Prosím o kontrolu logu

[hondar47]

tady je log:

Logfile of random's system information tool 1.06 (written by random/random)
Run by MSI at 2010-02-17 17:07:33
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 145 GB (72%) free of 200 GB
Total RAM: 3068 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:08:25, on 17.2.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\System Control Manager\MSIService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\System Control Manager\MGSysCtrl.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\SolidWorks\swScheduler\swBOEngine.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\MSI\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\MSI.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [MGSysCtrl] C:\Program Files\System Control Manager\MGSysCtrl.exe
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [MobileConnect] %programfiles%\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe /silent
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [DreamSoft FW] C:\Program Files\DreamSoft Firewall\DS_FW.exe
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [RGSC] C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Startup: Jádro Plánovače úloh SolidWorks.lnk = C:\Program Files\SolidWorks\swScheduler\swBOEngine.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Služba Google Update (gupdate1ca52536f0ca6c6) (gupdate1ca52536f0ca6c6) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Micro Star SCM - Unknown owner - C:\Program Files\System Control Manager\MSIService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: Vodafone Mobile Connect Service (VMCService) - Vodafone - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe

--
End of file - 9216 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\MP Scheduled Scan.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}]
PDFCreator Toolbar Helper - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll [2009-10-21 806912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2005-08-04 343112]
{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - PDFCreator Toolbar - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll [2009-10-21 806912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-07-07 13541376]
"nwiz"=nwiz.exe /install []
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-07-03 16876032]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2007-10-26 671744]
"MGSysCtrl"=C:\Program Files\System Control Manager\MGSysCtrl.exe [2008-08-12 684032]
"ITSecMng"=C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [2008-12-19 83336]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-02 32768]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"MobileConnect"=C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe [2008-11-04 2087424]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-02-11 2756488]
"DreamSoft FW"=C:\Program Files\DreamSoft Firewall\DS_FW.exe []
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2010-01-26 1956624]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-07-24 490952]
"RGSC"=C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent []
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

C:\Documents and Settings\MSI\Nabídka Start\Programy\Po spuštění
Jádro Plánovače úloh SolidWorks.lnk - C:\Program Files\SolidWorks\swScheduler\swBOEngine.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=" C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2008-04-27 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"D:\Star Wars Battlefront II\GameData\BattlefrontII.exe"="D:\Star Wars Battlefront II\GameData\BattlefrontII.exe:*:Enabled:BattlefrontII"
"D:\Star Wars Battlefront II\swbf2sm.exe"="D:\Star Wars Battlefront II\swbf2sm.exe:*:Enabled:Star Wars® Battlefront™ 2 Server Manager"
"D:\Star Wars Battlefront II\BattlefrontII.exe"="D:\Star Wars Battlefront II\BattlefrontII.exe:*:Enabled:BattlefrontII"
"D:\CSSClient_build_2768\hl2.exe"="D:\CSSClient_build_2768\hl2.exe:*:Enabled:hl2"
"D:\TrackMania United Forever\TmForever.exe"="D:\TrackMania United Forever\TmForever.exe:*:Enabled:TmForever"
"D:\Splinter Cell Double Agent\SCDA-Offline\System\SplinterCell4.exe"="D:\Splinter Cell Double Agent\SCDA-Offline\System\SplinterCell4.exe:*:Enabled:SplinterCell4"
"D:\Bionic Commando\Bionic Commando\bionic_commando.exe"="D:\Bionic Commando\Bionic Commando\bionic_commando.exe:*:Enabled:Bionic Commando"
"D:\Bionic Commando\Bionic Commando\Support\CAP1-0101.exe"="D:\Bionic Commando\Bionic Commando\Support\CAP1-0101.exe:*:Enabled:Bionic Commando"
"D:\Splinter Cell Double Agent\SCDA-Online\System\SCDA_online.exe"="D:\Splinter Cell Double Agent\SCDA-Online\System\SCDA_online.exe:*:Enabled:SCDA_online"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\KN_StrongDC\StrongDC.exe"="C:\Program Files\KN_StrongDC\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Documents and Settings\MSI\Plocha\Mory-ntb - resident evil 5\RE5DX9.EXE"="C:\Documents and Settings\MSI\Plocha\Mory-ntb - resident evil 5\RE5DX9.EXE:*:Enabled:RESIDENT EVIL 5"
"D:\Resident Evil 5\RE5DX9.EXE"="D:\Resident Evil 5\RE5DX9.EXE:*:Enabled:RESIDENT EVIL 5"
"D:\Counter Strike 1.6\hl.exe"="D:\Counter Strike 1.6\hl.exe:*:Enabled:Half-Life Launcher"
"D:\Counter Strike 1.6\cstrike.exe"="D:\Counter Strike 1.6\cstrike.exe:*:Enabled:Counter-Strike Launcher"
"D:\Maple 11\jre\bin\java.exe"="D:\Maple 11\jre\bin\java.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"D:\Heroes Over Europe\heroes2.exe"="D:\Heroes Over Europe\heroes2.exe:*:Enabled:heroes2"
"C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe"="C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe:*:Enabled:Flashget2"
"C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe"="C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe:*:Enabled:FGLiveUpdate"
"C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe"="C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe:*:Enabled:FGLiveUpdateEx"
"D:\Modern Warfare 2\iw4mp.exe"="D:\Modern Warfare 2\iw4mp.exe:*:Enabled:iw4mp"
"D:\Maple 11\jre\bin\maple.exe"="D:\Maple 11\jre\bin\maple.exe:*:Enabled:Maple 11"
"C:\Documents and Settings\MSI\Dokumenty\Stažené soubory\Pocket Tanks Deluxe\pockettanks.exe"="C:\Documents and Settings\MSI\Dokumenty\Stažené soubory\Pocket Tanks Deluxe\pockettanks.exe:*:Enabled:Pocket Tanks"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"D:\Call of Duty 4 - Modern Warfare\iw3mp.exe"="D:\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"D:\Warcraft III\war3.exe"="D:\Warcraft III\war3.exe:*:Enabled:Warcraft III"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"D:\Modern Warfare 2\iw4sp.exe"="D:\Modern Warfare 2\iw4sp.exe:*:Enabled:iw4sp"
"C:\Program Files\Sony Ericsson\Update Service\Update Service.exe"="C:\Program Files\Sony Ericsson\Update Service\Update Service.exe:*:Enabled:Update Service"
"D:\BioShock 2\SP\Builds\Binaries\Bioshock2.exe"="D:\BioShock 2\SP\Builds\Binaries\Bioshock2.exe:*:Enabled:BioShock 2"
"D:\BioShock 2\MP\Builds\Binaries\Bioshock2.exe"="D:\BioShock 2\MP\Builds\Binaries\Bioshock2.exe:*:Enabled:BioShock 2 Multiplayer"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{203e8981-c321-11de-8427-00242162779f}]
shell\AutoRun\command - F:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{572d8031-0d87-11df-8542-00242162779f}]
shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{988fe3d2-16ed-11df-8565-00242162779f}]
shell\AutoRun\command - H:\Startme.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b6b818a3-f6a4-11de-84e3-00242162779f}]
shell\AutoRun\command - F:\setup_vmc_lite.exe /checkApplicationPresence

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b6b818a4-f6a4-11de-84e3-00242162779f}]
shell\AutoRun\command - F:\setup_vmc_lite.exe /checkApplicationPresence

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c83ddc45-f782-11de-84e6-00242162779f}]
shell\AutoRun\command - F:\setup_vmc_lite.exe /checkApplicationPresence

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c83ddc48-f782-11de-84e6-00242162779f}]
shell\AutoRun\command - F:\setup_vmc_lite.exe /checkApplicationPresence


======File associations======

.scr - open - "C:\WINDOWS\system32\NOTEPAD.EXE" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-02-17 16:48:03 ----D---- C:\rsit
2010-02-17 13:01:26 ----A---- C:\WINDOWS\ntbtlog.txt
2010-02-17 12:40:42 ----HD---- C:\Sandbox
2010-02-17 12:32:29 ----D---- C:\Program Files\Trend Micro
2010-02-17 12:31:23 ----D---- C:\Documents and Settings\All Users\Data aplikací\Comodo
2010-02-17 12:21:32 ----D---- C:\Program Files\COMODO
2010-02-17 12:07:46 ----D---- C:\Program Files\DreamSoft Firewall
2010-02-17 11:57:03 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-02-17 11:55:38 ----D---- C:\Program Files\Alwil Software
2010-02-17 11:55:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-02-17 10:35:30 ----D---- C:\Documents and Settings\MSI\Data aplikací\Malwarebytes
2010-02-17 10:35:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-02-17 10:35:12 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-02-11 17:29:51 ----D---- C:\Documents and Settings\MSI\Data aplikací\Bioshock2
2010-02-11 16:57:03 ----SHD---- C:\Documents and Settings\All Users\Data aplikací\SecuROM
2010-02-11 10:58:57 ----D---- C:\Documents and Settings\MSI\Data aplikací\Apple Computer
2010-02-11 10:41:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\BVRP Software
2010-02-11 10:33:25 ----A---- C:\Documents and Settings\All Users\Data aplikací\hpe17E.dll
2010-02-11 10:30:26 ----D---- C:\Program Files\Common Files\Sony Shared
2010-02-11 10:29:41 ----D---- C:\Program Files\Sony
2010-02-11 10:29:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sony Corporation
2010-02-11 10:26:53 ----D---- C:\Program Files\QuickTime
2010-02-11 10:26:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
2010-02-11 10:26:25 ----D---- C:\Program Files\Common Files\Apple
2010-02-11 10:26:10 ----D---- C:\Program Files\Apple Software Update
2010-02-11 10:26:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple
2010-02-11 10:24:22 ----D---- C:\WINDOWS\SxsCaPendDel
2010-02-11 10:22:57 ----HDC---- C:\WINDOWS\$NtUninstallKB942288-v3$
2010-02-11 10:22:29 ----D---- C:\Documents and Settings\MSI\Data aplikací\Sony Setup
2010-02-11 10:22:28 ----D---- C:\Documents and Settings\MSI\Data aplikací\Sony
2010-02-11 10:22:17 ----D---- C:\Program Files\Sony Setup
2010-02-11 10:17:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sony Ericsson
2010-02-10 17:34:34 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$
2010-02-10 17:34:20 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-02-10 17:31:14 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-02-10 17:31:04 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-02-10 17:30:49 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$
2010-02-10 17:30:39 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-02-10 17:30:22 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-02-10 17:30:01 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-02-10 17:29:47 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$
2010-02-10 14:20:46 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-02-10 14:19:43 ----D---- C:\Program Files\Sony Ericsson
2010-02-10 07:57:19 ----N---- C:\WINDOWS\system32\LegitCheckControl.dll
2010-01-30 11:15:07 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-01-30 11:15:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-01-30 10:20:17 ----D---- C:\Program Files\ESET
2010-01-29 22:36:59 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem #3.txt
2010-01-29 12:53:16 ----D---- C:\Program Files\Steam
2010-01-29 11:46:47 ----A---- C:\WINDOWS\Eurobattle.net Setup Log.txt
2010-01-26 13:45:44 ----A---- C:\WINDOWS\system32\guard32.dll

======List of files/folders modified in the last 1 months======

2010-02-17 17:07:06 ----D---- C:\WINDOWS\Temp
2010-02-17 17:02:14 ----D---- C:\Program Files\Mozilla Firefox
2010-02-17 16:58:49 ----SD---- C:\WINDOWS\Tasks
2010-02-17 16:56:02 ----D---- C:\WINDOWS\system32\CatRoot2
2010-02-17 16:51:01 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-02-17 16:43:30 ----D---- C:\WINDOWS\Prefetch
2010-02-17 13:02:44 ----D---- C:\Documents and Settings
2010-02-17 13:01:26 ----D---- C:\WINDOWS
2010-02-17 12:47:35 ----SHD---- C:\System Volume Information
2010-02-17 12:47:35 ----D---- C:\WINDOWS\system32\Restore
2010-02-17 12:32:29 ----RD---- C:\Program Files
2010-02-17 12:24:37 ----SHD---- C:\WINDOWS\Installer
2010-02-17 12:21:44 ----D---- C:\WINDOWS\system32\drivers
2010-02-17 12:21:43 ----D---- C:\WINDOWS\system32
2010-02-17 12:07:28 ----N---- C:\WINDOWS\Setup1.exe
2010-02-17 11:57:52 ----D---- C:\WINDOWS\WinSxS
2010-02-17 11:12:02 ----HDC---- C:\WINDOWS\$NtUninstallKB970653-v3$
2010-02-16 23:10:04 ----D---- C:\Documents and Settings\MSI\Data aplikací\vlc
2010-02-14 15:08:17 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem.txt
2010-02-11 16:53:07 ----D---- C:\WINDOWS\system32\DirectX
2010-02-11 16:53:06 ----HD---- C:\WINDOWS\inf
2010-02-11 16:52:47 ----RSD---- C:\WINDOWS\assembly
2010-02-11 16:36:55 ----HD---- C:\Program Files\InstallShield Installation Information
2010-02-11 10:34:38 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-02-11 10:30:26 ----D---- C:\Program Files\Common Files
2010-02-11 10:27:51 ----D---- C:\Program Files\Internet Explorer
2010-02-11 10:23:21 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-02-11 10:18:50 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-02-10 18:38:45 ----D---- C:\Documents and Settings\MSI\Data aplikací\Ubisoft
2010-02-10 17:34:40 ----A---- C:\WINDOWS\imsins.BAK
2010-02-10 17:34:33 ----HD---- C:\WINDOWS\$hf_mig$
2010-02-10 14:11:14 ----D---- C:\Program Files\Google
2010-02-10 07:56:25 ----D---- C:\WINDOWS\SoftwareDistribution
2010-02-05 21:09:42 ----A---- C:\WINDOWS\NeroDigital.ini
2010-02-03 11:36:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Codemasters
2010-02-02 18:44:34 ----D---- C:\Program Files\KN_StrongDC
2010-02-01 20:26:20 ----A---- C:\WINDOWS\system32\MRT.exe
2010-01-30 00:13:40 ----D---- C:\WINDOWS\system32\config
2010-01-30 00:13:18 ----D---- C:\WINDOWS\system32\wbem
2010-01-30 00:13:17 ----D---- C:\WINDOWS\Registration
2010-01-29 10:35:47 ----D---- C:\Documents and Settings\MSI\Data aplikací\HLSW
2010-01-29 10:35:42 ----A---- C:\WINDOWS\system32\PnkBstrB.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-02-11 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-02-11 162512]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-02-11 46672]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2010-01-26 222552]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2010-01-26 25160]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-08-09 53920]
R1 Tosrfcom;Bluetooth RFCOMM; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2008-08-22 64000]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-02-11 19024]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-02-11 100432]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-08-16 281760]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-08-16 25888]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-02-11 23376]
R3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 enecir;ENE CIR Receiver; C:\WINDOWS\system32\DRIVERS\enecir.sys [2008-04-29 54784]
R3 enecirhid;ENE CIR HID Receiver; C:\WINDOWS\system32\DRIVERS\enecirhid.sys [2008-04-29 11264]
R3 enecirhidma;ENE CIR HIDmini Filter; C:\WINDOWS\system32\DRIVERS\enecirhidma.sys [2008-04-25 5632]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-07-03 4745216]
R3 JMCR;JMCR; C:\WINDOWS\system32\DRIVERS\jmcr.sys [2008-05-30 93968]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-07-07 6592768]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2008-01-29 54016]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2008-07-07 39072]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2008-01-29 22016]
R3 nvsmu;nvsmu; C:\WINDOWS\system32\DRIVERS\nvsmu.sys [2008-03-31 14848]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 RT80x86;Ralink 802.11n Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT2860.sys [2008-05-19 625792]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\WINDOWS\system32\DRIVERS\seehcri.sys [2010-02-10 27632]
R3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2007-10-26 1020800]
R3 tosporte;Bluetooth COM Port; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2008-03-25 41472]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-14 17152]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 ae086xok;ae086xok; C:\WINDOWS\system32\drivers\ae086xok.sys []
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-27 60800]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2008-12-30 101120]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-27 61824]
S3 s1029bus;Sony Ericsson Device 1029 driver (WDM); C:\WINDOWS\system32\DRIVERS\s1029bus.sys [2009-05-25 90280]
S3 s1029mdfl;Sony Ericsson Device 1029 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s1029mdfl.sys [2009-05-25 15016]
S3 s1029mdm;Sony Ericsson Device 1029 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s1029mdm.sys [2009-05-25 122280]
S3 s1029mgmt;Sony Ericsson Device 1029 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s1029mgmt.sys [2009-05-25 115880]
S3 s1029nd5;Sony Ericsson Device 1029 USB Ethernet Emulation (NDIS); C:\WINDOWS\system32\DRIVERS\s1029nd5.sys [2009-05-25 26024]
S3 s1029obex;Sony Ericsson Device 1029 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s1029obex.sys [2009-05-25 111912]
S3 s1029unic;Sony Ericsson Device 1029 USB Ethernet Emulation (WDM); C:\WINDOWS\system32\DRIVERS\s1029unic.sys [2009-05-25 116904]
S3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-14 79232]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 tosrfbd;Bluetooth RFBUS; C:\WINDOWS\system32\DRIVERS\tosrfbd.sys [2008-10-06 137984]
S3 tosrfbnp;Bluetooth RFBNEP; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2007-11-29 36608]
S3 Tosrfhid;Bluetooth RFHID; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2008-08-27 74240]
S3 tosrfnds;Bluetooth Personal Area Network; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-07 18612]
S3 TosRfSnd;Bluetooth Audio; C:\WINDOWS\system32\drivers\tosrfsnd.sys [2008-12-11 54272]
S3 Tosrfusb;Bluetooth USB Controller; C:\WINDOWS\system32\DRIVERS\tosrfusb.sys [2009-01-15 42880]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2008-04-27 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-04-27 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sr;Ovladač filtru Obnovy systému; C:\WINDOWS\system32\DRIVERS\sr.sys [2008-04-14 73344]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-02-11 40384]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2010-01-26 951328]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 Micro Star SCM;Micro Star SCM; C:\Program Files\System Control Manager\MSIService.exe [2008-02-21 159744]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-07-07 159812]
R2 OMSI download service;Sony Ericsson OMSI download service; C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-01-13 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-01-29 215104]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2008-10-10 132456]
R2 VMCService;Vodafone Mobile Connect Service; C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [2008-11-04 14336]
R2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-02-11 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-02-11 40384]
S2 gupdate1ca52536f0ca6c6;Služba Google Update (gupdate1ca52536f0ca6c6); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-21 133104]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2009-10-14 85096]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 SolidWorks Licensing Service;SolidWorks Licensing Service; C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [2010-01-11 79360]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Caroprd111]

Zdravím

Na logu se pracuje, prosím o strpení.

[Caroprd111]

Odinstalujte Spybot - Search & Destroy v Přidat nebo odebrat programy.


Doporučuji odinstalovat (pokud nepoužíváte) toolbary (lišty) v Přidat nebo odebrat programy.


Doporučuji odinstalovat DreamSoft Firewall


Doporučuji odinstalovat:
C:\Program Files\KN_StrongDC\StrongDC.exe

P2P sítě a jejich klienti jsou potenciálním bezpečnostním rizikem, prakticky neustále jsou zdrojem virů, zbytečně se vystavujete riziku.

• Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478
• Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.
  
  Záložka Čistič
• Dejte analyzovat, po dokončení dejte Spustit Ccleaner.
  
  Záložka Registry
• Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
  OK Zavřít

Stáhněte a uložte, nejlépe na plochu http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypněte všechny rezidentní bezpečnostní programy - firewally, antiviry, antispywary

Spusťte aplikaci pod účtem s oprávněním Administrátora (Správce), ihned po startu se zobrází stránka s licenčnímy podmínkami, pokračujte stisknutím tlačítka "Ano"

Dále postupujte dle pokynů, během scanu nespouštějte jiné aplikace a neklikejte do zobrazujícího se okna

Scan by měl trvat okolo 5 - 10 minut, po dokončení Combofix zobrazí log C:\ComboFix.txt , který sem vložte.

Během skenování může být počítač restartován.

[hondar47]

mám se před vypnutím bezpečnostních programů odpojit od internetu?

[Caroprd111]

Pokud nemáte nainstalovanou "Konzoli pro zotavení", tak ne, ComboFix ji stahuje z internetu.

[hondar47]

Mám problém. Neznám heslo na účet administrator nikdy jsem žádné nezadával a bez hesla to nejde

[Caroprd111]

Co nejde?

[hondar47]

ComboFix

[Caroprd111]

Popište mi přesně kde je problém.

[hondar47]

Když spouštím ComboFix tak ho mám spustit pod účtem s oprávněním administrátora, no a já neznám heslo. přitom můj účet je správce ale ten nefunguje. a když se přihlašuju do windows tak tam ani žádný účet administrator není.

[Caroprd111]

Spusťte ComboFix v nouzovém režimu.

[hondar47]

Tady je log

ComboFix 10-02-12.01 - MSI 17.02.2010 20:11:51.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3068.2626 [GMT 1:00]
Spuštěný z: c:\documents and settings\MSI\Plocha\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: COMODO Firewall *enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\data
c:\data\WINDOWSDEFENDER.EXE
c:\documents and settings\All Users\Data aplikací\hpe17E.dll
c:\program files\FlashGet Network
c:\program files\FlashGet Network\FlashGet universal\dbtrans_verbose.log
c:\program files\FlashGet Network\FlashGet universal\fgoption.ini
c:\program files\FlashGet Network\FlashGet universal\P2PCfg.ini
c:\program files\FlashGet Network\FlashGet universal\p2spmgr.ini
c:\program files\FlashGet Network\FlashGet universal\p4spmgr.ini
c:\program files\FlashGet Network\FlashGet universal\Profiles\config.dat
c:\program files\FlashGet Network\FlashGet universal\Profiles\tasks.dat
c:\program files\FlashGet Network\FlashGet universal\transaction.log
c:\program files\Cheat Engine\dbk32.sys

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-01-17 do 2010-02-17 )))))))))))))))))))))))))))))))
.

2010-02-17 17:07 . 2010-02-17 17:07 -------- d-----w- c:\program files\CCleaner
2010-02-17 15:48 . 2010-02-17 16:08 -------- d-----w- C:\rsit
2010-02-17 12:03 . 2010-02-17 12:03 -------- d-sh--w- c:\documents and settings\Administrator\IETldCache
2010-02-17 11:40 . 2010-02-17 11:40 -------- d-----w- C:\Sandbox
2010-02-17 11:32 . 2010-02-17 16:07 -------- d-----w- c:\program files\Trend Micro
2010-02-17 11:21 . 2010-02-17 11:21 -------- d-----w- c:\program files\COMODO
2010-02-17 11:07 . 2010-02-17 11:11 -------- d-----w- c:\program files\DreamSoft Firewall
2010-02-17 10:58 . 2010-02-11 18:38 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-02-17 10:58 . 2010-02-11 18:42 162512 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-02-17 10:58 . 2010-02-11 18:39 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-02-17 10:58 . 2010-02-11 18:42 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-02-17 10:58 . 2010-02-11 18:38 100432 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-02-17 10:58 . 2010-02-11 18:38 94800 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-02-17 10:58 . 2010-02-11 18:38 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-02-17 10:57 . 2010-02-11 18:53 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-02-17 10:57 . 2010-02-11 18:53 153184 ----a-w- c:\windows\system32\aswBoot.exe
2010-02-17 10:55 . 2010-02-17 10:55 -------- d-----w- c:\program files\Alwil Software
2010-02-17 09:35 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-02-17 09:35 . 2010-02-17 09:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-17 09:35 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-02-11 09:30 . 2010-02-11 09:30 -------- d-----w- c:\program files\Common Files\Sony Shared
2010-02-11 09:29 . 2010-02-11 09:30 -------- d-----w- c:\program files\Sony
2010-02-11 09:26 . 2010-02-11 09:27 -------- d-----w- c:\program files\QuickTime
2010-02-11 09:26 . 2010-02-11 09:26 -------- d-----w- c:\program files\Common Files\Apple
2010-02-11 09:26 . 2010-02-11 09:26 -------- d-----w- c:\program files\Apple Software Update
2010-02-11 09:24 . 2010-02-11 11:41 -------- d-----w- c:\windows\SxsCaPendDel
2010-02-11 09:22 . 2010-02-11 09:22 -------- d-----w- c:\program files\Sony Setup
2010-02-11 09:18 . 2009-05-25 12:34 10664 ----a-w- c:\windows\system32\drivers\s1029cr.sys
2010-02-11 09:18 . 2009-05-25 12:35 116904 ----a-w- c:\windows\system32\drivers\s1029unic.sys
2010-02-11 09:17 . 2009-05-25 12:34 115880 ----a-w- c:\windows\system32\drivers\s1029mgmt.sys
2010-02-11 09:17 . 2009-05-25 12:34 111912 ----a-w- c:\windows\system32\drivers\s1029obex.sys
2010-02-11 09:17 . 2009-05-25 12:34 26024 ----a-w- c:\windows\system32\drivers\s1029nd5.sys
2010-02-11 09:17 . 2009-05-25 12:34 15016 ----a-w- c:\windows\system32\drivers\s1029mdfl.sys
2010-02-11 09:17 . 2009-05-25 12:34 12200 ----a-w- c:\windows\system32\drivers\s1029cmnt.sys
2010-02-11 09:17 . 2009-05-25 12:34 12200 ----a-w- c:\windows\system32\drivers\s1029cm.sys
2010-02-11 09:17 . 2009-05-25 12:34 122280 ----a-w- c:\windows\system32\drivers\s1029mdm.sys
2010-02-11 09:17 . 2009-05-25 12:34 12200 ----a-w- c:\windows\system32\drivers\s1029whnt.sys
2010-02-11 09:17 . 2009-05-25 12:34 12200 ----a-w- c:\windows\system32\drivers\s1029wh.sys
2010-02-11 09:17 . 2009-05-25 12:34 90280 ----a-w- c:\windows\system32\drivers\s1029bus.sys
2010-02-10 13:20 . 2010-02-10 13:20 27632 ----a-w- c:\windows\system32\drivers\seehcri.sys
2010-02-10 13:19 . 2010-02-11 12:35 -------- d-----w- c:\program files\Sony Ericsson
2010-01-30 10:15 . 2010-02-17 17:00 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-01-30 09:23 . 2008-01-07 13:29 352 ---ha-w- c:\windows\nod32fixtemdono.reg
2010-01-30 09:20 . 2010-01-30 09:20 -------- d-----w- c:\program files\ESET
2010-01-29 23:13 . 2010-01-29 23:13 -------- d-----w- c:\windows\system32\wbem\Repository
2010-01-29 11:53 . 2010-01-29 12:25 -------- d-----w- c:\program files\Steam
2010-01-26 12:45 . 2010-01-26 12:45 276648 ----a-w- c:\windows\system32\guard32.dll
2010-01-26 12:45 . 2010-01-26 12:45 86720 ----a-w- c:\windows\system32\drivers\inspect.sys
2010-01-26 12:45 . 2010-01-26 12:45 25160 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2010-01-26 12:45 . 2010-01-26 12:45 222552 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2010-01-26 12:45 . 2010-01-26 12:45 15376 ----a-w- c:\windows\system32\drivers\cmderd.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-17 19:21 . 2009-12-29 14:04 -------- d-----w- c:\program files\Cheat Engine
2010-02-17 17:01 . 2009-10-03 09:10 -------- d-----w- c:\program files\Yahoo!
2010-02-17 11:07 . 2009-10-20 08:54 249856 ------w- c:\windows\Setup1.exe
2010-02-11 15:36 . 2009-07-31 17:56 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-02-10 18:35 . 2009-07-31 17:55 67173 ----a-w- c:\windows\system32\nvModes.dat
2010-02-10 13:11 . 2009-10-21 13:35 -------- d-----w- c:\program files\Google
2010-01-29 09:35 . 2009-08-03 10:56 215104 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-01-29 09:15 . 2009-08-03 10:57 138576 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-01-14 10:12 . 2009-10-04 18:57 181120 ------w- c:\windows\system32\MpSigStub.exe
2010-01-13 15:48 . 2009-08-03 10:56 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-01-13 14:54 . 2010-01-13 14:54 -------- d-s---w- c:\program files\HLSW
2010-01-12 14:32 . 2010-01-12 13:46 -------- d-----w- c:\program files\DTF
2010-01-11 21:47 . 2010-01-11 21:47 -------- d-----w- c:\program files\Infogrames
2010-01-11 16:44 . 2010-01-11 16:39 -------- d-----w- c:\program files\Common Files\SolidWorks Shared
2010-01-11 16:43 . 2010-01-11 16:38 -------- d-----w- c:\program files\SolidWorks
2010-01-11 16:38 . 2010-01-11 16:38 -------- d-----w- c:\program files\Common Files\eDrawings2008
2010-01-11 16:38 . 2009-08-16 14:36 -------- d-----w- c:\program files\AGEIA Technologies
2010-01-06 21:19 . 2010-01-06 21:17 -------- d-----w- c:\program files\Easy Google Video Downloader
2010-01-03 11:24 . 2009-09-07 07:42 -------- d-----w- c:\program files\ICQ6.5
2010-01-01 08:35 . 2010-01-01 08:35 -------- d-----w- c:\program files\Vodafone
2010-01-01 08:35 . 2009-07-31 17:56 -------- d-----w- c:\program files\Common Files\InstallShield
2009-12-31 16:50 . 2008-04-14 00:45 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-27 20:42 . 2009-08-03 15:27 -------- d-----w- c:\program files\The KMPlayer
2009-12-21 19:08 . 2008-03-01 13:02 916480 ----a-w- c:\windows\system32\wininet.dll
2009-12-19 12:34 . 2009-08-16 14:36 445016 ----a-w- c:\windows\system32\wrap_oal.dll
2009-12-19 12:34 . 2009-08-16 14:36 109144 ----a-w- c:\windows\system32\OpenAL32.dll
2009-12-17 07:42 . 2009-07-31 17:32 343552 ----a-w- c:\windows\system32\mspaint.exe
2009-12-14 16:45 . 2009-12-14 16:45 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2009-12-14 14:20 . 2009-12-14 14:20 720896 ----a-w- c:\windows\iun6002.exe
2009-12-14 08:19 . 2001-10-25 16:00 78070 ----a-w- c:\windows\system32\perfc005.dat
2009-12-14 08:19 . 2001-10-25 16:00 428988 ----a-w- c:\windows\system32\perfh005.dat
2009-12-14 07:10 . 2008-04-14 08:51 33280 ----a-w- c:\windows\system32\csrsrv.dll
2009-12-10 21:39 . 2009-12-10 21:39 0 ----a-w- c:\windows\PowerReg.dat
2009-12-09 10:11 . 2008-04-14 08:06 2147328 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-12-09 10:11 . 2008-04-14 06:06 2025984 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-12-04 18:22 . 2008-04-14 00:47 455424 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2009-11-27 17:14 . 2008-04-14 08:51 1294336 ----a-w- c:\windows\system32\quartz.dll
2009-11-27 17:14 . 2008-04-14 06:51 17920 ----a-w- c:\windows\system32\msyuv.dll
2009-11-27 16:09 . 2001-10-25 16:00 28672 ----a-w- c:\windows\system32\msvidc32.dll
2009-11-27 16:09 . 2001-10-24 10:25 8704 ----a-w- c:\windows\system32\tsbyuv.dll
2009-11-27 16:09 . 2008-04-14 08:51 11264 ----a-w- c:\windows\system32\msrle32.dll
2009-11-27 16:09 . 2008-04-14 08:51 84992 ----a-w- c:\windows\system32\avifil32.dll
2009-11-27 16:09 . 2008-04-14 06:51 48128 ----a-w- c:\windows\system32\iyuv_32.dll
2009-11-21 16:03 . 2008-04-14 08:51 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
.

