VIRY.CZ

Najednou mi přestal jít Google Chrome a Eset u ukazuje různé pochybné zablokované adresy.
Díky za rady.
Logfile of random's system information tool 1.06 (written by random/random)
Run by Milan at 2010-04-09 20:18:52
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (14%) free of 76 GB
Total RAM: 758 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:19:05, on 9.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\DOCUME~1\Milan\LOCALS~1\Temp\ie4d.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\CtrlVol.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\CNAB4RPK.EXE
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\totalcmd\TOTALCMD.EXE
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\taskmgr.exe
c:\Dowl\Antivir-HIJACK\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Milan.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.flashget.com/index_en.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\sdra64.exe,
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\core.2.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
O4 - HKLM\..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe
O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKLM\..\Policies\Explorer\Run: [k41g] C:\DOCUME~1\Milan\LOCALS~1\Temp\ie4d.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: 602SQL 8 FastCGI Client - Unknown owner - c:\Program Files\webgencz\602FSVC8.EXE (file missing)
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Unknown owner - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (file missing)
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe

--
End of file - 5086 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-25 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-25 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Ukazatel S-Rank - C:\Program Files\Seznam.cz\core.2.dll [2010-03-01 1107608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2003-04-24 110592]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2003-04-24 610304]
"LaunchAp"=C:\Program Files\Launch Manager\LaunchAp.exe [2002-12-02 32768]
"HotkeyApp"=C:\Program Files\Launch Manager\HotkeyApp.exe [2003-01-09 57418]
"CtrlVol"=C:\Program Files\Launch Manager\CtrlVol.exe [2002-10-23 163840]
"Wbutton"=C:\Program Files\Launch Manager\Wbutton.exe [2003-01-09 53248]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"k41g"=C:\DOCUME~1\Milan\LOCALS~1\Temp\ie4d.exe [2010-04-09 46592]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 3]
C:\Program Files\Advanced SystemCare 3\AWC.exe [2009-04-27 2329936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG]
C:\WINDOWS\AGRSMMSG.exe [2003-02-14 88107]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\egui]
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-05-14 2029640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\Milan\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-08-01 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WLAN Monitor]
C:\Program Files\GPRS WLAN dongle\Wlan.exe [2004-05-12 2359296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Milan^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2009-05-15 384512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-02-07 139264]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoResolveSearch"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\CNAB4RPK.EXE"="C:\WINDOWS\system32\CNAB4RPK.EXE:*:Enabled:Canon LBP2900 RPC Server Process"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Dowl\Adobe Acrobat\P._Foxit_PDF_Editor_by_yd.exe"="C:\Dowl\Adobe Acrobat\P._Foxit_PDF_Editor_by_yd.exe:*:Enabled:Foxit PDF Editor, the first REAL editor for PDF files!"
"C:\Documents and Settings\Milan\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe"="C:\Documents and Settings\Milan\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b1227390-7e91-11de-a751-000e354fc2ed}]
shell\AutoRun\command - I:\WD_Windows_Tools\Setup.exe

======List of files/folders created in the last 1 months======

2010-04-09 20:18:53 ----D---- C:\Program Files\trend micro
2010-04-09 20:18:52 ----D---- C:\rsit
2010-04-09 20:11:03 ----D---- C:\WINDOWS\LastGood
2010-04-09 20:10:33 ----D---- C:\Program Files\ESET
2010-04-09 19:02:55 ----SHD---- C:\WINDOWS\system32\lowsec
2010-04-07 20:37:40 ----D---- C:\Program Files\Seznam.cz
2010-03-27 15:25:19 ----HD---- C:\Program Files\Uninstall Information
2010-03-27 15:19:54 ----D---- C:\WINDOWS\WBEM
2010-03-27 15:18:15 ----HDC---- C:\WINDOWS\ie8
2010-03-26 14:40:43 ----D---- C:\Program Files\Xenocode
2010-03-19 08:31:38 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-03-18 18:54:17 ----D---- C:\Documents and Settings\Milan\Data aplikací\Divo Games
2010-03-17 14:44:04 ----A---- C:\WINDOWS\system32\ptpusb.dll
2010-03-17 14:44:03 ----A---- C:\WINDOWS\system32\ptpusd.dll

======List of files/folders modified in the last 1 months======

2010-04-09 20:18:57 ----D---- C:\WINDOWS\Prefetch
2010-04-09 20:18:53 ----RD---- C:\Program Files
2010-04-09 20:18:53 ----D---- C:\WINDOWS\Temp
2010-04-09 20:16:56 ----D---- C:\Program Files\Mozilla Firefox
2010-04-09 20:11:18 ----SHD---- C:\WINDOWS\Installer
2010-04-09 20:11:07 ----HD---- C:\WINDOWS\inf
2010-04-09 20:11:07 ----D---- C:\WINDOWS\system32\drivers
2010-04-09 20:11:03 ----D---- C:\WINDOWS
2010-04-09 20:11:02 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-09 20:09:49 ----A---- C:\WINDOWS\WINCMD.INI
2010-04-09 20:09:34 ----D---- C:\Program Files\Mozilla Thunderbird
2010-04-09 19:03:49 ----D---- C:\WINDOWS\system32
2010-04-09 17:01:43 ----D---- C:\Program Files\Trell2010
2010-04-09 15:03:19 ----A---- C:\WINDOWS\wcx_ftp.ini
2010-04-09 12:19:18 ----D---- C:\Zajo
2010-04-09 11:11:49 ----D---- C:\Dowl
2010-04-07 19:17:03 ----D---- C:\Program Files\Advanced SystemCare 3
2010-04-06 17:10:33 ----D---- C:\totalcmd
2010-04-06 13:48:27 ----D---- C:\Alpy09-010
2010-04-05 21:19:32 ----D---- C:\RC model
2010-04-05 17:29:07 ----D---- C:\A-0bchod
2010-04-04 20:59:04 ----D---- C:\Program Files\Trell
2010-03-30 00:37:30 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-29 11:29:55 ----D---- C:\Ucto
2010-03-28 13:21:43 ----D---- C:\Documents and Settings\Milan\Data aplikací\ICQ
2010-03-27 15:25:12 ----D---- C:\WINDOWS\system32\cs-cz
2010-03-27 15:25:12 ----D---- C:\WINDOWS\Help
2010-03-27 15:25:12 ----D---- C:\Program Files\Internet Explorer
2010-03-27 15:25:11 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-03-27 15:19:46 ----D---- C:\WINDOWS\Media
2010-03-23 01:04:02 ----D---- C:\Program Files\Amara - Flash Slide Show Builder
2010-03-21 16:22:52 ----D---- C:\WINDOWS\SoftwareDistribution
2010-03-19 08:31:33 ----D---- C:\WINDOWS\SxsCaPendDel
2010-03-18 19:53:24 ----D---- C:\WINDOWS\WinSxS
2010-03-18 18:58:05 ----D---- C:\Game
2010-03-18 08:33:46 ----SD---- C:\WINDOWS\Tasks
2010-03-17 18:46:23 ----D---- C:\Documents and Settings\Milan\Data aplikací\Thinstall
2010-03-17 15:01:11 ----D---- C:\Hudba
2010-03-13 18:10:06 ----D---- C:\Web data
2010-03-12 11:46:20 ----D---- C:\Program Files\Common Files
2010-03-12 11:46:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2010-03-11 22:14:52 ----D---- C:\Documents and Settings\Milan\Data aplikací\Skype
2010-03-11 21:00:51 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-03-11 17:07:29 ----D---- C:\Documents and Settings\Milan\Data aplikací\skypePM
2010-03-11 10:54:28 ----D---- C:\Documents and Settings\Milan\Data aplikací\dvdcss
2010-03-10 11:45:46 ----D---- C:\Program Files\Movie Maker
2010-03-10 11:45:27 ----HD---- C:\WINDOWS\$hf_mig$

