VIRY.CZ

Logfile of random's system information tool 1.06 (written by random/random)
Run by Michal Brabec at 2010-01-13 16:51:39
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 21 GB (27%) free of 76 GB
Total RAM: 2014 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:51:53, on 13.1.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\spool\drivers\w32x86\3\CNAP2LAK.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Windows\system32\spool\DRIVERS\W32X86\3\CNAB8SWK.EXE
C:\Windows\Explorer.exe
C:\Users\Tata\AppData\Roaming\uTorrent\utorrent.exe
C:\Program Files\Firefox\firefox.exe
C:\Program Files\IObit\IObit Security 360\is360tray.exe
C:\Program Files\IObit\IObit Security 360\is360.exe
C:\Users\Tata\Downloads\RSIT.exe
C:\Program Files\trend micro\Michal Brabec.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [gemstrmw] C:\Windows\system32\gemstrmw.exe /r
O4 - HKLM\..\Run: [CNAP2 Launcher] C:\Windows\system32\spool\DRIVERS\W32X86\3\CNAP2LAK.EXE
O4 - HKLM\..\Run: [reset] regedit /s reset.reg
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [IObit Security 360] "C:\Program Files\IObit\IObit Security 360\IS360tray.exe" /autostart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O9 - Extra button: (no name) - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O13 - Gopher Prefix:
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: IS360service - IObit - C:\Program Files\IObit\IObit Security 360\IS360srv.exe
O23 - Service: lxdxCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdxserv.exe
O23 - Service: lxdx_device - - C:\Windows\system32\lxdxcoms.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Program Files\Common Files\Protexis\License Service\PSIService.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: CryptoPlus XME Engine Service (xmengine service) - Monet+, a.s. - C:\Windows\system32\xmesrv.exe

--
End of file - 6868 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2975722950-867314924-3462549915-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2975722950-867314924-3462549915-1000UA.job
C:\Windows\tasks\User_Feed_Synchronization-{900DA6ED-0FBB-4763-AD08-88D3830288AC}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - c:\program files\real\realplayer\rpbrowserrecordplugin.dll [2009-12-22 329312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-11-27 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"gemstrmw"=C:\Windows\system32\gemstrmw.exe [2003-04-02 24576]
"CNAP2 Launcher"=C:\Windows\system32\spool\DRIVERS\W32X86\3\CNAP2LAK.EXE [2007-09-06 406944]
"reset"=regedit /s reset.reg []
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-05-14 2029640]
"IObit Security 360"=C:\Program Files\IObit\IObit Security 360\IS360tray.exe [2009-11-14 1278736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Tata^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Tata^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Windows Mail.lnk]
C:\PROGRA~1\WINDOW~1\WinMail.exe [2008-01-19 397312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
wlnotify.dll []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"RunStartupScriptSync"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"RunStartupScriptSync"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSearchProgramsInStartMenu"=0
"NoInstrumentation"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoResolveTrack"=
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f4f99d0d-c0a1-11de-98d0-001d60d271ab}]
shell\AutoRun\command - eexyv.exe
shell\open\command - eexyv.exe


