (Pokud si nevíte rady s kterýmkoliv z výše uvedených kroků,tak se ptejte nebo mrkněte na detailnější návod včetně obrázků http://www.bleepingcomputer.com/combofi ... t-combofix )

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 11/26/2011 at 05:32 PM

Application Version : 5.0.1136

Core Rules Database Version : 7515
Trace Rules Database Version: 5327

Scan type : Complete Scan
Total Scan Time : 00:57:23

Operating System Information
Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned : 610
Memory threats detected : 0
Registry items scanned : 37925
Registry threats detected : 1
File items scanned : 69330
File threats detected : 22

Malware.Trace
HKU\S-1-5-21-1343024091-796845957-725345543-1003\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON#SHELL

Adware.Tracking Cookie
C:\Documents and Settings\Ferda Mravenec\Cookies\VS1IY9NR.txt [ /serving-sys.com ]
C:\Documents and Settings\Ferda Mravenec\Cookies\H7L1V15Y.txt [ /doubleclick.net ]
C:\Documents and Settings\Ferda Mravenec\Cookies\ZZOG2S0C.txt [ /atdmt.com ]
C:\Documents and Settings\Ferda Mravenec\Cookies\E8BTV34I.txt [ /cdn.jemamedia.com ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\80Q05KBE.txt [ Cookie:system@google.com/accounts/recovery/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\GSFHM00K.txt [ Cookie:system@myroitracking.com/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\4SEXDVCO.txt [ Cookie:system@google.com/support/accounts/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\Z86C5GX4.txt [ Cookie:system@atdmt.com/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\CU7LMF33.txt [ Cookie:system@doubleclick.net/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\8UVVL907.txt [ Cookie:system@www.google.com/accounts/recovery ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\VMZ058PU.txt [ Cookie:system@linksynergy.com/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\K74DQ9LG.txt [ Cookie:system@amazon-adsystem.com/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\0JE7FDN5.txt [ Cookie:system@www.iccserver.com/adserver/www/delivery/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\X65ZXT4F.txt [ Cookie:system@google.com/accounts/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\RW02CW4G.txt [ Cookie:system@xml.trafficengine.net/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\97I3GLGK.txt [ Cookie:system@clicksor.com/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\8WL2O3LO.txt [ Cookie:system@mm.chitika.net/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\78G7NYX6.txt [ Cookie:system@startmedia.gr/ ]
F:\USERS\FERDA MRAVENEC\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FERDA_MRAVENEC@2O7[1].TXT [ /2O7 ]
F:\USERS\FERDA MRAVENEC\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FERDA_MRAVENEC@ADTECH[1].TXT [ /ADTECH ]

Trojan.Agent/Gen-Krpytik
C:\SYSTEM VOLUME INFORMATION\_RESTORE{65D6B0AB-29D3-41E2-AB9C-BC86E08699A7}\RP184\A0076369.EXE
F:\INSTALAčNí-HRY\SIMS 2- ROčNí OBDOBí\CRACK\RLD-S2SA.EXE

RogueKiller V6.1.10 [11/18/2011] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Ferda Mravenec [Admin rights]
Mode: Remove -- Date : 11/26/2011 19:00:34

¤¤¤ Bad processes: 0 ¤¤¤

¤¤¤ Registry Entries: 1 ¤¤¤
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
127.0.0.1 localhost


Finished : << RKreport[1].txt >>
RKreport[1].txt

3
RogueKiller V6.1.10 [11/18/2011] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Ferda Mravenec [Admin rights]
Mode: HOSTSFix -- Date : 11/26/2011 19:01:38

¤¤¤ Bad processes: 0 ¤¤¤

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
127.0.0.1 localhost


¤¤¤ Resetted HOSTS: ¤¤¤
127.0.0.1 localhost

Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

4
RogueKiller V6.1.10 [11/18/2011] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Ferda Mravenec [Admin rights]
Mode: ProxyFix -- Date : 11/26/2011 19:02:36