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-05-14 107256]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-05-14 94360]
R1 Hotkey;Hotkey; C:\WINDOWS\system32\drivers\Hotkey.sys [2002-10-29 8843]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 Wbutton;Wbutton; C:\WINDOWS\system32\drivers\Wbutton.sys [2002-10-23 2920]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-05-14 114472]
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-14 88192]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2003-02-14 1169792]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2002-12-17 42368]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-14 13952]
R3 cs429x;Cirrus Logic WDM Audio Codec Driver; C:\WINDOWS\system32\drivers\cwawdm.sys [2003-07-14 111168]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2006-02-07 1399615]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 NSCIRDA;NSC Infrared Device Driver; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2008-04-14 28672]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2003-04-24 270448]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 w22n51;Intel(R) PRO/Wireless 2200 Adapter Driver; C:\WINDOWS\system32\DRIVERS\w22n51.sys [2004-03-08 1657344]
R3 WBMS;Winbond Memory Stick Storage (MS) Device Driver; C:\WINDOWS\System32\Drivers\WBMS.SYS [2002-11-07 30208]
R3 WBSD;Winbond Secure Digital Storage (SD/MMC) Device Driver; C:\WINDOWS\System32\Drivers\WBSD.SYS [2002-11-28 25600]
S1 mailKmd;mailKmd; C:\WINDOWS\system32\drivers\mailKmd.sys []
S3 {6080A529-897E-4629-A488-ABA0C29B635E};Intel(R) Graphics Platform (SoftBIOS) Driver; C:\WINDOWS\system32\drivers\ialmsbw.sys [2003-04-23 113504]
S3 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91};Intel(R) Graphics Chipset (KCH) Driver; C:\WINDOWS\system32\drivers\ialmkchw.sys [2003-04-23 78752]
S3 {E2B953A6-195A-44F9-9BA3-3D5F4E32BB55};AIM 3.0 Part 01 Codec Driver CH-7009-A/CH-7011; C:\WINDOWS\system32\drivers\wA301a.sys [2003-04-23 33335]
S3 a8qohgv7;a8qohgv7; C:\WINDOWS\system32\drivers\a8qohgv7.sys []
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 PPJoyBus;Parallel Port Joystick Bus device driver; C:\WINDOWS\system32\drivers\PPJoyBus.sys [2003-08-10 11330]
S3 Scfilter;Scfilter; C:\WINDOWS\System32\Drivers\Scfilter.sys [2004-03-04 26485]
S3 SOLOMONFastUSB(R);SOLOMON FastUSB(R) Service for SOLOMON Scwi211b USB Wireless Lan; C:\WINDOWS\system32\DRIVERS\scwi211bx.sys [2004-03-26 122496]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbser;Solomon USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-14 26112]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-05-14 731840]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-07-25 153376]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe []
S3 602SQL 8 FastCGI Client;602SQL 8 FastCGI Client; c:\Program Files\webgencz\602FSVC8.EXE []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-05-14 20680]
S3 Macromedia Licensing Service;Macromedia Licensing Service; C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe [2009-12-11 68096]

-----------------EOF-----------------

Zdravím

Stahněte OTL http://oldtimer.geekstogo.com/OTL.exe

Spusťte program, poté klikněte na Prohledat
Po dokončení, sem vložte logy OTL.Txt a Extras.txt

OTL logfile created on: 9.4.2010 20:36:14 - Run 1
OTL by OldTimer - Version 3.2.1.1 Folder = c:\Dowl
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

758,00 Mb Total Physical Memory | 304,00 Mb Available Physical Memory | 40,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 78,00% Paging File free
Paging file location(s): C:\pagefile.sys 1140 2280 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 10,09 Gb Free Space | 13,54% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MILOUS
Current User Name: Milan
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.04.09 20:35:58 | 000,561,664 | ---- | M] (OldTimer Tools) -- c:\Dowl\OTL.exe
PRC - [2010.04.09 19:03:36 | 000,046,592 | ---- | M] ( ) -- C:\Documents and Settings\Milan\Local Settings\temp\ie4d.exe
PRC - [2009.09.29 20:12:03 | 000,908,280 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009.05.14 15:47:54 | 000,731,840 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2009.05.14 15:47:08 | 002,029,640 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2008.11.07 21:20:37 | 008,502,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Thunderbird\thunderbird.exe
PRC - [2008.09.01 00:50:20 | 000,062,848 | ---- | M] (CANON INC.) -- C:\WINDOWS\system32\CNAB4RPK.EXE
PRC - [2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007.01.01 06:56:00 | 000,852,176 | ---- | M] (C. Ghisler & Co.) -- C:\totalcmd\TOTALCMD.EXE
PRC - [2003.04.24 15:51:36 | 000,110,592 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
PRC - [2003.01.09 11:41:08 | 000,057,418 | ---- | M] (Wistron) -- C:\Program Files\Launch Manager\HotkeyApp.exe
PRC - [2003.01.09 10:57:36 | 000,053,248 | ---- | M] () -- C:\Program Files\Launch Manager\WButton.exe
PRC - [2002.12.02 11:22:54 | 000,032,768 | ---- | M] () -- C:\Program Files\Launch Manager\LaunchAp.exe
PRC - [2002.10.23 18:18:38 | 000,163,840 | ---- | M] () -- C:\Program Files\Launch Manager\ctrlvol.exe

========== Modules (SafeList) ==========

MOD - [2010.04.09 20:35:58 | 000,561,664 | ---- | M] (OldTimer Tools) -- c:\Dowl\OTL.exe
MOD - [2003.04.24 15:50:48 | 000,065,536 | ---- | M] (Synaptics, Inc.) -- C:\WINDOWS\system32\SynTPFcs.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (Lavasoft Ad-Aware Service)
SRV - File not found [On_Demand | Stopped] -- -- (aspnet_state)
SRV - File not found [On_Demand | Stopped] -- -- (602SQL 8 FastCGI Client)
SRV - [2009.12.11 19:08:59 | 000,068,096 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe -- (Macromedia Licensing Service)
SRV - [2009.05.14 15:54:22 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EHttpSrv)
SRV - [2009.05.14 15:47:54 | 000,731,840 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)

========== Driver Services (SafeList) ==========

DRV - [2010.02.04 17:53:02 | 000,064,288 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\Lbd.sys -- (Lbd)
DRV - [2009.09.28 18:11:35 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.05.14 15:49:32 | 000,094,360 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2009.05.14 15:47:14 | 000,107,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009.05.14 15:41:10 | 000,114,472 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2008.04.14 02:24:38 | 000,028,672 | ---- | M] (National Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nscirda.sys -- (NSCIRDA)
DRV - [2006.09.24 15:28:46 | 000,005,248 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Boot | Running] -- C:\WINDOWS\system32\speedfan.sys -- (speedfan)
DRV - [2004.03.26 16:08:08 | 000,122,496 | ---- | M] (ATMEL) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\scwi211bx.sys -- (SOLOMONFastUSB(R)) SOLOMON FastUSB(R)
DRV - [2004.03.08 03:43:10 | 001,657,344 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\w22n51.sys -- (w22n51) Intel(R)
DRV - [2004.03.04 10:17:16 | 000,026,485 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\scfilter.sys -- (Scfilter)
DRV - [2003.08.10 10:10:17 | 000,011,330 | ---- | M] (Deon van der Westhuysen) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PPJoyBus.sys -- (PPJoyBus)
DRV - [2003.07.14 16:33:26 | 000,111,168 | ---- | M] (Applied Drivers Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\cwawdm.sys -- (cs429x)
DRV - [2003.04.24 15:08:16 | 000,270,448 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2003.04.23 09:10:12 | 000,033,335 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wa301a.sys -- ({E2B953A6-195A-44F9-9BA3-3D5F4E32BB55})
DRV - [2003.02.14 10:59:14 | 001,169,792 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2002.12.17 10:41:36 | 000,042,368 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp)
DRV - [2002.11.28 17:04:48 | 000,025,600 | ---- | M] (Winbond Electronics Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wbsd.sys -- (WBSD) Winbond Secure Digital Storage (SD/MMC)
DRV - [2002.11.07 19:48:00 | 000,030,208 | ---- | M] (Winbond Electronics Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wbms.sys -- (WBMS) Winbond Memory Stick Storage (MS)
DRV - [2002.10.29 15:25:54 | 000,008,843 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\HOTKEY.sys -- (Hotkey)
DRV - [2002.10.23 12:25:48 | 000,002,920 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Wbutton.sys -- (Wbutton)
DRV - [2002.09.30 11:07:30 | 000,017,134 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\PCANDIS5.SYS -- (PCANDIS5)
DRV - [2001.10.25 14:00:00 | 000,004,224 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\beep.sys -- (Beep)
DRV - [1996.04.03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009.12.31 13:22:12 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009.09.29 20:12:09 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.18\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2009.08.01 13:54:25 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010.04.09 20:10:35 | 000,000,000 | ---D | M]

