prosím o kontrolu logu z hijacku

[Mataaaaa]

Ahoj, zdá se mi, ze mám ten pocitac nejaky pomaly a casto se mi uplne zasekne a musim ho restartovat.
Kdyz zapnu HijackThis, naskoci mi tam tabulka, kde se pise:
For some reason your system denied write access to the Hosts file.
If any hijacked domains are in this file, HijackThis may NOT be able to fix this.
If that happens, you need to edit the file yourself. To do this, click Start, Run and type:
notepad C:/Windows/system32/drivers/etc/hosts
and press Enter. Find this line(s) HijackThis reports and delete them. Save the file as ,,hosts,, (with quotes) and reboot.
For Vista: simply, exit HijackThis, right click on the HijackThis icon, choose ,,Run as administrator,,.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:50:12, on 18.3.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Program Files\DigitalPersona\Bin\DpAgent.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\E_FATICEE.EXE
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Nokia\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
G:\Martina\Programy\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.mpsv.cz:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_0.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_0.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_0.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles
O4 - HKLM\..\Run: [Nokia FastStart] "C:\Program Files\Nokia\Nokia Music\NokiaMusic.exe" /command:faststart
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKCU\..\Run: [EPSON Stylus DX8400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE /FU "C:\Windows\TEMP\E_SEE0D.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O13 - Gopher Prefix:
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 12491 bytes

[Caroprd111]

Zdravím

Na logu se pracuje, prosím o strpení.

[Caroprd111]

Dejte log z RSIT http://www.edisk.cz/stahni/48909/RSIT.exe_763.58KB.html

[Mataaaaa]

takze posilam log z rsit
Logfile of random's system information tool 1.06 (written by random/random)
Run by uzivatel at 2010-03-18 20:42:15
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 174 GB (76%) free of 229 GB
Total RAM: 3070 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:42:28, on 18.3.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Program Files\DigitalPersona\Bin\DpAgent.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\conime.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\E_FATICEE.EXE
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\Program Files\Nokia\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\uzivatel\Desktop\RSIT.exe
C:\Program Files\trend micro\uzivatel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.mpsv.cz:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_0.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_0.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_0.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles
O4 - HKLM\..\Run: [Nokia FastStart] "C:\Program Files\Nokia\Nokia Music\NokiaMusic.exe" /command:faststart
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKCU\..\Run: [EPSON Stylus DX8400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE /FU "C:\Windows\TEMP\E_SEE0D.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O13 - Gopher Prefix:
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 13060 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{ADAF2F4C-8425-4458-B6DA-1BEA6EE687E8}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll [2007-07-12 501136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
BS Player Toolbar - C:\Program Files\BS_Player\tbBS_0.dll [2009-07-02 2215960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - BS Player Toolbar - C:\Program Files\BS_Player\tbBS_0.dll [2009-07-02 2215960]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPStart"=C:\Program Files\Synaptics\SynTP\SynTPStart.exe [2007-09-15 102400]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2007-01-17 634880]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-08-17 4702208]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2007-07-25 174616]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2007-09-30 181544]
"QlbCtrl"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2007-09-19 202032]
"OnScreenDisplay"=C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [2007-09-04 554320]
"UCam_Menu"=C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2007-08-16 218408]
"DpAgent"=C:\Program Files\DigitalPersona\Bin\dpagent.exe [2007-09-20 671744]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"HP Health Check Scheduler"=[ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe []
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-09-13 480560]
"WAWifiMessage"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe [2007-01-08 311296]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe [2007-07-12 132496]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-03-28 1045800]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2008-12-08 54576]
""= []
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-06-08 2221352]
"NokiaMServer"=C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles []
"Nokia FastStart"=C:\Program Files\Nokia\Nokia Music\NokiaMusic.exe [2009-02-26 2376992]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-09-29 2054360]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-12-04 13556256]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-12-04 92704]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-03-09 2769336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"MsnMsgr"=C:\Program Files\MSN Messenger\MsnMsgr.Exe [2007-01-19 5674352]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2009-08-20 2363392]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-06-24 1840424]
"ICQ"=C:\Program Files\ICQ6.5\ICQ.exe [2009-11-16 172792]
"EPSON Stylus DX8400 Series"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE [2007-04-12 182272]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"Sony Ericsson PC Suite"=C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe [2009-11-20 434176]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
DPPWDFLT

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a6801b4a-efd3-11de-af00-001e37b3a595}]
shell\AutoRun\command - wd_windows_tools\setup.exe


======List of files/folders created in the last 1 months======

2010-03-18 20:42:15 ----D---- C:\rsit
2010-03-18 20:42:15 ----D---- C:\Program Files\trend micro
2010-03-18 11:20:11 ----D---- C:\Program Files\CCleaner
2010-03-18 11:16:28 ----A---- C:\Windows\system32\aswBoot.exe
2010-03-17 12:16:43 ----D---- C:\Windows\system32\eu-ES
2010-03-17 12:16:43 ----D---- C:\Windows\system32\ca-ES
2010-03-17 12:16:40 ----D---- C:\Windows\system32\vi-VN
2010-03-16 22:16:32 ----D---- C:\Program Files\AVG
2010-03-14 11:32:32 ----D---- C:\ProgramData\Avanquest Bluetooth SDK
2010-03-14 11:30:31 ----D---- C:\ProgramData\BVRP Software
2010-03-14 11:25:22 ----A---- C:\ProgramData\hpe846C.dll
2010-03-14 11:24:51 ----D---- C:\ProgramData\Sony Ericsson
2010-03-14 11:24:51 ----D---- C:\Program Files\Sony Ericsson
2010-03-12 08:07:50 ----A---- C:\Windows\system32\nshhttp.dll
2010-03-12 08:07:43 ----A---- C:\Windows\system32\httpapi.dll
2010-03-09 19:46:00 ----D---- C:\ProgramData\NFS Underground
2010-03-09 19:33:46 ----D---- C:\Program Files\EA GAMES
2010-03-09 19:25:46 ----D---- C:\Program Files\DAEMON Tools Lite
2010-03-09 19:25:15 ----D---- C:\Users\uzivatel\AppData\Roaming\DAEMON Tools Lite
2010-03-09 19:25:07 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-03-07 15:16:51 ----AD---- C:\Program Files\Altap Salamander 2.5
2010-03-07 15:04:03 ----D---- C:\Users\uzivatel\AppData\Roaming\GHISLER
2010-03-07 15:04:03 ----D---- C:\totalcmd
2010-02-28 10:52:06 ----D---- C:\Program Files\Mv2Player
2010-02-24 08:16:46 ----A---- C:\Windows\system32\tzres.dll
2010-02-21 11:22:08 ----D---- C:\ProgramData\ESET
2010-02-21 11:22:08 ----D---- C:\Program Files\ESET
2010-02-21 11:19:20 ----D---- C:\Windows\system32\EventProviders
2010-02-21 11:10:31 ----D---- C:\ProgramData\Alwil Software

======List of files/folders modified in the last 1 months======

2010-03-18 20:42:28 ----D---- C:\Windows\Temp
2010-03-18 20:42:28 ----D---- C:\Windows\Prefetch
2010-03-18 20:42:15 ----RD---- C:\Program Files
2010-03-18 18:34:38 ----D---- C:\Windows\system32\Tasks
2010-03-18 11:24:50 ----D---- C:\Windows\Debug
2010-03-18 11:24:50 ----D---- C:\WINDOWS
2010-03-18 11:17:25 ----D---- C:\Windows\system32\drivers
2010-03-18 11:17:20 ----D---- C:\Windows\System32
2010-03-18 11:17:19 ----D---- C:\Windows\inf
2010-03-18 11:17:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-03-18 11:16:54 ----SHD---- C:\Windows\Installer
2010-03-18 11:16:05 ----SHD---- C:\System Volume Information
2010-03-18 11:14:18 ----D---- C:\Users\uzivatel\AppData\Roaming\Skype
2010-03-18 11:06:19 ----SD---- C:\Users\uzivatel\AppData\Roaming\Microsoft
2010-03-18 11:06:16 ----HD---- C:\ProgramData
2010-03-18 08:34:46 ----D---- C:\Windows\Microsoft.NET
2010-03-18 08:34:15 ----RSD---- C:\Windows\assembly
2010-03-18 01:20:10 ----D---- C:\Windows\winsxs
2010-03-18 01:09:00 ----D---- C:\Windows\system32\catroot
2010-03-17 20:22:42 ----D---- C:\Program Files\BSPlayer
2010-03-17 12:42:28 ----D---- C:\Windows\rescache
2010-03-17 12:34:56 ----SHD---- C:\boot
2010-03-17 12:26:03 ----D---- C:\Windows\system32\catroot2
2010-03-17 12:20:06 ----D---- C:\Program Files\Windows Mail
2010-03-17 12:20:06 ----D---- C:\Program Files\Windows Calendar
2010-03-17 12:20:06 ----D---- C:\Program Files\Movie Maker
2010-03-17 12:20:02 ----D---- C:\Program Files\Windows Sidebar
2010-03-17 12:20:02 ----D---- C:\Program Files\Internet Explorer
2010-03-17 12:20:01 ----D---- C:\Program Files\Windows Media Player
2010-03-17 12:20:01 ----D---- C:\Program Files\Windows Collaboration
2010-03-17 12:20:00 ----D---- C:\Program Files\Windows Journal
2010-03-17 12:19:58 ----D---- C:\Program Files\Common Files\System
2010-03-17 12:19:57 ----D---- C:\Program Files\Windows Photo Gallery
2010-03-17 12:19:49 ----D---- C:\Windows\servicing
2010-03-17 12:19:49 ----D---- C:\Program Files\Windows Defender
2010-03-17 12:19:45 ----D---- C:\Windows\ehome
2010-03-17 12:19:02 ----D---- C:\Windows\IME
2010-03-17 12:19:01 ----D---- C:\Windows\system32\XPSViewer
2010-03-17 12:19:01 ----D---- C:\Windows\system32\sk-SK
2010-03-17 12:19:01 ----D---- C:\Windows\system32\lv-LV
2010-03-17 12:19:01 ----D---- C:\Windows\system32\ko-KR
2010-03-17 12:19:01 ----D---- C:\Windows\system32\it-IT
2010-03-17 12:19:01 ----D---- C:\Windows\system32\hr-HR
2010-03-17 12:19:01 ----D---- C:\Windows\system32\et-EE
2010-03-17 12:19:01 ----D---- C:\Windows\system32\en-US
2010-03-17 12:19:01 ----D---- C:\Windows\system32\el-GR
2010-03-17 12:19:01 ----D---- C:\Windows\system32\de-DE
2010-03-17 12:19:01 ----D---- C:\Windows\system32\da-DK
2010-03-17 12:19:00 ----D---- C:\Windows\system32\oobe
2010-03-17 12:19:00 ----D---- C:\Windows\system32\migration
2010-03-17 12:18:52 ----D---- C:\Windows\system32\AdvancedInstallers
2010-03-17 12:18:51 ----D---- C:\Windows\system32\sv-SE
2010-03-17 12:18:51 ----D---- C:\Windows\system32\setup
2010-03-17 12:18:51 ----D---- C:\Windows\system32\ru-RU
2010-03-17 12:18:51 ----D---- C:\Windows\system32\he-IL
2010-03-17 12:18:51 ----D---- C:\Windows\system32\fr-FR
2010-03-17 12:18:50 ----D---- C:\Windows\system32\fi-FI
2010-03-17 12:18:50 ----D---- C:\Windows\system32\cs
2010-03-17 12:18:48 ----D---- C:\Windows\system32\cs-CZ
2010-03-17 12:18:45 ----D---- C:\Windows\system32\SLUI
2010-03-17 12:18:45 ----D---- C:\Windows\system32\pt-PT
2010-03-17 12:18:45 ----D---- C:\Windows\system32\hu-HU
2010-03-17 12:18:44 ----D---- C:\Windows\system32\zh-TW
2010-03-17 12:18:44 ----D---- C:\Windows\system32\zh-CN
2010-03-17 12:18:44 ----D---- C:\Windows\system32\uk-UA
2010-03-17 12:18:44 ----D---- C:\Windows\system32\sr-Latn-CS
2010-03-17 12:18:44 ----D---- C:\Windows\system32\sl-SI
2010-03-17 12:18:44 ----D---- C:\Windows\system32\ro-RO
2010-03-17 12:18:44 ----D---- C:\Windows\system32\pl-PL
2010-03-17 12:18:44 ----D---- C:\Windows\system32\manifeststore
2010-03-17 12:18:44 ----D---- C:\Windows\system32\ja-JP
2010-03-17 12:18:44 ----D---- C:\Windows\system32\es-ES
2010-03-17 12:18:44 ----D---- C:\Windows\system32\bg-BG
2010-03-17 12:18:43 ----D---- C:\Windows\system32\th-TH
2010-03-17 12:18:40 ----D---- C:\Windows\system32\tr-TR
2010-03-17 12:18:38 ----D---- C:\Windows\system32\wbem
2010-03-17 12:18:36 ----D---- C:\Windows\system32\nl-NL
2010-03-17 12:18:36 ----D---- C:\Windows\system32\nb-NO
2010-03-17 12:18:36 ----D---- C:\Windows\system32\lt-LT
2010-03-17 12:18:36 ----D---- C:\Windows\system32\ar-SA
2010-03-17 12:18:34 ----D---- C:\Windows\system32\pt-BR
2010-03-17 12:18:34 ----D---- C:\Windows\system32\migwiz
2010-03-17 12:16:54 ----RSD---- C:\Windows\Fonts
2010-03-17 12:16:53 ----D---- C:\Windows\AppPatch
2010-03-17 12:16:40 ----D---- C:\Windows\system32\Boot
2010-03-17 12:14:11 ----D---- C:\Windows\system32\RTCOM
2010-03-16 23:06:35 ----D---- C:\Program Files\rajce
2010-03-16 07:48:10 ----D---- C:\Program Files\Mozilla Firefox
2010-03-14 11:24:51 ----HD---- C:\Program Files\InstallShield Installation Information
2010-03-11 19:37:32 ----D---- C:\Windows\Tasks
2010-03-09 20:40:32 ----D---- C:\Windows\system32\WDI
2010-03-08 22:09:59 ----D---- C:\ProgramData\Microsoft Help
2010-03-07 15:30:33 ----D---- C:\Users\uzivatel\AppData\Roaming\vlc
2010-03-04 19:37:23 ----D---- C:\Users\uzivatel\AppData\Roaming\ICQ
2010-03-02 06:30:12 ----A---- C:\Windows\system32\mrt.exe
2010-03-01 00:09:02 ----D---- C:\Users\uzivatel\AppData\Roaming\skypePM
2010-02-27 11:05:14 ----D---- C:\Program Files\Ask.com
2010-02-24 09:16:06 ----N---- C:\Windows\system32\MpSigStub.exe
2010-02-21 11:14:20 ----D---- C:\Program Files\Alwil Software

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-03-09 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-03-09 162640]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-03-09 46672]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-09-29 108792]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-03-09 19024]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-03-09 51792]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2009-12-22 278984]
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-09-29 116008]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2009-09-29 95896]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2009-12-22 25416]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-03-21 37376]
R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\Windows\system32\DRIVERS\ATSwpDrv.sys [2007-08-28 146560]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-19 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2007-09-18 80424]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2007-09-18 80936]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2007-09-18 16168]
R3 CmBatt;Ovladač baterie Microsoft ACPI Control Method Battery; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-19 14208]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 HpqRemHid;HP Remote Control HID Device; C:\Windows\system32\DRIVERS\HpqRemHid.sys [2007-07-11 7168]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-08-22 1950552]
R3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
R3 NETw4v32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-06-28 2222080]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-12-04 7606688]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-09-18 98816]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2007-01-17 983936]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-03-28 199472]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-19 134016]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-19 11264]
S3 a4lf9c1h;a4lf9c1h; C:\Windows\system32\drivers\a4lf9c1h.sys []
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 464384]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 E100B;Intel(R) PRO Adapter Driver; C:\Windows\system32\DRIVERS\e100b325.sys [2006-11-02 163328]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2006-11-02 987648]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2006-10-19 1380864]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-11-02 1781760]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2008-09-15 17664]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2006-11-02 654336]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 DpHost;Biometric Authentication Service; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2007-09-20 299008]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-09-29 735960]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2006-05-02 135168]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2007-07-25 354840]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2009-08-16 222968]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-08-20 73728]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-06-08 877864]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-09-23 935208]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-12-04 203296]
R2 OMSI download service;Sony Ericsson OMSI download service; C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [2006-12-19 81920]
R2 QPCapSvc;QuickPlay Background Capture Service (QBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [2007-09-30 271760]
R2 QPSched;QuickPlay Task Scheduler (QTS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [2007-09-30 112016]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-09 272024]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
R3 ServiceLayer;ServiceLayer; C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe [2008-11-11 620544]
S2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-09-19 65536]
S3 Com4Qlb;Com4Qlb; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe [2007-03-05 110592]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-09-29 20680]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 usnjsvc;Služba Čtení deníku USN sdílených složek programu Messenger; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]

-----------------EOF-----------------

[Caroprd111]

Stáhněte a uložte, nejlépe na plochu http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypněte všechny rezidentní bezpečnostní programy - firewally, antiviry, antispywary
• Spusťte aplikaci pod účtem s oprávněním Administrátora (Správce), ihned po startu se zobrazí stránka s licenčními podmínkami, pokračujte stisknutím tlačítka "Ano"
• Dále postupujte dle pokynů, během scanu nespouštějte jiné aplikace a neklikejte do zobrazujícího se okna
• Scan by měl trvat okolo 5 - 10 minut, po dokončení Combofix zobrazí log C:\ComboFix.txt , který sem vložte.
• Během skenování může být počítač restartován.

[Mataaaaa]

ComboFix 10-03-17.07 - uzivatel 18.03.2010 21:43:52.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3070.2255 [GMT 1:00]
Spuštěný z: g:\martina\Programy\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý

.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-545812794-2383777145-3001047551-500
c:\$recycle.bin\S-1-5-21-6029514-184543935-3270543413-500
c:\programdata\hpe846C.dll
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
c:\users\uzivatel\Documents\cc_20100318_112721.reg
c:\windows\system32\KBL.LOG

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-02-18 do 2010-03-18 )))))))))))))))))))))))))))))))
.

2010-03-18 21:09 . 2010-03-18 21:11 -------- d-----w- c:\users\uzivatel\AppData\Local\temp
2010-03-18 21:09 . 2010-03-18 21:09 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-03-18 19:42 . 2010-03-18 19:42 -------- d-----w- C:\rsit
2010-03-18 19:42 . 2010-03-18 19:42 -------- d-----w- c:\program files\trend micro
2010-03-18 10:20 . 2010-03-18 10:20 -------- d-----w- c:\program files\CCleaner
2010-03-18 10:17 . 2010-03-09 11:08 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-03-18 10:17 . 2010-03-09 11:12 162640 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-03-18 10:17 . 2010-03-09 11:09 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-03-18 10:17 . 2010-03-09 11:12 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-03-18 10:17 . 2010-03-09 11:08 51792 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-03-18 10:16 . 2010-03-09 11:24 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-03-18 10:16 . 2010-03-09 11:24 153184 ----a-w- c:\windows\system32\aswBoot.exe
2010-03-17 11:16 . 2010-03-17 11:19 -------- d-----w- c:\windows\system32\ca-ES
2010-03-17 11:16 . 2010-03-17 11:18 -------- d-----w- c:\windows\system32\eu-ES
2010-03-17 11:16 . 2010-03-17 11:18 -------- d-----w- c:\windows\system32\vi-VN
2010-03-16 21:16 . 2010-03-16 21:18 -------- d-----w- c:\program files\AVG
2010-03-14 10:32 . 2010-03-15 05:35 -------- d-----w- c:\programdata\Avanquest Bluetooth SDK
2010-03-14 10:30 . 2010-03-14 10:30 -------- d-----w- c:\users\uzivatel\AppData\Local\Sony Ericsson
2010-03-14 10:30 . 2010-03-14 10:30 -------- d-----w- c:\programdata\BVRP Software
2010-03-14 10:24 . 2010-03-14 10:24 -------- d-----w- c:\programdata\Sony Ericsson
2010-03-14 10:24 . 2010-03-14 10:24 -------- d-----w- c:\program files\Sony Ericsson
2010-03-12 07:07 . 2010-02-20 23:06 24064 ----a-w- c:\windows\system32\nshhttp.dll
2010-03-12 07:07 . 2010-02-20 20:53 411648 ----a-w- c:\windows\system32\drivers\http.sys
2010-03-12 07:07 . 2010-02-20 23:05 30720 ----a-w- c:\windows\system32\httpapi.dll
2010-03-09 18:46 . 2010-03-09 18:46 -------- d-----w- c:\programdata\NFS Underground
2010-03-09 18:33 . 2010-03-09 18:33 -------- d-----w- c:\program files\EA GAMES
2010-03-09 18:26 . 2010-03-09 18:26 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-03-09 18:25 . 2010-03-09 18:26 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-03-09 18:25 . 2010-03-09 18:32 -------- d-----w- c:\users\uzivatel\AppData\Roaming\DAEMON Tools Lite
2010-03-09 18:25 . 2010-03-09 18:25 -------- d-----w- c:\programdata\DAEMON Tools Lite
2010-03-07 14:04 . 2009-09-24 06:50 545 ----a-w- c:\windows\UC.PIF
2010-03-07 14:04 . 2009-09-24 06:50 545 ----a-w- c:\windows\RAR.PIF
2010-03-07 14:04 . 2009-09-24 06:50 545 ----a-w- c:\windows\PKZIP.PIF
2010-03-07 14:04 . 2009-09-24 06:50 545 ----a-w- c:\windows\PKUNZIP.PIF
2010-03-07 14:04 . 2009-09-24 06:50 545 ----a-w- c:\windows\NOCLOSE.PIF
2010-03-07 14:04 . 2009-09-24 06:50 545 ----a-w- c:\windows\LHA.PIF
2010-03-07 14:04 . 2009-09-24 06:50 545 ----a-w- c:\windows\ARJ.PIF
2010-03-07 14:04 . 2010-03-07 14:04 -------- d-----w- C:\totalcmd
2010-03-07 14:04 . 2010-03-07 14:04 -------- d-----w- c:\users\uzivatel\AppData\Roaming\GHISLER
2010-03-02 14:50 . 2010-03-02 14:58 7592 ----a-w- c:\users\uzivatel\AppData\Local\d3d9caps.dat
2010-03-01 14:05 . 2010-01-21 16:12 52224 ----a-w- c:\users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\ochdttth.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\components\FFExternalAlert.dll
2010-03-01 14:05 . 2010-01-21 16:12 101376 ----a-w- c:\users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\ochdttth.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\components\RadioWMPCore.dll
2010-02-28 09:52 . 2010-02-28 09:52 -------- d-----w- c:\program files\Mv2Player
2010-02-24 07:16 . 2010-01-23 09:26 2048 ----a-w- c:\windows\system32\tzres.dll
2010-02-21 10:36 . 2010-02-21 10:36 -------- d-----w- c:\users\uzivatel\AppData\Local\ESET
2010-02-21 10:22 . 2010-02-21 10:22 -------- d-----w- c:\program files\ESET
2010-02-21 10:19 . 2010-02-21 10:19 -------- d-----w- c:\windows\system32\EventProviders
2010-02-21 10:10 . 2010-03-18 10:16 -------- d-----w- c:\programdata\Alwil Software

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-18 20:39 . 2007-11-28 10:44 607002 ----a-w- c:\windows\system32\perfh005.dat
2010-03-18 20:39 . 2007-11-28 10:44 118308 ----a-w- c:\windows\system32\perfc005.dat
2010-03-18 20:30 . 2008-02-27 02:45 3281 ----a-w- c:\windows\bthservsdp.dat
2010-03-18 20:29 . 2010-01-06 18:54 -------- d-----w- c:\users\uzivatel\AppData\Roaming\Skype
2010-03-18 16:56 . 2009-12-22 15:01 104532 ----a-w- c:\programdata\nvModes.dat
2010-03-18 11:42 . 2010-01-01 14:35 1 ----a-w- c:\users\uzivatel\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-03-17 19:22 . 2009-12-27 15:09 -------- d-----w- c:\program files\BSPlayer
2010-03-17 11:20 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2010-03-17 11:20 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-03-17 11:20 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2010-03-17 11:20 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2010-03-17 11:20 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2010-03-17 11:19 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2010-03-17 11:19 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2010-03-17 11:16 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2010-03-17 11:13 . 2010-03-17 11:13 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
2010-03-16 22:06 . 2010-02-10 15:37 -------- d-----w- c:\program files\rajce
2010-03-14 10:24 . 2007-11-28 02:09 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-03-08 21:09 . 2010-01-01 18:23 -------- d-----w- c:\programdata\Microsoft Help
2010-03-07 14:30 . 2010-01-01 16:11 -------- d-----w- c:\users\uzivatel\AppData\Roaming\vlc
2010-03-04 18:37 . 2010-01-02 13:15 -------- d-----w- c:\users\uzivatel\AppData\Roaming\ICQ
2010-02-28 23:09 . 2010-01-06 18:57 -------- d-----w- c:\users\uzivatel\AppData\Roaming\skypePM
2010-02-27 10:05 . 2009-12-27 15:25 -------- d-----w- c:\program files\Ask.com
2010-02-24 08:16 . 2009-12-22 12:50 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-21 10:14 . 2009-12-23 14:06 -------- d-----w- c:\program files\Alwil Software
2010-02-10 14:50 . 2010-02-10 14:49 -------- d-----w- c:\users\uzivatel\AppData\Roaming\Jpeg Resampler
2010-02-10 14:49 . 2010-02-10 14:49 -------- d-----w- c:\program files\JPEG Resampler
2010-01-31 16:54 . 2010-01-31 16:54 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2010-01-31 15:47 . 2006-11-02 10:32 101888 ----a-w- c:\windows\system32\ifxcardm.dll
2010-01-31 15:47 . 2006-11-02 10:32 82432 ----a-w- c:\windows\system32\axaltocm.dll
2010-01-24 23:10 . 2010-01-24 23:10 -------- d-----w- c:\users\uzivatel\AppData\Roaming\dvdcss
2010-01-15 13:00 . 2009-12-22 12:04 112800 ----a-w- c:\users\uzivatel\AppData\Local\GDIPFONTCACHEV1.DAT
2010-01-15 12:54 . 2010-01-15 12:54 51534 ----a-w- c:\windows\inf\Nokia Music\0009\tmpD3D8.tmp
2010-01-15 12:54 . 2010-01-15 12:54 51534 ----a-w- c:\windows\inf\Nokia Music\0005\tmpD3D8.tmp
2010-01-15 12:54 . 2010-01-15 12:54 51534 ----a-w- c:\windows\inf\Nokia Music\0000\tmpD3D8.tmp
2010-01-15 12:54 . 2010-01-15 12:54 1593 ----a-w- c:\windows\inf\Nokia Music\tmpD3D9.tmp
2010-01-06 18:57 . 2010-01-06 18:57 56 ---ha-w- c:\programdata\ezsidmv.dat
2010-01-01 16:31 . 2010-01-01 16:31 737280 ----a-w- c:\windows\iun6002.exe
2009-12-25 23:29 . 2009-12-25 23:29 709215 ----a-w- c:\users\uzivatel\AppData\Roaming\IDOS\unins000.exe
2009-12-22 22:02 . 2009-12-22 22:02 278984 ----a-w- c:\windows\system32\drivers\atksgt.sys
2009-12-22 22:02 . 2009-12-22 22:02 25416 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2009-12-22 14:12 . 2009-12-22 14:12 61440 ----a-w- c:\windows\system32\winipsec.dll
2009-12-22 14:12 . 2009-12-22 14:12 272896 ----a-w- c:\windows\system32\polstore.dll
2009-12-22 14:10 . 2009-12-22 14:10 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2009-12-22 14:10 . 2009-12-22 14:10 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2009-12-22 14:10 . 2009-12-22 14:10 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2009-12-22 14:10 . 2009-12-22 14:10 19968 ----a-w- c:\windows\system32\ARP.EXE
2009-12-22 14:10 . 2009-12-22 14:10 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2009-12-22 14:10 . 2009-12-22 14:10 17920 ----a-w- c:\windows\system32\netevent.dll
2009-12-22 14:10 . 2009-12-22 14:10 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2009-12-22 14:10 . 2009-12-22 14:10 105984 ----a-w- c:\windows\system32\netiohlp.dll
2009-12-22 14:10 . 2009-12-22 14:10 10240 ----a-w- c:\windows\system32\finger.exe
2009-12-22 14:08 . 2009-12-22 14:08 65024 ----a-w- c:\windows\system32\wlanapi.dll
2009-12-22 14:08 . 2009-12-22 14:08 127488 ----a-w- c:\windows\system32\L2SecHC.dll
2009-12-22 14:07 . 2009-12-22 14:07 68096 ----a-w- c:\windows\system32\wlanhlp.dll
2009-12-22 14:07 . 2009-12-22 14:07 513536 ----a-w- c:\windows\system32\wlansvc.dll
2009-12-22 14:07 . 2009-12-22 14:07 302592 ----a-w- c:\windows\system32\wlansec.dll
2009-12-22 14:07 . 2009-12-22 14:07 293376 ----a-w- c:\windows\system32\wlanmsm.dll
2009-12-22 14:07 . 2009-12-22 14:07 15181 ----a-w- c:\windows\system32\gatherWirelessInfo.vbs
2009-12-22 14:07 . 2009-12-22 14:07 1248768 ----a-w- c:\windows\system32\msxml3.dll
2009-12-22 14:07 . 2009-12-22 14:07 2048 ----a-w- c:\windows\system32\msxml3r.dll
2009-12-22 14:07 . 2009-12-22 14:07 1401856 ----a-w- c:\windows\system32\msxml6.dll
2009-12-22 14:07 . 2009-12-22 14:07 2048 ----a-w- c:\windows\system32\msxml6r.dll
2009-12-22 14:06 . 2009-12-22 14:06 34304 ----a-w- c:\windows\system32\atmlib.dll
2009-12-22 14:06 . 2009-12-22 14:06 289792 ----a-w- c:\windows\system32\atmfd.dll
2009-12-22 14:06 . 2009-12-22 14:06 23552 ----a-w- c:\windows\system32\lpk.dll
2009-12-22 14:06 . 2009-12-22 14:06 10240 ----a-w- c:\windows\system32\dciman32.dll
2009-12-22 14:05 . 2009-12-22 14:05 439864 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-12-22 14:05 . 2009-12-22 14:05 218624 ----a-w- c:\windows\system32\msv1_0.dll
2009-12-22 14:05 . 2009-12-22 14:05 175104 ----a-w- c:\windows\system32\wdigest.dll
2009-12-22 14:05 . 2009-12-22 14:05 72704 ----a-w- c:\windows\system32\secur32.dll
2009-12-22 14:05 . 2009-12-22 14:05 9728 ----a-w- c:\windows\system32\lsass.exe
2009-12-22 14:05 . 2009-12-22 14:05 1259008 ----a-w- c:\windows\system32\lsasrv.dll
2009-12-22 14:04 . 2009-12-22 14:04 98816 ----a-w- c:\windows\system32\mfps.dll
2009-12-22 14:04 . 2009-12-22 14:04 53248 ----a-w- c:\windows\system32\rrinstaller.exe
2009-12-22 14:04 . 2009-12-22 14:04 2868224 ----a-w- c:\windows\system32\mf.dll
2009-12-22 14:04 . 2009-12-22 14:04 24576 ----a-w- c:\windows\system32\mfpmp.exe
2009-12-22 14:04 . 2009-12-22 14:04 2048 ----a-w- c:\windows\system32\mferror.dll
2009-12-22 14:01 . 2009-12-22 14:01 71680 ----a-w- c:\windows\system32\atl.dll
2009-12-22 13:56 . 2009-12-22 13:56 72704 ----a-w- c:\windows\system32\admparse.dll
2009-12-22 13:53 . 2009-12-22 13:53 160256 ----a-w- c:\windows\system32\wkssvc.dll
2009-12-22 13:52 . 2009-12-22 13:52 53248 ----a-w- c:\windows\system32\tsgqec.dll
2009-12-22 13:52 . 2009-12-22 13:52 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-12-22 13:52 . 2009-12-22 13:52 136192 ----a-w- c:\windows\system32\aaclient.dll
2009-12-22 13:45 . 2009-12-22 13:45 623616 ----a-w- c:\windows\system32\localspl.dll
2009-12-22 13:44 . 2009-12-22 13:44 65024 ----a-w- c:\windows\system32\avicap32.dll
2009-12-22 13:39 . 2009-12-22 13:39 4495360 ----a-w- c:\windows\system32\NlsData001d.dll
2009-12-22 13:39 . 2009-12-22 13:39 1965056 ----a-w- c:\windows\system32\NlsData001b.dll
2009-12-22 13:39 . 2009-12-22 13:39 1965056 ----a-w- c:\windows\system32\NlsData001a.dll
2009-12-22 13:39 . 2009-12-22 13:39 9847296 ----a-w- c:\windows\system32\NlsData000a.dll
2009-12-22 13:39 . 2009-12-22 13:39 2643456 ----a-w- c:\windows\system32\NlsData000c.dll
2009-12-22 13:39 . 2009-12-22 13:39 2342912 ----a-w- c:\windows\system32\NlsData000d.dll
2009-12-22 13:39 . 2009-12-22 13:39 4495360 ----a-w- c:\windows\system32\NlsData0416.dll
2009-12-22 13:39 . 2009-12-22 13:39 4495360 ----a-w- c:\windows\system32\NlsData0414.dll
2009-12-22 13:39 . 2009-12-22 13:39 1965056 ----a-w- c:\windows\system32\NlsData000f.dll
2009-12-22 13:39 . 2009-12-22 13:39 6917120 ----a-w- c:\windows\system32\NlsLexicons0c1a.dll
2009-12-22 13:39 . 2009-12-22 13:39 4495360 ----a-w- c:\windows\system32\NlsData0816.dll
2009-12-22 13:39 . 2009-12-22 13:39 1965056 ----a-w- c:\windows\system32\NlsData081a.dll
2009-12-22 13:39 . 2009-12-22 13:39 1965056 ----a-w- c:\windows\system32\NlsData0c1a.dll
2009-12-22 13:37 . 2009-12-22 13:37 6656 ----a-w- c:\windows\system32\kbd106n.dll
2008-04-25 12:18 . 2009-12-22 09:52 22 --sha-w- c:\windows\SMINST\HPCD.SYS
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-02-04 1197448]
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files\BS_Player\tbBS_0.dll" [2009-07-02 2215960]

[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]

[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-02-04 15:50 1197448 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
2009-07-02 09:18 2215960 ----a-w- c:\program files\BS_Player\tbBS_0.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files\BS_Player\tbBS_0.dll" [2009-07-02 2215960]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-02-04 1197448]

[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}"= "c:\program files\BS_Player\tbBS_0.dll" [2009-07-02 2215960]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-02-04 1197448]

[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-08-20 2363392]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424]
"ICQ"="c:\program files\ICQ6.5\ICQ.exe" [2009-11-16 172792]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-10-09 25623336]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2009-11-20 434176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-15 102400]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2007-01-17 634880]
"RtHDVCpl"="RtHDVCpl.exe" [2007-08-17 4702208]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-07-25 174616]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2007-09-30 181544]
"QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-09-19 202032]
"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-09-04 554320]
"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2007-08-16 218408]
"DpAgent"="c:\program files\DigitalPersona\Bin\dpagent.exe" [2007-09-20 671744]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-09-13 480560]
"WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-08 311296]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 132496]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-06-08 2221352]
"Nokia FastStart"="c:\program files\Nokia\Nokia Music\NokiaMusic.exe" [2009-02-26 2376992]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-09-29 2054360]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-04 13556256]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-04 92704]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-03-09 2769336]

c:\users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-1-15 393216]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli DPPWDFLT

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):d4,3d,17,cb,c4,c5,ca,01

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-03-09 691696]
R2 OMSI download service;Sony Ericsson OMSI download service;c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
S1 aswSP;aswSP; [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2009-09-29 108792]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-03-09 51792]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-09-29 735960]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2009-09-29 95896]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [2009-08-16 222968]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-08-20 12:24 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'

2010-03-18 c:\windows\Tasks\User_Feed_Synchronization-{ADAF2F4C-8425-4458-B6DA-1BEA6EE687E8}.job
- c:\windows\system32\msfeedssync.exe [2009-12-24 07:33]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=cs_cz&c=81&bd=Pavilion&pf=laptop
uInternet Settings,ProxyServer = proxy.mpsv.cz:8080
uInternet Settings,ProxyOverride = <local>
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
FF - ProfilePath - c:\users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\ochdttth.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - WebHledani
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - prefs.js: keyword.URL - hxxp://www.webhledani.cz/results.aspx?i=39&tp=ab&q=
FF - component: c:\users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\ochdttth.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\components\FFExternalAlert.dll
FF - component: c:\users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\ochdttth.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\components\RadioWMPCore.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
HKLM-Run-HP Health Check Scheduler - [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-18 22:11
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'lsass.exe'(768)
c:\windows\system32\DPPWDFLT.dll
.
Celkový čas: 2010-03-18 22:18:26
ComboFix-quarantined-files.txt 2010-03-18 21:18

Před spuštěním: Volných bajtů: 182 121 746 432
Po spuštění: Volných bajtů: 183 033 876 480

- - End Of File - - 9FC44441FDFDC096CBA822E9782B06C2

[Caroprd111]

Pokud nemáte, přesuňte Combofix na plochu

• Otevřete si Poznámkový blok a zkopírujte do něj text z bílého okénka.

