Preventivka a dotaz

[John Hoof]

Ahoj, při používání počítače mi zamrazilo při uvědomění si, že je zde šance, že vzhledem k tomu, že mám webkameru, mě nějaký ten vir sleduje. No mě i manželku popadl šlak, moc tomu nerozumíme a oba máme sklony k úzkostem
Tudíž jsem ihned udělal docela zbrkle scan MWAV chtěl bych se zeptat, jestli mám čistý počítač Ještě jednou se omlouvám, počítačům opravdu ani jeden nerozumíme a raději se obrátíme na odborníky. Mohl by mi teda někdo vysvětlit, jaká je šance, že se člověku třeba skrz internet někdo dostane do NTB a je schopen sledovat skrz jeho webkameru co dělá ? děkuji!!! )

13 II 2013 17:28:55 - **********************************************************

13 II 2013 17:28:55 - MWAV - eScanAV AntiVirus Toolkit.

13 II 2013 17:28:55 - Copyright © MicroWorld Technologies

13 II 2013 17:28:55 - **********************************************************

13 II 2013 17:28:55 - Source: C:\DOCUME~1\HONZAK~1\DOKUME~1\STAENS~1\mwav.exe

13 II 2013 17:28:55 - Version 12.0.245 (C:\DOCUMENTS AND SETTINGS\HONZA KOPEJTKO\LOCAL SETTINGS\TEMP\MEXE.COM)

13 II 2013 17:28:55 - Log File: C:\Documents and Settings\HONZA KOPEJTKO\Local Settings\Temp\MWAV.LOG

13 II 2013 17:28:55 - MWAV Registered: TRUE

13 II 2013 17:28:55 - User Account: HONZA KOPEJTKO (Administrator Mode)

13 II 2013 17:28:55 - OS Type: Windows Workstation

13 II 2013 17:28:55 - OS: Windows XP [OS Install Date: 11 Apr 2011 17:00:50]

13 II 2013 17:28:55 - Ver: Service Pack 3 (Build 2600)

13 II 2013 17:28:55 - System Up Time: 1 Hour, 50 Minutes, 23 Seconds



13 II 2013 17:28:55 - Parent Process Name : C:\Documents and Settings\HONZA KOPEJTKO\Dokumenty\Stažené soubory\mwav.exe

13 II 2013 17:28:55 - Windows Root Folder: C:\WINDOWS

13 II 2013 17:28:55 - Windows Sys32 Folder: C:\WINDOWS\system32

13 II 2013 17:28:56 - DHCP NameServer: 10.0.0.138

13 II 2013 17:28:56 - Interface0 DHCPNameServer: 10.0.0.138

13 II 2013 17:28:56 - Local Fixed Drives: c:\,d:\

13 II 2013 17:28:56 - MWAV Mode: Scan and Clean files (for viruses, adware and spyware)

13 II 2013 17:28:56 - [CREATED ZIP FILE: C:\Documents and Settings\HONZA KOPEJTKO\Local Settings\Temp\pinfect.zip]



13 II 2013 17:28:56 - ****** Files/Folders created/modified during last fortnight in Windows and ROOT Folder ******

13 II 2013 17:28:57 - C:\WINDOWS\system32\FlashPlayerApp.exe (697712), 10-Feb-2013, Adobe Systems Incorporated, Adobe Flash Player Control Panel Applet

13 II 2013 17:28:58 - C:\WINDOWS\system32\FlashPlayerCPLApp.cpl (74096), 10-Feb-2013, Adobe Systems Incorporated, Adobe Flash Player Control Panel Applet

13 II 2013 17:28:58 - C:\WINDOWS\system32\FlashPlayerInstaller.exe (16365936), 10-Feb-2013, Adobe Systems Incorporated, Adobe® Flash® Player Installer/Uninstaller

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\bdc.exe (182792), 13-Feb-2013, BitDefender, BitDefender Console Scanner

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\bdfltlib2k.dll (231944), 13-Feb-2013, MicroWorld Technologies Inc., eScan for Windows

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\encdec.dll (223528), 13-Feb-2013, MicroWorld Technologies Inc., eScan/MailScan/eConceal

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\erootdrv.sys (22920), 13-Feb-2013, MicroWorld Technologies Inc., eScan/MWAV

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\mexe.com (760168), 13-Feb-2013, MicroWorld Technologies Inc., MicroWorld AntiVirus Toolkit Utility (MWAV)

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\msvclnt.dll (249128), 13-Feb-2013, MicroWorld Technologies Inc., MailScan

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\mwavdwnl.exe (931112), 13-Feb-2013, MicroWorld Technologies Inc., eScan

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\MWAVSCAN.COM (760168), 13-Feb-2013, MicroWorld Technologies Inc., MicroWorld AntiVirus Toolkit Utility (MWAV)

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\red32.dll (11048), 13-Feb-2013, Microsoft Corporation, Microsoft® Windows® Operating System

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\Reload.exe (184104), 13-Feb-2013, MicroWorld Technologies Inc., eScan for Windows

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\setpriv.exe (82216), 13-Feb-2013, MicroWorld Technologies Inc., eScan AntiVirus Toolkit Utility

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\trufos.dll (353792), 13-Feb-2013, MicroWorld Technologies Inc., eScan for Windows

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\unregx.exe (93480), 13-Feb-2013, MicroWorld Technologies Inc., MicroWorld AntiVirus Toolkit Utility

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\viewtcp.exe (576296), 13-Feb-2013, MicroWorld Technologies Inc., ViewTCP



13 II 2013 17:28:58 - C:\WINDOWS\$hf_mig$, 12-Apr-2011 [H] [Folder]

13 II 2013 17:28:58 - C:\WINDOWS\$NtUninstallWdf01009$, 11-Apr-2011 [H] [Folder]

13 II 2013 17:28:58 - C:\WINDOWS\$NtUninstallXPSEPSCLP$, 12-Apr-2011 [H] [Folder]

13 II 2013 17:28:58 - C:\WINDOWS\Fonts, 11-Apr-2011 [SR] [Folder]

13 II 2013 17:28:58 - C:\WINDOWS\inf, 11-Apr-2011 [H] [Folder]

13 II 2013 17:28:58 - C:\WINDOWS\system32\dllcache, 11-Apr-2011 [HSR] [Folder]

13 II 2013 17:28:58 - C:\WINDOWS\system32\Microsoft, 11-Apr-2011 [S] [Folder]

13 II 2013 17:28:58 - C:\MSOCache, 12-Apr-2011 [HR] [Folder]

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\plugins, 13-Feb-2013 [Folder]

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\plugtmp-10, 11-Feb-2013 [Folder]

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\plugtmp-11, 12-Feb-2013 [Folder]

13 II 2013 17:28:58 - C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\plugtmp-9, 11-Feb-2013 [Folder]

13 II 2013 17:28:58 - C:\Documents and Settings\HONZA KOPEJTKO\Data aplikací\Microsoft, 11-Apr-2011 [S] [Folder]

13 II 2013 17:28:58 - C:\Documents and Settings\HONZA KOPEJTKO\Data aplikací\..\Data aplikací, 11-Apr-2011 [HR] [Folder]

13 II 2013 17:28:58 - C:\Documents and Settings\HONZA KOPEJTKO\Data aplikací\..\Local Settings, 11-Apr-2011 [H] [Folder]

13 II 2013 17:28:58 - C:\Documents and Settings\HONZA KOPEJTKO\Data aplikací\..\Okolní síť, 11-Apr-2011 [H] [Folder]

13 II 2013 17:28:58 - C:\Documents and Settings\HONZA KOPEJTKO\Data aplikací\..\Okolní tiskárny, 11-Apr-2011 [H] [Folder]

13 II 2013 17:28:58 - C:\Documents and Settings\HONZA KOPEJTKO\Data aplikací\..\Recent, 17-Jul-2012 [HR] [Folder]

13 II 2013 17:28:58 - C:\Documents and Settings\HONZA KOPEJTKO\Data aplikací\..\SendTo, 11-Apr-2011 [HR] [Folder]

13 II 2013 17:28:58 - C:\Documents and Settings\HONZA KOPEJTKO\Data aplikací\..\UserData, 01-Jan-2013 [S] [Folder]

13 II 2013 17:28:58 - C:\Documents and Settings\HONZA KOPEJTKO\Data aplikací\..\Šablony, 11-Apr-2011 [H] [Folder]

13 II 2013 17:28:58 - C:\Documents and Settings\All Users\Data aplikací\Microsoft, 11-Apr-2011 [S] [Folder]

13 II 2013 17:28:58 - C:\Documents and Settings\All Users\Data aplikací\MicroWorld, 13-Feb-2013 [Folder]

13 II 2013 17:28:58 - C:\Documents and Settings\All Users\Data aplikací\..\Data aplikací, 11-Apr-2011 [HR] [Folder]

13 II 2013 17:28:58 - C:\Documents and Settings\All Users\Data aplikací\..\DRM, 11-Apr-2011 [HS] [Folder]

13 II 2013 17:28:58 - C:\Documents and Settings\All Users\Data aplikací\..\Šablony, 11-Apr-2011 [H] [Folder]

13 II 2013 17:28:58 - C:\Program Files\WindowsUpdate, 11-Apr-2011 [H] [Folder]



13 II 2013 17:28:58 - *********************************************************************************************



13 II 2013 17:28:58 - Latest Date of files inside MWAV: Mon Jun 18 13:59:57 2012.

13 II 2013 17:28:58 - Plugins FileCount: 916 Sign Version: 7.42646

13 II 2013 17:29:00 - ** Changed Value of "HKEY_CLASSES_ROOT\.htm" from "FirefoxHTML" to "htmlfile"

13 II 2013 17:29:00 - ** Changed Value of "HKEY_CLASSES_ROOT\.html" from "FirefoxHTML" to "htmlfile"

13 II 2013 17:29:00 - Loading/Creating FileScan Database C:\Documents and Settings\All Users\Data aplikací\MicroWorld\MWAV\ESCANDBX.MDB [Log: C:\Documents and Settings\HONZA KOPEJTKO\Local Settings\Temp\ESCANDB.LOG]

13 II 2013 17:29:01 - Loaded/Created FileScan Database...

13 II 2013 17:29:01 - Loading AV Library [DB]...

13 II 2013 17:29:21 - ArchiveScan: DISABLED

13 II 2013 17:29:27 - AV Library Loaded [DB-DIRECT].

13 II 2013 17:29:27 - MWAV doing self scanning...

13 II 2013 17:29:27 - MWAV files are clean.
13 II 2013 17:30:43 - ArchiveScan: DISABLED
13 II 2013 17:30:43 - Virus Database Date: 18 Jun 2012
13 II 2013 17:30:43 - Virus Database Count: 7305297
13 II 2013 17:30:49 - Downloading AntiVirus and Anti-Spyware Databases...
13 II 2013 17:50:22 - Update Successful...
13 II 2013 17:56:10 - Indexed Spyware Databases Successfully Created...
13 II 2013 17:56:12 - Old Sign Version: 7.42646 New Sign Version: 7.45419
13 II 2013 17:56:47 - Reload of AntiVirus Signatures successfully done.
13 II 2013 17:56:47 - Virus Database Date: 13 Feb 2013
13 II 2013 17:56:47 - Virus Database Count: 8752790

13 II 2013 17:59:11 - **********************************************************
13 II 2013 17:59:11 - MWAV - eScanAV AntiVirus Toolkit.
13 II 2013 17:59:11 - Copyright © MicroWorld Technologies
13 II 2013 17:59:11 -
13 II 2013 17:59:11 - Support: support@escanav.com
13 II 2013 17:59:11 - Web: http://www.escanav.com
13 II 2013 17:59:11 - **********************************************************
13 II 2013 17:59:11 - Version 12.0.245[DB] (C:\DOCUMENTS AND SETTINGS\HONZA KOPEJTKO\LOCAL SETTINGS\TEMP\MEXE.COM)
13 II 2013 17:59:11 - Log File: C:\Documents and Settings\HONZA KOPEJTKO\Local Settings\Temp\MWAV.LOG
13 II 2013 17:59:12 - User Account: HONZA KOPEJTKO (Administrator Mode)
13 II 2013 17:59:12 - Parent Process Name : C:\Documents and Settings\HONZA KOPEJTKO\Dokumenty\Stažené soubory\mwav.exe
13 II 2013 17:59:12 - Windows Root Folder: C:\WINDOWS
13 II 2013 17:59:12 - Windows Sys32 Folder: C:\WINDOWS\system32
13 II 2013 17:59:12 - OS: Windows XP [OS Install Date: 11 Apr 2011 17:00:50]
13 II 2013 17:59:12 - Ver: Service Pack 3 (Build 2600)
13 II 2013 17:59:12 - Latest Date of files inside MWAV: Mon Jun 18 13:59:57 2012.
13 II 2013 17:59:12 - Plugins FileCount: 937 Sign Version: 7.45419

13 II 2013 17:59:18 - Options Selected by User:
13 II 2013 17:59:18 - Memory Check: Enabled
13 II 2013 17:59:18 - Registry Check: Enabled
13 II 2013 17:59:18 - StartUp Folder Check: Enabled
13 II 2013 17:59:18 - System Folder Check: Enabled
13 II 2013 17:59:18 - Services Check: Enabled
13 II 2013 17:59:18 - Scan Spyware: Enabled
13 II 2013 17:59:18 - Scan Archives: Disabled
13 II 2013 17:59:18 - Drive Check: Disabled
13 II 2013 17:59:18 - All Drive Check :Enabled
13 II 2013 17:59:18 - Folder Check: Disabled
13 II 2013 17:59:18 - SCAN: All_Files
13 II 2013 17:59:18 - MWAV Mode: Scan and Clean files (for viruses, adware and spyware)

13 II 2013 17:59:18 - Scanning DNS Records...
13 II 2013 17:59:18 - Scanning Master Boot Record (Kernel)...

13 II 2013 17:59:19 - ***** Scanning Memory Files *****

13 II 2013 17:59:54 - ***** Scanning Registry Files *****

13 II 2013 18:00:06 - ***** Scanning StartUp Folders *****

13 II 2013 18:00:14 - ***** Scanning Service Files *****
13 II 2013 18:00:17 - ERROR(2)!!! Invalid Entry System32\Drivers\frmupgr.sys. Action Taken: Removing HKLM\SYSTEM\CurrentControlSet\Services\DFUBTUSB.
13 II 2013 18:00:17 - ERROR(2)!!! Invalid Entry \??\C:\WINDOWS\system32\drivers\EagleNT.sys. Action Taken: Removing HKLM\SYSTEM\CurrentControlSet\Services\EagleNT.
13 II 2013 18:00:18 - ERROR(2)!!! Invalid Entry system32\DRIVERS\ewusbdev.sys. Action Taken: Removing HKLM\SYSTEM\CurrentControlSet\Services\hwusbdev.
13 II 2013 18:00:22 - ERROR(2)!!! Invalid Entry C:\Program Files\Nero\Nero 7\InCD\NBHRegInCDSrv.exe. Action Taken: Removing HKLM\SYSTEM\CurrentControlSet\Services\NeroRegInCDSrv.

13 II 2013 18:00:27 - ***** Scanning Registry and File system for Adware/Spyware *****
13 II 2013 18:00:27 - Loading Spyware Signatures from new External Database [Name: C:\DOCUME~1\HONZAK~1\LOCALS~1\Temp\spydb.avs, Size: 463354]...
13 II 2013 18:00:27 - Indexed Spyware Databases Successfully Created...


13 II 2013 18:00:37 - ***** Scanning Registry Files *****
13 II 2013 18:00:38 - Scanning File C:\Program Files\WinRAR 3.61 Multi\rarext.dll (????)

13 II 2013 18:00:39 - ***** Scanning System32 Folders *****



13 II 2013 18:03:52 - ***** Scanning All Drives *****
13 II 2013 18:03:52 - ***** C:,D: *****
13 II 2013 18:03:52 - Scanning C:\ Drive
13 II 2013 18:25:52 - C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb not Scanned. Possibly password protected...
13 II 2013 18:25:52 - C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.edb not Scanned. Possibly password protected...
13 II 2013 18:26:14 - C:\WINDOWS\system32\config\default not Scanned. Possibly password protected...
13 II 2013 18:26:14 - C:\WINDOWS\system32\config\SAM not Scanned. Possibly password protected...
13 II 2013 18:26:14 - C:\WINDOWS\system32\config\SECURITY not Scanned. Possibly password protected...
13 II 2013 18:26:14 - C:\WINDOWS\system32\config\software not Scanned. Possibly password protected...
13 II 2013 18:26:14 - C:\WINDOWS\system32\config\system not Scanned. Possibly password protected...
13 II 2013 18:29:41 - Scanning D:\ Drive

13 II 2013 18:32:12 - ***** Checking for specific ITW Viruses *****

13 II 2013 18:32:12 - ***** Scanning complete. *****

13 II 2013 18:32:12 - Total Objects Scanned: 112022
13 II 2013 18:32:12 - Total Critical Objects: 0
13 II 2013 18:32:12 - Total Disinfected Objects: 0
13 II 2013 18:32:12 - Total Objects Renamed: 0
13 II 2013 18:32:12 - Total Deleted Objects: 0
13 II 2013 18:32:12 - Total Errors: 4
13 II 2013 18:32:12 - Time Elapsed: 00:32:56
13 II 2013 18:32:12 - Virus Database Date: 13 Feb 2013
13 II 2013 18:32:12 - Virus Database Count: 8752790

13 II 2013 18:32:12 - Scan Completed.

[Rudy]

Zdravím!
Nic nebezpečného v logu nevidím. K webkameře: přes ni s vám do PC vir dostat nemůže, pouze vám ji může někdo hackovat, čímž získá přístup k snímanému obsahu. Nic víc a nic míň.

[John Hoof]

Děkuji!!! Mám opravdu starost, ještě bych Vás chtěl poprosit o kontrolu RSIT.

Logfile of random's system information tool 1.09 (written by random/random)
Run by HONZA KOPEJTKO at 2013-02-16 19:54:57
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 4 GB (9%) free of 48 GB
Total RAM: 2009 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:55:15, on 16.2.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\STMicroelectronics\Accelerometer\FF_Protection.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\T-Mobile\Web'n'walk Manager\Manager.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\HONZA KOPEJTKO\Dokumenty\Stažené soubory\RSIT.exe
C:\Documents and Settings\HONZA KOPEJTKO\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\HONZA KOPEJTKO.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [FreeFallProtection] C:\Program Files\STMicroelectronics\Accelerometer\FF_Protection.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [T-Mobile CManager] "C:\Program Files\T-Mobile\Web'n'walk Manager\Manager.exe" -autorun
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_11_5_502_149_Plugin.exe -update plugin
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat do zařízení Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 7047142984
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: FF Install Filter Service (InstallFilterService) - Unknown owner - C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

--
End of file - 10452 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\HONZA KOPEJTKO\Data aplikací\Mozilla\Firefox\Profiles\6x2hoo4j.default

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.149 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_149.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw_1168638.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/McAfeeMssPlugin]
"Description"=McAfee Mss Plugin
"Path"=C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{AB2CE124-6272-4b12-94A9-7303C7397BD1}
{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll [2013-02-05 94112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-03-26 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-04-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-04-12 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-10-13 18782720]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-10 1594664]
"Broadcom Wireless Manager UI"=C:\WINDOWS\system32\WLTRAY.exe [2011-04-11 2179072]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2009-08-21 141336]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2009-08-21 173592]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2009-08-21 142872]
"FreeFallProtection"=C:\Program Files\STMicroelectronics\Accelerometer\FF_Protection.exe [2009-07-22 2384896]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2007-03-14 71216]
"LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2007-01-08 52256]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2008-02-27 570664]
"SecurDisc"=C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe [2008-02-18 1629480]
"InCD"=C:\Program Files\Nero\Nero 7\InCD\InCD.exe [2008-02-18 1057064]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2010-03-12 49208]
""= []
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-03-27 37296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-10-30 4297136]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2008-01-24 2289664]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2011-07-12 399736]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2012-07-13 17418928]
"T-Mobile CManager"=C:\Program Files\T-Mobile\Web'n'walk Manager\Manager.exe [2012-07-14 1841264]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_11_5_502_149_Plugin.exe [2013-02-10 699248]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2009-08-14 206848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=157

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveTypeAutoRun"=153

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"D:\INSTALL\NERO_CyberLinkDVD\CDS\Nero\Installation\SetupX.exe"="D:\INSTALL\NERO_CyberLinkDVD\CDS\Nero\Installation\SetupX.exe:*:Enabled:Nero ProductSetup"
"C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\DeviceSetup.exe"="C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\DeviceSetup.exe:LocalSubNet:Enabled:Instalace zařízení HP"
"C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPNetworkCommunicator.exe"="C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPNetworkCommunicator.exe:LocalSubNet:Enabled:Síťový komunikátor HP"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======List of files/folders created in the last 1 month======

2013-02-16 19:54:58 ----D---- C:\Program Files\trend micro
2013-02-16 19:54:57 ----D---- C:\rsit
2013-02-16 19:53:41 ----D---- C:\WINDOWS\LastGood
2013-02-13 17:56:09 ----AD---- C:\WINDOWS\VDLL.DLL
2013-02-13 17:56:09 ----AD---- C:\WINDOWS\system32\runouce.exe
2013-02-13 17:56:09 ----AD---- C:\WINDOWS\rundll16.exe
2013-02-13 17:56:09 ----AD---- C:\WINDOWS\RUNDL132.EXE
2013-02-13 17:56:09 ----AD---- C:\WINDOWS\logo1_.exe
2013-02-13 17:56:09 ----AD---- C:\WINDOWS\logo_1.exe
2013-02-13 17:29:07 ----A---- C:\WINDOWS\system32\msvcr80.dll
2013-02-13 17:29:06 ----A---- C:\WINDOWS\system32\msvcp80.dll
2013-02-13 17:29:05 ----A---- C:\WINDOWS\system32\msvcp90.dll
2013-02-13 17:29:04 ----A---- C:\WINDOWS\system32\msvcr90.dll
2013-02-13 17:29:02 ----A---- C:\WINDOWS\system32\eEmpty.exe
2013-02-13 17:29:00 ----A---- C:\WINDOWS\system32\TASKMGR.COM
2013-02-13 17:29:00 ----A---- C:\WINDOWS\system32\T.COM
2013-02-13 17:29:00 ----A---- C:\WINDOWS\REGEDIT.COM
2013-02-13 17:29:00 ----A---- C:\WINDOWS\R.COM
2013-02-13 17:28:58 ----D---- C:\Program Files\Common Files\MicroWorld
2013-02-13 17:28:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\MicroWorld
2013-01-22 07:50:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2799329$
2013-01-22 07:49:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2757638$

======List of files/folders modified in the last 1 month======

2013-02-16 19:55:07 ----D---- C:\Documents and Settings\HONZA KOPEJTKO\Data aplikací\uTorrent
2013-02-16 19:55:02 ----D---- C:\Program Files\Mozilla Firefox
2013-02-16 19:54:58 ----RD---- C:\Program Files
2013-02-16 19:54:52 ----D---- C:\WINDOWS\Prefetch
2013-02-16 19:54:45 ----HD---- C:\WINDOWS\inf
2013-02-16 19:54:39 ----HD---- C:\WINDOWS\$hf_mig$
2013-02-16 19:54:37 ----D---- C:\WINDOWS
2013-02-16 19:53:39 ----D---- C:\WINDOWS\system32\CatRoot2
2013-02-16 19:51:58 ----D---- C:\Documents and Settings\HONZA KOPEJTKO\Data aplikací\Skype
2013-02-16 19:51:50 ----D---- C:\WINDOWS\Temp
2013-02-13 20:12:05 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-02-13 17:59:19 ----D---- C:\WINDOWS\system32\drivers
2013-02-13 17:56:09 ----D---- C:\WINDOWS\system32
2013-02-13 17:31:08 ----A---- C:\WINDOWS\win.ini
2013-02-13 17:28:58 ----D---- C:\Program Files\Common Files
2013-02-10 17:28:07 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-02-10 17:28:01 ----A---- C:\WINDOWS\system32\FlashPlayerInstaller.exe
2013-02-07 18:56:52 ----D---- C:\Program Files\McAfee Security Scan
2013-01-29 11:46:03 ----D---- C:\WINDOWS\security
2013-01-22 08:07:53 ----RSD---- C:\WINDOWS\assembly
2013-01-22 08:04:54 ----D---- C:\WINDOWS\Microsoft.NET
2013-01-22 07:58:08 ----SHD---- C:\WINDOWS\Installer
2013-01-22 07:57:43 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-01-22 07:56:58 ----D---- C:\WINDOWS\WinSxS
2013-01-22 07:50:26 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-01-22 07:49:35 ----A---- C:\WINDOWS\imsins.BAK

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 stdflt;Disk Filter Driver for Accelerometer; C:\WINDOWS\system32\DRIVERS\stdflt.sys [2009-07-23 15336]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2012-10-30 25256]
R1 AswRdr;aswRdr; C:\WINDOWS\system32\drivers\AswRdr.sys [2012-10-30 35928]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2012-10-30 738504]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2012-10-30 361032]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2012-10-30 54232]
R1 InCDPass;Nero InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys [2008-02-18 36648]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 tidnet;TID NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\tidnet.sys [2009-09-15 19200]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-10-30 21256]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2012-10-30 97608]
R3 Acceler;Accelerometer Service; C:\WINDOWS\system32\DRIVERS\Acceler.sys [2009-07-23 28136]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2011-04-11 2649216]
R3 BTDriver;Ovladač virtuálních komunikací Bluetooth; C:\WINDOWS\system32\DRIVERS\btport.sys [2009-09-30 37160]
R3 BTKRNL;Enumenátor sběrnice Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2009-09-30 991264]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2009-09-30 45984]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 huawei_enumerator;huawei_enumerator; C:\WINDOWS\system32\DRIVERS\ew_jubusenum.sys [2012-04-23 76544]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2009-08-14 6317216]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-10-13 5928448]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-07-28 143360]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-10-24 6784]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2009-12-10 231600]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
R4 InCDfs;Nero InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys [2008-02-18 118952]
S1 incdrm;Nero InCD MRW Remapper; C:\WINDOWS\system32\drivers\InCDRm.sys [2008-02-18 38312]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 btaudio;Zvukové zařízení Bluetooth; C:\WINDOWS\system32\drivers\btaudio.sys [2009-09-30 533024]
S3 BTWDNDIS;Server pro přístup k síti LAN Bluetooth; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2009-09-30 156816]
S3 btwmodem;Modem Bluetooth; C:\WINDOWS\system32\DRIVERS\btwmodem.sys [2009-09-30 37032]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\WINDOWS\system32\DRIVERS\ew_hwusbdev.sys [2010-07-27 102784]
S3 ew_usbenumfilter;huawei_CompositeFilter; C:\WINDOWS\system32\DRIVERS\ew_usbenumfilter.sys [2010-03-20 11136]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\WINDOWS\system32\DRIVERS\ewdcsc.sys [2010-10-08 25856]
S3 huawei_cdcacm;huawei_cdcacm; C:\WINDOWS\system32\DRIVERS\ew_jucdcacm.sys [2012-04-23 95616]
S3 huawei_cdcecm;huawei_cdcecm; C:\WINDOWS\system32\DRIVERS\ew_jucdcecm.sys [2012-04-23 70016]
S3 huawei_ext_ctrl;huawei_ext_ctrl; C:\WINDOWS\system32\DRIVERS\ew_juextctrl.sys [2012-04-23 27520]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2011-12-31 199168]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2009-08-19 173056]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2004-08-11 18944]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-10-30 44808]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2009-07-29 349528]
R2 InCDsrv;InCD Helper; C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe [2008-02-18 1553704]
R2 InstallFilterService;FF Install Filter Service; C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe [2009-06-23 60928]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-04-12 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-01-24 73728]
R2 MbnExt;Mobile Broadband Extension Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-05-14 272024]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
R2 wltrysvc;Broadcom Wireless LAN Tray Service; C:\WINDOWS\System32\WLTRYSVC.EXE [2011-04-11 25088]
S1 InCDrec;Nero InCD File System Recognizer; C:\WINDOWS\system32\drivers\InCDRec.sys [2008-02-18 16040]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-10 251248]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [2013-02-05 235216]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-09-17 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------



Mohu nyní říci, že jsem 100% bez virů ? Nemám udělat nějaké další testy ? Opravdu bych si rád byl jist. Děkuji

PS.: Když jsem spouštěl MWAV, zaškrtl jsem "kontrolovat spyware". Neznamená to, že test bude kontrolovat JEN spyware ? Děkuji!!!
Přeji příjemný večer Rudy.

[Rudy]

Log vypadá OK. Pokud PC korektně běží, udělejte pouze test antivirem.