¤¤¤ Bad processes: 0 ¤¤¤

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ Registry Entries: 0 ¤¤¤

Finished : << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt

ComboFix 11-11-26.04 - Ferda Mravenec 26.11.2011 19:11:53.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2047.1630 [GMT 1:00]
Spuštěný z: c:\documents and settings\Ferda Mravenec\Plocha\ComboFix.exe
AV: ESET Smart Security 3.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *Enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
* Rezidentní štít AV je zapnutý
.
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\11475f6a\U\80000000.@
c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\11475f6a\U\800000cb.@
c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\11475f6a\U\800000cf.@
c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\11475f6a\X
C:\Install.exe
c:\windows\$NtUninstallKB45522$
c:\windows\$NtUninstallKB45522$\289890154\@
c:\windows\$NtUninstallKB45522$\289890154\L\pcciijoa
c:\windows\$NtUninstallKB45522$\289890154\loader.tlb
c:\windows\$NtUninstallKB45522$\289890154\U\@00000001
c:\windows\$NtUninstallKB45522$\289890154\U\@000000c0
c:\windows\$NtUninstallKB45522$\289890154\U\@000000cb
c:\windows\$NtUninstallKB45522$\289890154\U\@000000cf
c:\windows\$NtUninstallKB45522$\289890154\U\@80000000
c:\windows\$NtUninstallKB45522$\289890154\U\@800000c0
c:\windows\$NtUninstallKB45522$\289890154\U\@800000cb
c:\windows\$NtUninstallKB45522$\289890154\U\@800000cf
c:\windows\$NtUninstallKB45522$\3517950348
c:\windows\assembly\GAC_MSIL\desktop.ini
c:\windows\system32\
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-10-26 do 2011-11-26 )))))))))))))))))))))))))))))))
.
.
2011-11-26 15:28 . 2011-11-26 15:28 -------- d-----w- c:\documents and settings\Ferda Mravenec\Data aplikací\SUPERAntiSpyware.com
2011-11-26 15:27 . 2011-11-26 15:27 -------- d-----w- c:\documents and settings\All Users\Data aplikací\!SASCORE
2011-11-26 15:27 . 2011-11-26 15:30 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-11-26 15:27 . 2011-11-26 15:27 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-11-26 09:03 . 2011-11-26 09:03 -------- d-----w- c:\documents and settings\Ferda Mravenec\Data aplikací\Malwarebytes
2011-11-26 09:03 . 2011-11-26 09:03 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2011-11-26 09:03 . 2011-11-26 09:03 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-11-26 09:03 . 2011-08-31 16:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-11-26 07:55 . 2011-11-26 07:55 -------- d-----w- c:\program files\trend micro
2011-11-25 21:20 . 2011-11-26 18:17 -------- d-sh--w- c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\11475f6a
2011-11-18 11:45 . 2011-11-18 11:45 -------- d-----w- c:\documents and settings\All Users\Data aplikací\OMSI AM
2011-11-18 11:45 . 2011-11-18 11:45 -------- d-----w- c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\OMSI AM
2011-11-11 12:53 . 2009-03-09 14:27 453456 ----a-w- c:\windows\system32\d3dx10_41.dll
2011-11-11 12:53 . 2009-03-09 14:27 1846632 ----a-w- c:\windows\system32\D3DCompiler_41.dll
2011-11-11 12:53 . 2009-03-09 14:27 4178264 ----a-w- c:\windows\system32\D3DX9_41.dll
2011-11-11 12:53 . 2009-03-16 13:18 69448 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2011-11-11 12:53 . 2009-03-16 13:18 517448 ----a-w- c:\windows\system32\XAudio2_4.dll
2011-11-11 12:53 . 2009-03-16 13:18 235352 ----a-w- c:\windows\system32\xactengine3_4.dll
2011-11-11 12:53 . 2009-03-16 13:18 22360 ----a-w- c:\windows\system32\X3DAudio1_6.dll
2011-11-10 16:17 . 2011-11-10 16:17 -------- d-----w- c:\program files\Aerosoft
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin7.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin6.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin5.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin4.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin3.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin2.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin.dll
2011-11-09 10:33 . 2011-11-09 10:33 -------- d-----w- c:\program files\Common Files\Apple
2011-11-09 10:33 . 2011-11-09 10:33 -------- d-----w- c:\program files\QuickTime
2011-11-09 10:33 . 2011-11-09 10:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Apple Computer
2011-11-09 10:33 . 2011-11-09 10:33 -------- d-----w- c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\Apple Computer
2011-11-08 08:55 . 2007-03-12 15:42 3495784 ----a-w- c:\windows\system32\d3dx9_33.dll
2011-11-08 08:45 . 2011-11-08 08:45 -------- d-----w- c:\documents and settings\Ferda Mravenec\Data aplikací\ProtectDisc
2011-11-08 08:40 . 2011-11-08 08:40 -------- d-----w- c:\documents and settings\Ferda Mravenec\Data aplikací\InstallShield
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-10 16:39 . 2011-05-14 08:54 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-10 14:22 . 2011-03-21 18:46 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-10-03 03:06 . 2011-06-30 14:15 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-10-03 00:37 . 2011-06-30 14:15 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-09-28 07:06 . 2004-08-17 15:49 602112 ----a-w- c:\windows\system32\crypt32.dll
2011-09-26 09:41 . 2010-03-18 09:09 613376 ----a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 09:41 . 2001-10-25 15:00 22528 ----a-w- c:\windows\system32\oleaccrc.dll