======List of files/folders created in the last 1 months======

2010-01-13 16:34:24 ----D---- C:\Program Files\trend micro
2010-01-13 16:34:19 ----D---- C:\rsit
2010-01-13 12:27:05 ----D---- C:\ProgramData\IObit
2010-01-13 08:39:08 ----A---- C:\Windows\system32\t2embed.dll
2010-01-13 08:39:08 ----A---- C:\Windows\system32\fontsub.dll
2010-01-12 09:43:49 ----D---- C:\Program Files\MP3 WAV Converter
2010-01-12 09:14:20 ----D---- C:\Program Files\coolpro2
2010-01-08 23:22:03 ----A---- C:\CEPxB89A.tmp
2010-01-08 23:15:13 ----A---- C:\CEPx8339.tmp
2010-01-08 23:13:01 ----A---- C:\CEPx71F4.tmp
2010-01-08 16:01:30 ----A---- C:\Windows\ccolwiz.ini
2010-01-08 14:58:34 ----D---- C:\Users\Tata\AppData\Roaming\CSAS
2010-01-08 09:37:59 ----D---- C:\Users\Tata\AppData\Roaming\ABBYY
2010-01-08 09:29:48 ----D---- C:\Program Files\Common Files\ABBYY
2010-01-08 09:25:38 ----D---- C:\ProgramData\ABBYY
2010-01-08 09:25:38 ----D---- C:\Program Files\ABBYY FineReader 9.0
2010-01-08 09:21:02 ----D---- C:\temp
2010-01-07 11:18:20 ----D---- C:\Program Files\M2TS Converter
2010-01-07 09:05:30 ----D---- C:\ProgramData\Canneverbe Limited
2010-01-07 09:00:46 ----D---- C:\Program Files\CDBurnerXP
2010-01-07 08:37:46 ----D---- C:\Program Files\DIFX
2010-01-07 08:35:58 ----D---- C:\Program Files\PC Connectivity Solution
2010-01-06 14:36:36 ----D---- C:\Program Files\Common Files\DivX Shared
2010-01-06 14:36:35 ----D---- C:\Program Files\DivX
2010-01-06 14:30:33 ----D---- C:\Program Files\AC3Filter
2010-01-05 12:36:45 ----D---- C:\Users\Tata\AppData\Roaming\FreeHDConverter
2010-01-05 12:36:45 ----D---- C:\Program Files\Free HD Converter
2010-01-05 09:14:31 ----D---- C:\Users\Tata\AppData\Roaming\uTorrent
2010-01-05 08:40:16 ----D---- C:\Users\Tata\AppData\Roaming\Stereoscopic Player
2010-01-05 08:39:08 ----D---- C:\Program Files\Stereoscopic Player
2010-01-04 15:42:04 ----D---- C:\ProgramData\BlurayD
2010-01-04 15:41:17 ----D---- C:\Program Files\Xilisoft
2010-01-04 15:19:40 ----A---- C:\Windows\system32\decdll.dll
2010-01-04 15:19:37 ----D---- C:\Users\Tata\AppData\Roaming\FreeVideoConverter
2010-01-04 15:19:37 ----D---- C:\Program Files\Free Video Converter
2010-01-04 15:15:21 ----D---- C:\Program Files\MKVtoolnix
2010-01-04 14:57:35 ----D---- C:\Program Files\MediaInfo
2010-01-04 14:46:18 ----RA---- C:\Windows\system32\msvcr70.dll
2010-01-04 14:46:18 ----RA---- C:\Windows\system32\icpkcsip.dll
2010-01-04 14:46:16 ----D---- C:\Program Files\CryptoPlus
2010-01-04 14:14:57 ----D---- C:\Users\Tata\AppData\Roaming\PilsCom
2010-01-04 14:14:14 ----A---- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2010-01-04 14:12:53 ----D---- C:\Program Files\Pony Expres
2010-01-01 20:58:29 ----D---- C:\Nostale(CZ)
2009-12-29 01:13:42 ----D---- C:\Program Files\IObit
2009-12-22 08:58:16 ----D---- C:\My Music
2009-12-22 08:57:16 ----A---- C:\Windows\system32\rmoc3260.dll
2009-12-22 08:57:02 ----A---- C:\Windows\system32\pndx5032.dll
2009-12-22 08:57:02 ----A---- C:\Windows\system32\pndx5016.dll
2009-12-22 08:56:45 ----A---- C:\Windows\system32\pncrt.dll
2009-12-16 22:32:55 ----D---- C:\Users\Tata\AppData\Roaming\Apple Computer
2009-12-16 22:30:09 ----D---- C:\ProgramData\Apple
2009-12-16 22:30:09 ----D---- C:\Program Files\Apple Software Update
2009-12-16 19:46:25 ----A---- C:\Windows\data4711.bak
2009-12-16 17:38:34 ----D---- C:\Program Files\vghd
2009-12-15 15:31:01 ----A---- C:\Windows\avisplitter.ini
2009-12-15 15:31:00 ----A---- C:\Windows\system32\yv12vfw.dll
2009-12-15 15:31:00 ----A---- C:\Windows\system32\vp7vfw.dll
2009-12-15 15:31:00 ----A---- C:\Windows\system32\huffyuv.dll
2009-12-15 15:30:59 ----A---- C:\Windows\system32\xvidvfw.dll
2009-12-15 15:30:59 ----A---- C:\Windows\system32\xvidcore.dll
2009-12-15 15:30:59 ----A---- C:\Windows\system32\vp6vfw.dll
2009-12-15 15:30:59 ----A---- C:\Windows\system32\DivXc32f.dll
2009-12-15 15:30:59 ----A---- C:\Windows\system32\DivXc32.dll
2009-12-15 15:30:58 ----A---- C:\Windows\system32\qt-dx331.dll
2009-12-15 15:30:58 ----A---- C:\Windows\system32\dpl100.dll
2009-12-15 15:30:57 ----A---- C:\Windows\system32\divx.dll
2009-12-15 15:30:55 ----A---- C:\Windows\system32\ff_vfw.dll.manifest
2009-12-15 15:30:55 ----A---- C:\Windows\system32\ff_vfw.dll
2009-12-15 15:30:53 ----D---- C:\Program Files\K-Lite Codec Pack
2009-12-15 15:09:47 ----D---- C:\Program Files\VLC Player
2009-12-15 10:21:24 ----D---- C:\Program Files\Conduit
2009-12-15 10:21:16 ----D---- C:\Users\Tata\AppData\Roaming\BSplayer
2009-12-15 10:21:14 ----D---- C:\Program Files\BSplayer
2009-12-14 22:18:53 ----D---- C:\ProgramData\Corel
2009-12-14 22:15:59 ----D---- C:\Program Files\Common Files\Corel
2009-12-14 22:14:23 ----D---- C:\Program Files\Corel
2009-12-14 15:15:01 ----D---- C:\WWW - NEW
2009-12-14 11:49:55 ----D---- C:\WWW
2009-12-14 11:10:56 ----D---- C:\Users\Tata\AppData\Roaming\FileZilla
2009-12-14 11:10:37 ----D---- C:\Program Files\FileZilla FTP Client
2009-12-14 09:51:56 ----D---- C:\Users\Tata\AppData\Roaming\Avanquest
2009-12-14 09:40:43 ----D---- C:\ProgramData\Avanquest
2009-12-14 09:35:24 ----D---- C:\Program Files\Avanquest update
2009-12-14 09:35:19 ----D---- C:\ProgramData\BVRP Software
2009-12-14 09:02:17 ----A---- C:\Windows\wcx_ftp.ini
2009-12-14 08:53:03 ----D---- C:\Program Files\Vyčistit Počítač