------- Sigcheck -------

[-] 2008-04-27 . 1E603EA2A3FDBAE9E5B88A8CB3C03124 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-07-24 490952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-07-07 13541376]
"nwiz"="nwiz.exe" [2008-07-07 1630208]
"RTHDCPL"="RTHDCPL.EXE" [2008-07-03 16876032]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2007-10-26 671744]
"MGSysCtrl"="c:\program files\System Control Manager\MGSysCtrl.exe" [2008-08-12 684032]
"ITSecMng"="c:\program files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe" [2008-12-19 83336]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"MobileConnect"="c:\program files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe" [2008-11-04 2087424]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-02-11 2756488]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2010-01-26 1956624]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]

c:\documents and settings\MSI\Nabˇdka Start\Programy\Po spuçtŘnˇ\
J dro Pl novaźe Łloh SolidWorks.lnk - c:\program files\SolidWorks\swScheduler\swBOEngine.exe [2007-9-9 488728]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\guard32.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"d:\\Bionic Commando\\Bionic Commando\\bionic_commando.exe"=
"d:\\Bionic Commando\\Bionic Commando\\Support\\CAP1-0101.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"d:\\Maple 11\\jre\\bin\\java.exe"=
"d:\\Modern Warfare 2\\iw4mp.exe"=
"d:\\Maple 11\\jre\\bin\\maple.exe"=
"c:\\Documents and Settings\\MSI\\Dokumenty\\Stažené soubory\\Pocket Tanks Deluxe\\pockettanks.exe"=
"c:\\Program Files\\HLSW\\hlsw.exe"=
"d:\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"d:\\Modern Warfare 2\\iw4sp.exe"=
"c:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe"=
"d:\\BioShock 2\\SP\\Builds\\Binaries\\Bioshock2.exe"=
"d:\\BioShock 2\\MP\\Builds\\Binaries\\Bioshock2.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"6311:TCP"= 6311:TCP:yhynol

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [17.2.2010 11:58 162512]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [26.1.2010 13:45 222552]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [26.1.2010 13:45 25160]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [17.2.2010 11:58 19024]
R2 VMCService;Vodafone Mobile Connect Service;c:\program files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [4.11.2008 11:39 14336]
R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [3.11.2006 18:19 13592]
R3 enecir;ENE CIR Receiver;c:\windows\system32\drivers\enecir.sys [31.7.2009 19:01 54784]
R3 enecirhid;ENE CIR HID Receiver;c:\windows\system32\drivers\enecirhid.sys [31.7.2009 19:01 11264]
R3 enecirhidma;ENE CIR HIDmini Filter;c:\windows\system32\drivers\enecirhidma.sys [31.7.2009 19:01 5632]
R3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [31.7.2009 18:59 93968]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [7.7.2008 23:28 39072]
R3 RT80x86;Ralink 802.11n Wireless Driver;c:\windows\system32\drivers\rt2860.sys [31.7.2009 19:00 625792]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [10.2.2010 14:20 27632]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [3.8.2009 11:39 717296]
S2 bijrw;Support Center;c:\windows\system32\svchost.exe -k netsvcs [14.4.2008 9:52 14336]
S2 gupdate1ca52536f0ca6c6;Služba Google Update (gupdate1ca52536f0ca6c6);c:\program files\Google\Update\GoogleUpdate.exe [21.10.2009 14:36 133104]
S2 Micro Star SCM;Micro Star SCM;c:\program files\System Control Manager\MSIService.exe [31.7.2009 19:04 159744]
S2 OMSI download service;Sony Ericsson OMSI download service;c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [11.2.2010 10:32 90112]
S3 s1029bus;Sony Ericsson Device 1029 driver (WDM);c:\windows\system32\drivers\s1029bus.sys [11.2.2010 10:17 90280]
S3 s1029mdfl;Sony Ericsson Device 1029 USB WMC Modem Filter;c:\windows\system32\drivers\s1029mdfl.sys [11.2.2010 10:17 15016]
S3 s1029mdm;Sony Ericsson Device 1029 USB WMC Modem Driver;c:\windows\system32\drivers\s1029mdm.sys [11.2.2010 10:17 122280]
S3 s1029mgmt;Sony Ericsson Device 1029 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s1029mgmt.sys [11.2.2010 10:17 115880]
S3 s1029nd5;Sony Ericsson Device 1029 USB Ethernet Emulation (NDIS);c:\windows\system32\drivers\s1029nd5.sys [11.2.2010 10:17 26024]
S3 s1029obex;Sony Ericsson Device 1029 USB WMC OBEX Interface;c:\windows\system32\drivers\s1029obex.sys [11.2.2010 10:17 111912]
S3 s1029unic;Sony Ericsson Device 1029 USB Ethernet Emulation (WDM);c:\windows\system32\drivers\s1029unic.sys [11.2.2010 10:18 116904]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
bijrw
.
Obsah adresáře 'Naplánované úlohy'

2010-02-11 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2010-02-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-21 13:35]

2010-02-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-21 13:35]

2010-02-17 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 17:20]
.
.
------- Doplňkový sken -------
.
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\MSI\Data aplikací\Mozilla\Firefox\Profiles\od0nj0jd.default\
FF - prefs.js: browser.startup.homepage - seznam.cz
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin9.dll
FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll
FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin9.dll
FF - plugin: c:\program files\Sony\Media Go\npmediago.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-17 20:22
Windows 5.1.2600 Service Pack 3 NTFS

detected NTDLL code modification:
ZwClose, ZwOpenFile

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\bijrw]
"ServiceDll"="c:\windows\system32\amfgpb.dll"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-842925246-261478967-1606980848-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:f0,b8,e4,93,43,9b,19,4c,d7,f4,d9,a7,4f,20,86,91,11,01,68,0a,99,c1,4a,
0a,9b,5c,ea,e4,02,d0,8c,de,c6,66,b3,ee,4c,30,b3,ff,07,c2,d5,80,01,df,cd,2a,\
"??"=hex:35,fc,c6,3d,c9,02,ad,db,37,1f,61,de,0f,33,8f,50

[HKEY_USERS\S-1-5-21-842925246-261478967-1606980848-1003\Software\SecuROM\License information*]
"datasecu"=hex:2d,23,ed,99,26,b1,2d,65,a5,cd,35,68,f4,a2,44,c7,94,4e,b6,84,50,
9a,3e,f1,2e,f5,57,1b,8a,69,c0,1e,7b,73,57,07,0c,db,06,66,84,f3,01,73,d2,ce,\
"rkeysecu"=hex:b4,dd,47,8d,9f,6a,f1,d6,2c,c7,0e,23,98,cd,62,37
.
Celkový čas: 2010-02-17 20:29:09
ComboFix-quarantined-files.txt 2010-02-17 19:29

Před spuštěním: Volných bajtů: 191 805 177 856
Po spuštění: Volných bajtů: 191 993 475 072

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - E72D0A09FF8989663F8BFC7CE3C93282

[Caroprd111]

Pokud nemáte, přesuňte Combofix na plochu

• otevřete si Poznámkový blok a zkopírujte do něj text z bílého okénka.

Kód: Vybrat vše

Driver::
bijrw

NetSvc::
bijrw

File::
c:\program files\ESET
c:\windows\nod32fixtemdono.reg
c:\windows\system32\amfgpb.dll
c:\program files\Cheat Engine

• uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
• po uložení uchopte vámi vytvořený skript levým myšítkem a přesuňte ho nad ikonu Combofixu, kde ho upustíte:
  
• po aplikaci na Vás vypadne další log,vložte ho sem

Může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

[hondar47]

tady je log

ComboFix 10-02-12.01 - MSI 18.02.2010 8:15.3.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3068.2657 [GMT 1:00]
Spuštěný z: c:\documents and settings\MSI\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Administrator\Plocha\CFScript.txt
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: COMODO Firewall *disabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}

FILE ::
"c:\program files\ESET"
"c:\program files\Cheat Engine"
"c:\windows\nod32fixtemdono.reg"
"c:\windows\system32\amfgpb.dll"
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-01-18 do 2010-02-18 )))))))))))))))))))))))))))))))
.

2010-02-17 17:07 . 2010-02-17 17:07 -------- d-----w- c:\program files\CCleaner
2010-02-17 15:48 . 2010-02-17 16:08 -------- d-----w- C:\rsit
2010-02-17 12:03 . 2010-02-17 12:03 -------- d-sh--w- c:\documents and settings\Administrator\IETldCache
2010-02-17 11:40 . 2010-02-17 11:40 -------- d-----w- C:\Sandbox
2010-02-17 11:32 . 2010-02-17 16:07 -------- d-----w- c:\program files\Trend Micro
2010-02-17 11:21 . 2010-02-17 11:21 -------- d-----w- c:\program files\COMODO
2010-02-17 11:07 . 2010-02-17 11:11 -------- d-----w- c:\program files\DreamSoft Firewall
2010-02-17 10:58 . 2010-02-11 18:38 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-02-17 10:58 . 2010-02-11 18:42 162512 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-02-17 10:58 . 2010-02-11 18:39 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-02-17 10:58 . 2010-02-11 18:42 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-02-17 10:58 . 2010-02-11 18:38 100432 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-02-17 10:58 . 2010-02-11 18:38 94800 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-02-17 10:58 . 2010-02-11 18:38 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-02-17 10:57 . 2010-02-11 18:53 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-02-17 10:57 . 2010-02-11 18:53 153184 ----a-w- c:\windows\system32\aswBoot.exe
2010-02-17 10:55 . 2010-02-17 10:55 -------- d-----w- c:\program files\Alwil Software
2010-02-17 09:35 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-02-17 09:35 . 2010-02-17 09:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-17 09:35 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-02-11 09:30 . 2010-02-11 09:30 -------- d-----w- c:\program files\Common Files\Sony Shared
2010-02-11 09:29 . 2010-02-11 09:30 -------- d-----w- c:\program files\Sony
2010-02-11 09:26 . 2010-02-11 09:27 -------- d-----w- c:\program files\QuickTime
2010-02-11 09:26 . 2010-02-11 09:26 -------- d-----w- c:\program files\Common Files\Apple
2010-02-11 09:26 . 2010-02-11 09:26 -------- d-----w- c:\program files\Apple Software Update
2010-02-11 09:24 . 2010-02-11 11:41 -------- d-----w- c:\windows\SxsCaPendDel
2010-02-11 09:22 . 2010-02-11 09:22 -------- d-----w- c:\program files\Sony Setup
2010-02-11 09:18 . 2009-05-25 12:34 10664 ----a-w- c:\windows\system32\drivers\s1029cr.sys
2010-02-11 09:18 . 2009-05-25 12:35 116904 ----a-w- c:\windows\system32\drivers\s1029unic.sys
2010-02-11 09:17 . 2009-05-25 12:34 115880 ----a-w- c:\windows\system32\drivers\s1029mgmt.sys
2010-02-11 09:17 . 2009-05-25 12:34 111912 ----a-w- c:\windows\system32\drivers\s1029obex.sys
2010-02-11 09:17 . 2009-05-25 12:34 26024 ----a-w- c:\windows\system32\drivers\s1029nd5.sys
2010-02-11 09:17 . 2009-05-25 12:34 15016 ----a-w- c:\windows\system32\drivers\s1029mdfl.sys
2010-02-11 09:17 . 2009-05-25 12:34 12200 ----a-w- c:\windows\system32\drivers\s1029cmnt.sys
2010-02-11 09:17 . 2009-05-25 12:34 12200 ----a-w- c:\windows\system32\drivers\s1029cm.sys
2010-02-11 09:17 . 2009-05-25 12:34 122280 ----a-w- c:\windows\system32\drivers\s1029mdm.sys
2010-02-11 09:17 . 2009-05-25 12:34 12200 ----a-w- c:\windows\system32\drivers\s1029whnt.sys
2010-02-11 09:17 . 2009-05-25 12:34 12200 ----a-w- c:\windows\system32\drivers\s1029wh.sys
2010-02-11 09:17 . 2009-05-25 12:34 90280 ----a-w- c:\windows\system32\drivers\s1029bus.sys
2010-02-10 13:20 . 2010-02-10 13:20 27632 ----a-w- c:\windows\system32\drivers\seehcri.sys
2010-02-10 13:19 . 2010-02-11 12:35 -------- d-----w- c:\program files\Sony Ericsson
2010-01-30 10:15 . 2010-02-17 17:00 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-01-30 09:20 . 2010-01-30 09:20 -------- d-----w- c:\program files\ESET
2010-01-29 23:13 . 2010-01-29 23:13 -------- d-----w- c:\windows\system32\wbem\Repository
2010-01-29 11:53 . 2010-01-29 12:25 -------- d-----w- c:\program files\Steam
2010-01-26 12:45 . 2010-01-26 12:45 276648 ----a-w- c:\windows\system32\guard32.dll
2010-01-26 12:45 . 2010-01-26 12:45 86720 ----a-w- c:\windows\system32\drivers\inspect.sys
2010-01-26 12:45 . 2010-01-26 12:45 25160 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2010-01-26 12:45 . 2010-01-26 12:45 222552 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2010-01-26 12:45 . 2010-01-26 12:45 15376 ----a-w- c:\windows\system32\drivers\cmderd.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-17 19:21 . 2009-12-29 14:04 -------- d-----w- c:\program files\Cheat Engine
2010-02-17 17:01 . 2009-10-03 09:10 -------- d-----w- c:\program files\Yahoo!
2010-02-17 11:07 . 2009-10-20 08:54 249856 ------w- c:\windows\Setup1.exe
2010-02-11 15:36 . 2009-07-31 17:56 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-02-10 18:35 . 2009-07-31 17:55 67173 ----a-w- c:\windows\system32\nvModes.dat
2010-02-10 13:11 . 2009-10-21 13:35 -------- d-----w- c:\program files\Google
2010-01-29 09:35 . 2009-08-03 10:56 215104 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-01-29 09:15 . 2009-08-03 10:57 138576 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-01-14 10:12 . 2009-10-04 18:57 181120 ------w- c:\windows\system32\MpSigStub.exe
2010-01-13 15:48 . 2009-08-03 10:56 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-01-13 14:54 . 2010-01-13 14:54 -------- d-s---w- c:\program files\HLSW
2010-01-12 14:32 . 2010-01-12 13:46 -------- d-----w- c:\program files\DTF
2010-01-11 21:47 . 2010-01-11 21:47 -------- d-----w- c:\program files\Infogrames
2010-01-11 16:44 . 2010-01-11 16:39 -------- d-----w- c:\program files\Common Files\SolidWorks Shared
2010-01-11 16:43 . 2010-01-11 16:38 -------- d-----w- c:\program files\SolidWorks
2010-01-11 16:38 . 2010-01-11 16:38 -------- d-----w- c:\program files\Common Files\eDrawings2008
2010-01-11 16:38 . 2009-08-16 14:36 -------- d-----w- c:\program files\AGEIA Technologies
2010-01-06 21:19 . 2010-01-06 21:17 -------- d-----w- c:\program files\Easy Google Video Downloader
2010-01-03 11:24 . 2009-09-07 07:42 -------- d-----w- c:\program files\ICQ6.5
2010-01-01 08:35 . 2010-01-01 08:35 -------- d-----w- c:\program files\Vodafone
2010-01-01 08:35 . 2009-07-31 17:56 -------- d-----w- c:\program files\Common Files\InstallShield
2009-12-31 16:50 . 2008-04-14 00:45 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-27 20:42 . 2009-08-03 15:27 -------- d-----w- c:\program files\The KMPlayer
2009-12-21 19:08 . 2008-03-01 13:02 916480 ------w- c:\windows\system32\wininet.dll
2009-12-19 12:34 . 2009-08-16 14:36 445016 ----a-w- c:\windows\system32\wrap_oal.dll
2009-12-19 12:34 . 2009-08-16 14:36 109144 ----a-w- c:\windows\system32\OpenAL32.dll
2009-12-17 07:42 . 2009-07-31 17:32 343552 ----a-w- c:\windows\system32\mspaint.exe
2009-12-14 16:45 . 2009-12-14 16:45 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2009-12-14 14:20 . 2009-12-14 14:20 720896 ----a-w- c:\windows\iun6002.exe
2009-12-14 08:19 . 2001-10-25 16:00 78070 ----a-w- c:\windows\system32\perfc005.dat
2009-12-14 08:19 . 2001-10-25 16:00 428988 ----a-w- c:\windows\system32\perfh005.dat
2009-12-14 07:10 . 2008-04-14 08:51 33280 ----a-w- c:\windows\system32\csrsrv.dll
2009-12-10 21:39 . 2009-12-10 21:39 0 ----a-w- c:\windows\PowerReg.dat
2009-12-09 10:11 . 2008-04-14 08:06 2147328 ------w- c:\windows\system32\ntoskrnl.exe
2009-12-09 10:11 . 2008-04-14 06:06 2025984 ------w- c:\windows\system32\ntkrnlpa.exe
2009-12-04 18:22 . 2008-04-14 00:47 455424 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2009-11-27 17:14 . 2008-04-14 08:51 1294336 ----a-w- c:\windows\system32\quartz.dll
2009-11-27 17:14 . 2008-04-14 06:51 17920 ----a-w- c:\windows\system32\msyuv.dll
2009-11-27 16:09 . 2001-10-25 16:00 28672 ----a-w- c:\windows\system32\msvidc32.dll
2009-11-27 16:09 . 2001-10-24 10:25 8704 ----a-w- c:\windows\system32\tsbyuv.dll
2009-11-27 16:09 . 2008-04-14 08:51 11264 ----a-w- c:\windows\system32\msrle32.dll
2009-11-27 16:09 . 2008-04-14 08:51 84992 ----a-w- c:\windows\system32\avifil32.dll
2009-11-27 16:09 . 2008-04-14 06:51 48128 ----a-w- c:\windows\system32\iyuv_32.dll
2009-11-21 16:03 . 2008-04-14 08:51 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
.

------- Sigcheck -------

[-] 2008-04-27 . 1E603EA2A3FDBAE9E5B88A8CB3C03124 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((( SnapShot@2010-02-17_19.22.44 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-02-18 07:10 . 2010-02-18 07:10 16384 c:\windows\Temp\Perflib_Perfdata_770.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-07-24 490952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-07-07 13541376]
"nwiz"="nwiz.exe" [2008-07-07 1630208]
"RTHDCPL"="RTHDCPL.EXE" [2008-07-03 16876032]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2007-10-26 671744]
"MGSysCtrl"="c:\program files\System Control Manager\MGSysCtrl.exe" [2008-08-12 684032]
"ITSecMng"="c:\program files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe" [2008-12-19 83336]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"MobileConnect"="c:\program files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe" [2008-11-04 2087424]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-02-11 2756488]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2010-01-26 1956624]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]

c:\documents and settings\MSI\Nabˇdka Start\Programy\Po spuçtŘnˇ\
J dro Pl novaźe Łloh SolidWorks.lnk - c:\program files\SolidWorks\swScheduler\swBOEngine.exe [2007-9-9 488728]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\guard32.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"d:\\Bionic Commando\\Bionic Commando\\bionic_commando.exe"=
"d:\\Bionic Commando\\Bionic Commando\\Support\\CAP1-0101.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"d:\\Maple 11\\jre\\bin\\java.exe"=
"d:\\Modern Warfare 2\\iw4mp.exe"=
"d:\\Maple 11\\jre\\bin\\maple.exe"=
"c:\\Documents and Settings\\MSI\\Dokumenty\\Stažené soubory\\Pocket Tanks Deluxe\\pockettanks.exe"=
"c:\\Program Files\\HLSW\\hlsw.exe"=
"d:\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"d:\\Modern Warfare 2\\iw4sp.exe"=
"c:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe"=
"d:\\BioShock 2\\SP\\Builds\\Binaries\\Bioshock2.exe"=
"d:\\BioShock 2\\MP\\Builds\\Binaries\\Bioshock2.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"6311:TCP"= 6311:TCP:yhynol

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [17.2.2010 11:58 162512]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [26.1.2010 13:45 222552]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [26.1.2010 13:45 25160]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [17.2.2010 11:58 19024]
R2 VMCService;Vodafone Mobile Connect Service;c:\program files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [4.11.2008 11:39 14336]
R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [3.11.2006 18:19 13592]
R3 enecir;ENE CIR Receiver;c:\windows\system32\drivers\enecir.sys [31.7.2009 19:01 54784]
R3 enecirhid;ENE CIR HID Receiver;c:\windows\system32\drivers\enecirhid.sys [31.7.2009 19:01 11264]
R3 enecirhidma;ENE CIR HIDmini Filter;c:\windows\system32\drivers\enecirhidma.sys [31.7.2009 19:01 5632]
R3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [31.7.2009 18:59 93968]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [7.7.2008 23:28 39072]
R3 RT80x86;Ralink 802.11n Wireless Driver;c:\windows\system32\drivers\rt2860.sys [31.7.2009 19:00 625792]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [10.2.2010 14:20 27632]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [3.8.2009 11:39 717296]
S2 gupdate1ca52536f0ca6c6;Služba Google Update (gupdate1ca52536f0ca6c6);c:\program files\Google\Update\GoogleUpdate.exe [21.10.2009 14:36 133104]
S2 Micro Star SCM;Micro Star SCM;c:\program files\System Control Manager\MSIService.exe [31.7.2009 19:04 159744]
S2 OMSI download service;Sony Ericsson OMSI download service;c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [11.2.2010 10:32 90112]
S3 s1029bus;Sony Ericsson Device 1029 driver (WDM);c:\windows\system32\drivers\s1029bus.sys [11.2.2010 10:17 90280]
S3 s1029mdfl;Sony Ericsson Device 1029 USB WMC Modem Filter;c:\windows\system32\drivers\s1029mdfl.sys [11.2.2010 10:17 15016]
S3 s1029mdm;Sony Ericsson Device 1029 USB WMC Modem Driver;c:\windows\system32\drivers\s1029mdm.sys [11.2.2010 10:17 122280]
S3 s1029mgmt;Sony Ericsson Device 1029 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s1029mgmt.sys [11.2.2010 10:17 115880]
S3 s1029nd5;Sony Ericsson Device 1029 USB Ethernet Emulation (NDIS);c:\windows\system32\drivers\s1029nd5.sys [11.2.2010 10:17 26024]
S3 s1029obex;Sony Ericsson Device 1029 USB WMC OBEX Interface;c:\windows\system32\drivers\s1029obex.sys [11.2.2010 10:17 111912]
S3 s1029unic;Sony Ericsson Device 1029 USB Ethernet Emulation (WDM);c:\windows\system32\drivers\s1029unic.sys [11.2.2010 10:18 116904]
.
Obsah adresáře 'Naplánované úlohy'

2010-02-11 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2010-02-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-21 13:35]

2010-02-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-21 13:35]

2010-02-18 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 17:20]
.
.
------- Doplňkový sken -------
.
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\MSI\Data aplikací\Mozilla\Firefox\Profiles\od0nj0jd.default\
FF - prefs.js: browser.startup.homepage - seznam.cz
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin9.dll
FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll
FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin9.dll
FF - plugin: c:\program files\Sony\Media Go\npmediago.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-18 08:31
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-842925246-261478967-1606980848-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:f0,b8,e4,93,43,9b,19,4c,d7,f4,d9,a7,4f,20,86,91,11,01,68,0a,99,c1,4a,
0a,9b,5c,ea,e4,02,d0,8c,de,c6,66,b3,ee,4c,30,b3,ff,07,c2,d5,80,01,df,cd,2a,\
"??"=hex:35,fc,c6,3d,c9,02,ad,db,37,1f,61,de,0f,33,8f,50

[HKEY_USERS\S-1-5-21-842925246-261478967-1606980848-1003\Software\SecuROM\License information*]
"datasecu"=hex:2d,23,ed,99,26,b1,2d,65,a5,cd,35,68,f4,a2,44,c7,94,4e,b6,84,50,
9a,3e,f1,2e,f5,57,1b,8a,69,c0,1e,7b,73,57,07,0c,db,06,66,84,f3,01,73,d2,ce,\
"rkeysecu"=hex:b4,dd,47,8d,9f,6a,f1,d6,2c,c7,0e,23,98,cd,62,37
.
Celkový čas: 2010-02-18 08:32:19
ComboFix-quarantined-files.txt 2010-02-18 07:32
ComboFix2.txt 2010-02-17 21:09
ComboFix3.txt 2010-02-17 19:29

Před spuštěním: Volných bajtů: 191 846 842 368
Po spuštění: Volných bajtů: 191 809 134 592

- - End Of File - - F13E801A59FE28E049331C4522524666

[Caroprd111]

Tohle otestujte na http://www.virustotal.com/cs/
c:\windows\system32\sfcfiles.dll

(Soubor nehledejte, jenom vložíte tučně označenou cestu, v případě hlášky "Soubor již byl testován" dejte otestovat znovu. Výsledek analýzy sem vložte.)