Kód: Vybrat vše

Registry::
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"=-
[-HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
[-HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
[-HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
[-HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[-HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

• Uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
• Po uložení uchopte vámi vytvořený skript levým myšítkem a přesuňte ho nad ikonu Combofixu, kde ho upustíte:
  
  
• Po aplikaci na Vás vypadne další log,vložte ho sem

Může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

[Mataaaaa]

ComboFix 10-03-18.02 - uzivatel 19.03.2010 14:51:46.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3070.1167 [GMT 1:00]
Spuštěný z: c:\users\uzivatel\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\uzivatel\Desktop\CFScript.txt.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý

.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\Connect.dll
G:\Autorun.inf

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-02-19 do 2010-03-19 )))))))))))))))))))))))))))))))
.

2010-03-19 14:00 . 2010-03-19 14:01 -------- d-----w- c:\users\uzivatel\AppData\Local\temp
2010-03-19 14:00 . 2010-03-19 14:00 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-03-19 14:00 . 2010-03-19 14:00 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-03-19 02:04 . 2010-02-12 10:32 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-03-18 19:42 . 2010-03-18 19:42 -------- d-----w- C:\rsit
2010-03-18 19:42 . 2010-03-18 19:42 -------- d-----w- c:\program files\trend micro
2010-03-18 10:20 . 2010-03-18 10:20 -------- d-----w- c:\program files\CCleaner
2010-03-18 10:17 . 2010-03-09 11:08 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-03-18 10:17 . 2010-03-09 11:12 162640 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-03-18 10:17 . 2010-03-09 11:09 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-03-18 10:17 . 2010-03-09 11:12 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-03-18 10:17 . 2010-03-09 11:08 51792 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-03-18 10:16 . 2010-03-09 11:24 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-03-18 10:16 . 2010-03-09 11:24 153184 ----a-w- c:\windows\system32\aswBoot.exe
2010-03-17 11:16 . 2010-03-17 11:19 -------- d-----w- c:\windows\system32\ca-ES
2010-03-17 11:16 . 2010-03-17 11:18 -------- d-----w- c:\windows\system32\eu-ES
2010-03-17 11:16 . 2010-03-17 11:18 -------- d-----w- c:\windows\system32\vi-VN
2010-03-16 21:16 . 2010-03-16 21:18 -------- d-----w- c:\program files\AVG
2010-03-14 10:32 . 2010-03-15 05:35 -------- d-----w- c:\programdata\Avanquest Bluetooth SDK
2010-03-14 10:30 . 2010-03-14 10:30 -------- d-----w- c:\users\uzivatel\AppData\Local\Sony Ericsson
2010-03-14 10:30 . 2010-03-14 10:30 -------- d-----w- c:\programdata\BVRP Software
2010-03-14 10:24 . 2010-03-14 10:24 -------- d-----w- c:\programdata\Sony Ericsson
2010-03-14 10:24 . 2010-03-14 10:24 -------- d-----w- c:\program files\Sony Ericsson
2010-03-12 07:07 . 2010-02-20 23:06 24064 ----a-w- c:\windows\system32\nshhttp.dll
2010-03-12 07:07 . 2010-02-20 20:53 411648 ----a-w- c:\windows\system32\drivers\http.sys
2010-03-12 07:07 . 2010-02-20 23:05 30720 ----a-w- c:\windows\system32\httpapi.dll
2010-03-09 18:46 . 2010-03-09 18:46 -------- d-----w- c:\programdata\NFS Underground
2010-03-09 18:33 . 2010-03-09 18:33 -------- d-----w- c:\program files\EA GAMES
2010-03-09 18:26 . 2010-03-09 18:26 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-03-09 18:25 . 2010-03-09 18:26 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-03-09 18:25 . 2010-03-09 18:32 -------- d-----w- c:\users\uzivatel\AppData\Roaming\DAEMON Tools Lite
2010-03-09 18:25 . 2010-03-09 18:25 -------- d-----w- c:\programdata\DAEMON Tools Lite
2010-03-07 14:04 . 2009-09-24 06:50 545 ----a-w- c:\windows\UC.PIF
2010-03-07 14:04 . 2009-09-24 06:50 545 ----a-w- c:\windows\RAR.PIF
2010-03-07 14:04 . 2009-09-24 06:50 545 ----a-w- c:\windows\PKZIP.PIF
2010-03-07 14:04 . 2009-09-24 06:50 545 ----a-w- c:\windows\PKUNZIP.PIF
2010-03-07 14:04 . 2009-09-24 06:50 545 ----a-w- c:\windows\NOCLOSE.PIF
2010-03-07 14:04 . 2009-09-24 06:50 545 ----a-w- c:\windows\LHA.PIF
2010-03-07 14:04 . 2009-09-24 06:50 545 ----a-w- c:\windows\ARJ.PIF
2010-03-07 14:04 . 2010-03-07 14:04 -------- d-----w- C:\totalcmd
2010-03-07 14:04 . 2010-03-07 14:04 -------- d-----w- c:\users\uzivatel\AppData\Roaming\GHISLER
2010-03-02 14:50 . 2010-03-02 14:58 7592 ----a-w- c:\users\uzivatel\AppData\Local\d3d9caps.dat
2010-03-01 14:05 . 2010-01-21 16:12 52224 ----a-w- c:\users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\ochdttth.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\components\FFExternalAlert.dll
2010-03-01 14:05 . 2010-01-21 16:12 101376 ----a-w- c:\users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\ochdttth.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\components\RadioWMPCore.dll
2010-02-28 09:52 . 2010-02-28 09:52 -------- d-----w- c:\program files\Mv2Player
2010-02-24 07:16 . 2010-01-23 09:26 2048 ----a-w- c:\windows\system32\tzres.dll
2010-02-21 10:36 . 2010-02-21 10:36 -------- d-----w- c:\users\uzivatel\AppData\Local\ESET
2010-02-21 10:22 . 2010-02-21 10:22 -------- d-----w- c:\program files\ESET
2010-02-21 10:19 . 2010-02-21 10:19 -------- d-----w- c:\windows\system32\EventProviders
2010-02-21 10:10 . 2010-03-18 10:16 -------- d-----w- c:\programdata\Alwil Software

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-19 11:32 . 2010-01-01 14:35 1 ----a-w- c:\users\uzivatel\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-03-19 11:00 . 2007-11-28 10:44 607002 ----a-w- c:\windows\system32\perfh005.dat
2010-03-19 11:00 . 2007-11-28 10:44 118308 ----a-w- c:\windows\system32\perfc005.dat
2010-03-18 22:26 . 2009-12-22 12:04 112800 ----a-w- c:\users\uzivatel\AppData\Local\GDIPFONTCACHEV1.DAT
2010-03-18 20:30 . 2008-02-27 02:45 3281 ----a-w- c:\windows\bthservsdp.dat
2010-03-18 20:29 . 2010-01-06 18:54 -------- d-----w- c:\users\uzivatel\AppData\Roaming\Skype
2010-03-18 16:56 . 2009-12-22 15:01 104532 ----a-w- c:\programdata\nvModes.dat
2010-03-17 19:22 . 2009-12-27 15:09 -------- d-----w- c:\program files\BSPlayer
2010-03-17 11:20 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2010-03-17 11:20 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-03-17 11:20 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2010-03-17 11:20 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2010-03-17 11:20 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2010-03-17 11:19 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2010-03-17 11:19 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2010-03-17 11:16 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2010-03-17 11:13 . 2010-03-17 11:13 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
2010-03-16 22:06 . 2010-02-10 15:37 -------- d-----w- c:\program files\rajce
2010-03-14 10:24 . 2007-11-28 02:09 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-03-08 21:09 . 2010-01-01 18:23 -------- d-----w- c:\programdata\Microsoft Help
2010-03-07 14:30 . 2010-01-01 16:11 -------- d-----w- c:\users\uzivatel\AppData\Roaming\vlc
2010-03-04 18:37 . 2010-01-02 13:15 -------- d-----w- c:\users\uzivatel\AppData\Roaming\ICQ
2010-02-28 23:09 . 2010-01-06 18:57 -------- d-----w- c:\users\uzivatel\AppData\Roaming\skypePM
2010-02-27 10:05 . 2009-12-27 15:25 -------- d-----w- c:\program files\Ask.com
2010-02-24 09:16 . 2009-12-22 12:50 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-21 10:14 . 2009-12-23 14:06 -------- d-----w- c:\program files\Alwil Software
2010-02-10 14:50 . 2010-02-10 14:49 -------- d-----w- c:\users\uzivatel\AppData\Roaming\Jpeg Resampler
2010-02-10 14:49 . 2010-02-10 14:49 -------- d-----w- c:\program files\JPEG Resampler
2010-01-31 16:54 . 2010-01-31 16:54 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2010-01-31 15:47 . 2006-11-02 10:32 101888 ----a-w- c:\windows\system32\ifxcardm.dll
2010-01-31 15:47 . 2006-11-02 10:32 82432 ----a-w- c:\windows\system32\axaltocm.dll
2010-01-24 23:10 . 2010-01-24 23:10 -------- d-----w- c:\users\uzivatel\AppData\Roaming\dvdcss
2010-01-15 12:54 . 2010-01-15 12:54 51534 ----a-w- c:\windows\inf\Nokia Music\0009\tmpD3D8.tmp
2010-01-15 12:54 . 2010-01-15 12:54 51534 ----a-w- c:\windows\inf\Nokia Music\0005\tmpD3D8.tmp
2010-01-15 12:54 . 2010-01-15 12:54 51534 ----a-w- c:\windows\inf\Nokia Music\0000\tmpD3D8.tmp
2010-01-15 12:54 . 2010-01-15 12:54 1593 ----a-w- c:\windows\inf\Nokia Music\tmpD3D9.tmp
2010-01-06 18:57 . 2010-01-06 18:57 56 ---ha-w- c:\programdata\ezsidmv.dat
2010-01-01 16:31 . 2010-01-01 16:31 737280 ----a-w- c:\windows\iun6002.exe
2009-12-25 23:29 . 2009-12-25 23:29 709215 ----a-w- c:\users\uzivatel\AppData\Roaming\IDOS\unins000.exe
2009-12-22 22:02 . 2009-12-22 22:02 278984 ----a-w- c:\windows\system32\drivers\atksgt.sys
2009-12-22 22:02 . 2009-12-22 22:02 25416 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2009-12-22 14:12 . 2009-12-22 14:12 61440 ----a-w- c:\windows\system32\winipsec.dll
2009-12-22 14:12 . 2009-12-22 14:12 272896 ----a-w- c:\windows\system32\polstore.dll
2009-12-22 14:10 . 2009-12-22 14:10 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2009-12-22 14:10 . 2009-12-22 14:10 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2009-12-22 14:10 . 2009-12-22 14:10 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2009-12-22 14:10 . 2009-12-22 14:10 19968 ----a-w- c:\windows\system32\ARP.EXE
2009-12-22 14:10 . 2009-12-22 14:10 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2009-12-22 14:10 . 2009-12-22 14:10 17920 ----a-w- c:\windows\system32\netevent.dll
2009-12-22 14:10 . 2009-12-22 14:10 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2009-12-22 14:10 . 2009-12-22 14:10 105984 ----a-w- c:\windows\system32\netiohlp.dll
2009-12-22 14:10 . 2009-12-22 14:10 10240 ----a-w- c:\windows\system32\finger.exe
2009-12-22 14:08 . 2009-12-22 14:08 65024 ----a-w- c:\windows\system32\wlanapi.dll
2009-12-22 14:08 . 2009-12-22 14:08 127488 ----a-w- c:\windows\system32\L2SecHC.dll
2009-12-22 14:07 . 2009-12-22 14:07 68096 ----a-w- c:\windows\system32\wlanhlp.dll
2009-12-22 14:07 . 2009-12-22 14:07 513536 ----a-w- c:\windows\system32\wlansvc.dll
2009-12-22 14:07 . 2009-12-22 14:07 302592 ----a-w- c:\windows\system32\wlansec.dll
2009-12-22 14:07 . 2009-12-22 14:07 293376 ----a-w- c:\windows\system32\wlanmsm.dll
2009-12-22 14:07 . 2009-12-22 14:07 15181 ----a-w- c:\windows\system32\gatherWirelessInfo.vbs
2009-12-22 14:07 . 2009-12-22 14:07 1248768 ----a-w- c:\windows\system32\msxml3.dll
2009-12-22 14:07 . 2009-12-22 14:07 2048 ----a-w- c:\windows\system32\msxml3r.dll
2009-12-22 14:07 . 2009-12-22 14:07 1401856 ----a-w- c:\windows\system32\msxml6.dll
2009-12-22 14:07 . 2009-12-22 14:07 2048 ----a-w- c:\windows\system32\msxml6r.dll
2009-12-22 14:06 . 2009-12-22 14:06 34304 ----a-w- c:\windows\system32\atmlib.dll
2009-12-22 14:06 . 2009-12-22 14:06 289792 ----a-w- c:\windows\system32\atmfd.dll
2009-12-22 14:06 . 2009-12-22 14:06 23552 ----a-w- c:\windows\system32\lpk.dll
2009-12-22 14:06 . 2009-12-22 14:06 10240 ----a-w- c:\windows\system32\dciman32.dll
2009-12-22 14:05 . 2009-12-22 14:05 439864 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-12-22 14:05 . 2009-12-22 14:05 218624 ----a-w- c:\windows\system32\msv1_0.dll
2009-12-22 14:05 . 2009-12-22 14:05 175104 ----a-w- c:\windows\system32\wdigest.dll
2009-12-22 14:05 . 2009-12-22 14:05 72704 ----a-w- c:\windows\system32\secur32.dll
2009-12-22 14:05 . 2009-12-22 14:05 9728 ----a-w- c:\windows\system32\lsass.exe
2009-12-22 14:05 . 2009-12-22 14:05 1259008 ----a-w- c:\windows\system32\lsasrv.dll
2009-12-22 14:04 . 2009-12-22 14:04 98816 ----a-w- c:\windows\system32\mfps.dll
2009-12-22 14:04 . 2009-12-22 14:04 53248 ----a-w- c:\windows\system32\rrinstaller.exe
2009-12-22 14:04 . 2009-12-22 14:04 2868224 ----a-w- c:\windows\system32\mf.dll
2009-12-22 14:04 . 2009-12-22 14:04 24576 ----a-w- c:\windows\system32\mfpmp.exe
2009-12-22 14:04 . 2009-12-22 14:04 2048 ----a-w- c:\windows\system32\mferror.dll
2009-12-22 14:01 . 2009-12-22 14:01 71680 ----a-w- c:\windows\system32\atl.dll
2009-12-22 13:56 . 2009-12-22 13:56 72704 ----a-w- c:\windows\system32\admparse.dll
2009-12-22 13:53 . 2009-12-22 13:53 160256 ----a-w- c:\windows\system32\wkssvc.dll
2009-12-22 13:52 . 2009-12-22 13:52 53248 ----a-w- c:\windows\system32\tsgqec.dll
2009-12-22 13:52 . 2009-12-22 13:52 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-12-22 13:52 . 2009-12-22 13:52 136192 ----a-w- c:\windows\system32\aaclient.dll
2009-12-22 13:45 . 2009-12-22 13:45 623616 ----a-w- c:\windows\system32\localspl.dll
2009-12-22 13:44 . 2009-12-22 13:44 65024 ----a-w- c:\windows\system32\avicap32.dll
2009-12-22 13:39 . 2009-12-22 13:39 4495360 ----a-w- c:\windows\system32\NlsData001d.dll
2009-12-22 13:39 . 2009-12-22 13:39 1965056 ----a-w- c:\windows\system32\NlsData001b.dll
2009-12-22 13:39 . 2009-12-22 13:39 1965056 ----a-w- c:\windows\system32\NlsData001a.dll
2009-12-22 13:39 . 2009-12-22 13:39 9847296 ----a-w- c:\windows\system32\NlsData000a.dll
2009-12-22 13:39 . 2009-12-22 13:39 2643456 ----a-w- c:\windows\system32\NlsData000c.dll
2009-12-22 13:39 . 2009-12-22 13:39 2342912 ----a-w- c:\windows\system32\NlsData000d.dll
2009-12-22 13:39 . 2009-12-22 13:39 4495360 ----a-w- c:\windows\system32\NlsData0416.dll
2009-12-22 13:39 . 2009-12-22 13:39 4495360 ----a-w- c:\windows\system32\NlsData0414.dll
2009-12-22 13:39 . 2009-12-22 13:39 1965056 ----a-w- c:\windows\system32\NlsData000f.dll
2009-12-22 13:39 . 2009-12-22 13:39 6917120 ----a-w- c:\windows\system32\NlsLexicons0c1a.dll
2009-12-22 13:39 . 2009-12-22 13:39 4495360 ----a-w- c:\windows\system32\NlsData0816.dll
2009-12-22 13:39 . 2009-12-22 13:39 1965056 ----a-w- c:\windows\system32\NlsData081a.dll
2009-12-22 13:39 . 2009-12-22 13:39 1965056 ----a-w- c:\windows\system32\NlsData0c1a.dll
2009-12-22 13:37 . 2009-12-22 13:37 6656 ----a-w- c:\windows\system32\kbd106n.dll
2008-04-25 12:18 . 2009-12-22 09:52 22 --sha-w- c:\windows\SMINST\HPCD.SYS
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-08-20 2363392]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424]
"ICQ"="c:\program files\ICQ6.5\ICQ.exe" [2009-11-16 172792]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-10-09 25623336]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2009-11-20 434176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-15 102400]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2007-01-17 634880]
"RtHDVCpl"="RtHDVCpl.exe" [2007-08-17 4702208]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-07-25 174616]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2007-09-30 181544]
"QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-09-19 202032]
"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-09-04 554320]
"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2007-08-16 218408]
"DpAgent"="c:\program files\DigitalPersona\Bin\dpagent.exe" [2007-09-20 671744]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-09-13 480560]
"WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-08 311296]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 132496]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-06-08 2221352]
"Nokia FastStart"="c:\program files\Nokia\Nokia Music\NokiaMusic.exe" [2009-02-26 2376992]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-09-29 2054360]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-04 13556256]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-04 92704]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-03-09 2769336]

c:\users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-1-15 393216]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli DPPWDFLT

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):d4,3d,17,cb,c4,c5,ca,01

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-03-09 691696]
R2 OMSI download service;Sony Ericsson OMSI download service;c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
S1 aswSP;aswSP; [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2009-09-29 108792]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-03-09 51792]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-09-29 735960]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2009-09-29 95896]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [2009-08-16 222968]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-08-20 12:24 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'

2010-03-18 c:\windows\Tasks\User_Feed_Synchronization-{ADAF2F4C-8425-4458-B6DA-1BEA6EE687E8}.job
- c:\windows\system32\msfeedssync.exe [2009-12-24 07:33]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=cs_cz&c=81&bd=Pavilion&pf=laptop
uInternet Settings,ProxyServer = proxy.mpsv.cz:8080
uInternet Settings,ProxyOverride = <local>
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
FF - ProfilePath - c:\users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\ochdttth.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - WebHledani
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - prefs.js: keyword.URL - hxxp://www.webhledani.cz/results.aspx?i=39&tp=ab&q=
FF - component: c:\users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\ochdttth.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\components\FFExternalAlert.dll
FF - component: c:\users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\ochdttth.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\components\RadioWMPCore.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

URLSearchHooks-{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - (no file)
BHO-{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - (no file)
Toolbar-{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - (no file)
WebBrowser-{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-19 15:01
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'lsass.exe'(768)
c:\windows\system32\DPPWDFLT.dll
.
Celkový čas: 2010-03-19 15:04:30
ComboFix-quarantined-files.txt 2010-03-19 14:04
ComboFix2.txt 2010-03-18 21:18

Před spuštěním: Volných bajtů: 175 737 929 728
Po spuštění: Volných bajtů: 175 707 586 560

- - End Of File - - 02E771D517A73A8DBF651B5C9FABED5C

[Caroprd111]

Jak to vypadá s PC

[Mataaaaa]

jo uz to vypada lip, ale já jsem si stáhla totiz predevcirem nejaky antivirus a me se zdalo, ze od ty doby se mi to seka, tak jsem ho odebrala a odinstalovala a stahla jsem si jiny a uz je to v pohode.
Takze zadny problemy tam nejsou jo?

[Caroprd111]

Logy jsou v pořádku, poprosím o nový log z RSIT.

[Mataaaaa]

Logfile of random's system information tool 1.06 (written by random/random)
Run by uzivatel at 2010-03-19 15:34:17
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 166 GB (73%) free of 229 GB
Total RAM: 3070 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:34:29, on 19.3.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\DigitalPersona\Bin\DpAgent.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FAMTCEE.EXE
C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE
C:\Windows\system32\conime.exe
C:\Windows\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\OpenOffice.org 3\program\swriter.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Windows\system32\SearchFilterHost.exe
G:\Martina\Programy\RSIT.exe
C:\Program Files\trend micro\uzivatel.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.mpsv.cz:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles
O4 - HKLM\..\Run: [Nokia FastStart] "C:\Program Files\Nokia\Nokia Music\NokiaMusic.exe" /command:faststart
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 9908 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{ADAF2F4C-8425-4458-B6DA-1BEA6EE687E8}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll [2007-07-12 501136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPStart"=C:\Program Files\Synaptics\SynTP\SynTPStart.exe [2007-09-15 102400]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2007-01-17 634880]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-08-17 4702208]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2007-07-25 174616]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2007-09-30 181544]
"QlbCtrl"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2007-09-19 202032]
"OnScreenDisplay"=C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [2007-09-04 554320]
"UCam_Menu"=C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2007-08-16 218408]
"DpAgent"=C:\Program Files\DigitalPersona\Bin\dpagent.exe [2007-09-20 671744]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-09-13 480560]
"WAWifiMessage"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe [2007-01-08 311296]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe [2007-07-12 132496]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-03-28 1045800]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2008-12-08 54576]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-06-08 2221352]
"NokiaMServer"=C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles []
"Nokia FastStart"=C:\Program Files\Nokia\Nokia Music\NokiaMusic.exe [2009-02-26 2376992]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-09-29 2054360]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-12-04 13556256]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-12-04 92704]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-03-09 2769336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"MsnMsgr"=C:\Program Files\MSN Messenger\MsnMsgr.Exe [2007-01-19 5674352]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2009-08-20 2363392]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-06-24 1840424]
"ICQ"=C:\Program Files\ICQ6.5\ICQ.exe [2009-11-16 172792]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"Sony Ericsson PC Suite"=C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe [2009-11-20 434176]

C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
DPPWDFLT

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2010-03-19 15:04:40 ----SHD---- C:\$RECYCLE.BIN
2010-03-19 15:04:30 ----A---- C:\ComboFix.txt
2010-03-19 14:49:09 ----D---- C:\ComboFix
2010-03-19 14:48:30 ----A---- C:\Windows\SWXCACLS.exe
2010-03-19 03:04:59 ----A---- C:\Windows\system32\browserchoice.exe
2010-03-18 21:32:24 ----A---- C:\Windows\NIRCMD.exe
2010-03-18 21:32:24 ----A---- C:\Windows\MBR.exe
2010-03-18 21:32:22 ----A---- C:\Windows\PEV.exe
2010-03-18 21:32:21 ----A---- C:\Windows\zip.exe
2010-03-18 21:32:21 ----A---- C:\Windows\SWREG.exe
2010-03-18 21:32:21 ----A---- C:\Windows\grep.exe
2010-03-18 21:32:20 ----A---- C:\Windows\SWSC.exe
2010-03-18 21:32:20 ----A---- C:\Windows\sed.exe
2010-03-18 21:04:45 ----D---- C:\Windows\ERDNT
2010-03-18 21:04:10 ----AD---- C:\Qoobox
2010-03-18 20:42:15 ----D---- C:\rsit
2010-03-18 20:42:15 ----D---- C:\Program Files\trend micro
2010-03-18 11:20:11 ----D---- C:\Program Files\CCleaner
2010-03-18 11:16:28 ----A---- C:\Windows\system32\aswBoot.exe
2010-03-17 12:16:43 ----D---- C:\Windows\system32\eu-ES
2010-03-17 12:16:43 ----D---- C:\Windows\system32\ca-ES
2010-03-17 12:16:40 ----D---- C:\Windows\system32\vi-VN
2010-03-16 22:16:32 ----D---- C:\Program Files\AVG
2010-03-14 11:32:32 ----D---- C:\ProgramData\Avanquest Bluetooth SDK
2010-03-14 11:30:31 ----D---- C:\ProgramData\BVRP Software
2010-03-14 11:24:51 ----D---- C:\ProgramData\Sony Ericsson
2010-03-14 11:24:51 ----D---- C:\Program Files\Sony Ericsson
2010-03-12 08:07:50 ----A---- C:\Windows\system32\nshhttp.dll
2010-03-12 08:07:43 ----A---- C:\Windows\system32\httpapi.dll
2010-03-09 19:46:00 ----D---- C:\ProgramData\NFS Underground
2010-03-09 19:33:46 ----D---- C:\Program Files\EA GAMES
2010-03-09 19:25:46 ----D---- C:\Program Files\DAEMON Tools Lite
2010-03-09 19:25:15 ----D---- C:\Users\uzivatel\AppData\Roaming\DAEMON Tools Lite
2010-03-09 19:25:07 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-03-07 15:04:03 ----D---- C:\Users\uzivatel\AppData\Roaming\GHISLER
2010-03-07 15:04:03 ----D---- C:\totalcmd
2010-02-28 10:52:06 ----D---- C:\Program Files\Mv2Player
2010-02-24 08:16:46 ----A---- C:\Windows\system32\tzres.dll
2010-02-21 11:22:08 ----D---- C:\ProgramData\ESET
2010-02-21 11:22:08 ----D---- C:\Program Files\ESET
2010-02-21 11:19:20 ----D---- C:\Windows\system32\EventProviders
2010-02-21 11:10:31 ----D---- C:\ProgramData\Alwil Software

======List of files/folders modified in the last 1 months======

2010-03-19 15:34:28 ----D---- C:\Windows\Temp
2010-03-19 15:34:07 ----A---- C:\Windows\NeroDigital.ini
2010-03-19 15:06:47 ----D---- C:\Windows\inf
2010-03-19 15:01:13 ----D---- C:\WINDOWS
2010-03-19 15:01:13 ----A---- C:\Windows\system.ini
2010-03-19 15:00:13 ----D---- C:\Windows\System32
2010-03-19 14:57:06 ----D---- C:\Windows\system32\drivers
2010-03-19 14:57:06 ----D---- C:\Windows\AppPatch
2010-03-19 14:57:04 ----D---- C:\Program Files\Common Files
2010-03-19 12:00:04 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-03-19 11:49:30 ----SHD---- C:\System Volume Information
2010-03-19 09:37:28 ----D---- C:\Windows\Prefetch
2010-03-19 03:05:18 ----D---- C:\Windows\winsxs
2010-03-19 03:05:14 ----D---- C:\Windows\system32\catroot
2010-03-18 22:07:20 ----D---- C:\ProgramData
2010-03-18 21:31:14 ----RD---- C:\Program Files
2010-03-18 21:29:59 ----D---- C:\Users\uzivatel\AppData\Roaming\Skype
2010-03-18 21:05:00 ----D---- C:\Windows\system32\catroot2
2010-03-18 18:34:38 ----D---- C:\Windows\system32\Tasks
2010-03-18 11:24:50 ----D---- C:\Windows\Debug
2010-03-18 11:16:54 ----SHD---- C:\Windows\Installer
2010-03-18 11:06:19 ----SD---- C:\Users\uzivatel\AppData\Roaming\Microsoft
2010-03-18 08:34:46 ----D---- C:\Windows\Microsoft.NET
2010-03-18 08:34:15 ----RSD---- C:\Windows\assembly
2010-03-17 20:22:42 ----D---- C:\Program Files\BSPlayer
2010-03-17 12:42:28 ----D---- C:\Windows\rescache
2010-03-17 12:34:56 ----D---- C:\boot
2010-03-17 12:20:06 ----D---- C:\Program Files\Windows Mail
2010-03-17 12:20:06 ----D---- C:\Program Files\Windows Calendar
2010-03-17 12:20:06 ----D---- C:\Program Files\Movie Maker
2010-03-17 12:20:02 ----D---- C:\Program Files\Windows Sidebar
2010-03-17 12:20:02 ----D---- C:\Program Files\Internet Explorer
2010-03-17 12:20:01 ----D---- C:\Program Files\Windows Media Player
2010-03-17 12:20:01 ----D---- C:\Program Files\Windows Collaboration
2010-03-17 12:20:00 ----D---- C:\Program Files\Windows Journal
2010-03-17 12:19:58 ----D---- C:\Program Files\Common Files\System
2010-03-17 12:19:57 ----D---- C:\Program Files\Windows Photo Gallery
2010-03-17 12:19:49 ----D---- C:\Windows\servicing
2010-03-17 12:19:49 ----D---- C:\Program Files\Windows Defender
2010-03-17 12:19:45 ----D---- C:\Windows\ehome
2010-03-17 12:19:02 ----D---- C:\Windows\IME
2010-03-17 12:19:01 ----D---- C:\Windows\system32\XPSViewer
2010-03-17 12:19:01 ----D---- C:\Windows\system32\sk-SK
2010-03-17 12:19:01 ----D---- C:\Windows\system32\lv-LV
2010-03-17 12:19:01 ----D---- C:\Windows\system32\ko-KR
2010-03-17 12:19:01 ----D---- C:\Windows\system32\it-IT
2010-03-17 12:19:01 ----D---- C:\Windows\system32\hr-HR
2010-03-17 12:19:01 ----D---- C:\Windows\system32\et-EE
2010-03-17 12:19:01 ----D---- C:\Windows\system32\en-US
2010-03-17 12:19:01 ----D---- C:\Windows\system32\el-GR
2010-03-17 12:19:01 ----D---- C:\Windows\system32\de-DE
2010-03-17 12:19:01 ----D---- C:\Windows\system32\da-DK
2010-03-17 12:19:00 ----D---- C:\Windows\system32\oobe
2010-03-17 12:19:00 ----D---- C:\Windows\system32\migration
2010-03-17 12:18:52 ----D---- C:\Windows\system32\AdvancedInstallers
2010-03-17 12:18:51 ----D---- C:\Windows\system32\sv-SE
2010-03-17 12:18:51 ----D---- C:\Windows\system32\setup
2010-03-17 12:18:51 ----D---- C:\Windows\system32\ru-RU
2010-03-17 12:18:51 ----D---- C:\Windows\system32\he-IL
2010-03-17 12:18:51 ----D---- C:\Windows\system32\fr-FR
2010-03-17 12:18:50 ----D---- C:\Windows\system32\fi-FI
2010-03-17 12:18:50 ----D---- C:\Windows\system32\cs
2010-03-17 12:18:48 ----D---- C:\Windows\system32\cs-CZ
2010-03-17 12:18:45 ----D---- C:\Windows\system32\SLUI
2010-03-17 12:18:45 ----D---- C:\Windows\system32\pt-PT
2010-03-17 12:18:45 ----D---- C:\Windows\system32\hu-HU
2010-03-17 12:18:44 ----D---- C:\Windows\system32\zh-TW
2010-03-17 12:18:44 ----D---- C:\Windows\system32\zh-CN
2010-03-17 12:18:44 ----D---- C:\Windows\system32\uk-UA
2010-03-17 12:18:44 ----D---- C:\Windows\system32\sr-Latn-CS
2010-03-17 12:18:44 ----D---- C:\Windows\system32\sl-SI
2010-03-17 12:18:44 ----D---- C:\Windows\system32\ro-RO
2010-03-17 12:18:44 ----D---- C:\Windows\system32\pl-PL
2010-03-17 12:18:44 ----D---- C:\Windows\system32\manifeststore
2010-03-17 12:18:44 ----D---- C:\Windows\system32\ja-JP
2010-03-17 12:18:44 ----D---- C:\Windows\system32\es-ES
2010-03-17 12:18:44 ----D---- C:\Windows\system32\bg-BG
2010-03-17 12:18:43 ----D---- C:\Windows\system32\th-TH
2010-03-17 12:18:40 ----D---- C:\Windows\system32\tr-TR
2010-03-17 12:18:38 ----D---- C:\Windows\system32\wbem
2010-03-17 12:18:36 ----D---- C:\Windows\system32\nl-NL
2010-03-17 12:18:36 ----D---- C:\Windows\system32\nb-NO
2010-03-17 12:18:36 ----D---- C:\Windows\system32\lt-LT
2010-03-17 12:18:36 ----D---- C:\Windows\system32\ar-SA
2010-03-17 12:18:34 ----D---- C:\Windows\system32\pt-BR
2010-03-17 12:18:34 ----D---- C:\Windows\system32\migwiz
2010-03-17 12:16:54 ----RSD---- C:\Windows\Fonts
2010-03-17 12:16:40 ----D---- C:\Windows\system32\Boot
2010-03-17 12:14:11 ----D---- C:\Windows\system32\RTCOM
2010-03-16 23:06:35 ----D---- C:\Program Files\rajce
2010-03-16 07:48:10 ----D---- C:\Program Files\Mozilla Firefox
2010-03-14 11:24:51 ----HD---- C:\Program Files\InstallShield Installation Information
2010-03-11 19:37:32 ----D---- C:\Windows\Tasks
2010-03-09 20:40:32 ----D---- C:\Windows\system32\WDI
2010-03-08 22:09:59 ----D---- C:\ProgramData\Microsoft Help
2010-03-07 15:30:33 ----D---- C:\Users\uzivatel\AppData\Roaming\vlc
2010-03-04 19:37:23 ----D---- C:\Users\uzivatel\AppData\Roaming\ICQ
2010-03-02 06:30:12 ----A---- C:\Windows\system32\mrt.exe
2010-03-01 00:09:02 ----D---- C:\Users\uzivatel\AppData\Roaming\skypePM
2010-02-27 11:05:14 ----D---- C:\Program Files\Ask.com
2010-02-24 10:16:06 ----N---- C:\Windows\system32\MpSigStub.exe
2010-02-21 11:14:20 ----D---- C:\Program Files\Alwil Software

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-03-09 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-03-09 162640]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-03-09 46672]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-09-29 108792]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-03-09 19024]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-03-09 51792]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2009-12-22 278984]
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-09-29 116008]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2009-09-29 95896]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2009-12-22 25416]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-03-21 37376]
R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\Windows\system32\DRIVERS\ATSwpDrv.sys [2007-08-28 146560]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-19 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2007-09-18 80424]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2007-09-18 80936]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2007-09-18 16168]
R3 CmBatt;Ovladač baterie Microsoft ACPI Control Method Battery; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-19 14208]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 HpqRemHid;HP Remote Control HID Device; C:\Windows\system32\DRIVERS\HpqRemHid.sys [2007-07-11 7168]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-08-22 1950552]
R3 NETw4v32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-06-28 2222080]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-12-04 7606688]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-09-18 98816]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2007-01-17 983936]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-03-28 199472]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-19 134016]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-19 11264]
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 464384]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 catchme;catchme; \??\C:\Users\uzivatel\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 E100B;Intel(R) PRO Adapter Driver; C:\Windows\system32\DRIVERS\e100b325.sys [2006-11-02 163328]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2006-11-02 987648]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2006-10-19 1380864]
S3 mbr;mbr; \??\C:\Users\uzivatel\AppData\Local\Temp\mbr.sys []
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-11-02 1781760]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2008-09-15 17664]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2006-11-02 654336]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 DpHost;Biometric Authentication Service; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2007-09-20 299008]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-09-29 735960]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-09-19 65536]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2006-05-02 135168]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2007-07-25 354840]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2009-08-16 222968]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-08-20 73728]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-06-08 877864]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-09-23 935208]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-12-04 203296]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [2006-12-19 81920]
R2 QPCapSvc;QuickPlay Background Capture Service (QBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [2007-09-30 271760]
R2 QPSched;QuickPlay Task Scheduler (QTS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [2007-09-30 112016]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-09 272024]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
S2 OMSI download service;Sony Ericsson OMSI download service; C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
S3 Com4Qlb;Com4Qlb; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe [2007-03-05 110592]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-09-29 20680]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe [2008-11-11 620544]
S3 usnjsvc;Služba Čtení deníku USN sdílených složek programu Messenger; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]

-----------------EOF-----------------

[Caroprd111]

Doporučuji odinstalovat (pokud nepoužíváte) toolbary (lišty) v Přidat nebo odebrat programy.


Vyberte si jeden antivir, zbývající odinstalujte.


Odinstalujte ComboFix přes:
Start >> Spustit, zkopírujte do okénka:

ComboFix /Uninstall

stiskněte Enter


Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

• Spusťte, pro potvrzení volby mačkejte klávesu A, Enter
• Po použití program vymažte. Pozor,antiviry ho mohou falešně označit za vir.

Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe

• Spusťte.
• Klikněte na "CleanUp!". Potvrďte hlášky stiskem "Yes" (Bude následovat restart)

Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478

• Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.
  
  Záložka Čistič
• Dejte analyzovat, po dokončení dejte Spustit Ccleaner.
  
  Záložka Registry
• Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
  OK Zavřít

[Mataaaaa]

vse udelano

[Caroprd111]

V tom případě máme hotovo.