======List of files/folders modified in the last 1 months======

2010-01-13 16:51:54 ----D---- C:\Windows\temp
2010-01-13 16:42:22 ----D---- C:\Windows\Prefetch
2010-01-13 16:34:24 ----RAD---- C:\Program Files
2010-01-13 16:21:49 ----AD---- C:\Windows\System32
2010-01-13 16:21:49 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-01-13 16:21:48 ----D---- C:\Windows\inf
2010-01-13 12:27:05 ----AHD---- C:\ProgramData
2010-01-13 12:08:50 ----D---- C:\Windows\winsxs
2010-01-13 12:08:06 ----D---- C:\Program Files\Firefox
2010-01-13 11:59:01 ----D---- C:\Windows\system32\drivers
2010-01-13 11:32:03 ----SHD---- C:\Windows\Installer
2010-01-13 11:30:49 ----D---- C:\Windows
2010-01-13 11:25:42 ----SHD---- C:\System Volume Information
2010-01-13 08:51:02 ----D---- C:\Windows\system32\catroot
2010-01-13 08:50:51 ----AD---- C:\Program Files\Windows Mail
2010-01-13 08:40:32 ----D---- C:\Windows\Debug
2010-01-12 10:08:53 ----AD---- C:\ProgramData\TEMP
2010-01-12 09:40:02 ----A---- C:\Windows\win.ini
2010-01-12 09:33:02 ----A---- C:\Windows\system.ini
2010-01-12 00:01:00 ----D---- C:\Windows\system32\catroot2
2010-01-08 22:57:51 ----D---- C:\FILMY C
2010-01-08 19:49:01 ----D---- C:\INSTALL C
2010-01-08 09:29:48 ----AD---- C:\Program Files\Common Files
2010-01-07 08:44:09 ----AD---- C:\Program Files\Nokia
2010-01-07 08:37:38 ----DC---- C:\Windows\system32\DRVSTORE
2010-01-07 08:18:56 ----AD---- C:\ProgramData\Installations
2010-01-06 09:30:47 ----AD---- C:\Users\Tata\AppData\Roaming\Azureus
2010-01-05 01:17:46 ----A---- C:\Windows\system32\mrt.exe
2010-01-04 14:39:14 ----D---- C:\Program Files\ComfortChip1
2010-01-04 11:17:47 ----D---- C:\Users\Tata\AppData\Roaming\IObit
2009-12-29 11:18:08 ----ASD---- C:\ProgramData\Microsoft
2009-12-22 08:58:15 ----D---- C:\Users\Tata\AppData\Roaming\Real
2009-12-22 08:58:11 ----A---- C:\Windows\cdplayer.ini
2009-12-22 08:57:18 ----AD---- C:\Program Files\Common Files\Real
2009-12-18 10:27:48 ----AD---- C:\Program Files\Vuze
2009-12-18 10:01:52 ----D---- C:\Windows\pss
2009-12-18 09:59:00 ----D---- C:\Program Files\Common Files\AVSMedia
2009-12-18 09:50:59 ----HDC---- C:\ProgramData\{9DF77379-A83D-46CF-968D-03CBC652096D}
2009-12-18 09:12:22 ----AD---- C:\ProgramData\Apple Computer
2009-12-16 22:30:38 ----AD---- C:\Program Files\Common Files\Apple
2009-12-15 15:22:17 ----A---- C:\Windows\iun6002.exe
2009-12-15 15:11:58 ----AD---- C:\Users\Tata\AppData\Roaming\dvdcss
2009-12-15 10:21:24 ----RAD---- C:\Users
2009-12-15 10:21:16 ----D---- C:\Users\Tata\AppData\Roaming\BSplayer PRO
2009-12-14 22:23:52 ----D---- C:\Users\Tata\AppData\Roaming\Corel
2009-12-14 22:16:15 ----RSD---- C:\Windows\Fonts
2009-12-14 16:11:35 ----ASD---- C:\Users\Tata\AppData\Roaming\Microsoft
2009-12-14 09:35:19 ----HD---- C:\Program Files\InstallShield Installation Information
2009-12-14 09:34:12 ----AD---- C:\Program Files\Common Files\microsoft shared