[2009.08.01 14:09:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Milan\Data aplikací\Mozilla\Extensions
[2010.03.01 19:21:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\b6kdebhf.default\extensions
[2009.10.30 01:14:38 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\b6kdebhf.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009.10.30 11:26:32 | 000,000,000 | ---D | M] (Český validátor kódu) -- C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\b6kdebhf.default\extensions\{B6533577-46BD-4520-9FF8-F0513A30C2A3}
[2010.02.17 22:47:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\b6kdebhf.default\extensions\seo@profesional
[2009.08.01 14:27:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\b6kdebhf.default\extensions\temp
[2009.08.01 14:09:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\f1fodvds.default\extensions
[2010.03.01 19:21:32 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009.08.11 15:37:22 | 000,086,016 | ---- | M] (Software602 a.s.) -- C:\Program Files\Mozilla Firefox\plugins\npfiller.dll
[2009.08.03 09:08:34 | 000,072,960 | ---- | M] (Foxit Software Company) -- C:\Program Files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll
[2009.08.17 17:48:56 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2009.08.17 17:48:56 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2009.08.17 17:48:56 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2009.08.17 17:48:56 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2009.08.17 17:48:56 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2010.02.27 20:10:23 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Ukazatel S-Rank) - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\core.2.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {35065594-9169-4A34-B167-FC4865038E53} - No CLSID value found.
O4 - HKLM..\Run: [CtrlVol] C:\Program Files\Launch Manager\ctrlvol.exe ()
O4 - HKLM..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe (Wistron)
O4 - HKLM..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe ()
O4 - HKLM..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [Wbutton] C:\Program Files\Launch Manager\Wbutton.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: k41g = C:\DOCUME~1\Milan\LOCALS~1\Temp\ie4d.exe ( )
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O16 - DPF: {41564D57-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... mvadvd.cab (Reg Error: Value error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/sh ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.153.32.129 213.153.32.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\sdra64.exe) - C:\WINDOWS\system32\sdra64.exe ()
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Nebe.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Nebe.bmp
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{b1227390-7e91-11de-a751-000e354fc2ed}\Shell\AutoRun\command - "" = I:\WD_Windows_Tools\Setup.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.04.09 20:18:53 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2010.04.09 20:18:52 | 000,000,000 | ---D | C] -- C:\rsit
[2010.04.09 20:11:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2010.04.09 20:10:33 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2010.04.09 19:02:55 | 000,000,000 | -HSD | C] -- C:\WINDOWS\System32\lowsec
[2010.04.07 20:37:40 | 000,000,000 | ---D | C] -- C:\Program Files\Seznam.cz
[2010.04.07 17:52:48 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Milan\Recent
[2010.03.27 15:25:59 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Milan\PrivacIE
[2010.03.27 15:25:19 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2010.03.27 15:25:18 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Milan\IETldCache
[2010.03.27 15:19:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2010.03.27 15:18:15 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2010.03.26 14:40:43 | 000,000,000 | ---D | C] -- C:\Program Files\Xenocode
[2010.03.18 18:54:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Milan\Data aplikací\Divo Games
[2010.03.17 14:44:04 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusb.dll
[2010.03.17 14:44:03 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusd.dll
[2010.03.17 14:44:02 | 000,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbscan.sys
[2010.03.03 18:32:30 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Data aplikací\Microsoft
[2010.03.03 18:32:30 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Data aplikací\Microsoft
[2010.03.03 18:32:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Microsoft
[2010.03.03 18:32:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Microsoft
[2009.08.03 15:34:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\ESET
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010.04.09 20:09:49 | 000,002,237 | ---- | M] () -- C:\WINDOWS\WINCMD.INI
[2010.04.09 20:08:27 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.04.09 20:08:23 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.04.09 20:07:30 | 003,407,872 | -H-- | M] () -- C:\Documents and Settings\Milan\NTUSER.DAT
[2010.04.09 20:07:30 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Milan\ntuser.ini
[2010.04.09 20:07:22 | 010,126,554 | -H-- | M] () -- C:\Documents and Settings\Milan\Local Settings\Data aplikací\IconCache.db
[2010.04.09 17:01:42 | 000,000,005 | ---- | M] () -- C:\Program Files\trl.trl
[2010.04.09 15:03:19 | 000,002,856 | ---- | M] () -- C:\WINDOWS\wcx_ftp.ini
[2010.04.08 23:17:36 | 000,008,670 | ---- | M] () -- C:\WINDOWS\System32\5e55e55e55e5.toc
[2010.04.08 23:17:36 | 000,000,006 | ---- | M] () -- C:\WINDOWS\System32\5e55e55e55e5.dlf
[2010.04.08 17:47:57 | 000,094,592 | -H-- | M] () -- C:\treeinfo.wc
[2010.04.07 20:23:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010.04.07 09:08:34 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.04.05 21:18:19 | 000,000,685 | ---- | M] () -- C:\Documents and Settings\Milan\Data aplikací\DriveCalculator Preferences
[2010.03.30 00:37:30 | 000,803,412 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010.03.30 00:37:30 | 000,342,014 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.03.30 00:37:30 | 000,339,078 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2010.03.30 00:37:30 | 000,061,600 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2010.03.30 00:37:30 | 000,052,530 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.03.27 15:55:16 | 000,000,719 | ---- | M] () -- C:\Documents and Settings\Milan\Plocha\SpeedFan.lnk
[2010.03.27 15:55:15 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\initdebug.nfo
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.04.05 21:02:06 | 000,000,685 | ---- | C] () -- C:\Documents and Settings\Milan\Data aplikací\DriveCalculator Preferences
[2010.03.27 15:55:16 | 000,000,719 | ---- | C] () -- C:\Documents and Settings\Milan\Plocha\SpeedFan.lnk
[2010.03.27 15:55:14 | 000,000,045 | ---- | C] () -- C:\WINDOWS\System32\initdebug.nfo
[2010.02.26 18:47:55 | 000,000,047 | ---- | C] () -- C:\WINDOWS\DIDAKTA.INI
[2010.01.19 19:58:16 | 000,000,218 | ---- | C] () -- C:\Documents and Settings\Milan\.recently-used.xbel
[2010.01.18 14:54:12 | 000,120,200 | ---- | C] () -- C:\WINDOWS\System32\DLLDEV32i.dll
[2010.01.17 18:26:02 | 000,009,728 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2009.12.24 21:09:20 | 000,000,111 | ---- | C] () -- C:\WINDOWS\posta2.ini
[2009.11.19 14:43:07 | 000,008,843 | ---- | C] () -- C:\WINDOWS\System32\drivers\HOTKEY.sys
[2009.11.19 14:43:07 | 000,002,920 | ---- | C] () -- C:\WINDOWS\System32\drivers\WBUTTON.sys
[2009.11.17 21:13:00 | 000,000,138 | ---- | C] () -- C:\WINDOWS\thtitanc.INI
[2009.11.10 20:26:50 | 000,000,005 | ---- | C] () -- C:\Program Files\trl.trl
[2009.10.26 13:18:58 | 000,000,059 | ---- | C] () -- C:\WINDOWS\webgen.ini
[2009.10.26 13:16:10 | 000,000,029 | ---- | C] () -- C:\WINDOWS\winbase.ini
[2009.09.28 18:59:32 | 000,000,036 | ---- | C] () -- C:\WINDOWS\CONTEXT.INI
[2009.09.28 18:11:34 | 000,721,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009.08.23 15:37:20 | 000,819,200 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009.08.23 15:37:19 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009.08.07 22:12:06 | 000,007,168 | ---- | C] () -- C:\Documents and Settings\Milan\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.08.01 14:08:05 | 000,000,142 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009.08.01 14:02:12 | 000,002,856 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2009.08.01 13:52:45 | 000,002,237 | ---- | C] () -- C:\WINDOWS\WINCMD.INI
[2009.08.01 13:49:29 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\SynTPCoI.dll
[2009.08.01 13:38:26 | 000,001,024 | -H-- | C] () -- C:\Documents and Settings\Milan\ntuser.dat.LOG
[2009.08.01 13:38:26 | 000,000,178 | -HS- | C] () -- C:\Documents and Settings\Milan\ntuser.ini
[2009.08.01 13:38:25 | 003,407,872 | -H-- | C] () -- C:\Documents and Settings\Milan\NTUSER.DAT
[2001.10.25 14:00:00 | 000,004,224 | ---- | C] () -- C:\WINDOWS\System32\drivers\beep.sys
[1996.04.03 21:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys

========== Alternate Data Streams ==========

@Alternate Data Stream - 176 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:0A8E2C33
@Alternate Data Stream - 152 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:9F5DDD64
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:DCE70D73
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:97FD1923
< End of report >

OTL Extras logfile created on: 9.4.2010 20:36:14 - Run 1
OTL by OldTimer - Version 3.2.1.1 Folder = c:\Dowl
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

758,00 Mb Total Physical Memory | 304,00 Mb Available Physical Memory | 40,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 78,00% Paging File free
Paging file location(s): C:\pagefile.sys 1140 2280 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 10,09 Gb Free Space | 13,54% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MILOUS
Current User Name: Milan
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\WINDOWS\system32\CNAB4RPK.EXE" = C:\WINDOWS\system32\CNAB4RPK.EXE:*:Enabled:Canon LBP2900 RPC Server Process -- (CANON INC.)
"C:\totalcmd\TOTALCMD.EXE" = C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows -- (C. Ghisler & Co.)
"C:\Program Files\ICQ6.5\ICQ.exe" = C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"C:\Dowl\Adobe Acrobat\P._Foxit_PDF_Editor_by_yd.exe" = C:\Dowl\Adobe Acrobat\P._Foxit_PDF_Editor_by_yd.exe:*:Enabled:Foxit PDF Editor, the first REAL editor for PDF files! -- (Foxit Software Company)
"C:\Documents and Settings\Milan\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe" = C:\Documents and Settings\Milan\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome -- (Google Inc.)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{23E797E9-F852-4AEA-93F0-772ED2B9D9F9}" = OpenOffice.org 3.1
"{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java(TM) 6 Update 15
"{29D52AA0-F621-4ED8-8F65-A1BEA7B112E3}" = 602SQL 8.1
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{6FA1D6BE-12DF-4C6F-98F5-A2EFFB9893E3}" = ESET NOD32 Antivirus
"{7FE1B36E-A269-451D-85F4-43FBC63778F3}" = 602XML Filler
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Extreme Graphics 2 Driver
"{8B3E5A90-1F6E-4FAF-B84F-C306C8A80809}" = AeroFly Professional Deluxe
"{98478D17-E992-4CBC-AB20-0436B98C38D4}" = USB GPRS / WLAN dongle
"{D0846526-66DD-4DC9-A02C-98F9A2806812}" = Launch Manager V1.0.8
"{F58E04CD-6E76-43C8-AAF1-482225C2910E}" = Xml Viewer
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop CS4_is1" = Adobe Photoshop CS4
"Agere Systems Soft Modem" = Agere Systems AC'97 Modem
"Aleo Flash Intro Banner Maker_is1" = Aleo Flash Intro Banner Maker 2.8.111
"Amara - Flash Slide Show Builder" = Amara - Flash Slide Show Builder
"BSPlayer1" = BSPlayer
"Canon LBP2900" = Canon LBP2900
"CCleaner" = CCleaner (remove only)
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"DHTML News Ticker Wizard" = DHTML News Ticker Wizard 1.0
"DUN1" = Domácí učitel němčiny 1 (odstranění)
"ESE Hidden Directory_is1" = ESE Hidden Directory 1.2B
"Foxit Reader" = Foxit Reader
"HijackThis" = HijackThis 2.0.2
"ie8" = Windows Internet Explorer 8
"Mozilla Firefox (3.5.3)" = Mozilla Firefox (3.5.3)
"Mozilla Thunderbird (2.0.0.18)" = Mozilla Thunderbird (2.0.0.18)
"Nero - Burning Rom!UninstallKey" = Nero OEM
"SpeedFan" = SpeedFan (remove only)
"ST6UNST #1" = Didakta - Němčina 1
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"szn-software-postak" = Seznam Pošťák 2 (Všichni uživatelé tohoto počítače.)
"WinRAR archiver" = WinRAR
"Xenofex2" = Alien Skin Xenofex 2
"Xvid_is1" = Xvid 1.2.2 final uninstall
"ZonerPhotoStudio10_CZ_is1" = Zoner Photo Studio 10

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2.3.2010 4:05:52 | Computer Name = MILOUS | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 2.3.2010 17:34:48 | Computer Name = MILOUS | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 2.3.2010 19:07:12 | Computer Name = MILOUS | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 3.3.2010 2:40:06 | Computer Name = MILOUS | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 3.3.2010 9:10:30 | Computer Name = MILOUS | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 3.3.2010 10:18:12 | Computer Name = MILOUS | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 3.3.2010 12:24:03 | Computer Name = MILOUS | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 3.3.2010 12:45:33 | Computer Name = MILOUS | Source = crypt32 | ID = 131080
Description = Načtení automatické aktualizace pořadového čísla kořenového seznamu
jiného výrobce z: <http://www.download.windowsupdate.com/m ... ootseq.txt>
se nezdařilo. Chyba: Daná operace se vrátila, protože vypršel časový limit.

Error - 3.3.2010 13:42:59 | Computer Name = MILOUS | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 3.3.2010 15:22:49 | Computer Name = MILOUS | Source = Lavasoft Ad-Aware Service | ID = 0
Description =

[ System Events ]
Error - 1.4.2010 3:46:59 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 2.4.2010 2:40:52 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 3.4.2010 3:12:51 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 5.4.2010 3:06:06 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 6.4.2010 2:47:15 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 7.4.2010 3:08:48 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 8.4.2010 2:28:01 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 9.4.2010 2:12:29 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 9.4.2010 13:11:48 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 9.4.2010 14:09:50 | Computer Name = MILOUS | Source = Service Control Manager | ID = 7000
Description = Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku
následující chyby: %%2

< End of report >

Spusťte OTL a do spodního okna vložte následující skript.

Kód: Vybrat vše

:OTL
PRC - [2010.04.09 19:03:36 | 000,046,592 | ---- | M] ( ) -- C:\Documents and Settings\Milan\Local Settings\temp\ie4d.exe
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {35065594-9169-4A34-B167-FC4865038E53} - No CLSID value found.
[2010.04.09 19:02:55 | 000,000,000 | -HSD | C] -- C:\WINDOWS\System32\lowsec
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
@Alternate Data Stream - 176 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:0A8E2C33
@Alternate Data Stream - 152 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:9F5DDD64
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:DCE70D73
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:97FD1923

:Files
C:\WINDOWS\system32\sdra64.exe 
C:\Documents and Settings\Milan\Local Settings\temp

:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\WINDOWS\system32\userinit.exe"
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"k41g"=-

:Commands
[PURITY] 
[EMPTYTEMP] 
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
[CREATERESTOREPOINT]
[REBOOT]

Poté klikněte na Opravit, PC se restartuje, log vložte sem.

Obrázek

Tohle otestujte na http://www.virustotal.com/cs/
C:\WINDOWS\system32\drivers\beep.sys

(Soubor nehledejte, jenom vložíte tučně označenou cestu, v případě hlášky "Soubor již byl testován" dejte otestovat znovu. Výsledek analýzy sem v podobě odkazu vložte.)

All processes killed
========== OTL ==========
No active process named ie4d.exe was found!
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{35065594-9169-4A34-B167-FC4865038E53} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{35065594-9169-4A34-B167-FC4865038E53}\ not found.
Folder move failed. C:\WINDOWS\System32\lowsec scheduled to be moved on reboot.
C:\WINDOWS\msdownld.tmp folder deleted successfully.
C:\WINDOWS\SET3.tmp deleted successfully.
C:\WINDOWS\SET4.tmp deleted successfully.
C:\WINDOWS\SET8.tmp deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\crysetup.exe deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\custom.ini deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\cwautil.sys deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\CWAWDM.CAT deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\cwawdm.inf deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\cwawdm.sys deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\data1.cab deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\data1.hdr deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\data2.cab deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\engine32.cab deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\layout.bin deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.boot deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.exe deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.ini deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.inx deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.iss deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\SETUP1.DLL deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp\Setup2.dll deleted successfully.
C:\fsc.tmp\sound\crystal_sound_ac97_v6_13_10_6109_wxp folder deleted successfully.
C:\fsc.tmp\sound folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\US\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\US\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\US\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\US\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\US folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TH\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TH\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TH\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TH\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TH folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TC\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TC\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TC\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TC\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\TC folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\Source\synaptics_touchpad_v7_5_5_0_wxp.exe deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\Source folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SE\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SE\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SE\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SE\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SE folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SC\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SC\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SC\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SC\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SC folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NO\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NO\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NO\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NO\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NO folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NL\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NL\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NL\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NL\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NL folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\LS\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\LS\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\LS\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\LS\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\LS folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\KR\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\KR\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\KR\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\KR\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\KR folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\JP\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\JP\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\JP\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\JP\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\JP folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\IT\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\IT\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\IT\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\IT\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\IT folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\GR\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\GR\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\GR\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\GR\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\GR folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FR\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FR\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FR\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FR\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FR folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FI\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FI\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FI\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FI\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FI folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\DK\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\DK\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\DK\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\DK\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\DK folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\BP\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\BP\SynTP.chm deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\BP\SynTP.cnt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\BP\SynTP.hlp deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\BP folder deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\data1.cab deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\data1.hdr deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\data2.cab deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\DriverLanguageMap.xml deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\ikernel.ex_ deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\InstNT.exe deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\layout.bin deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\NewUI.ini deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\ReadMe.txt deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\Setup.exe deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\Setup.ini deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\setup.inx deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\setup.iss deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynCntxt.rtf deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynCOM.dll deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynCtrl.dll deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynHid.inf deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynISDLL.dll deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynMood.exe deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTP.cat deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTP.inf deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTP.ini deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTP.sys deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTPAPI.dll deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTPCoI.dll deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTPCOM.dll deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTPCpl.dll deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTPEnh.exe deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTPEnh.ini deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTPFcs.dll deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynTPLpr.exe deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynUnst.ini deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\SynZMetr.exe deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\Tutorial.exe deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp\W_DisMUX.ini deleted successfully.
C:\fsc.tmp\driver\touchpad\synaptics_touchpad_v7_5_5_0_wxp folder deleted successfully.
C:\fsc.tmp\driver\touchpad folder deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\WBMS.INF deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\WBMS.SYS deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\WBMSICON.ICO deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\wbmsxp.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\WBSCR.INF deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\wbscr.sys deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\wbscrxp.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\WBSD.INF deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\wbsd.sys deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\WBSDICON.ICO deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp\wbsdxp.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinXp folder deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbms.inf deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbms.pdr deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbmsicon.ico deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbmsme.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\WBSCR.INF deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\WBSCR.SYS deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbscrme.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbsd.inf deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbsd.pdr deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbsdicon.ico deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe\wbsdme.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\WinMe folder deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\wbms.inf deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\wbms.pdr deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\wbmsicon.ico deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\WBSCR.INF deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\WBSCR.SYS deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\wbscrme.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\wbsd.inf deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\wbsd.pdr deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98\wbsdicon.ico deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win98 folder deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\WBMS.INF deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\wbms.sys deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\wbms2k.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\WBMSICON.ICO deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\WBSCR.INF deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\wbscr.sys deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\wbscr2k.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\wbsd.inf deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\wbsd.sys deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\wbsd2k.cat deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K\wbsdicon.ico deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Win2K folder deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Source\winbond_storage_sc_mmc_v2_0_2002_1107_wxp.exe deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Source folder deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\data1.cab deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\data1.hdr deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\data2.cab deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\ikernel.ex_ deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\layout.bin deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\RemoveHW.dll deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Setup.bmp deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Setup.exe deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Setup.ini deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\Setup.inx deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\setup.iss deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\SmartIODLL.dll deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\UpdateDriverForPnP.dll deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp\_Isuser.dll deleted successfully.
C:\fsc.tmp\driver\storage\winbond_storage_sc_mmc_v2_0_2002_1107_wxp folder deleted successfully.
C:\fsc.tmp\driver\storage folder deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\Source\crystal_sound_ac97_v6_13_10_6109_wxp.exe deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\Source folder deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\crysetup.exe deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\custom.ini deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\cwautil.sys deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\CWAWDM.CAT deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\cwawdm.inf deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\cwawdm.sys deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\data1.cab deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\data1.hdr deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\data2.cab deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\engine32.cab deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\layout.bin deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.boot deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.exe deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.ini deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.inx deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\setup.iss deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\SETUP1.DLL deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp\Setup2.dll deleted successfully.
C:\fsc.tmp\driver\sound\crystal_sound_ac97_v6_13_10_6109_wxp folder deleted successfully.
C:\fsc.tmp\driver\sound folder deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\Source\intel_wlan_2200_v8_0_12_20000_wxp.exe deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\Source folder deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\SetupWLD.EXE deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\SetupWLD.INI deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\W22MLRES.DLL deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\W22n51.cat deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\w22n51.INF deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\w22n51.sys deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\W22NCPA.DLL deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp\WLDMLRES.DLL deleted successfully.
C:\fsc.tmp\driver\network\intel_wlan_2200_v8_0_12_20000_wxp folder deleted successfully.
C:\fsc.tmp\driver\network\broadcom_lan_v3_51_0_0_wxp\Source\broadcom_lan_v3_51_0_0_wxp.exe deleted successfully.
C:\fsc.tmp\driver\network\broadcom_lan_v3_51_0_0_wxp\Source folder deleted successfully.
C:\fsc.tmp\driver\network\broadcom_lan_v3_51_0_0_wxp\BCM4SBXP.CAT deleted successfully.
C:\fsc.tmp\driver\network\broadcom_lan_v3_51_0_0_wxp\BCM4SBXP.INF deleted successfully.
C:\fsc.tmp\driver\network\broadcom_lan_v3_51_0_0_wxp\BCM4SBXP.SYS deleted successfully.
C:\fsc.tmp\driver\network\broadcom_lan_v3_51_0_0_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\network\broadcom_lan_v3_51_0_0_wxp folder deleted successfully.
C:\fsc.tmp\driver\network folder deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\Source\agere_modem_ac97_v2_1_25_0_wxp.exe deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\Source folder deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\AGRMDwxp.cat deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\AGRMDwxp.inf deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\AGRSM.sys deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\agrsmdel.exe deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\AGRSMhom.exe deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\AGRSMMsg.exe deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\AGSETUP.INI deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\agsetup1.dll deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\agsetup2.dll deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\hom1033.ini deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\LtMoh.exe deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\LTMOH.INI deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\mohapi.dll deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\mohhelp.chm deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp\setup.exe deleted successfully.
C:\fsc.tmp\driver\modem\agere_modem_ac97_v2_1_25_0_wxp folder deleted successfully.
C:\fsc.tmp\driver\modem folder deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a302.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a302.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a302.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a303.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a303.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a303.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a304.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a304.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a304.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a305.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a305.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a305.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a306.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a306.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a306.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a307.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a307.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a307.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a308.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a308.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a308.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a309.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a309.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a309.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a310.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a310.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a310.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a311.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a311.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a311.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a313.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a313.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a313.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a314.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a314.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\a314.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\hccutils.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\hkcmd.exe deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\i830mnt5.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmcoin.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmdd5.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmdev5.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmdnt5.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmgdev.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmgicd.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmkchw.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmnt5.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmnt5.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmrem.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmrnt5.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ialmsbw.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxcfg.exe deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxcpl.cpl deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxdev.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxdgps.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxdiag.exe deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxdo.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxeud.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxexps.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxext.exe deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhara.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxharb.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhchs.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhcht.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhcsy.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhdan.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhdeu.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhell.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxheng.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhenu.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhesp.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhfin.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhfra.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhfrc.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhheb.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhhun.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhita.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhjpn.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhk.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhkor.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhnld.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhnor.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhplk.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhptb.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhptg.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhrus.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhsve.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhtha.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxhtrk.lhp deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxpph.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrara.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrarb.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrchs.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrcht.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrcsy.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrdan.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrdeu.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrell.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxreng.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrenu.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxresp.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxress.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrfin.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrfra.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrfrc.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrheb.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrhun.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrita.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrjpn.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrkor.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrnld.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrnor.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrplk.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrptb.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrptg.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrrus.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrsve.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrtha.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxrtrk.lrc deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxsrvc.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\igfxtray.exe deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ikch8xx.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\ikch8xx.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\isb8xx.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\isb8xx.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\oemdspif.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\vch.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\Vch.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\Vch.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\wa301a.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\wa301a.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\wa301a.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\wa301b.cat deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\wa301b.inf deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000\wa301b.sys deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Win2000 folder deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Support\shpshftr.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Support\SignTime.dll deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Support folder deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Source\intel_video_8285x_g_gme_v6_13_10_3514_wxp.exe deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Source folder deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\data1.cab deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\data1.hdr deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\data2.cab deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\ikernel.ex_ deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Install.cfg deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\layout.bin deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Setup.exe deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\Setup.ini deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\setup.inx deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp\setup.iss deleted successfully.
C:\fsc.tmp\driver\display\intel_video_8285x_g_gme_v6_13_10_3514_wxp folder deleted successfully.
C:\fsc.tmp\driver\display folder deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\815.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\830.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\845.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\845g.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\850.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\850860.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\852.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\855.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\860.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\e727505.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\E7500.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2aud.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2br.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2brm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2corm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2idem.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2smb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich2usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich3core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich3corm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich3ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich3idem.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich3smb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich3usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich4core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich4ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\ich4usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\p64h2.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp\usb2ndrv.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\xp folder deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\830.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\845.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\845g.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\850.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\850860.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\852.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\855.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\860.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\e727505.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich2corm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich3core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich3corm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich3ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich3idem.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich3smb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich3usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich4core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich4ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\ich4usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\p64h2.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme\usb2ndrv.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\winme folder deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\810.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\815.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\820.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\830.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\840.CAT deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\845.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\845G.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\850.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\850860.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\852.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\855.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\860.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\e727505.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich2core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich2corm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich2ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich2idem.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich2smb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich2usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich3core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich3corm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich3ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich3idem.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich3smb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich3usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich4core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich4ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ich4usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\ichxsmb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\IFWH.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\P64H.CAT deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\p64h2.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\P64HRES.CAT deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se\usb2ndrv.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win98se folder deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\815.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\830.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\845.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\845g.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\850.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\850860.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\852.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\855.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\860.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\e727505.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\E7500.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2aud.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2br.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2brm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2corm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2idem.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2smb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich2usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich3core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich3corm.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich3ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich3idem.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich3smb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich3usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich4core.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich4ide.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich4idem.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\ich4usb.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\p64h2.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000\usb2ndrv.cat deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\win2000 folder deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\SW1\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\SW1\IRSC.exe deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\SW1 folder deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\Source\intel_chipset_8285x_g_gme_v4_30_1006_wxp.exe deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\Source folder deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\CP1\ir_supplement_v1_02_wxp.exe deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\CP1 folder deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\data1.cab deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\data1.hdr deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\data2.cab deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\devlist.ini deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\FSC_Readme.txt deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\ikernel.ex_ deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\infupd.bmp deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\layout.bin deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\readme.txt deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\Setup.exe deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\Setup.ini deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\setup.inx deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp\setup.iss deleted successfully.
C:\fsc.tmp\driver\chipset\intel_chipset_8285x_g_gme_v4_30_1006_wxp folder deleted successfully.
C:\fsc.tmp\driver\chipset folder deleted successfully.
C:\fsc.tmp\driver folder deleted successfully.
C:\fsc.tmp folder deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:0A8E2C33 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:9F5DDD64 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:DCE70D73 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:97FD1923 deleted successfully.

========== FILES ==========
File move failed. C:\WINDOWS\system32\sdra64.exe scheduled to be moved on reboot.
C:\Documents and Settings\Milan\Local Settings\temp\sznpkg folder moved successfully.
C:\Documents and Settings\Milan\Local Settings\temp\plugtmp folder moved successfully.
C:\Documents and Settings\Milan\Local Settings\temp\hsperfdata_Milan folder moved successfully.
C:\Documents and Settings\Milan\Local Settings\temp\.jpf-shadow folder moved successfully.
C:\Documents and Settings\Milan\Local Settings\temp folder moved successfully.
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\"Userinit"|"C:\WINDOWS\system32\userinit.exe" /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\\k41g deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Milan
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 3836917 bytes
->Java cache emptied: 90977 bytes
->FireFox cache emptied: 122812285 bytes
->Google Chrome cache emptied: 140982249 bytes
->Flash cache emptied: 564 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 109666 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 4262493892 bytes

Total Files Cleaned = 4 321,00 mb

[EMPTYFLASH]

User: All Users

User: Default User

User: LocalService

User: Milan
->Flash cache emptied: 0 bytes

User: NetworkService

Total Flash Files Cleaned = 0,00 mb

Restore points cleared and new OTL Restore Point set!
Error starting restore point: System Restore is disabled.
Error closing restore point: System Restore is disabled.

OTL by OldTimer - Version 3.2.1.1 log created on 04092010_210631

Files\Folders moved on Reboot...
Folder move failed. C:\WINDOWS\System32\lowsec scheduled to be moved on reboot.
File move failed. C:\WINDOWS\system32\sdra64.exe scheduled to be moved on reboot.

Registry entries deleted on Reboot...

http://www.virustotal.com/cs/analisis/7 ... 1270840390

Stáhněte a uložte, nejlépe na plochu http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypněte všechny rezidentní bezpečnostní programy - firewally, antiviry, antispywary
Spusťte aplikaci pod účtem s oprávněním Administrátora (Správce), ihned po startu se zobrazí stránka s licenčními podmínkami, pokračujte stisknutím tlačítka "Ano"
Dále postupujte dle pokynů, během scanu nespouštějte jiné aplikace a neklikejte do zobrazujícího se okna
Scan by měl trvat okolo 5 - 10 minut, po dokončení Combofix zobrazí log C:\ComboFix.txt , který sem vložte.
Během skenování může být počítač restartován.

ComboFix 10-04-08.06 - Milan 09.04.2010 21:33:38.3.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.758.416 [GMT 2:00]
Spuštěný z: c:\dowl\Antivir-HIJACK\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Vytvořen nový Bod Obnovení
* Rezidentní štít AV je zapnutý

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\lowsec
c:\windows\system32\lowsec\local.ds
c:\windows\system32\lowsec\user.ds

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-03-09 do 2010-04-09 )))))))))))))))))))))))))))))))
.

2010-04-09 19:06 . 2010-04-09 19:06 -------- d-----w- C:\_OTL
2010-04-09 18:18 . 2010-04-09 18:19 -------- d-----w- c:\program files\trend micro
2010-04-09 18:18 . 2010-04-09 18:19 -------- d-----w- C:\rsit
2010-04-09 18:10 . 2010-04-09 18:10 -------- d-----w- c:\program files\ESET
2010-04-09 17:09 . 2010-04-09 17:09 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2010-04-09 17:03 . 2010-04-09 17:03 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2010-04-07 18:37 . 2010-04-07 19:25 -------- d-----w- c:\program files\Seznam.cz
2010-03-27 13:25 . 2010-03-27 13:25 -------- d-sh--w- c:\documents and settings\Milan\PrivacIE
2010-03-27 13:25 . 2010-03-27 13:25 -------- d-sh--w- c:\documents and settings\Milan\IETldCache
2010-03-27 13:18 . 2010-03-27 13:19 -------- dc-h--w- c:\windows\ie8
2010-03-26 12:40 . 2010-03-26 12:40 -------- d-----w- c:\program files\Xenocode
2010-03-17 12:44 . 2001-10-24 11:25 5632 ----a-w- c:\windows\system32\ptpusb.dll
2010-03-17 12:44 . 2008-04-14 07:51 159232 ----a-w- c:\windows\system32\ptpusd.dll
2010-03-17 12:44 . 2008-04-13 23:15 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2010-03-17 12:44 . 2008-04-13 23:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-09 19:22 . 2009-08-01 11:54 -------- d-----w- c:\program files\Mozilla Thunderbird
2010-04-09 15:01 . 2009-12-20 12:54 -------- d-----w- c:\program files\Trell2010
2010-04-09 15:01 . 2009-11-10 18:26 5 ----a-w- c:\program files\trl.trl
2010-04-07 17:17 . 2009-08-01 12:35 -------- d-----w- c:\program files\Advanced SystemCare 3
2010-04-04 18:59 . 2009-08-01 11:57 -------- d-----w- c:\program files\Trell
2010-03-29 22:37 . 2001-10-25 12:00 61600 ----a-w- c:\windows\system32\perfc005.dat
2010-03-29 22:37 . 2001-10-25 12:00 339078 ----a-w- c:\windows\system32\perfh005.dat
2010-03-22 23:04 . 2010-01-20 23:44 -------- d-----w- c:\program files\Amara - Flash Slide Show Builder
2010-03-09 13:32 . 2009-08-01 12:32 -------- d-----w- c:\program files\HE32
2010-03-03 22:25 . 2010-03-03 22:25 -------- d-----w- c:\program files\Common Files\Alhademic Group
2010-03-03 21:11 . 2010-03-03 19:21 -------- d-----w- c:\program files\Lavasoft
2010-03-03 19:23 . 2010-03-03 19:23 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-03-03 19:23 . 2010-03-03 19:45 15880 ----a-w- c:\windows\system32\lsdelete.exe
2010-02-26 16:47 . 2010-02-26 16:47 253952 ------w- c:\windows\Setup1.exe
2010-02-26 16:47 . 2010-02-26 16:47 73728 ----a-w- c:\windows\ST6UNST.EXE
2010-02-26 12:43 . 2010-02-26 12:43 -------- d-----w- c:\program files\Webteh
2010-02-20 14:44 . 2010-02-20 08:09 -------- d-----w- c:\program files\Trell2010-zaloha20_2_2010
2010-02-12 10:30 . 2009-09-09 17:26 -------- d-----w- c:\program files\Microsoft Silverlight
2010-02-11 17:44 . 2009-08-01 12:07 -------- d-----w- c:\program files\Atreides700
2010-02-04 15:53 . 2010-03-03 19:23 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-01-25 16:41 . 2010-01-25 16:41 0 ----a-w- C:\pxplay.exe
2010-01-25 16:41 . 2010-01-25 16:41 0 ----a-w- C:\pxdown.exe
2010-01-22 09:53 . 2009-09-28 16:41 266 ---h--r- c:\windows\system32\ttri.dat
.

