VIRY.CZ

zdravím,Najednou přestalo fungovat připojení k internetu pres router. nejde se pripojit ani pres kabel ani pres wifi. ostatni nemaji s routerem problemy. pripojit se primo pres kabel privedeny do routeru od providera jde. prosim o radu. Předem děkuji
tady je log z RSIT

Logfile of random's system information tool 1.06 (written by random/random)
Run by palin at 2010-03-23 18:02:01
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 24 GB (24%) free of 100 GB
Total RAM: 3070 MB (67% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{C63EC77A-7554-4DFF-A0FC-C7773436C2A4}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{33CD02D0-8C93-4926-A2FE-2CE72CE7DF1A}]
CentrumczToolbar BHO - C:\Program Files\CentrumczToolbar\IEToolbar.dll [2010-02-12 1274160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll [2008-08-11 656696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-25 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E9B1FB08-BA8C-4CDA-AF62-54FF3BAF941D}]
Java(tm) SVS Plugin - C:\Users\palin\AppData\Roaming\IEApplet.dll [2009-05-29 207872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2008-06-12 958712]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2008-12-10 929224]
{D5D47440-0750-463D-BAEF-A47D02414806} - Centrum.cz Toolbar - C:\Program Files\CentrumczToolbar\IEToolbar.dll [2010-02-12 1274160]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"StartCCC"=c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-04-10 4431872]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2006-11-22 630784]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-25 149280]
"QuickTime Task"=C:\Windows\System32\qttask.exe [2008-12-18 98304]
"WinampAgent"=D:\Program Files\Winamp\winampa.exe [2004-12-20 33792]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-03-09 2769336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=D:\program files\DAEMON Tools Lite\daemon.exe [2008-12-10 216520]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]
"Pando Media Booster"=C:\Program Files\Pando Networks\Media Booster\PMB.exe [2010-03-03 2937528]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan.lnk - C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2c6a366d-0cb1-11de-94b9-00030d8d2ecf}]
shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL system.exe
shell\Explore\command - system.exe
shell\Open\command - system.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6dd9e1e2-0442-11df-ac4d-00030d8d2ecf}]
shell\AutoRun\command - F:\RunGame.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a8c537ae-cd13-11dd-a678-00030d8d2ecf}]
shell\AutoRun\command - click/jack.exe
shell\explore\command - click/jack.exe
shell\open\command - click/jack.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ae26ecea-80ba-11de-8f44-00030d8d2ecf}]
shell\AutoRun\command - F:\setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cde9be4f-cdde-11dd-ae15-00030d8d2ecf}]
shell\AutoRun\command - G:\avp2.exe

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-03-23 18:02:01 ----D---- C:\rsit
2010-03-23 18:02:01 ----D---- C:\Program Files\trend micro
2010-03-17 23:08:28 ----D---- C:\temp
2010-03-12 14:55:03 ----A---- C:\Windows\system32\browserchoice.exe
2010-03-12 14:34:06 ----A---- C:\Windows\system32\nshhttp.dll
2010-03-12 14:34:04 ----A---- C:\Windows\system32\httpapi.dll
2010-03-08 08:24:28 ----D---- C:\ProgramData\Alwil Software
2010-03-03 17:37:43 ----D---- C:\Users\palin\AppData\Roaming\Turbine
2010-03-03 17:33:49 ----D---- C:\Windows\system32\URTTEMP
2010-03-03 15:42:36 ----D---- C:\ProgramData\PMB Files
2010-03-03 15:42:30 ----D---- C:\Program Files\Pando Networks
2010-02-25 20:47:23 ----D---- C:\ProgramData\Solidshield
2010-02-25 20:44:43 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-02-25 20:44:43 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-02-25 20:44:42 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-02-25 20:36:36 ----D---- C:\Program Files\Ubisoft
2010-02-24 09:55:19 ----A---- C:\Windows\system32\jscript.dll
2010-02-24 09:55:15 ----A---- C:\Windows\system32\tzres.dll
2010-02-24 09:55:03 ----A---- C:\Windows\system32\secproc_isv.dll
2010-02-24 09:55:03 ----A---- C:\Windows\system32\secproc.dll
2010-02-24 09:55:02 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-02-24 09:55:02 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-02-24 09:55:02 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-02-24 09:55:02 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-02-24 09:55:02 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-02-24 09:55:02 ----A---- C:\Windows\system32\RMActivate.exe
2010-02-24 09:55:02 ----A---- C:\Windows\system32\msdrm.dll
2010-02-24 09:55:00 ----A---- C:\Windows\system32\gameux.dll
2010-02-24 09:54:59 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-02-24 09:54:59 ----A---- C:\Windows\system32\Apphlpdm.dll