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 cpuidlep;CpuIdle Pro System Driver; C:\Windows\system32\drivers\cpuidlep.sys [2009-11-03 4484]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-05-14 107256]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2008-01-20 33292]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-05-14 114472]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2009-05-14 133000]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2009-05-14 38240]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2009-05-14 93312]
R2 hardlock;hardlock; \??\C:\Windows\system32\drivers\hardlock.sys [2005-07-28 685056]
R2 Haspnt;Haspnt; \??\C:\Windows\system32\drivers\Haspnt.sys [2009-01-07 47616]
R2 MaVctrl;MaVctrl; C:\Windows\system32\DRIVERS\MaVc2K.sys [2007-01-16 11986]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-08-08 45568]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R2 RMCAST;Ovladač protokolu RMCAST (Pgm); C:\Windows\system32\DRIVERS\RMCAST.sys [2009-04-11 113664]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-09-30 1184768]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-21 4450816]
R3 BlurayDR;BlurayDR; C:\Windows\System32\Drivers\BlurayDR.sys [2009-11-05 109056]
R3 CmBatt;Ovladač baterie Microsoft ACPI Control Method Battery; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-19 14208]
R3 GEARAspiWDM;GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2006-09-19 15664]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-10-06 2779104]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\Windows\system32\drivers\MODEMCSA.sys [2008-01-19 18432]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2008-03-27 7680]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2009-11-16 216576]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2009-05-05 1095808]
R3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 Afc;PPdus ASPI Shell; C:\Windows\system32\drivers\Afc.sys [2006-11-10 18688]
S3 Bridge;@%SystemRoot%\system32\bridgeres.dll,-3; C:\Windows\system32\DRIVERS\bridge.sys [2009-04-11 93696]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-04-11 93696]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-19 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
S3 btnetBUs;Bluetooth PAN Bus Service; C:\Windows\System32\Drivers\btnetBus.sys [2008-12-07 30088]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 ENTECH;ENTECH; \??\C:\Windows\system32\DRIVERS\ENTECH.sys [2004-10-25 21664]
S3 GemCCID;GemCCID; C:\Windows\System32\Drivers\GemCCID.sys [2009-08-10 89600]
S3 GTwinUSB;GTwinUSB; C:\Windows\System32\Drivers\GTwinUSB.sys [2002-10-04 61776]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2009-06-17 35472]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2009-06-17 37392]
S3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2009-06-17 28560]
S3 MA8630C;MA8630C; C:\Windows\system32\DRIVERS\MA8630C.sys [2004-09-14 23248]
S3 MA8630M;MA8630M; C:\Windows\system32\DRIVERS\MA8630M.sys [2005-01-25 25428]
S3 MA8630U;MA8630U; C:\Windows\system32\DRIVERS\MA8630U.sys [2005-12-09 50641]
S3 MaRdPnp;MaRdPnp; C:\Windows\system32\DRIVERS\MaRdP2K.sys [2005-08-18 49867]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 NETw3v32;Intel(R) PRO/Wireless 3945BG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-11-02 1781760]
S3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2006-10-14 4422560]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2008-04-09 47360]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
S3 s816bus;Sony Ericsson Device 816 driver (WDM); C:\Windows\system32\DRIVERS\s816bus.sys [2007-06-19 81832]
S3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s816mdfl.sys [2007-06-19 13864]
S3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s816mdm.sys [2007-06-19 107304]
S3 s816mgmt;Sony Ericsson Device 816 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s816mgmt.sys [2007-06-19 99112]
S3 s816nd5;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (NDIS); C:\Windows\system32\DRIVERS\s816nd5.sys [2007-06-19 21928]
S3 s816obex;Sony Ericsson Device 816 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s816obex.sys [2007-06-19 97320]
S3 s816unic;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (WDM); C:\Windows\system32\DRIVERS\s816unic.sys [2007-06-19 97704]
S3 SNP2STD;USB2.0 PC Camera (SNP2STD); C:\Windows\system32\DRIVERS\snp2sxp.sys [2006-03-22 10220032]
S3 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys [2009-09-28 7168]
S3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2006-11-02 41064]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2009-02-09 7808]
S3 usbaudio;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]
S3 usbser;Nokia USB Serial Port; C:\Windows\system32\drivers\usbser.sys [2009-04-11 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2009-02-09 7808]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-19 134016]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 ASLDRService;ASLDR Service; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [2007-02-05 94208]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2009-07-21 733184]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-05-14 731840]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE [2006-04-18 102400]
R2 IS360service;IS360service; C:\Program Files\IObit\IObit Security 360\IS360srv.exe [2009-11-14 312592]
R2 LPDSVC;@%systemroot%\system32\lpdsvc.dll,-500; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 lxdx_device;lxdx_device; C:\Windows\system32\lxdxcoms.exe [2008-02-28 594600]
R2 lxdxCATSCustConnectService;lxdxCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdxserv.exe [2008-02-28 98984]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-02-18 129880]
R2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-02-18 129880]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2009-09-06 71096]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 ProtexisLicensing;ProtexisLicensing; C:\Program Files\Common Files\Protexis\License Service\PSIService.exe [2006-11-02 174656]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 xmengine service;CryptoPlus XME Engine Service; C:\Windows\system32\xmesrv.exe [2007-05-22 28672]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-05-14 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-07-03 651720]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-10-27 657408]
S4 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-02-18 129880]

-----------------EOF-----------------

Dík, Michal

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware