VIRY.CZ

Zdravim,mam dotaz kdyz zapnu google chrome zajdu na nejakou stranku a samo se mi otevre druhe okno s reklamou ze sem vyhral iphone a take ty kraviny.
Dela to dokonce i kdyz se chci prihlasit na e-mail na seznamu.
Slysel jsem ze to muze byt i nejaky virus ale antivirus nic nenasel.

Log z HijackThis
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:30:45, on 19.10.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17114)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Java\jre7\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\TrustPort\bin\tpmgma.exe
C:\Program Files\TrustPort\DataShredder\bin\wipesrv.exe
c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\TrustPort\Antivirus\bin\avas.exe
C:\Program Files\TrustPort\Antivirus\bin\avss.exe
C:\Program Files\TrustPort\Antivirus\bin\gozer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\TrustPort\DiskProtection\bin\TDWatch.exe
C:\Program Files\Common Files\TrustPort\Bin\tptray.exe
C:\Program Files\TrustPort\Antivirus\bin\avcom.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Owner\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Owner\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Owner\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Owner\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Owner\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Owner\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Owner\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Owner\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Owner\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Owner\Plocha\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=112465 ... 1d606baacb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - (no file)
R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
F2 - REG:system.ini: UserInit=C:\Program Files\Common Files\TrustPort\bin\wsctool.exe
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: wxDfast - {76CD277B-5AD2-80B6-8328-E59DC90E95ED} - (no file)
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: DownloadnSave - {ACA8817F-9838-B9BF-DFF5-E543A34A0909} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [TrustPortDiskProtectionWatchDog] "C:\Program Files\TrustPort\DiskProtection\bin\TDWatch.exe"
O4 - HKLM\..\Run: [TrustPortTray] "C:\Program Files\Common Files\TrustPort\Bin\tptray.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AntivirusCommunicatorAgent] "C:\Program Files\TrustPort\Antivirus\bin\avcom.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [AvgUninstallURL] cmd.exe /c start http://www.avg.cz/cz.special-uninstalla ... =10.0.1392
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Exetender_298] "C:\Program Files\Frag Games\GPlayer.exe" /schedule 300000
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Exetender_298] "C:\Program Files\Frag Games\GPlayer.exe" /runonstartup (User '?')
O4 - HKUS\S-1-5-20\..\Run: [Exetender_298] "C:\Program Files\Frag Games\GPlayer.exe" /runonstartup (User '?')
O4 - HKUS\S-1-5-21-682003330-57989841-839522115-1003\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User '?')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Documents and Settings\Owner\Data aplikací\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: MyPlayCity Toolbar - {5FC86FB3-A8B1-400B-8BE7-0EAF0D857F5D} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: MyPlayCity Toolbar - {5FC86FB3-A8B1-400B-8BE7-0EAF0D857F5D} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Broken Internet access because of LSP provider 'c:\program files\bonjour\mdnsnsp.dll' missing
O20 - AppInit_DLLs: avinspect.dll,
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: Ad-Aware 2007 Service (aawservice) - Unknown owner - (no file)
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: TrustPort Antivirus On-Access Scanner Agent (avas_service) - TrustPort, a.s. - C:\Program Files\TrustPort\Antivirus\bin\avas.exe
O23 - Service: TrustPort Antivirus Service Scanner Provider (avss_service) - TrustPort, a.s. - C:\Program Files\TrustPort\Antivirus\bin\avss.exe
O23 - Service: TrustPort Personal GTW (gozer) - TrustPort, a.s. - C:\Program Files\TrustPort\Antivirus\bin\gozer.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TrustPort Core Service (tpmgma_service) - TrustPort, a.s. - C:\Program Files\Common Files\TrustPort\bin\tpmgma.exe
O23 - Service: TrustPort DataShredder Wipe Service (wipesrv) - TrustPort, a.s. - C:\Program Files\TrustPort\DataShredder\bin\wipesrv.exe

--
End of file - 10189 bytes
Diky za odpovedi

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Search
• Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte

Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=13&t=105895

# AdwCleaner v2.005 - Logfile created 10/20/2012 at 17:47:33
# Updated 14/10/2012 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Owner - X-C7AEB9DE05B14
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Owner\Plocha\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

File Found : C:\user.js
Folder Found : C:\DOCUME~1\Owner\LOCALS~1\Temp\BabylonToolbar
Folder Found : C:\Documents and Settings\All Users\Data aplikací\Babylon
Folder Found : C:\Documents and Settings\All Users\Data aplikací\InstallMate
Folder Found : C:\Documents and Settings\All Users\Data aplikací\Premium
Folder Found : C:\Documents and Settings\All Users\Data aplikací\Trymedia
Folder Found : C:\Documents and Settings\All Users\Nabídka Start\Programy\DownloadnSave
Folder Found : C:\Documents and Settings\All Users\Nabídka Start\Programy\wxDfast
Folder Found : C:\Documents and Settings\Owner\Data aplikací\Babylon
Folder Found : C:\Documents and Settings\Owner\Data aplikací\Search Settings
Folder Found : C:\Documents and Settings\Owner\Data aplikací\Toolbar4
Folder Found : C:\Program Files\Application Updater
Folder Found : C:\Program Files\Ask.com
Folder Found : C:\Program Files\Common Files\spigot
Folder Found : C:\Program Files\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
Folder Found : C:\Program Files\Trymedia