======List of files/folders modified in the last 1 months======

2010-03-23 18:02:06 ----D---- C:\Windows\Prefetch
2010-03-23 18:02:01 ----RD---- C:\Program Files
2010-03-23 18:01:58 ----D---- C:\Windows\Temp
2010-03-23 17:58:14 ----D---- C:\Windows\system32\inetsrv
2010-03-23 14:58:32 ----D---- C:\Windows\System32
2010-03-23 14:58:32 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-03-23 14:58:31 ----D---- C:\Windows\inf
2010-03-22 09:23:19 ----D---- C:\Users\palin\AppData\Roaming\ICQ
2010-03-20 19:57:06 ----D---- C:\Windows\system32\catroot2
2010-03-20 19:31:43 ----A---- C:\Windows\NeroDigital.ini
2010-03-20 17:02:46 ----A---- C:\Windows\winamp.ini
2010-03-20 11:31:12 ----SHD---- C:\System Volume Information
2010-03-18 17:46:07 ----D---- C:\Downloads
2010-03-17 23:36:48 ----D---- C:\Windows
2010-03-17 23:06:45 ----D---- C:\Windows\Debug
2010-03-16 19:48:06 ----D---- C:\Program Files\Mozilla Firefox
2010-03-16 09:56:48 ----SD---- C:\Users\palin\AppData\Roaming\Microsoft
2010-03-15 09:35:20 ----D---- C:\Program Files\CentrumczToolbar
2010-03-12 15:01:59 ----D---- C:\Windows\winsxs
2010-03-12 14:55:15 ----D---- C:\Windows\system32\catroot
2010-03-12 14:48:50 ----D---- C:\Windows\system32\drivers
2010-03-12 14:48:50 ----D---- C:\Program Files\Windows Mail
2010-03-12 14:48:50 ----D---- C:\Program Files\Movie Maker
2010-03-11 18:06:13 ----A---- C:\Windows\win.ini
2010-03-09 12:24:05 ----A---- C:\Windows\system32\aswBoot.exe
2010-03-08 18:24:18 ----D---- C:\Program Files\Alwil Software
2010-03-08 08:25:21 ----SHD---- C:\Windows\Installer
2010-03-08 08:24:28 ----HD---- C:\ProgramData
2010-03-03 17:53:07 ----D---- C:\Users\palin\AppData\Roaming\Mozilla
2010-03-03 17:37:09 ----RSD---- C:\Windows\assembly
2010-03-03 17:36:04 ----D---- C:\Windows\Registration
2010-03-03 17:35:39 ----D---- C:\Program Files\Internet Explorer
2010-03-02 06:30:12 ----A---- C:\Windows\system32\mrt.exe
2010-02-28 00:05:10 ----D---- C:\Windows\system32\Tasks
2010-02-28 00:05:10 ----D---- C:\Program Files\Ask.com
2010-02-26 18:09:57 ----A---- C:\Windows\QIII.INI
2010-02-25 21:06:42 ----HD---- C:\Program Files\InstallShield Installation Information
2010-02-25 20:28:42 ----D---- C:\Users\palin\AppData\Roaming\runic games
2010-02-25 20:28:42 ----D---- C:\Program Files\Runic Games
2010-02-25 14:46:14 ----D---- C:\Windows\rescache
2010-02-25 00:07:08 ----RSD---- C:\Windows\Fonts
2010-02-25 00:07:08 ----D---- C:\Windows\system32\cs-CZ
2010-02-25 00:07:08 ----D---- C:\Windows\AppPatch
2010-02-24 10:16:06 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-03-09 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-03-09 162640]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-03-09 46672]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-03-09 19024]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-03-09 51792]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-10-11 3155456]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-04-10 1764960]
R3 itecir;ITECIR Infrared Receiver; C:\Windows\system32\DRIVERS\itecir.sys [2007-04-04 46592]
R3 NETw4v32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-02-25 2216448]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-02-16 70144]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-22 982272]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S3 a9d43ebt;a9d43ebt; C:\Windows\system32\drivers\a9d43ebt.sys []
S3 cdrmkaun;cdrmkaun; \??\C:\Users\palin\AppData\Local\Temp\cdrmkaun.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 hamachi_oem;PlayLinc Adapter; C:\Windows\system32\DRIVERS\gan_adapter.sys [2006-08-28 10664]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2008-01-21 2225664]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S4 ahcix86s;ahcix86s; C:\Windows\system32\drivers\ahcix86s.sys [2008-05-27 173576]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 JRAID;JRAID; C:\Windows\system32\drivers\jraid.sys [2008-04-03 76688]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-10-11 610304]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-06-10 222456]
R2 IISADMIN;@%windir%\system32\inetsrv\iisres.dll,-30007; C:\Windows\system32\inetsrv\inetinfo.exe [2008-01-21 13824]
R2 LexBceS;LexBce Server; C:\Windows\System32\LEXBCES.EXE [2004-01-14 311296]
R2 MSSQL$AUTODESKVAULT;SQL Server (AUTODESKVAULT); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2008-01-22 29178224]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-09-20 853288]
R2 PnkBstrB;PnkBstrB; C:\Windows\system32\PnkBstrB.exe [2008-12-28 103736]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2007-02-10 89968]
R2 TestHandler;Fujitsu Siemens Computers Diagnostic Testhandler; C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [2008-04-25 303104]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 aspnet_state;@%windir%\system32\inetsrv\iisres.dll,-30009; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2009-10-12 79360]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-10-23 382248]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2008-01-22 45272]
S4 SQLBrowser;SQL Server Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2008-01-22 242544]

-----------------EOF-----------------

Zdravím

Na logu se pracuje, prosím o strpení.

Napište, které z těchto toolbarů (lišt) můžeme smazat.

ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2008-06-12 958712]
DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2008-12-10 929224]
Centrum.cz Toolbar - C:\Program Files\CentrumczToolbar\IEToolbar.dll [2010-02-12 1274160]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]

Obrázek

Stáhněte a uložte, nejlépe na plochu http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypněte všechny rezidentní bezpečnostní programy - firewally, antiviry, antispywary
Vložte do PC všechny flash disky, které používáte.
Spusťte aplikaci pod účtem s oprávněním Administrátora (Správce), ihned po startu se zobrazí stránka s licenčními podmínkami, pokračujte stisknutím tlačítka "Ano"
Dále postupujte dle pokynů, během scanu nespouštějte jiné aplikace a neklikejte do zobrazujícího se okna
Scan by měl trvat okolo 5 - 10 minut, po dokončení Combofix zobrazí log C:\ComboFix.txt , který sem vložte.
Během skenování může být počítač restartován.

listy je urcite mozne smazat vsechny a tady je log z ComboFix:

ComboFix 10-03-23.01 - palin 23.03.2010 18:49:18.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3070.2270 [GMT 1:00]
Spuštěný z: c:\users\palin\Desktop\ComboFix.exe
AV: avast! antivirus 4.7.1296 [VPS 081229-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-3190906655-973898842-687809170-500
c:\users\palin\AppData\Roaming\IEApplet.dll
c:\windows\Downloaded Program Files\IDropPTB.dll
c:\windows\system32\Connect.dll
c:\windows\system32\drivers\FSC__PI__AMILO Pi 2550__FUJITSU SIEMENS_F45 __Ver 1.00PARTTBL_FSC - 6040000_1.14C__ATI Mobility Radeon HD 2400 .MRK

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-02-23 do 2010-03-23 )))))))))))))))))))))))))))))))
.

