VIRY.CZ

Dobrý den,od úterý se mi z nějakého důvodu začal sekat zvuk a obraz vždy asi tak na sekundu,ale pak se ihned zase rozjedou.Dělá mi to jak u her,tak u přehrávání hudby,dokonce i přehrávání videí z youtube.Jinak při tom zaseknutí to vždy udělá takový elektronický vrčení,nevím jak ten zvuk jinak vyjádřit. Předem díky za pomoc.
Přikládám log z RSIT:

Logfile of random's system information tool 1.09 (written by random/random)
Run by The Killer at 2012-01-08 13:09:35
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 29 GB (12%) free of 238 GB
Total RAM: 2047 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:19:11, on 8.1.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
C:\Program Files\Tunngle\TnglCtrl.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
C:\Program Files\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\ASUS\ATK Hotkey\HControl.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Steam\steam.exe
C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe
C:\Program Files\Stardock\ObjectDockPlus2\ObjectDock.exe
C:\Program Files\ASUS\ATK Hotkey\WDC.exe
C:\Program Files\Stardock\ObjectDockPlus2\ObjectDockTray.exe
C:\Documents and Settings\The Killer\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\The Killer\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\The Killer\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\The Killer\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\The Killer\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\The Killer\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\The Killer.exe
C:\WINDOWS\system32\taskmgr.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/#utm_source=icq&u ... um=generic
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: 127.0.0.2 mangler1.generals.ea.com
O1 - Hosts: 127.0.0.2 servserv.generals.ea.com
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [AmIcoSinglun] "C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe"
O4 - HKLM\..\Run: [Wireless Console 3] "C:\Program Files\ASUS\Wireless Console 3\wcourier.exe"
O4 - HKLM\..\Run: [MsgTranAgt] "C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe"
O4 - HKLM\..\Run: [HControlUser] "C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe"
O4 - HKLM\..\Run: [ATKHOTKEY] "C:\Program Files\ASUS\ATK Hotkey\HControl.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Xvid] "C:\Program Files\Xvid\CheckUpdate.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [DontSleep] "C:\Documents and Settings\The Killer\Plocha\DontSleep.exe" -bg
O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDockPlus2\ObjectDock.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 2756786250
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - Winlogon Notify: spba - C:\Program Files\Common Files\SPBA\homefus2.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: ObjectDockShellExt - {1984D045-52CF-49cd-DB77-08F378FEA4DB} - C:\Program Files\Stardock\ObjectDockPlus2\ODMenu.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files\Tunngle\TnglCtrl.exe

--
End of file - 10530 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1417001333-308236825-507921405-1005Core.job
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1417001333-308236825-507921405-1005UA.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1417001333-308236825-507921405-1005Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1417001333-308236825-507921405-1005UA.job
C:\WINDOWS\tasks\ZeoUpdater.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\The Killer\Data aplikací\Mozilla\Firefox\Profiles\jmzo92w6.default

prefs.js - "browser.startup.homepage" - "http://www.facebook.com/home.php?ref=hp"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=c:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-07-07 1152776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-18 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-11-21 1054520]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-07-07 1152776]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun"=C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe [2009-04-09 237568]
"Wireless Console 3"=C:\Program Files\ASUS\Wireless Console 3\wcourier.exe [2009-04-17 1593344]
"MsgTranAgt"=C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe [2008-08-18 117304]
"HControlUser"=C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [2008-08-18 98304]
"ATKHOTKEY"=C:\Program Files\ASUS\ATK Hotkey\HControl.exe [2009-03-20 174648]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-11-16 2054360]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-01-07 13880424]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2011-01-07 111208]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-11-04 1753192]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2011-11-01 59240]
"UserFaultCheck"=C:\WINDOWS\system32\dumprep 0 -u []
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2011-12-05 20065384]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2011-12-24 460872]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Xvid"=C:\Program Files\Xvid\CheckUpdate.exe [2011-01-17 8192]
"Steam"=C:\Program Files\Steam\steam.exe [2011-11-18 1242448]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]
"DontSleep"=C:\Documents and Settings\The Killer\Plocha\DontSleep.exe -bg []
"KiesPDLR"=C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2011-09-29 20880]

C:\Documents and Settings\The Killer\Nabídka Start\Programy\Po spuštění
Stardock ObjectDock.lnk - C:\Program Files\Stardock\ObjectDockPlus2\ObjectDock.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\spba]
C:\Program Files\Common Files\SPBA\homefus2.dll [2008-03-25 567560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
ObjectDockShellExt - {1984D045-52CF-49cd-DB77-08F378FEA4DB} - C:\Program Files\Stardock\ObjectDockPlus2\ODMenu.dll [2010-03-24 511344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WRConsumerService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WRConsumerService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\BitTorrent\BitTorrent.exe"="C:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Microsoft Office\Office14\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office14\GROOVE.EXE:*:Enabled:Microsoft SharePoint Workspace"
"C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\WINDOWS\system32\muzapp.exe"="C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
"C:\Program Files\Warcraft III\gproxy.exe"="C:\Program Files\Warcraft III\gproxy.exe:*:Enabled:gproxy"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"C:\Hry\Heroes of Might and Magic IV\heroes4c.exe"="C:\Hry\Heroes of Might and Magic IV\heroes4c.exe:*:Enabled:Heroes of Might and Magic® IV: Winds of War™"
"C:\Program Files\Counter-Strike 1.6\hl.exe"="C:\Program Files\Counter-Strike 1.6\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Warcraft III\war3.exe"="C:\Program Files\Warcraft III\war3.exe:*:Enabled:Warcraft III"
"C:\WINDOWS\system32\java.exe"="C:\WINDOWS\system32\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe"="C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe:LocalSubNet:Enabled:Instalace zařízení HP"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe"="C:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"C:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe"="C:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"C:\Documents and Settings\The Killer\Local Settings\Data aplikací\Facebook\Video\Skype\FacebookVideoCalling.exe"="C:\Documents and Settings\The Killer\Local Settings\Data aplikací\Facebook\Video\Skype\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Documents and Settings\The Killer\Local Settings\Data aplikací\vghd\bin\Virtuagirl_Downloader.exe"="C:\Documents and Settings\The Killer\Local Settings\Data aplikací\vghd\bin\Virtuagirl_Downloader.exe:*:Enabled:DLManager"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\Steam\steamapps\common\dota 2 beta\dota.exe"="C:\Program Files\Steam\steamapps\common\dota 2 beta\dota.exe:*:Enabled:Dota 2"
"C:\Program Files\Steam\steamapps\dota2cz\day of defeat source\hl2.exe"="C:\Program Files\Steam\steamapps\dota2cz\day of defeat source\hl2.exe:*:Enabled:Day of Defeat: Source"
"C:\Program Files\Sierra\FEAR\FEAR.exe"="C:\Program Files\Sierra\FEAR\FEAR.exe:*:Enabled:FEAR"
"C:\Program Files\Steam\steamapps\common\eufloria\Eufloria.exe"="C:\Program Files\Steam\steamapps\common\eufloria\Eufloria.exe:*:Enabled:Eufloria"
"C:\Program Files\Steam\steamapps\common\Sid Meier's Civilization IV\Civilization4.exe"="C:\Program Files\Steam\steamapps\common\Sid Meier's Civilization IV\Civilization4.exe:*:Enabled:Sid Meier's Civilization IV"
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe"="C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\autoupdate-windows.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avic.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bip_camera1.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DTLite.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\eccenter1.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\googleearth.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kies.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\minicalc.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\miniconvert.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\pckeeper.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sptdinst-x86.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\statsreader.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tosbtmng.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tosbtproc1.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\uninst.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\uninstall.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\usrguide.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wirelessftp1.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=l3codecp.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"vidc.ffds"=ffdshow.ax
"msacm.ac3filter"=ac3filter.acm
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-01-08 13:09:36 ----D---- C:\Program Files\trend micro
2012-01-08 13:09:35 ----D---- C:\rsit
2012-01-08 02:07:59 ----D---- C:\Documents and Settings\The Killer\Data aplikací\Malwarebytes
2012-01-08 02:07:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2012-01-08 02:07:11 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2012-01-08 02:07:11 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2012-01-07 14:17:13 ----D---- C:\Program Files\Intel Desktop Board
2012-01-07 14:13:50 ----D---- C:\Program Files\Intel
2012-01-07 14:13:50 ----A---- C:\WINDOWS\system32\CSVer.dll
2012-01-07 14:01:40 ----D---- C:\Intel
2012-01-06 00:16:13 ----A---- C:\WINDOWS\system32\RtkCoLDRXP.dll
2012-01-06 00:16:13 ----A---- C:\WINDOWS\system32\RtkCoInstIIXP.dll
2012-01-04 15:23:17 ----D---- C:\Program Files\XLink Kai
2011-12-31 19:26:51 ----D---- C:\WINDOWS\system32\appmgmt
2011-12-31 15:07:31 ----D---- C:\Downloads
2011-12-26 22:22:29 ----D---- C:\Down
2011-12-26 22:22:07 ----D---- C:\Perfect World Entertainment
2011-12-25 20:42:31 ----AH---- C:\WINDOWS\system32\HsInfo.dat
2011-12-25 14:50:19 ----A---- C:\WINDOWS\system32\Winstr.dll
2011-12-25 14:50:19 ----A---- C:\WINDOWS\system32\Winsdec.dll
2011-12-25 14:50:19 ----A---- C:\WINDOWS\system32\Winplay.dll
2011-12-25 14:50:19 ----A---- C:\WINDOWS\system32\Edec.dll
2011-12-25 14:50:19 ----A---- C:\WINDOWS\system32\Dec130.dll
2011-12-25 14:50:18 ----D---- C:\Program Files\Core Design
2011-12-25 14:50:10 ----A---- C:\WINDOWS\IsUninst.exe
2011-12-24 02:09:54 ----D---- C:\Documents and Settings\The Killer\Data aplikací\AppClient
2011-12-24 02:07:31 ----D---- C:\Program Files\VDMSound
2011-12-23 00:33:16 ----D---- C:\Program Files\Sierra
2011-12-22 18:45:26 ----D---- C:\Program Files\DOSBox-0.74
2011-12-22 17:04:10 ----D---- C:\StealthBastard
2011-12-18 20:42:50 ----A---- C:\WINDOWS\system32\EuEpmGdi.dll
2011-12-18 20:42:49 ----A---- C:\WINDOWS\system32\setupempdrv03.exe
2011-12-18 20:42:49 ----A---- C:\WINDOWS\system32\EuGdiDrv.sys
2011-12-18 20:42:49 ----A---- C:\WINDOWS\system32\epmntdrv.sys
2011-12-18 20:42:49 ----A---- C:\WINDOWS\system32\BootMan.exe
2011-12-18 20:42:35 ----D---- C:\Program Files\EASEUS
2011-12-16 06:58:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2639417$
2011-12-16 06:55:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2011-12-16 06:50:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2633952$
2011-12-16 06:50:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2011-12-16 06:47:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2011-12-16 06:46:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2011-12-16 06:45:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2633171$
2011-12-15 21:01:00 ----D---- C:\DoW2
2011-12-15 13:39:10 ----A---- C:\WINDOWS\PowerReg.dat
2011-12-15 13:24:16 ----D---- C:\Program Files\Tomb Raider - Legend
2011-12-15 11:08:11 ----D---- C:\Games
2011-12-14 23:04:51 ----A---- C:\WINDOWS\StarBurn.INI
2011-12-14 22:57:19 ----D---- C:\StarBurnPortable
2011-12-14 22:50:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\Canneverbe Limited
2011-12-14 22:50:54 ----D---- C:\Documents and Settings\The Killer\Data aplikací\Canneverbe Limited
2011-12-14 22:50:28 ----D---- C:\Program Files\CDBurnerXP
2011-12-11 18:35:26 ----D---- C:\Program Files\QuickTime
2011-12-11 18:21:25 ----D---- C:\Program Files\Bonjour
2011-12-11 15:40:51 ----A---- C:\WINDOWS\FinalAlert2.ini
2011-12-11 15:39:23 ----D---- C:\Program Files\FinalAlert 2 Yuri's Revenge
2011-12-09 19:53:31 ----A---- C:\WINDOWS\uninst.exe

======List of files/folders modified in the last 1 month======

2012-01-08 13:11:22 ----D---- C:\WINDOWS\Temp
2012-01-08 13:09:48 ----D---- C:\WINDOWS\Prefetch
2012-01-08 13:09:36 ----RD---- C:\Program Files
2012-01-08 13:03:59 ----D---- C:\WINDOWS\system32\CatRoot2
2012-01-08 13:01:26 ----D---- C:\WINDOWS\system32\inetsrv
2012-01-08 13:01:08 ----D---- C:\Program Files\Steam
2012-01-08 12:56:55 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-01-08 12:52:03 ----SHD---- C:\WINDOWS\Installer
2012-01-08 12:47:43 ----DC---- C:\WINDOWS\system32\DRVSTORE
2012-01-08 12:47:43 ----D---- C:\WINDOWS\system32\drivers
2012-01-08 12:47:43 ----D---- C:\WINDOWS\system32
2012-01-08 12:27:00 ----D---- C:\WINDOWS
2012-01-08 02:03:48 ----D---- C:\Documents and Settings\The Killer\Data aplikací\DAEMON Tools Lite
2012-01-08 02:03:46 ----D---- C:\Documents and Settings\The Killer\Data aplikací\BitTorrent
2012-01-08 02:02:58 ----D---- C:\WINDOWS\Minidump
2012-01-08 02:02:58 ----D---- C:\WINDOWS\Logs
2012-01-08 02:02:58 ----D---- C:\WINDOWS\Debug
2012-01-08 00:50:31 ----D---- C:\Program Files\Warcraft III
2012-01-07 21:51:38 ----D---- C:\Program Files\Mozilla Firefox
2012-01-07 21:50:13 ----D---- C:\Documents and Settings\The Killer\Data aplikací\.minecraft
2012-01-07 14:15:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-01-07 14:14:59 ----HD---- C:\WINDOWS\inf
2012-01-07 14:11:31 ----D---- C:\Program Files\SystemRequirementsLab
2012-01-07 02:14:47 ----D---- C:\WINDOWS\system32\RTCOM
2012-01-06 13:19:27 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2012-01-06 08:41:03 ----AT---- C:\WINDOWS\system32\SIntfNT.dll
2012-01-06 08:41:03 ----AT---- C:\WINDOWS\system32\SIntf32.dll
2012-01-06 08:41:02 ----AT---- C:\WINDOWS\system32\SIntf16.dll
2012-01-06 08:27:51 ----D---- C:\Program Files\Counter-Strike 1.6
2012-01-04 15:56:32 ----D---- C:\Program Files\Tunngle
2012-01-04 15:56:31 ----RSD---- C:\WINDOWS\Fonts
2012-01-04 15:47:43 ----D---- C:\WINDOWS\Network Diagnostic
2012-01-03 04:10:16 ----RSD---- C:\WINDOWS\assembly
2012-01-03 04:10:16 ----D---- C:\WINDOWS\Microsoft.NET
2012-01-03 03:13:55 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-01-03 03:13:18 ----D---- C:\WINDOWS\WinSxS
2012-01-03 00:40:10 ----D---- C:\Program Files\JDownloader
2012-01-02 00:53:20 ----D---- C:\Documents and Settings\The Killer\Data aplikací\TS3Client
2011-12-31 20:20:08 ----D---- C:\Program Files\Common Files\Apple
2011-12-29 19:46:10 ----D---- C:\Program Files\Capsule
2011-12-28 22:00:40 ----D---- C:\Documents and Settings\The Killer\Data aplikací\Vso
2011-12-28 22:00:38 ----A---- C:\Documents and Settings\The Killer\Data aplikací\inst.exe
2011-12-28 21:58:11 ----D---- C:\Program Files\Amnesia - The Dark Descent
2011-12-26 22:21:09 ----D---- C:\WINDOWS\system32\DirectX
2011-12-25 13:32:47 ----HD---- C:\Program Files\InstallShield Installation Information
2011-12-25 09:29:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\TrackMania
2011-12-24 02:06:06 ----A---- C:\WINDOWS\system.ini
2011-12-24 01:53:13 ----D---- C:\Program Files\CCleaner
2011-12-20 15:43:39 ----D---- C:\Program Files\Common Files\Steam
2011-12-16 16:22:38 ----D---- C:\Program Files\Soldier of Fortune II - Double Helix
2011-12-16 16:22:34 ----A---- C:\WINDOWS\Sof2.INI
2011-12-16 06:59:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-12-16 06:54:49 ----D---- C:\Program Files\Internet Explorer
2011-12-16 06:54:03 ----HD---- C:\WINDOWS\$hf_mig$
2011-12-16 06:51:10 ----A---- C:\WINDOWS\system32\MRT.exe
2011-12-15 20:10:07 ----D---- C:\WINDOWS\Registration
2011-12-15 13:41:56 ----D---- C:\Program Files\Ubi Soft
2011-12-15 07:12:13 ----D---- C:\Hry
2011-12-14 15:31:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2011-12-14 15:31:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2011-12-14 15:30:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2412687$
2011-12-14 15:30:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2011-12-14 15:30:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2011-12-14 15:30:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2011-12-14 15:30:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2524375$
2011-12-14 15:30:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2510581$
2011-12-14 15:30:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2544521$
2011-12-14 15:30:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2555917$
2011-12-14 15:30:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-12-14 15:30:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2567053$
2011-12-14 15:30:26 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2011-12-14 15:30:24 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2011-12-14 15:30:22 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2011-12-14 15:30:19 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2011-12-14 15:30:15 ----HDC---- C:\WINDOWS\$NtUninstallKB952011$
2011-12-14 15:30:13 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2011-12-14 15:30:13 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2011-12-14 15:30:08 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2011-12-14 15:30:07 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2011-12-14 15:30:06 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2011-12-14 15:29:59 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2011-12-14 15:29:58 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2011-12-14 15:29:56 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2011-12-14 15:29:53 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2011-12-14 15:29:46 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2011-12-14 15:29:46 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2011-12-14 15:29:41 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2011-12-14 15:29:38 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2011-12-14 15:29:35 ----HDC---- C:\WINDOWS\$NtUninstallWdf01005$
2011-12-14 15:29:35 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2011-12-14 15:29:26 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2011-12-14 15:29:26 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2011-12-14 13:13:02 ----D---- C:\Program Files\Common Files\InstallShield
2011-12-13 11:01:00 ----A---- C:\WINDOWS\RtlExUpd.dll
2011-12-11 21:15:51 ----D---- C:\Documents and Settings\The Killer\Data aplikací\Command & Conquer 3 Tiberium Wars
2011-12-11 18:46:22 ----D---- C:\Documents and Settings\The Killer\Data aplikací\Apple Computer
2011-12-10 01:29:19 ----D---- C:\Documents and Settings\The Killer\Data aplikací\ManyCam
2011-12-10 00:05:56 ----D---- C:\Program Files\Realtek
2011-12-09 19:53:37 ----D---- C:\Program Files\LucasArts

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2011-08-08 443448]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-09-15 232512]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2009-11-16 55768]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 Tosrfcom;Bluetooth RFCOMM; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2007-05-24 64000]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-11-16 116520]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2009-11-16 135048]
R2 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2010-06-25 35088]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2009-02-25 1344224]
R3 ASNDIS5;ASNDIS5 Protocol Driver; \??\C:\PROGRA~1\ASUS\WIRELE~1\ASNDIS5.SYS []
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2009-06-19 33096]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2011-12-13 7069288]
R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver; C:\WINDOWS\system32\DRIVERS\ManyCam.sys [2008-01-14 21632]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2007-08-28 5760]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-01-08 9888672]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2010-11-12 100456]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2010-07-06 234392]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2008-08-11 1752704]
R3 TcUsb;TC USB Kernel Driver; C:\WINDOWS\System32\Drivers\tcusb.sys [2008-01-30 50576]
R3 tosporte;Bluetooth COM Port; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2006-10-10 41600]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys []
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S2 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys []
S3 a6mw8u73;a6mw8u73; C:\WINDOWS\system32\drivers\a6mw8u73.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 AmUStor;AM USB Stroage Driver; C:\WINDOWS\system32\drivers\AmUStor.SYS [2009-05-08 25600]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\WINDOWS\System32\Drivers\ssadadb.sys [2010-12-21 30312]
S3 bfastfao;bfastfao; \??\C:\DOCUME~1\THEKIL~1\LOCALS~1\Temp\bfastfao.sys []
S3 Bridge;Most MAC; C:\WINDOWS\system32\DRIVERS\bridge.sys [2008-04-13 71552]
S3 BridgeMP;Miniport mostu MAC; C:\WINDOWS\system32\DRIVERS\bridge.sys [2008-04-13 71552]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 cpudrv;cpudrv; \??\C:\Program Files\SystemRequirementsLab\cpudrv.sys []
S3 dgderdrv;dgderdrv; C:\WINDOWS\System32\drivers\dgderdrv.sys [2011-09-16 20032]
S3 EagleXNt;EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 epmntdrv;epmntdrv; \??\C:\WINDOWS\system32\epmntdrv.sys []
S3 EuGdiDrv;EuGdiDrv; \??\C:\WINDOWS\system32\EuGdiDrv.sys []
S3 fileHiders;fileHiders; C:\WINDOWS\system32\DRIVERS\fileHiders.sys [2011-08-10 26392]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files\Garena Classic\safedrv.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
S3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2011-09-11 47360]
S3 PsSdk41;PsSdk41; \??\C:\WINDOWS\system32\Drivers\pssdk41.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\ssadbus.sys [2011-06-02 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\WINDOWS\system32\DRIVERS\ssadmdfl.sys [2011-06-02 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\WINDOWS\system32\DRIVERS\ssadmdm.sys [2011-06-02 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\WINDOWS\system32\DRIVERS\ssadserd.sys [2011-06-02 114280]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\sscdbus.sys [2010-12-21 104648]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys [2010-12-21 14920]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\WINDOWS\system32\DRIVERS\sscdmdm.sys [2010-12-21 132424]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 tosrfbd;Bluetooth RFBUS; C:\WINDOWS\system32\DRIVERS\tosrfbd.sys [2007-04-24 113920]
S3 tosrfbnp;Bluetooth RFBNEP; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2006-11-20 36480]
S3 Tosrfhid;Bluetooth RFHID; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2007-03-01 73728]
S3 tosrfnds;Bluetooth Personal Area Network; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-07 18612]
S3 TosRfSnd;Bluetooth Audio; C:\WINDOWS\system32\drivers\tosrfsnd.sys [2007-01-22 53376]
S3 tosrfusb;Bluetooth USB Controller; C:\WINDOWS\system32\DRIVERS\tosrfusb.sys [2007-06-11 41856]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2011-05-10 42496]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 XDva391;XDva391; \??\C:\WINDOWS\system32\XDva391.sys []
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-11-16 735960]
R2 IISADMIN;Správa služby IIS; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-24 652872]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2011-01-07 156776]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-10-27 75136]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [2011-09-27 1526080]
R2 TunngleService;TunngleService; C:\Program Files\Tunngle\TnglCtrl.exe [2011-08-09 741224]
R2 W3SVC;Publikování na webu; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-08-08 136176]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-11-16 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-08-08 136176]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-02-08 136120]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-10-03 153376]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; c:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
S3 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-12-08 419624]
S3 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2011-10-24 55144]
S4 BBSvc;Bing Bar Update Service; C:\Program Files\Microsoft\BingBar\BBSvc.EXE [2011-07-07 195336]
S4 BBUpdate;BBUpdate; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [2011-06-15 249648]
S4 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
S4 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-11-21 247608]
S4 PCKeeperService;PCKeeper Worker Service; C:\Program Files\ZeoBIT\PCKeeper\ZeoService.exe [2011-08-10 578368]
S4 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2010-06-25 117264]
S4 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-02-25 125048]
S4 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]

-----------------EOF-----------------

Zdravím!
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Program Files\ICQ6Toolbar
C:\Program Files\Google\Update
C:\Program Files\Google\Common\Google Updater
C:\WINDOWS\system32\XDva391.sys

:services
gupdate
gupdatem
gusvc
XDva391
ICQ Service

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{855F3B16-6D32-4FE6-8A56-BBB695989046}"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"KernelFaultCheck"=-
"UserFaultCheck"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]
[Resethosts]

a klikněte na MoveIt!. PC bude restartován.

Rudy díky moc,teď už to ten 1 sekundovej zvuk nedělá,ještě že exitistuje takovejhle server,který pomůže. Ještě jednou mockrát děkuju

Nemáte zač!

tak zrada,zvuk se zase vrátil,nějaké další rady?

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

ComboFix 12-01-07.03 - The Killer 08.01.2012 21:16:38.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2047.1242 [GMT 1:00]
Spuštěný z: c:\documents and settings\The Killer\Plocha\ComboFix.exe
AV: ESET Smart Security 4.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *Disabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\The Killer\WINDOWS
c:\program files\ESET\MiNODLogin
c:\program files\ESET\MiNODLogin\MiNODLoginUninst.exe
c:\program files\ESET\MiNODLogin\servidores.xml
c:\program files\ZeoBIT
c:\program files\ZeoBIT\PCKeeper\DrvInstaller.exe
c:\program files\ZeoBIT\PCKeeper\fileHiders.inf
c:\program files\ZeoBIT\PCKeeper\fileHiders.sys
c:\program files\ZeoBIT\PCKeeper\PCKeeper.exe
c:\program files\ZeoBIT\PCKeeper\ZeoService.exe
c:\program files\ZeoBIT\PCKeeper\ZeoShellExt32.dll
c:\program files\ZeoBIT\PCKeeper\ZeoUpdater.exe
c:\program files\ZeoBIT\PCKeeper\ZeoUpdater.exe.manifest
c:\windows\system32\Cache
c:\windows\system32\system32
c:\windows\system32\system32\3DAudio.ax
c:\windows\system32\system32\avrt.dll
c:\windows\system32\system32\cis-2.4.dll
c:\windows\system32\system32\issacapi_bs-2.3.dll
c:\windows\system32\system32\issacapi_pe-2.3.dll
c:\windows\system32\system32\issacapi_se-2.3.dll
c:\windows\system32\system32\MACXMLProto.dll
c:\windows\system32\system32\MaDRM.dll
c:\windows\system32\system32\MaJGUILib.dll
c:\windows\system32\system32\MAMACExtract.dll
c:\windows\system32\system32\MASetupCleaner.exe
c:\windows\system32\system32\MaXMLProto.dll
c:\windows\system32\system32\mfplat.dll
c:\windows\system32\system32\MK_Lyric.dll
c:\windows\system32\system32\MSCLib.dll
c:\windows\system32\system32\MSFLib.dll
c:\windows\system32\system32\MSLUR71.dll
c:\windows\system32\system32\msvcp60.dll
c:\windows\system32\system32\MTTELECHIP.dll
c:\windows\system32\system32\MTXSYNCICON.dll
c:\windows\system32\system32\muzaf1.dll
c:\windows\system32\system32\muzapp.dll
c:\windows\system32\system32\muzapp.exe
c:\windows\system32\system32\muzdecode.ax
c:\windows\system32\system32\muzeffect.ax
c:\windows\system32\system32\muzmp4sp.ax
c:\windows\system32\system32\muzmpgsp.ax
c:\windows\system32\system32\muzoggsp.ax
c:\windows\system32\system32\muzwmts.dll
c:\windows\system32\system32\psapi.dll
c:\windows\system32\TZLog.log
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_PCKeeperService
-------\Legacy_PCKeeperService
-------\Service_PCKeeperService
-------\Service_PCKeeperService
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-12-08 do 2012-01-08 )))))))))))))))))))))))))))))))
.
.
2012-01-08 18:32 . 2012-01-08 18:32 -------- d-----w- C:\_OTM
2012-01-08 14:03 . 2012-01-08 14:03 -------- d-----w- c:\program files\Lavalys
2012-01-08 12:09 . 2012-01-08 12:19 -------- d-----w- c:\program files\trend micro
2012-01-08 12:09 . 2012-01-08 12:19 -------- d-----w- C:\rsit
2012-01-08 01:07 . 2012-01-08 01:07 -------- d-----w- c:\documents and settings\The Killer\Data aplikací\Malwarebytes
2012-01-08 01:07 . 2012-01-08 01:07 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2012-01-07 20:51 . 2012-01-07 20:51 626688 ----a-w- c:\program files\Mozilla Firefox\msvcr80.dll
2012-01-07 20:51 . 2012-01-07 20:51 548864 ----a-w- c:\program files\Mozilla Firefox\msvcp80.dll
2012-01-07 20:51 . 2012-01-07 20:51 479232 ----a-w- c:\program files\Mozilla Firefox\msvcm80.dll
2012-01-07 20:51 . 2012-01-07 20:51 43992 ----a-w- c:\program files\Mozilla Firefox\mozutils.dll
2012-01-07 13:17 . 2012-01-07 13:17 -------- d-----w- c:\program files\Intel Desktop Board
2012-01-07 13:13 . 2012-01-07 13:13 -------- d-----w- c:\program files\Intel
2012-01-07 13:13 . 2011-02-28 07:09 53248 ----a-w- c:\windows\system32\CSVer.dll
2012-01-07 13:01 . 2012-01-07 13:01 -------- d-----w- C:\Intel
2012-01-05 23:16 . 2011-06-30 15:15 891496 ----a-w- c:\windows\system32\RTSndMgr.CPL
2012-01-05 23:16 . 2011-12-12 16:20 64616 ----a-w- c:\windows\system32\RtkCoInstIIXP.dll
2012-01-05 23:16 . 2011-11-22 15:28 11368 ----a-w- c:\windows\system32\RtkCoLDRXP.dll
2012-01-04 14:23 . 2012-01-04 14:23 3046912 ----a-r- c:\documents and settings\The Killer\Data aplikací\Microsoft\Installer\{8494AA21-D821-40E0-93DC-6F8CC1194FBC}\kaiEngine.exe
2012-01-04 14:23 . 2012-01-04 14:23 -------- d-----w- c:\program files\XLink Kai
2011-12-30 20:43 . 2011-12-30 20:43 -------- d-----w- c:\documents and settings\The Killer\Local Settings\Data aplikací\My Games
2011-12-26 21:22 . 2011-12-26 21:22 -------- d-----w- C:\Down
2011-12-26 21:22 . 2011-12-26 21:22 -------- d-----w- C:\Perfect World Entertainment
2011-12-25 13:50 . 1997-08-14 15:31 98816 ----a-w- c:\windows\system32\Dec130.dll
2011-12-25 13:50 . 1997-08-14 15:24 89600 ----a-w- c:\windows\system32\Winsdec.dll
2011-12-25 13:50 . 1997-08-14 15:17 117248 ----a-w- c:\windows\system32\Edec.dll
2011-12-25 13:50 . 1997-08-14 15:06 60416 ----a-w- c:\windows\system32\Winplay.dll
2011-12-25 13:50 . 1997-08-14 10:10 80896 ----a-w- c:\windows\system32\Winstr.dll
2011-12-25 13:50 . 2011-12-25 14:47 -------- d-----w- c:\program files\Core Design
2011-12-25 13:50 . 1998-10-02 18:00 327168 ----a-w- c:\windows\IsUninst.exe
2011-12-24 01:09 . 2011-12-29 13:13 -------- d-----w- c:\documents and settings\The Killer\Data aplikací\AppClient
2011-12-24 01:09 . 2011-12-29 13:13 -------- d-----w- c:\documents and settings\The Killer\Local Settings\Data aplikací\Deployment
2011-12-24 01:07 . 2011-12-24 01:07 -------- d-----w- c:\program files\VDMSound
2011-12-22 23:33 . 2011-12-22 23:33 -------- d-----w- c:\program files\Sierra
2011-12-22 17:45 . 2011-12-22 17:45 -------- d-----w- c:\documents and settings\The Killer\Local Settings\Data aplikací\DOSBox
2011-12-22 17:45 . 2011-12-25 17:22 -------- d-----w- c:\program files\DOSBox-0.74
2011-12-22 16:04 . 2011-12-22 23:30 -------- d-----w- C:\StealthBastard
2011-12-18 19:42 . 2011-07-29 12:54 19840 ----a-w- c:\windows\system32\EuEpmGdi.dll
2011-12-18 19:42 . 2011-09-09 17:23 2469760 ----a-w- c:\windows\system32\BootMan.exe
2011-12-18 19:42 . 2011-07-29 12:54 86408 ----a-w- c:\windows\system32\setupempdrv03.exe
2011-12-18 19:42 . 2011-07-29 12:54 8456 ----a-w- c:\windows\system32\EuGdiDrv.sys
2011-12-18 19:42 . 2011-07-29 12:54 13192 ----a-w- c:\windows\system32\epmntdrv.sys
2011-12-18 19:42 . 2011-12-18 19:42 -------- d-----w- c:\program files\EASEUS
2011-12-15 20:01 . 2011-12-15 21:59 -------- d-----w- C:\DoW2
2011-12-15 12:29 . 2002-12-05 13:12 692224 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2011-12-15 12:29 . 2002-12-05 13:10 155648 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2011-12-15 12:29 . 2002-12-02 14:22 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2011-12-15 12:29 . 2002-12-02 12:33 57344 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2011-12-15 12:29 . 2002-12-02 12:33 237568 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2011-12-15 12:29 . 2011-12-15 12:29 163972 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2011-12-15 12:29 . 2011-12-15 12:29 282756 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2011-12-15 12:24 . 2011-12-15 12:26 -------- d-----w- c:\program files\Tomb Raider - Legend
2011-12-15 10:08 . 2011-12-15 10:08 -------- d-----w- C:\Games
2011-12-14 21:57 . 2011-12-14 21:57 -------- d-----w- C:\StarBurnPortable
2011-12-14 21:50 . 2011-12-14 21:50 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Canneverbe Limited
2011-12-14 21:50 . 2011-12-14 21:50 -------- d-----w- c:\documents and settings\The Killer\Data aplikací\Canneverbe Limited
2011-12-14 21:50 . 2011-12-16 06:06 -------- d-----w- c:\program files\CDBurnerXP
2011-12-11 17:36 . 2011-12-11 17:36 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2011-12-11 17:36 . 2011-12-11 17:36 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2011-12-11 17:36 . 2011-12-11 17:36 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2011-12-11 17:36 . 2011-12-11 17:36 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2011-12-11 17:36 . 2011-12-11 17:36 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2011-12-11 17:36 . 2011-12-11 17:36 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2011-12-11 17:36 . 2011-12-11 17:36 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2011-12-11 17:35 . 2011-12-11 17:36 -------- d-----w- c:\program files\QuickTime
2011-12-11 17:21 . 2011-12-11 17:21 -------- d-----w- c:\program files\Bonjour
2011-12-11 14:39 . 2011-12-13 18:25 -------- d-----w- c:\program files\FinalAlert 2 Yuri's Revenge
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-06 12:19 . 2011-08-08 21:31 138160 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-01-06 12:19 . 2011-08-08 21:31 271200 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-01-06 12:19 . 2011-08-08 21:31 271200 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-01-06 11:59 . 2011-08-08 21:31 271200 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-01-06 07:41 . 2011-11-05 16:36 21840 ----atw- c:\windows\system32\SIntfNT.dll
2012-01-06 07:41 . 2011-11-05 16:36 17212 ----atw- c:\windows\system32\SIntf32.dll
2012-01-06 07:41 . 2011-11-05 16:36 12067 ----atw- c:\windows\system32\SIntf16.dll
2012-01-04 16:24 . 2011-12-02 08:29 36928 ----a-w- c:\windows\system32\drivers\pssdk41.sys
2011-12-28 21:00 . 2011-09-11 20:17 87608 ----a-w- c:\documents and settings\The Killer\Data aplikací\inst.exe
2011-12-28 21:00 . 2011-09-11 20:17 47360 ----a-w- c:\documents and settings\The Killer\Data aplikací\pcouffin.sys
2011-12-15 20:45 . 2009-08-18 10:30 564632 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\IdentityCRL\production\wlidui.dll
2011-12-15 20:44 . 2009-08-18 10:24 18328 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-12-13 17:27 . 2011-08-07 22:17 7069288 ----a-w- c:\windows\system32\drivers\RtkHDAud.sys
2011-12-13 10:01 . 2011-08-07 22:17 1698408 ----a-w- c:\windows\RtlExUpd.dll
2011-12-07 23:22 . 2011-10-03 16:48 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-12-05 14:49 . 2011-08-07 22:17 20065384 ----a-w- c:\windows\RTHDCPL.EXE
2011-11-23 14:40 . 2008-04-14 05:45 1859584 ----a-w- c:\windows\system32\win32k.sys
2011-11-17 19:43 . 2011-11-17 19:43 2290688 ----a-w- c:\windows\system32\TUKernel.exe
2011-11-16 21:09 . 2011-08-08 23:53 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-04 19:13 . 2008-04-14 06:52 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-11-04 19:13 . 2008-04-14 06:52 916992 ----a-w- c:\windows\system32\wininet.dll
2011-11-04 19:13 . 2008-04-14 06:51 43520 ------w- c:\windows\system32\licmgr10.dll
2011-11-04 11:23 . 2008-04-14 05:50 385024 ------w- c:\windows\system32\html.iec
2011-11-01 16:07 . 2008-04-14 06:51 1288192 ----a-w- c:\windows\system32\ole32.dll
2011-10-28 05:32 . 2008-04-14 06:51 33280 ----a-w- c:\windows\system32\csrsrv.dll
2011-10-27 17:32 . 2011-08-08 21:31 75136 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-10-26 10:49 . 2008-04-14 08:06 2029056 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-10-26 10:49 . 2008-04-14 06:06 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-10-24 13:29 . 2011-10-24 13:29 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2011-10-24 13:29 . 2011-10-24 13:29 69632 ----a-w- c:\windows\system32\QuickTime.qts
2011-10-19 05:03 . 2011-09-27 12:26 138056 ----a-w- c:\documents and settings\The Killer\Data aplikací\PnkBstrK.sys
2011-10-18 22:04 . 2011-09-27 12:25 3360624 ----a-w- c:\windows\system32\pbsvc.exe
2011-10-18 17:10 . 2011-08-07 22:17 64616 ----a-w- c:\windows\system32\RtkCoInstXP.dll
2011-10-18 11:13 . 2008-04-14 06:51 186880 ----a-w- c:\windows\system32\encdec.dll
2011-10-15 21:54 . 2011-10-15 21:53 99616562 ----a-w- C:\BackupRegistry(20111015).reg
2012-01-07 20:51 . 2011-08-08 20:26 121816 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Xvid"="c:\program files\Xvid\CheckUpdate.exe" [2011-01-17 8192]
"Steam"="c:\program files\Steam\steam.exe" [2011-11-18 1242448]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-08-02 4910912]
"KiesPDLR"="c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-09-29 20880]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun"="c:\program files\AmIcoSingLun\AmIcoSinglun.exe" [2009-04-09 237568]
"Wireless Console 3"="c:\program files\ASUS\Wireless Console 3\wcourier.exe" [2009-04-17 1593344]
"MsgTranAgt"="c:\program files\ASUS\ATK Hotkey\MsgTranAgt.exe" [2008-08-18 117304]
"HControlUser"="c:\program files\ASUS\ATK Hotkey\HControlUser.exe" [2008-08-18 98304]
"ATKHOTKEY"="c:\program files\ASUS\ATK Hotkey\HControl.exe" [2009-03-20 174648]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2009-11-16 2054360]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-01-07 13880424]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2011-01-07 111208]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-11-04 1753192]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-11-01 59240]
"RTHDCPL"="RTHDCPL.EXE" [2011-12-05 20065384]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\The Killer\Nabídka Start\Programy\Po spuštění\
Stardock ObjectDock.lnk - c:\program files\Stardock\ObjectDockPlus2\ObjectDock.exe [2011-8-8 4142448]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{1984D045-52CF-49cd-DB77-08F378FEA4DB}"= "c:\program files\Stardock\ObjectDockPlus2\ODMenu.dll" [2010-03-24 511344]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\windows\system32\logonui.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\spba]
2008-03-25 13:24 567560 ----a-w- c:\program files\Common Files\SPBA\homefus2.dll
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Steam"="c:\program files\Steam\steam.exe" -silent
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun
"PCKeeper"="c:\program files\ZeoBIT\PCKeeper\PCKeeper.exe" /autorun
"KiesPDLR"=c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
"Google Update"="c:\documents and settings\The Killer\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
"Facebook Update"="c:\documents and settings\The Killer\Local Settings\Data aplikací\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"CloneCDTray"="c:\program files\SlySoft\CloneCD\CloneCDTray.exe" /s
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"
"KernelFaultCheck"=%systemroot%\system32\dumprep 0 -k
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
"KiesTrayAgent"=c:\program files\Samsung\Kies\KiesTrayAgent.exe
"KiesHelper"=c:\program files\Samsung\Kies\KiesHelper.exe /s
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\BitTorrent\\BitTorrent.exe"=
"c:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\WINDOWS\\system32\\muzapp.exe"=
"c:\\Program Files\\Warcraft III\\gproxy.exe"=
"c:\\WINDOWS\\system32\\dpnsvr.exe"=
"c:\\Hry\\Heroes of Might and Magic IV\\heroes4c.exe"=
"c:\\Program Files\\Counter-Strike 1.6\\hl.exe"=
"c:\\Program Files\\Warcraft III\\war3.exe"=
"c:\\WINDOWS\\system32\\java.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW.exe"=
"c:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaWmp.exe"=
"c:\\Documents and Settings\\The Killer\\Local Settings\\Data aplikací\\Facebook\\Video\\Skype\\FacebookVideoCalling.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\dota 2 beta\\dota.exe"=
"c:\\Program Files\\Steam\\steamapps\\dota2cz\\day of defeat source\\hl2.exe"=
"c:\\Program Files\\Sierra\\FEAR\\FEAR.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\eufloria\\Eufloria.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\Sid Meier's Civilization IV\\Civilization4.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Vzdálená správa systému Windows
.
R0 sptd;sptd;\SystemRoot\\SystemRoot\System32\Drivers\sptd.sys --> \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [?]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [15.9.2011 13:45 232512]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [16.11.2009 8:03 108792]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [16.11.2009 8:04 735960]
R2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [25.6.2010 18:07 35088]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [27.9.2011 12:50 1526080]
R2 TunngleService;TunngleService;c:\program files\Tunngle\TnglCtrl.exe [22.9.2011 12:24 741224]
R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\system32\drivers\ManyCam.sys [14.1.2008 11:06 21632]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [27.11.2011 19:37 100456]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [7.10.2010 13:34 10064]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 12:16 130384]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [7.8.2011 23:17 1691480]
S3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.sys [8.5.2009 17:15 25600]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\drivers\ssadadb.sys [8.10.2011 11:02 30312]
S3 bfastfao;bfastfao;\??\c:\docume~1\THEKIL~1\LOCALS~1\Temp\bfastfao.sys --> c:\docume~1\THEKIL~1\LOCALS~1\Temp\bfastfao.sys [?]
S3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [2.6.2011 10:08 11336]
S3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [8.10.2011 11:54 20032]
S3 EagleXNt;EagleXNt;\??\c:\windows\system32\drivers\EagleXNt.sys --> c:\windows\system32\drivers\EagleXNt.sys [?]
S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [18.12.2011 20:42 13192]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [18.12.2011 20:42 8456]
S3 fileHiders;fileHiders;c:\windows\system32\drivers\fileHiders.sys [10.8.2011 16:41 26392]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\Garena Classic\safedrv.sys --> c:\program files\Garena Classic\safedrv.sys [?]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [12.6.2011 10:15 31125880]
S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [9.1.2010 20:37 4640000]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [11.9.2011 21:17 47360]
S3 PsSdk41;PsSdk41;c:\windows\system32\drivers\pssdk41.sys [2.12.2011 9:29 36928]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [8.10.2011 11:02 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [8.10.2011 11:02 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [8.10.2011 11:02 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\drivers\ssadserd.sys [8.10.2011 11:02 114280]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [14.4.2008 7:52 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 12:16 753504]
S4 BBSvc;Bing Bar Update Service;c:\program files\Microsoft\BingBar\BBSvc.EXE [7.7.2011 19:31 195336]
S4 BBUpdate;BBUpdate;c:\program files\Microsoft\BingBar\SeaPort.EXE [15.6.2011 17:33 249648]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.centrum.cz/#utm_source=icq&utm_medium=generic
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 213.46.172.36 192.168.0.1
FF - ProfilePath - c:\documents and settings\The Killer\Data aplikací\Mozilla\Firefox\Profiles\jmzo92w6.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com/home.php?ref=hp
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKCU-Run-DontSleep - c:\documents and settings\The Killer\Plocha\DontSleep.exe
SafeBoot-WRConsumerService
AddRemove-ICQToolbar - c:\program files\ICQ6Toolbar\ICQUnToolbar.exe
AddRemove-MiNODLogin - c:\program files\ESET\MiNODLogin\MiNODLoginUninst.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-01-08 21:30
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1417001333-308236825-507921405-1005\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{691E7EC8-8304-E31D-3C5F-D2FD3A8ADBD0}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"abbhgllcmhfdbjgdhopjemhaagmmbmcnjf"=hex:70,61,64,68,61,6c,67,6a,6a,6c,66,63,
62,6c,6e,62,67,62,65,68,6a,65,64,6a,65,61,61,65,66,64,66,63,00,40
"machjkkmgnnghbcfplmdnhfgnl"=hex:6f,61,62,66,6e,6e,6b,63,6d,62,65,6e,67,66,68,
62,69,63,61,61,6d,61,6a,6d,6d,67,68,67,66,6a,00,63
.
[HKEY_USERS\S-1-5-21-1417001333-308236825-507921405-1005\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:41,a9,74,ee,5d,95,3b,b1,b8,f4,19,4b,37,03,dc,d5,a6,f3,6a,e1,64,d0,ef,
b4,09,95,26,04,4a,be,22,66,69,57,23,eb,4f,cc,3c,4d,87,c6,7b,64,48,b8,fd,86,\
"??"=hex:b0,5a,dd,80,fd,85,63,16,06,49,ba,6f,29,9e,c4,71
.
[HKEY_USERS\S-1-5-21-1417001333-308236825-507921405-1005\Software\SecuROM\License information*]
"datasecu"=hex:27,be,41,00,2a,29,e6,b6,9d,49,e7,ee,19,05,46,cf,de,fd,4d,f3,44,
0e,3d,98,c7,e0,28,7e,c3,2a,e6,52,75,51,fc,00,b9,4e,fb,7d,e5,91,e3,45,cb,02,\
"rkeysecu"=hex:3d,4b,b2,b8,23,e0,5d,ba,56,d6,09,4a,2e,f8,e8,1e
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1680)
c:\program files\Common Files\SPBA\homefus2.dll
c:\program files\Common Files\SPBA\infql2.dll
c:\program files\Common Files\SPBA\homepass.dll
c:\program files\Common Files\SPBA\bio.dll
c:\program files\Common Files\SPBA\qlbase.dll
.
- - - - - - - > 'explorer.exe'(3668)
c:\program files\Stardock\ObjectDockPlus2\DockShellHook.dll
c:\progra~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
c:\progra~1\MICROS~3\Office14\1029\GrooveIntlResource.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\Stardock\ObjectDockPlus2\ODMenu.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\windows\system32\inetsrv\inetinfo.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
c:\windows\system32\RUNDLL32.EXE
c:\program files\ASUS\ATK Hotkey\ATKOSD.exe
c:\windows\RTHDCPL.EXE
c:\program files\ASUS\ATK Hotkey\WDC.exe
c:\program files\Stardock\ObjectDockPlus2\ObjectDockTray.exe
.
**************************************************************************
.
Celkový čas: 2012-01-08 21:40:02 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-01-08 20:39
.
Před spuštěním: Volných bajtů: 50 413 256 704
Po spuštění: Volných bajtů: 50 238 267 392
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /usepmtimer /TUTag=7ZWRLB /Kernel=TUKernel.exe
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional (TuneUp Backup)" /noexecute=optin /fastdetect /usepmtimer /TUTag=7ZWRLB-BAK
.
- - End Of File - - 63D6F20669C69BE0D51C80DF3CEAA679

ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

Folder::
c:\documents and settings\The Killer\Local Settings\Data aplikací\Google\Update
c:\documents and settings\The Killer\Local Settings\Data aplikací\Facebook\Update

Registry::
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Google Update"=-
"Facebook Update"=-
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"KernelFaultCheck"=-

Regnull::
[HKEY_USERS\S-1-5-21-1417001333-308236825-507921405-1005\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{691E7EC8-8304-E31D-3C5F-D2FD3A8ADBD0}*]

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

to co jste mi napsal jsem udělal,ale stále se zvuk i obraz koušou....

edit: tak nakonec jsem zkusil vrátit starou verzi síťové karty a voliá, zvuk i video se nekouše,ale i tak děkuji za ochotu a spolupráci,díky vám jsem se aspoň zbavil malware,kdyby se něco stalo vím na koho se obrátit ještě jednou díky moc

Zkuste PC vyčistit CCleanerem: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 .

Dobry den, Mam stejny problem seka se zvuk a video a chrasti. Dekuji.

ComboFix 12-12-07.01 - Janicka 08.12.2012 14:23:06.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2038.1412 [GMT 1:00]
Spuštěný z: c:\documents and settings\Janicka\Plocha\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\NetworkService\Local Settings\Temporary Internet Files\MAILTRAN.INI
c:\documents and settings\NetworkService\Local Settings\Temporary Internet Files\TRNCOM.INI
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-11-08 do 2012-12-08 )))))))))))))))))))))))))))))))
.
.
2012-12-08 12:58 . 2012-12-08 12:59 -------- d-----w- c:\program files\CCleaner
2012-12-08 12:37 . 2007-05-10 09:23 4952064 ----a-w- c:\windows\system32\stacgui.cpl
2012-12-08 12:37 . 2007-05-10 09:22 405504 ----a-w- c:\windows\stsystra.exe
2012-12-08 12:37 . 2007-04-10 16:02 1601536 ----a-w- c:\windows\system32\stlang.dll
2012-12-08 12:37 . 2012-12-08 12:37 -------- d-----w- c:\windows\LastGood
2012-12-08 12:36 . 2007-05-10 09:23 270336 ----a-w- c:\windows\system32\stacapi.dll
2012-12-08 12:25 . 2012-12-08 12:26 -------- d-----w- c:\documents and settings\Janicka\Local Settings\Data aplikací\Akamai
2012-12-08 11:42 . 2012-12-08 11:40 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-12-08 11:42 . 2012-12-08 11:41 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-11-18 18:33 . 2012-11-18 18:33 -------- d-----w- c:\documents and settings\All Users\Synology
2012-11-18 18:33 . 2012-11-18 18:33 -------- d-----w- c:\program files\Synology
2012-11-15 20:13 . 2012-11-15 20:16 -------- d-----w- c:\documents and settings\Janicka\Data aplikací\flash
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-08 11:40 . 2012-03-02 13:51 143872 ----a-w- c:\windows\system32\javacpl.cpl
2012-12-08 11:40 . 2012-03-02 13:53 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-12-08 11:35 . 2012-04-13 19:19 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-12-08 11:35 . 2012-03-02 12:40 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-22 19:57 . 2006-03-02 12:00 1866368 ----a-w- c:\windows\system32\win32k.sys
2012-10-02 18:04 . 2006-03-02 12:00 58368 ----a-w- c:\windows\system32\synceng.dll
2012-11-19 17:09 . 2012-11-19 17:09 261600 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2012-01-03 14:31 1514152 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2012-01-03 1514152]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2012-01-03 1514152]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2012-01-31 17147528]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-02-13 3481408]
"OEXPRESS"="c:\windows\OETRN.EXE" [2012-03-02 26624]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2012-04-21 39408]
"Akamai NetSession Interface"="c:\documents and settings\Janicka\Local Settings\Data aplikací\Akamai\netsession_win.exe" [2012-10-09 4441920]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Device Detector"="DevDetect.exe -autorun" [X]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2007-10-09 2183168]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-03-30 138008]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-03-30 162584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-03-30 138008]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-08 761947]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2007-05-14 1191936]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-08-03 36352]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-11-29 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-03-07 421160]
"RemoteControl11"="c:\program files\CyberLink\PowerDVD11\PDVD11Serv.exe" [2011-04-20 234792]
"ApnUpdater"="c:\program files\Ask.com\Updater\Updater.exe" [2012-01-03 1391272]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-06-16 221184]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-06-16 81920]
"CorelDRAW Graphics Suite 11b"="c:\program files\Corel\Corel Graphics 12\Languages\CZ\Programs\Registration.exe" [2004-06-22 729088]
"V0470Mon.exe"="c:\windows\V0470Mon.exe" [2007-06-03 32768]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"SigmatelSysTrayApp"="c:\program files\SigmaTel\C-Major Audio\WDM\stsystra.exe" [2007-05-10 405504]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Janicka\Nabídka Start\Programy\Po spuštění\
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2006-5-24 622653]
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2012-3-3 106560]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\RealVNC\\VNC4\\winvnc4.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD11\\PowerDVD11.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD11\\PDVD11Serv.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD11\\Common\\MediaServer\\CLMSServer.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD11\\Movie\\PowerDVD Cinema\\PowerDVDCinema11.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Synology\\Assistant\\DSAssistant.exe"=
"c:\\Documents and Settings\\Janicka\\Local Settings\\Data aplikací\\Akamai\\netsession_win.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3170:TCP"= 3170:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface
.
R0 sptd;sptd;\SystemRoot\\SystemRoot\System32\Drivers\sptd.sys --> \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [?]
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312};Power Control [2012/03/03 12:15];c:\program files\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [3.3.2012 12:14 77296]
R2 CLHNServiceForPowerDVD;CLHNServiceForPowerDVD;c:\program files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [3.3.2012 12:15 83240]
R2 CyberLink PowerDVD 11.0 Monitor Service;CyberLink PowerDVD 11.0 Monitor Service;c:\program files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [3.3.2012 12:15 70952]
R2 CyberLink PowerDVD 11.0 Service;CyberLink PowerDVD 11.0 Service;c:\program files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe [3.3.2012 12:15 312616]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [28.2.2012 17:38 1373576]
R2 ntk_PowerDVD;ntk_PowerDVD;c:\program files\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD.sys [3.3.2012 12:15 71664]
R2 UsbClientService;UsbClientService;c:\program files\Synology\Assistant\UsbClientService.exe [18.9.2012 4:10 248704]
R3 busenum;Synology Virtual USB Hub;c:\windows\system32\drivers\busenum.sys [27.8.2012 10:19 45792]
R3 VF0470Vid;Live! Cam Notebook (VF0470);c:\windows\system32\drivers\V0470Vid.sys [9.6.2012 9:39 146720]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [31.1.2012 15:09 158856]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [2.3.2012 12:00 11520]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - HTTPFILTER
*NewlyCreated* - JAVAQUICKSTARTERSERVICE
.
Obsah adresáře 'Naplánované úlohy'
.
2012-12-08 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-13 11:35]
.
2012-12-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-04-21 23:03]
.
2012-12-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-04-21 23:03]
.
2012-12-08 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2012-01-03 14:31]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Settings,ProxyOverride = *.local;<local>
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\windows\WebIE.dll
Trusted Zone: dell.com
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\documents and settings\Janicka\Data aplikací\Mozilla\Firefox\Profiles\u5fg26pk.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.1&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.1&q=
FF - ExtSQL: !HIDDEN! 2012-03-10 09:27; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-12-08 14:30
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{329F96B6-DF1E-4328-BFDA-39EA953C1312}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD11\Common\NavFilter\000.fcl"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1032)
c:\windows\System32\BCMLogon.dll
.
Celkový čas: 2012-12-08 14:33:34
ComboFix-quarantined-files.txt 2012-12-08 13:33
.
Před spuštěním: Volných bajtů: 31 355 428 864
Po spuštění: Volných bajtů: 31 583 186 944
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
.
- - End Of File - - 6A8753445D009663C937AC2DCF952335

2komaj: založte si, prosím, vlastní topic. Děkujeme.