VIRY.CZ

prosim Vas o radu. Stale mi hlasi cez Avast nejaky virus.. ale ten sa ho nevie zbavit. A na flaske a aj externom HDD mi vsetky precinky zmenilo na odkazy.. neviem si s tym rady. na disku mam vsetko dolezite veci a nerad by som o ne prisiel
dakujem

Logfile of random's system information tool 1.09 (written by random/random)
Run by Martin at 2011-12-15 12:42:41
Microsoft Windows 7 Ultimate
System drive C: has 13 GB (11%) free of 119 GB
Total RAM: 2047 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:42:58, on 15. 12. 2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Users\Martin\Program Files\DNA\btdna.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATIFDE.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\explorer.exe
C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Martin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Martin\Downloads\RSIT.exe
C:\Program Files\trend micro\Martin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [pdfFactory Pro Dispečer v3] "C:\Windows\system32\spool\DRIVERS\W32X86\3\fppdis3a.exe" /source=HKLM
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\Martin\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [EPSON SX210 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIFDE.EXE /FU "C:\Windows\TEMP\E_SC77C.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [Azmimi] C:\Users\Martin\AppData\Roaming\Azmimi.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GRA32A~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

--
End of file - 8563 bytes

=========Mozilla firefox=========

ProfilePath - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\aetdhnpj.default

prefs.js - "browser.startup.homepage" - "http://www.google.sk/"
prefs.js - "extensions.enabledItems" - "{d5bc46d8-67c7-11dc-8c1d-0097498c2b7a}:1.0.0.1, DTToolbar@toolbarnet.com:1.1.1.0014, {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16, {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.7, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.4"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.4.1&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
npwachk.xpt
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeploytk.dll
NPOFF12.DLL
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
npwachk.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml

C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\aetdhnpj.default\extensions\
DTToolbar@toolbarnet.com
{800b5000-a755-47e1-992b-48a1c1357f07}

C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\aetdhnpj.default\searchplugins\
daemon-search.xml
icqplugin-1.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin.gif
icqplugin.src
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-28 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-11-24 953800]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-09-06 1048888]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [2006-11-02 61440]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-08-13 98304]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2010-01-13 37888]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2010-03-28 149280]
"pdfFactory Pro Dispečer v3"=C:\Windows\system32\spool\DRIVERS\W32X86\3\fppdis3a.exe [2009-12-11 614400]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-18 421888]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-06-15 141624]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-06-08 9267816]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
""= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BitTorrent DNA"=C:\Users\Martin\Program Files\DNA\btdna.exe [2010-02-02 323392]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"EPSON SX210 Series"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIFDE.EXE [2008-11-05 199680]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2011-06-25 399736]
"Azmimi"=C:\Users\Martin\AppData\Roaming\Azmimi.exe [2011-12-15 327680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=3
"NoDriveTypeAutoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=3
"NoDriveTypeAutoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-12-15 12:42:41 ----D---- C:\Program Files\trend micro
2011-12-15 12:42:40 ----D---- C:\rsit
2011-12-15 12:36:33 ----A---- C:\UsbFix.txt
2011-12-15 12:36:32 ----D---- C:\UsbFix
2011-12-15 12:11:20 ----A---- C:\Users\Martin\AppData\Roaming\Azmimi.exe
2011-12-11 18:49:43 ----ASH---- C:\pagefile.sys
2011-11-19 23:49:54 ----D---- C:\Users\Martin\AppData\Roaming\log
2011-11-19 23:49:16 ----D---- C:\ProgramData\Aiseesoft Studio
2011-11-19 23:49:16 ----D---- C:\Program Files\Aiseesoft Studio

======List of files/folders modified in the last 1 month======

2011-12-15 12:42:53 ----D---- C:\Windows\Prefetch
2011-12-15 12:42:44 ----D---- C:\Windows\Temp
2011-12-15 12:42:41 ----RD---- C:\Program Files
2011-12-15 12:39:47 ----D---- C:\Users\Martin\AppData\Roaming\DNA
2011-12-15 12:28:24 ----D---- C:\Windows\System32
2011-12-15 12:28:24 ----D---- C:\Windows\inf
2011-12-15 12:28:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-12-15 12:10:51 ----D---- C:\Users\Martin\AppData\Roaming\Skype
2011-12-15 08:11:13 ----D---- C:\Users\Martin\AppData\Roaming\vlc
2011-12-13 14:19:25 ----D---- C:\Windows\system32\config
2011-12-13 14:07:45 ----SHD---- C:\System Volume Information
2011-12-11 18:50:28 ----D---- C:\Users\Martin\AppData\Roaming\uTorrent
2011-12-09 12:37:10 ----D---- C:\Users\Martin\AppData\Roaming\ApexDC++
2011-12-05 11:41:23 ----D---- C:\Windows\system32\Tasks
2011-12-04 17:36:06 ----D---- C:\Windows\system32\NDF
2011-11-30 11:28:14 ----D---- C:\Users\Martin\AppData\Roaming\dvdcss
2011-11-19 23:49:16 ----HD---- C:\ProgramData

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2009-04-17 44944]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-02-02 691696]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-09-07 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-07-13 1096704]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-14 5172224]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-14 7680]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-07-07 47360]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSGB6.sys [2009-07-13 48128]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2009-07-13 1068032]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 ar8lidfe;ar8lidfe; C:\Windows\system32\drivers\ar8lidfe.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2010-06-08 3112360]
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl.sys [2010-04-19 18432]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2010-04-19 41984]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-14 172032]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 ASLDRService;ASLDR Service; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [2007-02-05 94208]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-09-06 247096]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-06-15 540472]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-10-18 654848]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-04-13 792112]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-01 271920]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]

-----------------EOF-----------------

Zdravim a pekny den preji

Zapojte do PC vsechny USB klice (flashky, ext. disky apod.)

• Stahne a ulozte na plochu UsbFix http://www.viry.cz/forum/viewtopic.php?f=24&t=102308
• Spustte a kliknete na Deletion
• Po dokonceni sem vlozte log, pokud na Vas nevyskoci, najdete jej zde C:\UsbFix.txt

tak uroil som log... ale aj vo wine neico bude lebo vsetko co pripojim k PC tak robi taketo sprostosti.. vsetko spravi na odkazy


############################## | UsbFix 7.059 | [Deletion]

User: Martin (Administrator) # MARTIN-PC [ASUSTeK Computer Inc. F5SL]
Updated 16/09/2011 by El Desaparecido
Started at 14:07:49 | 15/12/2011
Website: http://eldesaparecido.com
Submit your sample: http://eldesaparecido.com/support.php
Contact: contact@eldesaparecido.com

CPU: Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz
CPU 2: Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz
Microsoft Windows 7 Ultimate (6.1.7600 32-Bit) #
Internet Explorer 8.0.7600.16385

Windows Firewall: Enabled
RAM -> 2047 Mb
C:\ (%systemdrive%) -> Fixed drive # 116 Gb (13 Mb free - 11%) [] # NTFS
D:\ -> Fixed drive # 109 Gb (19 Mb free - 17%) [] # NTFS
E:\ -> CD-ROM
H:\ -> CD-ROM
I:\ -> CD-ROM
K:\ -> Fixed drive # 466 Gb (4 Mb free - 1%) [A-DATA NH92] # NTFS

################## | Files # Infected Folders |

Deleted ! C:\Users\Martin\AppData\Roaming\Azmimi.exe
Deleted ! K:\Counter-Strike 1.8.lnk
Deleted ! K:\cs 1.6.lnk
Deleted ! K:\DOkumenty book.lnk
Deleted ! K:\FAST FURIOUS PACK.lnk
Deleted ! K:\Filmy.lnk
Deleted ! K:\Foto.lnk
Deleted ! K:\FOUND.000.lnk
Deleted ! K:\Games.lnk
Deleted ! K:\HUDBA.lnk
Deleted ! K:\moje semsestralky.lnk
Deleted ! K:\PC.lnk
Deleted ! K:\Recycled.lnk
Deleted ! K:\RockNES.lnk
Deleted ! K:\semestralka programko.lnk
Deleted ! K:\Software.lnk
Deleted ! K:\System Volume Information.lnk
Deleted ! K:\Valve.lnk
Deleted ! K:\Windows 7 Loader v1.9.2.lnk
Deleted ! K:\Recycler\470a1245.exe
Deleted ! C:\Users\Martin\AppData\Local\Temp\AutoRun.exe
Deleted ! C:\Users\Martin\AppData\Local\Temp\Setup.exe
Deleted ! C:\$RECYCLE.BIN\S-1-5-21-1140404698-1690009200-3086289969-1000
Deleted ! D:\$RECYCLE.BIN\S-1-5-21-1140404698-1690009200-3086289969-1000
Deleted ! D:\$RECYCLE.BIN\S-1-5-21-3827386137-1700661645-1490242723-1000
Deleted ! K:\$RECYCLE.BIN\S-1-5-21-1031857052-2922072645-3283079212-1000
Deleted ! K:\$RECYCLE.BIN\S-1-5-21-1070985194-1885627832-1203938365-1000
Deleted ! K:\$RECYCLE.BIN\S-1-5-21-1140404698-1690009200-3086289969-1000
Deleted ! K:\$RECYCLE.BIN\S-1-5-21-122446197-4160857460-1285059988-1000
Deleted ! K:\$RECYCLE.BIN\S-1-5-21-1896469101-3304972984-2333297395-1000
Deleted ! K:\$RECYCLE.BIN\S-1-5-21-1944639361-1565045988-173562523-1000
Deleted ! K:\$RECYCLE.BIN\S-1-5-21-2413254018-2001013860-29699308-1001
Deleted ! K:\$RECYCLE.BIN\S-1-5-21-3457403937-3227305705-1278898030-1000
Deleted ! K:\$RECYCLE.BIN\S-1-5-21-3571073996-324569822-117261478-1000
Deleted ! K:\$RECYCLE.BIN\S-1-5-21-3783083510-900421818-3132000276-1000
Deleted ! K:\$RECYCLE.BIN\S-1-5-21-4075547980-1953374655-980366373-1000
Deleted ! K:\$RECYCLE.BIN\S-1-5-21-608365831-3968057728-4241447532-1001
Deleted ! K:\$RECYCLE.BIN\S-1-5-21-61468384-1994959218-451934106-1000
Deleted ! K:\$RECYCLE.BIN\S-1-5-21-910627655-2440512160-1053871798-1003
Not deleted ! K:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665
Deleted ! K:\Recycler\desktop.ini

(!) Temporary files deleted.


################## | Registry |

Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Azmimi
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Adobe Reader Speed Launcher

################## | Mountpoints2 |

Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{cec8a998-104d-11df-a6d9-001fc65d01dc}

################## | Listing |

[15/12/2011 - 14:18:04 | SHD ] C:\$Recycle.Bin
[19/02/2010 - 11:54:30 | D ] C:\Apex
[08/03/2010 - 17:50:46 | D ] C:\ATI
[10/06/2009 - 22:42:20 | N | 24] C:\autoexec.bat
[02/02/2010 - 20:59:18 | D ] C:\Boot
[14/07/2009 - 02:38:58 | RASH | 383562] C:\bootmgr
[02/02/2010 - 20:59:19 | N | 8192] C:\BOOTSECT.BAK
[10/06/2009 - 22:42:20 | N | 10] C:\config.sys
[14/07/2009 - 05:53:55 | SHD ] C:\Documents and Settings
[02/02/2010 - 21:09:26 | N | 203836] C:\grldr
[11/12/2011 - 18:49:42 | ASH | 1610039296] C:\hiberfil.sys
[03/02/2010 - 10:49:56 | RHD ] C:\MSOCache
[11/12/2011 - 18:49:43 | ASH | 2146721792] C:\pagefile.sys
[14/07/2009 - 03:37:05 | D ] C:\PerfLogs
[15/12/2011 - 12:42:41 | D ] C:\Program Files
[19/11/2011 - 23:49:16 | HD ] C:\ProgramData
[02/02/2010 - 21:07:12 | SHD ] C:\Recovery
[15/12/2011 - 12:43:08 | D ] C:\rsit
[13/12/2011 - 14:07:45 | SHD ] C:\System Volume Information
[06/09/2011 - 17:01:50 | D ] C:\UnrealTournament
[15/12/2011 - 14:18:05 | D ] C:\UsbFix
[15/12/2011 - 14:07:51 | A | 4380] C:\UsbFix.txt
[02/02/2010 - 21:07:22 | D ] C:\Users
[23/09/2011 - 18:14:05 | D ] C:\Windows
[02/02/2010 - 21:08:59 | D ] C:\Windows 7 Loader
[02/02/2010 - 21:09:27 | N | 0] C:\winx.ld
[15/12/2011 - 14:18:05 | SHD ] D:\$RECYCLE.BIN
[08/12/2011 - 15:44:12 | D ] D:\driver san francisco
[02/12/2011 - 17:15:35 | D ] D:\Fenomen_CD
[15/12/2011 - 14:03:06 | D ] D:\fotkz
[08/09/2011 - 02:08:12 | N | 13187411585] D:\Kill.the.Irishman.2011.REPACK.1080p.BluRay.DTS.x264-HDMaNiAcS-CZ.mkv
[02/12/2011 - 17:21:05 | D ] D:\Michael Jackson - Immortal (Deluxe Edition) (2011) [FLAC]
[10/12/2011 - 19:29:05 | D ] D:\Mr.Poppers.Penguins.2011.Bluray.1080p.DTSMA.dxva.x264-FraMeSToR
[18/09/2011 - 09:13:13 | D ] D:\Pirates.of.the.Caribbean.On.Stranger.Tides.2011.BluRay.1080p.DTS-HDMA.7.1.x264.En.Cz-FraMeSToR
[19/07/2011 - 17:19:11 | D ] D:\Program Files
[06/07/2011 - 00:42:09 | N | 507016370] D:\Samsung Demo Oceanic Life - x264.1080p.40Mbps-TESTOVACÍ VIDEO.mkv
[02/12/2011 - 18:27:15 | D ] D:\Sex and Submission-Annika (720p)
[16/07/2011 - 18:35:54 | D ] D:\SIMPSONOVI 21-serie.cz 23dilu
[02/02/2010 - 20:24:56 | SHD ] D:\System Volume Information
[11/11/2011 - 08:48:36 | N | 8914898068] D:\The.Eagle.2011.UNRATED.1080p.BluRay.X264-AMIABLE.CZ-LEADERs.mkv
[22/11/2011 - 22:56:27 | D ] D:\WOW
[15/12/2011 - 14:18:04 | SHD ] K:\$RECYCLE.BIN
[22/09/2009 - 15:11:32 | D ] K:\Counter-Strike 1.8
[06/07/2011 - 17:45:13 | D ] K:\cs 1.6
[02/02/2010 - 18:40:50 | D ] K:\DOkumenty book
[06/09/2011 - 20:29:10 | D ] K:\FAST FURIOUS PACK
[07/07/2011 - 10:59:50 | D ] K:\Filmy
[15/12/2011 - 13:21:28 | D ] K:\Foto
[27/09/2010 - 12:32:10 | D ] K:\FOUND.000
[10/12/2011 - 22:40:13 | D ] K:\Games
[27/06/2011 - 16:30:38 | D ] K:\HUDBA
[11/05/2010 - 20:35:56 | D ] K:\moje semsestralky
[06/09/2011 - 16:49:54 | D ] K:\Music
[04/12/2009 - 14:54:38 | D ] K:\PC
[16/07/2010 - 13:22:14 | D ] K:\Recycled
[15/12/2011 - 14:17:57 | HD ] K:\RECYCLER
[24/11/2009 - 14:19:04 | D ] K:\RockNES
[07/07/2011 - 11:01:45 | D ] K:\semestralka programko
[07/07/2011 - 00:03:20 | D ] K:\Software
[20/12/2010 - 14:07:01 | SHD ] K:\System Volume Information
[23/11/2009 - 22:08:10 | D ] K:\Valve
[05/09/2010 - 10:41:34 | D ] K:\Windows 7 Loader v1.9.2
[12/05/2010 - 08:25:04 | N | 162] K:\~$riedavePrcko.docx
[19/04/2010 - 11:47:04 | N | 162] K:\~$skozita.docx

################## | Vaccin |

C:\Autorun.inf -> Vaccine created by UsbFix (TeamXscript)
D:\Autorun.inf -> Vaccine created by UsbFix (TeamXscript)
K:\Autorun.inf -> Vaccine created by UsbFix (TeamXscript)

################## | Upload |

Please send the file: C:\UsbFix_Upload_Me_MARTIN-PC.zip
http://eldesaparecido.com/support.php
Thank you for your contribution.

################## | E.O.F |

Co udelame s temi nelegalnimi W7, pravidla fora hovori jasne

Hop za to sa velmi ospravedlnujem.. to som ani neriesil.. hned som hladal pomoc tu lebo tu vzdy cloveku pomozete..

Pomuzeme, pokud jsou dodrzeny pravidla fora, ktera jste si mel precist nez jste vubec zakladal nove tema

Ale abych nebyl s*ine k novemu navstevnikovi hned poprve, tak to nejak splacnem. Ale priste bude samozrejme pomoc odmitnuta

Pripojte opet vsechny USB disky

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

dakujem

No neni zac, pockam na log z ComboFixu

dufam ze uz bude vsetko v poriadku




ComboFix 11-12-15.02 - Martin . 12. 2011 16:27:47.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.421.1051.18.2047.1424 [GMT 1:00]
Running from: c:\users\Martin\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Martin\AppData\Local\Microsoft\Windows\Temporary Internet Files\udRemove.exe
.
.
((((((((((((((((((((((((( Files Created from 2011-11-15 to 2011-12-15 )))))))))))))))))))))))))))))))
.
.
2011-12-15 15:38 . 2011-12-15 15:39 -------- d-----w- c:\users\Martin\AppData\Local\temp
2011-12-15 15:38 . 2011-12-15 15:38 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-12-15 12:21 . 2011-12-15 15:23 -------- d-----w- c:\users\Martin\AppData\Roaming\vlc
2011-12-15 12:15 . 2011-12-15 12:15 -------- d-----w- c:\users\Martin\AppData\Roaming\DAEMON Tools Lite
2011-12-15 11:42 . 2011-12-15 11:42 -------- d-----w- c:\program files\trend micro
2011-12-15 11:42 . 2011-12-15 11:43 -------- d-----w- C:\rsit
2011-12-15 11:36 . 2011-12-15 13:20 -------- d-----w- C:\UsbFix
2011-11-19 22:49 . 2011-11-19 22:49 -------- d-----w- c:\users\Martin\AppData\Local\Aiseesoft Studio
2011-11-19 22:49 . 2011-11-19 22:49 -------- d-----w- c:\programdata\Aiseesoft Studio
2011-11-19 22:49 . 2011-11-19 22:49 -------- d-----w- c:\program files\Aiseesoft Studio
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-15 13:20 . 2011-12-15 13:20 13807949 ----a-w- C:\UsbFix_Upload_Me_MARTIN-PC.zip
2011-05-08 16:31 . 2011-03-30 21:03 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BitTorrent DNA"="c:\users\Martin\Program Files\DNA\btdna.exe" [2010-02-02 323392]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2011-06-25 399736]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-09-07 2838912]
"ATKMEDIA"="c:\program files\ASUS\ATK Media\DMEDIA.EXE" [2006-11-02 61440]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-08-13 98304]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2010-01-13 37888]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-03-28 149280]
"pdfFactory Pro Dispečer v3"="c:\windows\system32\spool\DRIVERS\W32X86\3\fppdis3a.exe" [2009-12-11 614400]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-18 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-06-15 141624]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-06-08 9267816]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-14 172032]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [2010-09-06 247096]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl.sys [2010-04-19 18432]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-02-02 691696]
S1 aswSP;aswSP; [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [2010-07-07 47360]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSGB6.sys [2009-07-13 48128]
.
.
.
------- Supplementary Scan -------
.
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 158.193.86.1 158.193.86.5
FF - ProfilePath - c:\users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\q7snpjfi.default\
.
- - - - ORPHANS REMOVED - - - -
.
HKCU-Run-Azmimi - c:\users\Martin\AppData\Roaming\Azmimi.exe
HKLM-RunOnce-<NO NAME> - (no file)
AddRemove-Heroes of Might and Magic V - Collectors Edition3.1 - c:\heroes of might and magic v - collectors edition\uninstall.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-1140404698-1690009200-3086289969-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:47,27,a7,3b,77,1e,d4,eb,0d,b0,e0,8f,c8,bf,74,a8,4c,21,14,0e,95,1d,77,
64,6d,d9,b2,a8,32,97,82,ed,fa,39,3a,dc,a4,04,32,b9,de,af,87,85,15,ed,f4,2e,\
"??"=hex:04,4a,a2,4e,9e,64,e2,25,97,43,24,03,51,55,6d,e8
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-12-15 16:42:32
ComboFix-quarantined-files.txt 2011-12-15 15:42
.
Pre-Run: 12 905 590 784 bytes free
Post-Run: 14 702 026 752 bytes free
.
- - End Of File - - 1941E7F8A47FAB8199B1269159C87B90

Pripojte opet vsechny USB disky

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  KillAll::
  
  Folder::
  K:\Windows 7 Loader v1.9.2
  C:\Windows 7 Loader
  K:\Recycler
  c:\program files\ICQ6Toolbar
  
  Driver::
  ICQ Service
  
  Registry::
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "BitTorrent DNA"=-
  "DAEMON Tools Lite"=-
  "uTorrent"=-
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "Adobe ARM"=-
  "NeroFilterCheck"=-
  "StartCCC"=-
  "WinampAgent"=-
  "SunJavaUpdateSched"=-
  "QuickTime Task"=-
  "iTunesHelper"=-
  
  RegNull::
  [HKEY_USERS\S-1-5-21-1140404698-1690009200-3086289969-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
  
  RegLock::
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  
  Reboot::

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

dakujem.. ten HDD je uz vyrieseny uz je vsetko ako to ma.. a cez sviatky caka book uplna ocista.. tak dakujem za vas cas..

Ja bych rad jeste videl ten posledni log z ComboFixu a pak pouklizime

ma byt pripojeny aj ten HDD?

Udelal krok co jsem psal zde http://www.viry.cz/forum/viewtopic.php? ... 7#p1065047 Pokud ne, tak jej udelejte

urobil som a aj win nabehol v pohode ale teraz mi nic nechce spustit a vyhodi tabulku
Vyskytol sa pokus o nepovolenu opreaciu s klucom dotobazy Registry, ktory bol oznaceny na odstranenie