2010-03-23 17:56 . 2010-03-23 17:56 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-03-23 17:02 . 2010-03-23 17:02 -------- d-----w- C:\rsit
2010-03-23 17:02 . 2010-03-23 17:02 -------- d-----w- c:\program files\trend micro
2010-03-17 22:08 . 2010-03-17 22:34 -------- d-----w- C:\temp
2010-03-12 13:55 . 2010-02-12 10:32 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-03-12 13:34 . 2010-02-20 23:06 24064 ----a-w- c:\windows\system32\nshhttp.dll
2010-03-12 13:34 . 2010-02-20 20:53 411648 ----a-w- c:\windows\system32\drivers\http.sys
2010-03-12 13:34 . 2010-02-20 23:05 30720 ----a-w- c:\windows\system32\httpapi.dll
2010-03-11 14:47 . 2010-03-11 14:47 -------- d-----w- c:\users\palin\AppData\Local\Innovative Solutions
2010-03-08 07:24 . 2010-03-08 07:24 -------- d-----w- c:\programdata\Alwil Software
2010-03-03 16:37 . 2010-03-03 16:37 -------- d-----w- c:\users\palin\AppData\Roaming\Turbine
2010-03-03 16:37 . 2010-03-03 16:37 -------- d-----w- c:\users\palin\AppData\Local\Turbine
2010-03-03 16:36 . 2010-03-03 16:36 93 ----a-w- c:\users\palin\AppData\Local\fusioncache.dat
2010-03-03 16:36 . 2010-03-04 18:30 -------- d-----w- c:\users\palin\AppData\Local\ApplicationHistory
2010-03-03 16:33 . 2010-03-03 16:33 -------- d-----w- c:\windows\system32\URTTEMP
2010-03-03 14:42 . 2010-03-23 17:44 -------- d-----w- c:\users\palin\AppData\Local\PMB Files
2010-03-03 14:42 . 2010-03-03 14:45 -------- d-----w- c:\programdata\PMB Files
2010-03-03 14:42 . 2010-03-03 14:42 -------- d-----w- c:\program files\Pando Networks
2010-02-27 21:57 . 2010-02-27 21:57 2131336 ----a-w- c:\users\palin\AppData\Roaming\Mozilla\Firefox\Profiles\5tmrh4cv.default\extensions\toolbar@ask.com\chrome\temp\askToolbar.exe
2010-02-25 19:47 . 2010-02-25 19:47 -------- d-----w- c:\programdata\Solidshield
2010-02-25 19:44 . 2008-10-15 05:22 452440 ----a-w- c:\windows\system32\d3dx10_40.dll
2010-02-25 19:44 . 2008-10-15 05:22 2036576 ----a-w- c:\windows\system32\D3DCompiler_40.dll
2010-02-25 19:44 . 2008-10-15 05:22 4379984 ----a-w- c:\windows\system32\D3DX9_40.dll
2010-02-25 19:36 . 2010-02-25 20:06 -------- d-----w- c:\program files\Ubisoft
2010-02-24 08:55 . 2010-01-23 09:26 2048 ----a-w- c:\windows\system32\tzres.dll
2010-02-24 08:55 . 2010-01-25 12:00 471552 ----a-w- c:\windows\system32\secproc_isv.dll
2010-02-24 08:55 . 2010-01-25 12:00 471552 ----a-w- c:\windows\system32\secproc.dll
2010-02-24 08:55 . 2010-01-25 12:00 152576 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-02-24 08:55 . 2010-01-25 12:00 152064 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-02-24 08:55 . 2010-01-25 11:58 332288 ----a-w- c:\windows\system32\msdrm.dll
2010-02-24 08:55 . 2010-01-25 08:21 526336 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-02-24 08:55 . 2010-01-25 08:21 346624 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-02-24 08:55 . 2010-01-25 08:21 518144 ----a-w- c:\windows\system32\RMActivate.exe
2010-02-24 08:55 . 2010-01-25 08:21 347136 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-02-24 08:55 . 2010-01-06 15:39 1696256 ----a-w- c:\windows\system32\gameux.dll
2010-02-24 08:54 . 2010-01-06 15:38 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2010-02-24 08:54 . 2010-01-06 13:30 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-23 17:53 . 2008-04-14 13:47 721956 ----a-w- c:\windows\system32\perfh005.dat
2010-03-23 17:53 . 2008-04-14 13:47 166118 ----a-w- c:\windows\system32\perfc005.dat
2010-03-22 08:23 . 2008-12-19 14:32 -------- d-----w- c:\users\palin\AppData\Roaming\ICQ
2010-03-15 08:35 . 2009-12-20 11:33 -------- d-----w- c:\program files\CentrumczToolbar
2010-03-12 13:48 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-03-09 11:24 . 2008-12-28 15:56 153184 ----a-w- c:\windows\system32\aswBoot.exe
2010-03-09 11:12 . 2008-12-28 15:56 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-03-09 11:12 . 2008-12-29 09:35 162640 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-03-09 11:09 . 2008-12-28 15:56 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-03-09 11:08 . 2008-12-28 15:56 51792 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-03-09 11:08 . 2008-12-29 09:35 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-03-08 17:24 . 2008-12-28 15:56 -------- d-----w- c:\program files\Alwil Software
2010-02-27 23:05 . 2010-01-18 15:47 -------- d-----w- c:\program files\Ask.com
2010-02-25 20:06 . 2008-09-08 18:20 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-02-25 19:28 . 2009-11-25 14:30 -------- d-----w- c:\users\palin\AppData\Roaming\runic games
2010-02-25 19:28 . 2009-11-25 14:27 -------- d-----w- c:\program files\Runic Games
2010-02-25 08:08 . 2008-12-18 15:00 150824 ----a-w- c:\users\palin\AppData\Local\GDIPFONTCACHEV1.DAT
2010-02-24 09:16 . 2009-10-02 23:08 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-18 21:22 . 2010-02-18 21:17 21840 ----atw- c:\windows\system32\SIntfNT.dll
2010-02-18 21:22 . 2010-02-18 21:17 17212 ----atw- c:\windows\system32\SIntf32.dll
2010-02-18 21:22 . 2010-02-18 21:17 12067 ----atw- c:\windows\system32\SIntf16.dll
2010-02-11 18:53 . 2008-12-28 15:56 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-02-08 22:31 . 2009-10-04 15:15 -------- d-----w- c:\program files\MpcStar
2010-01-29 23:42 . 2010-01-29 23:36 53248 ----a-w- c:\windows\unrar.dll
2010-01-28 12:02 . 2008-09-08 18:20 -------- d-----w- c:\program files\CyberLink
2010-01-27 16:33 . 2010-01-27 16:33 -------- d-----w- c:\program files\CCleaner
2010-01-16 14:39 . 2008-12-20 11:31 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2010-01-06 15:38 . 2010-02-24 08:55 173056 ----a-w- c:\windows\AppPatch\AcXtrnal.dll
2010-01-06 15:38 . 2010-02-24 08:55 458752 ----a-w- c:\windows\AppPatch\AcSpecfc.dll
2010-01-06 15:38 . 2010-02-24 08:55 2159616 ----a-w- c:\windows\AppPatch\AcGenral.dll
2010-01-06 15:38 . 2010-02-24 08:54 542720 ----a-w- c:\windows\AppPatch\AcLayers.dll
2010-01-02 06:38 . 2010-01-22 08:20 916480 ----a-w- c:\windows\system32\wininet.dll
2010-01-02 06:32 . 2010-01-22 08:20 71680 ----a-w- c:\windows\system32\iesetup.dll
2010-01-02 06:32 . 2010-01-22 08:20 109056 ----a-w- c:\windows\system32\iesysprep.dll
2010-01-02 04:57 . 2010-01-22 08:20 133632 ----a-w- c:\windows\system32\ieUnatt.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-02-04 1197448]

