PC-HELP.CZ

České diskuzní fórum o počítačích
https://pc-help.cnews.cz/

prosím o kontrolu logu

https://pc-help.cnews.cz/viewtopic.php?f=70&t=45203

Stránka 1 z 1

prosím o kontrolu logu  Vyřešeno

Napsal: 29 zář 2009 19:55
od milsed
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:53:44, on 29.9.2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\TOSHIBA\Toshiba Online Product Information\TOPI.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\TOSHIBA\Tilt Mouse Software\1.1\ACQTMAPP.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
C:\Program Files\VistaFirewallControl\VistaFirewallControl.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Nero\Nero 7\Nero BackItUp\NBKeyScan.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\System32\p2phost.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\QIP\qip.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\conime.exe
C:\Program Files\BitTorrent\bittorrent.exe
C:\Windows\explorer.exe
C:\Windows\system32\Dwm.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=13170&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: BS.Player ControlBar - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Desktop SMS] C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe /auto
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [ACQTMOUSE] "C:\Program Files\TOSHIBA\Tilt Mouse Software\1.1\ACQTMAPP.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [Toshiba TEMPO] C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
O4 - HKLM\..\Run: [VistaFirewallControl] C:\Program Files\VistaFirewallControl\VistaFirewallControl.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero 7\Nero BackItUp\NBKeyScan.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [TOSCDSPD] TOSCDSPD.EXE
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Milan\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe (User 'Default user')
O4 - Startup: FIFA 09 Registration.lnk = C:\Program Files\EA Sports\FIFA 09\Support\EAregister.exe
O4 - Startup: TRDCReminder.lnk = C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: eBay - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url2.pl?CZ (file missing)
O9 - Extra button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/red ... &site=home (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Notebook Performance Tuning Service (TempoMonitoringService) - Toshiba Europe GmbH - C:\Program Files\Toshiba TEMPRO\TempoSVC.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - c:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - c:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: VistaFirewallService - Sphinx Software - C:\Program Files\VistaFirewallControl\VistaFirewallService.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 12922 bytes

Re: prosím o kontrolu logu

Napsal: 29 zář 2009 20:03
od Damned
Odinstaluj si:
AskBarDis
DAEMON Tools Toolbar
BS.Player ControlBar

Pak sem vlož nový log z HJT.

Re: prosím o kontrolu logu

Napsal: 29 zář 2009 20:13
od milsed
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:12:04, on 29.9.2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\TOSHIBA\Toshiba Online Product Information\TOPI.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\TOSHIBA\Tilt Mouse Software\1.1\ACQTMAPP.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
C:\Program Files\VistaFirewallControl\VistaFirewallControl.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Nero\Nero 7\Nero BackItUp\NBKeyScan.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\System32\p2phost.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\QIP\qip.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\conime.exe
C:\Program Files\BitTorrent\bittorrent.exe
C:\Windows\explorer.exe
C:\Windows\system32\Dwm.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=13170&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (file missing)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Desktop SMS] C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe /auto
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [ACQTMOUSE] "C:\Program Files\TOSHIBA\Tilt Mouse Software\1.1\ACQTMAPP.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [Toshiba TEMPO] C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
O4 - HKLM\..\Run: [VistaFirewallControl] C:\Program Files\VistaFirewallControl\VistaFirewallControl.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero 7\Nero BackItUp\NBKeyScan.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [TOSCDSPD] TOSCDSPD.EXE
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Milan\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe (User 'Default user')
O4 - Startup: FIFA 09 Registration.lnk = C:\Program Files\EA Sports\FIFA 09\Support\EAregister.exe
O4 - Startup: TRDCReminder.lnk = C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: eBay - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url2.pl?CZ (file missing)
O9 - Extra button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/red ... &site=home (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Notebook Performance Tuning Service (TempoMonitoringService) - Toshiba Europe GmbH - C:\Program Files\Toshiba TEMPRO\TempoSVC.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - c:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - c:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: VistaFirewallService - Sphinx Software - C:\Program Files\VistaFirewallControl\VistaFirewallService.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 12522 bytes

Re: prosím o kontrolu logu

Napsal: 29 zář 2009 20:35
od Damned
Spusť HJT (HijackThis), vypni prohlížeče, odpoj se od internetu a fixni (spustit HJT, "Do a system scan only",
zatrhnout políčko před hodnotou, zmáčknout "Fix checked" a poté "Ano"):

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=13170&l=dis
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O1 - Hosts: ::1 localhost
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (file missing)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Milan\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - Global Startup: hpoddt01.exe.lnk = ?
O9 - Extra button: eBay - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url2.pl?CZ (file missing)
O9 - Extra button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/red ... &site=home (file missing)
O13 - Gopher Prefix:
*****************************************************************************************************************************************
Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Re: prosím o kontrolu logu

Napsal: 30 zář 2009 20:19
od milsed
Malwarebytes' Anti-Malware 1.41
Verze databáze: 2775
Windows 6.0.6002 Service Pack 2

30.9.2009 20:14:49
mbam-log-2009-09-30 (20-14-01).txt

Typ kontroly: Rychlá kontrola
Zkontrolované objekty: 90519
Uplynulý čas: 3 minute(s), 42 second(s)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 1
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované hodnoty registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\desktop sms (Worm.P2P) -> No action taken.

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
(Nebyly nalezeny žádné škodlivé položky)

Re: prosím o kontrolu logu

Napsal: 30 zář 2009 20:22
od Damned
Takže spusť znovu MbAM a dej Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Vypni rezidentní štít antiviru (pokud máš tak i antispyware).
Stáhni si ComboFix (by sUBs)
nebo ComboFix (subs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

Re: prosím o kontrolu logu

Napsal: 30 zář 2009 21:06
od milsed
Malwarebytes' Anti-Malware 1.41
Verze databáze: 2775
Windows 6.0.6002 Service Pack 2

30.9.2009 20:47:29
mbam-log-2009-09-30 (20-47-29).txt

Typ kontroly: Rychlá kontrola
Zkontrolované objekty: 90579
Uplynulý čas: 3 minute(s), 59 second(s)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 1
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované hodnoty registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\desktop sms (Worm.P2P) -> Quarantined and deleted successfully.

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
(Nebyly nalezeny žádné škodlivé položky)


ComboFix 09-09-29.04 - Milan 30.09.2009 20:50.1.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.2037.795 [GMT 2:00]
Spuštěný z: c:\users\Milan\Documents\Downloads\ComboFix.exe
AV: avast! antivirus 4.8.1282 [VPS 081114-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: Vista Firewall Control *enabled* {C83D5A86-CCB1-40EB-BD6D-E0BA16353295}
SP: avast! antivirus 4.8.1282 [VPS 081114-0] *enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\MUSIC.DRV
C:\SAMPLE.DRV
c:\users\Milan\AppData\Local\Temp\ppcrlui_4652_2
c:\users\Milan\AppData\Roaming\inst.exe
c:\users\Milan\AppData\Roaming\Microsoft\Clip Organizer\mstore10.mgc
c:\users\Milan\AppData\Roaming\Microsoft\Clip Organizer\Offic10.MGC
c:\windows\Installer\WMEncoder.msi

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-08-28 do 2009-09-30 )))))))))))))))))))))))))))))))
.

2009-09-30 18:59 . 2009-09-30 18:59 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-09-30 18:02 . 2009-09-30 18:02 -------- d-----w- c:\users\Milan\AppData\Roaming\Malwarebytes
2009-09-30 18:02 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-30 18:02 . 2009-09-30 18:02 -------- d-----w- c:\programdata\Malwarebytes
2009-09-30 18:02 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-30 18:02 . 2009-09-30 18:02 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-29 09:40 . 2009-09-29 09:40 -------- d-----w- c:\program files\uTorrent
2009-09-28 22:40 . 2009-09-28 22:40 -------- d-----w- c:\users\Milan\AppData\Roaming\Toshiba
2009-09-28 12:44 . 2009-09-28 12:44 -------- d-----w- c:\program files\EA Sports
2009-09-19 17:45 . 2009-09-19 17:45 -------- d-----w- c:\users\Milan\AppData\Roaming\vlc
2009-09-05 10:38 . 2009-09-05 10:38 -------- d-----w- c:\users\Milan\AppData\Local\Opera
2009-09-05 10:37 . 2009-09-05 10:37 -------- d-----w- c:\program files\Opera
2009-09-03 15:00 . 2009-09-03 15:00 -------- d-----w- c:\program files\All Ten Fingers
2009-09-03 13:35 . 2009-09-03 13:35 -------- d-----w- c:\users\Milan\AppData\Local\GHISLER
2009-09-03 13:33 . 2009-08-27 05:50 545 ----a-w- c:\windows\UC.PIF
2009-09-03 13:33 . 2009-08-27 05:50 545 ----a-w- c:\windows\RAR.PIF
2009-09-03 13:33 . 2009-08-27 05:50 545 ----a-w- c:\windows\PKZIP.PIF
2009-09-03 13:33 . 2009-08-27 05:50 545 ----a-w- c:\windows\PKUNZIP.PIF
2009-09-03 13:33 . 2009-08-27 05:50 545 ----a-w- c:\windows\NOCLOSE.PIF
2009-09-03 13:33 . 2009-08-27 05:50 545 ----a-w- c:\windows\LHA.PIF
2009-09-03 13:33 . 2009-08-27 05:50 545 ----a-w- c:\windows\ARJ.PIF
2009-09-03 13:17 . 2009-09-03 13:17 -------- d-----w- c:\users\Milan\AppData\Roaming\GHISLER
2009-09-02 17:17 . 2007-01-01 04:56 25808 ----a-w- c:\windows\system\CTL3DV2.DLL
2009-09-02 17:17 . 2009-09-03 13:35 -------- d-----w- C:\totalcmd

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-30 11:32 . 2007-01-08 21:09 636000 ----a-w- c:\windows\system32\perfh005.dat
2009-09-30 11:32 . 2007-01-08 21:09 134810 ----a-w- c:\windows\system32\perfc005.dat
2009-09-30 10:00 . 2008-09-23 12:56 -------- d-----w- c:\users\Milan\AppData\Roaming\uTorrent
2009-09-29 18:38 . 2009-07-29 16:44 -------- d-----w- c:\users\Milan\AppData\Roaming\BitTorrent
2009-09-26 11:10 . 2008-09-18 11:00 -------- d-----w- c:\users\Milan\AppData\Roaming\Skype
2009-08-22 15:29 . 2009-08-11 16:04 -------- d-----w- c:\program files\MediaCoder
2009-08-22 15:12 . 2009-08-22 14:51 -------- d-----w- c:\users\Milan\AppData\Roaming\Vso
2009-08-22 15:12 . 2009-08-22 14:51 47360 ----a-w- c:\users\Milan\AppData\Roaming\pcouffin.sys
2009-08-22 15:12 . 2009-08-22 14:51 47360 ----a-w- c:\users\Milan\AppData\Roaming\pcouffin.sys
2009-08-22 14:59 . 2009-08-19 16:17 -------- d-----w- c:\users\Milan\AppData\Roaming\Ulead Systems
2009-08-22 14:51 . 2009-08-22 14:51 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys
2009-08-19 16:16 . 2008-03-09 16:24 -------- d-----w- c:\programdata\Sports Interactive
2009-08-19 16:12 . 2009-08-11 17:05 -------- d-----w- c:\program files\AviSynth 2.5
2009-08-19 16:12 . 2009-08-19 14:38 -------- d-----w- c:\program files\Xvid
2009-08-19 16:10 . 2009-08-19 15:55 -------- d-----w- c:\program files\Common Files\AVSMedia
2009-08-19 16:10 . 2009-08-19 15:55 -------- d-----w- c:\program files\AVS4YOU
2009-08-19 15:56 . 2009-08-19 15:56 -------- d-----w- c:\users\Milan\AppData\Roaming\AVS4YOU
2009-08-19 15:56 . 2009-08-19 15:56 -------- d-----w- c:\programdata\AVS4YOU
2009-08-17 16:10 . 2008-09-24 17:24 1279456 ----a-w- c:\windows\system32\aswBoot.exe
2009-08-17 16:05 . 2008-09-24 17:25 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-08-17 16:05 . 2008-09-24 17:25 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-08-17 16:05 . 2008-09-24 17:24 53328 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2009-08-17 16:04 . 2008-09-24 17:25 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-08-17 16:04 . 2008-09-24 17:25 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-08-17 16:02 . 2008-09-24 17:25 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-08-11 17:05 . 2009-08-11 17:05 -------- d-----w- c:\program files\RealAnime 4
2009-08-11 17:01 . 2009-08-10 13:43 -------- d-----w- c:\program files\Free MKV Video2Dvd
2009-08-11 17:01 . 2009-08-11 16:10 -------- d-----w- c:\users\Milan\AppData\Roaming\Broad Intelligence
2009-08-11 16:53 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-08-11 16:40 . 2009-08-11 16:40 -------- d-----w- c:\program files\MSXML 4.0
2009-08-11 16:32 . 2008-09-18 07:30 113792 ----a-w- c:\users\Milan\AppData\Local\GDIPFONTCACHEV1.DAT
2009-08-09 19:54 . 2009-08-09 19:54 -------- d-----w- c:\users\Milan\AppData\Roaming\FFSJ
2009-08-09 18:19 . 2009-08-09 18:19 -------- d-----w- c:\program files\Peretek
2009-08-09 17:46 . 2009-08-09 17:45 -------- d-----w- c:\program files\EArt Video Cutter
2009-08-09 17:35 . 2009-08-09 17:33 -------- d-----w- c:\program files\Naturpic Video Cutter
2009-08-08 12:34 . 2009-08-08 12:34 -------- d-----w- c:\program files\SopCast
2009-08-06 13:48 . 2009-08-06 13:48 -------- d-----w- c:\program files\Audio Conversion Studio
2009-08-04 15:48 . 2009-08-04 15:48 -------- d-----w- c:\users\Milan\AppData\Roaming\dvdcss
2009-07-21 21:52 . 2009-08-11 16:39 915456 ----a-w- c:\windows\system32\wininet.dll
2009-07-21 21:47 . 2009-08-11 16:39 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-07-21 21:47 . 2009-08-11 16:39 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-07-21 20:13 . 2009-08-11 16:39 133632 ----a-w- c:\windows\system32\ieUnatt.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-10 1233920]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2006-06-26 20005928]
"CollaborationHost"="c:\windows\system32\p2phost.exe" [2008-01-18 192000]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-07-24 490952]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-18 125952]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2009-09-29 288560]
"WindowsWelcomeCenter"="oobefldr.dll" - c:\windows\System32\oobefldr.dll [2009-04-10 2153472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-18 1008184]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-05 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-05 154136]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-05 129560]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-08-14 1348904]
"topi"="c:\program files\TOSHIBA\Toshiba Online Product Information\topi.exe" [2007-07-10 581632]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-03-19 1836544]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2007-10-25 413696]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2008-01-17 431456]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2008-01-25 509816]
"00TCrdMain"="c:\program files\TOSHIBA\FlashCards\TCrdMain.exe" [2008-01-22 712704]
"Toshiba Registration"="c:\program files\Toshiba\Registration\ToshibaRegistration.exe" [2007-05-04 571024]
"PCSuiteTrayApplication"="c:\program files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 271360]
"ACQTMOUSE"="c:\program files\TOSHIBA\Tilt Mouse Software\1.1\ACQTMAPP.exe" [2007-07-08 501760]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-08-17 81000]
"Toshiba TEMPO"="c:\program files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe" [2008-11-06 103824]
"VistaFirewallControl"="c:\program files\VistaFirewallControl\VistaFirewallControl.exe" [2007-08-08 626688]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-11-23 185872]
"NBKeyScan"="c:\program files\Nero\Nero 7\Nero BackItUp\NBKeyScan.exe" [2008-02-21 1647912]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2008-01-29 4911104]
"NDSTray.exe"="NDSTray.exe" [BU]
"Skytel"="Skytel.exe" - c:\windows\SkyTel.exe [2007-11-20 1826816]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 1241088]
"Picasa Media Detector"="c:\program files\Picasa2\PicasaMediaDetector.exe" [2008-02-26 443968]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~3\GoogleDesktopNetwork3.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):e7,89,e8,ec,37,fb,c9,01

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{9EC8F880-BEF9-4841-9A09-E354C23A2145}"= Disabled:UDP:c:\program files\Skype\Phone\Skype.exe:Skype
"{F147E510-B7D6-49F1-B32E-98C839D50CF0}"= Disabled:TCP:c:\program files\Skype\Phone\Skype.exe:Skype
"{70BDFB7F-A964-4193-A240-2E1907D44EC3}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{AFA312FB-3359-45FC-B6C1-87F4332F2997}"= UDP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{4E81B42C-96D8-4201-A609-F7F01163C238}"= TCP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{2F9C4234-6865-484D-8CD7-8BD4A11FEAEF}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{6EE8CC87-D650-4C5E-B512-DC743958BF7A}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"TCP Query User{57EB86F0-DE26-4ADF-8077-CB5C919EFA42}c:\\program files\\videolan\\vlc\\vlc.exe"= UDP:c:\program files\videolan\vlc\vlc.exe:VLC media player
"UDP Query User{180C05AE-E6E7-4EED-AC67-9C40C70CFB18}c:\\program files\\videolan\\vlc\\vlc.exe"= TCP:c:\program files\videolan\vlc\vlc.exe:VLC media player
"TCP Query User{FE37A18D-CE4C-4A75-A897-CBB13682947A}c:\\users\\milan\\desktop\\valve\\hl.exe"= UDP:c:\users\milan\desktop\valve\hl.exe:hl.exe
"UDP Query User{E6559628-934D-4776-A110-C551AF15494A}c:\\users\\milan\\desktop\\valve\\hl.exe"= TCP:c:\users\milan\desktop\valve\hl.exe:hl.exe
"TCP Query User{C0E1D650-4CFD-4852-AC6D-58D593CD6667}c:\\program files\\sopcast\\sopcast.exe"= UDP:c:\program files\sopcast\sopcast.exe:SopCast
"UDP Query User{240FCBA5-3851-4FB2-8817-2AD7AA008B5A}c:\\program files\\sopcast\\sopcast.exe"= TCP:c:\program files\sopcast\sopcast.exe:SopCast
"TCP Query User{78941170-4D20-4169-A512-C9F2A9900485}c:\\program files\\videolan\\vlc\\vlc.exe"= UDP:c:\program files\videolan\vlc\vlc.exe:VLC media player
"UDP Query User{EFCFDB6F-A008-4E0E-A563-1C229A6801B0}c:\\program files\\videolan\\vlc\\vlc.exe"= TCP:c:\program files\videolan\vlc\vlc.exe:VLC media player
"TCP Query User{EE70FF45-06F5-4DB7-BFD4-EF442A5C930D}c:\\users\\milan\\desktop\\valve\\hl.exe"= UDP:c:\users\milan\desktop\valve\hl.exe:hl.exe
"UDP Query User{2CCAD50A-703F-4325-8666-7C8786E6079A}c:\\users\\milan\\desktop\\valve\\hl.exe"= TCP:c:\users\milan\desktop\valve\hl.exe:hl.exe
"TCP Query User{A6AF5D11-16E3-41FA-BA58-D73C3F79C4DE}\\\\acer-laptop\\quake iii arena\\quake3.exe"= UDp:\\acer-laptop\quake iii arena\quake3.exe:quake3.exe
"UDP Query User{888BB779-9C34-49C5-BB81-6A8E3014F746}\\\\acer-laptop\\quake iii arena\\quake3.exe"= TCp:\\acer-laptop\quake iii arena\quake3.exe:quake3.exe
"TCP Query User{E5328A34-058B-4731-BDB8-3D9F2D76B6CE}c:\\program files\\limewire\\limewire.exe"= UDP:c:\program files\limewire\limewire.exe:LimeWire
"UDP Query User{908C93AB-46C0-47D9-AB28-AC4A9AF2B12E}c:\\program files\\limewire\\limewire.exe"= TCP:c:\program files\limewire\limewire.exe:LimeWire
"TCP Query User{9B384A30-427F-4AE1-8F82-A7C02141A917}c:\\program files\\qip\\qip.exe"= UDP:c:\program files\qip\qip.exe:Quiet Internet Pager
"UDP Query User{D33136BC-147F-456D-8902-3135A2A879A3}c:\\program files\\qip\\qip.exe"= TCP:c:\program files\qip\qip.exe:Quiet Internet Pager
"TCP Query User{8F2873CF-53BD-4CF4-B02C-B964337C26EC}c:\\program files\\bearshare\\bearshare.exe"= UDP:c:\program files\bearshare\bearshare.exe:BearShare
"UDP Query User{C6B7CD66-D5E5-4082-85F6-028C3FEEB37D}c:\\program files\\bearshare\\bearshare.exe"= TCP:c:\program files\bearshare\bearshare.exe:BearShare
"TCP Query User{CE32980E-1917-473A-A1EA-120ABBC732AF}c:\\users\\milan\\desktop\\pro.evolution.soccer.2009.full-rip.skullptura\\pes 2009\\pes2009.exe"= UDP:c:\users\milan\desktop\pro.evolution.soccer.2009.full-rip.skullptura\pes 2009\pes2009.exe:pes2009.exe
"UDP Query User{A48ACB84-ED16-4C39-A598-734919C23FCA}c:\\users\\milan\\desktop\\pro.evolution.soccer.2009.full-rip.skullptura\\pes 2009\\pes2009.exe"= TCP:c:\users\milan\desktop\pro.evolution.soccer.2009.full-rip.skullptura\pes 2009\pes2009.exe:pes2009.exe
"TCP Query User{E5693733-84F5-43CA-9A4E-921CFB6D40A2}c:\\users\\milan\\desktop\\strongdc-plus-plus_2.21\\strongdc.exe"= UDP:c:\users\milan\desktop\strongdc-plus-plus_2.21\strongdc.exe:strongdc.exe
"UDP Query User{52DB8026-9C6B-4EE5-B0BA-714EAB9F2CC5}c:\\users\\milan\\desktop\\strongdc-plus-plus_2.21\\strongdc.exe"= TCP:c:\users\milan\desktop\strongdc-plus-plus_2.21\strongdc.exe:strongdc.exe
"TCP Query User{FC6A0FA0-70AF-4F6F-97DA-D6C07D207B15}c:\\sierra\\half-life\\hl.exe"= UDP:c:\sierra\half-life\hl.exe:Half-Life Launcher
"UDP Query User{0598A2B2-ECE0-410B-B6C1-B590716940BF}c:\\sierra\\half-life\\hl.exe"= TCP:c:\sierra\half-life\hl.exe:Half-Life Launcher
"TCP Query User{7C581FE6-B6C5-4873-87C2-558979F6CA52}c:\\program files\\mozilla firefox\\firefox.exe"= UDP:c:\program files\mozilla firefox\firefox.exe:Firefox
"UDP Query User{DC935EDD-5866-42C1-B422-57B141E603EA}c:\\program files\\mozilla firefox\\firefox.exe"= TCP:c:\program files\mozilla firefox\firefox.exe:Firefox
"TCP Query User{EDA96C89-D198-46DF-8BCE-71411A60DBC1}c:\\program files\\qip\\qip.exe"= UDP:c:\program files\qip\qip.exe:Quiet Internet Pager
"UDP Query User{1406F9F4-C471-43CE-A103-9636BA033063}c:\\program files\\qip\\qip.exe"= TCP:c:\program files\qip\qip.exe:Quiet Internet Pager
"TCP Query User{BB8683E2-12B0-4192-BCD0-BEF111650074}c:\\program files\\real\\realplayer\\realplay.exe"= UDP:c:\program files\real\realplayer\realplay.exe:RealPlayer
"UDP Query User{43CDBF9E-A96C-491F-8449-C8C88A6C83E1}c:\\program files\\real\\realplayer\\realplay.exe"= TCP:c:\program files\real\realplayer\realplay.exe:RealPlayer
"{8B5F1249-CD9E-474C-9701-27334D4D21DB}"= Disabled:UDP:c:\users\Milan\fm.exe:Football Manager 2009
"{2C4519C2-2450-4B81-AE78-291A25EFBF19}"= Disabled:TCP:c:\users\Milan\fm.exe:Football Manager 2009
"TCP Query User{389AC023-6B0E-45B2-B716-17A344831FFE}c:\\users\\milan\\desktop\\sdc222\\strongdc.exe"= UDP:c:\users\milan\desktop\sdc222\strongdc.exe:strongdc.exe
"UDP Query User{C945C3D3-D641-4F3F-96D7-67B47CFFE66D}c:\\users\\milan\\desktop\\sdc222\\strongdc.exe"= TCP:c:\users\milan\desktop\sdc222\strongdc.exe:strongdc.exe
"TCP Query User{2C7B4FE8-6A13-41B5-83EF-970CCB5E9FB7}c:\\users\\milan\\desktop\\strongdc-plus-plus_2.21\\strongdc.exe"= UDP:c:\users\milan\desktop\strongdc-plus-plus_2.21\strongdc.exe:strongdc.exe
"UDP Query User{51F75995-94DD-4317-B90F-CE7E4DA50856}c:\\users\\milan\\desktop\\strongdc-plus-plus_2.21\\strongdc.exe"= TCP:c:\users\milan\desktop\strongdc-plus-plus_2.21\strongdc.exe:strongdc.exe
"{88EB760A-5AC0-42B3-97F3-96C48C7347FA}"= UDP:c:\program files\Electronic Arts\Battlefield 2142\BF2142.exe:Battlefield 2
"{D80A2025-C01C-41C9-8876-8443E7A52F6B}"= TCP:c:\program files\Electronic Arts\Battlefield 2142\BF2142.exe:Battlefield 2
"TCP Query User{E493895A-7C3C-4722-9BB6-A284043D41ED}c:\\program files\\sas\\sas learning edition 4.1\\sas.exe"= UDP:c:\program files\sas\sas learning edition 4.1\sas.exe:SAS 9.1 for Windows
"UDP Query User{36F40881-7BCB-484A-A769-D56C7CC6F332}c:\\program files\\sas\\sas learning edition 4.1\\sas.exe"= TCP:c:\program files\sas\sas learning edition 4.1\sas.exe:SAS 9.1 for Windows
"TCP Query User{3A87D50D-BE2A-4677-B755-F2AF6BEF69D6}c:\\program files\\dc++\\dcplusplus.exe"= UDP:c:\program files\dc++\dcplusplus.exe:DC++
"UDP Query User{DBB29114-EC70-477B-AC04-C7E1EEA4C3BE}c:\\program files\\dc++\\dcplusplus.exe"= TCP:c:\program files\dc++\dcplusplus.exe:DC++
"{4052822B-8933-425F-95AF-027B2E140ED8}"= Disabled:UDP:c:\program files\Football_Manager_2009\fm.exe:Football Manager 2009
"{00C34CFF-6E57-4C56-8BDB-17BEBE3F25BC}"= Disabled:TCP:c:\program files\Football_Manager_2009\fm.exe:Football Manager 2009
"{A56D45C0-EB4F-41E7-86CC-066399953ECE}"= UDP:c:\program files\Sports Interactive\Football Manager 2009\fm.exe:Football Manager 2009
"{85A12862-B7E7-49F7-9481-F113BCA46294}"= TCP:c:\program files\Sports Interactive\Football Manager 2009\fm.exe:Football Manager 2009
"{70373E82-0256-449A-91D9-C20FAFEB1D69}"= UDP:c:\program files\BearShare Applications\BearShare\BearShare.exe:BearShare
"{DF60EEE0-A8A2-4CC6-896D-D8773E01F3EC}"= TCP:c:\program files\BearShare Applications\BearShare\BearShare.exe:BearShare
"TCP Query User{3A7B4E1A-710A-4BF8-8604-C2C976F1783F}c:\\program files\\miranda im\\miranda32.exe"= UDP:c:\program files\miranda im\miranda32.exe:Miranda IM
"UDP Query User{DBEC0F19-463F-4698-8D29-9EE6776748BB}c:\\program files\\miranda im\\miranda32.exe"= TCP:c:\program files\miranda im\miranda32.exe:Miranda IM
"TCP Query User{CCC97294-F9B0-4CC2-98CA-2EFCE4882DB4}c:\\program files\\limewire\\limewire.exe"= UDP:c:\program files\limewire\limewire.exe:LimeWire
"UDP Query User{6128EED0-37D7-4C33-BB0D-91666013107D}c:\\program files\\limewire\\limewire.exe"= TCP:c:\program files\limewire\limewire.exe:LimeWire
"{E98D03C8-3747-4A48-9900-7B8807A391F3}"= UDP:c:\program files\BitTorrent\bittorrent.exe:BitTorrent
"{DB01F02E-7739-41C9-8160-2CB664F5BCB2}"= TCP:c:\program files\BitTorrent\bittorrent.exe:BitTorrent
"TCP Query User{BA4D5AC7-9E67-4D7B-9ABA-CDB01D116FCA}c:\\program files\\sopcast\\sopcast.exe"= UDP:c:\program files\sopcast\sopcast.exe:SopCast Main Application
"UDP Query User{C8173CC3-AEA3-45E4-91A9-11D1970AB5BC}c:\\program files\\sopcast\\sopcast.exe"= TCP:c:\program files\sopcast\sopcast.exe:SopCast Main Application
"TCP Query User{16B46EC4-A3B9-4B6D-A4A6-71CDB9CD80B2}c:\\program files\\sopcast\\adv\\sopadver.exe"= UDP:c:\program files\sopcast\adv\sopadver.exe:SopCast Adver
"UDP Query User{D2A2B30E-D4B9-45A7-A31E-944C3578AF2D}c:\\program files\\sopcast\\adv\\sopadver.exe"= TCP:c:\program files\sopcast\adv\sopadver.exe:SopCast Adver
"TCP Query User{5A6657EC-C34F-4A99-B08C-9BC750FB6AA9}c:\\program files\\bittorrent\\bittorrent.exe"= UDP:c:\program files\bittorrent\bittorrent.exe:BitTorrent
"UDP Query User{B0137674-61E1-49B2-A609-94E832E1D3CF}c:\\program files\\bittorrent\\bittorrent.exe"= TCP:c:\program files\bittorrent\bittorrent.exe:BitTorrent
"{05E02F00-E945-4DB5-AB26-8BE16337D655}"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent (TCP-In)
"{99629984-3911-4CF3-8729-F3329295B240}"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent (UDP-In)

R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [24.9.2008 19:25 114768]
R1 RtlProt;Realtke RtlProt WLAN Utility Protocol Driver;c:\windows\System32\drivers\RtlProt.sys [18.9.2008 9:35 25896]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [24.9.2008 19:25 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [24.9.2008 19:24 53328]
R2 ConfigFree Service;ConfigFree Service;c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe [25.12.2007 14:07 40960]
R2 TempoMonitoringService;Notebook Performance Tuning Service ;c:\program files\Toshiba TEMPRO\TempoSVC.exe [6.11.2008 2:57 99720]
R2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;c:\program files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [3.12.2007 17:03 126976]
R2 VistaFirewallService;VistaFirewallService;c:\program files\VistaFirewallControl\VistaFirewallService.exe [1.10.2008 20:57 266240]
R3 FwLnk;FwLnk Driver;c:\windows\System32\drivers\FwLnk.sys [19.3.2008 17:07 7168]
R3 RTL8187B;Síťový adaptér Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0;c:\windows\System32\drivers\rtl8187B.sys [18.9.2008 9:21 290304]
S3 CrystalSysInfo;CrystalSysInfo;c:\program files\MediaCoder\SysInfo.sys [25.9.2007 16:59 15152]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Obsah adresáře 'Naplánované úlohy'

2009-09-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4058341538-466707391-2547058638-1000Core.job
- c:\users\Milan\AppData\Local\Google\Update\GoogleUpdate.exe [2009-09-24 18:42]

2009-09-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4058341538-466707391-2547058638-1000UA.job
- c:\users\Milan\AppData\Local\Google\Update\GoogleUpdate.exe [2009-09-24 18:42]

2009-09-30 c:\windows\Tasks\User_Feed_Synchronization-{9D5059AB-E0DB-4220-AA2D-D0EE5ACA2C94}.job
- c:\windows\system32\msfeedssync.exe [2009-08-11 20:13]
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\licrvddq.default\
FF - prefs.js: browser.search.selectedEngine - Vyhledávání videí ve službě YouTube
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - prefs.js: keyword.URL - hxxp://toolbar.ask.com/toolbarv/askRedi ... t=&gc=1&q=
FF - component: c:\program files\BS.Player ControlBar\FirefoxDTT\components\BSToolbarFF.dll
FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll
FF - plugin: c:\program files\Picasa2\npPicasa3.dll
FF - plugin: c:\users\Milan\AppData\Local\Google\Update\1.2.183.7\npGoogleOneClick8.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

WebBrowser-{3041D03E-FD4B-44E0-B742-2D9B88305F98} - (no file)
HKCU-Run-TOSCDSPD - TOSCDSPD.EXE



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-30 20:59
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Celkový čas: 2009-09-30 21:01
ComboFix-quarantined-files.txt 2009-09-30 19:01

Před spuštěním: 5 972 635 648
Po spuštění: 5 909 991 424

286 --- E O F --- 2009-08-11 16:49

Re: prosím o kontrolu logu

Napsal: 30 zář 2009 21:51
od Damned
Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok).
Zkopíruj do něj následující celý text označený zeleně:

KillAll::
DDS::

Firefox::
FF - prefs.js: browser.search.selectedEngine - Vyhledávání videí ve službě YouTube
FF - prefs.js: keyword.URL - hxxp://toolbar.ask.com/toolbarv/askRedi ... t=&gc=1&q=
FF - component: c:\program files\BS.Player ControlBar\FirefoxDTT\components\BSToolbarFF.dll

Folder::
C:\Program Files\AskBarDis
C:\Program Files\DAEMON Tools Toolbar
C:\Program Files\BS.Player ControlBar
c:\program files\bearshare

Registry::
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"TCP Query User{8F2873CF-53BD-4CF4-B02C-B964337C26EC}c:\\program files\\bearshare\\bearshare.exe"=-
"UDP Query User{C6B7CD66-D5E5-4082-85F6-028C3FEEB37D}c:\\program files\\bearshare\\bearshare.exe"=-
"{70373E82-0256-449A-91D9-C20FAFEB1D69}"=-
"{DF60EEE0-A8A2-4CC6-896D-D8773E01F3EC}"=-
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000000




Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.


Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe
a když se oba soubory překryjí, skript upusť.
Obrázek

- Automaticky se spustí ComboFix, oprava může trvat i déle než 10 minut. ! Nech ComboFix dokončit svou práci !
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT a popiš chování počítače

Re: prosím o kontrolu logu

Napsal: 30 zář 2009 22:38
od milsed
omboFix 09-09-29.04 - Milan 30.09.2009 22:05.2.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.2037.927 [GMT 2:00]
Spuštěný z: c:\users\Milan\Documents\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\Milan\Desktop\CFScript.txt
AV: avast! antivirus 4.8.1282 [VPS 081114-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: Vista Firewall Control *enabled* {C83D5A86-CCB1-40EB-BD6D-E0BA16353295}
SP: avast! antivirus 4.8.1282 [VPS 081114-0] *enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\AskBarDis
c:\program files\AskBarDis\bar\bin\askPopStp.dll
c:\program files\AskBarDis\bar\bin\psvince.dll
c:\program files\AskBarDis\bar\Settings\AskLogo.ico
c:\program files\AskBarDis\bar\Settings\config.dat
c:\program files\AskBarDis\bar\Settings\config.dat.bak
c:\program files\AskBarDis\unins000.dat
c:\program files\AskBarDis\unins000.exe
c:\program files\BS.Player ControlBar
c:\program files\BS.Player ControlBar\_BSPlayer.xml
c:\program files\BS.Player ControlBar\BSToolbar.dll
c:\program files\BS.Player ControlBar\FirefoxDTT\components\BSToolbarFF.dll
c:\program files\BS.Player ControlBar\FirefoxDTT\components\BSToolbarFF.xpt
c:\program files\BS.Player ControlBar\FirefoxDTT\chrome.manifest
c:\program files\BS.Player ControlBar\FirefoxDTT\chrome\bstoolbar.jar
c:\program files\BS.Player ControlBar\FirefoxDTT\install.rdf
c:\program files\BS.Player ControlBar\Resources\about.ico
c:\program files\BS.Player ControlBar\Resources\as.ico
c:\program files\BS.Player ControlBar\Resources\as.png
c:\program files\BS.Player ControlBar\Resources\astro.ico
c:\program files\BS.Player ControlBar\Resources\BurnImage.ico
c:\program files\BS.Player ControlBar\Resources\buy.ico
c:\program files\BS.Player ControlBar\Resources\cond000.gif
c:\program files\BS.Player ControlBar\Resources\cond001.gif
c:\program files\BS.Player ControlBar\Resources\cond003.gif
c:\program files\BS.Player ControlBar\Resources\cond004.gif
c:\program files\BS.Player ControlBar\Resources\cond005.gif
c:\program files\BS.Player ControlBar\Resources\cond006.gif
c:\program files\BS.Player ControlBar\Resources\cond007.gif
c:\program files\BS.Player ControlBar\Resources\cond008.gif
c:\program files\BS.Player ControlBar\Resources\cond009.gif
c:\program files\BS.Player ControlBar\Resources\cond010.gif
c:\program files\BS.Player ControlBar\Resources\cond011.gif
c:\program files\BS.Player ControlBar\Resources\cond019.gif
c:\program files\BS.Player ControlBar\Resources\cond020.gif
c:\program files\BS.Player ControlBar\Resources\cond021.gif
c:\program files\BS.Player ControlBar\Resources\cond022.gif
c:\program files\BS.Player ControlBar\Resources\cond023.gif
c:\program files\BS.Player ControlBar\Resources\cond024.gif
c:\program files\BS.Player ControlBar\Resources\cond025.gif
c:\program files\BS.Player ControlBar\Resources\cond026.gif
c:\program files\BS.Player ControlBar\Resources\cond037.gif
c:\program files\BS.Player ControlBar\Resources\cond038.gif
c:\program files\BS.Player ControlBar\Resources\cond039.gif
c:\program files\BS.Player ControlBar\Resources\cond040.gif
c:\program files\BS.Player ControlBar\Resources\cond041.gif
c:\program files\BS.Player ControlBar\Resources\cond046.gif
c:\program files\BS.Player ControlBar\Resources\cond048.gif
c:\program files\BS.Player ControlBar\Resources\cond050.gif
c:\program files\BS.Player ControlBar\Resources\cond051.gif
c:\program files\BS.Player ControlBar\Resources\cond052.gif
c:\program files\BS.Player ControlBar\Resources\cond053.gif
c:\program files\BS.Player ControlBar\Resources\cond054.gif
c:\program files\BS.Player ControlBar\Resources\cond055.gif
c:\program files\BS.Player ControlBar\Resources\cond056.gif
c:\program files\BS.Player ControlBar\Resources\cond057.gif
c:\program files\BS.Player ControlBar\Resources\cond058.gif
c:\program files\BS.Player ControlBar\Resources\cond059.gif
c:\program files\BS.Player ControlBar\Resources\cond060.gif
c:\program files\BS.Player ControlBar\Resources\cond061.gif
c:\program files\BS.Player ControlBar\Resources\cond062.gif
c:\program files\BS.Player ControlBar\Resources\cond063.gif
c:\program files\BS.Player ControlBar\Resources\cond064.gif
c:\program files\BS.Player ControlBar\Resources\cond065.gif
c:\program files\BS.Player ControlBar\Resources\cond066.gif
c:\program files\BS.Player ControlBar\Resources\cond067.gif
c:\program files\BS.Player ControlBar\Resources\cond068.gif
c:\program files\BS.Player ControlBar\Resources\cond069.gif
c:\program files\BS.Player ControlBar\Resources\cond075.gif
c:\program files\BS.Player ControlBar\Resources\cond076.gif
c:\program files\BS.Player ControlBar\Resources\cond077.gif
c:\program files\BS.Player ControlBar\Resources\cond078.gif
c:\program files\BS.Player ControlBar\Resources\cond079.gif
c:\program files\BS.Player ControlBar\Resources\cond080.gif
c:\program files\BS.Player ControlBar\Resources\cond084.gif
c:\program files\BS.Player ControlBar\Resources\cond085.gif
c:\program files\BS.Player ControlBar\Resources\cond086.gif
c:\program files\BS.Player ControlBar\Resources\cond087.gif
c:\program files\BS.Player ControlBar\Resources\cond088.gif
c:\program files\BS.Player ControlBar\Resources\cond089.gif
c:\program files\BS.Player ControlBar\Resources\cond090.gif
c:\program files\BS.Player ControlBar\Resources\cond091.gif
c:\program files\BS.Player ControlBar\Resources\cond092.gif
c:\program files\BS.Player ControlBar\Resources\cond093.gif
c:\program files\BS.Player ControlBar\Resources\cond094.gif
c:\program files\BS.Player ControlBar\Resources\cond095.gif
c:\program files\BS.Player ControlBar\Resources\cond108.gif
c:\program files\BS.Player ControlBar\Resources\cond109.gif
c:\program files\BS.Player ControlBar\Resources\cond110.gif
c:\program files\BS.Player ControlBar\Resources\cond111.gif
c:\program files\BS.Player ControlBar\Resources\cond112.gif
c:\program files\BS.Player ControlBar\Resources\cond113.gif
c:\program files\BS.Player ControlBar\Resources\cond120.gif
c:\program files\BS.Player ControlBar\Resources\cond121.gif
c:\program files\BS.Player ControlBar\Resources\cond122.gif
c:\program files\BS.Player ControlBar\Resources\cond126.gif
c:\program files\BS.Player ControlBar\Resources\cond127.gif
c:\program files\BS.Player ControlBar\Resources\cond128.gif
c:\program files\BS.Player ControlBar\Resources\cond129.gif
c:\program files\BS.Player ControlBar\Resources\cond130.gif
c:\program files\BS.Player ControlBar\Resources\cond131.gif
c:\program files\BS.Player ControlBar\Resources\cond132.gif
c:\program files\BS.Player ControlBar\Resources\cond133.gif
c:\program files\BS.Player ControlBar\Resources\cond134.gif
c:\program files\BS.Player ControlBar\Resources\cond135.gif
c:\program files\BS.Player ControlBar\Resources\cond136.gif
c:\program files\BS.Player ControlBar\Resources\cond137.gif
c:\program files\BS.Player ControlBar\Resources\cond138.gif
c:\program files\BS.Player ControlBar\Resources\cond140.gif
c:\program files\BS.Player ControlBar\Resources\cond141.gif
c:\program files\BS.Player ControlBar\Resources\cond142.gif
c:\program files\BS.Player ControlBar\Resources\cond143.gif
c:\program files\BS.Player ControlBar\Resources\cond148.gif
c:\program files\BS.Player ControlBar\Resources\cond149.gif
c:\program files\BS.Player ControlBar\Resources\cond152.gif
c:\program files\BS.Player ControlBar\Resources\cond154.gif
c:\program files\BS.Player ControlBar\Resources\cond155.gif
c:\program files\BS.Player ControlBar\Resources\cond156.gif
c:\program files\BS.Player ControlBar\Resources\cond157.gif
c:\program files\BS.Player ControlBar\Resources\d.ico
c:\program files\BS.Player ControlBar\Resources\d2.ico
c:\program files\BS.Player ControlBar\Resources\dt.ico
c:\program files\BS.Player ControlBar\Resources\DTPro.ico
c:\program files\BS.Player ControlBar\Resources\Dwnl.ico
c:\program files\BS.Player ControlBar\Resources\emulation.ico
c:\program files\BS.Player ControlBar\Resources\features.ico
c:\program files\BS.Player ControlBar\Resources\globe.ico
c:\program files\BS.Player ControlBar\Resources\GrabImage.ico
c:\program files\BS.Player ControlBar\Resources\hb.ico
c:\program files\BS.Player ControlBar\Resources\help.ico
c:\program files\BS.Player ControlBar\Resources\ikona-subtitles.ico
c:\program files\BS.Player ControlBar\Resources\ip.ico
c:\program files\BS.Player ControlBar\Resources\lang.xml
c:\program files\BS.Player ControlBar\Resources\lingvo.ico
c:\program files\BS.Player ControlBar\Resources\m.ico
c:\program files\BS.Player ControlBar\Resources\mail.bmp
c:\program files\BS.Player ControlBar\Resources\mail_disable.bmp
c:\program files\BS.Player ControlBar\Resources\mail_down.bmp
c:\program files\BS.Player ControlBar\Resources\mail_m.bmp
c:\program files\BS.Player ControlBar\Resources\mail_under.bmp
c:\program files\BS.Player ControlBar\Resources\mailc.bmp
c:\program files\BS.Player ControlBar\Resources\mailc_disable.bmp
c:\program files\BS.Player ControlBar\Resources\mailc_down.bmp
c:\program files\BS.Player ControlBar\Resources\mailc_m.bmp
c:\program files\BS.Player ControlBar\Resources\mailc_under.bmp
c:\program files\BS.Player ControlBar\Resources\MenuTr.ico
c:\program files\BS.Player ControlBar\Resources\next.bmp
c:\program files\BS.Player ControlBar\Resources\next_down.bmp
c:\program files\BS.Player ControlBar\Resources\next_m.bmp
c:\program files\BS.Player ControlBar\Resources\next_under.bmp
c:\program files\BS.Player ControlBar\Resources\none.bmp
c:\program files\BS.Player ControlBar\Resources\none_m.bmp
c:\program files\BS.Player ControlBar\Resources\noW.gif
c:\program files\BS.Player ControlBar\Resources\op.ico
c:\program files\BS.Player ControlBar\Resources\p1.ico
c:\program files\BS.Player ControlBar\Resources\p2.ico
c:\program files\BS.Player ControlBar\Resources\p3.ico
c:\program files\BS.Player ControlBar\Resources\p4.ico
c:\program files\BS.Player ControlBar\Resources\p5.ico
c:\program files\BS.Player ControlBar\Resources\p6.ico
c:\program files\BS.Player ControlBar\Resources\pragma.ico
c:\program files\BS.Player ControlBar\Resources\prev.bmp
c:\program files\BS.Player ControlBar\Resources\prev_down.bmp
c:\program files\BS.Player ControlBar\Resources\prev_m.bmp
c:\program files\BS.Player ControlBar\Resources\prev_under.bmp
c:\program files\BS.Player ControlBar\Resources\prod.ico
c:\program files\BS.Player ControlBar\Resources\refresh.bmp
c:\program files\BS.Player ControlBar\Resources\refresh_down.bmp
c:\program files\BS.Player ControlBar\Resources\refresh_m.bmp
c:\program files\BS.Player ControlBar\Resources\refresh_under.bmp
c:\program files\BS.Player ControlBar\Resources\Rss.ico
c:\program files\BS.Player ControlBar\Resources\Rss1.ico
c:\program files\BS.Player ControlBar\Resources\rssClose.ico
c:\program files\BS.Player ControlBar\Resources\rssL.bmp
c:\program files\BS.Player ControlBar\Resources\rssOpen.ico
c:\program files\BS.Player ControlBar\Resources\size.bmp
c:\program files\BS.Player ControlBar\Resources\size_m.bmp
c:\program files\BS.Player ControlBar\Resources\skins.ico
c:\program files\BS.Player ControlBar\Resources\spt.ico
c:\program files\BS.Player ControlBar\Resources\StartPage.ico
c:\program files\BS.Player ControlBar\Resources\subt.ico
c:\program files\BS.Player ControlBar\Resources\SupportRequest.ico
c:\program files\BS.Player ControlBar\Resources\time.ico
c:\program files\BS.Player ControlBar\Resources\TitleIcon.ico
c:\program files\BS.Player ControlBar\Resources\toolbar.xml
c:\program files\BS.Player ControlBar\Resources\trans.ico
c:\program files\BS.Player ControlBar\Resources\Trash.bmp
c:\program files\BS.Player ControlBar\Resources\Trash_disable.bmp
c:\program files\BS.Player ControlBar\Resources\Trash_down.bmp
c:\program files\BS.Player ControlBar\Resources\Trash_m.bmp
c:\program files\BS.Player ControlBar\Resources\Trash_under.bmp
c:\program files\BS.Player ControlBar\Resources\u.ico
c:\program files\BS.Player ControlBar\Resources\wb.bmp
c:\program files\BS.Player ControlBar\Resources\wBtClose.bmp
c:\program files\BS.Player ControlBar\Resources\wBtClose_down.bmp
c:\program files\BS.Player ControlBar\Resources\wBtClose_m.bmp
c:\program files\BS.Player ControlBar\Resources\wBtClose_under.bmp
c:\program files\BS.Player ControlBar\Resources\wBtText.bmp
c:\program files\BS.Player ControlBar\Resources\wBtText_down.bmp
c:\program files\BS.Player ControlBar\Resources\wBtText_m.bmp
c:\program files\BS.Player ControlBar\Resources\wBtText_under.bmp
c:\program files\BS.Player ControlBar\Resources\Weather_m42.bmp
c:\program files\BS.Player ControlBar\Resources\Weather_m43.bmp
c:\program files\BS.Player ControlBar\Resources\wi.ico
c:\program files\BS.Player ControlBar\Resources\wi0.ico
c:\program files\BS.Player ControlBar\Resources\wi1.ico
c:\program files\BS.Player ControlBar\Resources\wi10.ico
c:\program files\BS.Player ControlBar\Resources\wi11.ico
c:\program files\BS.Player ControlBar\Resources\wi12.ico
c:\program files\BS.Player ControlBar\Resources\wi13.ico
c:\program files\BS.Player ControlBar\Resources\wi2.ico
c:\program files\BS.Player ControlBar\Resources\wi3.ico
c:\program files\BS.Player ControlBar\Resources\wi4.ico
c:\program files\BS.Player ControlBar\Resources\wi5.ico
c:\program files\BS.Player ControlBar\Resources\wi6.ico
c:\program files\BS.Player ControlBar\Resources\wi7.ico
c:\program files\BS.Player ControlBar\Resources\wi8.ico
c:\program files\BS.Player ControlBar\Resources\wi9.ico
c:\program files\BS.Player ControlBar\uninst.exe
c:\program files\DAEMON Tools Toolbar
c:\program files\DAEMON Tools Toolbar\_DTLite.xml
c:\program files\DAEMON Tools Toolbar\DTToolbar.dll
c:\program files\DAEMON Tools Toolbar\Resources\about.ico
c:\program files\DAEMON Tools Toolbar\Resources\as.ico
c:\program files\DAEMON Tools Toolbar\Resources\as.png
c:\program files\DAEMON Tools Toolbar\Resources\astro.ico
c:\program files\DAEMON Tools Toolbar\Resources\b1.bmp
c:\program files\DAEMON Tools Toolbar\Resources\b1.png
c:\program files\DAEMON Tools Toolbar\Resources\BurnImage.ico
c:\program files\DAEMON Tools Toolbar\Resources\buy.ico
c:\program files\DAEMON Tools Toolbar\Resources\cond000.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond001.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond003.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond004.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond005.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond006.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond007.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond008.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond009.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond010.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond011.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond019.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond020.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond021.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond022.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond023.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond024.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond025.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond026.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond037.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond038.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond039.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond040.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond041.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond046.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond048.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond050.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond051.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond052.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond053.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond054.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond055.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond056.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond057.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond058.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond059.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond060.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond061.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond062.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond063.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond064.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond065.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond066.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond067.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond068.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond069.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond075.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond076.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond077.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond078.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond079.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond080.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond084.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond085.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond086.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond087.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond088.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond089.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond090.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond091.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond092.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond093.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond094.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond095.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond108.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond109.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond110.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond111.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond112.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond113.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond120.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond121.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond122.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond126.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond127.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond128.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond129.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond130.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond131.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond132.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond133.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond134.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond135.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond136.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond137.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond138.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond140.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond141.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond142.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond143.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond148.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond149.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond152.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond154.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond155.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond156.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond157.gif
c:\program files\DAEMON Tools Toolbar\Resources\d.ico
c:\program files\DAEMON Tools Toolbar\Resources\d2.ico
c:\program files\DAEMON Tools Toolbar\Resources\daemon.ico
c:\program files\DAEMON Tools Toolbar\Resources\ds.ico
c:\program files\DAEMON Tools Toolbar\Resources\dsearch.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt.ico
c:\program files\DAEMON Tools Toolbar\Resources\DTPro.ico
c:\program files\DAEMON Tools Toolbar\Resources\Dwnl.ico
c:\program files\DAEMON Tools Toolbar\Resources\emulation.ico
c:\program files\DAEMON Tools Toolbar\Resources\features.ico
c:\program files\DAEMON Tools Toolbar\Resources\gd.ico
c:\program files\DAEMON Tools Toolbar\Resources\globe.ico
c:\program files\DAEMON Tools Toolbar\Resources\GrabImage.ico
c:\program files\DAEMON Tools Toolbar\Resources\hb.bmp
c:\program files\DAEMON Tools Toolbar\Resources\hb.ico
c:\program files\DAEMON Tools Toolbar\Resources\help.ico
c:\program files\DAEMON Tools Toolbar\Resources\ip.ico
c:\program files\DAEMON Tools Toolbar\Resources\lang.xml
c:\program files\DAEMON Tools Toolbar\Resources\lingvo.ico
c:\program files\DAEMON Tools Toolbar\Resources\m.ico
c:\program files\DAEMON Tools Toolbar\Resources\mail.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\next.bmp
c:\program files\DAEMON Tools Toolbar\Resources\next_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\next_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\next_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\none.bmp
c:\program files\DAEMON Tools Toolbar\Resources\none_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\noW.gif
c:\program files\DAEMON Tools Toolbar\Resources\op.ico
c:\program files\DAEMON Tools Toolbar\Resources\pragma.ico
c:\program files\DAEMON Tools Toolbar\Resources\prev.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prev_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prev_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prev_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prod.ico
c:\program files\DAEMON Tools Toolbar\Resources\refresh.bmp
c:\program files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Rss.ico
c:\program files\DAEMON Tools Toolbar\Resources\Rss1.ico
c:\program files\DAEMON Tools Toolbar\Resources\rssClose.ico
c:\program files\DAEMON Tools Toolbar\Resources\rssL.bmp
c:\program files\DAEMON Tools Toolbar\Resources\rssOpen.ico
c:\program files\DAEMON Tools Toolbar\Resources\size.bmp
c:\program files\DAEMON Tools Toolbar\Resources\size_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\skins.ico
c:\program files\DAEMON Tools Toolbar\Resources\spt.ico
c:\program files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
c:\program files\DAEMON Tools Toolbar\Resources\time.ico
c:\program files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
c:\program files\DAEMON Tools Toolbar\Resources\toolbar.xml
c:\program files\DAEMON Tools Toolbar\Resources\trans.ico
c:\program files\DAEMON Tools Toolbar\Resources\Trash.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\u.ico
c:\program files\DAEMON Tools Toolbar\Resources\wb.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wi.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi0.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi1.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi10.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi11.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi12.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi13.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi2.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi3.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi4.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi5.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi6.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi7.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi8.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi9.ico
c:\program files\DAEMON Tools Toolbar\uninst.exe

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-08-28 do 2009-09-30 )))))))))))))))))))))))))))))))
.

2009-09-30 20:12 . 2009-09-30 20:15 -------- d-----w- c:\users\Milan\AppData\Local\temp
2009-09-30 20:12 . 2009-09-30 20:12 -------- d-----w- c:\users\Public\AppData\Local\temp
2009-09-30 20:12 . 2009-09-30 20:12 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-09-30 18:02 . 2009-09-30 18:02 -------- d-----w- c:\users\Milan\AppData\Roaming\Malwarebytes
2009-09-30 18:02 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-30 18:02 . 2009-09-30 18:02 -------- d-----w- c:\programdata\Malwarebytes
2009-09-30 18:02 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-30 18:02 . 2009-09-30 18:02 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-29 09:40 . 2009-09-29 09:40 -------- d-----w- c:\program files\uTorrent
2009-09-28 22:40 . 2009-09-28 22:40 -------- d-----w- c:\users\Milan\AppData\Roaming\Toshiba
2009-09-28 12:44 . 2009-09-28 12:44 -------- d-----w- c:\program files\EA Sports
2009-09-19 17:45 . 2009-09-19 17:45 -------- d-----w- c:\users\Milan\AppData\Roaming\vlc
2009-09-05 10:38 . 2009-09-05 10:38 -------- d-----w- c:\users\Milan\AppData\Local\Opera
2009-09-05 10:37 . 2009-09-05 10:37 -------- d-----w- c:\program files\Opera
2009-09-03 15:00 . 2009-09-03 15:00 -------- d-----w- c:\program files\All Ten Fingers
2009-09-03 13:35 . 2009-09-03 13:35 -------- d-----w- c:\users\Milan\AppData\Local\GHISLER
2009-09-03 13:33 . 2009-08-27 05:50 545 ----a-w- c:\windows\UC.PIF
2009-09-03 13:33 . 2009-08-27 05:50 545 ----a-w- c:\windows\RAR.PIF
2009-09-03 13:33 . 2009-08-27 05:50 545 ----a-w- c:\windows\PKZIP.PIF
2009-09-03 13:33 . 2009-08-27 05:50 545 ----a-w- c:\windows\PKUNZIP.PIF
2009-09-03 13:33 . 2009-08-27 05:50 545 ----a-w- c:\windows\NOCLOSE.PIF
2009-09-03 13:33 . 2009-08-27 05:50 545 ----a-w- c:\windows\LHA.PIF
2009-09-03 13:33 . 2009-08-27 05:50 545 ----a-w- c:\windows\ARJ.PIF
2009-09-03 13:17 . 2009-09-03 13:17 -------- d-----w- c:\users\Milan\AppData\Roaming\GHISLER
2009-09-02 17:17 . 2007-01-01 04:56 25808 ----a-w- c:\windows\system\CTL3DV2.DLL
2009-09-02 17:17 . 2009-09-03 13:35 -------- d-----w- C:\totalcmd

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-30 11:32 . 2007-01-08 21:09 636000 ----a-w- c:\windows\system32\perfh005.dat
2009-09-30 11:32 . 2007-01-08 21:09 134810 ----a-w- c:\windows\system32\perfc005.dat
2009-09-30 10:00 . 2008-09-23 12:56 -------- d-----w- c:\users\Milan\AppData\Roaming\uTorrent
2009-09-29 18:38 . 2009-07-29 16:44 -------- d-----w- c:\users\Milan\AppData\Roaming\BitTorrent
2009-09-26 11:10 . 2008-09-18 11:00 -------- d-----w- c:\users\Milan\AppData\Roaming\Skype
2009-08-22 15:29 . 2009-08-11 16:04 -------- d-----w- c:\program files\MediaCoder
2009-08-22 15:12 . 2009-08-22 14:51 -------- d-----w- c:\users\Milan\AppData\Roaming\Vso
2009-08-22 15:12 . 2009-08-22 14:51 47360 ----a-w- c:\users\Milan\AppData\Roaming\pcouffin.sys
2009-08-22 15:12 . 2009-08-22 14:51 47360 ----a-w- c:\users\Milan\AppData\Roaming\pcouffin.sys
2009-08-22 14:59 . 2009-08-19 16:17 -------- d-----w- c:\users\Milan\AppData\Roaming\Ulead Systems
2009-08-22 14:51 . 2009-08-22 14:51 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys
2009-08-19 16:16 . 2008-03-09 16:24 -------- d-----w- c:\programdata\Sports Interactive
2009-08-19 16:12 . 2009-08-11 17:05 -------- d-----w- c:\program files\AviSynth 2.5
2009-08-19 16:12 . 2009-08-19 14:38 -------- d-----w- c:\program files\Xvid
2009-08-19 16:10 . 2009-08-19 15:55 -------- d-----w- c:\program files\Common Files\AVSMedia
2009-08-19 16:10 . 2009-08-19 15:55 -------- d-----w- c:\program files\AVS4YOU
2009-08-19 15:56 . 2009-08-19 15:56 -------- d-----w- c:\users\Milan\AppData\Roaming\AVS4YOU
2009-08-19 15:56 . 2009-08-19 15:56 -------- d-----w- c:\programdata\AVS4YOU
2009-08-17 16:10 . 2008-09-24 17:24 1279456 ----a-w- c:\windows\system32\aswBoot.exe
2009-08-17 16:05 . 2008-09-24 17:25 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-08-17 16:05 . 2008-09-24 17:25 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-08-17 16:05 . 2008-09-24 17:24 53328 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2009-08-17 16:04 . 2008-09-24 17:25 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-08-17 16:04 . 2008-09-24 17:25 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-08-17 16:02 . 2008-09-24 17:25 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-08-11 17:05 . 2009-08-11 17:05 -------- d-----w- c:\program files\RealAnime 4
2009-08-11 17:01 . 2009-08-10 13:43 -------- d-----w- c:\program files\Free MKV Video2Dvd
2009-08-11 17:01 . 2009-08-11 16:10 -------- d-----w- c:\users\Milan\AppData\Roaming\Broad Intelligence
2009-08-11 16:53 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-08-11 16:40 . 2009-08-11 16:40 -------- d-----w- c:\program files\MSXML 4.0
2009-08-11 16:32 . 2008-09-18 07:30 113792 ----a-w- c:\users\Milan\AppData\Local\GDIPFONTCACHEV1.DAT
2009-08-09 19:54 . 2009-08-09 19:54 -------- d-----w- c:\users\Milan\AppData\Roaming\FFSJ
2009-08-09 18:19 . 2009-08-09 18:19 -------- d-----w- c:\program files\Peretek
2009-08-09 17:46 . 2009-08-09 17:45 -------- d-----w- c:\program files\EArt Video Cutter
2009-08-09 17:35 . 2009-08-09 17:33 -------- d-----w- c:\program files\Naturpic Video Cutter
2009-08-08 12:34 . 2009-08-08 12:34 -------- d-----w- c:\program files\SopCast
2009-08-06 13:48 . 2009-08-06 13:48 -------- d-----w- c:\program files\Audio Conversion Studio
2009-08-04 15:48 . 2009-08-04 15:48 -------- d-----w- c:\users\Milan\AppData\Roaming\dvdcss
2009-07-21 21:52 . 2009-08-11 16:39 915456 ----a-w- c:\windows\system32\wininet.dll
2009-07-21 21:47 . 2009-08-11 16:39 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-07-21 21:47 . 2009-08-11 16:39 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-07-21 20:13 . 2009-08-11 16:39 133632 ----a-w- c:\windows\system32\ieUnatt.exe
.

((((((((((((((((((((((((((((( SnapShot@2009-09-30_18.59.21 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-03-19 12:45 . 2009-09-30 20:16 52136 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2006-11-02 13:05 . 2009-09-30 20:16 69016 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2008-09-18 07:26 . 2009-09-30 19:37 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-09-18 07:26 . 2009-09-30 18:42 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-09-18 07:26 . 2009-09-30 19:37 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-09-18 07:26 . 2009-09-30 18:42 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-09-18 07:26 . 2009-09-30 18:42 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-09-18 07:26 . 2009-09-30 19:37 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-09-18 07:42 . 2009-09-30 20:16 7684 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-4058341538-466707391-2547058638-1000_UserData.bin
+ 2008-09-19 08:52 . 2009-09-30 20:12 2532616 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
- 2008-09-19 08:52 . 2009-09-29 18:49 2532616 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-10 1233920]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2006-06-26 20005928]
"CollaborationHost"="c:\windows\system32\p2phost.exe" [2008-01-18 192000]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-07-24 490952]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-18 125952]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2009-09-29 288560]
"WindowsWelcomeCenter"="oobefldr.dll" - c:\windows\System32\oobefldr.dll [2009-04-10 2153472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-18 1008184]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-05 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-05 154136]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-05 129560]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-08-14 1348904]
"topi"="c:\program files\TOSHIBA\Toshiba Online Product Information\topi.exe" [2007-07-10 581632]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-03-19 1836544]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2007-10-25 413696]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2008-01-17 431456]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2008-01-25 509816]
"00TCrdMain"="c:\program files\TOSHIBA\FlashCards\TCrdMain.exe" [2008-01-22 712704]
"Toshiba Registration"="c:\program files\Toshiba\Registration\ToshibaRegistration.exe" [2007-05-04 571024]
"PCSuiteTrayApplication"="c:\program files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 271360]
"ACQTMOUSE"="c:\program files\TOSHIBA\Tilt Mouse Software\1.1\ACQTMAPP.exe" [2007-07-08 501760]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-08-17 81000]
"Toshiba TEMPO"="c:\program files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe" [2008-11-06 103824]
"VistaFirewallControl"="c:\program files\VistaFirewallControl\VistaFirewallControl.exe" [2007-08-08 626688]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-11-23 185872]
"NBKeyScan"="c:\program files\Nero\Nero 7\Nero BackItUp\NBKeyScan.exe" [2008-02-21 1647912]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2008-01-29 4911104]
"NDSTray.exe"="NDSTray.exe" [BU]
"Skytel"="Skytel.exe" - c:\windows\SkyTel.exe [2007-11-20 1826816]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 1241088]
"Picasa Media Detector"="c:\program files\Picasa2\PicasaMediaDetector.exe" [2008-02-26 443968]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~3\GoogleDesktopNetwork3.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):e7,89,e8,ec,37,fb,c9,01

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{9EC8F880-BEF9-4841-9A09-E354C23A2145}"= Disabled:UDP:c:\program files\Skype\Phone\Skype.exe:Skype
"{F147E510-B7D6-49F1-B32E-98C839D50CF0}"= Disabled:TCP:c:\program files\Skype\Phone\Skype.exe:Skype
"{70BDFB7F-A964-4193-A240-2E1907D44EC3}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{AFA312FB-3359-45FC-B6C1-87F4332F2997}"= UDP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{4E81B42C-96D8-4201-A609-F7F01163C238}"= TCP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{2F9C4234-6865-484D-8CD7-8BD4A11FEAEF}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{6EE8CC87-D650-4C5E-B512-DC743958BF7A}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"TCP Query User{57EB86F0-DE26-4ADF-8077-CB5C919EFA42}c:\\program files\\videolan\\vlc\\vlc.exe"= UDP:c:\program files\videolan\vlc\vlc.exe:VLC media player
"UDP Query User{180C05AE-E6E7-4EED-AC67-9C40C70CFB18}c:\\program files\\videolan\\vlc\\vlc.exe"= TCP:c:\program files\videolan\vlc\vlc.exe:VLC media player
"TCP Query User{FE37A18D-CE4C-4A75-A897-CBB13682947A}c:\\users\\milan\\desktop\\valve\\hl.exe"= UDP:c:\users\milan\desktop\valve\hl.exe:hl.exe
"UDP Query User{E6559628-934D-4776-A110-C551AF15494A}c:\\users\\milan\\desktop\\valve\\hl.exe"= TCP:c:\users\milan\desktop\valve\hl.exe:hl.exe
"TCP Query User{C0E1D650-4CFD-4852-AC6D-58D593CD6667}c:\\program files\\sopcast\\sopcast.exe"= UDP:c:\program files\sopcast\sopcast.exe:SopCast
"UDP Query User{240FCBA5-3851-4FB2-8817-2AD7AA008B5A}c:\\program files\\sopcast\\sopcast.exe"= TCP:c:\program files\sopcast\sopcast.exe:SopCast
"TCP Query User{78941170-4D20-4169-A512-C9F2A9900485}c:\\program files\\videolan\\vlc\\vlc.exe"= UDP:c:\program files\videolan\vlc\vlc.exe:VLC media player
"UDP Query User{EFCFDB6F-A008-4E0E-A563-1C229A6801B0}c:\\program files\\videolan\\vlc\\vlc.exe"= TCP:c:\program files\videolan\vlc\vlc.exe:VLC media player
"TCP Query User{EE70FF45-06F5-4DB7-BFD4-EF442A5C930D}c:\\users\\milan\\desktop\\valve\\hl.exe"= UDP:c:\users\milan\desktop\valve\hl.exe:hl.exe
"UDP Query User{2CCAD50A-703F-4325-8666-7C8786E6079A}c:\\users\\milan\\desktop\\valve\\hl.exe"= TCP:c:\users\milan\desktop\valve\hl.exe:hl.exe
"TCP Query User{A6AF5D11-16E3-41FA-BA58-D73C3F79C4DE}\\\\acer-laptop\\quake iii arena\\quake3.exe"= UDp:\\acer-laptop\quake iii arena\quake3.exe:quake3.exe
"UDP Query User{888BB779-9C34-49C5-BB81-6A8E3014F746}\\\\acer-laptop\\quake iii arena\\quake3.exe"= TCp:\\acer-laptop\quake iii arena\quake3.exe:quake3.exe
"TCP Query User{E5328A34-058B-4731-BDB8-3D9F2D76B6CE}c:\\program files\\limewire\\limewire.exe"= UDP:c:\program files\limewire\limewire.exe:LimeWire
"UDP Query User{908C93AB-46C0-47D9-AB28-AC4A9AF2B12E}c:\\program files\\limewire\\limewire.exe"= TCP:c:\program files\limewire\limewire.exe:LimeWire
"TCP Query User{9B384A30-427F-4AE1-8F82-A7C02141A917}c:\\program files\\qip\\qip.exe"= UDP:c:\program files\qip\qip.exe:Quiet Internet Pager
"UDP Query User{D33136BC-147F-456D-8902-3135A2A879A3}c:\\program files\\qip\\qip.exe"= TCP:c:\program files\qip\qip.exe:Quiet Internet Pager
"TCP Query User{CE32980E-1917-473A-A1EA-120ABBC732AF}c:\\users\\milan\\desktop\\pro.evolution.soccer.2009.full-rip.skullptura\\pes 2009\\pes2009.exe"= UDP:c:\users\milan\desktop\pro.evolution.soccer.2009.full-rip.skullptura\pes 2009\pes2009.exe:pes2009.exe
"UDP Query User{A48ACB84-ED16-4C39-A598-734919C23FCA}c:\\users\\milan\\desktop\\pro.evolution.soccer.2009.full-rip.skullptura\\pes 2009\\pes2009.exe"= TCP:c:\users\milan\desktop\pro.evolution.soccer.2009.full-rip.skullptura\pes 2009\pes2009.exe:pes2009.exe
"TCP Query User{E5693733-84F5-43CA-9A4E-921CFB6D40A2}c:\\users\\milan\\desktop\\strongdc-plus-plus_2.21\\strongdc.exe"= UDP:c:\users\milan\desktop\strongdc-plus-plus_2.21\strongdc.exe:strongdc.exe
"UDP Query User{52DB8026-9C6B-4EE5-B0BA-714EAB9F2CC5}c:\\users\\milan\\desktop\\strongdc-plus-plus_2.21\\strongdc.exe"= TCP:c:\users\milan\desktop\strongdc-plus-plus_2.21\strongdc.exe:strongdc.exe
"TCP Query User{FC6A0FA0-70AF-4F6F-97DA-D6C07D207B15}c:\\sierra\\half-life\\hl.exe"= UDP:c:\sierra\half-life\hl.exe:Half-Life Launcher
"UDP Query User{0598A2B2-ECE0-410B-B6C1-B590716940BF}c:\\sierra\\half-life\\hl.exe"= TCP:c:\sierra\half-life\hl.exe:Half-Life Launcher
"TCP Query User{7C581FE6-B6C5-4873-87C2-558979F6CA52}c:\\program files\\mozilla firefox\\firefox.exe"= UDP:c:\program files\mozilla firefox\firefox.exe:Firefox
"UDP Query User{DC935EDD-5866-42C1-B422-57B141E603EA}c:\\program files\\mozilla firefox\\firefox.exe"= TCP:c:\program files\mozilla firefox\firefox.exe:Firefox
"TCP Query User{EDA96C89-D198-46DF-8BCE-71411A60DBC1}c:\\program files\\qip\\qip.exe"= UDP:c:\program files\qip\qip.exe:Quiet Internet Pager
"UDP Query User{1406F9F4-C471-43CE-A103-9636BA033063}c:\\program files\\qip\\qip.exe"= TCP:c:\program files\qip\qip.exe:Quiet Internet Pager
"TCP Query User{BB8683E2-12B0-4192-BCD0-BEF111650074}c:\\program files\\real\\realplayer\\realplay.exe"= UDP:c:\program files\real\realplayer\realplay.exe:RealPlayer
"UDP Query User{43CDBF9E-A96C-491F-8449-C8C88A6C83E1}c:\\program files\\real\\realplayer\\realplay.exe"= TCP:c:\program files\real\realplayer\realplay.exe:RealPlayer
"{8B5F1249-CD9E-474C-9701-27334D4D21DB}"= Disabled:UDP:c:\users\Milan\fm.exe:Football Manager 2009
"{2C4519C2-2450-4B81-AE78-291A25EFBF19}"= Disabled:TCP:c:\users\Milan\fm.exe:Football Manager 2009
"TCP Query User{389AC023-6B0E-45B2-B716-17A344831FFE}c:\\users\\milan\\desktop\\sdc222\\strongdc.exe"= UDP:c:\users\milan\desktop\sdc222\strongdc.exe:strongdc.exe
"UDP Query User{C945C3D3-D641-4F3F-96D7-67B47CFFE66D}c:\\users\\milan\\desktop\\sdc222\\strongdc.exe"= TCP:c:\users\milan\desktop\sdc222\strongdc.exe:strongdc.exe
"TCP Query User{2C7B4FE8-6A13-41B5-83EF-970CCB5E9FB7}c:\\users\\milan\\desktop\\strongdc-plus-plus_2.21\\strongdc.exe"= UDP:c:\users\milan\desktop\strongdc-plus-plus_2.21\strongdc.exe:strongdc.exe
"UDP Query User{51F75995-94DD-4317-B90F-CE7E4DA50856}c:\\users\\milan\\desktop\\strongdc-plus-plus_2.21\\strongdc.exe"= TCP:c:\users\milan\desktop\strongdc-plus-plus_2.21\strongdc.exe:strongdc.exe
"{88EB760A-5AC0-42B3-97F3-96C48C7347FA}"= UDP:c:\program files\Electronic Arts\Battlefield 2142\BF2142.exe:Battlefield 2
"{D80A2025-C01C-41C9-8876-8443E7A52F6B}"= TCP:c:\program files\Electronic Arts\Battlefield 2142\BF2142.exe:Battlefield 2
"TCP Query User{E493895A-7C3C-4722-9BB6-A284043D41ED}c:\\program files\\sas\\sas learning edition 4.1\\sas.exe"= UDP:c:\program files\sas\sas learning edition 4.1\sas.exe:SAS 9.1 for Windows
"UDP Query User{36F40881-7BCB-484A-A769-D56C7CC6F332}c:\\program files\\sas\\sas learning edition 4.1\\sas.exe"= TCP:c:\program files\sas\sas learning edition 4.1\sas.exe:SAS 9.1 for Windows
"TCP Query User{3A87D50D-BE2A-4677-B755-F2AF6BEF69D6}c:\\program files\\dc++\\dcplusplus.exe"= UDP:c:\program files\dc++\dcplusplus.exe:DC++
"UDP Query User{DBB29114-EC70-477B-AC04-C7E1EEA4C3BE}c:\\program files\\dc++\\dcplusplus.exe"= TCP:c:\program files\dc++\dcplusplus.exe:DC++
"{4052822B-8933-425F-95AF-027B2E140ED8}"= Disabled:UDP:c:\program files\Football_Manager_2009\fm.exe:Football Manager 2009
"{00C34CFF-6E57-4C56-8BDB-17BEBE3F25BC}"= Disabled:TCP:c:\program files\Football_Manager_2009\fm.exe:Football Manager 2009
"{A56D45C0-EB4F-41E7-86CC-066399953ECE}"= UDP:c:\program files\Sports Interactive\Football Manager 2009\fm.exe:Football Manager 2009
"{85A12862-B7E7-49F7-9481-F113BCA46294}"= TCP:c:\program files\Sports Interactive\Football Manager 2009\fm.exe:Football Manager 2009
"TCP Query User{3A7B4E1A-710A-4BF8-8604-C2C976F1783F}c:\\program files\\miranda im\\miranda32.exe"= UDP:c:\program files\miranda im\miranda32.exe:Miranda IM
"UDP Query User{DBEC0F19-463F-4698-8D29-9EE6776748BB}c:\\program files\\miranda im\\miranda32.exe"= TCP:c:\program files\miranda im\miranda32.exe:Miranda IM
"TCP Query User{CCC97294-F9B0-4CC2-98CA-2EFCE4882DB4}c:\\program files\\limewire\\limewire.exe"= UDP:c:\program files\limewire\limewire.exe:LimeWire
"UDP Query User{6128EED0-37D7-4C33-BB0D-91666013107D}c:\\program files\\limewire\\limewire.exe"= TCP:c:\program files\limewire\limewire.exe:LimeWire
"{E98D03C8-3747-4A48-9900-7B8807A391F3}"= UDP:c:\program files\BitTorrent\bittorrent.exe:BitTorrent
"{DB01F02E-7739-41C9-8160-2CB664F5BCB2}"= TCP:c:\program files\BitTorrent\bittorrent.exe:BitTorrent
"TCP Query User{BA4D5AC7-9E67-4D7B-9ABA-CDB01D116FCA}c:\\program files\\sopcast\\sopcast.exe"= UDP:c:\program files\sopcast\sopcast.exe:SopCast Main Application
"UDP Query User{C8173CC3-AEA3-45E4-91A9-11D1970AB5BC}c:\\program files\\sopcast\\sopcast.exe"= TCP:c:\program files\sopcast\sopcast.exe:SopCast Main Application
"TCP Query User{16B46EC4-A3B9-4B6D-A4A6-71CDB9CD80B2}c:\\program files\\sopcast\\adv\\sopadver.exe"= UDP:c:\program files\sopcast\adv\sopadver.exe:SopCast Adver
"UDP Query User{D2A2B30E-D4B9-45A7-A31E-944C3578AF2D}c:\\program files\\sopcast\\adv\\sopadver.exe"= TCP:c:\program files\sopcast\adv\sopadver.exe:SopCast Adver
"TCP Query User{5A6657EC-C34F-4A99-B08C-9BC750FB6AA9}c:\\program files\\bittorrent\\bittorrent.exe"= UDP:c:\program files\bittorrent\bittorrent.exe:BitTorrent
"UDP Query User{B0137674-61E1-49B2-A609-94E832E1D3CF}c:\\program files\\bittorrent\\bittorrent.exe"= TCP:c:\program files\bittorrent\bittorrent.exe:BitTorrent
"{05E02F00-E945-4DB5-AB26-8BE16337D655}"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent (TCP-In)
"{99629984-3911-4CF3-8729-F3329295B240}"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent (UDP-In)

R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [24.9.2008 19:25 114768]
R1 RtlProt;Realtke RtlProt WLAN Utility Protocol Driver;c:\windows\System32\drivers\RtlProt.sys [18.9.2008 9:35 25896]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [24.9.2008 19:25 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [24.9.2008 19:24 53328]
R2 ConfigFree Service;ConfigFree Service;c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe [25.12.2007 14:07 40960]
R2 TempoMonitoringService;Notebook Performance Tuning Service ;c:\program files\Toshiba TEMPRO\TempoSVC.exe [6.11.2008 2:57 99720]
R2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;c:\program files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [3.12.2007 17:03 126976]
R2 VistaFirewallService;VistaFirewallService;c:\program files\VistaFirewallControl\VistaFirewallService.exe [1.10.2008 20:57 266240]
R3 FwLnk;FwLnk Driver;c:\windows\System32\drivers\FwLnk.sys [19.3.2008 17:07 7168]
R3 RTL8187B;Síťový adaptér Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0;c:\windows\System32\drivers\rtl8187B.sys [18.9.2008 9:21 290304]
S3 CrystalSysInfo;CrystalSysInfo;c:\program files\MediaCoder\SysInfo.sys [25.9.2007 16:59 15152]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Obsah adresáře 'Naplánované úlohy'

2009-09-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4058341538-466707391-2547058638-1000Core.job
- c:\users\Milan\AppData\Local\Google\Update\GoogleUpdate.exe [2009-09-24 18:42]

2009-09-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4058341538-466707391-2547058638-1000UA.job
- c:\users\Milan\AppData\Local\Google\Update\GoogleUpdate.exe [2009-09-24 18:42]

2009-09-30 c:\windows\Tasks\User_Feed_Synchronization-{9D5059AB-E0DB-4220-AA2D-D0EE5ACA2C94}.job
- c:\windows\system32\msfeedssync.exe [2009-08-11 20:13]
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\licrvddq.default\
FF - prefs.js: browser.search.selectedEngine - Vyhledávání videí ve službě YouTube
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - prefs.js: keyword.URL - hxxp://toolbar.ask.com/toolbarv/askRedi ... t=&gc=1&q=
FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll
FF - plugin: c:\program files\Picasa2\npPicasa3.dll
FF - plugin: c:\users\Milan\AppData\Local\Google\Update\1.2.183.7\npGoogleOneClick8.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-Ask Toolbar_is1 - c:\program files\AskBarDis\unins000.exe
AddRemove-BS.Player ControlBar - c:\program files\BS.Player ControlBar\uninst.exe
AddRemove-DAEMON Tools Toolbar - c:\program files\DAEMON Tools Toolbar\uninst.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-30 22:15
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(1844)
c:\program files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 6\PCSCM.dll
c:\program files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
c:\windows\System32\audiodg.exe
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\program files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
c:\windows\System32\TODDSrv.exe
c:\program files\TOSHIBA\Power Saver\TosCoSrv.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\windows\System32\drivers\XAudio.exe
c:\program files\Alwil Software\Avast4\ashMaiSv.exe
c:\program files\Alwil Software\Avast4\ashWebSv.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Celkový čas: 2009-09-30 22:22 - počítač byl restartován
ComboFix-quarantined-files.txt 2009-09-30 20:22
ComboFix2.txt 2009-09-30 19:01

Před spuštěním: 5 927 088 128
Po spuštění: 5 889 101 824

740 --- E O F --- 2009-08-11 16:49

Re: prosím o kontrolu logu

Napsal: 30 zář 2009 22:38
od milsed
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:36:55, on 30.9.2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\TOSHIBA\Toshiba Online Product Information\TOPI.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\TOSHIBA\Tilt Mouse Software\1.1\ACQTMAPP.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
C:\Program Files\VistaFirewallControl\VistaFirewallControl.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Nero\Nero 7\Nero BackItUp\NBKeyScan.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\System32\p2phost.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Users\Milan\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Milan\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [ACQTMOUSE] "C:\Program Files\TOSHIBA\Tilt Mouse Software\1.1\ACQTMAPP.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [Toshiba TEMPO] C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
O4 - HKLM\..\Run: [VistaFirewallControl] C:\Program Files\VistaFirewallControl\VistaFirewallControl.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero 7\Nero BackItUp\NBKeyScan.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe (User 'Default user')
O4 - Startup: FIFA 09 Registration.lnk = C:\Program Files\EA Sports\FIFA 09\Support\EAregister.exe
O4 - Startup: TRDCReminder.lnk = C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GoogleDesktopNetwork3.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Notebook Performance Tuning Service (TempoMonitoringService) - Toshiba Europe GmbH - C:\Program Files\Toshiba TEMPRO\TempoSVC.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - c:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - c:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: VistaFirewallService - Sphinx Software - C:\Program Files\VistaFirewallControl\VistaFirewallService.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 10745 bytes


Zatím počítač běží jak má.

Re: prosím o kontrolu logu

Napsal: 30 zář 2009 23:16
od Damned
Odinstaluj ComboFix.
ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix[mezera]/u

Stáhni si ToolsCleaner2( by de A.Rothstein & Dj Quiou ) na Plochu a spusť ho.
Klikni na Pt. Restauration (obnova) a poté na OK.
Klikni na Corbeille (koš) a poté na OK.
Klikni na Fichiers temp (temp složky) a poté na OK.
Klikni na Recherche (hledání) a nech Cleaner pracovat. Může se během čištění zastavit , ale nech ho pokračovat.
Když program skončí , klikni na Suppression (odstranění) a odstraň nalezené.
Zavři a smaž program.


Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni select all found, pak klik empty selected.
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.

ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache,
cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer,
Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Kdyby něco, tak se zastav.
Označ topic za vyřešený (zelená fajfka) a měj se. :bigups:

Re: prosím o kontrolu logu

Napsal: 30 zář 2009 23:41
od milsed
Díky moc!
Časové pásmo: UTC+02:00
Stránka 1 z 1
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/