------- Sigcheck -------

[7] 2001-10-25 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys
[-] 2001-10-25 12:00 . F8729F4E4926DC3A668F821CE26EBE50 . 4224 . . [------] . . c:\windows\system32\drivers\beep.sys
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2003-04-24 110592]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2003-04-24 610304]
"LaunchAp"="c:\program files\Launch Manager\LaunchAp.exe" [2002-12-02 32768]
"HotkeyApp"="c:\program files\Launch Manager\HotkeyApp.exe" [2003-01-09 57418]
"CtrlVol"="c:\program files\Launch Manager\CtrlVol.exe" [2002-10-23 163840]
"Wbutton"="c:\program files\Launch Manager\Wbutton.exe" [2003-01-09 53248]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-05-14 2029640]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^Milan^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
backup=c:\windows\pss\OpenOffice.org 3.1.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 3]
2009-04-27 13:12 2329936 ----a-w- c:\program files\Advanced SystemCare 3\AWC.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG]
2003-02-14 08:59 88107 ----a-w- c:\windows\AGRSMMSG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2009-08-01 12:14 133104 ----atw- c:\documents and settings\Milan\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
2001-07-09 09:50 155648 ----a-r- c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WLAN Monitor]
2004-05-12 10:42 2359296 ----a-w- c:\program files\GPRS WLAN dongle\Wlan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\CNAB4RPK.EXE"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Dowl\\Adobe Acrobat\\P._Foxit_PDF_Editor_by_yd.exe"=

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [3.3.2010 21:23 64288]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [14.5.2009 15:47 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [14.5.2009 15:49 94360]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [14.5.2009 15:47 731840]
R3 WBMS;Winbond Memory Stick Storage (MS) Device Driver;c:\windows\system32\drivers\wbms.sys [1.8.2009 13:42 30208]
R3 WBSD;Winbond Secure Digital Storage (SD/MMC) Device Driver;c:\windows\system32\drivers\wbsd.sys [1.8.2009 13:42 25600]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [28.9.2009 18:11 721904]
S1 mailKmd;mailKmd; [x]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;"c:\program files\Lavasoft\Ad-Aware\AAWService.exe" --> c:\program files\Lavasoft\Ad-Aware\AAWService.exe [?]
S3 602SQL 8 FastCGI Client;602SQL 8 FastCGI Client;c:\program files\webgencz\602FSVC8.EXE --> c:\program files\webgencz\602FSVC8.EXE [?]
S3 PPJoyBus;Parallel Port Joystick Bus device driver;c:\windows\system32\drivers\PPJoyBus.sys [8.8.2002 17:27 11330]
S3 Scfilter;Scfilter;c:\windows\system32\drivers\scfilter.sys [6.11.2009 11:22 26485]
S3 SOLOMONFastUSB(R);SOLOMON FastUSB(R) Service for SOLOMON Scwi211b USB Wireless Lan;c:\windows\system32\drivers\scwi211bx.sys [6.11.2009 11:22 122496]
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
uInternet Connection Wizard,ShellNext = hxxp://www.flashget.com/index_en.htm
FF - ProfilePath - c:\documents and settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\b6kdebhf.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - plugin: c:\program files\Mozilla Firefox\plugins\npfiller.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll

---- NASTAVENÍ FIREFOXU ----
FF - user.js: browser.cache.memory.capacity - 16000
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - fales
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 750000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 750000
FF - user.js: dom.disable_window_status_change - true
FF - user.js: network.http.max-connections - 32
FF - user.js: network.http.max-connections-per-server - 8
FF - user.js: network.http.max-persistent-connections-per-proxy - 8
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 750
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

MSConfigStartUp-Skype - c:\program files\Skype\Phone\Skype.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-09 21:41
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe catchme.sys CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x82D56AC8]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xf776ef28
\Driver\ACPI -> ACPI.sys @ 0xf76c1cb8
\Driver\atapi -> atapi.sys @ 0xf7635852
IoDeviceObjectType -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0598
ParseProcedure -> ntoskrnl.exe @ 0x8056ea15
\Device\Harddisk0\DR0 -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0598
ParseProcedure -> ntoskrnl.exe @ 0x8056ea15
NDIS: Intel(R) PRO/Wireless 2200BG Network Connection -> SendCompleteHandler -> NDIS.sys @ 0xf7541bb0
PacketIndicateHandler -> NDIS.sys @ 0xf7530a0d
SendHandler -> NDIS.sys @ 0xf7544b40
user & kernel MBR OK

**************************************************************************
.
Celkový čas: 2010-04-09 21:45:59
ComboFix-quarantined-files.txt 2010-04-09 19:45

Před spuštěním: Volných bajtů: 17 148 157 952
Po spuštění: Volných bajtů: 17 116 278 784

- - End Of File - - 66FE0FC27FC106B2071AC0453F329311

Pokud nemáte, přesuňte Combofix na plochu

Otevřete si Poznámkový blok a zkopírujte do něj text z bílého okénka.

Kód: Vybrat vše

FCopy::
c:\windows\system32\dllcache\beep.sys | c:\windows\system32\drivers\beep.sys

Uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
Po uložení uchopte vámi vytvořený skript levým myšítkem a přesuňte ho nad ikonu Combofixu, kde ho upustíte:
Po aplikaci na Vás vypadne další log,vložte ho sem

Může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

Obrázek

Doporučuji odinstalovat Advanced SystemCare 3.

ComboFix 10-04-08.06 - Milan 09.04.2010 22:02:11.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.758.316 [GMT 2:00]
Spuštěný z: c:\dowl\Antivir-HIJACK\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Milan\Plocha\CFScript.txt
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Vytvořen nový Bod Obnovení

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
--------------- FCopy ---------------

c:\windows\system32\dllcache\beep.sys --> c:\windows\system32\drivers\beep.sys
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-03-09 do 2010-04-09 )))))))))))))))))))))))))))))))
.

2010-04-09 19:06 . 2010-04-09 19:06 -------- d-----w- C:\_OTL
2010-04-09 18:18 . 2010-04-09 18:19 -------- d-----w- c:\program files\trend micro
2010-04-09 18:18 . 2010-04-09 18:19 -------- d-----w- C:\rsit
2010-04-09 18:10 . 2010-04-09 18:10 -------- d-----w- c:\program files\ESET
2010-04-09 17:09 . 2010-04-09 17:09 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2010-04-09 17:03 . 2010-04-09 17:03 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2010-04-07 18:37 . 2010-04-07 19:25 -------- d-----w- c:\program files\Seznam.cz
2010-03-27 13:25 . 2010-03-27 13:25 -------- d-sh--w- c:\documents and settings\Milan\PrivacIE
2010-03-27 13:25 . 2010-03-27 13:25 -------- d-sh--w- c:\documents and settings\Milan\IETldCache
2010-03-27 13:18 . 2010-03-27 13:19 -------- dc-h--w- c:\windows\ie8
2010-03-26 12:40 . 2010-03-26 12:40 -------- d-----w- c:\program files\Xenocode
2010-03-17 12:44 . 2001-10-24 11:25 5632 ----a-w- c:\windows\system32\ptpusb.dll
2010-03-17 12:44 . 2008-04-14 07:51 159232 ----a-w- c:\windows\system32\ptpusd.dll
2010-03-17 12:44 . 2008-04-13 23:15 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2010-03-17 12:44 . 2008-04-13 23:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-09 19:50 . 2009-08-01 11:54 -------- d-----w- c:\program files\Mozilla Thunderbird
2010-04-09 15:01 . 2009-12-20 12:54 -------- d-----w- c:\program files\Trell2010
2010-04-09 15:01 . 2009-11-10 18:26 5 ----a-w- c:\program files\trl.trl
2010-04-07 17:17 . 2009-08-01 12:35 -------- d-----w- c:\program files\Advanced SystemCare 3
2010-04-04 18:59 . 2009-08-01 11:57 -------- d-----w- c:\program files\Trell
2010-03-29 22:37 . 2001-10-25 12:00 61600 ----a-w- c:\windows\system32\perfc005.dat
2010-03-29 22:37 . 2001-10-25 12:00 339078 ----a-w- c:\windows\system32\perfh005.dat
2010-03-22 23:04 . 2010-01-20 23:44 -------- d-----w- c:\program files\Amara - Flash Slide Show Builder
2010-03-09 13:32 . 2009-08-01 12:32 -------- d-----w- c:\program files\HE32
2010-03-03 22:25 . 2010-03-03 22:25 -------- d-----w- c:\program files\Common Files\Alhademic Group
2010-03-03 21:11 . 2010-03-03 19:21 -------- d-----w- c:\program files\Lavasoft
2010-03-03 19:23 . 2010-03-03 19:23 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-03-03 19:23 . 2010-03-03 19:45 15880 ----a-w- c:\windows\system32\lsdelete.exe
2010-02-26 16:47 . 2010-02-26 16:47 253952 ------w- c:\windows\Setup1.exe
2010-02-26 16:47 . 2010-02-26 16:47 73728 ----a-w- c:\windows\ST6UNST.EXE
2010-02-26 12:43 . 2010-02-26 12:43 -------- d-----w- c:\program files\Webteh
2010-02-20 14:44 . 2010-02-20 08:09 -------- d-----w- c:\program files\Trell2010-zaloha20_2_2010
2010-02-12 10:30 . 2009-09-09 17:26 -------- d-----w- c:\program files\Microsoft Silverlight
2010-02-11 17:44 . 2009-08-01 12:07 -------- d-----w- c:\program files\Atreides700
2010-02-04 15:53 . 2010-03-03 19:23 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-01-25 16:41 . 2010-01-25 16:41 0 ----a-w- C:\pxplay.exe
2010-01-25 16:41 . 2010-01-25 16:41 0 ----a-w- C:\pxdown.exe
2010-01-22 09:53 . 2009-09-28 16:41 266 ---h--r- c:\windows\system32\ttri.dat
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2003-04-24 110592]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2003-04-24 610304]
"LaunchAp"="c:\program files\Launch Manager\LaunchAp.exe" [2002-12-02 32768]
"HotkeyApp"="c:\program files\Launch Manager\HotkeyApp.exe" [2003-01-09 57418]
"CtrlVol"="c:\program files\Launch Manager\CtrlVol.exe" [2002-10-23 163840]
"Wbutton"="c:\program files\Launch Manager\Wbutton.exe" [2003-01-09 53248]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-05-14 2029640]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^Milan^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.1.lnk]
backup=c:\windows\pss\OpenOffice.org 3.1.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 3]
2009-04-27 13:12 2329936 ----a-w- c:\program files\Advanced SystemCare 3\AWC.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG]
2003-02-14 08:59 88107 ----a-w- c:\windows\AGRSMMSG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2009-08-01 12:14 133104 ----atw- c:\documents and settings\Milan\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
2001-07-09 09:50 155648 ----a-r- c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WLAN Monitor]
2004-05-12 10:42 2359296 ----a-w- c:\program files\GPRS WLAN dongle\Wlan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\CNAB4RPK.EXE"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Dowl\\Adobe Acrobat\\P._Foxit_PDF_Editor_by_yd.exe"=

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [3.3.2010 21:23 64288]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [14.5.2009 15:47 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [14.5.2009 15:49 94360]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [14.5.2009 15:47 731840]
R3 WBMS;Winbond Memory Stick Storage (MS) Device Driver;c:\windows\system32\drivers\wbms.sys [1.8.2009 13:42 30208]
R3 WBSD;Winbond Secure Digital Storage (SD/MMC) Device Driver;c:\windows\system32\drivers\wbsd.sys [1.8.2009 13:42 25600]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [28.9.2009 18:11 721904]
S1 mailKmd;mailKmd; [x]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;"c:\program files\Lavasoft\Ad-Aware\AAWService.exe" --> c:\program files\Lavasoft\Ad-Aware\AAWService.exe [?]
S3 602SQL 8 FastCGI Client;602SQL 8 FastCGI Client;c:\program files\webgencz\602FSVC8.EXE --> c:\program files\webgencz\602FSVC8.EXE [?]
S3 PPJoyBus;Parallel Port Joystick Bus device driver;c:\windows\system32\drivers\PPJoyBus.sys [8.8.2002 17:27 11330]
S3 Scfilter;Scfilter;c:\windows\system32\drivers\scfilter.sys [6.11.2009 11:22 26485]
S3 SOLOMONFastUSB(R);SOLOMON FastUSB(R) Service for SOLOMON Scwi211b USB Wireless Lan;c:\windows\system32\drivers\scwi211bx.sys [6.11.2009 11:22 122496]
.
.
------- Doplňkový sken -------
.
uInternet Connection Wizard,ShellNext = hxxp://www.flashget.com/index_en.htm
FF - ProfilePath - c:\documents and settings\Milan\Data aplikací\Mozilla\Firefox\Profiles\b6kdebhf.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - plugin: c:\program files\Mozilla Firefox\plugins\npfiller.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll

---- NASTAVENÍ FIREFOXU ----
FF - user.js: browser.cache.memory.capacity - 16000
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - fales
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 750000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 750000
FF - user.js: dom.disable_window_status_change - true
FF - user.js: network.http.max-connections - 32
FF - user.js: network.http.max-connections-per-server - 8
FF - user.js: network.http.max-persistent-connections-per-proxy - 8
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 750
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-09 22:10
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe catchme.sys CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x82D56AC8]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xf776ef28
\Driver\ACPI -> ACPI.sys @ 0xf76c1cb8
\Driver\atapi -> atapi.sys @ 0xf7635852
IoDeviceObjectType -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0598
ParseProcedure -> ntoskrnl.exe @ 0x8056ea15
\Device\Harddisk0\DR0 -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0598
ParseProcedure -> ntoskrnl.exe @ 0x8056ea15
NDIS: Intel(R) PRO/Wireless 2200BG Network Connection -> SendCompleteHandler -> NDIS.sys @ 0xf7541bb0
PacketIndicateHandler -> NDIS.sys @ 0xf7530a0d
SendHandler -> NDIS.sys @ 0xf7544b40
user & kernel MBR OK

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(3212)
c:\windows\system32\webcheck.dll
c:\windows\system32\IEFRAME.dll
.
Celkový čas: 2010-04-09 22:14:25
ComboFix-quarantined-files.txt 2010-04-09 20:14
ComboFix2.txt 2010-04-09 19:46

Před spuštěním: Volných bajtů: 17 086 033 920
Po spuštění: Volných bajtů: 17 053 573 120

- - End Of File - - A1B84EA875C66B5072489955F00814E4

Odinstalujte všechny emulátory virtuálních mechanik.

Obrázek

Stáhněte SPTD http://www.duplexsecure.com/en/downloads

Vyberte verzi podle svého operačního systému (64 & 32b). Uložte na plochu a spusťte.
zvolte možnost Uninstall a restartujte PC.

Stáhněte a spusťte http://www.jpshortstuff.247fixes.com/Defogger.exe

Klikněte na "Disable" a restartujte PC.

Stáhněte MBR na plochu http://www2.gmer.net/mbr/mbr.exe

Obrázek

Start > Spustit (Win + R)

Vyskočí okénko, zkopírujte do něj:

Kód: Vybrat vše

"%userprofile%\plocha\mbr" -t

Klikněte na OK

Vytvoří se log s názvem mbr.log, vložte ho sem.

Caroprd111 píše: Odinstalujte všechny emulátory virtuálních mechanik.

Stáhněte SPTD http://www.duplexsecure.com/en/downloads
Vyberte verzi podle svého operačního systému (64 & 32b). Uložte na plochu a spusťte.

zvolte možnost Uninstall a restartujte PC.

Stáhněte a spusťte http://www.jpshortstuff.247fixes.com/Defogger.exe
Klikněte na "Disable" a restartujte PC.

Stáhněte MBR na plochu http://www2.gmer.net/mbr/mbr.exe

Start > Spustit (Win + R)

Vyskočí okénko, zkopírujte do něj:
Kód: Vybrat vše
"%userprofile%\plocha\mbr" -t
Klikněte na OK

Vytvoří se log s názvem mbr.log, vložte ho sem.

Virtuální mechanice se odinstalovat nějak nechce

Jak to myslíte

v polovině odinstalace skončí a dála nepokračuje

VIRY.CZ

Prosím o kontrolu logu

Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu