prosím o kontrolu -malware ????

[hinatahyuuga]

prosím o kontrolu logu mam podozrenie na malware , pretože mi otvára stránky samo od seba ked mam zapnuty priehladac
dakujem


Logfile of random's system information tool 1.08 (written by random/random)
Run by Blajz at 2011-04-11 09:24:41
Microsoft Windows 7 Ultimate
System drive C: has 108 GB (37%) free of 295 GB
Total RAM: 3066 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:24:50, on 11. 4. 2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\DivX\DivX Plus Web Player\DDMService.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Mozilla Firefox 4.0 Beta 11\firefox.exe
C:\Program Files\Mozilla Firefox 4.0 Beta 11\plugin-container.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Blajz\Desktop\RSIT.exe
C:\Program Files\trend micro\Blajz.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [DivX Download Manager] "C:\Program Files\DivX\DivX Plus Web Player\DDmService.exe" start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files\Tunngle\TnglCtrl.exe

--
End of file - 6816 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2011-01-13 3396624]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-11-25 98304]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]
"hpqSRMon"=C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-01-11 1230704]
"DivX Download Manager"=C:\Program Files\DivX\DivX Plus Web Player\DDmService.exe [2010-12-08 63360]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"Pando Media Booster"=C:\Program Files\Pando Networks\Media Booster\PMB.exe [2010-12-29 3046808]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2009-06-17 2363392]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2011-04-11 09:24:41 ----D---- C:\rsit
2011-04-11 09:24:41 ----D---- C:\Program Files\trend micro
2011-03-30 08:34:34 ----D---- C:\Program Files\Microsoft.NET
2011-03-30 08:34:07 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-03-30 08:34:07 ----A---- C:\Windows\system32\PresentationHost.exe
2011-03-30 08:34:07 ----A---- C:\Windows\system32\mscoree.dll
2011-03-30 08:34:06 ----A---- C:\Windows\system32\netfxperf.dll
2011-03-30 08:34:06 ----A---- C:\Windows\system32\dfshim.dll
2011-03-29 14:47:53 ----D---- C:\Users\Blajz\AppData\Roaming\Ahead
2011-03-29 14:45:58 ----D---- C:\ProgramData\Ahead
2011-03-29 14:45:25 ----D---- C:\Program Files\Nero
2011-03-29 14:45:25 ----D---- C:\Program Files\Common Files\Ahead
2011-03-23 22:28:02 ----A---- C:\Windows\system32\drivers\hamachi.sys
2011-03-21 21:11:46 ----D---- C:\Users\Blajz\AppData\Roaming\.minecraft
2011-03-21 21:11:46 ----A---- C:\Users\Blajz\AppData\Roaming\Uninstal.exe
2011-03-18 23:22:12 ----D---- C:\Root
2011-03-18 23:22:07 ----D---- C:\Program Files\Activision
2011-03-12 15:39:41 ----D---- C:\ProgramData\LightScribe
2011-03-12 15:39:35 ----D---- C:\Users\Blajz\AppData\Roaming\Nero
2011-03-12 15:35:49 ----D---- C:\Program Files\Common Files\LightScribe
2011-03-12 15:21:04 ----D---- C:\ProgramData\Nero
2011-03-12 15:10:11 ----D---- C:\Users\Blajz\AppData\Roaming\GetRightToGo
2011-03-11 21:30:34 ----D---- C:\Program Files\Sierra
2011-03-11 18:24:30 ----D---- C:\ProgramData\Trymedia
2011-03-08 19:24:04 ----D---- C:\Users\Blajz\AppData\Roaming\TS3Client
2011-03-08 19:23:01 ----D---- C:\Program Files\TeamSpeak 3 Client
2011-03-05 12:20:08 ----A---- C:\ProgramData\ra3.ini
2011-03-03 10:03:07 ----D---- C:\Users\Blajz\AppData\Roaming\Red Alert 3
2011-02-23 22:22:51 ----A---- C:\Windows\system32\drivers\atksgt.sys
2011-02-23 22:22:50 ----A---- C:\Windows\system32\drivers\lirsgt.sys
2011-02-23 16:08:26 ----D---- C:\Program Files\Common Files\Java
2011-02-23 16:08:15 ----A---- C:\Windows\system32\javaws.exe
2011-02-23 16:08:15 ----A---- C:\Windows\system32\javaw.exe
2011-02-23 16:08:15 ----A---- C:\Windows\system32\java.exe
2011-02-23 16:07:20 ----D---- C:\ProgramData\McAfee
2011-02-23 12:06:15 ----D---- C:\Program Files\Mozilla Firefox 4.0 Beta 11
2011-02-13 10:56:01 ----D---- C:\Program Files\Common Files\Skype
2011-02-09 12:55:29 ----D---- C:\Windows\Minidump
2011-02-03 20:33:39 ----D---- C:\Users\Blajz\AppData\Roaming\Local
2011-02-03 20:33:22 ----D---- C:\Users\Blajz\AppData\Roaming\DivX
2011-02-03 20:33:03 ----D---- C:\Program Files\Common Files\PX Storage Engine
2011-02-03 20:32:19 ----D---- C:\Program Files\Common Files\DivX Shared
2011-02-03 20:31:38 ----D---- C:\Program Files\DivX
2011-02-03 20:31:16 ----D---- C:\ProgramData\DivX
2011-02-01 14:03:30 ----D---- C:\2K Games
2011-01-27 09:12:00 ----D---- C:\Users\Blajz\AppData\Roaming\Kalypso Media
2011-01-26 10:55:09 ----A---- C:\Windows\system32\drivers\cpuz135_x32.sys
2011-01-26 10:55:08 ----D---- C:\Program Files\CPUID
2011-01-24 23:45:03 ----A---- C:\Windows\system32\WNASPINT.DLL
2011-01-24 23:20:51 ----D---- C:\eJay
2011-01-24 15:57:32 ----HD---- C:\Windows\msdownld.tmp
2011-01-24 15:56:35 ----D---- C:\Windows\system32\directx
2011-01-22 12:07:47 ----D---- C:\Program Files\Bethesda Softworks
2011-01-22 11:00:17 ----D---- C:\Program Files\Common Files\InstallShield
2011-01-19 08:10:41 ----D---- C:\Users\Blajz\AppData\Roaming\HP
2011-01-19 08:10:41 ----D---- C:\ProgramData\WEBREG
2011-01-19 08:10:13 ----D---- C:\ProgramData\Hewlett-Packard
2011-01-17 21:12:16 ----D---- C:\ProgramData\HP Product Assistant
2011-01-17 21:10:49 ----D---- C:\Program Files\Common Files\HP
2011-01-17 21:10:42 ----D---- C:\Program Files\Common Files\Hewlett-Packard
2011-01-17 21:10:11 ----D---- C:\Program Files\HP
2011-01-17 21:10:10 ----HD---- C:\Config.Msi
2011-01-17 21:09:25 ----D---- C:\ProgramData\HP
2011-01-17 21:09:16 ----A---- C:\Windows\system32\hpzids01.dll
2011-01-17 21:09:16 ----A---- C:\Windows\system32\hppldcoi.dll
2011-01-17 21:09:16 ----A---- C:\Windows\system32\hpowiax7.dll
2011-01-17 21:09:15 ----A---- C:\Windows\system32\hpovst15.dll
2011-01-17 21:09:15 ----A---- C:\Windows\system32\hpotscl6.dll
2011-01-15 14:41:55 ----D---- C:\Users\Blajz\AppData\Roaming\Hamachi
2011-01-15 14:41:21 ----D---- C:\Program Files\Hamachi
2011-01-15 11:48:24 ----D---- C:\Program Files\Microsoft XNA
2011-01-15 11:32:05 ----SHD---- C:\ProgramData\SecuROM
2011-01-15 11:07:10 ----D---- C:\Windows\D56B0E274A3E46C9B5C1D93D580C099C.TMP
2011-01-12 17:27:29 ----D---- C:\Program Files\Google

======List of files/folders modified in the last 3 months======

2011-04-11 09:24:50 ----D---- C:\Windows\Prefetch
2011-04-11 09:24:46 ----D---- C:\Windows\Temp
2011-04-11 09:24:41 ----RD---- C:\Program Files
2011-04-11 09:24:33 ----D---- C:\Users\Blajz\AppData\Roaming\Skype
2011-04-11 09:22:21 ----D---- C:\Windows
2011-04-11 08:20:23 ----D---- C:\Users\Blajz\AppData\Roaming\skypePM
2011-04-11 00:13:32 ----SHD---- C:\System Volume Information
2011-04-10 22:18:07 ----D---- C:\Windows\system32\config
2011-04-10 14:27:37 ----D---- C:\Windows\System32
2011-04-10 14:27:37 ----D---- C:\Windows\inf
2011-04-10 14:27:37 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-04-10 14:17:07 ----D---- C:\Windows\Tasks
2011-04-10 14:17:07 ----D---- C:\Windows\system32\wfp
2011-04-10 14:17:02 ----D---- C:\Windows\system32\wbem
2011-04-10 14:16:06 ----D---- C:\Windows\system32\DriverStore
2011-04-10 14:16:06 ----D---- C:\Windows\system32\drivers
2011-04-10 14:16:06 ----D---- C:\Windows\system32\catroot2
2011-04-10 14:16:05 ----D---- C:\Windows\system32\drivers\UMDF
2011-04-10 14:16:04 ----D---- C:\Windows\AppCompat
2011-04-10 14:16:03 ----D---- C:\Users\Blajz\AppData\Roaming\vlc
2011-04-10 14:16:03 ----D---- C:\ProgramData\PMB Files
2011-04-10 14:15:57 ----D---- C:\games
2011-04-10 14:15:55 ----D---- C:\Windows\registration
2011-04-01 07:20:13 ----D---- C:\Users\Blajz\AppData\Roaming\uTorrent
2011-03-31 12:28:22 ----D---- C:\Windows\Microsoft.NET
2011-03-31 12:28:21 ----RSD---- C:\Windows\assembly
2011-03-31 09:38:42 ----D---- C:\Windows\winsxs
2011-03-30 08:37:13 ----SHD---- C:\Windows\Installer
2011-03-30 08:34:35 ----D---- C:\Windows\system32\en-US
2011-03-30 08:34:10 ----D---- C:\Windows\system32\catroot
2011-03-30 08:33:55 ----D---- C:\Windows\SoftwareDistribution
2011-03-30 08:26:11 ----HD---- C:\Program Files\InstallShield Installation Information
2011-03-29 14:45:58 ----HD---- C:\ProgramData
2011-03-29 14:45:43 ----D---- C:\Windows\ehome
2011-03-29 14:45:25 ----D---- C:\Program Files\Common Files
2011-03-23 22:28:21 ----D---- C:\Windows\system32\Tasks
2011-03-18 11:40:22 ----D---- C:\Windows\system32\NDF
2011-02-24 13:58:59 ----D---- C:\Users\Blajz\AppData\Roaming\Zoner
2011-02-24 13:38:31 ----SHD---- C:\$Recycle.Bin
2011-02-23 16:08:10 ----D---- C:\Program Files\Java
2011-02-22 13:02:35 ----A---- C:\Windows\system32\lpcio.dll
2011-02-08 20:32:46 ----RSD---- C:\Windows\Fonts
2011-02-03 20:29:51 ----SD---- C:\Users\Blajz\AppData\Roaming\Microsoft
2011-02-02 22:40:23 ----A---- C:\Windows\system32\deployJava1.dll
2011-02-02 18:11:20 ----N---- C:\Windows\system32\MpSigStub.exe
2011-01-27 23:59:47 ----D---- C:\ProgramData\Tunngle
2011-01-27 23:59:46 ----D---- C:\Users\Blajz\AppData\Roaming\Tunngle
2011-01-27 08:16:45 ----D---- C:\Windows\system32\wdi
2011-01-19 12:40:25 ----D---- C:\Windows\ModemLogs
2011-01-19 08:10:17 ----A---- C:\Windows\win.ini
2011-01-19 08:09:33 ----D---- C:\Windows\twain_32
2011-01-15 12:00:08 ----D---- C:\Windows\LiveKernelReports
2011-01-15 11:48:25 ----D---- C:\Program Files\Common Files\microsoft shared
2011-01-15 11:07:58 ----D---- C:\Windows\Logs
2011-01-15 11:07:09 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-01-13 10:47:32 ----A---- C:\Windows\system32\aswBoot.exe
2011-01-12 09:57:05 ----D---- C:\ProgramData\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-12-28 691696]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-01-13 23632]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-01-13 294608]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-01-13 47440]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-01-13 17744]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-01-13 51280]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2011-02-23 281760]
R2 cpuz135;cpuz135; \??\C:\Windows\system32\drivers\cpuz135_x32.sys [2010-12-27 22504]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2011-02-23 25888]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-07-14 1035776]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-11-26 6650368]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-11-26 231936]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys [2009-09-16 27136]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 afymhv98;afymhv98; C:\Windows\system32\drivers\afymhv98.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-11-26 6650368]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2009-07-14 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 EagleXNt;EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2011-03-23 25280]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-11-26 176128]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-01-13 40384]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-06-17 73728]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632]
R2 TunngleService;TunngleService; C:\Program Files\Tunngle\TnglCtrl.exe [2010-11-22 718072]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-02-03 135664]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-06-11 136120]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-04-13 792112]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-05-08 271920]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Roli]

Zdravím, tohle fixni v HJT :

O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [DivX Download Manager] "C:\Program Files\DivX\DivX Plus Web Player\DDmService.exe" start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

HJT najdeš zde :

C:\Program Files\trend micro\Blajz.exe

Fix znamená že spustíš HJT jako admin

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Přes Start >> Všechny programy >> Příslušenství >> Spustit >> napiš - services.msc >> Enter. Najdi službu :

NBService

NMIndexingService

klikni na ni pravým myšítkem, zvol vlastnosti, na další kartě nejprve službu zastav tlačítkem Zastavit a u položky Typ spouštění zvol Zakázáno.


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Pak použij Mbam z mého podpisu a dej mi sem z něj log, předem nic nemazat !!!

[hinatahyuuga]

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 6331

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

11. 4. 2011 15:19:53
mbam-log-2011-04-11 (15-19-53).txt

Typ kontroly: Rychlý test
Testované objekty: 151833
Uplynulý čas: 4 minut, 4 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

[Roli]

Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

[hinatahyuuga]

ComboFix 11-04-10.04 - Blajz . 04. 2011 16:11:38.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.421.1029.18.3066.1954 [GMT 2:00]
Running from: c:\users\Blajz\Desktop\ComboFix.exe
AV: avast! Antivirus *Enabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Enabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Blajz\AppData\Roaming\Local
c:\users\Blajz\AppData\Roaming\Uninstal.exe
.
.
((((((((((((((((((((((((( Files Created from 2011-03-11 to 2011-04-11 )))))))))))))))))))))))))))))))
.
.
2011-04-11 14:18 . 2011-04-11 14:18 -------- d-----w- c:\users\Blajz\AppData\Local\temp
2011-04-11 14:18 . 2011-04-11 14:18 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-04-11 13:13 . 2011-04-11 13:13 -------- d-----w- c:\program files\MSXML 4.0
2011-04-11 13:10 . 2011-04-11 13:10 -------- d-----w- c:\users\Blajz\AppData\Roaming\Malwarebytes
2011-04-11 13:10 . 2010-12-20 16:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-04-11 13:10 . 2011-04-11 13:10 -------- d-----w- c:\programdata\Malwarebytes
2011-04-11 13:10 . 2010-12-20 16:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-04-11 13:10 . 2011-04-11 13:10 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-04-11 13:05 . 2009-07-13 16:03 3584 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\en-US\LXKPTPRC.DLL.mui
2011-04-11 07:24 . 2011-04-11 07:24 -------- d-----w- C:\rsit
2011-04-11 07:24 . 2011-04-11 07:24 -------- d-----w- c:\program files\trend micro
2011-04-10 12:30 . 2011-03-23 08:11 6792528 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D90C41EF-FD09-4282-8834-E4B15211AAB1}\mpengine.dll
2011-03-30 06:34 . 2011-03-30 06:34 -------- d-----w- c:\program files\Microsoft.NET
2011-03-30 06:34 . 2009-11-25 10:47 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2011-03-30 06:34 . 2009-11-25 10:47 297808 ----a-w- c:\windows\system32\mscoree.dll
2011-03-30 06:34 . 2009-11-25 10:47 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2011-03-30 06:34 . 2009-11-25 10:47 49472 ----a-w- c:\windows\system32\netfxperf.dll
2011-03-30 06:34 . 2009-11-25 10:47 1130824 ----a-w- c:\windows\system32\dfshim.dll
2011-03-29 12:47 . 2011-03-29 12:47 -------- d-----w- c:\users\Blajz\AppData\Roaming\Ahead
2011-03-29 12:46 . 2011-03-29 12:48 -------- d-----w- c:\users\Blajz\AppData\Local\Ahead
2011-03-29 12:45 . 2011-03-29 12:45 -------- d-----w- c:\programdata\Ahead
2011-03-29 12:45 . 2011-03-29 12:45 -------- d-----w- c:\program files\Common Files\Ahead
2011-03-29 12:45 . 2011-03-29 12:45 -------- d-----w- c:\program files\Nero
2011-03-23 20:28 . 2011-03-23 20:28 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2011-03-21 19:11 . 2011-03-31 15:46 -------- d-----w- c:\users\Blajz\AppData\Roaming\.minecraft
2011-03-20 17:45 . 2011-03-20 17:45 -------- d-----w- c:\users\Blajz\AppData\Local\HP
2011-03-18 21:22 . 2011-03-18 21:31 -------- d-----w- C:\Root
2011-03-18 21:22 . 2011-03-18 21:22 -------- d-----w- c:\program files\Activision
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-16 07:10 . 2011-01-08 12:18 88 --sh--r- c:\programdata\9AAF32CF5F.sys
2011-03-16 07:10 . 2011-01-08 12:18 2828 --sha-w- c:\programdata\KGyGaAvL.sys
2011-02-25 13:48 . 2011-02-25 13:48 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2011-02-23 20:22 . 2011-02-23 20:22 281760 ----a-w- c:\windows\system32\drivers\atksgt.sys
2011-02-23 20:22 . 2011-02-23 20:22 25888 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2011-02-22 11:02 . 2009-07-13 23:16 6656 ----a-w- c:\windows\system32\lpcio.dll
2011-02-03 18:31 . 2011-02-03 18:31 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2011-02-03 18:31 . 2011-02-03 18:31 458048 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-02-02 20:40 . 2011-01-09 14:32 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-02-02 16:11 . 2010-12-28 10:03 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-01-13 08:47 . 2010-12-28 09:51 38848 ----a-w- c:\windows\avastSS.scr
2011-01-13 08:47 . 2010-12-28 09:51 188216 ----a-w- c:\windows\system32\aswBoot.exe
2011-01-13 08:41 . 2010-12-28 09:52 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-01-13 08:40 . 2010-12-28 09:52 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-01-13 08:37 . 2010-12-28 09:52 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-01-13 08:37 . 2010-12-28 09:52 51280 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-01-13 08:37 . 2010-12-28 09:52 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2010-12-29 3046808]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-06-17 2363392]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-01-13 3396624]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-11-25 98304]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-01-30 35736]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-15 932288]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-01-10 1230704]
"DivX Download Manager"="c:\program files\DivX\DivX Plus Web Player\DDmService.exe" [2010-12-08 63360]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-02-03 135664]
R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-12-28 691696]
S1 aswSP;aswSP; [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-11-26 176128]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-01-13 51280]
S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x32.sys [2010-12-27 22504]
S2 TunngleService;TunngleService;c:\program files\Tunngle\TnglCtrl.exe [2010-11-22 718072]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2010-11-26 6650368]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-11-26 231936]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys [2009-09-16 27136]
S3 yukonw7;Ovladač NDIS6.2 Miniport pro řadič Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-07-13 311296]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-06-17 11:11 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2011-04-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-02-03 18:31]
.
2011-04-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-02-03 18:31]
.
.
------- Supplementary Scan -------
.
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
FF - ProfilePath - c:\users\Blajz\AppData\Roaming\Mozilla\Firefox\Profiles\0vrvzzak.default\
.
- - - - ORPHANS REMOVED - - - -
.
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
AddRemove-Minecraft 1.2.0_02 - c:\users\Blajz\AppData\Roaming\Uninstal.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-280847252-1547578034-3754843991-1000\Software\SecuROM\License information*]
"datasecu"=hex:14,f5,5d,e7,db,32,ed,65,47,9f,f4,a2,ac,f5,df,24,92,fa,e6,cf,4b,
af,aa,14,22,75,99,52,85,78,c2,72,02,2c,7e,c7,60,7b,45,cf,1b,69,79,a8,48,ee,\
"rkeysecu"=hex:8c,bc,c9,b7,db,1c,01,47,c2,dc,9d,1d,86,fe,29,e2
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-04-11 16:20:15
ComboFix-quarantined-files.txt 2011-04-11 14:20
.
Pre-Run: Volných bajtů: 76 370 063 360
Post-Run: Volných bajtů: 82 893 058 048
.
- - End Of File - - A9434E7ACC2CBE605EA2D86BB8703F3F

[Roli]

Pokud jsi tak ještě neučinil, přesuň Combofix na plochu

otevři si Poznámkový blok

do něj zkopíruj skript z následujícího okna:

Kód: Vybrat vše

RegLock::
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:



Po aplikaci na Tebe vypadne další log, zkopíruj ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,

v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci