Preventivna kontrola

[cino]

Logfile of random's system information tool 1.06 (written by random/random)
Run by Erik at 2010-01-27 16:27:51
Microsoft Windows XP Professional Service Pack 3
System drive C: has 529 GB (87%) free of 610 GB
Total RAM: 2039 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:27:56, on 27.1.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Valve\Steam\Steam.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\Program Files\Mozilla Firefox 3.6 Beta 5\firefox.exe
C:\Documents and Settings\Erik\Desktop\RSIT.exe
C:\Program Files\trend micro\Erik.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: PandoraTV Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1078081533-1644491937-1801674531-1004\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Patka')
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastaviť prekladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Preložiť &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Preložiť &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

--
End of file - 9674 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1078081533-1644491937-1801674531-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1078081533-1644491937-1801674531-1003UA.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll [2009-12-20 503808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf00e119-21a3-4fd1-b178-3b8537e75c92}]
IeMonitorBho Class - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll [2009-06-29 110592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
PandoraTV Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2009-07-10 1174920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - PandoraTV Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2009-07-10 1174920]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\Documents and Settings\All Users\Application Data\LangSoft\WebIE.dll [2009-12-20 503808]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2008-04-13 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2008-04-13 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-13 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-13 455168]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-11-24 98304]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-07-20 18670592]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2010-01-05 4608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-11-25 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2009-01-08 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Valve\Steam\SteamApps\common\dirt 2\dirt2_game.exe"="C:\Program Files\Valve\Steam\SteamApps\common\dirt 2\dirt2_game.exe:*:Enabled:DiRT2 Executable"
"C:\Program Files\Valve\Steam\SteamApps\1kyuubi1\counter-strike\hl.exe"="C:\Program Files\Valve\Steam\SteamApps\1kyuubi1\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Valve\Steam\SteamApps\common\dirt 2\dirt2.exe"="C:\Program Files\Valve\Steam\SteamApps\common\dirt 2\dirt2.exe:*:Enabled:DiRT 2"
"C:\Documents and Settings\Erik\Desktop\Cs 1.6 s botami\hl.exe"="C:\Documents and Settings\Erik\Desktop\Cs 1.6 s botami\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\RelevantKnowledge\rlvknlg.exe"="C:\Program Files\RelevantKnowledge\rlvknlg.exe:*:Enabled:rlvknlg.exe"
"C:\Program Files\Empire Interactive\FlatOut Ultimate Carnage\Fouc.exe"="C:\Program Files\Empire Interactive\FlatOut Ultimate Carnage\Fouc.exe:*:Enabled:FlatOut Ultimate Carnage"
"C:\Documents and Settings\Erik\Desktop\New Folder\perfect dark.exe"="C:\Documents and Settings\Erik\Desktop\New Folder\perfect dark.exe:*:Enabled:perfect dark"
"C:\Documents and Settings\Erik\Desktop\New Folder\New Folder (2)\perfect dark.exe"="C:\Documents and Settings\Erik\Desktop\New Folder\New Folder (2)\perfect dark.exe:*:Enabled:perfect dark"
"C:\Documents and Settings\Erik\Desktop\New Folder\PD\perfect dark.exe"="C:\Documents and Settings\Erik\Desktop\New Folder\PD\perfect dark.exe:*:Enabled:perfect dark"
"C:\Documents and Settings\Erik\Desktop\New Folder\New Folder (2)\Share.exe"="C:\Documents and Settings\Erik\Desktop\New Folder\New Folder (2)\Share.exe:*:Enabled:Share.exe"
"C:\Documents and Settings\Erik\Desktop\New Folder\share\Share.exe"="C:\Documents and Settings\Erik\Desktop\New Folder\share\Share.exe:*:Enabled:Share"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-01-27 16:27:51 ----D---- C:\rsit
2010-01-21 11:51:55 ----D---- C:\WINDOWS\Sun
2010-01-20 16:33:03 ----D---- C:\Program Files\ffdshow
2010-01-20 16:28:02 ----D---- C:\Program Files\AviSynth 2.5
2010-01-20 16:27:46 ----D---- C:\Program Files\megui
2010-01-19 17:14:12 ----D---- C:\Documents and Settings\Erik\Application Data\Složka odesílání Share-to-Web
2010-01-17 12:05:56 ----SHD---- C:\Config.Msi
2010-01-13 08:45:33 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-01-13 08:45:25 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-01-12 18:45:01 ----D---- C:\Program Files\Lavalys
2010-01-11 09:43:26 ----D---- C:\Program Files\7-Zip
2010-01-08 16:48:09 ----D---- C:\Program Files\VideoLAN
2010-01-07 18:38:18 ----D---- C:\Documents and Settings\Erik\Application Data\Aegisub
2010-01-07 18:38:10 ----D---- C:\Program Files\Aegisub
2010-01-05 18:04:20 ----D---- C:\Program Files\Empire Interactive
2010-01-05 18:01:14 ----A---- C:\WINDOWS\system32\_AxShlEx.dll
2010-01-05 18:00:41 ----D---- C:\Program Files\Alcohol Soft
2010-01-05 17:12:09 ----D---- C:\Program Files\trend micro
2010-01-05 16:40:43 ----A---- C:\WINDOWS\system32\TUProgSt.exe
2010-01-05 16:40:39 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2010-01-05 16:40:39 ----A---- C:\WINDOWS\system32\TuneUpDefragService.exe
2010-01-05 16:39:48 ----D---- C:\WINDOWS\system32\appmgmt
2010-01-05 10:43:58 ----A---- C:\WINDOWS\system32\javaws.exe
2010-01-05 10:43:58 ----A---- C:\WINDOWS\system32\javaw.exe
2010-01-05 10:43:58 ----A---- C:\WINDOWS\system32\java.exe
2010-01-04 16:17:13 ----D---- C:\Documents and Settings\Erik\Application Data\LimeWire
2010-01-04 16:16:50 ----A---- C:\WINDOWS\system32\deploytk.dll
2010-01-04 16:16:41 ----D---- C:\Program Files\Java
2010-01-04 16:16:25 ----D---- C:\Documents and Settings\Erik\Application Data\Sun
2010-01-04 16:16:22 ----D---- C:\Program Files\LimeWire
2010-01-04 11:20:17 ----D---- C:\WINDOWS\system32\RTCOM
2010-01-04 11:20:11 ----A---- C:\WINDOWS\vncutil.exe
2010-01-04 11:20:11 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2010-01-04 11:20:10 ----A---- C:\WINDOWS\SkyTel.exe
2010-01-04 11:20:10 ----A---- C:\WINDOWS\RtlUpd.exe
2010-01-04 11:20:10 ----A---- C:\WINDOWS\RtkAudioService.exe
2010-01-04 11:20:09 ----A---- C:\WINDOWS\RTLCPL.EXE
2010-01-04 11:20:05 ----A---- C:\WINDOWS\RTHDCPL.EXE
2010-01-04 11:20:03 ----A---- C:\WINDOWS\MicCal.exe
2010-01-04 11:20:03 ----A---- C:\WINDOWS\ALCMTR.EXE
2010-01-04 11:20:02 ----A---- C:\WINDOWS\ALCWZRD.EXE
2010-01-04 11:19:55 ----R---- C:\WINDOWS\RtlExUpd.dll
2010-01-03 19:24:50 ----D---- C:\Program Files\Common Files\Hewlett-Packard
2010-01-03 19:24:47 ----D---- C:\Program Files\Hewlett-Packard
2010-01-03 19:24:10 ----D---- C:\col3927
2009-12-30 15:50:52 ----D---- C:\Program Files\RelevantKnowledge
2009-12-30 15:50:21 ----D---- C:\Program Files\KC Softwares
2009-12-28 22:02:25 ----D---- C:\Documents and Settings\All Users\Application Data\McAfee
2009-12-28 21:53:01 ----D---- C:\Program Files\Common Files\Adobe
2009-12-28 21:52:49 ----D---- C:\Program Files\Adobe
2009-12-28 21:52:43 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-12-28 21:52:38 ----D---- C:\Program Files\Common Files\Adobe AIR
2009-12-28 18:20:40 ----A---- C:\WINDOWS\MegaManager.INI

======List of files/folders modified in the last 1 months======

2010-01-27 15:19:48 ----D---- C:\Documents and Settings\Erik\Application Data\uTorrent
2010-01-27 15:10:38 ----D---- C:\WINDOWS\Prefetch
2010-01-27 14:30:30 ----D---- C:\WINDOWS\Temp
2010-01-27 10:53:27 ----D---- C:\WINDOWS\system32
2010-01-27 10:53:27 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-01-27 10:49:19 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-27 09:23:10 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-26 21:23:52 ----D---- C:\Documents and Settings\Erik\Application Data\Skype
2010-01-26 21:23:34 ----D---- C:\Documents and Settings\Erik\Application Data\skypePM
2010-01-26 18:29:46 ----D---- C:\Documents and Settings\Erik\Application Data\ICQ
2010-01-25 07:52:26 ----D---- C:\WINDOWS
2010-01-24 13:19:22 ----A---- C:\WINDOWS\win.ini
2010-01-24 09:43:39 ----D---- C:\WINDOWS\system32\CatRoot
2010-01-24 09:42:03 ----HD---- C:\WINDOWS\inf
2010-01-24 09:42:00 ----D---- C:\WINDOWS\system32\dllcache
2010-01-24 09:41:39 ----HD---- C:\WINDOWS\$hf_mig$
2010-01-23 12:04:35 ----RD---- C:\Program Files
2010-01-22 08:54:15 ----D---- C:\Program Files\Internet Explorer
2010-01-22 08:54:06 ----D---- C:\WINDOWS\ie8updates
2010-01-18 16:31:28 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2010-01-18 12:27:24 ----D---- C:\Program Files\Mozilla Firefox 3.6 Beta 5
2010-01-17 12:06:26 ----SHD---- C:\WINDOWS\Installer
2010-01-16 00:52:56 ----SD---- C:\Documents and Settings\Erik\Application Data\Microsoft
2010-01-13 20:45:26 ----D---- C:\WINDOWS\Debug
2010-01-13 10:26:31 ----D---- C:\WINDOWS\AppPatch
2010-01-13 08:45:59 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-01-05 18:08:14 ----D---- C:\WINDOWS\WinSxS
2010-01-05 18:07:53 ----RSD---- C:\WINDOWS\assembly
2010-01-05 18:07:27 ----D---- C:\WINDOWS\system32\DirectX
2010-01-05 17:58:15 ----D---- C:\WINDOWS\system32\drivers
2010-01-05 16:40:41 ----SD---- C:\WINDOWS\Tasks
2010-01-05 16:40:36 ----D---- C:\Program Files\TuneUp Utilities 2009
2010-01-05 01:17:46 ----A---- C:\WINDOWS\system32\MRT.exe
2010-01-04 11:20:01 ----D---- C:\Program Files\Realtek
2010-01-04 11:20:00 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-03 19:25:10 ----D---- C:\WINDOWS\twain_32
2010-01-03 19:24:50 ----D---- C:\Program Files\Common Files
2010-01-03 17:27:13 ----D---- C:\Program Files\ICQ6.5
2009-12-30 16:21:51 ----D---- C:\Documents and Settings\Erik\Application Data\Adobe
2009-12-28 23:20:13 ----D---- C:\Documents and Settings\All Users\Application Data\NOS

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AFS2K;AFS2k; C:\WINDOWS\system32\drivers\AFS2K.sys [2004-10-08 35840]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-11-25 56816]
R2 rspndr;Link-Layer Topology Discovery Responder; C:\WINDOWS\system32\DRIVERS\rspndr.sys [2009-01-08 62848]
R3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2009-01-08 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-11-25 4463104]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-07-20 5795328]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2009-01-08 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2009-01-08 61824]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-06-29 142592]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2009-01-08 30336]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 ashwd3pb;ashwd3pb; C:\WINDOWS\system32\drivers\ashwd3pb.sys []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 MSICDSetup;MSICDSetup; \??\D:\CDriver.sys []
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 wip0204;Wippien Network Adapter 2.4; C:\WINDOWS\system32\DRIVERS\wip0204.sys [2008-12-31 23480]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-01-08 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-01-08 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-11-25 602112]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2009-08-16 222968]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:\WINDOWS\System32\TUProgSt.exe [2010-01-05 604416]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2010-01-05 361216]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------


Dakujem.

[Caroprd111]

Zdravím

Na logu se pracuje, prosím o strpení.

[Caroprd111]

Doporučuji odinstalovat (pokud nepoužíváte) toolbary (lišty) v Přidat nebo odebrat programy.

V logu nevidím firewall, doinstalujte Přehled: http://www.viry.cz/forum/viewtopic.php?f=41&t=6523


Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478
- Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.

Záložka Čistič
- Dejte analyzovat, po dokončení dejte Spustit Ccleaner.

Záložka Registry
- Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
OK Zavřít


Jsou s PC nějaké problémy

EDIT:

Stáhněte a uložte, nejlépe na plochu http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypněte všechny rezidentní bezpečnostní programy - firewally, antiviry, antispywary

Spusťte aplikaci pod účtem s oprávněním Administrátora (Správce), ihned po startu se zobrází stránka s licenčnímy podmínkami, pokračujte stisknutím tlačítka "Ano"

Dále postupujte dle pokynů, během scanu nespouštějte jiné aplikace a neklikejte do zobrazujícího se okna

Scan by měl trvat okolo 5 - 10 minut, po dokončení Combofix zobrazí log C:\ComboFix.txt , který sem vložte.

Během skenování může být počítač restartován.

[cino]

ComboFix 10-01-27.03 - Erik 27.01.2010 23:31:58.1.4 - x86
Microsoft Windows XP Professional 5.1.2600.3.1250.420.1033.18.2039.1634 [GMT 1:00]
Spuštěný z: c:\documents and settings\Erik\Desktop\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\ICQ6.5\ICQLRun.exe
c:\program files\RelevantKnowledge

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-12-27 do 2010-01-27 )))))))))))))))))))))))))))))))
.

2010-01-27 15:27 . 2010-01-27 15:27 -------- d-----w- C:\rsit
2010-01-24 07:35 . 2008-05-09 10:45 90112 ------w- c:\windows\system32\dllcache\wshext.dll
2010-01-24 07:35 . 2008-05-09 10:45 180224 ------w- c:\windows\system32\dllcache\scrobj.dll
2010-01-24 07:35 . 2008-05-09 10:45 172032 ------w- c:\windows\system32\dllcache\scrrun.dll
2010-01-24 07:35 . 2008-05-09 08:45 135168 ------w- c:\windows\system32\dllcache\cscript.exe
2010-01-24 07:35 . 2008-05-08 11:24 155648 ------w- c:\windows\system32\dllcache\wscript.exe
2010-01-21 10:51 . 2010-01-21 10:51 -------- d-----w- c:\windows\Sun
2010-01-20 15:33 . 2010-01-20 15:33 -------- d-----w- c:\program files\ffdshow
2010-01-20 15:29 . 2010-01-20 15:29 -------- d-----w- c:\documents and settings\Erik\Local Settings\Application Data\www.doom9.net
2010-01-20 15:28 . 2010-01-20 15:28 -------- d-----w- c:\program files\AviSynth 2.5
2010-01-20 15:27 . 2010-01-27 19:03 -------- d-----w- c:\program files\megui
2010-01-19 16:14 . 2010-01-19 16:14 -------- d-----w- c:\documents and settings\Erik\Application Data\Složka odesílání Share-to-Web
2010-01-13 07:13 . 2009-11-21 15:51 471552 ------w- c:\windows\system32\dllcache\aclayers.dll
2010-01-12 17:45 . 2010-01-12 17:45 -------- d-----w- c:\program files\Lavalys
2010-01-12 13:07 . 2010-01-12 13:07 -------- d-----w- c:\documents and settings\Patka\Application Data\Media Player Classic
2010-01-11 08:43 . 2010-01-11 08:43 -------- d-----w- c:\program files\7-Zip
2010-01-08 15:48 . 2010-01-08 15:48 -------- d-----w- c:\program files\VideoLAN
2010-01-07 17:38 . 2010-01-12 17:39 -------- d-----w- c:\documents and settings\Erik\Application Data\Aegisub
2010-01-07 17:38 . 2010-01-07 17:38 -------- d-----w- c:\program files\Aegisub
2010-01-05 17:09 . 2010-01-05 17:09 -------- d-----w- c:\documents and settings\Erik\Local Settings\Application Data\FlatOut Ultimate Carnage
2010-01-05 17:04 . 2010-01-05 17:04 -------- d-----w- c:\program files\Empire Interactive
2010-01-05 17:01 . 2008-02-22 11:30 334792 ----a-w- c:\windows\system32\_AxShlEx.dll
2010-01-05 17:00 . 2010-01-05 17:00 -------- d-----w- c:\program files\Alcohol Soft
2010-01-05 16:58 . 2010-01-05 16:58 716272 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-01-05 16:12 . 2010-01-27 15:27 -------- d-----w- c:\program files\trend micro
2010-01-05 15:40 . 2010-01-05 15:40 604416 ----a-w- c:\windows\system32\TUProgSt.exe
2010-01-05 15:40 . 2010-01-05 15:40 361216 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2010-01-05 15:40 . 2009-04-27 13:21 28928 ----a-w- c:\windows\system32\uxtuneup.dll
2010-01-05 09:43 . 2010-01-05 09:43 152576 ----a-w- c:\documents and settings\Erik\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
2010-01-05 09:43 . 2010-01-05 09:43 79488 ----a-w- c:\documents and settings\Erik\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2010-01-04 15:16 . 2009-10-11 03:17 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-01-04 15:16 . 2010-01-05 09:43 -------- d-----w- c:\program files\Java
2010-01-04 15:16 . 2010-01-04 15:16 152576 ----a-w- c:\documents and settings\Erik\Application Data\Sun\Java\jre1.6.0_16\lzma.dll
2010-01-04 15:16 . 2010-01-04 15:17 -------- d-----w- c:\program files\LimeWire
2010-01-04 10:19 . 2009-06-24 02:43 831488 ------r- c:\windows\RtlExUpd.dll
2010-01-04 07:49 . 2010-01-04 07:49 -------- d-----w- c:\documents and settings\Patka\Application Data\Složka odesílání Share-to-Web
2010-01-03 18:25 . 2004-10-08 01:16 35840 ----a-w- c:\windows\system32\drivers\AFS2K.SYS
2010-01-03 18:25 . 2008-04-13 23:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2010-01-03 18:24 . 2010-01-03 18:24 -------- d-----w- c:\program files\Common Files\Hewlett-Packard
2010-01-03 18:24 . 2010-01-03 18:25 -------- d-----w- c:\program files\Hewlett-Packard
2010-01-03 18:24 . 2010-01-03 18:24 -------- d-----w- C:\col3927
2009-12-31 09:45 . 2009-12-31 12:53 -------- d-----w- c:\documents and settings\Patka\Application Data\Skype
2009-12-30 14:50 . 2009-12-30 14:50 -------- d-----w- c:\program files\KC Softwares

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-27 22:33 . 2009-12-20 10:34 -------- d-----w- c:\program files\ICQ6.5
2010-01-27 19:08 . 2009-12-20 15:01 -------- d-----w- c:\documents and settings\Erik\Application Data\Any DVD Converter Professional
2010-01-27 17:17 . 2009-12-20 08:30 -------- d-----w- c:\documents and settings\Erik\Application Data\uTorrent
2010-01-27 16:02 . 2009-12-20 10:51 -------- d-----w- c:\documents and settings\Erik\Application Data\Skype
2010-01-27 16:00 . 2009-12-20 10:53 -------- d-----w- c:\documents and settings\Erik\Application Data\skypePM
2010-01-26 17:29 . 2009-12-20 10:34 -------- d-----w- c:\documents and settings\Erik\Application Data\ICQ
2010-01-18 15:31 . 2009-12-20 00:43 85504 ----a-w- c:\windows\system32\ff_vfw.dll
2010-01-18 11:27 . 2009-12-22 21:19 -------- d-----w- c:\program files\Mozilla Firefox 3.6 Beta 5
2010-01-17 11:06 . 2009-12-28 20:53 -------- d-----w- c:\program files\Common Files\Adobe
2010-01-13 07:45 . 2009-12-21 17:54 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2010-01-05 15:40 . 2009-12-20 21:14 -------- d-----w- c:\program files\TuneUp Utilities 2009
2010-01-05 15:39 . 2010-01-04 15:17 -------- d-----w- c:\documents and settings\Erik\Application Data\LimeWire
2010-01-04 10:20 . 2009-12-20 00:03 -------- d-----w- c:\program files\Realtek
2010-01-04 10:20 . 2009-12-20 00:03 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-28 22:20 . 2009-12-21 18:27 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS
2009-12-28 21:02 . 2009-12-28 21:02 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee
2009-12-28 20:52 . 2009-12-28 20:52 -------- d-----w- c:\program files\Common Files\Adobe AIR
2009-12-28 20:52 . 2009-12-28 20:52 86016 ----a-w- c:\documents and settings\All Users\Application Data\NOS\Adobe_Downloads\arh.exe
2009-12-24 21:44 . 2009-12-24 21:44 -------- d-----w- c:\documents and settings\Patka\Application Data\pokerth
2009-12-24 20:03 . 2009-12-24 20:03 -------- d-----w- c:\documents and settings\Erik\Application Data\pokerth
2009-12-24 20:02 . 2009-12-24 20:01 -------- d-----w- c:\program files\PokerTH
2009-12-23 23:42 . 2009-12-23 23:21 -------- d-----w- c:\documents and settings\Erik\Application Data\Cool Record Edit Pro
2009-12-23 23:37 . 2009-12-23 23:37 -------- d-----w- c:\program files\MKVtoolnix
2009-12-23 23:35 . 2009-12-23 23:35 -------- d-----w- c:\program files\CCleaner
2009-12-23 23:20 . 2009-12-23 23:20 -------- d-----w- c:\program files\Cool Record Edit Pro
2009-12-22 22:49 . 2009-12-22 10:12 -------- d-----w- c:\documents and settings\Erik\Application Data\Wippien
2009-12-22 22:49 . 2009-12-22 10:12 -------- d-----w- c:\program files\Wippien
2009-12-22 15:01 . 2009-12-20 01:42 90352 ----a-w- c:\documents and settings\Patka\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-12-22 15:01 . 2009-12-22 15:01 -------- d-----w- c:\documents and settings\Patka\Application Data\Wippien
2009-12-22 10:58 . 2009-12-20 00:35 90352 ----a-w- c:\documents and settings\Erik\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-12-22 10:25 . 2009-12-21 17:57 -------- d-----w- c:\program files\Microsoft Works
2009-12-22 08:08 . 2009-12-19 23:58 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-12-22 08:08 . 2009-12-19 23:58 2850 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2009-12-21 19:14 . 2008-12-20 22:15 916480 ----a-w- c:\windows\system32\wininet.dll
2009-12-21 18:27 . 2009-12-21 18:27 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee Security Scan
2009-12-21 18:27 . 2009-12-21 18:27 1924200 ----a-w- c:\documents and settings\All Users\Application Data\NOS\Adobe_Downloads\install_flash_player.exe
2009-12-21 17:57 . 2009-12-20 00:19 -------- d-----w- c:\program files\MSBuild
2009-12-21 17:56 . 2009-12-21 17:56 -------- d-----w- c:\program files\Microsoft.NET
2009-12-21 17:54 . 2009-12-21 17:54 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2009-12-21 13:45 . 2009-12-21 13:45 -------- d-----w- c:\documents and settings\Patka\Application Data\LangSoft
2009-12-20 21:14 . 2009-12-20 21:14 -------- d-----w- c:\documents and settings\Erik\Application Data\TuneUp Software
2009-12-20 21:14 . 2009-12-20 21:14 -------- d-----w- c:\documents and settings\All Users\Application Data\TuneUp Software
2009-12-20 21:14 . 2009-12-20 21:13 -------- d-sh--w- c:\documents and settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2009-12-20 16:11 . 2009-12-20 13:39 -------- d-----w- c:\program files\Unlocker
2009-12-20 16:09 . 2009-12-20 16:09 503808 ----a-w- c:\documents and settings\All Users\Application Data\LangSoft\WebIE.dll
2009-12-20 16:09 . 2009-12-20 16:09 299008 ----a-w- c:\documents and settings\All Users\Application Data\LangSoft\TrnWord.dll
2009-12-20 16:09 . 2009-12-20 16:08 -------- d-----w- c:\documents and settings\All Users\Application Data\LangSoft
2009-12-20 16:09 . 2009-12-20 16:09 45056 ----a-w- c:\documents and settings\All Users\Application Data\LangSoft\TRNOEH.DLL
2009-12-20 16:09 . 2009-12-20 16:09 356352 ----a-w- c:\documents and settings\All Users\Application Data\LangSoft\TrnOutl.dll
2009-12-20 16:09 . 2009-12-20 16:09 26624 ----a-w- c:\documents and settings\All Users\Application Data\LangSoft\OETRN.EXE
2009-12-20 16:09 . 2009-12-20 16:09 200704 ----a-w- c:\documents and settings\All Users\Application Data\LangSoft\TRNOET.DLL
2009-12-20 16:09 . 2009-12-20 16:08 -------- d-----w- c:\documents and settings\Erik\Application Data\LangSoft
2009-12-20 15:01 . 2009-12-20 15:01 -------- d-----w- c:\program files\Any DVD Converter Professional
2009-12-20 14:08 . 2009-12-20 11:05 -------- d-----w- c:\documents and settings\All Users\Application Data\Codemasters
2009-12-20 14:07 . 2009-12-20 10:59 -------- d-----w- c:\program files\OpenAL
2009-12-20 13:36 . 2009-12-20 13:36 155648 ----a-w- c:\windows\system32\libssl32.dll
2009-12-20 11:05 . 2009-12-20 11:05 -------- d-----w- c:\program files\BRS
2009-12-20 11:00 . 2009-12-20 10:59 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2009-12-20 10:59 . 2009-12-20 10:59 445016 ----a-w- c:\windows\system32\wrap_oal.dll
2009-12-20 10:59 . 2009-12-20 10:59 109144 ----a-w- c:\windows\system32\OpenAL32.dll
2009-12-20 10:53 . 2009-12-20 10:53 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-12-20 10:51 . 2009-12-20 10:51 -------- d-----r- c:\program files\Skype
2009-12-20 10:51 . 2009-12-20 10:51 -------- d-----w- c:\program files\Common Files\Skype
2009-12-20 10:51 . 2009-12-20 10:51 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
2009-12-20 10:35 . 2009-12-20 10:35 -------- d-----w- c:\program files\ICQ6Toolbar
2009-12-20 10:35 . 2009-12-20 10:35 -------- d-----w- c:\documents and settings\All Users\Application Data\ICQ
2009-12-20 09:38 . 2009-12-20 09:38 15872 ----a-r- c:\documents and settings\Erik\Application Data\Microsoft\Installer\{048298C9-A4D3-490B-9FF9-AB023A9238F3}\Icon048298C9.exe
2009-12-20 09:38 . 2009-12-20 09:38 -------- d-----w- c:\program files\Valve
2009-12-20 08:31 . 2009-12-20 08:31 -------- d-----w- c:\program files\uTorrent
2009-12-20 01:42 . 2009-12-20 01:42 -------- d-----w- c:\documents and settings\Patka\Application Data\ATI
2009-12-20 01:04 . 2009-12-20 01:04 -------- d-----w- c:\program files\Avira
2009-12-20 01:04 . 2009-12-20 01:04 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2009-12-20 00:49 . 2009-12-20 00:49 -------- d-----w- c:\documents and settings\Erik\Application Data\Megaupload
2009-12-20 00:48 . 2009-12-20 00:48 -------- d-----w- c:\program files\Megaupload
2009-12-20 00:48 . 2009-12-20 00:48 -------- d-----w- c:\documents and settings\Erik\Application Data\InstallShield
2009-12-20 00:44 . 2009-12-20 00:44 -------- d-----w- c:\documents and settings\Erik\Application Data\Media Player Classic
2009-12-20 00:44 . 2009-12-20 00:43 -------- d-----w- c:\program files\K-Lite Codec Pack
2009-12-20 00:39 . 2009-12-20 00:38 -------- d-----w- c:\program files\The KMPlayer
2009-12-20 00:38 . 2009-12-20 00:38 -------- d-----w- c:\program files\Ask.com
2009-12-20 00:35 . 2009-12-20 00:32 -------- d-----w- c:\program files\ATI
2009-12-20 00:35 . 2009-12-20 00:35 -------- d-----w- c:\documents and settings\Erik\Application Data\ATI
2009-12-20 00:35 . 2009-12-20 00:35 -------- d-----w- c:\documents and settings\All Users\Application Data\ATI
2009-11-21 15:51 . 2008-04-14 04:41 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-11-20 11:08 . 2009-12-28 20:52 38784 ----a-w- c:\documents and settings\Erik\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2009-11-20 11:08 . 2009-12-28 20:52 38784 ----a-w- c:\documents and settings\Default User\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2009-11-18 17:11 . 2009-12-20 11:05 1347584 ----a-w- c:\windows\system32\rapture3d_oal.dll
2009-11-06 09:59 . 2009-11-06 09:59 15406728 ----a-w- c:\windows\system32\xlive.dll
2009-11-06 09:59 . 2009-11-06 09:59 13642888 ----a-w- c:\windows\system32\xlivefnt.dll
2009-11-02 17:05 . 2009-11-02 17:05 167064 ----a-w- c:\windows\system32\xliveinstall.dll
2009-11-02 17:05 . 2009-11-02 17:05 71832 ----a-w- c:\windows\system32\xliveinstallhost.exe
2009-11-01 12:11 . 2009-12-20 11:05 17686528 ----a-w- c:\windows\system32\mkl_blueripple.dll
.

------- Sigcheck -------

[-] 2009-01-08 . 5AE1C2695F6523AD98B948F2887D8C5E . 361600 . . [5.1.2600.5649] . . c:\windows\system32\drivers\tcpip.sys

[-] 2009-01-08 . 362BC5AF8EAF712832C58CC13AE05750 . 1614848 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2009-07-10 16:28 1174920 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-07-10 1174920]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-07-10 1174920]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2008-04-13 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2008-04-13 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-13 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-13 455168]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-11-24 98304]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"RTHDCPL"="RTHDCPL.EXE" [2009-07-20 18670592]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_2"="shell32" [X]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Valve\\Steam\\SteamApps\\common\\dirt 2\\dirt2_game.exe"=
"c:\\Program Files\\Valve\\Steam\\SteamApps\\1kyuubi1\\counter-strike\\hl.exe"=
"c:\\Program Files\\Valve\\Steam\\SteamApps\\common\\dirt 2\\dirt2.exe"=
"c:\\Documents and Settings\\Erik\\Desktop\\Cs 1.6 s botami\\hl.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Empire Interactive\\FlatOut Ultimate Carnage\\Fouc.exe"=
"c:\\Documents and Settings\\Erik\\Desktop\\New Folder\\PD\\perfect dark.exe"=
"c:\\Documents and Settings\\Erik\\Desktop\\New Folder\\share\\Share.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"32568:TCP"= 32568:TCP:share
"55516:TCP"= 55516:TCP:perfect dark

R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [20.12.2009 2:04 108289]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [20.12.2009 11:35 222968]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [5.1.2010 17:58 716272]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [4.1.2010 11:20 1684736]
S3 MSICDSetup;MSICDSetup;\??\d:\cdriver.sys --> d:\CDriver.sys [?]
S3 wip0204;Wippien Network Adapter 2.4;c:\windows\system32\drivers\wip0204.sys [22.12.2009 11:12 23480]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'

2010-01-27 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 14:37]

2010-01-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1078081533-1644491937-1801674531-1003Core.job
- c:\documents and settings\Erik\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-12-22 14:20]

2010-01-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1078081533-1644491937-1801674531-1003UA.job
- c:\documents and settings\Erik\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-12-22 14:20]

2010-01-27 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2009-07-10 16:29]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\documents and settings\All Users\Application Data\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\documents and settings\All Users\Application Data\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\documents and settings\All Users\Application Data\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\documents and settings\All Users\Application Data\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\documents and settings\All Users\Application Data\LangSoft\WebIE.dll
FF - ProfilePath - c:\documents and settings\Erik\Application Data\Mozilla\Firefox\Profiles\ix0tldue.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://sk.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:sk:official
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8 ... &gfns=1&q=
FF - plugin: c:\documents and settings\Erik\Local Settings\Application Data\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox 3.6 Beta 5\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox 3.6 Beta 5\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox 3.6 Beta 5\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox 3.6 Beta 5\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox 3.6 Beta 5\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".sk");
c:\program files\Mozilla Firefox 3.6 Beta 5\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox 3.6 Beta 5\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox 3.6 Beta 5\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox 3.6 Beta 5\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox 3.6 Beta 5\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox 3.6 Beta 5\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox 3.6 Beta 5\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox 3.6 Beta 5\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox 3.6 Beta 5\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox 3.6 Beta 5\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox 3.6 Beta 5\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox 3.6 Beta 5\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-27 23:34
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1020)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2010-01-27 23:35:09
ComboFix-quarantined-files.txt 2010-01-27 22:35

Před spuštěním: 557 224 644 608 bytes free
Po spuštění: 559 939 502 080 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - BE7D81763B6DF3BA00984C13FD783EAD

[Caroprd111]

Tohle otestujte na http://www.virustotal.com/cs/
c:\windows\system32\drivers\tcpip.sys
c:\windows\system32\sfcfiles.dll

(Soubor nehledejte, jenom vložíte tučně označenou cestu, v případě hlášky "Soubor již byl testován" dejte otestovat znovu. Výsledek analýzy sem vložte.)

[cino]

Tohle otestujte na http://www.virustotal.com/cs/
c:\windows\system32\drivers\tcpip.sys
c:\windows\system32\sfcfiles.dll

(Soubor nehledejte, jenom vložíte tučně označenou cestu, v případě hlášky "Soubor již byl testován" dejte otestovat znovu. Výsledek analýzy sem vložte.)

c:\windows\system32\drivers\tcpip.sys - 0/40
c:\windows\system32\sfcfiles.dll - 1/40 McAfee-GW-Edition 6.8.5 2010.01.27 Heuristic.LooksLike.Trojan.Dropper.R

1. Ccleaner - pouzivam ho skoro denne
2. Problemy s PC nemam, iba som sa chcel uistit.
3. Viem, ze nemam FireWall, ale nemam ho tam naschval, lebo mi robili problem pri stahovani cez utorrent, ktory pouzivam skoro non stop.
4. Ak je to teda vsetko tak Dakujem.

[Caroprd111]

Firewall je důležitá součást zabezpečení PC, vyzkoušejte jiný firewall,třeba nebude dělat problémy. http://www.viry.cz/forum/viewtopic.php?f=41&t=6523

Ano, je to vše, nemáte zač