
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
neviem co s tym,prosim pomozte
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: neviem co s tym,prosim pomozte
Myslíte bránu firewall?
Poprosím o nový log ze rsitu.
Poprosím o nový log ze rsitu.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: neviem co s tym,prosim pomozte
Logfile of random's system information tool 1.08 (written by random/random)
Run by Administrator at 2011-05-04 09:35:40
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 2 GB (29%) free of 8 GB
Total RAM: 511 MB (30% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:37:27 , on 4.5.2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
D:\AVAST\AvastSvc.exe
D:\AVAST\avastUI.exe
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
E:\panda\Panda USB Vaccine\USBVaccine.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Administrator\Plocha\RSIT.exe
C:\Program Files\trend micro\Administrator.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://pobox.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\AVAST\aswWebRepIE.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\AVAST\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "D:\AVAST\avastUI.exe" /nogui
O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O20 - Winlogon Notify: !SASWinLogon - D:\SuperAntiSpywer\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - D:\AVAST\AvastSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
--
End of file - 3037 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\PandaUSBVaccine.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - D:\AVAST\aswWebRepIE.dll [2011-04-18 818280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - D:\AVAST\aswWebRepIE.dll [2011-04-18 818280]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast"=D:\AVAST\avastUI.exe [2011-04-18 3460784]
"ZoneAlarm Client"=D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2011-03-18 1043968]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
D:\SuperAntiSpywer\SASWINLO.DLL [2009-09-04 548352]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\WINDOWS\system32\ZoneLabs\vsmon.exe"="C:\WINDOWS\system32\ZoneLabs\vsmon.exe:*:Disabled:vsmon"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======List of files/folders created in the last 1 months======
2011-05-04 09:35:40 ----D---- C:\rsit
2011-05-04 09:30:31 ----A---- C:\TDSSKiller.2.5.0.0_04.05.2011_09.30.31_log.txt
2011-05-04 08:00:04 ----A---- C:\WINDOWS\ntbtlog.txt
2011-05-03 21:57:08 ----D---- C:\Documents and Settings\Administrator\Data aplikací\IDM
2011-05-03 18:46:05 ----SHD---- C:\RECYCLER
2011-05-03 18:32:46 ----D---- C:\WINDOWS\temp
2011-05-02 13:24:42 ----D---- C:\WINDOWS\system32\CatRoot2
2011-05-01 12:42:03 ----D---- C:\Downloads
2011-05-01 00:01:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Tools
2011-04-28 13:42:21 ----A---- C:\WINDOWS\system32\zlcommdb.dll
2011-04-28 13:42:21 ----A---- C:\WINDOWS\system32\zlcomm.dll
2011-04-28 13:42:04 ----A---- C:\WINDOWS\system32\vswmi.dll
2011-04-28 13:41:49 ----A---- C:\WINDOWS\system32\zpeng25.dll
2011-04-28 13:41:44 ----A---- C:\WINDOWS\system32\vsmonapi.dll
2011-04-28 13:40:20 ----A---- C:\WINDOWS\system32\vsinit.dll
2011-04-28 13:40:20 ----A---- C:\WINDOWS\system32\vsdata.dll
2011-04-28 13:40:19 ----A---- C:\WINDOWS\system32\vsutil.dll
2011-04-28 09:46:52 ----A---- C:\WINDOWS\system32\vsregexp.dll
2011-04-28 09:46:12 ----A---- C:\WINDOWS\system32\vsxml.dll
2011-04-28 09:46:10 ----A---- C:\WINDOWS\system32\vspubapi.dll
2011-04-28 09:46:06 ----A---- C:\WINDOWS\system32\vsdatant.sys
2011-04-27 15:12:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-04-27 13:59:38 ----N---- C:\WINDOWS\system32\drivers\aswNdis.sys
2011-04-27 13:58:56 ----D---- C:\Program Files\Alwil Software
2011-04-27 13:58:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2011-04-26 07:21:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\Babylon
2011-04-26 07:21:30 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Babylon
2011-04-25 18:27:17 ----D---- C:\Program Files\CheckPoint
2011-04-25 18:26:07 ----D---- C:\WINDOWS\system32\ZoneLabs
2011-04-25 18:11:53 ----HDC---- C:\WINDOWS\$NtUninstallKB943232$
2011-04-25 18:10:07 ----D---- C:\WINDOWS\Internet Logs
2011-04-25 17:55:44 ----A---- C:\Install.log.txt
2011-04-24 22:03:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2011-04-24 21:28:33 ----D---- C:\Program Files\QuickTime
2011-04-24 14:59:58 ----N---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-04-24 14:59:58 ----N---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-04-24 14:59:53 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-04-24 14:59:53 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2011-04-24 14:59:52 ----N---- C:\WINDOWS\system32\drivers\aswSnx.sys
2011-04-24 14:59:52 ----N---- C:\WINDOWS\system32\drivers\aswmon2.sys
2011-04-24 14:59:52 ----N---- C:\WINDOWS\system32\drivers\aswmon.sys
2011-04-24 14:59:51 ----N---- C:\WINDOWS\system32\drivers\aavmker4.sys
2011-04-24 14:59:23 ----N---- C:\WINDOWS\system32\aswBoot.exe
2011-04-24 13:34:45 ----D---- C:\Program Files\Google
2011-04-24 10:33:58 ----A---- C:\WINDOWS\system32\wuweb.dll
2011-04-24 10:33:58 ----A---- C:\WINDOWS\system32\wucltui.dll
2011-04-24 10:33:58 ----A---- C:\WINDOWS\system32\wuauserv.dll
2011-04-24 10:33:57 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2011-04-24 10:33:54 ----A---- C:\WINDOWS\system32\wups.dll
2011-04-24 10:33:54 ----A---- C:\WINDOWS\system32\wuaueng.dll
2011-04-24 10:33:53 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2011-04-24 10:33:51 ----A---- C:\WINDOWS\system32\wuauclt.exe
2011-04-24 10:33:49 ----A---- C:\WINDOWS\system32\wuapi.dll
2011-04-24 10:33:31 ----A---- C:\WINDOWS\system32\qmgr.dll
2011-04-24 10:12:22 ----A---- C:\WINDOWS\system32\drivers\24548982.sys
2011-04-24 10:12:22 ----A---- C:\WINDOWS\system32\drivers\24548981.sys
2011-04-24 10:12:22 ----A---- C:\WINDOWS\system32\drivers\2454898.sys
2011-04-23 21:37:10 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Avira
2011-04-23 18:44:13 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys
2011-04-23 18:44:12 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2011-04-23 18:44:12 ----A---- C:\WINDOWS\system32\drivers\avgntmgr.sys
2011-04-23 18:44:12 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2011-04-23 18:44:12 ----A---- C:\WINDOWS\system32\drivers\avgntdd.sys
2011-04-23 18:44:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2011-04-22 17:13:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-04-22 00:54:02 ----D---- C:\WINDOWS\system32\XPSViewer
2011-04-22 00:53:54 ----D---- C:\Program Files\MSBuild
2011-04-22 00:53:44 ----D---- C:\Program Files\Reference Assemblies
2011-04-22 00:45:52 ----D---- C:\Program Files\MSXML 6.0
2011-04-21 23:01:37 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2011-04-21 09:06:39 ----D---- C:\Program Files\Codec Pack - All In 1
2011-04-21 09:06:30 ----D---- C:\WINDOWS\system32\languages
2011-04-20 22:51:08 ----D---- C:\Program Files\CCleaner
2011-04-20 20:45:42 ----A---- C:\AILog.txt
2011-04-19 17:29:47 ----A---- C:\WINDOWS\unvise32.exe
2011-04-18 20:06:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-04-18 07:48:48 ----D---- C:\WINDOWS\system32\CatRoot_bak
2011-04-17 23:31:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2011-04-17 10:36:10 ----A---- C:\WINDOWS\Sof2.INI
2011-04-16 22:22:18 ----D---- C:\Documents and Settings\Administrator\Data aplikací\PCToolsFirewallPlus
2011-04-15 22:43:16 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2011-04-15 22:42:59 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2011-04-15 13:10:47 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2011-04-15 13:09:31 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2011-04-15 13:08:49 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2011-04-15 13:07:41 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2011-04-15 13:06:50 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2011-04-15 13:04:52 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2011-04-15 13:04:08 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2011-04-15 13:03:42 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2011-04-15 10:20:16 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2011-04-15 09:28:48 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2011-04-15 09:28:26 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2011-04-15 09:28:03 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2011-04-15 09:27:38 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2011-04-15 09:27:19 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2011-04-15 09:27:06 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2011-04-15 09:26:52 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2011-04-15 09:26:37 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2011-04-15 09:25:52 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2011-04-15 09:24:37 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2011-04-15 09:24:24 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2011-04-15 09:24:06 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2011-04-15 09:23:40 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2011-04-15 09:23:00 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2011-04-15 09:22:36 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2011-04-15 09:22:08 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2011-04-15 09:21:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2011-04-15 09:21:17 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-04-15 09:20:55 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2011-04-15 09:20:30 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2011-04-15 09:20:04 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2011-04-15 09:19:38 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2011-04-15 09:19:22 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2011-04-15 09:19:05 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2011-04-15 09:18:50 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2011-04-15 09:17:45 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2011-04-15 09:17:28 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2011-04-15 09:17:15 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2011-04-15 09:16:43 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2011-04-15 09:16:32 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2011-04-15 09:16:20 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2011-04-15 09:16:13 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2011-04-15 09:15:48 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2011-04-15 09:14:57 ----HDC---- C:\WINDOWS\$NtUninstallKB981793$
2011-04-15 09:14:42 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2011-04-15 09:14:19 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2011-04-15 09:14:00 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2011-04-15 09:11:57 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2011-04-15 09:11:02 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2011-04-15 09:10:17 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2011-04-15 09:09:30 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2011-04-15 09:09:07 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2011-04-15 09:08:50 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2011-04-15 09:08:34 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2011-04-15 09:08:21 ----HDC---- C:\WINDOWS\$NtUninstallKB885884$
2011-04-15 09:06:40 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2011-04-15 09:06:23 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2011-04-15 09:06:08 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2011-04-15 09:05:54 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2011-04-15 09:05:27 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2011-04-15 09:05:16 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2011-04-15 09:04:43 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2011-04-15 09:04:26 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2011-04-15 09:04:05 ----D---- C:\WINDOWS\ie8updates
2011-04-15 09:03:41 ----HDC---- C:\WINDOWS\$NtUninstallKB971032$
2011-04-15 09:03:22 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2011-04-15 09:03:06 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2011-04-15 09:02:53 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2011-04-15 09:02:42 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2011-04-15 09:02:25 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2011-04-15 09:02:12 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2011-04-15 09:01:48 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2011-04-14 16:36:26 ----A---- C:\WINDOWS\system32\browserchoice.exe
2011-04-14 15:59:27 ----A---- C:\WINDOWS\system32\tzchange.exe
2011-04-13 10:29:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\_comodo_
2011-04-13 10:21:38 ----A---- C:\WINDOWS\system32\cssdll32.dll
2011-04-13 06:36:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Panda Security
2011-04-12 09:44:57 ----D---- C:\Program Files\Windows Media Connect 2
2011-04-12 08:47:09 ----SHD---- C:\WINDOWS\CSC
2011-04-11 16:37:14 ----D---- C:\WINDOWS\MindSoft Utilities 2011
2011-04-11 12:28:10 ----A---- C:\WINDOWS\system32\vhxaag.txt
2011-04-10 12:36:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2011-04-10 09:33:06 ----D---- C:\Program Files\Defraggler
2011-04-10 07:21:49 ----D---- C:\WINDOWS\system32\PreInstall
2011-04-10 07:21:43 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2011-04-10 07:21:43 ----HD---- C:\WINDOWS\$hf_mig$
2011-04-09 09:21:29 ----D---- C:\WINDOWS\system32\NtmsData
2011-04-09 07:25:29 ----HD---- C:\WINDOWS\system32\GroupPolicy
2011-04-09 06:46:03 ----D---- C:\WINDOWS\SxsCaPendDel
2011-04-08 10:04:50 ----A---- C:\WINDOWS\system32\ChCfg.exe
2011-04-08 10:04:25 ----RA---- C:\WINDOWS\system32\drivers\alcxwdm.sys
2011-04-08 10:03:41 ----A---- C:\WINDOWS\system32\RTLCPL.exe
2011-04-08 10:03:37 ----A---- C:\WINDOWS\soundman.exe
2011-04-08 10:03:36 ----A---- C:\WINDOWS\system32\RtlCPAPI.dll
2011-04-08 10:03:32 ----A---- C:\WINDOWS\alcupd.exe
2011-04-08 10:03:32 ----A---- C:\WINDOWS\Alcrmv.exe
2011-04-07 11:48:26 ----D---- C:\Program Files\trend micro
2011-04-06 16:53:19 ----A---- C:\WINDOWS\cmaudio.ini
2011-04-06 15:48:38 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2011-04-06 15:24:35 ----ASH---- C:\pagefile.sys
2011-04-06 08:49:29 ----SHD---- C:\Documents and Settings\All Users\Data aplikací\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-04-05 21:30:29 ----D---- C:\WINDOWS\WBEM
2011-04-05 21:28:55 ----HDC---- C:\WINDOWS\ie8
2011-04-05 21:28:55 ----D---- C:\WINDOWS\system32\cs-CZ
======List of files/folders modified in the last 1 months======
2011-05-04 09:36:26 ----D---- C:\WINDOWS\Prefetch
2011-05-04 09:30:33 ----D---- C:\WINDOWS\system32\drivers
2011-05-04 09:02:39 ----SHD---- C:\System Volume Information
2011-05-04 08:43:44 ----D---- C:\WINDOWS\system32\LogFiles
2011-05-04 08:10:51 ----D---- C:\WINDOWS
2011-05-04 08:05:28 ----D---- C:\WINDOWS\system32\drivers\etc
2011-05-04 07:51:34 ----D---- C:\WINDOWS\Minidump
2011-05-04 07:30:15 ----ASH---- C:\boot.ini
2011-05-03 18:51:23 ----D---- C:\WINDOWS\system32\Restore
2011-05-03 18:27:45 ----A---- C:\WINDOWS\system.ini
2011-05-03 18:24:10 ----D---- C:\WINDOWS\system32
2011-05-03 18:24:10 ----D---- C:\WINDOWS\AppPatch
2011-05-03 18:24:05 ----D---- C:\Program Files\Common Files
2011-05-02 13:29:18 ----SHD---- C:\WINDOWS\Installer
2011-05-02 13:28:40 ----RD---- C:\WINDOWS\Web
2011-05-02 13:28:40 ----RD---- C:\Program Files
2011-05-02 13:27:54 ----ASHC---- C:\WINDOWS\fonts\desktop.ini
2011-05-02 13:26:51 ----D---- C:\WINDOWS\system32\CatRoot
2011-05-02 09:00:57 ----SD---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2011-05-02 09:00:55 ----D---- C:\Config.Msi
2011-05-02 08:34:17 ----D---- C:\WINDOWS\WinSxS
2011-05-01 00:20:30 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2011-04-27 14:02:26 ----HD---- C:\WINDOWS\inf
2011-04-27 14:00:24 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-04-27 07:54:52 ----D---- C:\Documents and Settings\Administrator\Data aplikací\DMCache
2011-04-25 18:37:45 ----D---- C:\WINDOWS\security
2011-04-25 18:12:18 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-04-25 10:58:51 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-04-24 21:22:28 ----D---- C:\Program Files\Bonjour
2011-04-24 20:51:31 ----D---- C:\Program Files\Common Files\Adobe
2011-04-24 14:51:18 ----D---- C:\WINDOWS\Debug
2011-04-24 13:36:02 ----SD---- C:\WINDOWS\Tasks
2011-04-24 13:10:19 ----A---- C:\WINDOWS\UPGRADE.TXT
2011-04-24 13:01:01 ----D---- C:\WINDOWS\Registration
2011-04-22 21:24:04 ----D---- C:\WINDOWS\system32\config
2011-04-22 20:40:25 ----D---- C:\Program Files\Internet Explorer
2011-04-22 12:17:12 ----D---- C:\WINDOWS\Microsoft.NET
2011-04-22 12:17:11 ----D---- C:\WINDOWS\assembly
2011-04-22 00:53:49 ----RSD---- C:\WINDOWS\Fonts
2011-04-22 00:53:06 ----D---- C:\WINDOWS\system32\spool
2011-04-22 00:50:56 ----D---- C:\Documents and Settings
2011-04-21 09:02:45 ----A---- C:\WINDOWS\iun6002.exe
2011-04-21 07:25:20 ----HD---- C:\Program Files\InstallShield Installation Information
2011-04-19 09:28:11 ----D---- C:\ProgramData
2011-04-19 08:41:33 ----D---- C:\Program Files\Common Files\InstallShield
2011-04-17 09:40:28 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-04-15 09:32:13 ----D---- C:\WINDOWS\system32\wbem
2011-04-15 09:32:12 ----D---- C:\WINDOWS\system32\Setup
2011-04-15 09:23:31 ----D---- C:\WINDOWS\Help
2011-04-15 09:16:49 ----D---- C:\Program Files\Movie Maker
2011-04-15 09:08:54 ----D---- C:\Program Files\Outlook Express
2011-04-15 09:05:30 ----D---- C:\WINDOWS\ServicePackFiles
2011-04-12 06:55:29 ----D---- C:\WINDOWS\SoftwareDistribution
2011-04-10 19:20:57 ----A---- C:\WINDOWS\win.ini
2011-04-10 15:04:41 ----D---- C:\WINDOWS\pss
2011-04-09 22:43:10 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2011-04-09 12:02:00 ----D---- C:\Program Files\WinRAR
2011-04-09 09:26:00 ----D---- C:\WINDOWS\repair
2011-04-09 09:21:27 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-04-06 09:07:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
2011-04-06 08:55:12 ----D---- C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software
2011-04-05 23:11:04 ----A---- C:\WINDOWS\system32\deployJava1.dll
2011-04-05 21:52:02 ----D---- C:\Program Files\Mozilla Firefox
2011-04-05 21:30:19 ----D---- C:\WINDOWS\Media
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 sisagp;Filtr SIS sběrnice AGP ; C:\WINDOWS\System32\DRIVERS\sisagp.sys [2004-08-03 41088]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-04-18 30680]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-04-18 25432]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-04-18 441176]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-04-18 307288]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-04-18 49240]
R1 SASDIFSV;SASDIFSV; \??\D:\SuperAntiSpywer\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\D:\SuperAntiSpywer\SASKUTIL.SYS []
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2010-05-13 532224]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-04-18 19544]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-04-18 102488]
R2 Fallback;Fallback; C:\WINDOWS\System32\DRIVERS\HSF_FALL.sys [2001-08-17 289887]
R2 Fsks;Fsks; C:\WINDOWS\System32\DRIVERS\HSF_FSKS.sys [2001-08-17 115807]
R2 K56;K56; C:\WINDOWS\System32\DRIVERS\HSF_K56K.sys [2001-08-17 391199]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\System32\DRIVERS\mdmxsdk.sys [2004-08-03 11868]
R2 SoftFax;SoftFax; C:\WINDOWS\System32\DRIVERS\HSF_FAXX.sys [2001-08-17 199711]
R2 SpeakerPhone;SpeakerPhone; C:\WINDOWS\System32\DRIVERS\HSF_SPKP.sys [2001-08-17 73279]
R2 Tones;Tones; C:\WINDOWS\System32\DRIVERS\HSF_TONE.sys [2001-08-17 50751]
R2 V124;V124; C:\WINDOWS\System32\DRIVERS\HSF_V124.sys [2001-08-17 488383]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2008-09-24 4122368]
R3 basic2;basic2; C:\WINDOWS\System32\DRIVERS\HSF_BSC2.sys [2001-08-17 67167]
R3 hsf_msft;hsf_msft; C:\WINDOWS\System32\DRIVERS\HSF_MSFT.sys [2001-08-17 542879]
R3 PAC207;Trust WB-1400T Webcam; C:\WINDOWS\system32\DRIVERS\PFC027.SYS [2007-05-14 508288]
R3 Rksample;Rksample; C:\WINDOWS\System32\DRIVERS\HSF_SAMP.sys [2001-08-17 57471]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 S3SAVAGE4M;S3SAVAGE4M; C:\WINDOWS\System32\DRIVERS\s3sav4m.sys [2001-08-17 77824]
S2 avgntflt;avgntflt; C:\WINDOWS\system32\drivers\avgntflt.sys [2011-03-04 61960]
S3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS []
S3 AmdLLD;AMD Low Level Device Driver; C:\WINDOWS\system32\DRIVERS\AmdLLD.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 GMSIPCI;GMSIPCI; \??\F:\INSTALL\GMSIPCI.SYS []
S3 HSF_DP;HSF_DP; C:\WINDOWS\System32\DRIVERS\HSFDPSP2.sys [2004-08-03 1041536]
S3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\System32\DRIVERS\HSFBS2S2.sys [2004-08-03 220032]
S3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
S3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys []
S3 pctNdis;PC Tools Firewall Intermediate Filter Service; C:\WINDOWS\system32\DRIVERS\pctNdis.sys []
S3 pctNdisMP;PC Tools Driver; C:\WINDOWS\system32\DRIVERS\pctNdis.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;avast! Antivirus; D:\AVAST\AvastSvc.exe [2011-04-18 42184]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-24 136176]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-30 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-24 136176]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-26 654848]
S4 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe []
-----------------EOF-----------------
Run by Administrator at 2011-05-04 09:35:40
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 2 GB (29%) free of 8 GB
Total RAM: 511 MB (30% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:37:27 , on 4.5.2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
D:\AVAST\AvastSvc.exe
D:\AVAST\avastUI.exe
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
E:\panda\Panda USB Vaccine\USBVaccine.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Administrator\Plocha\RSIT.exe
C:\Program Files\trend micro\Administrator.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://pobox.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\AVAST\aswWebRepIE.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\AVAST\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "D:\AVAST\avastUI.exe" /nogui
O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O20 - Winlogon Notify: !SASWinLogon - D:\SuperAntiSpywer\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - D:\AVAST\AvastSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
--
End of file - 3037 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\PandaUSBVaccine.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - D:\AVAST\aswWebRepIE.dll [2011-04-18 818280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - D:\AVAST\aswWebRepIE.dll [2011-04-18 818280]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast"=D:\AVAST\avastUI.exe [2011-04-18 3460784]
"ZoneAlarm Client"=D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2011-03-18 1043968]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
D:\SuperAntiSpywer\SASWINLO.DLL [2009-09-04 548352]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\WINDOWS\system32\ZoneLabs\vsmon.exe"="C:\WINDOWS\system32\ZoneLabs\vsmon.exe:*:Disabled:vsmon"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======List of files/folders created in the last 1 months======
2011-05-04 09:35:40 ----D---- C:\rsit
2011-05-04 09:30:31 ----A---- C:\TDSSKiller.2.5.0.0_04.05.2011_09.30.31_log.txt
2011-05-04 08:00:04 ----A---- C:\WINDOWS\ntbtlog.txt
2011-05-03 21:57:08 ----D---- C:\Documents and Settings\Administrator\Data aplikací\IDM
2011-05-03 18:46:05 ----SHD---- C:\RECYCLER
2011-05-03 18:32:46 ----D---- C:\WINDOWS\temp
2011-05-02 13:24:42 ----D---- C:\WINDOWS\system32\CatRoot2
2011-05-01 12:42:03 ----D---- C:\Downloads
2011-05-01 00:01:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Tools
2011-04-28 13:42:21 ----A---- C:\WINDOWS\system32\zlcommdb.dll
2011-04-28 13:42:21 ----A---- C:\WINDOWS\system32\zlcomm.dll
2011-04-28 13:42:04 ----A---- C:\WINDOWS\system32\vswmi.dll
2011-04-28 13:41:49 ----A---- C:\WINDOWS\system32\zpeng25.dll
2011-04-28 13:41:44 ----A---- C:\WINDOWS\system32\vsmonapi.dll
2011-04-28 13:40:20 ----A---- C:\WINDOWS\system32\vsinit.dll
2011-04-28 13:40:20 ----A---- C:\WINDOWS\system32\vsdata.dll
2011-04-28 13:40:19 ----A---- C:\WINDOWS\system32\vsutil.dll
2011-04-28 09:46:52 ----A---- C:\WINDOWS\system32\vsregexp.dll
2011-04-28 09:46:12 ----A---- C:\WINDOWS\system32\vsxml.dll
2011-04-28 09:46:10 ----A---- C:\WINDOWS\system32\vspubapi.dll
2011-04-28 09:46:06 ----A---- C:\WINDOWS\system32\vsdatant.sys
2011-04-27 15:12:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-04-27 13:59:38 ----N---- C:\WINDOWS\system32\drivers\aswNdis.sys
2011-04-27 13:58:56 ----D---- C:\Program Files\Alwil Software
2011-04-27 13:58:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2011-04-26 07:21:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\Babylon
2011-04-26 07:21:30 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Babylon
2011-04-25 18:27:17 ----D---- C:\Program Files\CheckPoint
2011-04-25 18:26:07 ----D---- C:\WINDOWS\system32\ZoneLabs
2011-04-25 18:11:53 ----HDC---- C:\WINDOWS\$NtUninstallKB943232$
2011-04-25 18:10:07 ----D---- C:\WINDOWS\Internet Logs
2011-04-25 17:55:44 ----A---- C:\Install.log.txt
2011-04-24 22:03:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2011-04-24 21:28:33 ----D---- C:\Program Files\QuickTime
2011-04-24 14:59:58 ----N---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-04-24 14:59:58 ----N---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-04-24 14:59:53 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-04-24 14:59:53 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2011-04-24 14:59:52 ----N---- C:\WINDOWS\system32\drivers\aswSnx.sys
2011-04-24 14:59:52 ----N---- C:\WINDOWS\system32\drivers\aswmon2.sys
2011-04-24 14:59:52 ----N---- C:\WINDOWS\system32\drivers\aswmon.sys
2011-04-24 14:59:51 ----N---- C:\WINDOWS\system32\drivers\aavmker4.sys
2011-04-24 14:59:23 ----N---- C:\WINDOWS\system32\aswBoot.exe
2011-04-24 13:34:45 ----D---- C:\Program Files\Google
2011-04-24 10:33:58 ----A---- C:\WINDOWS\system32\wuweb.dll
2011-04-24 10:33:58 ----A---- C:\WINDOWS\system32\wucltui.dll
2011-04-24 10:33:58 ----A---- C:\WINDOWS\system32\wuauserv.dll
2011-04-24 10:33:57 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2011-04-24 10:33:54 ----A---- C:\WINDOWS\system32\wups.dll
2011-04-24 10:33:54 ----A---- C:\WINDOWS\system32\wuaueng.dll
2011-04-24 10:33:53 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2011-04-24 10:33:51 ----A---- C:\WINDOWS\system32\wuauclt.exe
2011-04-24 10:33:49 ----A---- C:\WINDOWS\system32\wuapi.dll
2011-04-24 10:33:31 ----A---- C:\WINDOWS\system32\qmgr.dll
2011-04-24 10:12:22 ----A---- C:\WINDOWS\system32\drivers\24548982.sys
2011-04-24 10:12:22 ----A---- C:\WINDOWS\system32\drivers\24548981.sys
2011-04-24 10:12:22 ----A---- C:\WINDOWS\system32\drivers\2454898.sys
2011-04-23 21:37:10 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Avira
2011-04-23 18:44:13 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys
2011-04-23 18:44:12 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2011-04-23 18:44:12 ----A---- C:\WINDOWS\system32\drivers\avgntmgr.sys
2011-04-23 18:44:12 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2011-04-23 18:44:12 ----A---- C:\WINDOWS\system32\drivers\avgntdd.sys
2011-04-23 18:44:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2011-04-22 17:13:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-04-22 00:54:02 ----D---- C:\WINDOWS\system32\XPSViewer
2011-04-22 00:53:54 ----D---- C:\Program Files\MSBuild
2011-04-22 00:53:44 ----D---- C:\Program Files\Reference Assemblies
2011-04-22 00:45:52 ----D---- C:\Program Files\MSXML 6.0
2011-04-21 23:01:37 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2011-04-21 09:06:39 ----D---- C:\Program Files\Codec Pack - All In 1
2011-04-21 09:06:30 ----D---- C:\WINDOWS\system32\languages
2011-04-20 22:51:08 ----D---- C:\Program Files\CCleaner
2011-04-20 20:45:42 ----A---- C:\AILog.txt
2011-04-19 17:29:47 ----A---- C:\WINDOWS\unvise32.exe
2011-04-18 20:06:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-04-18 07:48:48 ----D---- C:\WINDOWS\system32\CatRoot_bak
2011-04-17 23:31:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2011-04-17 10:36:10 ----A---- C:\WINDOWS\Sof2.INI
2011-04-16 22:22:18 ----D---- C:\Documents and Settings\Administrator\Data aplikací\PCToolsFirewallPlus
2011-04-15 22:43:16 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2011-04-15 22:42:59 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2011-04-15 13:10:47 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2011-04-15 13:09:31 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2011-04-15 13:08:49 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2011-04-15 13:07:41 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2011-04-15 13:06:50 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2011-04-15 13:04:52 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2011-04-15 13:04:08 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2011-04-15 13:03:42 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2011-04-15 10:20:16 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2011-04-15 09:28:48 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2011-04-15 09:28:26 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2011-04-15 09:28:03 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2011-04-15 09:27:38 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2011-04-15 09:27:19 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2011-04-15 09:27:06 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2011-04-15 09:26:52 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2011-04-15 09:26:37 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2011-04-15 09:25:52 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2011-04-15 09:24:37 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2011-04-15 09:24:24 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2011-04-15 09:24:06 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2011-04-15 09:23:40 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2011-04-15 09:23:00 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2011-04-15 09:22:36 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2011-04-15 09:22:08 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2011-04-15 09:21:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2011-04-15 09:21:17 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-04-15 09:20:55 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2011-04-15 09:20:30 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2011-04-15 09:20:04 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2011-04-15 09:19:38 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2011-04-15 09:19:22 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2011-04-15 09:19:05 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2011-04-15 09:18:50 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2011-04-15 09:17:45 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2011-04-15 09:17:28 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2011-04-15 09:17:15 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2011-04-15 09:16:43 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2011-04-15 09:16:32 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2011-04-15 09:16:20 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2011-04-15 09:16:13 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2011-04-15 09:15:48 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2011-04-15 09:14:57 ----HDC---- C:\WINDOWS\$NtUninstallKB981793$
2011-04-15 09:14:42 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2011-04-15 09:14:19 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2011-04-15 09:14:00 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2011-04-15 09:11:57 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2011-04-15 09:11:02 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2011-04-15 09:10:17 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2011-04-15 09:09:30 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2011-04-15 09:09:07 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2011-04-15 09:08:50 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2011-04-15 09:08:34 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2011-04-15 09:08:21 ----HDC---- C:\WINDOWS\$NtUninstallKB885884$
2011-04-15 09:06:40 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2011-04-15 09:06:23 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2011-04-15 09:06:08 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2011-04-15 09:05:54 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2011-04-15 09:05:27 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2011-04-15 09:05:16 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2011-04-15 09:04:43 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2011-04-15 09:04:26 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2011-04-15 09:04:05 ----D---- C:\WINDOWS\ie8updates
2011-04-15 09:03:41 ----HDC---- C:\WINDOWS\$NtUninstallKB971032$
2011-04-15 09:03:22 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2011-04-15 09:03:06 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2011-04-15 09:02:53 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2011-04-15 09:02:42 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2011-04-15 09:02:25 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2011-04-15 09:02:12 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2011-04-15 09:01:48 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2011-04-14 16:36:26 ----A---- C:\WINDOWS\system32\browserchoice.exe
2011-04-14 15:59:27 ----A---- C:\WINDOWS\system32\tzchange.exe
2011-04-13 10:29:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\_comodo_
2011-04-13 10:21:38 ----A---- C:\WINDOWS\system32\cssdll32.dll
2011-04-13 06:36:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Panda Security
2011-04-12 09:44:57 ----D---- C:\Program Files\Windows Media Connect 2
2011-04-12 08:47:09 ----SHD---- C:\WINDOWS\CSC
2011-04-11 16:37:14 ----D---- C:\WINDOWS\MindSoft Utilities 2011
2011-04-11 12:28:10 ----A---- C:\WINDOWS\system32\vhxaag.txt
2011-04-10 12:36:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2011-04-10 09:33:06 ----D---- C:\Program Files\Defraggler
2011-04-10 07:21:49 ----D---- C:\WINDOWS\system32\PreInstall
2011-04-10 07:21:43 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2011-04-10 07:21:43 ----HD---- C:\WINDOWS\$hf_mig$
2011-04-09 09:21:29 ----D---- C:\WINDOWS\system32\NtmsData
2011-04-09 07:25:29 ----HD---- C:\WINDOWS\system32\GroupPolicy
2011-04-09 06:46:03 ----D---- C:\WINDOWS\SxsCaPendDel
2011-04-08 10:04:50 ----A---- C:\WINDOWS\system32\ChCfg.exe
2011-04-08 10:04:25 ----RA---- C:\WINDOWS\system32\drivers\alcxwdm.sys
2011-04-08 10:03:41 ----A---- C:\WINDOWS\system32\RTLCPL.exe
2011-04-08 10:03:37 ----A---- C:\WINDOWS\soundman.exe
2011-04-08 10:03:36 ----A---- C:\WINDOWS\system32\RtlCPAPI.dll
2011-04-08 10:03:32 ----A---- C:\WINDOWS\alcupd.exe
2011-04-08 10:03:32 ----A---- C:\WINDOWS\Alcrmv.exe
2011-04-07 11:48:26 ----D---- C:\Program Files\trend micro
2011-04-06 16:53:19 ----A---- C:\WINDOWS\cmaudio.ini
2011-04-06 15:48:38 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2011-04-06 15:24:35 ----ASH---- C:\pagefile.sys
2011-04-06 08:49:29 ----SHD---- C:\Documents and Settings\All Users\Data aplikací\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-04-05 21:30:29 ----D---- C:\WINDOWS\WBEM
2011-04-05 21:28:55 ----HDC---- C:\WINDOWS\ie8
2011-04-05 21:28:55 ----D---- C:\WINDOWS\system32\cs-CZ
======List of files/folders modified in the last 1 months======
2011-05-04 09:36:26 ----D---- C:\WINDOWS\Prefetch
2011-05-04 09:30:33 ----D---- C:\WINDOWS\system32\drivers
2011-05-04 09:02:39 ----SHD---- C:\System Volume Information
2011-05-04 08:43:44 ----D---- C:\WINDOWS\system32\LogFiles
2011-05-04 08:10:51 ----D---- C:\WINDOWS
2011-05-04 08:05:28 ----D---- C:\WINDOWS\system32\drivers\etc
2011-05-04 07:51:34 ----D---- C:\WINDOWS\Minidump
2011-05-04 07:30:15 ----ASH---- C:\boot.ini
2011-05-03 18:51:23 ----D---- C:\WINDOWS\system32\Restore
2011-05-03 18:27:45 ----A---- C:\WINDOWS\system.ini
2011-05-03 18:24:10 ----D---- C:\WINDOWS\system32
2011-05-03 18:24:10 ----D---- C:\WINDOWS\AppPatch
2011-05-03 18:24:05 ----D---- C:\Program Files\Common Files
2011-05-02 13:29:18 ----SHD---- C:\WINDOWS\Installer
2011-05-02 13:28:40 ----RD---- C:\WINDOWS\Web
2011-05-02 13:28:40 ----RD---- C:\Program Files
2011-05-02 13:27:54 ----ASHC---- C:\WINDOWS\fonts\desktop.ini
2011-05-02 13:26:51 ----D---- C:\WINDOWS\system32\CatRoot
2011-05-02 09:00:57 ----SD---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2011-05-02 09:00:55 ----D---- C:\Config.Msi
2011-05-02 08:34:17 ----D---- C:\WINDOWS\WinSxS
2011-05-01 00:20:30 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2011-04-27 14:02:26 ----HD---- C:\WINDOWS\inf
2011-04-27 14:00:24 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-04-27 07:54:52 ----D---- C:\Documents and Settings\Administrator\Data aplikací\DMCache
2011-04-25 18:37:45 ----D---- C:\WINDOWS\security
2011-04-25 18:12:18 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-04-25 10:58:51 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-04-24 21:22:28 ----D---- C:\Program Files\Bonjour
2011-04-24 20:51:31 ----D---- C:\Program Files\Common Files\Adobe
2011-04-24 14:51:18 ----D---- C:\WINDOWS\Debug
2011-04-24 13:36:02 ----SD---- C:\WINDOWS\Tasks
2011-04-24 13:10:19 ----A---- C:\WINDOWS\UPGRADE.TXT
2011-04-24 13:01:01 ----D---- C:\WINDOWS\Registration
2011-04-22 21:24:04 ----D---- C:\WINDOWS\system32\config
2011-04-22 20:40:25 ----D---- C:\Program Files\Internet Explorer
2011-04-22 12:17:12 ----D---- C:\WINDOWS\Microsoft.NET
2011-04-22 12:17:11 ----D---- C:\WINDOWS\assembly
2011-04-22 00:53:49 ----RSD---- C:\WINDOWS\Fonts
2011-04-22 00:53:06 ----D---- C:\WINDOWS\system32\spool
2011-04-22 00:50:56 ----D---- C:\Documents and Settings
2011-04-21 09:02:45 ----A---- C:\WINDOWS\iun6002.exe
2011-04-21 07:25:20 ----HD---- C:\Program Files\InstallShield Installation Information
2011-04-19 09:28:11 ----D---- C:\ProgramData
2011-04-19 08:41:33 ----D---- C:\Program Files\Common Files\InstallShield
2011-04-17 09:40:28 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-04-15 09:32:13 ----D---- C:\WINDOWS\system32\wbem
2011-04-15 09:32:12 ----D---- C:\WINDOWS\system32\Setup
2011-04-15 09:23:31 ----D---- C:\WINDOWS\Help
2011-04-15 09:16:49 ----D---- C:\Program Files\Movie Maker
2011-04-15 09:08:54 ----D---- C:\Program Files\Outlook Express
2011-04-15 09:05:30 ----D---- C:\WINDOWS\ServicePackFiles
2011-04-12 06:55:29 ----D---- C:\WINDOWS\SoftwareDistribution
2011-04-10 19:20:57 ----A---- C:\WINDOWS\win.ini
2011-04-10 15:04:41 ----D---- C:\WINDOWS\pss
2011-04-09 22:43:10 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2011-04-09 12:02:00 ----D---- C:\Program Files\WinRAR
2011-04-09 09:26:00 ----D---- C:\WINDOWS\repair
2011-04-09 09:21:27 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-04-06 09:07:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
2011-04-06 08:55:12 ----D---- C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software
2011-04-05 23:11:04 ----A---- C:\WINDOWS\system32\deployJava1.dll
2011-04-05 21:52:02 ----D---- C:\Program Files\Mozilla Firefox
2011-04-05 21:30:19 ----D---- C:\WINDOWS\Media
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 sisagp;Filtr SIS sběrnice AGP ; C:\WINDOWS\System32\DRIVERS\sisagp.sys [2004-08-03 41088]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-04-18 30680]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-04-18 25432]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-04-18 441176]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-04-18 307288]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-04-18 49240]
R1 SASDIFSV;SASDIFSV; \??\D:\SuperAntiSpywer\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\D:\SuperAntiSpywer\SASKUTIL.SYS []
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2010-05-13 532224]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-04-18 19544]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-04-18 102488]
R2 Fallback;Fallback; C:\WINDOWS\System32\DRIVERS\HSF_FALL.sys [2001-08-17 289887]
R2 Fsks;Fsks; C:\WINDOWS\System32\DRIVERS\HSF_FSKS.sys [2001-08-17 115807]
R2 K56;K56; C:\WINDOWS\System32\DRIVERS\HSF_K56K.sys [2001-08-17 391199]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\System32\DRIVERS\mdmxsdk.sys [2004-08-03 11868]
R2 SoftFax;SoftFax; C:\WINDOWS\System32\DRIVERS\HSF_FAXX.sys [2001-08-17 199711]
R2 SpeakerPhone;SpeakerPhone; C:\WINDOWS\System32\DRIVERS\HSF_SPKP.sys [2001-08-17 73279]
R2 Tones;Tones; C:\WINDOWS\System32\DRIVERS\HSF_TONE.sys [2001-08-17 50751]
R2 V124;V124; C:\WINDOWS\System32\DRIVERS\HSF_V124.sys [2001-08-17 488383]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2008-09-24 4122368]
R3 basic2;basic2; C:\WINDOWS\System32\DRIVERS\HSF_BSC2.sys [2001-08-17 67167]
R3 hsf_msft;hsf_msft; C:\WINDOWS\System32\DRIVERS\HSF_MSFT.sys [2001-08-17 542879]
R3 PAC207;Trust WB-1400T Webcam; C:\WINDOWS\system32\DRIVERS\PFC027.SYS [2007-05-14 508288]
R3 Rksample;Rksample; C:\WINDOWS\System32\DRIVERS\HSF_SAMP.sys [2001-08-17 57471]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 S3SAVAGE4M;S3SAVAGE4M; C:\WINDOWS\System32\DRIVERS\s3sav4m.sys [2001-08-17 77824]
S2 avgntflt;avgntflt; C:\WINDOWS\system32\drivers\avgntflt.sys [2011-03-04 61960]
S3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS []
S3 AmdLLD;AMD Low Level Device Driver; C:\WINDOWS\system32\DRIVERS\AmdLLD.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 GMSIPCI;GMSIPCI; \??\F:\INSTALL\GMSIPCI.SYS []
S3 HSF_DP;HSF_DP; C:\WINDOWS\System32\DRIVERS\HSFDPSP2.sys [2004-08-03 1041536]
S3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\System32\DRIVERS\HSFBS2S2.sys [2004-08-03 220032]
S3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
S3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys []
S3 pctNdis;PC Tools Firewall Intermediate Filter Service; C:\WINDOWS\system32\DRIVERS\pctNdis.sys []
S3 pctNdisMP;PC Tools Driver; C:\WINDOWS\system32\DRIVERS\pctNdis.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;avast! Antivirus; D:\AVAST\AvastSvc.exe [2011-04-18 42184]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-24 136176]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-30 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-24 136176]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-26 654848]
S4 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe []
-----------------EOF-----------------
Re: neviem co s tym,prosim pomozte
Proč jste spouštěl Tdss killer?
Vložte sem tento log C:\TDSSKiller.2.5.0.0_04.05.2011_09.30.31_log.txt
Můžete dát screen té hlášky, co Vám vyskakuje?
Vložte sem tento log C:\TDSSKiller.2.5.0.0_04.05.2011_09.30.31_log.txt
Můžete dát screen té hlášky, co Vám vyskakuje?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: neviem co s tym,prosim pomozte
2011/05/04 09:30:31.0054 3724 TDSS rootkit removing tool 2.5.0.0 May 1 2011 14:20:16
2011/05/04 09:30:33.0067 3724 ================================================================================
2011/05/04 09:30:33.0067 3724 SystemInfo:
2011/05/04 09:30:33.0067 3724
2011/05/04 09:30:33.0067 3724 OS Version: 5.1.2600 ServicePack: 2.0
2011/05/04 09:30:33.0067 3724 Product type: Workstation
2011/05/04 09:30:33.0067 3724 ComputerName: TEREZIA
2011/05/04 09:30:33.0067 3724 UserName: Administrator
2011/05/04 09:30:33.0077 3724 Windows directory: C:\WINDOWS
2011/05/04 09:30:33.0077 3724 System windows directory: C:\WINDOWS
2011/05/04 09:30:33.0077 3724 Processor architecture: Intel x86
2011/05/04 09:30:33.0077 3724 Number of processors: 1
2011/05/04 09:30:33.0077 3724 Page size: 0x1000
2011/05/04 09:30:33.0077 3724 Boot type: Normal boot
2011/05/04 09:30:33.0077 3724 ================================================================================
2011/05/04 09:30:34.0278 3724 Initialize success
2011/05/04 09:30:46.0035 2624 ================================================================================
2011/05/04 09:30:46.0035 2624 Scan started
2011/05/04 09:30:46.0035 2624 Mode: Manual;
2011/05/04 09:30:46.0035 2624 ================================================================================
2011/05/04 09:30:46.0836 2624 Aavmker4 (78a4db23bb4e8d4349e164d1d90af73f) C:\WINDOWS\system32\drivers\Aavmker4.sys
2011/05/04 09:30:47.0708 2624 ACPI (fa2fbcda96d2385f773b059fe5a125a6) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2011/05/04 09:30:48.0028 2624 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS\system32\drivers\ACPIEC.sys
2011/05/04 09:30:48.0599 2624 aec (841f385c6cfaf66b58fbd898722bb4f0) C:\WINDOWS\system32\drivers\aec.sys
2011/05/04 09:30:48.0990 2624 Afc (a7b8a3a79d35215d798a300df49ed23f) C:\WINDOWS\system32\drivers\Afc.sys
2011/05/04 09:30:49.0420 2624 AFD (55e6e1c51b6d30e54335750955453702) C:\WINDOWS\System32\drivers\afd.sys
2011/05/04 09:30:52.0665 2624 ALCXWDM (dd8520280304b6145a6be31008748c7c) C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2011/05/04 09:30:56.0400 2624 aswFsBlk (9bdb29e81abceb883556df44649696c4) C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011/05/04 09:30:56.0851 2624 aswMon2 (2ce6da466687cbb3b97e59f8831a27cb) C:\WINDOWS\system32\drivers\aswMon2.sys
2011/05/04 09:30:57.0231 2624 aswRdr (a90cf680ca7a323913ca3a0810c8e02d) C:\WINDOWS\system32\drivers\aswRdr.sys
2011/05/04 09:30:57.0682 2624 aswSnx (f7969934cca2e566e95df17380a3cb11) C:\WINDOWS\system32\drivers\aswSnx.sys
2011/05/04 09:30:58.0333 2624 aswSP (478d6a0e0630c31bf4a7f5eb0a05b92c) C:\WINDOWS\system32\drivers\aswSP.sys
2011/05/04 09:30:58.0744 2624 aswTdi (e52e45743e27fd6184c55618a10b81ab) C:\WINDOWS\system32\drivers\aswTdi.sys
2011/05/04 09:30:59.0164 2624 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
2011/05/04 09:30:59.0515 2624 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
2011/05/04 09:31:00.0176 2624 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
2011/05/04 09:31:00.0586 2624 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
2011/05/04 09:31:00.0897 2624 avgntflt (47b879406246ffdced59e18d331a0e7d) C:\WINDOWS\system32\drivers\avgntflt.sys
2011/05/04 09:31:01.0287 2624 basic2 (1b9c81ab9a456eabd9f8335f04b5f495) C:\WINDOWS\system32\DRIVERS\HSF_BSC2.sys
2011/05/04 09:31:01.0648 2624 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
2011/05/04 09:31:02.0128 2624 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
2011/05/04 09:31:02.0469 2624 CCDECODE (6163ed60b684bab19d3352ab22fc48b2) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
2011/05/04 09:31:03.0090 2624 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
2011/05/04 09:31:03.0500 2624 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
2011/05/04 09:31:03.0841 2624 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys
2011/05/04 09:31:06.0004 2624 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
2011/05/04 09:31:06.0505 2624 dmboot (e1968edec81c430108feb23ab07bdb14) C:\WINDOWS\system32\drivers\dmboot.sys
2011/05/04 09:31:07.0005 2624 dmio (1b1520a82e396e46b9ae9fa6b03ff6c6) C:\WINDOWS\system32\drivers\dmio.sys
2011/05/04 09:31:07.0406 2624 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
2011/05/04 09:31:07.0817 2624 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
2011/05/04 09:31:08.0498 2624 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
2011/05/04 09:31:09.0088 2624 Fallback (c823debe2548656549f84a875d65237b) C:\WINDOWS\system32\DRIVERS\HSF_FALL.sys
2011/05/04 09:31:09.0579 2624 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
2011/05/04 09:31:10.0050 2624 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys
2011/05/04 09:31:10.0420 2624 Fips (266dab58619b17bdf37fabbd48d875ca) C:\WINDOWS\system32\drivers\Fips.sys
2011/05/04 09:31:10.0901 2624 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
2011/05/04 09:31:11.0252 2624 FltMgr (157754f0df355a9e0a6f54721914f9c6) C:\WINDOWS\system32\drivers\fltmgr.sys
2011/05/04 09:31:11.0682 2624 Fsks (6483414841d4cab6c3b4db2ac6edd70b) C:\WINDOWS\system32\DRIVERS\HSF_FSKS.sys
2011/05/04 09:31:12.0103 2624 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
2011/05/04 09:31:12.0483 2624 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
2011/05/04 09:31:12.0934 2624 gameenum (5f92fd09e5610a5995da7d775eadcd12) C:\WINDOWS\system32\DRIVERS\gameenum.sys
2011/05/04 09:31:13.0545 2624 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
2011/05/04 09:31:14.0737 2624 HSFHWBS2 (970178e8e003eb1481293830069624b9) C:\WINDOWS\system32\DRIVERS\HSFBS2S2.sys
2011/05/04 09:31:15.0708 2624 HSF_DP (ebb354438a4c5a3327fb97306260714a) C:\WINDOWS\system32\DRIVERS\HSFDPSP2.sys
2011/05/04 09:31:16.0790 2624 hsf_msft (74e379857d4c0dfb56de2d19b8f4c434) C:\WINDOWS\system32\DRIVERS\HSF_MSFT.sys
2011/05/04 09:31:17.0621 2624 HTTP (9f8b0f4276f618964fd118be4289b7cd) C:\WINDOWS\system32\Drivers\HTTP.sys
2011/05/04 09:31:18.0903 2624 i8042prt (0f42de9909b5dbf2c48dd1a79d491af5) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
2011/05/04 09:31:19.0473 2624 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
2011/05/04 09:31:20.0935 2624 ip6fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\drivers\ip6fw.sys
2011/05/04 09:31:21.0276 2624 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
2011/05/04 09:31:21.0767 2624 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
2011/05/04 09:31:22.0137 2624 IpNat (b5a8e215ac29d24d60b4d1250ef05ace) C:\WINDOWS\system32\DRIVERS\ipnat.sys
2011/05/04 09:31:22.0708 2624 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
2011/05/04 09:31:23.0109 2624 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
2011/05/04 09:31:23.0629 2624 isapnp (1091528512e4dd7ed5fddcc4df1c53d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2011/05/04 09:31:24.0060 2624 K56 (9c5e3fdbfcc30cf71a49ca178b9ad442) C:\WINDOWS\system32\DRIVERS\HSF_K56K.sys
2011/05/04 09:31:24.0691 2624 Kbdclass (6f877bf8dc01a550cd666f3bedb2213c) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
2011/05/04 09:31:25.0081 2624 kmixer (d93cad07c5683db066b0b2d2d3790ead) C:\WINDOWS\system32\drivers\kmixer.sys
2011/05/04 09:31:25.0532 2624 KSecDD (674d3e5a593475915dc6643317192403) C:\WINDOWS\system32\drivers\KSecDD.sys
2011/05/04 09:31:26.0554 2624 mdmxsdk (195741aee20369980796b557358cd774) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
2011/05/04 09:31:27.0034 2624 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
2011/05/04 09:31:27.0395 2624 Modem (60210deb037846afe521ebf349964f6b) C:\WINDOWS\system32\drivers\Modem.sys
2011/05/04 09:31:27.0915 2624 MODEMCSA (1992e0d143b09653ab0f9c5e04b0fd65) C:\WINDOWS\system32\drivers\MODEMCSA.sys
2011/05/04 09:31:28.0266 2624 Mouclass (b160ec94114715675509115986400fd9) C:\WINDOWS\system32\DRIVERS\mouclass.sys
2011/05/04 09:31:28.0606 2624 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
2011/05/04 09:31:29.0398 2624 MRxDAV (46edcc8f2db2f322c24f48785cb46366) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
2011/05/04 09:31:29.0958 2624 MRxSmb (fb6c89bb3ce282b08bdb1e3c179e1c39) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2011/05/04 09:31:30.0549 2624 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
2011/05/04 09:31:31.0050 2624 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
2011/05/04 09:31:31.0461 2624 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011/05/04 09:31:31.0801 2624 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
2011/05/04 09:31:32.0252 2624 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
2011/05/04 09:31:32.0622 2624 MSTEE (bf13612142995096ab084f2db7f40f77) C:\WINDOWS\system32\drivers\MSTEE.sys
2011/05/04 09:31:33.0153 2624 ms_mpu401 (ca3e22598f411199adc2dfee76cd0ae0) C:\WINDOWS\system32\drivers\msmpu401.sys
2011/05/04 09:31:33.0564 2624 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
2011/05/04 09:31:33.0944 2624 NABTSFEC (5c8dc6429c43dc6177c1fa5b76290d1a) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
2011/05/04 09:31:34.0435 2624 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
2011/05/04 09:31:34.0785 2624 NdisIP (520ce427a8b298f54112857bcf6bde15) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
2011/05/04 09:31:35.0136 2624 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
2011/05/04 09:31:35.0597 2624 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
2011/05/04 09:31:35.0937 2624 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
2011/05/04 09:31:36.0398 2624 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
2011/05/04 09:31:36.0778 2624 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys
2011/05/04 09:31:37.0189 2624 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys
2011/05/04 09:31:37.0850 2624 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
2011/05/04 09:31:38.0361 2624 Ntfs (b78be402c3f63dd55521f73876951cdd) C:\WINDOWS\system32\drivers\Ntfs.sys
2011/05/04 09:31:39.0021 2624 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
2011/05/04 09:31:39.0352 2624 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
2011/05/04 09:31:39.0793 2624 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
2011/05/04 09:31:40.0273 2624 PAC207 (54183d1ec4a8658bbacb31acd0c8f6df) C:\WINDOWS\system32\DRIVERS\PFC027.SYS
2011/05/04 09:31:40.0864 2624 Parport (76a18caa2fefb28a4ced38d76837e86e) C:\WINDOWS\system32\DRIVERS\parport.sys
2011/05/04 09:31:41.0235 2624 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
2011/05/04 09:31:41.0605 2624 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS\system32\drivers\ParVdm.sys
2011/05/04 09:31:42.0406 2624 PCI (b7979f37bb7b9df2230046134955e6e7) C:\WINDOWS\system32\DRIVERS\pci.sys
2011/05/04 09:31:43.0157 2624 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) C:\WINDOWS\system32\DRIVERS\pciide.sys
2011/05/04 09:31:43.0468 2624 Pcmcia (90505755634407d4ef4c6dea60fc1df9) C:\WINDOWS\system32\drivers\Pcmcia.sys
2011/05/04 09:31:46.0672 2624 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys
2011/05/04 09:31:47.0103 2624 Processor (9a10e4fd13824823da50d4758bd0a645) C:\WINDOWS\system32\DRIVERS\processr.sys
2011/05/04 09:31:47.0474 2624 PSched (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys
2011/05/04 09:31:47.0884 2624 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
2011/05/04 09:31:48.0285 2624 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\WINDOWS\system32\Drivers\PxHelp20.sys
2011/05/04 09:31:50.0077 2624 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
2011/05/04 09:31:50.0538 2624 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
2011/05/04 09:31:50.0919 2624 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
2011/05/04 09:31:51.0269 2624 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
2011/05/04 09:31:51.0760 2624 Rdbss (29d66245adba878fff574cd66abd2884) C:\WINDOWS\system32\DRIVERS\rdbss.sys
2011/05/04 09:31:52.0160 2624 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2011/05/04 09:31:52.0711 2624 rdpdr (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
2011/05/04 09:31:53.0162 2624 RDPWD (d4f5643d7714ef499ae9527fdcd50894) C:\WINDOWS\system32\drivers\RDPWD.sys
2011/05/04 09:31:53.0653 2624 redbook (aba13d33e1f888c9a68599a48a8840d6) C:\WINDOWS\system32\DRIVERS\redbook.sys
2011/05/04 09:31:54.0013 2624 Rksample (bb7549bd94d1aac3599c7606c50c48a0) C:\WINDOWS\system32\DRIVERS\HSF_SAMP.sys
2011/05/04 09:31:54.0524 2624 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
2011/05/04 09:31:54.0944 2624 S3SAVAGE4M (dddc792753e657a9932029c46e60fe52) C:\WINDOWS\system32\DRIVERS\s3sav4m.sys
2011/05/04 09:31:55.0165 2624 SASDIFSV (a3281aec37e0720a2bc28034c2df2a56) D:\SuperAntiSpywer\SASDIFSV.SYS
2011/05/04 09:31:55.0245 2624 SASKUTIL (61db0d0756a99506207fd724e3692b25) D:\SuperAntiSpywer\SASKUTIL.SYS
2011/05/04 09:31:55.0826 2624 Secdrv (07f7f501ad50de2ba2d5842d9b6d6155) C:\WINDOWS\system32\DRIVERS\secdrv.sys
2011/05/04 09:31:56.0286 2624 serenum (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys
2011/05/04 09:31:56.0647 2624 Serial (c1ddbc85251551a840212999da3d95f3) C:\WINDOWS\system32\DRIVERS\serial.sys
2011/05/04 09:31:57.0077 2624 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
2011/05/04 09:31:57.0808 2624 sisagp (732d859b286da692119f286b21a2a114) C:\WINDOWS\system32\DRIVERS\sisagp.sys
2011/05/04 09:31:58.0249 2624 SLIP (5caeed86821fa2c6139e32e9e05ccdc9) C:\WINDOWS\system32\DRIVERS\SLIP.sys
2011/05/04 09:31:58.0670 2624 SoftFax (d9e8e0ce154a2f6430d9efabdf730867) C:\WINDOWS\system32\DRIVERS\HSF_FAXX.sys
2011/05/04 09:31:59.0391 2624 SpeakerPhone (6c843c43fd7f0b42cfe477ce88d0f9b3) C:\WINDOWS\system32\DRIVERS\HSF_SPKP.sys
2011/05/04 09:31:59.0801 2624 splitter (8e186b8f23295d1e42c573b82b80d548) C:\WINDOWS\system32\drivers\splitter.sys
2011/05/04 09:32:00.0192 2624 sr (a74035ea526db97d9d50d2143a55f5cf) C:\WINDOWS\system32\DRIVERS\sr.sys
2011/05/04 09:32:00.0743 2624 Srv (7a4f147cc6b133f905f6e65e2f8669fb) C:\WINDOWS\system32\DRIVERS\srv.sys
2011/05/04 09:32:01.0203 2624 streamip (284c57df5dc7abca656bc2b96a667afb) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
2011/05/04 09:32:01.0524 2624 swenum (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys
2011/05/04 09:32:01.0904 2624 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys
2011/05/04 09:32:03.0557 2624 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys
2011/05/04 09:32:04.0108 2624 Tcpip (2a5554fc5b1e04e131230e3ce035c3f9) C:\WINDOWS\system32\DRIVERS\tcpip.sys
2011/05/04 09:32:04.0548 2624 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys
2011/05/04 09:32:04.0949 2624 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys
2011/05/04 09:32:05.0249 2624 TermDD (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys
2011/05/04 09:32:05.0700 2624 Tones (8021a499db46b2961c285168671cb9af) C:\WINDOWS\system32\DRIVERS\HSF_TONE.sys
2011/05/04 09:32:06.0411 2624 Udfs (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys
2011/05/04 09:32:07.0162 2624 usbhub (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys
2011/05/04 09:32:07.0522 2624 usbohci (bdfe799a8531bad8a5a985821fe78760) C:\WINDOWS\system32\DRIVERS\usbohci.sys
2011/05/04 09:32:07.0843 2624 usbprint (a42369b7cd8886cd7c70f33da6fcbcf5) C:\WINDOWS\system32\DRIVERS\usbprint.sys
2011/05/04 09:32:08.0183 2624 USBSTOR (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2011/05/04 09:32:08.0734 2624 V124 (269c0ade94b90029b12497747be408cb) C:\WINDOWS\system32\DRIVERS\HSF_V124.sys
2011/05/04 09:32:09.0245 2624 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys
2011/05/04 09:32:09.0876 2624 VolSnap (cd8cce067f7e9cbd762c00bdddecaa34) C:\WINDOWS\system32\drivers\VolSnap.sys
2011/05/04 09:32:10.0377 2624 vsdatant (050c38ebb22512122e54b47dc278bccd) C:\WINDOWS\system32\vsdatant.sys
2011/05/04 09:32:11.0058 2624 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys
2011/05/04 09:32:11.0678 2624 wdmaud (2797f33ebf50466020c430ee4f037933) C:\WINDOWS\system32\drivers\wdmaud.sys
2011/05/04 09:32:12.0399 2624 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\Drivers\wpdusb.sys
2011/05/04 09:32:12.0750 2624 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
2011/05/04 09:32:13.0100 2624 WSTCODEC (d5842484f05e12121c511aa93f6439ec) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
2011/05/04 09:32:13.0441 2624 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
2011/05/04 09:32:13.0781 2624 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
2011/05/04 09:32:14.0452 2624 ================================================================================
2011/05/04 09:32:14.0452 2624 Scan finished
2011/05/04 09:32:14.0452 2624 ================================================================================
2011/05/04 09:33:01.0099 3412 Deinitialize success
2011/05/04 09:30:33.0067 3724 ================================================================================
2011/05/04 09:30:33.0067 3724 SystemInfo:
2011/05/04 09:30:33.0067 3724
2011/05/04 09:30:33.0067 3724 OS Version: 5.1.2600 ServicePack: 2.0
2011/05/04 09:30:33.0067 3724 Product type: Workstation
2011/05/04 09:30:33.0067 3724 ComputerName: TEREZIA
2011/05/04 09:30:33.0067 3724 UserName: Administrator
2011/05/04 09:30:33.0077 3724 Windows directory: C:\WINDOWS
2011/05/04 09:30:33.0077 3724 System windows directory: C:\WINDOWS
2011/05/04 09:30:33.0077 3724 Processor architecture: Intel x86
2011/05/04 09:30:33.0077 3724 Number of processors: 1
2011/05/04 09:30:33.0077 3724 Page size: 0x1000
2011/05/04 09:30:33.0077 3724 Boot type: Normal boot
2011/05/04 09:30:33.0077 3724 ================================================================================
2011/05/04 09:30:34.0278 3724 Initialize success
2011/05/04 09:30:46.0035 2624 ================================================================================
2011/05/04 09:30:46.0035 2624 Scan started
2011/05/04 09:30:46.0035 2624 Mode: Manual;
2011/05/04 09:30:46.0035 2624 ================================================================================
2011/05/04 09:30:46.0836 2624 Aavmker4 (78a4db23bb4e8d4349e164d1d90af73f) C:\WINDOWS\system32\drivers\Aavmker4.sys
2011/05/04 09:30:47.0708 2624 ACPI (fa2fbcda96d2385f773b059fe5a125a6) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2011/05/04 09:30:48.0028 2624 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS\system32\drivers\ACPIEC.sys
2011/05/04 09:30:48.0599 2624 aec (841f385c6cfaf66b58fbd898722bb4f0) C:\WINDOWS\system32\drivers\aec.sys
2011/05/04 09:30:48.0990 2624 Afc (a7b8a3a79d35215d798a300df49ed23f) C:\WINDOWS\system32\drivers\Afc.sys
2011/05/04 09:30:49.0420 2624 AFD (55e6e1c51b6d30e54335750955453702) C:\WINDOWS\System32\drivers\afd.sys
2011/05/04 09:30:52.0665 2624 ALCXWDM (dd8520280304b6145a6be31008748c7c) C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2011/05/04 09:30:56.0400 2624 aswFsBlk (9bdb29e81abceb883556df44649696c4) C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011/05/04 09:30:56.0851 2624 aswMon2 (2ce6da466687cbb3b97e59f8831a27cb) C:\WINDOWS\system32\drivers\aswMon2.sys
2011/05/04 09:30:57.0231 2624 aswRdr (a90cf680ca7a323913ca3a0810c8e02d) C:\WINDOWS\system32\drivers\aswRdr.sys
2011/05/04 09:30:57.0682 2624 aswSnx (f7969934cca2e566e95df17380a3cb11) C:\WINDOWS\system32\drivers\aswSnx.sys
2011/05/04 09:30:58.0333 2624 aswSP (478d6a0e0630c31bf4a7f5eb0a05b92c) C:\WINDOWS\system32\drivers\aswSP.sys
2011/05/04 09:30:58.0744 2624 aswTdi (e52e45743e27fd6184c55618a10b81ab) C:\WINDOWS\system32\drivers\aswTdi.sys
2011/05/04 09:30:59.0164 2624 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
2011/05/04 09:30:59.0515 2624 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
2011/05/04 09:31:00.0176 2624 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
2011/05/04 09:31:00.0586 2624 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
2011/05/04 09:31:00.0897 2624 avgntflt (47b879406246ffdced59e18d331a0e7d) C:\WINDOWS\system32\drivers\avgntflt.sys
2011/05/04 09:31:01.0287 2624 basic2 (1b9c81ab9a456eabd9f8335f04b5f495) C:\WINDOWS\system32\DRIVERS\HSF_BSC2.sys
2011/05/04 09:31:01.0648 2624 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
2011/05/04 09:31:02.0128 2624 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
2011/05/04 09:31:02.0469 2624 CCDECODE (6163ed60b684bab19d3352ab22fc48b2) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
2011/05/04 09:31:03.0090 2624 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
2011/05/04 09:31:03.0500 2624 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
2011/05/04 09:31:03.0841 2624 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys
2011/05/04 09:31:06.0004 2624 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
2011/05/04 09:31:06.0505 2624 dmboot (e1968edec81c430108feb23ab07bdb14) C:\WINDOWS\system32\drivers\dmboot.sys
2011/05/04 09:31:07.0005 2624 dmio (1b1520a82e396e46b9ae9fa6b03ff6c6) C:\WINDOWS\system32\drivers\dmio.sys
2011/05/04 09:31:07.0406 2624 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
2011/05/04 09:31:07.0817 2624 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
2011/05/04 09:31:08.0498 2624 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
2011/05/04 09:31:09.0088 2624 Fallback (c823debe2548656549f84a875d65237b) C:\WINDOWS\system32\DRIVERS\HSF_FALL.sys
2011/05/04 09:31:09.0579 2624 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
2011/05/04 09:31:10.0050 2624 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys
2011/05/04 09:31:10.0420 2624 Fips (266dab58619b17bdf37fabbd48d875ca) C:\WINDOWS\system32\drivers\Fips.sys
2011/05/04 09:31:10.0901 2624 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
2011/05/04 09:31:11.0252 2624 FltMgr (157754f0df355a9e0a6f54721914f9c6) C:\WINDOWS\system32\drivers\fltmgr.sys
2011/05/04 09:31:11.0682 2624 Fsks (6483414841d4cab6c3b4db2ac6edd70b) C:\WINDOWS\system32\DRIVERS\HSF_FSKS.sys
2011/05/04 09:31:12.0103 2624 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
2011/05/04 09:31:12.0483 2624 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
2011/05/04 09:31:12.0934 2624 gameenum (5f92fd09e5610a5995da7d775eadcd12) C:\WINDOWS\system32\DRIVERS\gameenum.sys
2011/05/04 09:31:13.0545 2624 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
2011/05/04 09:31:14.0737 2624 HSFHWBS2 (970178e8e003eb1481293830069624b9) C:\WINDOWS\system32\DRIVERS\HSFBS2S2.sys
2011/05/04 09:31:15.0708 2624 HSF_DP (ebb354438a4c5a3327fb97306260714a) C:\WINDOWS\system32\DRIVERS\HSFDPSP2.sys
2011/05/04 09:31:16.0790 2624 hsf_msft (74e379857d4c0dfb56de2d19b8f4c434) C:\WINDOWS\system32\DRIVERS\HSF_MSFT.sys
2011/05/04 09:31:17.0621 2624 HTTP (9f8b0f4276f618964fd118be4289b7cd) C:\WINDOWS\system32\Drivers\HTTP.sys
2011/05/04 09:31:18.0903 2624 i8042prt (0f42de9909b5dbf2c48dd1a79d491af5) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
2011/05/04 09:31:19.0473 2624 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
2011/05/04 09:31:20.0935 2624 ip6fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\drivers\ip6fw.sys
2011/05/04 09:31:21.0276 2624 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
2011/05/04 09:31:21.0767 2624 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
2011/05/04 09:31:22.0137 2624 IpNat (b5a8e215ac29d24d60b4d1250ef05ace) C:\WINDOWS\system32\DRIVERS\ipnat.sys
2011/05/04 09:31:22.0708 2624 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
2011/05/04 09:31:23.0109 2624 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
2011/05/04 09:31:23.0629 2624 isapnp (1091528512e4dd7ed5fddcc4df1c53d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2011/05/04 09:31:24.0060 2624 K56 (9c5e3fdbfcc30cf71a49ca178b9ad442) C:\WINDOWS\system32\DRIVERS\HSF_K56K.sys
2011/05/04 09:31:24.0691 2624 Kbdclass (6f877bf8dc01a550cd666f3bedb2213c) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
2011/05/04 09:31:25.0081 2624 kmixer (d93cad07c5683db066b0b2d2d3790ead) C:\WINDOWS\system32\drivers\kmixer.sys
2011/05/04 09:31:25.0532 2624 KSecDD (674d3e5a593475915dc6643317192403) C:\WINDOWS\system32\drivers\KSecDD.sys
2011/05/04 09:31:26.0554 2624 mdmxsdk (195741aee20369980796b557358cd774) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
2011/05/04 09:31:27.0034 2624 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
2011/05/04 09:31:27.0395 2624 Modem (60210deb037846afe521ebf349964f6b) C:\WINDOWS\system32\drivers\Modem.sys
2011/05/04 09:31:27.0915 2624 MODEMCSA (1992e0d143b09653ab0f9c5e04b0fd65) C:\WINDOWS\system32\drivers\MODEMCSA.sys
2011/05/04 09:31:28.0266 2624 Mouclass (b160ec94114715675509115986400fd9) C:\WINDOWS\system32\DRIVERS\mouclass.sys
2011/05/04 09:31:28.0606 2624 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
2011/05/04 09:31:29.0398 2624 MRxDAV (46edcc8f2db2f322c24f48785cb46366) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
2011/05/04 09:31:29.0958 2624 MRxSmb (fb6c89bb3ce282b08bdb1e3c179e1c39) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2011/05/04 09:31:30.0549 2624 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
2011/05/04 09:31:31.0050 2624 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
2011/05/04 09:31:31.0461 2624 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011/05/04 09:31:31.0801 2624 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
2011/05/04 09:31:32.0252 2624 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
2011/05/04 09:31:32.0622 2624 MSTEE (bf13612142995096ab084f2db7f40f77) C:\WINDOWS\system32\drivers\MSTEE.sys
2011/05/04 09:31:33.0153 2624 ms_mpu401 (ca3e22598f411199adc2dfee76cd0ae0) C:\WINDOWS\system32\drivers\msmpu401.sys
2011/05/04 09:31:33.0564 2624 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
2011/05/04 09:31:33.0944 2624 NABTSFEC (5c8dc6429c43dc6177c1fa5b76290d1a) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
2011/05/04 09:31:34.0435 2624 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
2011/05/04 09:31:34.0785 2624 NdisIP (520ce427a8b298f54112857bcf6bde15) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
2011/05/04 09:31:35.0136 2624 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
2011/05/04 09:31:35.0597 2624 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
2011/05/04 09:31:35.0937 2624 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
2011/05/04 09:31:36.0398 2624 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
2011/05/04 09:31:36.0778 2624 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys
2011/05/04 09:31:37.0189 2624 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys
2011/05/04 09:31:37.0850 2624 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
2011/05/04 09:31:38.0361 2624 Ntfs (b78be402c3f63dd55521f73876951cdd) C:\WINDOWS\system32\drivers\Ntfs.sys
2011/05/04 09:31:39.0021 2624 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
2011/05/04 09:31:39.0352 2624 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
2011/05/04 09:31:39.0793 2624 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
2011/05/04 09:31:40.0273 2624 PAC207 (54183d1ec4a8658bbacb31acd0c8f6df) C:\WINDOWS\system32\DRIVERS\PFC027.SYS
2011/05/04 09:31:40.0864 2624 Parport (76a18caa2fefb28a4ced38d76837e86e) C:\WINDOWS\system32\DRIVERS\parport.sys
2011/05/04 09:31:41.0235 2624 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
2011/05/04 09:31:41.0605 2624 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS\system32\drivers\ParVdm.sys
2011/05/04 09:31:42.0406 2624 PCI (b7979f37bb7b9df2230046134955e6e7) C:\WINDOWS\system32\DRIVERS\pci.sys
2011/05/04 09:31:43.0157 2624 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) C:\WINDOWS\system32\DRIVERS\pciide.sys
2011/05/04 09:31:43.0468 2624 Pcmcia (90505755634407d4ef4c6dea60fc1df9) C:\WINDOWS\system32\drivers\Pcmcia.sys
2011/05/04 09:31:46.0672 2624 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys
2011/05/04 09:31:47.0103 2624 Processor (9a10e4fd13824823da50d4758bd0a645) C:\WINDOWS\system32\DRIVERS\processr.sys
2011/05/04 09:31:47.0474 2624 PSched (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys
2011/05/04 09:31:47.0884 2624 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
2011/05/04 09:31:48.0285 2624 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\WINDOWS\system32\Drivers\PxHelp20.sys
2011/05/04 09:31:50.0077 2624 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
2011/05/04 09:31:50.0538 2624 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
2011/05/04 09:31:50.0919 2624 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
2011/05/04 09:31:51.0269 2624 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
2011/05/04 09:31:51.0760 2624 Rdbss (29d66245adba878fff574cd66abd2884) C:\WINDOWS\system32\DRIVERS\rdbss.sys
2011/05/04 09:31:52.0160 2624 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2011/05/04 09:31:52.0711 2624 rdpdr (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
2011/05/04 09:31:53.0162 2624 RDPWD (d4f5643d7714ef499ae9527fdcd50894) C:\WINDOWS\system32\drivers\RDPWD.sys
2011/05/04 09:31:53.0653 2624 redbook (aba13d33e1f888c9a68599a48a8840d6) C:\WINDOWS\system32\DRIVERS\redbook.sys
2011/05/04 09:31:54.0013 2624 Rksample (bb7549bd94d1aac3599c7606c50c48a0) C:\WINDOWS\system32\DRIVERS\HSF_SAMP.sys
2011/05/04 09:31:54.0524 2624 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
2011/05/04 09:31:54.0944 2624 S3SAVAGE4M (dddc792753e657a9932029c46e60fe52) C:\WINDOWS\system32\DRIVERS\s3sav4m.sys
2011/05/04 09:31:55.0165 2624 SASDIFSV (a3281aec37e0720a2bc28034c2df2a56) D:\SuperAntiSpywer\SASDIFSV.SYS
2011/05/04 09:31:55.0245 2624 SASKUTIL (61db0d0756a99506207fd724e3692b25) D:\SuperAntiSpywer\SASKUTIL.SYS
2011/05/04 09:31:55.0826 2624 Secdrv (07f7f501ad50de2ba2d5842d9b6d6155) C:\WINDOWS\system32\DRIVERS\secdrv.sys
2011/05/04 09:31:56.0286 2624 serenum (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys
2011/05/04 09:31:56.0647 2624 Serial (c1ddbc85251551a840212999da3d95f3) C:\WINDOWS\system32\DRIVERS\serial.sys
2011/05/04 09:31:57.0077 2624 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
2011/05/04 09:31:57.0808 2624 sisagp (732d859b286da692119f286b21a2a114) C:\WINDOWS\system32\DRIVERS\sisagp.sys
2011/05/04 09:31:58.0249 2624 SLIP (5caeed86821fa2c6139e32e9e05ccdc9) C:\WINDOWS\system32\DRIVERS\SLIP.sys
2011/05/04 09:31:58.0670 2624 SoftFax (d9e8e0ce154a2f6430d9efabdf730867) C:\WINDOWS\system32\DRIVERS\HSF_FAXX.sys
2011/05/04 09:31:59.0391 2624 SpeakerPhone (6c843c43fd7f0b42cfe477ce88d0f9b3) C:\WINDOWS\system32\DRIVERS\HSF_SPKP.sys
2011/05/04 09:31:59.0801 2624 splitter (8e186b8f23295d1e42c573b82b80d548) C:\WINDOWS\system32\drivers\splitter.sys
2011/05/04 09:32:00.0192 2624 sr (a74035ea526db97d9d50d2143a55f5cf) C:\WINDOWS\system32\DRIVERS\sr.sys
2011/05/04 09:32:00.0743 2624 Srv (7a4f147cc6b133f905f6e65e2f8669fb) C:\WINDOWS\system32\DRIVERS\srv.sys
2011/05/04 09:32:01.0203 2624 streamip (284c57df5dc7abca656bc2b96a667afb) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
2011/05/04 09:32:01.0524 2624 swenum (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys
2011/05/04 09:32:01.0904 2624 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys
2011/05/04 09:32:03.0557 2624 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys
2011/05/04 09:32:04.0108 2624 Tcpip (2a5554fc5b1e04e131230e3ce035c3f9) C:\WINDOWS\system32\DRIVERS\tcpip.sys
2011/05/04 09:32:04.0548 2624 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys
2011/05/04 09:32:04.0949 2624 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys
2011/05/04 09:32:05.0249 2624 TermDD (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys
2011/05/04 09:32:05.0700 2624 Tones (8021a499db46b2961c285168671cb9af) C:\WINDOWS\system32\DRIVERS\HSF_TONE.sys
2011/05/04 09:32:06.0411 2624 Udfs (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys
2011/05/04 09:32:07.0162 2624 usbhub (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys
2011/05/04 09:32:07.0522 2624 usbohci (bdfe799a8531bad8a5a985821fe78760) C:\WINDOWS\system32\DRIVERS\usbohci.sys
2011/05/04 09:32:07.0843 2624 usbprint (a42369b7cd8886cd7c70f33da6fcbcf5) C:\WINDOWS\system32\DRIVERS\usbprint.sys
2011/05/04 09:32:08.0183 2624 USBSTOR (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2011/05/04 09:32:08.0734 2624 V124 (269c0ade94b90029b12497747be408cb) C:\WINDOWS\system32\DRIVERS\HSF_V124.sys
2011/05/04 09:32:09.0245 2624 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys
2011/05/04 09:32:09.0876 2624 VolSnap (cd8cce067f7e9cbd762c00bdddecaa34) C:\WINDOWS\system32\drivers\VolSnap.sys
2011/05/04 09:32:10.0377 2624 vsdatant (050c38ebb22512122e54b47dc278bccd) C:\WINDOWS\system32\vsdatant.sys
2011/05/04 09:32:11.0058 2624 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys
2011/05/04 09:32:11.0678 2624 wdmaud (2797f33ebf50466020c430ee4f037933) C:\WINDOWS\system32\drivers\wdmaud.sys
2011/05/04 09:32:12.0399 2624 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\Drivers\wpdusb.sys
2011/05/04 09:32:12.0750 2624 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
2011/05/04 09:32:13.0100 2624 WSTCODEC (d5842484f05e12121c511aa93f6439ec) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
2011/05/04 09:32:13.0441 2624 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
2011/05/04 09:32:13.0781 2624 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
2011/05/04 09:32:14.0452 2624 ================================================================================
2011/05/04 09:32:14.0452 2624 Scan finished
2011/05/04 09:32:14.0452 2624 ================================================================================
2011/05/04 09:33:01.0099 3412 Deinitialize success
Re: neviem co s tym,prosim pomozte
To je ok. Můžete mi prosím odpovídat na otázky?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: neviem co s tym,prosim pomozte
Takže máte nové síťové připojení, předpokládám, že ho neznáte?
Pokud mi nebudete odpovídat na otázky, nemůžu Vám pomoci, věšteckou kouli nemám
Pokud mi nebudete odpovídat na otázky, nemůžu Vám pomoci, věšteckou kouli nemám

Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: neviem co s tym,prosim pomozte
nie nepoznam, predtym tu nebolo.Chcem to odpojit ale sa neda lebo vypise ze sa neda lebo je zaneprazdnene odpojovanim a pripojovanim.
Re: neviem co s tym,prosim pomozte
Nejde to odpojit ani v nouzovém režimu?
Co máte za připojení? wifi nebo kabel?
Když se fyzicky odpojíte od internetu, nejde to odebrat?
Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix
Co máte za připojení? wifi nebo kabel?
Když se fyzicky odpojíte od internetu, nejde to odebrat?

http://www.bleepingcomputer.com/combofi ... t-combofix
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: neviem co s tym,prosim pomozte
Mam kabel.Ked odpojim kabel od PC tak to zmizne.
Re: neviem co s tym,prosim pomozte
Ještě něco - máte doma více pc připojených ke stejné síti?
Pokud máte povolené sdílení v síti, tak pak je zapnutá brána internetu http://windows.microsoft.com/cs-CZ/wind ... nd-Control
Pokud máte povolené sdílení v síti, tak pak je zapnutá brána internetu http://windows.microsoft.com/cs-CZ/wind ... nd-Control
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: neviem co s tym,prosim pomozte
Prepacte ze tak neskoro ale po CF som sa nemohol pripojit.Nemam doma viac PC.////////////////////////////////ComboFix 11-05-04.02 - Administrator 04.05.2011 22:27:01.20.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.421.1029.18.511.265 [GMT 2:00]
Running from: c:\documents and settings\Administrator\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: ZoneAlarm Firewall *Disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\drivers\etc\lmhosts
.
.
((((((((((((((((((((((((( Files Created from 2011-04-04 to 2011-05-04 )))))))))))))))))))))))))))))))
.
.
2011-05-04 09:14 . 2011-05-04 10:17 -------- d-----w- c:\documents and settings\Administrator\DoctorWeb
2011-05-03 19:57 . 2011-05-03 19:58 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\IDM
2011-05-02 11:24 . 2011-05-04 20:45 -------- d-----w- c:\windows\system32\CatRoot2
2011-05-01 10:42 . 2011-05-01 10:56 -------- d-----w- C:\Downloads
2011-04-30 22:01 . 2011-04-30 22:19 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PC Tools
2011-04-28 11:42 . 2011-03-17 23:24 69120 ----a-w- c:\windows\system32\zlcomm.dll
2011-04-28 11:42 . 2011-03-17 23:24 104448 ----a-w- c:\windows\system32\zlcommdb.dll
2011-04-28 11:41 . 2011-03-17 23:24 1238528 ----a-w- c:\windows\system32\zpeng25.dll
2011-04-27 13:12 . 2011-04-27 13:12 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-04-27 11:59 . 2010-03-19 19:10 12112 ------w- c:\windows\system32\drivers\aswNdis.sys
2011-04-27 11:58 . 2011-04-27 18:43 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Alwil Software
2011-04-27 11:58 . 2011-04-27 11:58 -------- d-----w- c:\program files\Alwil Software
2011-04-26 05:21 . 2011-04-26 05:21 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Babylon
2011-04-26 05:21 . 2011-04-26 05:21 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Babylon
2011-04-26 05:21 . 2011-04-26 05:21 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\Babylon
2011-04-25 16:27 . 2011-04-25 16:27 -------- d-----w- c:\program files\CheckPoint
2011-04-25 16:26 . 2011-05-01 06:26 -------- d-----w- c:\windows\system32\ZoneLabs
2011-04-25 16:10 . 2011-05-04 20:20 -------- d-----w- c:\windows\Internet Logs
2011-04-24 20:03 . 2011-04-24 20:03 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Norton
2011-04-24 20:03 . 2011-05-04 05:42 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\NPE
2011-04-24 19:28 . 2011-04-24 19:28 -------- d-----w- c:\program files\QuickTime
2011-04-24 12:59 . 2011-04-18 17:17 307288 ------w- c:\windows\system32\drivers\aswSP.sys
2011-04-24 12:59 . 2011-04-18 17:12 19544 ------w- c:\windows\system32\drivers\aswFsBlk.sys
2011-04-24 12:59 . 2011-04-18 17:16 49240 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-04-24 12:59 . 2011-04-18 17:13 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-04-24 12:59 . 2011-04-18 17:17 441176 ------w- c:\windows\system32\drivers\aswSnx.sys
2011-04-24 12:59 . 2011-04-18 17:16 102488 ------w- c:\windows\system32\drivers\aswmon2.sys
2011-04-24 12:59 . 2011-04-18 17:16 96344 ------w- c:\windows\system32\drivers\aswmon.sys
2011-04-24 12:59 . 2011-04-18 17:13 30680 ------w- c:\windows\system32\drivers\aavmker4.sys
2011-04-24 12:59 . 2011-04-18 17:25 199304 ------w- c:\windows\system32\aswBoot.exe
2011-04-24 11:34 . 2011-04-24 11:34 -------- d-----w- c:\program files\Google
2011-04-24 11:34 . 2011-04-18 17:25 40112 ----a-w- c:\windows\avastSS.scr
2011-04-24 11:13 . 2004-08-17 13:49 4096 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\USMT\iconlib.dll
2011-04-24 09:07 . 2004-08-17 13:49 116224 -c--a-w- c:\windows\system32\dllcache\xrxwiadr.dll
2011-04-24 09:07 . 2001-10-24 10:25 23040 -c--a-w- c:\windows\system32\dllcache\xrxwbtmp.dll
2011-04-24 09:07 . 2001-10-24 10:25 17408 -c--a-w- c:\windows\system32\dllcache\xrxscnui.dll
2011-04-24 09:07 . 2001-10-24 10:25 27648 -c--a-w- c:\windows\system32\dllcache\xrxftplt.exe
2011-04-24 09:07 . 2001-10-24 10:25 4608 -c--a-w- c:\windows\system32\dllcache\xrxflnch.exe
2011-04-24 09:07 . 2001-08-18 04:37 99865 -c--a-w- c:\windows\system32\dllcache\xlog.exe
2011-04-24 09:07 . 2001-08-17 18:11 16970 -c--a-w- c:\windows\system32\dllcache\xem336n5.sys
2011-04-24 09:07 . 2004-08-03 20:29 19455 -c--a-w- c:\windows\system32\dllcache\wvchntxx.sys
2011-04-24 09:07 . 2004-08-03 20:29 12063 -c--a-w- c:\windows\system32\dllcache\wsiintxx.sys
2011-04-24 09:07 . 2004-08-17 13:49 8192 -c--a-w- c:\windows\system32\dllcache\wshirda.dll
2011-04-24 09:05 . 2001-08-17 19:28 604253 -c--a-w- c:\windows\system32\dllcache\vmodem.sys
2011-04-24 09:04 . 2001-08-17 18:14 123995 -c--a-w- c:\windows\system32\dllcache\tjisdn.sys
2011-04-24 09:03 . 2001-08-17 18:51 58368 -c--a-w- c:\windows\system32\dllcache\smiminib.sys
2011-04-24 09:02 . 2001-08-17 19:53 6912 -c--a-w- c:\windows\system32\dllcache\seaddsmc.sys
2011-04-24 09:01 . 2004-08-03 21:00 6016 -c--a-w- c:\windows\system32\dllcache\qic157.sys
2011-04-24 09:00 . 2001-10-24 10:25 116736 -c--a-w- c:\windows\system32\dllcache\ovcodec2.dll
2011-04-24 08:59 . 2001-10-24 10:24 19968 -c--a-w- c:\windows\system32\dllcache\mxicfg.dll
2011-04-24 08:59 . 2001-10-24 10:01 22144 -c--a-w- c:\windows\system32\dllcache\mxcard.sys
2011-04-24 08:59 . 2001-08-17 18:50 103296 -c--a-w- c:\windows\system32\dllcache\mtxvideo.sys
2011-04-24 08:59 . 2004-08-03 21:10 49024 -c--a-w- c:\windows\system32\dllcache\mstape.sys
2011-04-24 08:59 . 2001-08-17 19:48 12416 -c--a-w- c:\windows\system32\dllcache\msriffwv.sys
2011-04-24 08:59 . 2004-08-03 21:00 22016 -c--a-w- c:\windows\system32\dllcache\msircomm.sys
2011-04-24 08:59 . 2001-08-17 20:02 35200 -c--a-w- c:\windows\system32\dllcache\msgame.sys
2011-04-24 08:59 . 2001-08-17 19:48 6016 -c--a-w- c:\windows\system32\dllcache\msfsio.sys
2011-04-24 08:59 . 2004-08-03 21:10 51328 -c--a-w- c:\windows\system32\dllcache\msdv.sys
2011-04-24 08:59 . 2001-08-17 19:52 17280 -c--a-w- c:\windows\system32\dllcache\mraid35x.sys
2011-04-24 08:59 . 2004-08-03 21:10 15360 -c--a-w- c:\windows\system32\dllcache\mpe.sys
2011-04-24 08:59 . 2001-10-24 09:54 12160 -c--a-w- c:\windows\system32\dllcache\mouhid.sys
2011-04-24 08:57 . 2001-08-23 13:00 9216 -c--a-w- c:\windows\system32\dllcache\kbdnecat.dll
2011-04-24 08:56 . 2001-08-23 13:00 57398 -c--a-w- c:\windows\system32\dllcache\imjpdadm.exe
2011-04-24 08:55 . 2001-10-24 10:24 19456 -c--a-w- c:\windows\system32\dllcache\hr1w.dll
2011-04-24 08:54 . 2001-08-17 18:15 455296 -c--a-w- c:\windows\system32\dllcache\fusbbase.sys
2011-04-24 08:53 . 2001-08-17 18:11 66591 -c--a-w- c:\windows\system32\dllcache\el90xbc5.sys
2011-04-24 08:52 . 2001-10-24 10:24 420381 -c--a-w- c:\windows\system32\dllcache\dgconfig.dll
2011-04-24 08:51 . 2001-10-24 10:24 170880 -c--a-w- c:\windows\system32\dllcache\cl546x.dll
2011-04-24 08:50 . 2001-10-24 09:49 13824 -c--a-w- c:\windows\system32\dllcache\bulltlp3.sys
2011-04-24 08:49 . 2001-10-24 10:24 144384 -c--a-w- c:\windows\system32\dllcache\avmenum.dll
2011-04-24 08:48 . 2001-08-17 20:07 101888 -c--a-w- c:\windows\system32\dllcache\adpu160m.sys
2011-04-24 08:47 . 2001-10-24 10:24 66048 -c--a-w- c:\windows\system32\dllcache\s3legacy.dll
2011-04-24 08:33 . 2009-08-06 17:24 327896 ----a-w- c:\windows\system32\wucltui.dll
2011-04-24 08:33 . 2009-08-06 17:24 209632 ----a-w- c:\windows\system32\wuweb.dll
2011-04-24 08:33 . 2004-08-17 13:49 6656 ----a-w- c:\windows\system32\wuauserv.dll
2011-04-24 08:33 . 2004-08-17 13:49 183296 ----a-w- c:\windows\system32\wuaueng1.dll
2011-04-24 08:33 . 2009-08-06 17:24 35552 ----a-w- c:\windows\system32\wups.dll
2011-04-24 08:33 . 2009-08-06 17:24 217816 ----a-w- c:\windows\system32\wuaucpl.cpl
2011-04-24 08:33 . 2009-08-06 17:23 1929952 ----a-w- c:\windows\system32\wuaueng.dll
2011-04-24 08:33 . 2004-08-17 13:49 166912 ----a-w- c:\windows\system32\wuauclt1.exe
2011-04-24 08:33 . 2009-08-06 17:24 53472 ----a-w- c:\windows\system32\wuauclt.exe
2011-04-24 08:33 . 2009-08-06 17:23 575704 ----a-w- c:\windows\system32\wuapi.dll
2011-04-24 08:33 . 2004-08-17 13:49 382464 ----a-w- c:\windows\system32\qmgr.dll
2011-04-24 08:12 . 2009-10-22 11:54 37392 ----a-w- c:\windows\system32\drivers\24548982.sys
2011-04-24 08:12 . 2009-10-09 21:31 315408 ----a-w- c:\windows\system32\drivers\2454898.sys
2011-04-24 08:12 . 2009-09-25 15:59 128016 ----a-w- c:\windows\system32\drivers\24548981.sys
2011-04-23 19:37 . 2011-04-23 19:37 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\Avira
2011-04-23 18:15 . 2011-04-23 18:15 512 ----a-w- C:\PhysicalMBR.bin
2011-04-23 16:44 . 2011-03-04 14:11 137656 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-04-23 16:44 . 2011-03-04 12:37 61960 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-04-23 16:44 . 2010-06-17 12:27 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2011-04-23 16:44 . 2010-06-17 12:27 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2011-04-23 16:44 . 2011-04-23 16:44 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Avira
2011-04-21 22:54 . 2011-04-22 10:08 -------- d-----w- c:\windows\system32\XPSViewer
2011-04-21 22:53 . 2011-04-21 22:53 -------- d-----w- c:\program files\MSBuild
2011-04-21 22:53 . 2011-04-21 22:53 -------- d-----w- c:\program files\Reference Assemblies
2011-04-21 22:50 . 2011-04-24 17:36 -------- d-----w- c:\documents and settings\Default User
2011-04-21 22:45 . 2011-04-21 22:45 -------- d-----w- c:\program files\MSXML 6.0
2011-04-21 07:06 . 2011-04-21 07:07 -------- d-----w- c:\program files\Codec Pack - All In 1
2011-04-21 07:06 . 2011-04-21 07:06 -------- d-----w- c:\windows\system32\languages
2011-04-20 20:51 . 2011-04-30 21:44 -------- d-----w- c:\program files\CCleaner
2011-04-20 08:57 . 2011-04-20 08:57 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2011-04-19 15:29 . 1999-11-14 13:41 86016 ----a-w- c:\windows\unvise32.exe
2011-04-18 18:06 . 2011-04-18 19:53 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-04-18 05:48 . 2011-04-22 21:18 -------- d-----w- c:\windows\system32\CatRoot_bak
2011-04-17 21:31 . 2011-04-24 09:26 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVAST Software
2011-04-16 20:22 . 2011-04-25 15:58 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\PCToolsFirewallPlus
2011-04-14 14:36 . 2010-02-12 10:03 293376 ----a-w- c:\windows\system32\browserchoice.exe
2011-04-14 14:05 . 2010-02-16 19:34 2018816 -c--a-w- c:\windows\system32\dllcache\ntkrpamp.exe
2011-04-14 14:04 . 2010-02-16 19:34 2139136 -c--a-w- c:\windows\system32\dllcache\ntkrnlmp.exe
2011-04-13 08:29 . 2011-04-13 20:22 -------- d-----w- c:\documents and settings\All Users\Data aplikací\_comodo_
2011-04-13 08:21 . 2011-04-13 08:21 249592 ----a-w- c:\windows\system32\cssdll32.dll
2011-04-13 04:36 . 2011-04-13 07:05 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Panda Security
2011-04-12 07:48 . 2011-04-12 07:48 -------- d-----w- c:\windows\system32\wbem\Repository
2011-04-12 07:44 . 2011-04-12 07:44 -------- d-----w- c:\program files\Windows Media Connect 2
2011-04-11 14:37 . 2011-04-11 14:37 -------- d-----w- c:\windows\MindSoft Utilities 2011
2011-04-10 07:33 . 2011-04-10 07:33 -------- d-----w- c:\program files\Defraggler
2011-04-10 05:21 . 2011-04-22 15:30 -------- d--h--w- c:\windows\$hf_mig$
2011-04-09 07:21 . 2011-04-24 11:18 -------- d-----w- c:\windows\system32\NtmsData
2011-04-09 05:25 . 2011-04-09 05:25 -------- d--h--w- c:\windows\system32\GroupPolicy
2011-04-09 04:46 . 2011-04-09 08:08 -------- d-----w- c:\windows\SxsCaPendDel
2011-04-08 11:34 . 2011-04-28 10:25 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Data aplikací\Google
2011-04-08 11:29 . 2011-04-28 10:18 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Temp
2011-04-08 11:29 . 2011-04-28 11:50 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\Google
2011-04-08 08:04 . 2006-08-01 13:02 49152 ----a-w- c:\windows\system32\ChCfg.exe
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-21 07:02 . 2010-09-17 18:18 737280 ----a-w- c:\windows\iun6002.exe
2011-04-05 21:11 . 2010-08-02 15:22 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-03-06 17:06 . 2011-03-06 16:46 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll
2011-03-06 17:01 . 2010-09-26 23:31 717296 ----a-w- c:\windows\system32\drivers\sptd.sys
2011-02-26 13:06 . 2011-02-26 13:06 172032 ----a-w- c:\windows\system32\AniGIF.ocx
2011-03-18 18:05 . 2011-04-05 19:52 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="d:\avast\avastUI.exe" [2011-04-18 3460784]
"ZoneAlarm Client"="d:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2011-03-17 1043968]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- d:\superantispywer\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SoundMan"=SOUNDMAN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [24.4.2011 14:59 441176]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [24.4.2011 14:59 307288]
R1 SASDIFSV;SASDIFSV;d:\superantispywer\sasdifsv.sys [17.2.2010 20:25 12872]
R1 SASKUTIL;SASKUTIL;d:\superantispywer\SASKUTIL.SYS [10.5.2010 20:41 67656]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [24.4.2011 14:59 19544]
R3 PAC207;Trust WB-1400T Webcam;c:\windows\system32\drivers\PFC027.SYS [14.5.2007 10:26 508288]
R3 S3SAVAGE4M;S3SAVAGE4M;c:\windows\system32\drivers\s3sav4m.sys [7.7.2008 18:00 77824]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [24.4.2011 13:35 136176]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [24.4.2011 13:35 136176]
S3 pctNdis;PC Tools Firewall Intermediate Filter Service;c:\windows\system32\DRIVERS\pctNdis.sys --> c:\windows\system32\DRIVERS\pctNdis.sys [?]
S3 pctNdisMP;PC Tools Driver;c:\windows\system32\DRIVERS\pctNdis.sys --> c:\windows\system32\DRIVERS\pctNdis.sys [?]
.
Contents of the 'Scheduled Tasks' folder
.
2011-05-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-04-24 11:34]
.
2011-05-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-04-24 11:34]
.
2011-05-04 c:\windows\Tasks\PandaUSBVaccine.job
- e:\panda\Panda USB Vaccine\RunInteractiveWin.exe [2011-04-13 14:45]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://pobox.sk/
mWindow Title = Microsoft Internet Explorer
uInternet Connection Wizard,ShellNext = iexplore
DPF: DirectAnimation Java Classes
DPF: Microsoft XML Parser for Java
FF - ProfilePath - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\sa3oy8yh.default\
FF - prefs.js: browser.startup.homepage - pobox.sk
FF - prefs.js: keyword.URL - hxxp://www.crawler.com/search/dispatcher.aspx? ... 60327&qkw=
FF - prefs.js: network.proxy.ftp - 127.0.0.1
FF - prefs.js: network.proxy.ftp_port - 3129
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 3129
FF - prefs.js: network.proxy.socks - 127.0.0.1
FF - prefs.js: network.proxy.socks_port - 3129
FF - prefs.js: network.proxy.ssl - 127.0.0.1
FF - prefs.js: network.proxy.ssl_port - 3129
FF - prefs.js: network.proxy.type - 4
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-05-04 22:45
Windows 5.1.2600 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-1957994488-1677128483-854245398-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,fe,94,e8,f9,a9,65,49,b0,f4,f4,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,fe,94,e8,f9,a9,65,49,b0,f4,f4,\
"6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,fe,94,e8,f9,a9,65,49,b0,f4,f4,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(576)
d:\superantispywer\SASWINLO.DLL
.
- - - - - - - > 'explorer.exe'(1992)
c:\windows\system32\ieframe.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
d:\avast\AvastSvc.exe
e:\panda\Panda USB Vaccine\USBVaccine.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2011-05-04 22:55:50 - machine was rebooted
ComboFix-quarantined-files.txt 2011-05-04 20:55
.
Pre-Run: 2 193 178 624
Post-Run: 2 185 895 936
.
Current=2 Default=2 Failed=7 LastKnownGood=3 Sets=1,2,3,4,5,7
- - End Of File - - CA488124AD375D999FD93D43652EB87D
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.421.1029.18.511.265 [GMT 2:00]
Running from: c:\documents and settings\Administrator\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: ZoneAlarm Firewall *Disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\drivers\etc\lmhosts
.
.
((((((((((((((((((((((((( Files Created from 2011-04-04 to 2011-05-04 )))))))))))))))))))))))))))))))
.
.
2011-05-04 09:14 . 2011-05-04 10:17 -------- d-----w- c:\documents and settings\Administrator\DoctorWeb
2011-05-03 19:57 . 2011-05-03 19:58 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\IDM
2011-05-02 11:24 . 2011-05-04 20:45 -------- d-----w- c:\windows\system32\CatRoot2
2011-05-01 10:42 . 2011-05-01 10:56 -------- d-----w- C:\Downloads
2011-04-30 22:01 . 2011-04-30 22:19 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PC Tools
2011-04-28 11:42 . 2011-03-17 23:24 69120 ----a-w- c:\windows\system32\zlcomm.dll
2011-04-28 11:42 . 2011-03-17 23:24 104448 ----a-w- c:\windows\system32\zlcommdb.dll
2011-04-28 11:41 . 2011-03-17 23:24 1238528 ----a-w- c:\windows\system32\zpeng25.dll
2011-04-27 13:12 . 2011-04-27 13:12 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-04-27 11:59 . 2010-03-19 19:10 12112 ------w- c:\windows\system32\drivers\aswNdis.sys
2011-04-27 11:58 . 2011-04-27 18:43 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Alwil Software
2011-04-27 11:58 . 2011-04-27 11:58 -------- d-----w- c:\program files\Alwil Software
2011-04-26 05:21 . 2011-04-26 05:21 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Babylon
2011-04-26 05:21 . 2011-04-26 05:21 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Babylon
2011-04-26 05:21 . 2011-04-26 05:21 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\Babylon
2011-04-25 16:27 . 2011-04-25 16:27 -------- d-----w- c:\program files\CheckPoint
2011-04-25 16:26 . 2011-05-01 06:26 -------- d-----w- c:\windows\system32\ZoneLabs
2011-04-25 16:10 . 2011-05-04 20:20 -------- d-----w- c:\windows\Internet Logs
2011-04-24 20:03 . 2011-04-24 20:03 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Norton
2011-04-24 20:03 . 2011-05-04 05:42 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\NPE
2011-04-24 19:28 . 2011-04-24 19:28 -------- d-----w- c:\program files\QuickTime
2011-04-24 12:59 . 2011-04-18 17:17 307288 ------w- c:\windows\system32\drivers\aswSP.sys
2011-04-24 12:59 . 2011-04-18 17:12 19544 ------w- c:\windows\system32\drivers\aswFsBlk.sys
2011-04-24 12:59 . 2011-04-18 17:16 49240 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-04-24 12:59 . 2011-04-18 17:13 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-04-24 12:59 . 2011-04-18 17:17 441176 ------w- c:\windows\system32\drivers\aswSnx.sys
2011-04-24 12:59 . 2011-04-18 17:16 102488 ------w- c:\windows\system32\drivers\aswmon2.sys
2011-04-24 12:59 . 2011-04-18 17:16 96344 ------w- c:\windows\system32\drivers\aswmon.sys
2011-04-24 12:59 . 2011-04-18 17:13 30680 ------w- c:\windows\system32\drivers\aavmker4.sys
2011-04-24 12:59 . 2011-04-18 17:25 199304 ------w- c:\windows\system32\aswBoot.exe
2011-04-24 11:34 . 2011-04-24 11:34 -------- d-----w- c:\program files\Google
2011-04-24 11:34 . 2011-04-18 17:25 40112 ----a-w- c:\windows\avastSS.scr
2011-04-24 11:13 . 2004-08-17 13:49 4096 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\USMT\iconlib.dll
2011-04-24 09:07 . 2004-08-17 13:49 116224 -c--a-w- c:\windows\system32\dllcache\xrxwiadr.dll
2011-04-24 09:07 . 2001-10-24 10:25 23040 -c--a-w- c:\windows\system32\dllcache\xrxwbtmp.dll
2011-04-24 09:07 . 2001-10-24 10:25 17408 -c--a-w- c:\windows\system32\dllcache\xrxscnui.dll
2011-04-24 09:07 . 2001-10-24 10:25 27648 -c--a-w- c:\windows\system32\dllcache\xrxftplt.exe
2011-04-24 09:07 . 2001-10-24 10:25 4608 -c--a-w- c:\windows\system32\dllcache\xrxflnch.exe
2011-04-24 09:07 . 2001-08-18 04:37 99865 -c--a-w- c:\windows\system32\dllcache\xlog.exe
2011-04-24 09:07 . 2001-08-17 18:11 16970 -c--a-w- c:\windows\system32\dllcache\xem336n5.sys
2011-04-24 09:07 . 2004-08-03 20:29 19455 -c--a-w- c:\windows\system32\dllcache\wvchntxx.sys
2011-04-24 09:07 . 2004-08-03 20:29 12063 -c--a-w- c:\windows\system32\dllcache\wsiintxx.sys
2011-04-24 09:07 . 2004-08-17 13:49 8192 -c--a-w- c:\windows\system32\dllcache\wshirda.dll
2011-04-24 09:05 . 2001-08-17 19:28 604253 -c--a-w- c:\windows\system32\dllcache\vmodem.sys
2011-04-24 09:04 . 2001-08-17 18:14 123995 -c--a-w- c:\windows\system32\dllcache\tjisdn.sys
2011-04-24 09:03 . 2001-08-17 18:51 58368 -c--a-w- c:\windows\system32\dllcache\smiminib.sys
2011-04-24 09:02 . 2001-08-17 19:53 6912 -c--a-w- c:\windows\system32\dllcache\seaddsmc.sys
2011-04-24 09:01 . 2004-08-03 21:00 6016 -c--a-w- c:\windows\system32\dllcache\qic157.sys
2011-04-24 09:00 . 2001-10-24 10:25 116736 -c--a-w- c:\windows\system32\dllcache\ovcodec2.dll
2011-04-24 08:59 . 2001-10-24 10:24 19968 -c--a-w- c:\windows\system32\dllcache\mxicfg.dll
2011-04-24 08:59 . 2001-10-24 10:01 22144 -c--a-w- c:\windows\system32\dllcache\mxcard.sys
2011-04-24 08:59 . 2001-08-17 18:50 103296 -c--a-w- c:\windows\system32\dllcache\mtxvideo.sys
2011-04-24 08:59 . 2004-08-03 21:10 49024 -c--a-w- c:\windows\system32\dllcache\mstape.sys
2011-04-24 08:59 . 2001-08-17 19:48 12416 -c--a-w- c:\windows\system32\dllcache\msriffwv.sys
2011-04-24 08:59 . 2004-08-03 21:00 22016 -c--a-w- c:\windows\system32\dllcache\msircomm.sys
2011-04-24 08:59 . 2001-08-17 20:02 35200 -c--a-w- c:\windows\system32\dllcache\msgame.sys
2011-04-24 08:59 . 2001-08-17 19:48 6016 -c--a-w- c:\windows\system32\dllcache\msfsio.sys
2011-04-24 08:59 . 2004-08-03 21:10 51328 -c--a-w- c:\windows\system32\dllcache\msdv.sys
2011-04-24 08:59 . 2001-08-17 19:52 17280 -c--a-w- c:\windows\system32\dllcache\mraid35x.sys
2011-04-24 08:59 . 2004-08-03 21:10 15360 -c--a-w- c:\windows\system32\dllcache\mpe.sys
2011-04-24 08:59 . 2001-10-24 09:54 12160 -c--a-w- c:\windows\system32\dllcache\mouhid.sys
2011-04-24 08:57 . 2001-08-23 13:00 9216 -c--a-w- c:\windows\system32\dllcache\kbdnecat.dll
2011-04-24 08:56 . 2001-08-23 13:00 57398 -c--a-w- c:\windows\system32\dllcache\imjpdadm.exe
2011-04-24 08:55 . 2001-10-24 10:24 19456 -c--a-w- c:\windows\system32\dllcache\hr1w.dll
2011-04-24 08:54 . 2001-08-17 18:15 455296 -c--a-w- c:\windows\system32\dllcache\fusbbase.sys
2011-04-24 08:53 . 2001-08-17 18:11 66591 -c--a-w- c:\windows\system32\dllcache\el90xbc5.sys
2011-04-24 08:52 . 2001-10-24 10:24 420381 -c--a-w- c:\windows\system32\dllcache\dgconfig.dll
2011-04-24 08:51 . 2001-10-24 10:24 170880 -c--a-w- c:\windows\system32\dllcache\cl546x.dll
2011-04-24 08:50 . 2001-10-24 09:49 13824 -c--a-w- c:\windows\system32\dllcache\bulltlp3.sys
2011-04-24 08:49 . 2001-10-24 10:24 144384 -c--a-w- c:\windows\system32\dllcache\avmenum.dll
2011-04-24 08:48 . 2001-08-17 20:07 101888 -c--a-w- c:\windows\system32\dllcache\adpu160m.sys
2011-04-24 08:47 . 2001-10-24 10:24 66048 -c--a-w- c:\windows\system32\dllcache\s3legacy.dll
2011-04-24 08:33 . 2009-08-06 17:24 327896 ----a-w- c:\windows\system32\wucltui.dll
2011-04-24 08:33 . 2009-08-06 17:24 209632 ----a-w- c:\windows\system32\wuweb.dll
2011-04-24 08:33 . 2004-08-17 13:49 6656 ----a-w- c:\windows\system32\wuauserv.dll
2011-04-24 08:33 . 2004-08-17 13:49 183296 ----a-w- c:\windows\system32\wuaueng1.dll
2011-04-24 08:33 . 2009-08-06 17:24 35552 ----a-w- c:\windows\system32\wups.dll
2011-04-24 08:33 . 2009-08-06 17:24 217816 ----a-w- c:\windows\system32\wuaucpl.cpl
2011-04-24 08:33 . 2009-08-06 17:23 1929952 ----a-w- c:\windows\system32\wuaueng.dll
2011-04-24 08:33 . 2004-08-17 13:49 166912 ----a-w- c:\windows\system32\wuauclt1.exe
2011-04-24 08:33 . 2009-08-06 17:24 53472 ----a-w- c:\windows\system32\wuauclt.exe
2011-04-24 08:33 . 2009-08-06 17:23 575704 ----a-w- c:\windows\system32\wuapi.dll
2011-04-24 08:33 . 2004-08-17 13:49 382464 ----a-w- c:\windows\system32\qmgr.dll
2011-04-24 08:12 . 2009-10-22 11:54 37392 ----a-w- c:\windows\system32\drivers\24548982.sys
2011-04-24 08:12 . 2009-10-09 21:31 315408 ----a-w- c:\windows\system32\drivers\2454898.sys
2011-04-24 08:12 . 2009-09-25 15:59 128016 ----a-w- c:\windows\system32\drivers\24548981.sys
2011-04-23 19:37 . 2011-04-23 19:37 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\Avira
2011-04-23 18:15 . 2011-04-23 18:15 512 ----a-w- C:\PhysicalMBR.bin
2011-04-23 16:44 . 2011-03-04 14:11 137656 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-04-23 16:44 . 2011-03-04 12:37 61960 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-04-23 16:44 . 2010-06-17 12:27 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2011-04-23 16:44 . 2010-06-17 12:27 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2011-04-23 16:44 . 2011-04-23 16:44 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Avira
2011-04-21 22:54 . 2011-04-22 10:08 -------- d-----w- c:\windows\system32\XPSViewer
2011-04-21 22:53 . 2011-04-21 22:53 -------- d-----w- c:\program files\MSBuild
2011-04-21 22:53 . 2011-04-21 22:53 -------- d-----w- c:\program files\Reference Assemblies
2011-04-21 22:50 . 2011-04-24 17:36 -------- d-----w- c:\documents and settings\Default User
2011-04-21 22:45 . 2011-04-21 22:45 -------- d-----w- c:\program files\MSXML 6.0
2011-04-21 07:06 . 2011-04-21 07:07 -------- d-----w- c:\program files\Codec Pack - All In 1
2011-04-21 07:06 . 2011-04-21 07:06 -------- d-----w- c:\windows\system32\languages
2011-04-20 20:51 . 2011-04-30 21:44 -------- d-----w- c:\program files\CCleaner
2011-04-20 08:57 . 2011-04-20 08:57 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2011-04-19 15:29 . 1999-11-14 13:41 86016 ----a-w- c:\windows\unvise32.exe
2011-04-18 18:06 . 2011-04-18 19:53 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-04-18 05:48 . 2011-04-22 21:18 -------- d-----w- c:\windows\system32\CatRoot_bak
2011-04-17 21:31 . 2011-04-24 09:26 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVAST Software
2011-04-16 20:22 . 2011-04-25 15:58 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\PCToolsFirewallPlus
2011-04-14 14:36 . 2010-02-12 10:03 293376 ----a-w- c:\windows\system32\browserchoice.exe
2011-04-14 14:05 . 2010-02-16 19:34 2018816 -c--a-w- c:\windows\system32\dllcache\ntkrpamp.exe
2011-04-14 14:04 . 2010-02-16 19:34 2139136 -c--a-w- c:\windows\system32\dllcache\ntkrnlmp.exe
2011-04-13 08:29 . 2011-04-13 20:22 -------- d-----w- c:\documents and settings\All Users\Data aplikací\_comodo_
2011-04-13 08:21 . 2011-04-13 08:21 249592 ----a-w- c:\windows\system32\cssdll32.dll
2011-04-13 04:36 . 2011-04-13 07:05 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Panda Security
2011-04-12 07:48 . 2011-04-12 07:48 -------- d-----w- c:\windows\system32\wbem\Repository
2011-04-12 07:44 . 2011-04-12 07:44 -------- d-----w- c:\program files\Windows Media Connect 2
2011-04-11 14:37 . 2011-04-11 14:37 -------- d-----w- c:\windows\MindSoft Utilities 2011
2011-04-10 07:33 . 2011-04-10 07:33 -------- d-----w- c:\program files\Defraggler
2011-04-10 05:21 . 2011-04-22 15:30 -------- d--h--w- c:\windows\$hf_mig$
2011-04-09 07:21 . 2011-04-24 11:18 -------- d-----w- c:\windows\system32\NtmsData
2011-04-09 05:25 . 2011-04-09 05:25 -------- d--h--w- c:\windows\system32\GroupPolicy
2011-04-09 04:46 . 2011-04-09 08:08 -------- d-----w- c:\windows\SxsCaPendDel
2011-04-08 11:34 . 2011-04-28 10:25 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Data aplikací\Google
2011-04-08 11:29 . 2011-04-28 10:18 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Temp
2011-04-08 11:29 . 2011-04-28 11:50 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\Google
2011-04-08 08:04 . 2006-08-01 13:02 49152 ----a-w- c:\windows\system32\ChCfg.exe
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-21 07:02 . 2010-09-17 18:18 737280 ----a-w- c:\windows\iun6002.exe
2011-04-05 21:11 . 2010-08-02 15:22 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-03-06 17:06 . 2011-03-06 16:46 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll
2011-03-06 17:01 . 2010-09-26 23:31 717296 ----a-w- c:\windows\system32\drivers\sptd.sys
2011-02-26 13:06 . 2011-02-26 13:06 172032 ----a-w- c:\windows\system32\AniGIF.ocx
2011-03-18 18:05 . 2011-04-05 19:52 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="d:\avast\avastUI.exe" [2011-04-18 3460784]
"ZoneAlarm Client"="d:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2011-03-17 1043968]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- d:\superantispywer\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SoundMan"=SOUNDMAN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [24.4.2011 14:59 441176]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [24.4.2011 14:59 307288]
R1 SASDIFSV;SASDIFSV;d:\superantispywer\sasdifsv.sys [17.2.2010 20:25 12872]
R1 SASKUTIL;SASKUTIL;d:\superantispywer\SASKUTIL.SYS [10.5.2010 20:41 67656]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [24.4.2011 14:59 19544]
R3 PAC207;Trust WB-1400T Webcam;c:\windows\system32\drivers\PFC027.SYS [14.5.2007 10:26 508288]
R3 S3SAVAGE4M;S3SAVAGE4M;c:\windows\system32\drivers\s3sav4m.sys [7.7.2008 18:00 77824]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [24.4.2011 13:35 136176]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [24.4.2011 13:35 136176]
S3 pctNdis;PC Tools Firewall Intermediate Filter Service;c:\windows\system32\DRIVERS\pctNdis.sys --> c:\windows\system32\DRIVERS\pctNdis.sys [?]
S3 pctNdisMP;PC Tools Driver;c:\windows\system32\DRIVERS\pctNdis.sys --> c:\windows\system32\DRIVERS\pctNdis.sys [?]
.
Contents of the 'Scheduled Tasks' folder
.
2011-05-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-04-24 11:34]
.
2011-05-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-04-24 11:34]
.
2011-05-04 c:\windows\Tasks\PandaUSBVaccine.job
- e:\panda\Panda USB Vaccine\RunInteractiveWin.exe [2011-04-13 14:45]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://pobox.sk/
mWindow Title = Microsoft Internet Explorer
uInternet Connection Wizard,ShellNext = iexplore
DPF: DirectAnimation Java Classes
DPF: Microsoft XML Parser for Java
FF - ProfilePath - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\sa3oy8yh.default\
FF - prefs.js: browser.startup.homepage - pobox.sk
FF - prefs.js: keyword.URL - hxxp://www.crawler.com/search/dispatcher.aspx? ... 60327&qkw=
FF - prefs.js: network.proxy.ftp - 127.0.0.1
FF - prefs.js: network.proxy.ftp_port - 3129
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 3129
FF - prefs.js: network.proxy.socks - 127.0.0.1
FF - prefs.js: network.proxy.socks_port - 3129
FF - prefs.js: network.proxy.ssl - 127.0.0.1
FF - prefs.js: network.proxy.ssl_port - 3129
FF - prefs.js: network.proxy.type - 4
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-05-04 22:45
Windows 5.1.2600 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-1957994488-1677128483-854245398-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,fe,94,e8,f9,a9,65,49,b0,f4,f4,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,fe,94,e8,f9,a9,65,49,b0,f4,f4,\
"6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,fe,94,e8,f9,a9,65,49,b0,f4,f4,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(576)
d:\superantispywer\SASWINLO.DLL
.
- - - - - - - > 'explorer.exe'(1992)
c:\windows\system32\ieframe.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
d:\avast\AvastSvc.exe
e:\panda\Panda USB Vaccine\USBVaccine.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2011-05-04 22:55:50 - machine was rebooted
ComboFix-quarantined-files.txt 2011-05-04 20:55
.
Pre-Run: 2 193 178 624
Post-Run: 2 185 895 936
.
Current=2 Default=2 Failed=7 LastKnownGood=3 Sets=1,2,3,4,5,7
- - End Of File - - CA488124AD375D999FD93D43652EB87D
Re: neviem co s tym,prosim pomozte
Neviete ako mozem tu branu vypnut?Lebo neda sa kliknut na ikonu moznosti internetu nareaguje.
Re: neviem co s tym,prosim pomozte
Máte doma víc počítačů na stejné síti?
http://support.microsoft.com/kb/304040/cs
http://support.microsoft.com/kb/304040/cs
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: neviem co s tym,prosim pomozte
Nemam doma viac pocitacov.