2011-09-26 09:41 . 2001-10-25 15:00 220160 ----a-w- c:\windows\system32\oleacc.dll
2011-09-06 14:10 . 2004-08-17 15:44 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-04-18 14:01 . 2011-04-18 13:30 1308851200 ----a-w- c:\program files\4Story_CZ_3.5.55.exe
2011-04-18 13:29 . 2011-04-18 13:29 344848 ----a-w- c:\program files\Downloader_4Story_CZ_3.5.55.exe
.
.
((((((((((((((((((((((((((((( SnapShot@2011-10-15_18.19.11 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-11-07 00:19 . 2007-11-07 00:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\vcomp90.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\vcomp90.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 46592 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90kor.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 46592 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90kor.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 47104 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90jpn.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 47104 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90jpn.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90ita.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90ita.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 41984 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90cht.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 41984 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90cht.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 41472 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90chs.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 41472 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90chs.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 60416 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90fra.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 60416 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90fra.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90esp.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90esp.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90esn.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90esn.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90enu.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90enu.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 60928 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90deu.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 60928 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90deu.dll
+ 2007-11-06 21:51 . 2007-11-06 21:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90u.dll
- 2007-11-06 20:51 . 2007-11-06 20:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90u.dll
+ 2007-11-06 21:51 . 2007-11-06 21:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90.dll
- 2007-11-06 20:51 . 2007-11-06 20:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90.dll
+ 2011-11-26 18:19 . 2011-11-26 18:19 16384 c:\windows\temp\Perflib_Perfdata_158.dat
+ 2011-11-08 08:55 . 2005-12-05 17:07 61136 c:\windows\system32\xinput9_1_0.dll
+ 2011-11-08 08:56 . 2007-04-04 17:53 81768 c:\windows\system32\xinput1_3.dll
+ 2011-11-08 08:55 . 2006-07-28 08:30 62744 c:\windows\system32\xinput1_2.dll
+ 2011-11-08 08:55 . 2006-03-31 11:39 62672 c:\windows\system32\xinput1_1.dll
+ 2011-11-08 08:56 . 2008-05-30 13:17 65032 c:\windows\system32\XAPOFX1_0.dll
+ 2011-11-08 08:56 . 2008-05-30 13:17 25608 c:\windows\system32\X3DAudio1_4.dll
+ 2011-11-08 08:56 . 2008-03-05 15:00 25608 c:\windows\system32\X3DAudio1_3.dll
+ 2011-11-08 08:56 . 2007-10-22 02:37 17928 c:\windows\system32\X3DAudio1_2.dll
+ 2011-11-08 08:55 . 2007-03-05 11:42 15128 c:\windows\system32\x3daudio1_1.dll
+ 2011-11-08 08:55 . 2006-02-03 07:41 14032 c:\windows\system32\x3daudio1_0.dll
+ 2001-10-25 15:00 . 2011-10-30 07:57 87912 c:\windows\system32\perfc009.dat
- 2001-10-25 15:00 . 2011-10-12 18:23 87912 c:\windows\system32\perfc009.dat
- 2011-10-12 17:54 . 2010-07-05 13:13 26488 c:\windows\SoftwareDistribution\Download\6a56fd9294415a1a220e891069400e0e\update\spcustom.dll
- 2011-10-12 17:54 . 2010-07-05 13:13 18296 c:\windows\SoftwareDistribution\Download\6a56fd9294415a1a220e891069400e0e\spmsg.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 568832 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcp90.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 568832 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcp90.dll
+ 2007-11-06 19:23 . 2007-11-06 19:23 224768 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcm90.dll
- 2007-11-06 18:23 . 2007-11-06 18:23 224768 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcm90.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 161784 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_312cf0e9\atl90.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 161784 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_312cf0e9\atl90.dll
+ 2011-11-08 08:56 . 2008-05-30 13:19 507400 c:\windows\system32\XAudio2_1.dll
+ 2011-11-08 08:56 . 2008-03-05 15:03 479752 c:\windows\system32\XAudio2_0.dll
+ 2011-11-08 08:56 . 2008-05-30 13:18 238088 c:\windows\system32\xactengine3_1.dll
+ 2011-11-08 08:56 . 2008-03-05 15:03 238088 c:\windows\system32\xactengine3_0.dll
+ 2011-11-08 08:56 . 2007-07-19 23:57 267112 c:\windows\system32\xactengine2_9.dll
+ 2011-11-08 08:56 . 2007-06-20 19:46 266088 c:\windows\system32\xactengine2_8.dll