***** [Registry] *****

Key Found : HKCU\Software\AppDataLow\AskToolbarInfo
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Software\Search Settings
Key Found : HKCU\Software\Ask.com
Key Found : HKCU\Software\Babylon
Key Found : HKCU\Software\BrowserCompanion
Key Found : HKCU\Software\ConduitSearchScopes
Key Found : HKCU\Software\Headlight
Key Found : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Found : HKCU\Software\SmartBar
Key Found : HKCU\Software\TBSB07116
Key Found : HKCU\Software\Toolbar
Key Found : HKLM\Software\Application Updater
Key Found : HKLM\Software\AskToolbar
Key Found : HKLM\Software\Babylon
Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Key Found : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B16632F1-24E0-4D99-A68D-70BFB6447C48}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Found : HKLM\SOFTWARE\Classes\AppID\{C0CEA572-2978-4DFC-A672-8100FF0E276A}
Key Found : HKLM\SOFTWARE\Classes\AppID\BabylonIEPI.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\BabylonTC.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
Key Found : HKLM\SOFTWARE\Classes\BabyDict
Key Found : HKLM\SOFTWARE\Classes\BabyGloss
Key Found : HKLM\SOFTWARE\Classes\BabylonIEPI.BabylonIEBho
Key Found : HKLM\SOFTWARE\Classes\BabylonIEPI.BabylonIEBho.1
Key Found : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin
Key Found : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin.1
Key Found : HKLM\SOFTWARE\Classes\BabylonTC.GingerApplication
Key Found : HKLM\SOFTWARE\Classes\BabylonTC.GingerApplication.1
Key Found : HKLM\SOFTWARE\Classes\BabyOptFile
Key Found : HKLM\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho
Key Found : HKLM\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho.1.0
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{DF390AA1-1E65-4825-B8E7-BE6B47BD56B8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Found : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler
Key Found : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Found : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Key Found : HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}
Key Found : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}
Key Found : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Found : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Found : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Found : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D2F39980-399F-492E-8D88-5FF7CCB3B47F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E3ED53C5-7AD5-4DF5-9734-AFB6E7E5D9DB}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}
Key Found : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
Key Found : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbTask
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
Key Found : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
Key Found : HKLM\SOFTWARE\Classes\TBSB07116.IEToolbar
Key Found : HKLM\SOFTWARE\Classes\TBSB07116.IEToolbar.1
Key Found : HKLM\SOFTWARE\Classes\TBSB07116.TBSB07116
Key Found : HKLM\SOFTWARE\Classes\TBSB07116.TBSB07116.3
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.TBSB07116
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.TBSB07116.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2CF0D01-7657-48AA-98C9-AE5E64757FCC}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{F310F027-15CB-4A7F-B10D-3A4AFB5013A5}
Key Found : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook
Key Found : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1
Key Found : HKLM\Software\Freeze.com
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\clbfjfbnelcflpgpklppgplejolacbej
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{4F4C5E11-0612-48D2-8055-987992AAC432}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A8B0DBDE-8119-48B0-8088-D12DA01C36BA}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbar
Key Found : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKU\S-1-5-21-682003330-57989841-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKU\S-1-5-21-682003330-57989841-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKU\S-1-5-21-682003330-57989841-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Found : HKU\S-1-5-21-682003330-57989841-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Found : HKU\S-1-5-21-682003330-57989841-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Key Found : HKU\S-1-5-21-682003330-57989841-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E}
Key Found : HKU\S-1-5-21-682003330-57989841-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Key Found : HKU\S-1-5-21-682003330-57989841-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

***** [Internet Browsers] *****

-\\ Internet Explorer v7.0.5730.13

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?affID=112465&tt=010712_5&babsrc=HP_ss&mntrId=5cfafac4000000000000001d606baacb

-\\ Opera v12.2.1578.0

File : C:\Documents and Settings\Owner\Data aplikací\Opera\Opera\operaprefs.ini

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [14753 octets] - [20/10/2012 17:47:33]

########## EOF - C:\AdwCleaner[R1].txt - [14814 octets] ##########

Ještě jsem udelal test s Malwarebytes


Malwarebytes Anti-Malware 1.65.1.1000
www.malwarebytes.org

Verze databáze: v2012.10.19.06

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 7.0.5730.13
Owner :: X-C7AEB9DE05B14 [administrátor]

19.10.2012 15:05:08
mbam-log-2012-10-19 (15-05-08).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 245776
Uplynulý čas: 13 minut, 58 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 6
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Umístnění do karantény a smazání se zdařilo.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4F4C5E11-0612-48D2-8055-987992AAC432} (PUP.wxDfast) -> Umístnění do karantény a smazání se zdařilo.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A8B0DBDE-8119-48B0-8088-D12DA01C36BA} (PUP.DownloadnSave) -> Umístnění do karantény a smazání se zdařilo.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{76CD277B-5AD2-80B6-8328-E59DC90E95ED} (PUP.wxDfast) -> Umístnění do karantény a smazání se zdařilo.
HKCR\CLSID\{76CD277B-5AD2-80B6-8328-E59DC90E95ED} (PUP.wxDfast) -> Umístnění do karantény a smazání se zdařilo.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{76CD277B-5AD2-80B6-8328-E59DC90E95ED} (PUP.wxDfast) -> Umístnění do karantény a smazání se zdařilo.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 4
C:\Documents and Settings\All Users\Data aplikací\wxDfast (PUP.wxDfast) -> Umístnění do karantény a smazání se zdařilo.
C:\Documents and Settings\All Users\Data aplikací\DOWNLOADNSAVE (PUP.DownloadnSave) -> Umístnění do karantény a smazání se zdařilo.
C:\Documents and Settings\All Users\Data aplikací\DOWNLOADNSAVE\data (PUP.DownloadnSave) -> Umístnění do karantény a smazání se zdařilo.
C:\Program Files\BROWSERCOMPANION (PUP.Blabbers) -> Umístnění do karantény a smazání se zdařilo.

Nalezené soubory: 15
C:\Documents and Settings\All Users\Data aplikací\wxDfast\BACKGROUND.HTML (PUP.wxDfast) -> Umístnění do karantény a smazání se zdařilo.
C:\Documents and Settings\All Users\Data aplikací\wxDfast\content.js (PUP.wxDfast) -> Umístnění do karantény a smazání se zdařilo.
C:\Documents and Settings\All Users\Data aplikací\wxDfast\iikacclcflgmoblihapidhooelaoffdh.crx (PUP.wxDfast) -> Umístnění do karantény a smazání se zdařilo.
C:\Documents and Settings\All Users\Data aplikací\wxDfast\settings.ini (PUP.wxDfast) -> Umístnění do karantény a smazání se zdařilo.
C:\Documents and Settings\All Users\Data aplikací\wxDfast\uninstall.exe (PUP.wxDfast) -> Umístnění do karantény a smazání se zdařilo.
C:\Documents and Settings\All Users\Data aplikací\DOWNLOADNSAVE\content.js (PUP.DownloadnSave) -> Umístnění do karantény a smazání se zdařilo.
C:\Documents and Settings\All Users\Data aplikací\DOWNLOADNSAVE\background.html (PUP.DownloadnSave) -> Umístnění do karantény a smazání se zdařilo.
C:\Documents and Settings\All Users\Data aplikací\DOWNLOADNSAVE\dmpiapniigpjkopoadjhmiajadlnmnkk.crx (PUP.DownloadnSave) -> Umístnění do karantény a smazání se zdařilo.
C:\Documents and Settings\All Users\Data aplikací\DOWNLOADNSAVE\settings.ini (PUP.DownloadnSave) -> Umístnění do karantény a smazání se zdařilo.
C:\Documents and Settings\All Users\Data aplikací\DOWNLOADNSAVE\uninstall.exe (PUP.DownloadnSave) -> Umístnění do karantény a smazání se zdařilo.
C:\Documents and Settings\All Users\Data aplikací\DOWNLOADNSAVE\data\content.js (PUP.DownloadnSave) -> Umístnění do karantény a smazání se zdařilo.
C:\Documents and Settings\All Users\Data aplikací\DOWNLOADNSAVE\data\jsondb.js (PUP.DownloadnSave) -> Umístnění do karantény a smazání se zdařilo.
C:\Program Files\BROWSERCOMPANION\BLABBERS-CH.CRX (PUP.Blabbers) -> Umístnění do karantény a smazání se zdařilo.
C:\Program Files\BROWSERCOMPANION\BCHelper.exe (PUP.Blabbers) -> Umístnění do karantény a smazání se zdařilo.
C:\Program Files\BROWSERCOMPANION\logo.ico (PUP.Blabbers) -> Umístnění do karantény a smazání se zdařilo.

(konec)

Udelame takovou dohodu, bud budete aplikovat utility a programky co chci ja, nebo si to budete lecit sam bez me pomoci...Jinak se nedomluvie a prace bude leda kontraproduktivni

Dejte mi sem jeste log z RSIT jak jsem chtel

Nezlobte se ale malwarebytes pouzivam na skenovani jiz mnoho let a zatim me nezklamal.
Pokud chcete muzu z karanteny polozky obnovit,to neni problem

Ja proti MBAMu nic nemam, ale nejde PC lecit kdyz to budem delat oba...

Run by Owner at 2012-10-20 19:27:19
WIN_XP Service Pack 3
System drive C: has 28 GB (18%) free of 153 GB
Total RAM: 1023 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:27:43, on 20.10.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17114)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\TrustPort\bin\tpmgma.exe
C:\Program Files\TrustPort\DataShredder\bin\wipesrv.exe
c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\TrustPort\Antivirus\bin\avas.exe
C:\Program Files\TrustPort\Antivirus\bin\avss.exe
C:\Program Files\TrustPort\Antivirus\bin\gozer.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\TrustPort\DiskProtection\bin\TDWatch.exe
C:\Program Files\Common Files\TrustPort\Bin\tptray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\TrustPort\Antivirus\bin\avcom.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Owner\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Owner\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Owner\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Owner\Plocha\RSIT.exe
C:\Program Files\trend micro\Owner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=112465 ... 1d606baacb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - (no file)
R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
F2 - REG:system.ini: UserInit=C:\Program Files\Common Files\TrustPort\bin\wsctool.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: DownloadnSave - {ACA8817F-9838-B9BF-DFF5-E543A34A0909} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [TrustPortDiskProtectionWatchDog] "C:\Program Files\TrustPort\DiskProtection\bin\TDWatch.exe"
O4 - HKLM\..\Run: [TrustPortTray] "C:\Program Files\Common Files\TrustPort\Bin\tptray.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AntivirusCommunicatorAgent] "C:\Program Files\TrustPort\Antivirus\bin\avcom.exe"
O4 - HKLM\..\RunOnce: [AvgUninstallURL] cmd.exe /c start http://www.avg.cz/cz.special-uninstalla ... =10.0.1392
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Exetender_298] "C:\Program Files\Frag Games\GPlayer.exe" /schedule 300000
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Exetender_298] "C:\Program Files\Frag Games\GPlayer.exe" /runonstartup (User '?')
O4 - HKUS\S-1-5-20\..\Run: [Exetender_298] "C:\Program Files\Frag Games\GPlayer.exe" /runonstartup (User '?')
O4 - HKUS\S-1-5-21-682003330-57989841-839522115-1003\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User '?')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Documents and Settings\Owner\Data aplikací\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: MyPlayCity Toolbar - {5FC86FB3-A8B1-400B-8BE7-0EAF0D857F5D} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: MyPlayCity Toolbar - {5FC86FB3-A8B1-400B-8BE7-0EAF0D857F5D} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Broken Internet access because of LSP provider 'c:\program files\bonjour\mdnsnsp.dll' missing
O20 - AppInit_DLLs: avinspect.dll,
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: Ad-Aware 2007 Service (aawservice) - Unknown owner - (no file)
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: TrustPort Antivirus On-Access Scanner Agent (avas_service) - TrustPort, a.s. - C:\Program Files\TrustPort\Antivirus\bin\avas.exe
O23 - Service: TrustPort Antivirus Service Scanner Provider (avss_service) - TrustPort, a.s. - C:\Program Files\TrustPort\Antivirus\bin\avss.exe
O23 - Service: TrustPort Personal GTW (gozer) - TrustPort, a.s. - C:\Program Files\TrustPort\Antivirus\bin\gozer.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TrustPort Core Service (tpmgma_service) - TrustPort, a.s. - C:\Program Files\Common Files\TrustPort\bin\tpmgma.exe
O23 - Service: TrustPort DataShredder Wipe Service (wipesrv) - TrustPort, a.s. - C:\Program Files\TrustPort\DataShredder\bin\wipesrv.exe

--
End of file - 9309 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\Auslogics Disk Defrag Prof Task {00000001-C3A2-4E89-B997-2510B2D90E89} for Owner.job
C:\WINDOWS\tasks\Auslogics Disk Defrag Prof Task {00000001-E941-4E93-A63D-2CA6A84A917E} for Owner.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Registry Winner Schedule.job
C:\WINDOWS\tasks\TrustPort Updater.job
C:\WINDOWS\tasks\Wise Care 365.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-09-29 449512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ACA8817F-9838-B9BF-DFF5-E543A34A0909}]
DownloadnSave Class

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-09-29 157672]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"OpwareSE4"=C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-04-10 16126464]
"SSBkgdUpdate"=C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25 210472]
"TrustPortDiskProtectionWatchDog"=C:\Program Files\TrustPort\DiskProtection\bin\TDWatch.exe [2012-08-20 225592]
"TrustPortTray"=C:\Program Files\Common Files\TrustPort\Bin\tptray.exe [2012-08-20 1061176]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"AntivirusCommunicatorAgent"=C:\Program Files\TrustPort\Antivirus\bin\avcom.exe [2012-08-20 921912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"=cmd.exe /c start http://www.avg.cz/cz.special-uninstalla ... =10.0.1392 []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Exetender_298"=C:\Program Files\Frag Games\GPlayer.exe /schedule 300000 []
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-04-11 3672384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 3]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AntivirusCommunicatorAgent]
c:\program files\trustport\antivirus\bin\avcom.exe [2012-08-20 921912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSGamerOSD]
C:\Program Files\ASUS\GamerOSD\GamerOSD.exe [2007-07-12 380928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG7_CC]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG8_TRAY]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-03 1603152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-04-03 644696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
c:\windows\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameFace Messenger]
C:\Program Files\GameFace Messenger\GameFace.exe [2006-11-01 2154496]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IObit Security 360]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISTray]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSpeedUp]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\sfagent]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
C:\WINDOWS\SkyTel.EXE [2007-04-04 1822720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeedUpMyPC]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SWPROguard]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrustPortDiskProtectionWatchDog]
c:\program files\trustport\diskprotection\bin\tdwatch.exe [2012-08-20 225592]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrustPortTray]
c:\program files\common files\trustport\bin\tptray.exe [2012-08-20 1061176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\update_vp]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VycistitPocitac]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spu?t?ní^Adobe Reader Speed Launch.lnk]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spu?t?ní^Adobe Reader Synchronizer.lnk]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Synchronizer.lnk]
C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 734872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="avinspect.dll,"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [2011-05-04 551296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2012-07-04 192512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2011-07-19 113024]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\avasdmft]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\avas_service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\avss_service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\gozer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro35]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro35.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro35Crusader]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro36]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro36.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ioloSystemService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\tdifw]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\tpavdrw_service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\tpmgma_service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\tpsec]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"DisableTaskMgr"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=149
"NoInstrumentation"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoResolveTrack"=1
"NoDriveTypeAutorun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Agrar Simulator 2012 Demo\iupdate.dll"="C:\Program Files\Agrar Simulator 2012 Demo\iupdate.dll:*:Enabled:Agricultural Simulator 2012 Demo"
"C:\Program Files\Agrar Simulator 2012 Demo\farm2012.demo.dll"="C:\Program Files\Agrar Simulator 2012 Demo\farm2012.demo.dll:*:Enabled:Agricultural Simulator 2012 Demo"
"C:\Program Files\Agrar Simulator 2012\iupdate.dll"="C:\Program Files\Agrar Simulator 2012\iupdate.dll:*:Enabled:Agricultural Simulator 2012"
"C:\Program Files\Agrar Simulator 2012\farm2012.dll"="C:\Program Files\Agrar Simulator 2012\farm2012.dll:*:Enabled:Agricultural Simulator 2012"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=i263_32.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\SYSTEM32\IAC25_32.AX
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"vidc.I263"=I263_32.drv
"VIDC.DIVX"=divx.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"VIDC.MPG4"=mpg4c32.dll
"VIDC.MP42"=mpg4c32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======List of files/folders created in the last 1 month======

2020-04-23 09:01:06 ----D---- C:\WINDOWS\system32\GroupPolicy
2012-10-20 18:03:24 ----ASH---- C:\hiberfil.sys
2012-10-20 17:47:33 ----A---- C:\AdwCleaner[R1].txt
2012-10-20 17:36:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2724197$
2012-10-20 17:32:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2756822$
2012-10-20 17:32:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$
2012-10-20 17:31:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2661254-v2$
2012-10-20 14:45:36 ----D---- C:\Program Files\Vyčistit Počítač
2012-10-20 12:18:29 ----D---- C:\WINDOWS\HopedotVOS
2012-10-20 12:16:17 ----D---- C:\SUHopedotVOS
2012-10-19 18:24:24 ----D---- C:\Documents and Settings\Owner\Data aplikací\Opera
2012-10-19 18:23:59 ----D---- C:\Program Files\Opera
2012-10-19 17:39:49 ----D---- C:\Program Files\AnyUtils
2012-10-15 16:53:03 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2012-10-15 16:43:40 ----D---- C:\Documents and Settings\Owner\Data aplikací\InstallShield Installation Information
2012-10-11 20:06:39 ----D---- C:\Program Files\Ahoj Benatky
2012-09-29 18:50:15 ----D---- C:\Program Files\Defraggler
2012-09-29 12:45:58 ----D---- C:\Program Files\Common Files\Java
2012-09-29 12:45:52 ----A---- C:\WINDOWS\system32\javaws.exe
2012-09-29 12:45:43 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2012-09-29 12:45:43 ----A---- C:\WINDOWS\system32\javaw.exe
2012-09-29 12:45:43 ----A---- C:\WINDOWS\system32\java.exe
2012-09-29 11:45:48 ----A---- C:\WINDOWS\system32\SmartDefragBootTime.exe
2012-09-29 11:45:36 ----A---- C:\WINDOWS\system32\drivers\SmartDefragDriver.sys
2012-09-28 11:11:10 ----D---- C:\Program Files\Pikova dama

======List of files/folders modified in the last 1 month======

2012-10-20 19:27:38 ----D---- C:\Program Files\trend micro
2012-10-20 19:06:52 ----A---- C:\WINDOWS\ntbtlog.txt
2012-10-20 18:08:24 ----D---- C:\WINDOWS\system32\CatRoot2
2012-10-20 18:04:02 ----D---- C:\WINDOWS\Temp
2012-10-20 18:01:47 ----D---- C:\Program Files
2012-10-20 18:01:46 ----D---- C:\WINDOWS\system32\drivers
2012-10-20 17:54:05 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-10-20 17:41:41 ----D---- C:\WINDOWS
2012-10-20 17:41:17 ----D---- C:\WINDOWS\system32
2012-10-20 17:39:00 ----D---- C:\WINDOWS\Microsoft.NET
2012-10-20 17:38:54 ----SHD---- C:\WINDOWS\Installer
2012-10-20 17:38:54 ----D---- C:\Config.Msi
2012-10-20 17:36:58 ----HD---- C:\WINDOWS\inf
2012-10-20 17:36:55 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-10-20 17:33:29 ----A---- C:\WINDOWS\system32\MRT.exe
2012-10-20 17:32:33 ----A---- C:\WINDOWS\imsins.BAK
2012-10-20 17:30:32 ----D---- C:\WINDOWS\Prefetch
2012-10-20 17:27:24 ----HD---- C:\WINDOWS\$hf_mig$
2012-10-19 20:59:35 ----D---- C:\Program Files\TopCD
2012-10-19 18:18:41 ----D---- C:\WINDOWS\WBEM
2012-10-19 17:19:53 ----SD---- C:\WINDOWS\Tasks
2012-10-19 17:19:39 ----D---- C:\Program Files\TrustPort
2012-10-19 15:27:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2691442$
2012-10-16 20:59:50 ----D---- C:\Program Files\Alawarhry.cz
2012-10-16 20:59:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\AlawarWrapper
2012-10-15 16:52:55 ----D---- C:\Program Files\Rockstar Games
2012-10-13 14:44:56 ----D---- C:\WINDOWS\Minidump
2012-10-11 20:06:52 ----D---- C:\Documents and Settings\Owner\Data aplikací\Špidla Data Processing, s.r.o
2012-10-09 18:54:49 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2012-10-05 21:37:15 ----D---- C:\Program Files\Auslogics
2012-09-29 20:00:03 ----D---- C:\Program Files\Registry Winner
2012-09-29 18:39:29 ----D---- C:\Program Files\Royal Envoy II CE Update
2012-09-29 18:38:38 ----D---- C:\Program Files\Valve
2012-09-29 12:45:58 ----D---- C:\Program Files\Common Files
2012-09-29 12:45:28 ----A---- C:\WINDOWS\system32\npdeployJava1.dll
2012-09-29 12:45:28 ----A---- C:\WINDOWS\system32\deployJava1.dll
2012-09-29 11:45:27 ----D---- C:\Program Files\IObit
2012-09-29 10:31:17 ----D---- C:\Program Files\Kouzelny morsky svet
2012-09-28 11:16:39 ----D---- C:\Documents and Settings\Owner\Data aplikací\ERS Game Studios
2012-09-28 11:14:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Špidla Data Processing, s.r.o
2012-09-22 18:04:47 ----D---- C:\WINDOWS\system32\cs-cz
2012-09-22 18:04:46 ----D---- C:\Program Files\Internet Explorer
2012-09-22 18:04:30 ----D---- C:\WINDOWS\ie7updates
2012-09-21 19:12:37 ----D---- C:\WINDOWS\system32\config

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 360HookOem;360HookOem; C:\WINDOWS\system32\drivers\360HookOem.sys [2012-05-02 54912]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:\WINDOWS\System32\drivers\prosync1.sys [2004-07-19 7040]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2006-03-26 51200]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2006-03-13 6656]
R0 sfsync04;StarForce Protection Synchronization Driver (version 4.x); C:\WINDOWS\System32\drivers\sfsync04.sys [2006-03-24 50176]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-11-03 63488]
R0 SmartDefragDriver;SmartDefragDriver; C:\WINDOWS\System32\Drivers\SmartDefragDriver.sys [2010-11-26 14776]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2012-08-13 477240]
R0 tpdevflt;TrustPort Device Filter; C:\WINDOWS\System32\DRIVERS\tpdevflt.sys [2012-08-20 33592]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 360FileOem;360FileOem; \??\C:\WINDOWS\system32\drivers\360FileOem.sys []
R1 360RegOem;360RegOem; \??\C:\WINDOWS\system32\drivers\360RegOem.sys []
R1 Amfilter;A4Tech Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\Amfilter.sys [2007-05-14 9216]
R1 asuskbnt;Enhanced Display Driver Helper Service; C:\WINDOWS\system32\drivers\atkkbnt.sys [2007-07-12 11136]
R1 EIO;EIO; \??\C:\WINDOWS\system32\drivers\EIO.sys []
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R1 tdimapper;TrustPort TDI port to process mapper; \??\C:\Program Files\TrustPort\PersonalFirewall\bin\tdimapper.sys []
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2011-04-01 278984]
R2 EncDisk;EncDisk; \??\C:\Program Files\TrustPort\DiskProtection\bin\EncDsk.sys []
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2011-04-01 25416]
R2 tdifw;TrustPort PGTW driver; C:\WINDOWS\system32\drivers\tdifw.sys [2012-08-20 40760]
R2 tpsec;TrustPort Security Filter; C:\WINDOWS\system32\drivers\tpsec.sys [2012-08-20 46248]
R3 asusgsb;ASUS Virtual Video Capture Device Driver; C:\WINDOWS\system32\drivers\asusgsb.sys [2007-07-12 12416]
R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l151x86.sys [2007-07-03 39424]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2012-07-04 7874560]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdXP3.sys [2012-05-14 103040]
R3 avasdmft;TrustPort Antivirus On-Access Scanner (W2K/XP) MF; C:\WINDOWS\System32\DRIVERS\avasdmft.sys [2012-08-20 37688]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2012-09-01 242240]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12160]
R3 MouseCap;MouseCapture Driver; C:\WINDOWS\System32\Drivers\MouseCap.sys [2005-08-08 6640]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 TPPFHOOK;TPPFHOOK; \??\C:\Program Files\TrustPort\PersonalFirewall\bin\TPPFHOOK.sys []
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 Video3D;ASUS Video3D Service; C:\WINDOWS\System32\Drivers\Video3D32.sys [2007-07-12 10752]
S1 HMFAxCore46691b2fe72383a3b643d95081ef1d95;HMFAxCore46691b2fe72383a3b643d95081ef1d95; C:\WINDOWS\system32\drivers\HMFAxCore46691b2fe72383a3b643d95081ef1d95.sys []
S1 SUHDCrypt;SUHDCrypt; \??\C:\WINDOWS\system32\Drivers\PDisk.sys []
S3 Ad-Watch Connect Filter;Ad-Watch Connect Kernel Filter; \??\C:\WINDOWS\system32\drivers\NSDriver.sys []
S3 ahpvm66r;ahpvm66r; C:\WINDOWS\system32\drivers\ahpvm66r.sys []
S3 Amps2prt;A4Tech PS/2 Port Mouse Driver; C:\WINDOWS\system32\DRIVERS\Amps2prt.sys [2007-05-14 14336]
S3 Amusbprt;A4Tech HID-compliant Mouse Driver; C:\WINDOWS\system32\DRIVERS\Amusbprt.sys [2007-05-14 14336]
S3 AVFSFilter;AVFSFilter; C:\WINDOWS\system32\drivers\AVFSFilter.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 dewdropcore;dewdropcore; C:\WINDOWS\System32\Drivers\dewdropcore.sys []
S3 dewdropfsflt;dewdropfsflt; \??\C:\WINDOWS\System32\Drivers\dewdropfsflt.sys []
S3 DrvAgent32;DrvAgent32; \??\C:\WINDOWS\system32\Drivers\DrvAgent32.sys []
S3 dsio;TrustPort Raw IO Driver; \??\C:\Program Files\Common Files\TrustPort\bin\dsio.sys []
S3 EuDisk;EASEUS Disk Enumerator; C:\WINDOWS\system32\DRIVERS\EuDisk.sys [2009-12-02 122504]
S3 gmer;gmer; C:\WINDOWS\System32\DRIVERS\gmer.sys [2009-03-17 85969]
S3 HdAudAddService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 naecd;naecd; C:\WINDOWS\system32\drivers\naecd.sys []
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-05-18 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-05-18 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-05-18 8192]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-05-18 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\WINDOWS\system32\drivers\VBoxNetFlt.sys []
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WISOVD;WISOVD; \??\C:\Program Files\WinISO Computing\WinISO\bin\driver\WISOVD_xp.sys []
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [2011-08-12 116608]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2012-07-04 643072]
R2 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2012-09-29 161768]
R2 tpmgma_service;TrustPort Core Service; C:\Program Files\Common Files\TrustPort\bin\tpmgma.exe [2012-08-20 494720]
R2 wipesrv;TrustPort DataShredder Wipe Service; C:\Program Files\TrustPort\DataShredder\bin\wipesrv.exe [2012-08-20 278840]
R2 wlidsvc;Windows Live ID Sign-in Assistant; c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avas_service;TrustPort Antivirus On-Access Scanner Agent; C:\Program Files\TrustPort\Antivirus\bin\avas.exe [2012-08-20 885048]
R3 avss_service;TrustPort Antivirus Service Scanner Provider; C:\Program Files\TrustPort\Antivirus\bin\avss.exe [2012-08-20 315704]
R3 gozer;TrustPort Personal GTW; C:\Program Files\TrustPort\Antivirus\bin\gozer.exe [2012-08-20 508216]
S2 ATKKeyboardService;ATK Keyboard Service; C:\WINDOWS\ATKKBService.exe [2007-07-12 257024]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-08-06 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-09 250808]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-08-06 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

