Vyskakování webových oken*

[Laura]

ComboFix 09-08-26.05 - Pavel 26.08.2009 21:46.2.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1250.420.1029.18.1022.495 [GMT 2:00]
Spuštěný z: c:\users\Pavel\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Pavel\Desktop\CFScript.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

FILE ::
"c:\programdata\ezsidmv.dat"
"c:\programdata\Sukoku\sukoku113.exe"
"c:\users\All Users\Sukoku\sukoku113.exe"
"c:\users\Pavel\AppData\Roaming\nvModes.dat"
"c:\users\Pavel\AppData\Roaming\wklnhst.dat"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\NOS
c:\programdata\ezsidmv.dat
c:\programdata\NOS
c:\programdata\NOS\Adobe_Downloads\arh.exe
c:\programdata\Sukoku\sukoku113.exe
c:\users\Pavel\AppData\Roaming\nvModes.dat
c:\users\Pavel\AppData\Roaming\wklnhst.dat

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-07-26 do 2009-08-26 )))))))))))))))))))))))))))))))
.

2009-08-26 19:56 . 2009-08-26 20:00 -------- d-----w- c:\users\Pavel\AppData\Local\temp
2009-08-26 19:56 . 2009-08-26 19:56 -------- d-----w- c:\users\Public\AppData\Local\temp
2009-08-26 19:56 . 2009-08-26 19:56 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-08-26 14:24 . 2009-08-26 14:24 -------- d-----w- c:\windows\LastGood.Tmp
2009-08-26 12:54 . 2009-08-26 12:54 -------- d-----w- c:\users\Pavel\AppData\Roaming\PeerNetworking
2009-08-25 16:49 . 2009-08-25 16:49 -------- d-----w- c:\users\Pavel\AppData\Roaming\Malwarebytes
2009-08-25 16:49 . 2009-08-25 16:49 -------- d-----w- c:\programdata\Malwarebytes
2009-08-25 16:08 . 2009-08-25 16:08 -------- d-----w- c:\program files\Trend Micro
2009-08-22 08:29 . 2009-08-22 08:29 -------- d-----w- c:\program files\Alwil Software
2009-08-21 12:44 . 2009-08-21 12:53 -------- d-----w- c:\program files\PowerArchiver
2009-08-19 17:26 . 2009-08-26 19:55 -------- d-----w- c:\programdata\Sukoku
2009-08-19 17:26 . 2009-08-21 08:21 -------- d-----w- c:\program files\Sukoku
2009-08-15 11:42 . 2009-07-17 14:52 71680 ----a-w- c:\windows\system32\atl.dll
2009-08-15 11:42 . 2009-06-10 12:16 156160 ----a-w- c:\windows\system32\wkssvc.dll
2009-08-15 11:42 . 2009-06-04 12:43 1871872 ----a-w- c:\windows\system32\mstscax.dll
2009-08-15 11:42 . 2009-06-04 12:36 116736 ----a-w- c:\windows\system32\aaclient.dll
2009-08-15 11:42 . 2009-06-04 12:47 36352 ----a-w- c:\windows\system32\tsgqec.dll
2009-08-15 11:42 . 2009-06-10 12:10 123904 ----a-w- c:\windows\system32\msvfw32.dll
2009-08-15 11:42 . 2009-06-10 12:07 82944 ----a-w- c:\windows\system32\mciavi32.dll
2009-08-15 11:42 . 2009-06-10 12:04 88576 ----a-w- c:\windows\system32\avifil32.dll
2009-08-15 11:42 . 2009-06-10 12:04 65024 ----a-w- c:\windows\system32\avicap32.dll
2009-08-15 11:42 . 2009-06-10 12:10 31232 ----a-w- c:\windows\system32\msvidc32.dll
2009-08-15 11:42 . 2009-06-10 12:09 12800 ----a-w- c:\windows\system32\msrle32.dll
2009-08-15 11:41 . 2009-07-14 13:02 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2009-08-15 11:41 . 2009-07-14 13:00 7680 ----a-w- c:\windows\system32\spwmp.dll
2009-08-15 11:41 . 2009-07-14 13:01 4096 ----a-w- c:\windows\system32\dxmasf.dll
2009-08-15 11:41 . 2009-07-14 11:11 8147968 ----a-w- c:\windows\system32\wmploc.DLL
2009-08-06 18:24 . 2009-08-06 18:24 -------- d-----w- c:\program files\iPod
2009-08-06 18:24 . 2009-08-06 18:24 -------- d-----w- c:\program files\iTunes
2009-08-06 18:22 . 2009-08-06 18:22 -------- d-----w- c:\program files\QuickTime
2009-08-06 18:16 . 2009-08-06 18:16 75040 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 8.2.1.6\SetupAdmin.exe
2009-07-29 15:13 . 2009-08-19 17:26 -------- d-----w- c:\users\Pavel\Tracing