+ 2011-11-08 08:56 . 2007-04-04 17:55 261480 c:\windows\system32\xactengine2_7.dll
+ 2011-11-08 08:55 . 2007-01-24 14:27 255848 c:\windows\system32\xactengine2_6.dll
+ 2011-11-08 08:55 . 2006-12-08 11:02 251672 c:\windows\system32\xactengine2_5.dll
+ 2011-11-08 08:55 . 2006-09-28 15:05 237848 c:\windows\system32\xactengine2_4.dll
+ 2011-11-08 08:55 . 2006-07-28 08:30 236824 c:\windows\system32\xactengine2_3.dll
+ 2011-11-08 08:55 . 2006-05-31 06:24 230168 c:\windows\system32\xactengine2_2.dll
+ 2011-11-08 08:56 . 2007-10-22 02:39 267272 c:\windows\system32\xactengine2_10.dll
+ 2011-11-08 08:55 . 2006-03-31 11:39 229584 c:\windows\system32\xactengine2_1.dll
+ 2011-11-08 08:55 . 2006-02-03 07:42 230096 c:\windows\system32\xactengine2_0.dll
+ 2001-10-25 15:00 . 2011-10-30 07:57 504154 c:\windows\system32\perfh009.dat
- 2001-10-25 15:00 . 2011-10-12 18:23 504154 c:\windows\system32\perfh009.dat
+ 2001-10-25 15:00 . 2011-10-30 07:57 500272 c:\windows\system32\perfh005.dat
- 2001-10-25 15:00 . 2011-10-12 18:23 500272 c:\windows\system32\perfh005.dat
- 2001-10-25 15:00 . 2011-10-12 18:23 102926 c:\windows\system32\perfc005.dat
+ 2001-10-25 15:00 . 2011-10-30 07:57 102926 c:\windows\system32\perfc005.dat
+ 2011-11-10 16:39 . 2011-11-10 16:39 247968 c:\windows\system32\Macromed\Flash\FlashUtil11c_Plugin.exe
+ 2011-10-27 12:22 . 2011-10-03 03:06 157472 c:\windows\system32\javaws.exe
- 2011-06-30 14:15 . 2011-06-30 14:15 157472 c:\windows\system32\javaws.exe
+ 2011-10-27 12:22 . 2011-10-03 03:06 145184 c:\windows\system32\javaw.exe
- 2011-06-30 14:15 . 2011-06-30 14:15 145184 c:\windows\system32\javaw.exe
+ 2011-10-27 12:22 . 2011-10-03 03:06 145184 c:\windows\system32\java.exe
- 2011-06-30 14:15 . 2011-06-30 14:15 145184 c:\windows\system32\java.exe
+ 2010-01-29 15:01 . 2011-10-10 14:22 692736 c:\windows\system32\dllcache\inetcomm.dll
- 2010-01-29 15:01 . 2011-05-02 15:32 692736 c:\windows\system32\dllcache\inetcomm.dll
- 2011-09-03 10:17 . 2011-09-09 09:12 602112 c:\windows\system32\dllcache\crypt32.dll
+ 2011-09-03 10:17 . 2011-09-28 07:06 602112 c:\windows\system32\dllcache\crypt32.dll
+ 2011-11-08 08:56 . 2008-05-30 13:11 467984 c:\windows\system32\d3dx10_38.dll
+ 2011-11-08 08:56 . 2008-02-05 22:07 462864 c:\windows\system32\d3dx10_37.dll
+ 2011-11-08 08:56 . 2007-10-02 08:56 444776 c:\windows\system32\d3dx10_36.dll
+ 2011-11-08 08:56 . 2007-07-19 17:14 444776 c:\windows\system32\d3dx10_35.dll
+ 2011-11-08 08:56 . 2007-05-16 15:45 443752 c:\windows\system32\d3dx10_34.dll
+ 2011-11-08 08:56 . 2007-03-15 15:57 443752 c:\windows\system32\d3dx10_33.dll
- 2011-10-12 17:54 . 2010-07-05 13:13 391032 c:\windows\SoftwareDistribution\Download\6a56fd9294415a1a220e891069400e0e\update\updspapi.dll
- 2011-10-12 17:54 . 2010-07-05 13:13 759160 c:\windows\SoftwareDistribution\Download\6a56fd9294415a1a220e891069400e0e\update\update.exe
- 2011-10-12 17:54 . 2010-07-05 13:13 233848 c:\windows\SoftwareDistribution\Download\6a56fd9294415a1a220e891069400e0e\spuninst.exe
- 2011-10-12 17:54 . 2011-08-17 13:41 138496 c:\windows\SoftwareDistribution\Download\6a56fd9294415a1a220e891069400e0e\SP3QFE\afd.sys
- 2011-10-12 17:54 . 2011-08-17 13:49 138496 c:\windows\SoftwareDistribution\Download\6a56fd9294415a1a220e891069400e0e\SP3GDR\afd.sys
+ 2011-11-08 08:55 . 2006-03-31 10:27 578560 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2911.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2006-02-03 06:40 578560 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2910.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2005-12-05 16:20 577536 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2909.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2005-09-28 13:11 577536 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2908.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2005-07-22 16:21 577024 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2907.0\Microsoft.DirectX.Direct3DX.dll
- 2011-04-16 04:28 . 2005-05-26 13:15 576000 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-04-16 04:28 . 2005-05-26 14:15 576000 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-07-23 10:09 . 2005-03-18 16:23 567296 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\Microsoft.DirectX.Direct3DX.dll
- 2011-07-23 10:09 . 2005-03-18 15:23 567296 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2005-02-05 18:32 563712 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2904.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-10-27 12:23 . 2011-10-27 12:23 203776 c:\windows\Installer\4a1d6b.msi
+ 2011-11-08 08:55 . 2011-11-08 08:55 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 1162744 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90u.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 1162744 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90u.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 1156600 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 1156600 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90.dll
+ 2011-03-23 17:43 . 2011-11-10 16:39 8522400 c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2011-11-08 08:56 . 2008-05-30 13:11 3850760 c:\windows\system32\D3DX9_38.dll
+ 2011-11-08 08:56 . 2008-03-05 14:56 3786760 c:\windows\system32\D3DX9_37.dll
+ 2011-11-08 08:56 . 2007-10-12 14:14 3734536 c:\windows\system32\d3dx9_36.dll