• Pokud ho havet blokuje, pouzijte jeden z nasledujicich - i ty prejmenovane

  Rkill EXE:
  http://download.bleepingcomputer.com/grinler/rkill.exe
  
  Rkill iExplore.exe:
  http://download.bleepingcomputer.com/gr ... xplore.exe
  
  Rkill uSeRiNiT.exe:
  http://download.bleepingcomputer.com/gr ... eRiNiT.exe
  
  Rkill WiNlOgOn.exe:
  http://download.bleepingcomputer.com/gr ... NlOgOn.exe

• Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
• Spustte tradicne dvojklikem - program probehne do par sekund a ukonci i svou cinnost
• RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
• Na plose vznikne log Rkill.txt ten mi sem vlozte
• Ted nerestartujte PC - prisli byste o ucinek RKillu

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

Omlouvam se za zpozdeni,ale jsem momentalne zaneprazden poslu vam to zitra okolo 18 hodiny.
Diky za pochopeni

OK, nic se nedeje

Zdravim posilam log s Rkill


Rkill 2.4.3 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2012 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 10/23/2012 06:25:25 PM in x86 mode.
Windows Version: Microsoft Windows XP Service Pack 3

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* Windows Firewall Disabled

[HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = dword:00000000

Checking Windows Service Integrity:

* AppMgmt [Missing ServiceDLL Value]
* helpsvc [Missing ServiceDLL Value]
* HidServ [Missing ServiceDLL Value]

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* HOSTS file entries found:

127.0.0.1 localhost

Program finished at: 10/23/2012 06:26:09 PM
Execution time: 0 hours(s), 0 minute(s), and 44 seconds(s)