[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-02-04 15:50 1197448 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-02-04 1197448]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-02-04 1197448]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="d:\program files\DAEMON Tools Lite\daemon.exe" [2008-12-10 216520]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2010-03-03 2937528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"RtHDVCpl"="RtHDVCpl.exe" [2007-04-10 4431872]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 630784]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 153136]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
"QuickTime Task"="c:\windows\System32\qttask.exe" [2008-12-18 98304]
"WinampAgent"="d:\program files\Winamp\winampa.exe" [2004-12-20 33792]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-03-09 2769336]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan.lnk - c:\program files\McAfee Security Scan\1.0.150\SSScheduler.exe [2009-7-28 199184]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):ed,5f,8b,37,b0,3d,ca,01

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2435327265-1875360634-543334539-1000]
"EnableNotificationsRef"=dword:00000001

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2008-12-19 717296]
R3 cdrmkaun;cdrmkaun;c:\users\palin\AppData\Local\Temp\cdrmkaun.sys [x]
R3 hamachi_oem;PlayLinc Adapter;c:\windows\system32\DRIVERS\gan_adapter.sys [2006-08-28 10664]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-03-09 51792]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [2008-06-10 222456]
S3 itecir;ITECIR Infrared Receiver;c:\windows\system32\DRIVERS\itecir.sys [2007-04-04 46592]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'

2010-03-23 c:\windows\Tasks\User_Feed_Synchronization-{C63EC77A-7554-4DFF-A0FC-C7773436C2A4}.job
- c:\windows\system32\msfeedssync.exe [2010-01-22 04:56]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.ask.com?o=15187&l=dis
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - d:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: Stáhnout odkaz s použitím BitCometu - c:\program files\BitComet\BitComet.exe/AddLink.htm
IE: Stáhnout všechna videa s použitím BitCometu - c:\program files\BitComet\BitComet.exe/AddVideo.htm
IE: Stáhnout všechny odkazy s použitím BitCometu - c:\program files\BitComet\BitComet.exe/AddAllLink.htm
TCP: {0DB7FC93-5B14-470D-8A74-575E6B86203C} = 213.46.172.36,213.46.172.37
FF - ProfilePath - c:\users\palin\AppData\Roaming\Mozilla\Firefox\Profiles\5tmrh4cv.default\
FF - prefs.js: browser.search.selectedEngine - Centrum.cz Search
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.centrum.cz/index.php?toolbar=centrum-1.0.0&q=
FF - component: c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\components\IGeared_cetrumczp_xputils2.dll
FF - component: c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\components\IGeared_cetrumczp_xputils3.dll
FF - component: c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\components\IGeared_cetrumczp_xputils35.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npPandoWebInst.dll
FF - plugin: d:\program files\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nppl3260.dll
FF - plugin: d:\program files\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nprpjplug.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKU-Default-Run-fsc-reg - c:\fsc-reg\fscreg.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-23 18:56
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Celkový čas: 2010-03-23 19:00:12
ComboFix-quarantined-files.txt 2010-03-23 18:00

Před spuštěním: Volných bajtů: 24 845 172 736
Po spuštění: Volných bajtů: 25 587 761 152

Current=1 Default=1 Failed=0 LastKnownGood=5 Sets=1,2,3,4,5
- - End Of File - - 1AA83B79569569295FC23140E7BCB72D

Pokud nemáte, přesuňte Combofix na plochu

Otevřete si Poznámkový blok a zkopírujte do něj text z bílého okénka.

Kód: Vybrat vše

Registry::
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"=-
[-HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
"{32099AAC-C132-4136-9E9A-4E364A424E17}"=-
"{D5D47440-0750-463D-BAEF-A47D02414806}"=-
"{855F3B16-6D32-4fe6-8A56-BBB695989046}"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{33CD02D0-8C93-4926-A2FE-2CE72CE7DF1A}]
[-HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[-HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-

Driver::
ICQ Service

Folder::
c:\program files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\ICQ6Toolbar
C:\Program Files\DAEMON Tools Toolbar
C:\Program Files\CentrumczToolbar
C:\Program Files\Ask.com

DDS::
uStart Page = hxxp://www.ask.com?o=15187&l=dis

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

Uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
Po uložení uchopte vámi vytvořený skript levým myšítkem a přesuňte ho nad ikonu Combofixu, kde ho upustíte:
Po aplikaci na Vás vypadne další log,vložte ho sem