+ 2011-11-08 08:56 . 2007-07-19 17:14 3727720 c:\windows\system32\d3dx9_35.dll
+ 2011-11-08 08:56 . 2007-05-16 15:45 3497832 c:\windows\system32\d3dx9_34.dll
+ 2011-11-08 08:55 . 2006-11-29 12:06 3426072 c:\windows\system32\d3dx9_32.dll
+ 2011-11-08 08:55 . 2006-09-28 15:05 2414360 c:\windows\system32\d3dx9_31.dll
+ 2011-11-08 08:55 . 2006-02-03 07:43 2332368 c:\windows\system32\d3dx9_29.dll
+ 2011-11-08 08:55 . 2005-12-05 17:09 2323664 c:\windows\system32\d3dx9_28.dll
+ 2011-11-08 08:55 . 2005-07-22 18:59 2319568 c:\windows\system32\d3dx9_27.dll
- 2011-04-16 04:28 . 2005-05-26 13:34 2297552 c:\windows\system32\d3dx9_26.dll
+ 2011-04-16 04:28 . 2005-05-26 14:34 2297552 c:\windows\system32\d3dx9_26.dll
+ 2011-07-23 10:09 . 2005-03-18 16:19 2337488 c:\windows\system32\d3dx9_25.dll
- 2011-07-23 10:09 . 2005-03-18 15:19 2337488 c:\windows\system32\d3dx9_25.dll
+ 2011-11-08 08:55 . 2005-02-05 18:45 2222800 c:\windows\system32\d3dx9_24.dll
+ 2011-11-08 08:56 . 2008-05-30 13:11 1491992 c:\windows\system32\D3DCompiler_38.dll
+ 2011-11-08 08:56 . 2008-03-05 14:56 1420824 c:\windows\system32\D3DCompiler_37.dll
+ 2011-11-08 08:56 . 2007-10-12 14:14 1374232 c:\windows\system32\D3DCompiler_36.dll
+ 2011-11-08 08:56 . 2007-07-19 17:14 1358192 c:\windows\system32\D3DCompiler_35.dll
+ 2011-11-08 08:56 . 2007-05-16 15:45 1124720 c:\windows\system32\D3DCompiler_34.dll
+ 2011-11-08 08:56 . 2007-03-12 15:42 1123696 c:\windows\system32\D3DCompiler_33.dll
+ 2011-11-08 08:55 . 2004-12-01 14:53 2846720 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2903.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2004-09-29 11:38 2676224 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-09 10:33 . 2011-11-09 10:33 8990208 c:\windows\Installer\616f586.msi
+ 2011-11-08 08:55 . 2011-11-08 08:55 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-03-23 18:24 . 2011-11-09 08:59 50295240 c:\windows\system32\MRT.exe
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechSoftwareUpdate"="c:\program files\Logitech\Video\ManifestEngine.exe" [2004-10-08 196608]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2008-03-01 1443072]
"SoundMan"="SOUNDMAN.EXE" [2006-11-17 577536]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-09-25 98304]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2005-07-23 172032]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2004-10-08 221184]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2004-10-08 458752]
"LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2004-10-08 217088]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2005-09-25 155648]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2011-08-10 1313640]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2011-05-04 17:54 551296 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\ICQ7.5\\ICQ.exe"=
.
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [22.7.2011 17:27 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [12.7.2011 22:55 67664]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [19.7.2011 1:02 116608]
R2 ekrn;Eset Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [21.12.2007 8:21 468224]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 GT680xNT;ColorPage-Vivid 1200X;c:\windows\system32\drivers\Gt680x.sys [2.8.2011 16:49 17376]
S3 h643331;h643331;c:\windows\system32\drivers\h643331.sys --> c:\windows\system32\drivers\h643331.sys [?]
S3 hid3331;hid3331;c:\windows\system32\drivers\Hid3331.sys [16.4.2011 8:33 41024]
S3 vaxscsi;vaxscsi;c:\windows\system32\drivers\vaxscsi.sys [17.4.2011 14:01 223128]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
S4 a347bus;a347bus;c:\windows\system32\drivers\a347bus.sys [23.4.2011 20:37 160640]
S4 a347scsi;a347scsi;c:\windows\system32\drivers\a347scsi.sys [23.4.2011 20:37 5248]
S4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys --> c:\windows\system32\Drivers\sptd.sys [?]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
2011-11-25 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2007\SystemOptimizer.exe [2006-12-19 13:13]
.
2011-09-17 c:\windows\Tasks\Microsoft_Hardware_Launch_IType_exe.job
- c:\program files\Microsoft IntelliType Pro\itype.exe [2011-08-10 14:39]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
TCP: DhcpNameServer = 192.168.2.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-AuranTS2009_is1 - g:\program files\Auran\TS2009\unins000.exe
AddRemove-Family Tree Builder - g:\program files\MyHeritage\Bin\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-11-26 19:20
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
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
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(788)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(1936)
c:\windows\system32\webcheck.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\SOUNDMAN.EXE
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\windows\system32\wdfmgr.exe
c:\windows\system32\rundll32.exe
c:\program files\Logitech\Video\FxSvr2.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
.
**************************************************************************
.
Celkový čas: 2011-11-26 19:23:37 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-11-26 18:23
ComboFix2.txt 2011-10-15 18:20
.
Před spuštěním: Volných bajtů: 204 641 943 552
Po spuštění: Volných bajtů: 204 663 365 632
.
- - End Of File - - 42ABFDF50C0214FCB8B66433F5AAE72B

Nalezené položky SUPERAntispyware dejte smazat

Vyčistěte pc dle návodu: http://www.viry.cz/forum/viewtopic.php?f=46&t=47040

Otevřeme si Poznámkový blok

• (stiskneme klávesovou kombinaci WIN+R a napíšeme ,,notepad,, bez úvozovek a dáme enter)
• Vložíme do něj následující script:

  Kód: Vybrat vše

  KillAll::
  
  Folder::
  c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\11475f6a\
  
  Registry::
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "StartCCC"=-
  "GrooveMonitor"=-
  "Adobe Reader Speed Launcher"=-
  "Adobe ARM"=-
  "NeroFilterCheck"=-
  "SunJavaUpdateSched"=-
  "QuickTime Task"=-
  
  RegLock::
  [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
  
  RegNull::
  [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
  
  Reboot::
  

• Soubor uložíme na Plochu jako CFScript.txt
• Poté tento soubor uchopíme levým tlačítkem myši a přetáhneme na ikonu Combofixu a upustíme
  
  
• Poté Combofix provede všechny operace a udělá nový log,který sem vložte

Může se stát,že po aplikaci scriptu nenaběhne Windows běžným způsobem.V tomto případě restartujte počítač a při startu mačkejte F8 a zvolte možnost Poslední známá funkční konfigurace

ComboFix 11-11-26.04 - Ferda Mravenec 26.11.2011 22:13:20.5.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2047.1335 [GMT 1:00]
Spuštěný z: c:\documents and settings\Ferda Mravenec\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Ferda Mravenec\Plocha\CFScript.txt
AV: ESET Smart Security 3.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *Enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-10-26 do 2011-11-26 )))))))))))))))))))))))))))))))
.
.
2011-11-26 15:28 . 2011-11-26 15:28 -------- d-----w- c:\documents and settings\Ferda Mravenec\Data aplikací\SUPERAntiSpyware.com
2011-11-26 15:27 . 2011-11-26 15:27 -------- d-----w- c:\documents and settings\All Users\Data aplikací\!SASCORE
2011-11-26 15:27 . 2011-11-26 15:30 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-11-26 15:27 . 2011-11-26 15:27 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-11-26 09:03 . 2011-11-26 09:03 -------- d-----w- c:\documents and settings\Ferda Mravenec\Data aplikací\Malwarebytes
2011-11-26 09:03 . 2011-11-26 09:03 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2011-11-26 09:03 . 2011-11-26 09:03 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-11-26 09:03 . 2011-08-31 16:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-11-26 07:55 . 2011-11-26 07:55 -------- d-----w- c:\program files\trend micro
2011-11-25 21:20 . 2011-11-26 18:17 -------- d-sh--w- c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\11475f6a
2011-11-18 11:45 . 2011-11-18 11:45 -------- d-----w- c:\documents and settings\All Users\Data aplikací\OMSI AM
2011-11-18 11:45 . 2011-11-18 11:45 -------- d-----w- c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\OMSI AM
2011-11-11 12:53 . 2009-03-09 14:27 453456 ----a-w- c:\windows\system32\d3dx10_41.dll
2011-11-11 12:53 . 2009-03-09 14:27 1846632 ----a-w- c:\windows\system32\D3DCompiler_41.dll
2011-11-11 12:53 . 2009-03-09 14:27 4178264 ----a-w- c:\windows\system32\D3DX9_41.dll
2011-11-11 12:53 . 2009-03-16 13:18 69448 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2011-11-11 12:53 . 2009-03-16 13:18 517448 ----a-w- c:\windows\system32\XAudio2_4.dll
2011-11-11 12:53 . 2009-03-16 13:18 235352 ----a-w- c:\windows\system32\xactengine3_4.dll
2011-11-11 12:53 . 2009-03-16 13:18 22360 ----a-w- c:\windows\system32\X3DAudio1_6.dll
2011-11-10 16:17 . 2011-11-10 16:17 -------- d-----w- c:\program files\Aerosoft
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin7.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin6.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin5.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin4.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin3.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin2.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin.dll
2011-11-09 10:33 . 2011-11-09 10:33 -------- d-----w- c:\program files\Common Files\Apple
2011-11-09 10:33 . 2011-11-09 10:33 -------- d-----w- c:\program files\QuickTime
2011-11-09 10:33 . 2011-11-09 10:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Apple Computer
2011-11-09 10:33 . 2011-11-09 10:33 -------- d-----w- c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\Apple Computer
2011-11-08 08:55 . 2007-03-12 15:42 3495784 ----a-w- c:\windows\system32\d3dx9_33.dll
2011-11-08 08:45 . 2011-11-08 08:45 -------- d-----w- c:\documents and settings\Ferda Mravenec\Data aplikací\ProtectDisc
2011-11-08 08:40 . 2011-11-08 08:40 -------- d-----w- c:\documents and settings\Ferda Mravenec\Data aplikací\InstallShield
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-10 16:39 . 2011-05-14 08:54 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-10 14:22 . 2011-03-21 18:46 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-10-03 03:06 . 2011-06-30 14:15 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-10-03 00:37 . 2011-06-30 14:15 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-09-28 07:06 . 2004-08-17 15:49 602112 ----a-w- c:\windows\system32\crypt32.dll
2011-09-26 09:41 . 2010-03-18 09:09 613376 ----a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 09:41 . 2001-10-25 15:00 22528 ----a-w- c:\windows\system32\oleaccrc.dll
2011-09-26 09:41 . 2001-10-25 15:00 220160 ----a-w- c:\windows\system32\oleacc.dll
2011-09-06 14:10 . 2004-08-17 15:44 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-04-18 14:01 . 2011-04-18 13:30 1308851200 ----a-w- c:\program files\4Story_CZ_3.5.55.exe
2011-04-18 13:29 . 2011-04-18 13:29 344848 ----a-w- c:\program files\Downloader_4Story_CZ_3.5.55.exe
.
.
((((((((((((((((((((((((((((( SnapShot_2011-11-26_18.19.51 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-11-26 21:19 . 2011-11-26 21:19 16384 c:\windows\temp\Perflib_Perfdata_37c.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechSoftwareUpdate"="c:\program files\Logitech\Video\ManifestEngine.exe" [2004-10-08 196608]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2008-03-01 1443072]
"SoundMan"="SOUNDMAN.EXE" [2006-11-17 577536]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2005-07-23 172032]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2004-10-08 221184]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2004-10-08 458752]
"LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2004-10-08 217088]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2011-08-10 1313640]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2011-05-04 17:54 551296 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\ICQ7.5\\ICQ.exe"=
.
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [22.7.2011 17:27 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [12.7.2011 22:55 67664]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [19.7.2011 1:02 116608]
R2 ekrn;Eset Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [21.12.2007 8:21 468224]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 GT680xNT;ColorPage-Vivid 1200X;c:\windows\system32\drivers\Gt680x.sys [2.8.2011 16:49 17376]
S3 h643331;h643331;c:\windows\system32\drivers\h643331.sys --> c:\windows\system32\drivers\h643331.sys [?]
S3 hid3331;hid3331;c:\windows\system32\drivers\Hid3331.sys [16.4.2011 8:33 41024]
S3 vaxscsi;vaxscsi;c:\windows\system32\drivers\vaxscsi.sys [17.4.2011 14:01 223128]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
S4 a347bus;a347bus;c:\windows\system32\drivers\a347bus.sys [23.4.2011 20:37 160640]
S4 a347scsi;a347scsi;c:\windows\system32\drivers\a347scsi.sys [23.4.2011 20:37 5248]
S4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys --> c:\windows\system32\Drivers\sptd.sys [?]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
2011-11-25 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2007\SystemOptimizer.exe [2006-12-19 13:13]
.
2011-09-17 c:\windows\Tasks\Microsoft_Hardware_Launch_IType_exe.job
- c:\program files\Microsoft IntelliType Pro\itype.exe [2011-08-10 14:39]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
TCP: DhcpNameServer = 192.168.2.1
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-11-26 22:19
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(788)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(916)
c:\windows\system32\webcheck.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\SOUNDMAN.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\wdfmgr.exe
c:\program files\Logitech\Video\FxSvr2.exe
.
**************************************************************************
.
Celkový čas: 2011-11-26 22:22:18 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-11-26 21:22
ComboFix2.txt 2011-11-26 18:23
ComboFix3.txt 2011-10-15 18:20
.
Před spuštěním: Volných bajtů: 210 328 100 864
Po spuštění: Volných bajtů: 210 308 173 824
.
- - End Of File - - CBA667C2DE1567B1D37B009290FAE854

Stiskněte klávesovou kombinaci WIN+R( nebo start-spustit ),čímž se vám otevře okno pro zadání příkazu pro spuštění a zkopírujte a vložte sem následujíci text: Combofix /Uninstall a dejte enter

T-Cleaner

• Spustíme,zmáčkneme klávesu A a potvrdíme ENTER(některé antiviry mohou detekovat utilitu jako vir-jedá se o falešný poplach,proto IGNOROVAT nebo dočasně vypnout antivir )
• po použití T-Cleaner smažte

TFC

• Stáhneme a spustíme program
• Klikneme na Start a potvrdíme OK
• Program začne uklízet,poté restartuje pc
• po použití program smažte

Údržba PC:

1)Čištění dočasných složek + neplatné registry
Ccleaner

• Stáhneme a nainstalujeme program
• Spustíme program
• ČISTIČ
  Windows zde necháme vše jak je (pokud používáme IE,tak odškrkneme jeho položky) a zaškrkneme položky Start Menu zástupci a Zástupci na ploše a odškrkneme volbu Zbytky souborů v paměti
  Aplikace - necháme jak je,ale pokud používáme nějaký prohlížeč (Google chrome,Firefox,Opera..) tak odškrkneme jeho položky
  >Stiskeneme tlačítko Analyzovat a poté Spustit Cleaner
• Registry
  >Stiskneme tlačítko Hledej problémy,program začne hledat neplatné registry..podé zvolíme Opravit vybrané problémy..
  >Program se zeptá,zda chceme vytvořit zálohu registrů,zvolíme ano a uložíme si někde zálohu(kdyby byli po opravení registru s něčím problémy,tak zálohu obnovíme tak,že spustíme uloženou zálohu a potvrdíme ano),dále zvolíme Opravit všechny problémy a Zavřít
  >opakujte dokud nebude registr bez problémů
• Program používáme 1x 14dní (záleží na používání pc,můžeme i jednou týdně)

2)Defragmentace disku
Defraggler

• Stáhneme a nainstalujeme program
• Spustíme program
• Vybereme disk ( C:,D:..prostě který používáme)
• Pokud je ve sloupci Fragmentace více než 5% dejte Defragmentovat
• Proveďte se všemi používanými disky
• Provádíme 1x za měsíc

3)Aktualizace programů
FileHippo.com Update Checker

• Stáhneme a nainstalujeme program(Při instalaci odškrkneme volbu Run at Startup )
• Spustíme program
• Program vyhledá nainstalované programy v PC a zjistí dostupné aktualizace
• Poté se vám otevře internetová stránka,kde budou nabídnuté aplikace k aktualizování
  >X Updates Detected..to jsou dostupné aktualizace..
  > klikneme na zelenou šipečku a stáhneme program,poté nainstalujeme jeho aktuální verzi
  > X Beta Updates Detected..tyto aktualizace nestahujte,jedná se o betaverze,které jsou ve vývoji a jsou nestabilní
• Provádíme 1x za 14 dní nebo jednou za měsíc

Jak se chová PC + nový RSIT