ComboFix 12-10-23.01 - Owner 23.10.2012 18:37:59.1.2 - x86
Spuštěný z: c:\documents and settings\Owner\Plocha\ComboFix.exe
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Owner\WINDOWS
C:\install.exe
c:\program files\Downloaded Installers
c:\program files\Downloaded Installers\{80BDBB4C-163E-4F4B-9533-59A7ED62A695}\setup.msi
c:\windows\system32\JAIL
c:\windows\system32\TZLog.log
c:\windows\system32\URTTemp
c:\windows\system32\URTTemp\regtlib.exe
c:\windows\usgwmt
c:\windows\XSxS
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-09-23 do 2012-10-23 )))))))))))))))))))))))))))))))
.
.
2020-04-23 07:01 . 2011-06-01 19:42 -------- d-----w- c:\windows\system32\GroupPolicy
2012-10-21 12:15 . 2012-10-21 12:15 -------- d-----w- c:\documents and settings\Owner\Data aplikací\GFI Software
2012-10-20 12:45 . 2012-10-20 12:48 -------- d-----w- c:\program files\Vyčistit Počítač
2012-10-20 10:18 . 2012-10-20 10:18 -------- d-----w- c:\windows\HopedotVOS
2012-10-20 10:16 . 2012-10-20 10:26 -------- d-----w- C:\SUHopedotVOS
2012-10-19 16:23 . 2012-10-19 16:24 -------- d-----w- c:\program files\Opera
2012-10-19 15:39 . 2012-10-19 15:39 -------- d-----w- c:\program files\AnyUtils
2012-10-15 14:53 . 2012-10-15 14:53 108144 ----a-w- c:\windows\system32\CmdLineExt.dll
2012-10-15 14:43 . 2012-10-15 14:43 -------- d-----w- c:\documents and settings\Owner\Data aplikací\InstallShield Installation Information
2012-10-11 18:07 . 2012-10-11 18:07 -------- d-----w- c:\documents and settings\Owner\Local Settings\Data aplikací\Seppia
2012-10-11 18:06 . 2012-10-11 18:12 -------- d-----w- c:\program files\Ahoj Benatky
2012-09-29 16:50 . 2012-09-29 16:50 -------- d-----w- c:\program files\Defraggler
2012-09-29 10:45 . 2012-09-29 10:45 -------- d-----w- c:\program files\Common Files\Java
2012-09-29 10:45 . 2012-09-29 10:45 143872 ----a-w- c:\windows\system32\javacpl.cpl
2012-09-29 10:45 . 2012-09-29 10:45 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-09-29 09:45 . 2012-05-08 16:35 29528 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
2012-09-29 09:45 . 2010-11-26 16:02 14776 ----a-w- c:\windows\system32\drivers\SmartDefragDriver.sys
2012-09-28 09:11 . 2012-09-28 09:21 -------- d-----w- c:\program files\Pikova dama
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-09 16:54 . 2012-06-09 11:27 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-09 16:54 . 2011-10-01 19:30 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-09-29 10:45 . 2012-02-23 15:18 821736 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-09-29 10:45 . 2011-11-19 12:22 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-09-01 20:25 . 2012-09-01 20:25 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-08-27 18:40 . 2006-03-02 12:00 832512 ----a-w- c:\windows\system32\wininet.dll
2012-08-27 18:40 . 2006-03-02 12:00 1830912 ------w- c:\windows\system32\inetcpl.cpl
2012-08-27 18:40 . 2006-03-02 12:00 78336 ----a-w- c:\windows\system32\ieencode.dll
2012-08-27 18:40 . 2006-03-02 12:00 17408 ------w- c:\windows\system32\corpol.dll
2012-08-24 13:53 . 2006-03-02 12:00 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-08-23 06:27 . 2006-03-02 12:00 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-08-23 06:27 . 2004-08-17 15:45 2029568 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-08-20 12:13 . 2012-05-02 16:38 27208 ----a-w- c:\windows\system32\tpnative.exe
2012-08-20 12:13 . 2012-04-07 13:05 46248 ----a-w- c:\windows\system32\drivers\tpsec.sys
2012-08-20 12:13 . 2012-05-02 16:38 202200 ----a-w- c:\windows\system32\avinspect.dll
2012-08-20 12:12 . 2012-05-02 16:38 40760 ----a-w- c:\windows\system32\drivers\tdifw.sys
2012-08-20 12:12 . 2012-05-02 16:38 33592 ----a-w- c:\windows\system32\drivers\tpdevflt.sys
2012-08-20 12:12 . 2012-05-02 16:38 37688 ----a-w- c:\windows\system32\drivers\avasdmft.sys
2012-08-13 18:29 . 2011-03-15 16:46 477240 ----a-w- c:\windows\system32\drivers\sptd.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-04-11 3672384]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 79400]
"RTHDCPL"="RTHDCPL.EXE" [2007-04-10 16126464]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472]
"TrustPortDiskProtectionWatchDog"="c:\program files\TrustPort\DiskProtection\bin\TDWatch.exe" [2012-08-20 225592]
"TrustPortTray"="c:\program files\Common Files\TrustPort\Bin\tptray.exe" [2012-08-20 1061176]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"AntivirusCommunicatorAgent"="c:\program files\TrustPort\Antivirus\bin\avcom.exe" [2012-08-20 921912]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"="start http://www.avg.cz/cz.special-uninstalla ... =10.0.1392" [?]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2008-11-03 435096]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2011-05-04 17:54 551296 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\avinspect.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0tpnative
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36.sys]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService]
@="Service"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spu?t?ní^Adobe Reader Speed Launch.lnk]
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spu?t?ní^Adobe Reader Synchronizer.lnk]
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Synchronizer.lnk]
backupExtension=.CommonStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 3
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG7_CC
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG8_TRAY
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IObit Security 360
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISTray
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSpeedUp
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\sfagent
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeedUpMyPC
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SWPROguard
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\update_vp
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VycistitPocitac
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
2005-05-03 18:43 69632 ------r- c:\windows\Alcmtr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AntivirusCommunicatorAgent]
2012-08-20 12:10 921912 ----a-w- c:\program files\TrustPort\Antivirus\bin\avcom.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSGamerOSD]
2007-07-12 09:03 380928 ----a-w- c:\program files\ASUS\GamerOSD\GamerOSD.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
2007-04-03 16:50 1603152 ----a-w- c:\program files\Canon\MyPrinter\BJMYPRT.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
2007-04-03 16:00 644696 ----a-w- c:\program files\Canon\SolutionMenu\CNSLMAIN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2008-04-14 03:22 15360 ----a-w- c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameFace Messenger]
2006-11-01 13:50 2154496 ----a-w- c:\program files\GameFace Messenger\GameFace.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
2007-04-04 17:22 1822720 ------r- c:\windows\SkyTel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2006-11-10 11:35 90112 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrustPortDiskProtectionWatchDog]
2012-08-20 12:11 225592 ----a-w- c:\program files\TrustPort\DiskProtection\bin\TDWatch.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrustPortTray]
2012-08-20 12:11 1061176 ----a-w- c:\program files\Common Files\TrustPort\bin\tptray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"27402:TCP"= 27402:TCP:BitComet 27402 TCP
"27402:UDP"= 27402:UDP:BitComet 27402 UDP
"5985:TCP"= 5985:TCP:*:Disabled:Vzdálená správa systému Windows
.
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
R3 Amps2prt;A4Tech PS/2 Port Mouse Driver;c:\windows\system32\DRIVERS\Amps2prt.sys [x]
R3 AVFSFilter;AVFSFilter; [x]
R3 dewdropcore;dewdropcore;c:\windows\system32\Drivers\dewdropcore.sys [x]
R3 dewdropfsflt;dewdropfsflt;c:\windows\System32\Drivers\dewdropfsflt.sys [x]
R3 DrvAgent32;DrvAgent32;c:\windows\system32\Drivers\DrvAgent32.sys [x]
R3 dsio;TrustPort Raw IO Driver;c:\program files\Common Files\TrustPort\bin\dsio.sys [x]
R3 EuDisk;EASEUS Disk Enumerator;c:\windows\system32\DRIVERS\EuDisk.sys [x]
S0 360HookOem;360HookOem;c:\windows\system32\drivers\360HookOem.sys [x]
S1 360FileOem;360FileOem;c:\windows\system32\drivers\360FileOem.sys [x]
S1 360RegOem;360RegOem;c:\windows\system32\drivers\360RegOem.sys [x]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [x]
S2 EncDisk;EncDisk;c:\program files\TrustPort\DiskProtection\bin\EncDsk.sys [x]
S3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\DRIVERS\l151x86.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdXP3.sys [x]
S3 avas_service;TrustPort Antivirus On-Access Scanner Agent;c:\program files\TrustPort\Antivirus\bin\avas.exe [x]
S3 avasdmft;TrustPort Antivirus On-Access Scanner (W2K/XP) MF;c:\windows\system32\DRIVERS\avasdmft.sys [x]
S3 avss_service;TrustPort Antivirus Service Scanner Provider;c:\program files\TrustPort\Antivirus\bin\avss.exe [x]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-10-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-09 16:54]
.
2012-10-07 c:\windows\Tasks\Auslogics Disk Defrag Prof Task {00000001-C3A2-4E89-B997-2510B2D90E89} for Owner.job
- c:\program files\Auslogics\Auslogics Disk Defrag Professional\DiskDefrag.exe [2012-10-05 09:35]
.
2012-10-07 c:\windows\Tasks\Auslogics Disk Defrag Prof Task {00000001-E941-4E93-A63D-2CA6A84A917E} for Owner.job
- c:\program files\Auslogics\Auslogics Disk Defrag Professional\DiskDefrag.exe [2012-10-05 09:35]
.
2012-10-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-08-06 17:40]
.
2012-10-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-08-06 17:40]
.
2012-10-20 c:\windows\Tasks\Registry Winner Schedule.job
- c:\program files\Registry Winner\RegistryWinner.exe [2012-05-24 12:45]
.
2012-10-23 c:\windows\Tasks\TrustPort Updater.job
- c:\program files\Common Files\TrustPort\bin\tpupdate.exe [2012-04-07 12:11]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.babylon.com/?affID=112465&tt=010712_5&babsrc=HP_ss&mntrId=5cfafac4000000000000001d606baacb
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Free YouTube to MP3 Converter - c:\documents and settings\Owner\Data aplikací\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: {{5FC86FB3-A8B1-400B-8BE7-0EAF0D857F5D} - {5FC86FB3-A8B1-400B-8BE7-0EAF0D857F5D} -
TCP: DhcpNameServer = 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
BHO-{ACA8817F-9838-B9BF-DFF5-E543A34A0909} - (no file)
HKCU-Run-Exetender_298 - c:\program files\Frag Games\GPlayer.exe
HKU-Default-Run-Exetender_298 - c:\program files\Frag Games\GPlayer.exe
SafeBoot-Wdf01000.sys
AddRemove-Zipeg - c:\documents and settings\Owner\Local Settings\Data aplikací\Zipeg\Application\zipeg.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-10-23 18:51
Windows 5.1.2600 Service Pack 3 NTFS
.
detected NTDLL code modification:
ZwOpenKey, ZwOpenFile
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
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
"OODEFRAG14.00.00.01PROFESSIONAL"="1BF5B52D5C952C9C81071FD7778204BE17E3E04A19577C82868AA0D3982F62AB9ADECE28B7B8D93E634778042C0ED1B12F45576202A043AE48314042C1B4445B0E73D80071E8E33BD7E0A03A5F52DE1E2993C74AFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74C5D575E7D6A3B98088EDD5E5BE2F6E667FEBC9E127BECC74CFEBC9E127BECC74C18457354F67298E9A97162FAE457CE1E6BF6DB418488D8BE0048E96E5214F5DB51DC198E8D14462F5847ACE06A99A318BB6599581496CC963C18DA2705E3DA6F6E8E925EAAD68AC64B21779FD5DC53DD893B9555873555D74BD3E207FB2C8B0F9B7C9BB517F4D5FC397972C7928655AFB56B158B06118ED05C88F9453C00E73B756D80C8558BEE25CE70E0AF3B5B71CF998E709269BBE5D494692F56FBD923788E4B2512191E6C9329C69A722409C58480E014C440A71D3C8EC721F92716C6CF6B22FECC4C92BD225C650BEDD11DC5192B420041CD2F4EE1552006AD5C772C4D8825197C09332130EFD4B0C3FC8CB5DBCD35C76B878D62A6EA0CA8B771230502D2AB11E3A2AEAC1D5DC69F5A14ADAF9E8FE2146B986217EDC44FE59E6BA053022BAC190E1B98C7CF948CFDDC38BCA1B90D18A12CDF34019ECA4D2D2E085FF0E6694878C72DE431B1791D87B740574D875642C05A6E6A0625DA0F05F8B4B0084C57BE88A1C3EE78AF61920C9D340348656F77D56C0D51E070C4C107CF16C819D331F738F07F7682BD18AD6E0551A6FCB7CFEED71834192074CF35DECE84C1F722AA7B09CE369B884EDB50A629890D28636403555793D628A933DFD0CE09994CDE6A791198EE6717DCE1813E0683655CD38C366C6C0D02AD8A1D5B2FF0E531923608C2FB6FE6428FE74F6C56DE1845FEF81C2B52D63877BC962D62E41A0ECC98DB14CD07380F7AA4EF406021B9D4214A435B2A4FDFDDF8B2527956EEF1279783018E33051D8B44617AC2CE6661FAD5CBA9071EBE92FD28C4C58ABCDE648E9E4CE06F325B0A34B4A190D94F02E37F2264284E1813BE4B0F777BDD3E5922D2523B361F2C063116461641FC9C61128C2B4B3D564BCEF5AA1BA7046428179EB889F3427CA611067257449E18170A8280F5896AB5108A0F381A02F282EA6692B6FB684A58CB20C3BCAA833C88BF11116B707DB7F861722742438ADD129BA8FA7848DF17FAEAE8E59E66023522BEA35993E6582E2061C69C4A2C96E3DF72D2955D6FF6749C73B6AE7315BFA62C5DFE40F210A0DD9F51DC1287D35322AC4E6EE7F9D69D336BFC66224CA41233610DF8E935012E595F1B9B6FE599BD3D2E2E97BA944817288A41EA8A6D68227E70DEF6403F36B0B6BAC8005E80C129DC8CB60299A871FA2C8E1D4B75CF96EA347D0974F2230EA98F820C9A502D733C2CE4327054"
"OODEFRAG12.00.00.01PROFESSIONAL"="00EF0084B11E418D74E2D11DD3FD9753CA3E177F152B53894F2BA58FF1269B4BE35DCF9FB05CD6D31C4835D923EFE6B1A3E3F8BAB67CC209F884B718527F5BE172C0D8BF8B404C9299E8A62223CFE0AAD28B3F89D6996EFA578ECA66827EF02478540FAB108684B93FEF48B5B59D297851F0D5C50EE2D3832636378E6C05D83B185358CE9A339B9BB30BACF74E9C153566D3206B027BA725766BCDC50E354435448290B7208A5E70EFEE5DF0F5D2B0E1B477711C72CCD14CA9234E65F97B970647250519A7184ED4C151D44E480C39E2AC24149CAE02EC44F9FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74C5D575E7D6A3B98088EDD5E5BE2F6E667BA7FD869164D6794A6171C11EC38DE3D4B8A8B05B462ACF96403C90EB104F6ABC303ECB8E768BF5FB74A3F24FE8940EF1908FB2D39A3BCA54F500BBB81078A29E85549E40BC11E52C07064DDFC0D3139B10547B9B395F3A6E52890780F124E4721A11DED4E23B4B33332A869820B89CE65B4F1BD89B08DE6868BF58E1EF6E7B1FCD6BEEF765B3299720AB9D9F3F02049064022E25E1FABA3946D7ED9B5BDE1EF8F58291F8CEE296A62E8E9557D5FAE18E944256521BF517178380ECDA3A127D8F2F978C0DE181066ED2F32988BAC57FC6BCEE915FEA467361FC8AC6DF6930B17430770AF7C42409B03362CF2D0621C8D6A6585D66A933AADF6F088D20435C22B21BDF4D93C0EF9EF91C79647C43E6432C880AE219B097AE4F17472AAE25F6669324F12C0364F5D9B10A3D40C9E327BAB6E0A42838EB0BB400B8CDE38701D75F89DE174FBC88FF2AC797C6D4E5E629188C2E3401B80F0F6F63B66E64ECC2ECED511106E35138AA203C8780CAB47A8393038E1CB9D755C881203A3C657DA853ACE3CE6752B7C323E5203337ED7DD13EADC3FCBACD2B540B0EFE7D8615143CB6009D46AA3AFAD2A75252BBC381BEC63809BCE5D4F17C9991546ED8F394CF2DA4EFB920E37A8924ADF57CA1751CF818EB94DE146C35B049B3C1924C2F7EE1AC474F2B2BD1191DD20761A71B902E4EEBDBB29772B3D24752D134517E5EAEFACC92A8E7556387703EB9972308E2BDD4B508BB891A49488F4E7EA77DDDD831FE064A74220AB56FCBCA10BB79BF5CFD370D5965937BDC4341F9AF6348D8255DC363E0BD4FB01B85807E97118CE4395EFFC14AABD7377EDE9D248D05042209A9E6A38D563D312D2D42422D514E53BC8F0D1857CEA534455FC32A774791CFAAFED02646CDC790E38CE185AA780839B57AC9657A2B96B8D6054A5A141AB3F4414E6C60B9885C014A43A2D563986CC91D308B46A185951AF9DEC5757FC3B52A7EE3CC1A88774833CF51DEF90C0216C41767F5AD53D4B2078BA583718CFCE81C10832C6EB4C179D902D9131B3D9"
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
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1040)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
Celkový čas: 2012-10-23 18:54:23
ComboFix-quarantined-files.txt 2012-10-23 16:54
.
Před spuštěním: Volných bajtů: 30 158 897 152
Po spuštění: Volných bajtů: 33 975 697 408
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect /bootlog
.
- - End Of File - - 26A1ECE36DB4631A8C5C1F3EE506BBE7

Stahnete Service Repair http://kb.eset.com/library/ESET/KB%20Te ... Repair.exe

• Ulozte nejlepe na Plochu
• Spustte a potvrdte Yes abyste potvrdil reinstalaci sluzeb
• Nasledne kliknutim na Yes potvrdte restart PC
• Na Plose vznikne slozka CC Support, najdete tam log SvcRepair.txt - mel by byt CC Support\Logs\SvcRepair.txt - vlozte mi jej sem

Zdravim mam problem po tom jak jsem udelal skan tim Services Repair mi neustale vyskakuje hlaska Činnost systemu byla obnovena po závažné chybě a nemůžu se té hlášky zbavit.
Už se mi zobrazila alespon 7x