Může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

restart probehl v pohode, tady je log.
ComboFix 10-03-23.01 - palin 23.03.2010 19:22:18.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3070.1955 [GMT 1:00]
Spuštěný z: c:\users\palin\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\palin\Desktop\CFScript.txt
AV: avast! antivirus 4.7.1296 [VPS 081229-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Ask.com
c:\program files\Ask.com\cobrand.ico
c:\program files\Ask.com\config.xml
c:\program files\Ask.com\favicon.ico
c:\program files\Ask.com\GenericAskToolbar.dll
c:\program files\Ask.com\mupcfg.xml
c:\program files\Ask.com\SaUpdate.exe
c:\program files\Ask.com\UpdateTask.exe
c:\program files\CentrumczToolbar
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\components\autocomplete.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\components\IGeared_cetrumczp_xputils.xpt
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\components\IGeared_cetrumczp_xputils2.dll
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\components\IGeared_cetrumczp_xputils3.dll
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\components\IGeared_cetrumczp_xputils35.dll
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\components\notifications.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\components\sp.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome.manifest
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\after_install.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\After_uninstall.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\autocomplete-popup.xml
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\config.xml
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\contexthtml.xul
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\custom.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\ex\marquee.xml
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\about.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\bubble_AB.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\bubble_ABSearch.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\bubble_arrow.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\bubble_bottom_shadow.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\bubble_confirm.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\bubble_confirmTbr.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\bubble_logo.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\bubble_search.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\bubble_searchSearchBox.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\bubble_style.css
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\bubble_top_shadow.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\deletehistory_processing.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_config.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifier.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierBackground.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierBullet.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierClose.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierDown.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierDownActive.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierDownDisabled.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierIco.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierNext.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierNextActive.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierNextDisabled.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierPrevious.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierPreviousActive.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierPreviousDisabled.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierScrollbar.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierSettings.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierUp.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierUpActive.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\emailchecker_notifierUpDisabled.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\icoUBAccess.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\icoUBCalc.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\icoUBExcel.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\icoUBExplorer.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\icoUBMediaPlayer.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\icoUBNotepad.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\icoUBOutlook.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\icoUBOutlookExpress.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\icoUBPaint.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\icoUBPowerPoint.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\icoUBWord.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_!backgroundFial.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_!backgroundGrey.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_!backgroundRed.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_!bullet.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_!close.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_!icoiDNES.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_!icoRead.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_!icoRSS.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_!icoSimple.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_!icoUnread.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_!logo.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_!logoZena.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_!settings.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_!tabHilighted.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_advanced.css
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_advanced.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_advancedZena.css
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_config.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\rssreader_simple.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\settings_askdialog.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\settings_background.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\settings_closedialog.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\settings_checkboxdialog.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\settings_icohelp.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\settings_loading.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\settings_logo.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\settings_main.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\settings_menu1.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\settings_menu2.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\settings_menu3.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\settings_menu4.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\settings_style.css
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\tabswelcome.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\tabswelcome_button.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\tabswelcome_button_hilight.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\tabswelcome_ie7footer.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\tabswelcome_ie7header.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\tabswelcome_ie8footer.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\tabswelcome_ie8header.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\tbapi.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\ticker_config.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\toolbarprotector_window.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\updater_error.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\updater_ok.gif
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\html\updater_processing.htm
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\htmlwindow.xul
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\imageButton.xml
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\Languages\cs.ini
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\Languages\en.ini
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\Languages\languages.cfg
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\bubbles.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\cache.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\cookie.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\directory.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\dns.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\dom.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\dragdrop.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\file.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\chevron.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\include.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\include_lite.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\loader.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\log.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\mutex.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\newtab.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\pass.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\prefs.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\privacy.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\refreshControl.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\registry.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\resources.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\searches.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\searchplugin.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\searchProvs.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\settings.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\splitter.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\stats.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\tabs.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\translation.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\update.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\updatecontrol.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\updateext.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\updater.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\updates.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\usefulbuttons.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\utils.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\visibility.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\wrapper.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\xml.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\xmlconfig.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libs\xmlitems.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libsex\mail.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libsex\mime.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libsex\pop3.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libsex\rss.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libsex\ticker.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\libsex\xmlitemsex.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\overlay.js
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\overlay.xul
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\content\searchProviders.xml
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\icons\default\IGeared_cetrumczp_htmlwindow.ico
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\contexthtml.css
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\dragdrop.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\emailchecker_icoEmail.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\emailchecker_icoEmailNew.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\gripper.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\chevron.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoAbout.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoAktualne.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoFotoalba.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoGoButtonBG.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoHomepage.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoHoroskopy.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoIcq.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoMagaziny.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoOptions.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoPocasi.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoSport.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoStahuj.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoTelevize.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoTrash.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoUBAccess.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoUBCalc.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoUBExcel.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoUBExplorer.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoUBMediaPlayer.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoUBNotepad.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoUBOutlook.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoUBOutlookExpress.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoUBPaint.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoUBPowerPoint.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoUBWord.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoUpdate.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\icoZena.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\logo.ico
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\logo.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\overlay.css
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\rssreader_!icoRead.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\rssreader_!icoUnread.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\Search_provider_drop.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\searchProvider.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\settings_icon.ico