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-26 20:01 . 2009-08-26 20:01 27335 ----a-w- c:\users\Pavel\AppData\Roaming\nvModes.dat
2009-08-26 14:25 . 2007-01-08 21:09 81404 ----a-w- c:\windows\system32\perfc005.dat
2009-08-26 14:25 . 2007-01-08 21:09 473598 ----a-w- c:\windows\system32\perfh005.dat
2009-08-15 14:54 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-08-06 18:24 . 2009-03-21 13:52 -------- d-----w- c:\program files\Common Files\Apple
2009-08-06 18:24 . 2009-03-21 13:56 -------- d-----w- c:\programdata\Apple Computer
2009-08-06 18:03 . 2007-09-27 18:39 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-08-06 18:01 . 2007-09-27 18:39 -------- d-----w- c:\program files\Common Files\InstallShield
2009-07-29 19:33 . 2009-07-03 10:33 -------- d-----w- c:\users\Pavel\AppData\Roaming\Skype
2009-07-29 19:20 . 2009-07-03 10:55 -------- d-----w- c:\users\Pavel\AppData\Roaming\skypePM
2009-07-24 14:18 . 2009-07-23 07:59 -------- d-----w- c:\program files\CamSpace
2009-07-21 21:52 . 2009-07-29 10:54 915456 ----a-w- c:\windows\system32\wininet.dll
2009-07-21 21:47 . 2009-07-29 10:54 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-07-21 21:47 . 2009-07-29 10:54 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-07-21 20:13 . 2009-07-29 10:54 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-07-15 20:45 . 2008-11-18 12:58 -------- d-----w- c:\program files\ICQ6Toolbar
2009-07-15 16:46 . 2009-07-15 16:39 -------- d-----w- c:\program files\ICQ6.5
2009-07-15 16:42 . 2008-11-18 12:58 -------- d-----w- c:\programdata\ICQ
2009-07-15 16:41 . 2009-07-07 10:27 -------- d-----w- c:\program files\ICQ6
2009-07-13 12:19 . 2009-07-08 13:57 -------- d-----w- c:\users\Pavel\AppData\Roaming\aHisoft
2009-07-13 10:57 . 2009-07-08 11:29 -------- d-----w- c:\program files\Common Files\Real
2009-07-13 10:55 . 2008-12-06 12:56 -------- d-----w- c:\program files\Google
2009-07-13 09:29 . 2009-07-13 09:29 -------- d-----w- c:\program files\Common Files\xing shared
2009-07-08 18:15 . 2009-07-08 14:36 -------- d-----w- c:\programdata\Norton
2009-07-08 18:15 . 2009-07-08 14:36 -------- d-----w- c:\programdata\Symantec
2009-07-08 18:03 . 2009-07-08 18:03 -------- d-----w- c:\program files\CENZURA
2009-07-08 17:26 . 2009-07-08 17:26 -------- d-----w- c:\program files\FDRLab
2009-07-08 17:19 . 2009-07-08 17:03 -------- d-----w- c:\program files\YouTube Video Downloader
2009-07-08 16:00 . 2009-07-08 16:00 -------- d-----w- c:\program files\Common Files\Symantec Shared
2009-07-08 14:36 . 2009-07-08 14:36 -------- d-----w- c:\programdata\NortonInstaller
2009-07-08 13:14 . 2009-07-08 13:14 9200 ------w- c:\windows\system32\drivers\cdralw2k.sys
2009-07-08 13:14 . 2009-07-08 13:14 9072 ------w- c:\windows\system32\drivers\cdr4_xp.sys
2009-07-08 13:14 . 2009-07-08 13:14 44944 ------w- c:\windows\system32\drivers\PxHelp20.sys
2009-07-08 13:14 . 2009-07-08 13:14 158192 ------w- c:\windows\system32\pxwma.dll
2009-07-08 11:31 . 2009-07-08 11:31 -------- d-----w- c:\program files\Real
2009-07-08 11:25 . 2009-07-08 11:25 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-07-08 11:25 . 2009-07-08 11:25 -------- d-----w- c:\program files\Java
2009-07-08 10:18 . 2008-11-18 12:39 72568 ----a-w- c:\users\Pavel\AppData\Local\GDIPFONTCACHEV1.DAT
2009-07-07 17:22 . 2009-07-07 17:22 -------- d-----w- c:\program files\Dostihy 3000 Deluxe
2009-07-07 15:55 . 2009-03-09 15:53 -------- d-----w- c:\users\Pavel\AppData\Roaming\uTorrent
2009-07-07 15:54 . 2009-07-07 15:02 -------- d-----w- c:\program files\BitComet
2009-07-07 10:03 . 2009-07-07 10:02 -------- d-----w- c:\program files\ICQ612_18_53
2009-07-03 15:28 . 2009-07-03 15:28 -------- d-----w- c:\users\Pavel\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2009-07-03 10:32 . 2009-07-03 10:32 -------- d-----r- c:\program files\Skype
2009-07-03 10:32 . 2009-07-03 10:32 -------- d-----w- c:\program files\Common Files\Skype
2009-07-03 10:32 . 2009-07-03 10:31 -------- d-----w- c:\programdata\Skype
2009-07-03 10:26 . 2009-07-03 10:26 -------- d-----w- c:\programdata\WLInstaller
2009-07-03 10:14 . 2009-06-24 17:12 -------- d-----w- c:\program files\Microsoft
2009-06-29 17:18 . 2008-12-14 20:54 5021800 ----a-w- c:\programdata\SweetIM\Messenger\update\sweetimsetup.exe
2009-06-15 15:29 . 2009-07-15 08:01 156160 ----a-w- c:\windows\system32\t2embed.dll
2009-06-15 15:23 . 2009-07-15 08:01 24064 ----a-w- c:\windows\system32\lpk.dll
2009-06-15 15:22 . 2009-07-15 08:01 72704 ----a-w- c:\windows\system32\fontsub.dll
2009-06-15 15:21 . 2009-07-15 08:01 10240 ----a-w- c:\windows\system32\dciman32.dll
2009-06-15 15:20 . 2009-07-15 08:01 34304 ----a-w- c:\windows\system32\atmlib.dll
2009-06-15 13:03 . 2009-07-15 08:01 289792 ----a-w- c:\windows\system32\atmfd.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-08-25_17.47.42 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-09-27 18:15 . 2009-08-26 20:00 48780 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2006-11-02 13:05 . 2009-08-26 20:00 80910 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
- 2006-11-02 13:05 . 2009-08-25 17:47 80910 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
- 2008-11-18 12:40 . 2009-08-25 17:47 10180 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1853382227-3427846857-181528931-1000_UserData.bin
+ 2008-11-18 12:40 . 2009-08-26 20:00 10180 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1853382227-3427846857-181528931-1000_UserData.bin
- 2008-11-18 12:36 . 2009-08-25 17:29 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-11-18 12:36 . 2009-08-26 19:49 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-11-18 12:36 . 2009-08-26 19:49 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-11-18 12:36 . 2009-08-25 17:29 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-11-18 12:36 . 2009-08-25 17:29 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-11-18 12:36 . 2009-08-26 19:49 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-01-16 16:36 . 2009-08-26 12:49 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-01-16 16:36 . 2009-07-29 09:18 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-01-16 16:36 . 2009-08-26 12:49 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-01-16 16:36 . 2009-07-29 09:18 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-01-16 16:36 . 2009-08-26 12:49 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-01-16 16:36 . 2009-07-29 09:18 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2006-11-02 10:25 . 2009-08-25 13:34 51200 c:\windows\inf\infpub.dat
+ 2006-11-02 10:25 . 2009-08-26 14:24 51200 c:\windows\inf\infpub.dat
+ 2006-11-02 07:11 . 2006-11-02 07:11 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18046_none_0de371cfef8dc034\AcRes.dll
+ 2008-11-18 13:21 . 2008-11-18 13:21 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18267_none_0be85e73f276bf22\AcRes.dll
+ 2009-08-26 13:14 . 2009-08-26 13:14 9560 c:\windows\System32\networklist\icons\{912E1A09-EAF5-46BD-89FC-5182645C0C3E}_48.bin
+ 2009-08-26 13:14 . 2009-08-26 13:14 4280 c:\windows\System32\networklist\icons\{912E1A09-EAF5-46BD-89FC-5182645C0C3E}_32.bin
+ 2009-08-26 13:14 . 2009-08-26 13:14 2456 c:\windows\System32\networklist\icons\{912E1A09-EAF5-46BD-89FC-5182645C0C3E}_24.bin
- 2009-08-25 17:45 . 2009-08-25 17:45 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2009-08-26 19:58 . 2009-08-26 19:58 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2009-08-25 17:45 . 2009-08-25 17:45 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-08-26 19:58 . 2009-08-26 19:58 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2006-11-02 10:33 . 2009-08-24 19:14 610142 c:\windows\System32\perfh009.dat
+ 2006-11-02 10:33 . 2009-08-26 14:25 610142 c:\windows\System32\perfh009.dat
- 2006-11-02 10:33 . 2009-08-24 19:14 103924 c:\windows\System32\perfc009.dat
+ 2006-11-02 10:33 . 2009-08-26 14:25 103924 c:\windows\System32\perfc009.dat
+ 2007-09-27 18:20 . 2007-06-18 16:03 737280 c:\windows\System32\drivers\athr.sys
+ 2009-08-26 14:24 . 2008-12-29 21:57 952832 c:\windows\LastGood.Tmp\system32\DRIVERS\athr.sys
+ 2006-11-02 10:25 . 2009-08-26 14:24 143360 c:\windows\inf\infstrng.dat
- 2006-11-02 10:25 . 2009-08-25 13:34 143360 c:\windows\inf\infstrng.dat
+ 2008-11-18 13:20 . 2008-11-18 13:20 1695744 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18267_none_41c67558c16754d0\gameux.dll
+ 2006-11-02 10:22 . 2009-08-26 19:56 6291456 c:\windows\System32\SMI\Store\Machine\schema.dat
- 2006-11-02 10:22 . 2009-08-15 21:15 6291456 c:\windows\System32\SMI\Store\Machine\schema.dat
+ 2009-08-26 19:45 . 2009-08-26 19:45 6148096 c:\windows\ERDNT\Hiv-backup\schema.dat
+ 2009-05-04 17:45 . 2009-08-26 13:36 52004019 c:\windows\winsxs\ManifestCache\6.0.6002.18005_001c11ba_blobs.bin
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll" [2008-10-08 173368]

[HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2008-10-08 11:22 1172792 ----a-w- c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2008-10-08 1172792]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.SWEETIE.3]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.SWEETIE]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2008-10-08 1172792]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.SWEETIE.3]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.SWEETIE]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-11-18 1232896]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2006-11-02 125440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2007-09-27 1006264]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2007-07-18 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-07-18 8466432]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-07-18 81920]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2007-05-25 159744]
"FIC HotKey"="c:\program files\Hotkey Utility\tray.exe" [2007-07-13 561152]
"PowerManager"="c:\program files\Power Manager\PM.exe" [2007-05-16 29696]
"Silent Mode"="c:\program files\Light Sensor Utility\Sensor.exe" [2007-06-27 253952]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-02-26 153136]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-14 49152]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2007-08-22 80896]
"SweetIM"="c:\program files\SweetIM\Messenger\SweetIM.exe" [2009-02-15 111928]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-05-13 177472]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-08 148888]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-07-13 292128]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2007-04-10 4431872]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{036086D6-D8D4-4F50-BBFC-36BAA721BE98}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{F8233662-31AC-4E20-8055-6A0DCDA07D59}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{390FB746-2F67-4BFE-89B9-51F8DA78814F}"= c:\program files\CyberLink\PowerDV\PowerDV.exe:CyberLink PowerDV
"TCP Query User{26333BC4-11CA-4810-AA0D-C8A3E36487C1}c:\\program files\\icq6\\icq.exe"= UDP:c:\program files\icq6\icq.exe:ICQ Library
"UDP Query User{75835C4E-8184-4AF4-8594-D333C8C4479E}c:\\program files\\icq6\\icq.exe"= TCP:c:\program files\icq6\icq.exe:ICQ Library
"TCP Query User{22BCD39C-AC99-41FE-8BBE-F5C28B93AB1F}c:\\program files\\intervideo\\dvd8\\windvd.exe"= UDP:c:\program files\intervideo\dvd8\windvd.exe:WinDVD
"UDP Query User{8D5CB441-4B31-48F1-86FB-DD8187BA20B2}c:\\program files\\intervideo\\dvd8\\windvd.exe"= TCP:c:\program files\intervideo\dvd8\windvd.exe:WinDVD
"{6CD70C68-881D-46F2-8096-D35A034FE099}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpqtra08.exe:hpqtra08.exe
"{E9868E79-5BC4-4933-821B-FB5138F784D1}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpqtra08.exe:hpqtra08.exe
"{27DF2707-ED89-4C19-9759-7FB733E38E17}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpqste08.exe:hpqste08.exe
"{748FBC18-7AEF-4C41-9A36-C397DC066CDB}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpqste08.exe:hpqste08.exe
"{58DBE216-991D-400F-B1E2-A612CBE70087}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpofxm08.exe:hpofxm08.exe
"{E06571CB-1D2B-45F4-8D22-8F155110AEE3}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpofxm08.exe:hpofxm08.exe
"{EC3C20BA-45B1-42C9-AB22-8FBFB6711CCC}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hposfx08.exe:hposfx08.exe
"{96700F41-A457-44D6-8060-D45FB72AE727}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hposfx08.exe:hposfx08.exe
"{2EEF8D1B-4FEE-4D53-8FF4-CBA032F88519}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hposid01.exe:hposid01.exe
"{02845245-B043-46C6-B895-623BBFE9DE46}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hposid01.exe:hposid01.exe
"{24D1780A-1E10-46BC-A767-670584B04DBF}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpzwiz01.exe:hpzwiz01.exe
"{CDA8DD95-9CF4-4BC4-803B-0834438BB0F2}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpzwiz01.exe:hpzwiz01.exe
"{B95D7A7E-4EB3-411B-97FF-399BE383BBD5}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpoews01.exe:hpoews01.exe
"{0E8BCBA7-00A5-470E-B2EB-D32E4DA2D0B2}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpoews01.exe:hpoews01.exe
"{CB277E73-BC8F-4662-AF48-B035048DFFF5}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpiscnapp.exe:hpiscnapp.exe
"{72041D47-8EC5-4151-93E1-E8F70709D6F7}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpiscnapp.exe:hpiscnapp.exe
"{5DB30E8C-BA74-47FC-B569-D35D306F84CD}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpqkygrp.exe:hpqkygrp.exe
"{FF767278-156E-44C4-ACB0-14E005DE8E0F}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpqkygrp.exe:hpqkygrp.exe
"TCP Query User{75272E91-6109-4501-A584-77AF57B24463}c:\\program files\\icq6\\icq.exe"= UDP:c:\program files\icq6\icq.exe:ICQ Library
"UDP Query User{039651CD-E957-4F2D-ABF4-9B567D61FF5E}c:\\program files\\icq6\\icq.exe"= TCP:c:\program files\icq6\icq.exe:ICQ Library
"TCP Query User{962A01E2-7827-4F21-9428-09F06189DF42}c:\\program files\\internet explorer\\iexplore.exe"= UDP:c:\program files\internet explorer\iexplore.exe:Internet Explorer
"UDP Query User{476DF6C1-8F01-4590-9A08-58111959D86F}c:\\program files\\internet explorer\\iexplore.exe"= TCP:c:\program files\internet explorer\iexplore.exe:Internet Explorer
"{84B7904B-F1DD-4FC3-8877-AE91850CF67B}"= UDP:c:\program files\Sony Ericsson\Sony Ericsson Media Manager 1.0\MediaManager.exe:Sony Ericsson Media Manager 1.0
"{596C7A25-643D-40EC-8589-704EE5E9E945}"= TCP:c:\program files\Sony Ericsson\Sony Ericsson Media Manager 1.0\MediaManager.exe:Sony Ericsson Media Manager 1.0
"{E84584B0-2DE3-4D6B-A814-1BB062E4B05F}"= UDP:c:\program files\iMesh Applications\iMesh\iMesh.exe:iMesh
"{87F097BC-2622-409C-8B22-3804D39AED09}"= TCP:c:\program files\iMesh Applications\iMesh\iMesh.exe:iMesh
"TCP Query User{FE0AAB3B-9679-4B0D-BE16-641178FB0B6B}c:\\program files\\icq6.5\\icq.exe"= UDP:c:\program files\icq6.5\icq.exe:ICQ Library
"UDP Query User{3370BC8E-907B-4498-BDF4-A4C270448349}c:\\program files\\icq6.5\\icq.exe"= TCP:c:\program files\icq6.5\icq.exe:ICQ Library
"{4362A59E-6680-492A-B3FC-40F141A56D5A}"= c:\program files\HP\Digital Imaging\bin\hpqpse.exe:hpqpse.exe
"{8EDE9FDC-7A51-4E30-947A-7CCF17C7B3F7}"= c:\program files\common files\hp\digital imaging\bin\hpqphotocrm.exe:hpqphotocrm.exe
"{36C1D30F-059A-41F2-86F5-C995276D4520}"= c:\program files\HP\Digital Imaging\bin\hpqsudi.exe:hpqsudi.exe
"{7D9FB8DD-E114-4469-A6CC-8BE243B81BF4}"= c:\program files\HP\Digital Imaging\bin\hpqpsapp.exe:hpqpsapp.exe
"TCP Query User{DDDA6CC9-F68A-4244-A141-DCFAEE78E9F3}c:\\program files\\icq6.5\\icq.exe"= UDP:c:\program files\icq6.5\icq.exe:ICQ Library
"UDP Query User{635104F0-B094-48D9-BD67-F3192B612B63}c:\\program files\\icq6.5\\icq.exe"= TCP:c:\program files\icq6.5\icq.exe:ICQ Library
"TCP Query User{C3620A2C-4590-4B33-9E5D-31248AD11A61}c:\\users\\pavel\\appdata\\local\\aptana studio 1.2\\jre\\bin\\javaw.exe"= UDP:c:\users\pavel\appdata\local\aptana studio 1.2\jre\bin\javaw.exe:javaw.exe
"UDP Query User{15D44B4D-8C44-4E0B-B1F9-42B81C9BAB90}c:\\users\\pavel\\appdata\\local\\aptana studio 1.2\\jre\\bin\\javaw.exe"= TCP:c:\users\pavel\appdata\local\aptana studio 1.2\jre\bin\javaw.exe:javaw.exe
"{E22AC23B-104A-49E3-9934-5705CD421AA0}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpqtra08.exe:hpqtra08.exe
"{51222537-3D44-43EB-8B73-DA81DE774519}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpqtra08.exe:hpqtra08.exe
"{B84B4A28-B3AE-465A-B06F-779987869DC8}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpqste08.exe:hpqste08.exe
"{551E6FD7-90A3-4784-B178-FB60ED070394}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpqste08.exe:hpqste08.exe
"{7B08A54A-B145-4883-9142-D691AD8F69B8}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpofxm08.exe:hpofxm08.exe
"{B1CAF773-34B2-41D6-878D-051FC55EE7AB}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpofxm08.exe:hpofxm08.exe
"{75AE0A7E-D617-462A-B4C6-1B144BC39194}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hposfx08.exe:hposfx08.exe
"{09C8EE0A-74B9-44A2-BC99-58C442920FCC}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hposfx08.exe:hposfx08.exe
"{F9A5F055-45E2-4EF4-AD08-6CEA64BC8FCE}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hposid01.exe:hposid01.exe
"{C4059982-9F24-4819-B390-5E8D0C785AF7}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hposid01.exe:hposid01.exe
"{ECBFD35E-76FF-41F1-B2F8-A7D33607883F}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpzwiz01.exe:hpzwiz01.exe
"{94C5F237-AEB2-4AF9-AF29-D68B2A1F8005}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpzwiz01.exe:hpzwiz01.exe
"{E0AF68F6-023D-4C5D-88D8-6D554CDC250F}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpoews01.exe:hpoews01.exe
"{216E0C20-5A05-4691-9C85-41758D827E8E}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpoews01.exe:hpoews01.exe
"{67D0B863-EF76-44B3-82C8-E4CAEE90101E}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpiscnapp.exe:hpiscnapp.exe
"{7C15EDF9-68BF-4B31-905A-244DF7A200E5}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpiscnapp.exe:hpiscnapp.exe
"{4CD5B547-6249-4223-A3AB-1BBDB69FC06A}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpqkygrp.exe:hpqkygrp.exe
"{D278D5DB-0067-4FDD-BAE2-9A205113F6F3}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpqkygrp.exe:hpqkygrp.exe
"{0C21DE14-505B-4177-AEF8-7002C510FD12}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{8F680CBA-60FC-44D1-8CB1-667C25A97757}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{57056C9E-E787-4A44-83EF-D36BAF0DCAAE}"= UDP:c:\program files\FreeCall.com\FreeCall\FreeCall.exe:FreeCall
"{35459AD9-5AE5-467E-8DDF-D9F2A093F085}"= TCP:c:\program files\FreeCall.com\FreeCall\FreeCall.exe:FreeCall
"{FD04BACB-1C18-4CB2-94B7-5699C57FB85D}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync
"{55DE4E88-4782-455F-AFB9-EAF825F30D68}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{91472F71-7686-4402-A622-749F10F3CE60}"= UDP:c:\program files\BitComet\BitComet.exe:BitComet.exe
"{BF1F871C-512F-49BD-A2CA-B8EBA8BBBC20}"= TCP:c:\program files\BitComet\BitComet.exe:BitComet.exe
"{8C331E26-4B8D-4CDA-B37F-EA41BE4382EC}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{ED0E3212-7C66-4F3A-B45B-43E22A7803BD}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes

R2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe -k HsfXAudioService [2.11.2006 10:35 22016]
S2 gupdate1c9fd8f39457663;Google Update Service (gupdate1c9fd8f39457663);c:\program files\Google\Update\GoogleUpdate.exe [5.7.2009 18:39 133104]
S3 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [24.6.2009 19:16 55280]
S3 fsssvc;Windows Live Zabezpečení rodiny;c:\program files\Windows Live\Family Safety\fsssvc.exe [6.2.2009 18:08 533360]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\System32\drivers\s0016bus.sys [4.12.2008 20:56 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\System32\drivers\s0016mdfl.sys [4.12.2008 20:56 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\System32\drivers\s0016mdm.sys [4.12.2008 20:56 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s0016mgmt.sys [4.12.2008 20:56 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\System32\drivers\s0016nd5.sys [4.12.2008 20:56 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\System32\drivers\s0016obex.sys [4.12.2008 20:56 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\System32\drivers\s0016unic.sys [4.12.2008 20:56 115752]
S3 s0017bus;Sony Ericsson Device 0017 driver (WDM);c:\windows\System32\drivers\s0017bus.sys [4.12.2008 20:56 90536]
S3 s0017mdfl;Sony Ericsson Device 0017 USB WMC Modem Filter;c:\windows\System32\drivers\s0017mdfl.sys [4.12.2008 20:56 15016]
S3 s0017mdm;Sony Ericsson Device 0017 USB WMC Modem Driver;c:\windows\System32\drivers\s0017mdm.sys [4.12.2008 20:56 122152]
S3 s0017mgmt;Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s0017mgmt.sys [4.12.2008 20:56 115496]
S3 s0017nd5;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS);c:\windows\System32\drivers\s0017nd5.sys [4.12.2008 20:56 25768]
S3 s0017obex;Sony Ericsson Device 0017 USB WMC OBEX Interface;c:\windows\System32\drivers\s0017obex.sys [4.12.2008 20:56 111912]
S3 s0017unic;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM);c:\windows\System32\drivers\s0017unic.sys [4.12.2008 20:56 117672]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HsfXAudioService REG_MULTI_SZ HsfXAudioService
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Obsah adresáře 'Naplánované úlohy'

2009-08-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-05 16:39]

2009-08-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-05 16:39]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
mStart Page = hxxp://home.sweetim.com
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: {D0C4EE17-AE70-4625-A806-2B88A6EE50D4} = 192.168.2.1
DPF: {3188FB46-456D-4C07-8A11-F5F3BBBA8AF2} - hxxp://www.seetoo.com/downloadAddon.php ... ersion=7.0
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {E8ABBEBD-0B80-4091-B3B0-2C5AAD97A11A} - hxxp://tapety.mojelogo.cz/ScreenShooter.ocx
.

**************************************************************************
skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory:

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(2808)
c:\program files\SweetIM\Messenger\mgAdaptersProxy.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\System32\audiodg.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe
c:\windows\System32\drivers\XAudio.exe
c:\windows\System32\rundll32.exe
c:\program files\Microsoft Office\Office12\ONENOTEM.EXE
c:\windows\ehome\ehmsas.exe
c:\program files\iPod\bin\iPodService.exe
c:\windows\System32\wbem\unsecapp.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Celkový čas: 2009-08-26 22:09 - počítač byl restartován
ComboFix-quarantined-files.txt 2009-08-26 20:08
ComboFix2.txt 2009-08-25 17:55

Před spuštěním: Systém nemůže nalézt text zprávy číslo 0x2379 v souboru zpráv pro Application.
Po spuštění: Volných bajtů: 27 794 472 960

392 --- E O F --- 2009-08-24 18:46

[Reklama]

[Laura]

prosím jak mám udělat tu konfiguraci wifi pořád nejde

[Laura]

[ponik]

damne sry ze ti do toho lezu ale tu Wi-Fi už asi řešit nebudeš ne?

1, otevři si uživatelský rozhraní tvojí Wi-Fi karty
2, hledej neco jako seznam sítí ... u toho bude asi refresh tlačítko stiskni ho
3, v seznamu najdi svojí Wi-Fi síť označ jí a klikni na připojit
4, asi budeš muset zadat heslo to doufam víš