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\slider.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\spFirma.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\spImages.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\spMapy.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\spSearch.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\spSlovnik.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\spZbozi.png
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\chrome\skin\toolbarprotector_icon.ico
c:\program files\CentrumczToolbar\Firefox\Cetrumcz@igeared\install.rdf
c:\program files\CentrumczToolbar\Firefox\sp.xml
c:\program files\CentrumczToolbar\IE8Lib.dll
c:\program files\CentrumczToolbar\IEToolbar.dll
c:\program files\CentrumczToolbar\ToolbarBroker.exe
c:\program files\CentrumczToolbar\unins000.dat
c:\program files\CentrumczToolbar\unins000.exe
c:\program files\DAEMON Tools Toolbar
c:\program files\DAEMON Tools Toolbar\DTToolbar.dll
c:\program files\DAEMON Tools Toolbar\Resources\about.ico
c:\program files\DAEMON Tools Toolbar\Resources\AboutWindow.ico
c:\program files\DAEMON Tools Toolbar\Resources\AddRadioStation.ico
c:\program files\DAEMON Tools Toolbar\Resources\as.ico
c:\program files\DAEMON Tools Toolbar\Resources\as.png
c:\program files\DAEMON Tools Toolbar\Resources\astro.ico
c:\program files\DAEMON Tools Toolbar\Resources\az.ico
c:\program files\DAEMON Tools Toolbar\Resources\b1.bmp
c:\program files\DAEMON Tools Toolbar\Resources\b1.png
c:\program files\DAEMON Tools Toolbar\Resources\BurnImage.ico
c:\program files\DAEMON Tools Toolbar\Resources\buy.ico
c:\program files\DAEMON Tools Toolbar\Resources\cond000.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond001.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond003.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond004.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond005.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond006.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond007.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond008.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond009.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond010.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond011.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond019.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond020.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond021.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond022.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond023.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond024.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond025.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond026.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond037.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond038.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond039.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond040.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond041.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond046.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond048.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond050.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond051.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond052.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond053.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond054.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond055.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond056.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond057.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond058.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond059.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond060.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond061.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond062.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond063.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond064.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond065.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond066.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond067.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond068.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond069.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond075.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond076.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond077.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond078.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond079.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond080.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond084.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond085.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond086.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond087.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond088.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond089.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond090.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond091.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond092.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond093.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond094.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond095.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond108.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond109.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond110.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond111.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond112.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond113.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond120.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond121.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond122.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond126.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond127.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond128.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond129.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond130.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond131.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond132.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond133.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond134.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond135.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond136.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond137.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond138.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond140.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond141.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond142.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond143.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond148.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond149.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond152.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond154.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond155.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond156.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond157.gif
c:\program files\DAEMON Tools Toolbar\Resources\Config.ico
c:\program files\DAEMON Tools Toolbar\Resources\d.ico
c:\program files\DAEMON Tools Toolbar\Resources\d2.ico
c:\program files\DAEMON Tools Toolbar\Resources\daemon.ico
c:\program files\DAEMON Tools Toolbar\Resources\ds.ico
c:\program files\DAEMON Tools Toolbar\Resources\dsearch.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt.ico
c:\program files\DAEMON Tools Toolbar\Resources\DTPro.ico
c:\program files\DAEMON Tools Toolbar\Resources\Dwnl.ico
c:\program files\DAEMON Tools Toolbar\Resources\emulation.ico
c:\program files\DAEMON Tools Toolbar\Resources\features.ico
c:\program files\DAEMON Tools Toolbar\Resources\GameCentrix.ico
c:\program files\DAEMON Tools Toolbar\Resources\gd.ico
c:\program files\DAEMON Tools Toolbar\Resources\genre.xml
c:\program files\DAEMON Tools Toolbar\Resources\globe.ico
c:\program files\DAEMON Tools Toolbar\Resources\GrabImage.ico
c:\program files\DAEMON Tools Toolbar\Resources\hb.bmp
c:\program files\DAEMON Tools Toolbar\Resources\hb.ico
c:\program files\DAEMON Tools Toolbar\Resources\help.ico
c:\program files\DAEMON Tools Toolbar\Resources\ip.ico
c:\program files\DAEMON Tools Toolbar\Resources\lang.xml
c:\program files\DAEMON Tools Toolbar\Resources\lingvo.ico
c:\program files\DAEMON Tools Toolbar\Resources\m.ico
c:\program files\DAEMON Tools Toolbar\Resources\mail.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\MenuRadioConfig.ico
c:\program files\DAEMON Tools Toolbar\Resources\MenuRadioStation.ico
c:\program files\DAEMON Tools Toolbar\Resources\MenuRSCur.ico
c:\program files\DAEMON Tools Toolbar\Resources\MenuTr.ico
c:\program files\DAEMON Tools Toolbar\Resources\next.bmp
c:\program files\DAEMON Tools Toolbar\Resources\next_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\next_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\next_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\none.bmp
c:\program files\DAEMON Tools Toolbar\Resources\none_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\noW.gif
c:\program files\DAEMON Tools Toolbar\Resources\op.ico
c:\program files\DAEMON Tools Toolbar\Resources\play.bmp
c:\program files\DAEMON Tools Toolbar\Resources\play.ico
c:\program files\DAEMON Tools Toolbar\Resources\play_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\play_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\play_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\pragma.ico
c:\program files\DAEMON Tools Toolbar\Resources\prev.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prev_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prev_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prev_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prod.ico
c:\program files\DAEMON Tools Toolbar\Resources\Radio.ico
c:\program files\DAEMON Tools Toolbar\Resources\RadioBg.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioBg.ico
c:\program files\DAEMON Tools Toolbar\Resources\RadioBgMask.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDisp.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDisp_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown.ico
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioE.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioG.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioL.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioLDotMask.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioLeft.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioLeftMask.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioLM.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioN.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioR.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioR.ico
c:\program files\DAEMON Tools Toolbar\Resources\RadioRM.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioRU.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioVolume.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioVolume_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioVolume_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioVolume_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioW.bmp
c:\program files\DAEMON Tools Toolbar\Resources\refresh.bmp
c:\program files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Rss.ico
c:\program files\DAEMON Tools Toolbar\Resources\Rss1.ico
c:\program files\DAEMON Tools Toolbar\Resources\rssClose.ico
c:\program files\DAEMON Tools Toolbar\Resources\rssL.bmp
c:\program files\DAEMON Tools Toolbar\Resources\rssOpen.ico
c:\program files\DAEMON Tools Toolbar\Resources\size.bmp
c:\program files\DAEMON Tools Toolbar\Resources\size_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\skins.ico
c:\program files\DAEMON Tools Toolbar\Resources\spt.ico
c:\program files\DAEMON Tools Toolbar\Resources\stop.bmp
c:\program files\DAEMON Tools Toolbar\Resources\stop.ico
c:\program files\DAEMON Tools Toolbar\Resources\stop_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\stop_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\stop_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\style.ico
c:\program files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
c:\program files\DAEMON Tools Toolbar\Resources\time.ico
c:\program files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
c:\program files\DAEMON Tools Toolbar\Resources\toolbar.xml
c:\program files\DAEMON Tools Toolbar\Resources\trans.ico
c:\program files\DAEMON Tools Toolbar\Resources\Trash.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\u.ico
c:\program files\DAEMON Tools Toolbar\Resources\vol.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol.ico
c:\program files\DAEMON Tools Toolbar\Resources\vol_back.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_dott.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_dott_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wb.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wi.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi0.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi1.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi10.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi11.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi12.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi13.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi2.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi3.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi4.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi5.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi6.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi7.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi8.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi9.ico
c:\program files\DAEMON Tools Toolbar\uninst.exe
c:\program files\ICQ6Toolbar
c:\program files\ICQ6Toolbar\Icons.bmp
c:\program files\ICQ6Toolbar\ICQ Service.exe
c:\program files\ICQ6Toolbar\icq6Toolbar.ico
c:\program files\ICQ6Toolbar\ICQToolBar.dll
c:\program files\ICQ6Toolbar\ICQUnToolbar.exe
c:\program files\ICQ6Toolbar\logo_small.gif
c:\program files\ICQ6Toolbar\ServiceStarter.exe
c:\program files\ICQ6Toolbar\short.wav
c:\program files\ICQ6Toolbar\Version.txt

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_ICQ Service

((((((((((((((((((((((((( Soubory vytvořené od 2010-02-23 do 2010-03-23 )))))))))))))))))))))))))))))))
.

2010-03-23 18:30 . 2010-03-23 18:32 -------- d-----w- c:\users\palin\AppData\Local\temp
2010-03-23 18:30 . 2010-03-23 18:30 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-03-23 17:02 . 2010-03-23 17:02 -------- d-----w- C:\rsit
2010-03-23 17:02 . 2010-03-23 17:02 -------- d-----w- c:\program files\trend micro
2010-03-17 22:08 . 2010-03-17 22:34 -------- d-----w- C:\temp
2010-03-12 13:55 . 2010-02-12 10:32 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-03-12 13:34 . 2010-02-20 23:06 24064 ----a-w- c:\windows\system32\nshhttp.dll
2010-03-12 13:34 . 2010-02-20 20:53 411648 ----a-w- c:\windows\system32\drivers\http.sys
2010-03-12 13:34 . 2010-02-20 23:05 30720 ----a-w- c:\windows\system32\httpapi.dll
2010-03-11 14:47 . 2010-03-11 14:47 -------- d-----w- c:\users\palin\AppData\Local\Innovative Solutions
2010-03-08 07:24 . 2010-03-08 07:24 -------- d-----w- c:\programdata\Alwil Software
2010-03-03 16:37 . 2010-03-03 16:37 -------- d-----w- c:\users\palin\AppData\Roaming\Turbine
2010-03-03 16:37 . 2010-03-03 16:37 -------- d-----w- c:\users\palin\AppData\Local\Turbine
2010-03-03 16:36 . 2010-03-03 16:36 93 ----a-w- c:\users\palin\AppData\Local\fusioncache.dat
2010-03-03 16:36 . 2010-03-04 18:30 -------- d-----w- c:\users\palin\AppData\Local\ApplicationHistory
2010-03-03 16:33 . 2010-03-03 16:33 -------- d-----w- c:\windows\system32\URTTEMP
2010-03-03 14:42 . 2010-03-23 17:44 -------- d-----w- c:\users\palin\AppData\Local\PMB Files
2010-03-03 14:42 . 2010-03-03 14:45 -------- d-----w- c:\programdata\PMB Files
2010-03-03 14:42 . 2010-03-03 14:42 -------- d-----w- c:\program files\Pando Networks
2010-02-25 19:47 . 2010-02-25 19:47 -------- d-----w- c:\programdata\Solidshield
2010-02-25 19:44 . 2008-10-15 05:22 452440 ----a-w- c:\windows\system32\d3dx10_40.dll
2010-02-25 19:44 . 2008-10-15 05:22 2036576 ----a-w- c:\windows\system32\D3DCompiler_40.dll
2010-02-25 19:44 . 2008-10-15 05:22 4379984 ----a-w- c:\windows\system32\D3DX9_40.dll
2010-02-25 19:36 . 2010-02-25 20:06 -------- d-----w- c:\program files\Ubisoft
2010-02-24 08:55 . 2010-01-23 09:26 2048 ----a-w- c:\windows\system32\tzres.dll
2010-02-24 08:55 . 2010-01-25 12:00 471552 ----a-w- c:\windows\system32\secproc_isv.dll
2010-02-24 08:55 . 2010-01-25 12:00 471552 ----a-w- c:\windows\system32\secproc.dll
2010-02-24 08:55 . 2010-01-25 12:00 152576 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-02-24 08:55 . 2010-01-25 12:00 152064 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-02-24 08:55 . 2010-01-25 11:58 332288 ----a-w- c:\windows\system32\msdrm.dll
2010-02-24 08:55 . 2010-01-25 08:21 526336 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-02-24 08:55 . 2010-01-25 08:21 346624 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-02-24 08:55 . 2010-01-25 08:21 518144 ----a-w- c:\windows\system32\RMActivate.exe
2010-02-24 08:55 . 2010-01-25 08:21 347136 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-02-24 08:55 . 2010-01-06 15:39 1696256 ----a-w- c:\windows\system32\gameux.dll
2010-02-24 08:54 . 2010-01-06 15:38 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2010-02-24 08:54 . 2010-01-06 13:30 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-23 17:53 . 2008-04-14 13:47 721956 ----a-w- c:\windows\system32\perfh005.dat
2010-03-23 17:53 . 2008-04-14 13:47 166118 ----a-w- c:\windows\system32\perfc005.dat
2010-03-22 08:23 . 2008-12-19 14:32 -------- d-----w- c:\users\palin\AppData\Roaming\ICQ
2010-03-12 13:48 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-03-09 11:24 . 2008-12-28 15:56 153184 ----a-w- c:\windows\system32\aswBoot.exe
2010-03-09 11:12 . 2008-12-28 15:56 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-03-09 11:12 . 2008-12-29 09:35 162640 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-03-09 11:09 . 2008-12-28 15:56 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-03-09 11:08 . 2008-12-28 15:56 51792 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-03-09 11:08 . 2008-12-29 09:35 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-03-08 17:24 . 2008-12-28 15:56 -------- d-----w- c:\program files\Alwil Software
2010-02-27 21:57 . 2010-02-27 21:57 2131336 ----a-w- c:\users\palin\AppData\Roaming\Mozilla\Firefox\Profiles\5tmrh4cv.default\extensions\toolbar@ask.com\chrome\temp\askToolbar.exe
2010-02-25 20:06 . 2008-09-08 18:20 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-02-25 19:28 . 2009-11-25 14:30 -------- d-----w- c:\users\palin\AppData\Roaming\runic games
2010-02-25 19:28 . 2009-11-25 14:27 -------- d-----w- c:\program files\Runic Games
2010-02-25 08:08 . 2008-12-18 15:00 150824 ----a-w- c:\users\palin\AppData\Local\GDIPFONTCACHEV1.DAT
2010-02-24 09:16 . 2009-10-02 23:08 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-18 21:22 . 2010-02-18 21:17 21840 ----atw- c:\windows\system32\SIntfNT.dll
2010-02-18 21:22 . 2010-02-18 21:17 17212 ----atw- c:\windows\system32\SIntf32.dll
2010-02-18 21:22 . 2010-02-18 21:17 12067 ----atw- c:\windows\system32\SIntf16.dll
2010-02-11 18:53 . 2008-12-28 15:56 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-02-08 22:31 . 2009-10-04 15:15 -------- d-----w- c:\program files\MpcStar
2010-01-29 23:42 . 2010-01-29 23:36 53248 ----a-w- c:\windows\unrar.dll
2010-01-28 12:02 . 2008-09-08 18:20 -------- d-----w- c:\program files\CyberLink
2010-01-27 16:33 . 2010-01-27 16:33 -------- d-----w- c:\program files\CCleaner
2010-01-16 14:39 . 2008-12-20 11:31 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2010-01-06 15:38 . 2010-02-24 08:55 173056 ----a-w- c:\windows\AppPatch\AcXtrnal.dll
2010-01-06 15:38 . 2010-02-24 08:55 458752 ----a-w- c:\windows\AppPatch\AcSpecfc.dll
2010-01-06 15:38 . 2010-02-24 08:55 2159616 ----a-w- c:\windows\AppPatch\AcGenral.dll
2010-01-06 15:38 . 2010-02-24 08:54 542720 ----a-w- c:\windows\AppPatch\AcLayers.dll
2010-01-02 06:38 . 2010-01-22 08:20 916480 ----a-w- c:\windows\system32\wininet.dll
2010-01-02 06:32 . 2010-01-22 08:20 71680 ----a-w- c:\windows\system32\iesetup.dll
2010-01-02 06:32 . 2010-01-22 08:20 109056 ----a-w- c:\windows\system32\iesysprep.dll
2010-01-02 04:57 . 2010-01-22 08:20 133632 ----a-w- c:\windows\system32\ieUnatt.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="d:\program files\DAEMON Tools Lite\daemon.exe" [2008-12-10 216520]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2010-03-03 2937528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"RtHDVCpl"="RtHDVCpl.exe" [2007-04-10 4431872]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 630784]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 153136]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
"QuickTime Task"="c:\windows\System32\qttask.exe" [2008-12-18 98304]
"WinampAgent"="d:\program files\Winamp\winampa.exe" [2004-12-20 33792]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-03-09 2769336]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan.lnk - c:\program files\McAfee Security Scan\1.0.150\SSScheduler.exe [2009-7-28 199184]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):ed,5f,8b,37,b0,3d,ca,01

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2435327265-1875360634-543334539-1000]
"EnableNotificationsRef"=dword:00000001

R3 cdrmkaun;cdrmkaun;c:\users\palin\AppData\Local\Temp\cdrmkaun.sys [x]
R3 hamachi_oem;PlayLinc Adapter;c:\windows\system32\DRIVERS\gan_adapter.sys [2006-08-28 10664]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2008-12-19 717296]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-03-09 51792]
S3 itecir;ITECIR Infrared Receiver;c:\windows\system32\DRIVERS\itecir.sys [2007-04-04 46592]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'

2010-03-23 c:\windows\Tasks\User_Feed_Synchronization-{C63EC77A-7554-4DFF-A0FC-C7773436C2A4}.job
- c:\windows\system32\msfeedssync.exe [2010-01-22 04:56]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - d:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: Stáhnout odkaz s použitím BitCometu - c:\program files\BitComet\BitComet.exe/AddLink.htm
IE: Stáhnout všechna videa s použitím BitCometu - c:\program files\BitComet\BitComet.exe/AddVideo.htm
IE: Stáhnout všechny odkazy s použitím BitCometu - c:\program files\BitComet\BitComet.exe/AddAllLink.htm
TCP: {0DB7FC93-5B14-470D-8A74-575E6B86203C} = 213.46.172.36,213.46.172.37
FF - ProfilePath - c:\users\palin\AppData\Roaming\Mozilla\Firefox\Profiles\5tmrh4cv.default\
FF - prefs.js: browser.search.selectedEngine - Centrum.cz Search
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.centrum.cz/index.php?toolbar=centrum-1.0.0&q=
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-Centrum.cz Toolbar_is1 - c:\program files\CentrumczToolbar\unins000.exe
AddRemove-DAEMON Tools Toolbar - c:\program files\DAEMON Tools Toolbar\uninst.exe
AddRemove-ICQToolbar - c:\program files\ICQ6Toolbar\ICQUnToolbar.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-23 19:32
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll sfsync02.sys iastor.sys spwp.sys >>UNKNOWN [0x858D8938]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0x8a7bbd24
\Driver\ACPI -> acpi.sys @ 0x805bdd68
\Driver\atapi -> sfsync02.sys @ 0x82695d60
\Driver\iaStor -> sfsync02.sys @ 0x82695d60
IoDeviceObjectType ->\Device\Harddisk0\DR0 ->user & kernel MBR OK

**************************************************************************
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\windows\System32\LEXBCES.EXE
c:\windows\System32\LEXPPS.EXE
c:\windows\system32\inetsrv\inetinfo.exe
c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\windows\system32\PnkBstrB.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\program files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
c:\windows\system32\WUDFHost.exe
c:\windows\system32\conime.exe
c:\windows\servicing\TrustedInstaller.exe
c:\windows\RtHDVCpl.exe
c:\program files\Alwil Software\Avast5\AvastUI.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\wbem\unsecapp.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
.
**************************************************************************
.
Celkový čas: 2010-03-23 19:39:30 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-03-23 18:39
ComboFix2.txt 2010-03-23 18:00

Před spuštěním: Volných bajtů: 25 575 587 840
Po spuštění: Volných bajtů: 24 961 298 432

Current=1 Default=1 Failed=0 LastKnownGood=5 Sets=1,2,3,4,5
- - End Of File - - 83BA1F8499BED2BC9520941C950BC8BA

Odinstalujte všechny emulátory virtuálních mechanik.

Obrázek

Stáhněte SPTD http://www.duplexsecure.com/en/downloads

Vyberte verzi podle svého operačního systému (64 & 32b). Uložte na plochu a spusťte.
zvolte možnost Uninstall a restartujte PC.

Stáhněte a spusťte http://www.jpshortstuff.247fixes.com/Defogger.exe

Klikněte na "Disable" a restartujte PC.

Stáhněte MBR na plochu http://www2.gmer.net/mbr/mbr.exe

Obrázek

Start > Spustit (Win + R)

Vyskočí okénko, zkopírujte do něj:

Kód: Vybrat vše

"%userprofile%\plocha\mbr" -t

Klikněte na OK

Vytvoří se log s názvem mbr.log, vložte ho sem.

soubor nesel spustit s parametrem -t , ale pri normalnim spusteni vznikl log
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
kernel: MBR read successfully
user & kernel MBR OK

Zkuste:

Kód: Vybrat vše

"%userprofile%\desktop\mbr" -t

jo uz to slo, mohlo me to napadnout. tady je log
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll sfsync02.sys iastor.sys
kernel: MBR read successfully
user & kernel MBR OK

Ne, mě to mělo napadnout hned.

Jak to vypadá s PC

Bohuzel, porad se to nedari rozbehnout

Stáhněte MBAM http://www.viry.cz/forum/viewtopic.php?f=29&t=67229

Podle návodu v odkazu nainstalujte, poté dejte úplný sken.
Nic nemažte MBAM má občas falešné detekce a mohl by smazat např. systémové soubory.
Log vložte sem.

tady je ten log. trvalo to trochu dyl

Malwarebytes' Anti-Malware 1.44
Verze databáze: 3510
Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18882

23.3.2010 23:19:56
mbam-log-2010-03-23 (23-19-49).txt

Typ kontroly: Kompletní kontrola (C:\|D:\|)
Zkontrolované objekty: 596147
Uplynulý čas: 1 hour(s), 32 minute(s), 23 second(s)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 3
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 4

Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
HKEY_CLASSES_ROOT\Interface\{eaa3f1ff-f1cc-46bf-85fa-197eebf3b524} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\AppID\{B5BB60EE-125B-40AB-AAA5-A4E194973C95} (Spyware.OnlineGames) -> No action taken.
HKEY_CLASSES_ROOT\AppID\FirstBHO.dll (Spyware.OnlineGames) -> No action taken.

Infikované hodnoty registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
D:\my downloads\BS.Player_Pro\BS.Player Pro\Keygen\#1 Keygen.exe (Trojan.Downloader) -> No action taken.
D:\my downloads\BS.Player_Pro\BS.Player Pro\Keygen\#4 Keygen.exe (Malware.Packer) -> No action taken.
D:\program files\ACE Mega CoDecS Pack\UtilitieS\Remover.exe (Trojan.FakeAlert) -> No action taken.
D:\program files\ACE Mega CoDecS Pack\UtilitieS\AVI CoDecS\Remover.exe (Trojan.FakeAlert) -> No action taken.

Vše, co našel MBAM smažte a napište stav PC.

VIRY.CZ

Najednou přestalo fungovat připojení pres router

Najednou přestalo fungovat připojení pres router

Re: Najednou přestalo fungovat připojení pres router

Re: Najednou přestalo fungovat připojení pres router

Re: Najednou přestalo fungovat připojení pres router

Re: Najednou přestalo fungovat připojení pres router

Re: Najednou přestalo fungovat připojení pres router

Re: Najednou přestalo fungovat připojení pres router

Re: Najednou přestalo fungovat připojení pres router

Re: Najednou přestalo fungovat připojení pres router

Re: Najednou přestalo fungovat připojení pres router

Re: Najednou přestalo fungovat připojení pres router

Re: Najednou přestalo fungovat připojení pres router

Re: Najednou přestalo fungovat připojení pres router

Re: Najednou přestalo fungovat připojení pres router

Re: Najednou přestalo fungovat připojení pres router