kontrola z důvodu jedné nefunkční internetové stránky Vyřešeno

[Renee]

zdravím, poslal jsem dnes svůj problém s nenačtením jedné jediné stránky (a zrovna té, na které jsem adminem) do sekce Internet a Sítě ( viewtopic.php?f=3&t=52759&p=369742#p369742 ). Tam mi Gyga poradil, ať vám pošlu log z HJT. Tak tu je a prosím o kontrolu. Díky!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:38:57, on 25.4.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\QIP\qip.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\AIMP2\AIMP2.exe
C:\Program Files\OpenOffice.org 3\program\swriter.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\RegCleaner\RegCleanr.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [QIP2005] C:\Program Files\QIP\qip.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - https://www.battlefieldheroes.com/stati ... 0.53.0.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

--
End of file - 4330 bytes

[Reklama]

[jaro3]

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - https://www.battlefieldheroes.com/stati ... 0.53.0.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab


Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

[Renee]

ahoj. teda nějakej malware jsem nečekal, přeinstalovával jsem windows sotva před měsícem a dávám si bacha na to co do kompu beru.
HJT fixnut
ATF Cleaner splněn
MBAM sice nesplnil do puntíku vše co jsi psal, ale sken proběhl a nějaký log vypadl (troufám si říct že docela pozitivní ):

Malwarebytes' Anti-Malware 1.45
http://www.malwarebytes.org

Verze databáze: 4037

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

26.4.2010 16:11:35
mbam-log-2010-04-26 (16-11-35).txt

Typ skenu: Rychlý sken
Skenované objekty: 108052
Uplynulý čas: 7 minuta(y), 33 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

jo, a web už jakžtakž jede. sice pekelně pomalu, ale je to jistý posun k lepšímu. díky!

[jaro3]

Nemáš zač , ještě toto:

Stáhni si RSIT (by random/random)
- spusť ho, objeví se ti okno, tak pro pokračování klikni na Continue
- počkej až program proběhne a zobrazí se ti log jinak ho najdeš zde: C:\rsit\log.txt zkopíruj sem prosím celý jeho obsah

[Renee]

mam s RSIT takový problém, vyhodí mi následující error:
http://img85.imageshack.us/i/beznzvutv.jpg/
jo, a web už zas nejde :)

[jaro3]

Klikni pravým na ikonu RSIT, A vyber odstranit potíže s kompatibilitou, potom pokračuj podle instrukcí.

[Renee]

ano, jde to log:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Renee at 2010-04-26 19:54:41
Microsoft Windows 7 Enterprise Service Pack 2
System drive C: has 44 GB (38%) free of 114 GB
Total RAM: 2048 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:54:51, on 26.4.2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\QIP\qip.exe
C:\Program Files\OpenOffice.org 3\program\swriter.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\System32\msdt.exe
C:\Windows\System32\sdiagnhost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\taskeng.exe
C:\Users\Renee\programy\RSIT.exe
C:\Program Files\trend micro\Renee.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [QIP2005] C:\Program Files\QIP\qip.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O13 - Gopher Prefix:
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

--
End of file - 4032 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3066638169-474057053-1295839724-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3066638169-474057053-1295839724-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
IDMIEHlprObj Class - C:\Program Files\Internet Download Manager\IDMIECC.dll [2007-09-28 95664]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-02-26 2140880]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-03-29 437584]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"QIP2005"=C:\Program Files\QIP\qip.exe [2009-08-13 3276288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Renee\AppData\Local\Google\Update\GoogleUpdate.exe [2010-04-01 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan]
C:\Program Files\Internet Download Manager\IDMan.exe [2010-04-18 2553264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
C:\Windows\SOUNDMAN.EXE [2006-11-17 577536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-03-02 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Renee^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-02-16 384512]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{aba148a6-3de2-11df-99fe-001731138d36}]
shell\AutoRun\command - E:\AUTORUN.EXE


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-04-26 18:26:25 ----D---- C:\rsit
2010-04-26 16:03:40 ----D---- C:\Users\Renee\AppData\Roaming\Malwarebytes
2010-04-26 16:03:31 ----D---- C:\ProgramData\Malwarebytes
2010-04-26 16:03:30 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-04-25 19:48:25 ----D---- C:\Windows\system32\appmgmt
2010-04-25 19:41:09 ----D---- C:\Program Files\AMD
2010-04-25 18:38:22 ----D---- C:\Program Files\Trend Micro
2010-04-25 18:20:34 ----D---- C:\Program Files\RegCleaner
2010-04-25 18:09:51 ----D---- C:\Program Files\CCleaner
2010-04-25 14:10:13 ----A---- C:\Windows\system32\msvcr71.dll
2010-04-22 21:05:17 ----D---- C:\Windows\system32\URTTEMP
2010-04-22 20:33:03 ----D---- C:\Program Files\Razor
2010-04-19 14:48:37 ----A---- C:\Windows\system32\pbsvc_heroes.exe
2010-04-18 20:11:25 ----A---- C:\Windows\system32\BASSMOD.dll
2010-04-18 20:00:38 ----D---- C:\Users\Renee\AppData\Roaming\IDM
2010-04-18 20:00:38 ----D---- C:\Users\Renee\AppData\Roaming\DMCache
2010-04-18 20:00:33 ----D---- C:\Program Files\Internet Download Manager
2010-04-15 17:55:52 ----D---- C:\Program Files\Sony Ericsson
2010-04-14 15:39:33 ----A---- C:\Windows\system32\vbscript.dll
2010-04-14 15:39:26 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-04-14 15:39:24 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-04-14 15:38:26 ----A---- C:\Windows\system32\cabview.dll
2010-04-14 15:38:17 ----A---- C:\Windows\system32\wintrust.dll
2010-04-08 20:13:57 ----D---- C:\ProgramData\TrackMania
2010-04-04 10:44:21 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-04-04 10:44:20 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-04-03 14:05:48 ----D---- C:\Users\Renee\AppData\Roaming\GRETECH
2010-04-03 14:05:09 ----D---- C:\Program Files\GRETECH
2010-04-02 23:05:38 ----D---- C:\Program Files\EA Games
2010-04-02 22:35:47 ----D---- C:\Users\Renee\AppData\Roaming\gtk-2.0
2010-04-02 22:31:11 ----D---- C:\Program Files\GIMP-2.0
2010-04-02 21:35:25 ----D---- C:\Windows\pss
2010-04-02 20:06:39 ----D---- C:\Program Files\SQUARE ENIX - Eidos Interactive
2010-04-02 18:22:49 ----A---- C:\Windows\system32\VB6STKIT.DLL
2010-04-02 18:22:44 ----D---- C:\Program Files\FootballArena
2010-04-02 18:01:47 ----D---- C:\Users\Renee\AppData\Roaming\OpenOffice.org
2010-04-02 12:43:46 ----D---- C:\Users\Renee\AppData\Roaming\Hamachi
2010-04-02 12:43:28 ----D---- C:\Program Files\Hamachi
2010-04-02 11:32:43 ----D---- C:\Users\Renee\AppData\Roaming\TuneUp Software
2010-04-02 11:32:04 ----D---- C:\ProgramData\TuneUp Software
2010-04-02 11:32:00 ----SHD---- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-04-02 11:27:29 ----D---- C:\Program Files\TmNationsForever
2010-04-02 11:14:26 ----D---- C:\Program Files\OpenOffice.org 3
2010-04-02 09:50:01 ----A---- C:\Windows\system32\msv1_0.dll
2010-04-02 09:47:51 ----A---- C:\Windows\system32\MRT.exe
2010-04-02 09:47:15 ----A---- C:\Windows\system32\browserchoice.exe
2010-04-02 09:45:57 ----A---- C:\Windows\system32\mshtml.dll
2010-04-02 09:45:52 ----A---- C:\Windows\system32\ieframe.dll
2010-04-02 09:45:51 ----A---- C:\Windows\system32\mstime.dll
2010-04-02 09:45:50 ----A---- C:\Windows\system32\urlmon.dll
2010-04-02 09:45:49 ----A---- C:\Windows\system32\wininet.dll
2010-04-02 09:45:49 ----A---- C:\Windows\system32\iedkcs32.dll
2010-04-02 09:45:48 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-04-02 09:45:43 ----A---- C:\Windows\system32\winlogon.exe
2010-04-02 09:45:43 ----A---- C:\Windows\explorer.exe
2010-04-02 09:45:33 ----A---- C:\Windows\system32\msasn1.dll
2010-04-02 09:45:22 ----A---- C:\Windows\system32\wmp.dll
2010-04-02 09:45:19 ----A---- C:\Windows\system32\CertEnroll.dll
2010-04-02 09:45:18 ----A---- C:\Windows\system32\winload.exe
2010-04-02 09:45:17 ----A---- C:\Windows\system32\winresume.exe
2010-04-02 09:45:15 ----A---- C:\Windows\system32\wmploc.DLL
2010-04-02 09:45:04 ----A---- C:\Windows\system32\jscript.dll
2010-04-02 09:45:00 ----A---- C:\Windows\system32\t2embed.dll
2010-04-02 09:44:59 ----A---- C:\Windows\system32\fontsub.dll
2010-04-02 09:44:59 ----A---- C:\Windows\system32\atmfd.dll
2010-04-02 09:44:55 ----A---- C:\Windows\system32\kernel32.dll
2010-04-02 09:44:54 ----A---- C:\Windows\system32\apphelp.dll
2010-04-02 09:44:48 ----A---- C:\Windows\system32\quartz.dll
2010-04-02 09:44:48 ----A---- C:\Windows\system32\msvidc32.dll
2010-04-02 09:44:48 ----A---- C:\Windows\system32\mciavi32.dll
2010-04-02 09:44:47 ----A---- C:\Windows\system32\iyuv_32.dll
2010-04-02 09:44:47 ----A---- C:\Windows\system32\avifil32.dll
2010-04-02 09:44:46 ----A---- C:\Windows\system32\msyuv.dll
2010-04-02 09:44:46 ----A---- C:\Windows\system32\msrle32.dll
2010-04-02 09:44:45 ----A---- C:\Windows\system32\tsbyuv.dll
2010-04-02 09:44:27 ----A---- C:\Windows\system32\CPFilters.dll
2010-04-02 09:44:25 ----A---- C:\Windows\system32\msdri.dll
2010-04-02 09:44:22 ----A---- C:\Windows\system32\psisdecd.dll
2010-04-02 09:44:14 ----A---- C:\Windows\system32\tzres.dll
2010-04-02 09:44:09 ----A---- C:\Windows\system32\secproc_isv.dll
2010-04-02 09:44:08 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-04-02 09:44:08 ----A---- C:\Windows\system32\secproc.dll
2010-04-02 09:44:08 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-04-02 09:44:08 ----A---- C:\Windows\system32\RMActivate.exe
2010-04-02 09:44:07 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-04-02 09:44:07 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-04-02 09:44:07 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-04-02 01:20:36 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-04-02 01:20:36 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-04-02 01:20:36 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-04-02 01:20:35 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-04-02 01:20:35 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-04-02 01:20:35 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-04-02 01:20:35 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-04-02 01:20:35 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-04-02 01:20:35 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-04-02 01:20:35 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-04-02 01:20:34 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-04-02 01:20:34 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-04-02 01:20:34 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-04-02 01:20:33 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-04-02 01:20:33 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-04-02 01:20:33 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-04-02 01:20:33 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-04-02 01:20:33 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-04-02 01:20:33 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-04-02 01:20:33 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-04-02 01:20:33 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-04-02 01:20:33 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-04-02 01:20:32 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-04-02 01:20:32 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-04-02 01:20:32 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-04-02 01:20:32 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-04-02 01:20:32 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-04-02 01:20:32 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-04-02 01:20:31 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-04-02 01:20:31 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-04-02 01:20:31 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-04-02 01:20:31 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-04-02 01:20:31 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-04-02 01:20:31 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-04-02 01:20:31 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-04-02 01:20:31 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-04-02 01:20:31 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-04-02 01:20:30 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-04-02 01:20:30 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-04-02 01:20:30 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-04-02 01:20:30 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-04-02 01:20:30 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-04-02 01:20:30 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-04-02 01:20:29 ----A---- C:\Windows\system32\xinput1_3.dll
2010-04-02 01:20:29 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-04-02 01:20:29 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-04-02 01:20:29 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-04-02 01:20:29 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-04-02 01:20:29 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-04-02 01:20:29 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-04-02 01:20:28 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-04-02 01:20:28 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-04-02 01:20:28 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-04-02 01:20:28 ----A---- C:\Windows\system32\d3dx10.dll
2010-04-02 01:20:27 ----A---- C:\Windows\system32\xinput1_2.dll
2010-04-02 01:20:27 ----A---- C:\Windows\system32\xinput1_1.dll
2010-04-02 01:20:27 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-04-02 01:20:27 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-04-02 01:20:27 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-04-02 01:20:27 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-04-02 01:20:27 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-04-02 01:20:27 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-04-02 01:20:26 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-04-02 01:20:21 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-04-02 01:20:21 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-04-02 01:20:21 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-04-02 01:20:20 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-04-02 01:20:20 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-04-02 01:20:20 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-04-02 01:20:19 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-04-02 01:20:19 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-04-02 01:20:18 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-04-02 01:19:27 ----D---- C:\Windows\system32\AGEIA
2010-04-02 01:19:25 ----D---- C:\Program Files\AGEIA Technologies
2010-04-02 01:19:11 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-04-02 01:18:19 ----D---- C:\Renee
2010-04-02 01:06:13 ----D---- C:\Program Files\2K Games
2010-04-02 01:05:51 ----D---- C:\BDS
2010-04-02 00:48:26 ----A---- C:\Windows\ALCFDRTM.EXE
2010-04-02 00:39:20 ----D---- C:\Program Files\DAEMON Tools Lite
2010-04-02 00:38:39 ----D---- C:\Users\Renee\AppData\Roaming\DAEMON Tools Lite
2010-04-02 00:38:36 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-04-01 23:43:55 ----D---- C:\Users\Renee\AppData\Roaming\AIMP
2010-04-01 23:14:00 ----A---- C:\Windows\system32\RtlCPAPI.dll
2010-04-01 23:13:59 ----A---- C:\Windows\system32\ChCfg.exe
2010-04-01 23:13:59 ----A---- C:\Windows\soundman.exe
2010-04-01 23:13:57 ----A---- C:\Windows\system32\RTLCPL.exe
2010-04-01 23:03:55 ----D---- C:\Program Files\Realtek AC97
2010-04-01 23:03:40 ----A---- C:\Windows\alcupd.exe
2010-04-01 23:03:39 ----A---- C:\Windows\alcrmv.exe
2010-04-01 23:03:09 ----D---- C:\Program Files\Common Files\InstallShield
2010-04-01 23:02:24 ----D---- C:\Users\Renee\AppData\Roaming\WinRAR
2010-04-01 22:56:19 ----D---- C:\Program Files\WinRAR
2010-04-01 22:51:09 ----D---- C:\Users\Renee\AppData\Roaming\Macromedia
2010-04-01 22:51:09 ----D---- C:\Users\Renee\AppData\Roaming\Adobe
2010-04-01 22:49:52 ----D---- C:\Windows\system32\Macromed
2010-04-01 22:41:25 ----D---- C:\Program Files\AIMP2
2010-04-01 22:37:19 ----D---- C:\Program Files\QIP
2010-04-01 21:49:48 ----D---- C:\Windows\Panther
2010-04-01 21:29:48 ----D---- C:\ProgramData\ESET
2010-04-01 21:29:48 ----D---- C:\Program Files\ESET
2010-04-01 21:15:04 ----N---- C:\Windows\system32\MpSigStub.exe
2010-04-01 21:10:56 ----D---- C:\Users\Renee\AppData\Roaming\ATI
2010-04-01 21:10:56 ----D---- C:\ProgramData\ATI
2010-04-01 21:10:55 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-04-01 21:09:39 ----SHD---- C:\Windows\Installer
2010-04-01 21:09:38 ----D---- C:\Program Files\ATI
2010-04-01 21:08:46 ----D---- C:\Program Files\ATI Technologies
2010-04-01 21:08:06 ----D---- C:\ATI
2010-04-01 21:07:33 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-01 21:03:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-04-01 20:59:46 ----D---- C:\Users\Renee\AppData\Roaming\Identities
2010-04-01 20:59:32 ----SD---- C:\Users\Renee\AppData\Roaming\Microsoft
2010-04-01 20:59:32 ----D---- C:\Users\Renee\AppData\Roaming\Media Center Programs
2010-04-01 20:59:15 ----SHD---- C:\Recovery
2010-04-01 20:59:15 ----SHD---- C:\ProgramData\Šablony
2010-04-01 20:59:15 ----SHD---- C:\ProgramData\Plocha
2010-04-01 20:59:15 ----SHD---- C:\ProgramData\Oblíbené položky
2010-04-01 20:59:15 ----SHD---- C:\ProgramData\Nabídka Start
2010-04-01 20:59:15 ----SHD---- C:\ProgramData\Dokumenty
2010-04-01 20:59:15 ----SHD---- C:\ProgramData\Data aplikací
2010-04-01 20:53:53 ----D---- C:\Windows\SoftwareDistribution
2010-04-01 20:50:50 ----D---- C:\Windows\Prefetch
2010-04-01 20:50:41 ----SHD---- C:\System Volume Information

======List of files/folders modified in the last 1 months======

2010-04-26 19:54:50 ----D---- C:\Windows\Temp
2010-04-26 19:54:38 ----D---- C:\Windows\system32\Tasks
2010-04-26 19:51:30 ----D---- C:\Windows\system32\config
2010-04-26 16:03:34 ----D---- C:\Windows\system32\drivers
2010-04-26 16:03:31 ----HD---- C:\ProgramData
2010-04-26 16:03:30 ----RD---- C:\Program Files
2010-04-26 16:00:09 ----D---- C:\Windows\Downloaded Program Files
2010-04-25 19:54:14 ----D---- C:\Windows
2010-04-25 19:53:11 ----D---- C:\Windows\system32\catroot
2010-04-25 19:48:25 ----D---- C:\Windows\System32
2010-04-25 19:48:12 ----D---- C:\Windows\system32\catroot2
2010-04-25 18:15:52 ----D---- C:\Windows\debug
2010-04-25 17:37:03 ----D---- C:\Windows\system32\NDF
2010-04-25 14:32:18 ----D---- C:\Windows\Help
2010-04-25 14:31:56 ----D---- C:\Windows\system32\DriverStore
2010-04-25 14:31:56 ----D---- C:\Windows\inf
2010-04-22 21:07:11 ----D---- C:\Windows\Registration
2010-04-22 21:06:44 ----RSD---- C:\Windows\assembly
2010-04-22 21:05:17 ----D---- C:\Program Files\Internet Explorer
2010-04-15 14:22:40 ----D---- C:\Windows\winsxs
2010-04-12 22:45:10 ----D---- C:\Windows\Logs
2010-04-09 20:50:39 ----D---- C:\Windows\rescache
2010-04-07 22:24:22 ----D---- C:\Windows\system32\wdi
2010-04-02 23:21:21 ----D---- C:\Windows\system32\LogFiles
2010-04-02 18:37:45 ----SHD---- C:\$Recycle.Bin
2010-04-02 11:14:51 ----RSD---- C:\Windows\Fonts
2010-04-02 10:59:22 ----SD---- C:\ProgramData\Microsoft
2010-04-02 10:53:38 ----HD---- C:\Windows\system32\GroupPolicy
2010-04-02 10:26:22 ----D---- C:\Windows\Microsoft.NET
2010-04-02 09:53:26 ----D---- C:\Windows\system32\cs-CZ
2010-04-02 09:53:26 ----D---- C:\Windows\AppPatch
2010-04-02 09:53:25 ----D---- C:\Windows\system32\Boot
2010-04-02 09:53:25 ----D---- C:\Program Files\Windows Media Player
2010-04-02 09:53:24 ----D---- C:\Windows\ehome
2010-04-02 01:19:11 ----D---- C:\Program Files\Common Files
2010-04-01 21:14:53 ----D---- C:\Windows\Tasks
2010-04-01 21:09:50 ----D---- C:\Program Files\Common Files\microsoft shared
2010-04-01 21:05:48 ----D---- C:\Windows\system32\CodeIntegrity
2010-04-01 21:02:40 ----D---- C:\Windows\system32\wbem
2010-04-01 21:00:22 ----D---- C:\Windows\system32\restore
2010-04-01 20:59:29 ----RD---- C:\Users
2010-04-01 20:59:15 ----D---- C:\Windows\system32\Recovery
2010-04-01 20:59:15 ----D---- C:\Program Files\Windows NT
2010-04-01 20:54:16 ----D---- C:\Windows\system32\sysprep
2010-04-01 20:51:41 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 blbdrive;blbdrive; C:\Windows\system32\DRIVERS\blbdrive.sys [2009-07-14 35328]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 DfsC;@%systemroot%\system32\drivers\dfsc.sys,-101; C:\Windows\System32\Drivers\dfsc.sys [2009-07-14 78336]
R1 discache;@%systemroot%\system32\drivers\discache.sys,-102; C:\Windows\System32\drivers\discache.sys [2009-07-14 32256]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-02-26 114984]
R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; C:\Windows\system32\drivers\nsiproxy.sys [2009-07-14 16896]
R1 RDPENCDD;@%systemroot%\system32\drivers\RDPENCDD.sys,-101; C:\Windows\system32\drivers\rdpencdd.sys [2009-07-14 6656]
R1 RDPREFMP;@%systemroot%\system32\drivers\RdpRefMp.sys,-101; C:\Windows\system32\drivers\rdprefmp.sys [2009-07-14 7168]
R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; C:\Windows\system32\DRIVERS\tdx.sys [2009-07-14 74240]
R1 Wanarpv6;@%systemroot%\system32\rascfg.dll,-32012; C:\Windows\system32\DRIVERS\wanarp.sys [2009-07-14 63488]
R1 WfpLwf;WFP Lightweight Filter; C:\Windows\system32\DRIVERS\wfplwf.sys [2009-07-14 9728]
R1 ws2ifsl;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\Windows\system32\drivers\ws2ifsl.sys [2009-07-14 16384]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-02-26 133512]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-02-26 96896]
R2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver; C:\Windows\system32\DRIVERS\lltdio.sys [2009-07-14 48128]
R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; C:\Windows\system32\drivers\luafv.sys [2009-07-14 86528]
R2 PEAUTH;PEAUTH; C:\Windows\system32\drivers\peauth.sys [2009-07-14 586752]
R2 rspndr;Link-Layer Topology Discovery Responder; C:\Windows\system32\DRIVERS\rspndr.sys [2009-07-14 60928]
R2 tcpipreg;TCP/IP Registry Compatibility; C:\Windows\System32\drivers\tcpipreg.sys [2009-07-14 34816]
R3 1394ohci;Hostitelský řadič pro rozhraní OHCI standardu 1394; C:\Windows\system32\DRIVERS\1394ohci.sys [2009-07-14 163328]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\Windows\system32\drivers\ALCXWDM.SYS [2006-12-29 4026112]
R3 AmdK8;Ovladač procesoru AMD K8; C:\Windows\system32\DRIVERS\amdk8.sys [2009-07-14 55296]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-03-03 5340160]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-03-03 152064]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-01-28 100352]
R3 bowser;@%systemroot%\system32\browser.dll,-102; C:\Windows\system32\DRIVERS\bowser.sys [2009-07-14 69632]
R3 CompositeBus;Ovladač rozpoznávacího modulu složené sběrnice; C:\Windows\system32\DRIVERS\CompositeBus.sys [2009-07-14 31232]
R3 DXGKrnl;LDDM Graphics Subsystem; C:\Windows\System32\drivers\dxgkrnl.sys [2009-10-02 728648]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-04-02 25280]
R3 HDAudBus;Ovladač sběrnice Microsoft UAA pro zvuk High Definition Audio; C:\Windows\system32\DRIVERS\HDAudBus.sys [2009-07-14 108544]
R3 HidUsb;Ovladač třídy standardu HID Microsoft; C:\Windows\system32\DRIVERS\hidusb.sys [2009-07-14 24064]
R3 monitor;Služba ovladače funkce třídy monitorů Microsoft; C:\Windows\system32\DRIVERS\monitor.sys [2009-07-14 23552]
R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; C:\Windows\System32\drivers\mpsdrv.sys [2009-07-14 60416]
R3 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; C:\Windows\system32\DRIVERS\mrxsmb10.sys [2010-02-27 221696]
R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; C:\Windows\system32\DRIVERS\mrxsmb20.sys [2010-02-27 95744]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
R3 RasAgileVpn;WAN Miniport (IKEv2); C:\Windows\system32\DRIVERS\AgileVpn.sys [2009-07-14 49152]
R3 RasSstp;@%systemroot%\system32\sstpsvc.dll,-202; C:\Windows\system32\DRIVERS\rassstp.sys [2009-07-14 75264]
R3 rdpbus;Remote Desktop Device Redirector Bus Driver; C:\Windows\system32\DRIVERS\rdpbus.sys [2009-07-14 18944]
R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; C:\Windows\System32\DRIVERS\srv2.sys [2009-07-14 306688]
R3 srvnet;srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [2009-12-08 113664]
R3 tunnel;Microsoft Tunnel Miniport Adapter Driver; C:\Windows\system32\DRIVERS\tunnel.sys [2009-07-14 108544]
R3 umbus;Ovladač sběrnice UMBus Enumerator; C:\Windows\system32\DRIVERS\umbus.sys [2009-07-14 39936]
R3 usbehci;Ovladač miniportu vylepšeného hostitelského řadiče Microsoft USB 2.0; C:\Windows\system32\DRIVERS\usbehci.sys [2009-10-24 41984]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\Windows\system32\DRIVERS\usbhub.sys [2009-10-24 258560]
R3 usbohci;Ovladač miniportu otevřeného hostitelského řadiče Microsoft USB; C:\Windows\system32\DRIVERS\usbohci.sys [2009-07-14 20480]
R3 usbprint;Třída USB Printer; C:\Windows\system32\DRIVERS\usbprint.sys [2009-07-14 19968]
R3 WudfPf;User Mode Driver Frameworks Platform Driver; C:\Windows\system32\drivers\WudfPf.sys [2009-07-14 92672]
S3 AcpiPmi;ACPI Power Meter Driver; C:\Windows\system32\DRIVERS\acpipmi.sys [2009-07-14 9728]
S3 adp94xx;adp94xx; C:\Windows\system32\DRIVERS\adp94xx.sys [2009-07-14 422976]
S3 adpahci;adpahci; C:\Windows\system32\DRIVERS\adpahci.sys [2009-07-14 297552]
S3 adpu320;adpu320; C:\Windows\system32\DRIVERS\adpu320.sys [2009-07-14 146512]
S3 agp440;Intel AGP Bus Filter; C:\Windows\system32\DRIVERS\agp440.sys [2009-07-14 53312]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 amdide;amdide; C:\Windows\system32\DRIVERS\amdide.sys [2009-07-14 14912]
S3 AmdPPM;AMD Processor Driver; C:\Windows\system32\DRIVERS\amdppm.sys [2009-07-14 52736]
S3 amdsata;amdsata; C:\Windows\system32\DRIVERS\amdsata.sys [2009-07-14 79952]
S3 amdsbs;amdsbs; C:\Windows\system32\DRIVERS\amdsbs.sys [2009-07-14 159312]
S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; C:\Windows\system32\drivers\appid.sys [2009-07-14 50176]
S3 arc;arc; C:\Windows\system32\DRIVERS\arc.sys [2009-07-14 76368]
S3 arcsas;arcsas; C:\Windows\system32\DRIVERS\arcsas.sys [2009-07-14 86608]
S3 arr5k5k7;arr5k5k7; C:\Windows\system32\drivers\arr5k5k7.sys []
S3 asusgsb;ASUS Virtual Video Capture Device Driver; C:\Windows\system32\drivers\asusgsb.sys [2009-02-17 15232]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-03-03 5340160]
S3 atkdisplf;ASUS Kernel Mode Enhanced Driver; C:\Windows\system32\drivers\ATKDispLowFilter.sys [2009-02-17 30976]
S3 b06bdrv;Broadcom NetXtreme II VBD; C:\Windows\system32\DRIVERS\bxvbdx.sys [2009-07-14 430080]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BrFiltLo;Brother USB Mass-Storage Lower Filter Driver; C:\Windows\system32\DRIVERS\BrFiltLo.sys [2009-07-14 13568]
S3 BrFiltUp;Brother USB Mass-Storage Upper Filter Driver; C:\Windows\system32\DRIVERS\BrFiltUp.sys [2009-07-14 5248]
S3 Brserid;Brother MFC Serial Port Interface Driver (WDM); C:\Windows\System32\Drivers\Brserid.sys [2009-07-14 272128]
S3 BrSerWdm;Brother WDM Serial driver; C:\Windows\System32\Drivers\BrSerWdm.sys [2009-07-14 62336]
S3 BrUsbMdm;Brother MFC USB Fax Only Modem; C:\Windows\System32\Drivers\BrUsbMdm.sys [2009-07-14 12160]
S3 BrUsbSer;Brother MFC USB Serial WDM Driver; C:\Windows\System32\Drivers\BrUsbSer.sys [2009-07-14 11904]
S3 BTHMODEM;Bluetooth Serial Communications Driver; C:\Windows\system32\DRIVERS\bthmodem.sys [2009-07-14 56320]
S3 circlass;Consumer IR Devices; C:\Windows\system32\DRIVERS\circlass.sys [2009-07-14 37888]
S3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2009-07-14 14080]
S3 Compbatt;Compbatt; C:\Windows\system32\DRIVERS\compbatt.sys [2009-07-14 19024]
S3 ebdrv;Broadcom NetXtreme II 10 GigE VBD; C:\Windows\system32\DRIVERS\evbdx.sys [2009-07-14 3100160]
S3 elxstor;elxstor; C:\Windows\system32\DRIVERS\elxstor.sys [2009-07-14 453712]
S3 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\DRIVERS\errdev.sys [2009-07-14 7168]
S3 exfat;exFAT File System Driver; C:\Windows\system32\drivers\exfat.sys [2009-07-14 142336]
S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; C:\Windows\system32\drivers\filetrace.sys [2009-07-14 28160]
S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; C:\Windows\System32\drivers\FsDepends.sys [2009-07-14 46160]
S3 gagp30kx;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms; C:\Windows\system32\DRIVERS\gagp30kx.sys [2009-07-14 57936]
S3 hcw85cir;Hauppauge Consumer Infrared Receiver; C:\Windows\system32\drivers\hcw85cir.sys [2009-07-14 26624]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-07-14 304128]
S3 HidBatt;HID UPS Battery Driver; C:\Windows\system32\DRIVERS\HidBatt.sys [2009-07-14 21504]
S3 HidBth;Microsoft Bluetooth HID Miniport; C:\Windows\system32\DRIVERS\hidbth.sys [2009-07-14 91136]
S3 HidIr;Microsoft Infrared HID Driver; C:\Windows\system32\DRIVERS\hidir.sys [2009-07-14 37888]
S3 HpSAMD;HpSAMD; C:\Windows\system32\DRIVERS\HpSAMD.sys [2009-07-14 67152]
S3 iaStorV;iaStorV; C:\Windows\system32\DRIVERS\iaStorV.sys [2009-07-14 332352]
S3 iirsp;iirsp; C:\Windows\system32\DRIVERS\iirsp.sys [2009-07-14 41040]
S3 intelide;intelide; C:\Windows\system32\DRIVERS\intelide.sys [2009-07-14 15424]
S3 intelppm;Intel Processor Driver; C:\Windows\system32\DRIVERS\intelppm.sys [2009-07-14 53760]
S3 IPMIDRV;IPMIDRV; C:\Windows\system32\DRIVERS\IPMIDrv.sys [2009-07-14 65536]
S3 isapnp;isapnp; C:\Windows\system32\DRIVERS\isapnp.sys [2009-07-14 46656]
S3 iScsiPrt;iScsiPort Driver; C:\Windows\system32\DRIVERS\msiscsi.sys [2009-07-14 186960]
S3 kbdhid;Keyboard HID Driver; C:\Windows\system32\DRIVERS\kbdhid.sys [2009-07-14 28160]
S3 LSI_FC;LSI_FC; C:\Windows\system32\DRIVERS\lsi_fc.sys [2009-07-14 95824]
S3 LSI_SAS;LSI_SAS; C:\Windows\system32\DRIVERS\lsi_sas.sys [2009-07-14 89168]
S3 LSI_SAS2;LSI_SAS2; C:\Windows\system32\DRIVERS\lsi_sas2.sys [2009-07-14 54864]
S3 LSI_SCSI;LSI_SCSI; C:\Windows\system32\DRIVERS\lsi_scsi.sys [2009-07-14 96848]
S3 megasas;megasas; C:\Windows\system32\DRIVERS\megasas.sys [2009-07-14 30800]
S3 MegaSR;MegaSR; C:\Windows\system32\DRIVERS\MegaSR.sys [2009-07-14 235584]
S3 mouhid;Ovladač myši standardu HID; C:\Windows\system32\DRIVERS\mouhid.sys [2009-07-14 26112]
S3 mpio;mpio; C:\Windows\system32\DRIVERS\mpio.sys [2009-07-14 130624]
S3 msahci;msahci; C:\Windows\system32\DRIVERS\msahci.sys [2009-07-14 27712]
S3 msdsm;msdsm; C:\Windows\system32\DRIVERS\msdsm.sys [2009-07-14 115792]
S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; C:\Windows\System32\drivers\mshidkmdf.sys [2009-07-14 4096]
S3 MsRPC;MsRPC; C:\Windows\system32\drivers\MsRPC.sys [2009-07-14 162896]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2009-07-14 6144]
S3 MTConfig;Microsoft Input Configuration Driver; C:\Windows\system32\DRIVERS\MTConfig.sys [2009-07-14 12288]
S3 NativeWifiP;NativeWiFi Filter; C:\Windows\system32\DRIVERS\nwifi.sys [2009-07-14 267264]
S3 NdisCap;NDIS Capture LightWeight Filter; C:\Windows\system32\DRIVERS\ndiscap.sys [2009-07-14 27136]
S3 nfrd960;nfrd960; C:\Windows\system32\DRIVERS\nfrd960.sys [2009-07-14 44624]
S3 nv_agp;NVIDIA nForce AGP Bus Filter; C:\Windows\system32\DRIVERS\nv_agp.sys [2009-07-14 105024]
S3 nvraid;nvraid; C:\Windows\system32\DRIVERS\nvraid.sys [2009-07-14 117312]
S3 nvstor;nvstor; C:\Windows\system32\DRIVERS\nvstor.sys [2009-07-14 142416]
S3 ohci1394;1394 OHCI Compliant Host Controller (Legacy); C:\Windows\system32\DRIVERS\ohci1394.sys [2009-07-14 62464]
S3 ql2300;ql2300; C:\Windows\system32\DRIVERS\ql2300.sys [2009-07-14 1383488]
S3 ql40xx;ql40xx; C:\Windows\system32\DRIVERS\ql40xx.sys [2009-07-14 106064]
S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; C:\Windows\system32\drivers\qwavedrv.sys [2009-07-14 31744]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sbp2port;sbp2port; C:\Windows\system32\DRIVERS\sbp2port.sys [2009-07-14 85568]
S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; C:\Windows\System32\DRIVERS\scfilter.sys [2009-07-14 26624]
S3 sermouse;Serial Mouse Driver; C:\Windows\system32\DRIVERS\sermouse.sys [2009-07-14 19968]
S3 sffdisk;SFF Storage Class Driver; C:\Windows\system32\DRIVERS\sffdisk.sys [2009-07-14 11264]
S3 sffp_mmc;SFF Storage Protocol Driver for MMC; C:\Windows\system32\DRIVERS\sffp_mmc.sys [2009-07-14 12288]
S3 sffp_sd;SFF Storage Protocol Driver for SDBus; C:\Windows\system32\DRIVERS\sffp_sd.sys [2009-07-14 12800]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 SiSRaid2;SiSRaid2; C:\Windows\system32\DRIVERS\SiSRaid2.sys [2009-07-14 40016]
S3 SiSRaid4;SiSRaid4; C:\Windows\system32\DRIVERS\sisraid4.sys [2009-07-14 77888]
S3 Smb;@%SystemRoot%\system32\tcpipcfg.dll,-50005; C:\Windows\system32\DRIVERS\smb.sys [2009-07-14 71168]
S3 stexstor;stexstor; C:\Windows\system32\DRIVERS\stexstor.sys [2009-07-14 21072]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 TCPIP6;Microsoft IPv6 Protocol Driver; C:\Windows\system32\DRIVERS\tcpip.sys [2009-07-14 1285712]
S3 tssecsrv;@%SystemRoot%\System32\DRIVERS\tssecsrv.sys,-101; C:\Windows\System32\DRIVERS\tssecsrv.sys [2009-07-14 30208]
S3 uagp35;Microsoft AGPv3.5 Filter; C:\Windows\system32\DRIVERS\uagp35.sys [2009-07-14 55888]
S3 uliagpkx;Uli AGP Bus Filter; C:\Windows\system32\DRIVERS\uliagpkx.sys [2009-07-14 57424]
S3 UmPass;Microsoft UMPass Driver; C:\Windows\system32\DRIVERS\umpass.sys [2009-07-14 8192]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\Windows\system32\DRIVERS\usbccgp.sys [2009-07-14 75264]
S3 usbcir;eHome Infrared Receiver (USBCIR); C:\Windows\system32\DRIVERS\usbcir.sys [2009-07-14 86016]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\Windows\system32\DRIVERS\USBSTOR.SYS [2009-07-14 74752]
S3 usbuhci;Ovladač miniportu univerzálního hostitelského řadiče Microsoft USB; C:\Windows\system32\DRIVERS\usbuhci.sys [2009-07-14 24064]
S3 vga;vga; C:\Windows\system32\DRIVERS\vgapnp.sys [2009-07-14 26112]
S3 vhdmp;vhdmp; C:\Windows\system32\DRIVERS\vhdmp.sys [2009-07-14 159824]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 vsmraid;vsmraid; C:\Windows\system32\DRIVERS\vsmraid.sys [2009-07-14 141904]
S3 vwifibus;@%SystemRoot%\System32\drivers\vwifibus.sys,-257; C:\Windows\System32\drivers\vwifibus.sys [2009-07-14 19968]
S3 WacomPen;Wacom Serial Pen HID Driver; C:\Windows\system32\DRIVERS\wacompen.sys [2009-07-14 21632]
S3 Wd;Wd; C:\Windows\system32\DRIVERS\wd.sys [2009-07-14 19024]
S3 WIMMount;WIMMount; C:\Windows\system32\drivers\wimmount.sys [2009-07-14 19008]
S3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2009-07-14 11264]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2009-07-14 132224]
S4 crcdisk;Crcdisk Filter Driver; C:\Windows\system32\DRIVERS\crcdisk.sys [2009-07-14 22096]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-03-03 172032]
R2 AudioEndpointBuilder;@%SystemRoot%\system32\audiosrv.dll,-204; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DPS;@%systemroot%\system32\dps.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-02-26 810120]
R2 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 gpsvc;@gpapi.dll,-112; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-04-04 75064]
R2 Power;@%SystemRoot%\system32\umpo.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 UxSms;@%SystemRoot%\system32\dwm.exe,-2000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 WinDefend;@%ProgramFiles%\Windows Defender\MsMpRes.dll,-103; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 WMPNetworkSvc;@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101; C:\Program Files\Windows Media Player\wmpnetwk.exe [2009-07-14 1121280]
R2 WSearch;@%systemroot%\system32\SearchIndexer.exe,-103; C:\Windows\system32\SearchIndexer.exe [2009-07-14 428032]
R2 wudfsvc;@%SystemRoot%\system32\wudfsvc.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 netprofm;@%SystemRoot%\system32\netprofm.dll,-202; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; C:\Windows\servicing\TrustedInstaller.exe [2009-07-14 204800]
R3 WdiServiceHost;@%systemroot%\system32\wdi.dll,-502; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; C:\Windows\system32\sppsvc.exe [2009-07-14 3179520]
S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-06-10 31064]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 clr_optimization_v2.0.50727_32;Microsoft .NET Framework NGEN v2.0.50727_X86; C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2009-06-10 66384]
S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; C:\Windows\System32\lsass.exe [2009-07-14 22528]
S3 ehRecvr;@%SystemRoot%\ehome\ehrecvr.exe,-101; C:\Windows\ehome\ehRecvr.exe [2009-07-14 557056]
S3 ehSched;@%SystemRoot%\ehome\ehsched.exe,-101; C:\Windows\ehome\ehsched.exe [2009-07-14 94720]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-02-26 33560]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2009-07-14 522752]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2009-06-10 42856]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8193; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2009-06-10 878416]
S3 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 IPBusEnum;@%systemroot%\system32\IPBusEnum.dll,-102; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 KeyIso;@keyiso.dll,-100; C:\Windows\system32\lsass.exe [2009-07-14 22528]
S3 KtmRm;@comres.dll,-2946; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 pla;@%systemroot%\system32\pla.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SDRSVC;@%SystemRoot%\system32\sdrsvc.dll,-107; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; C:\Windows\System32\snmptrap.exe [2009-07-14 12800]
S3 sppuinotify;@%SystemRoot%\system32\sppuinotify.dll,-103; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 TBS;@%SystemRoot%\system32\tbssvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; C:\Windows\system32\UI0Detect.exe [2009-07-14 35840]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; C:\Windows\system32\lsass.exe [2009-07-14 22528]
S3 vds;@%SystemRoot%\system32\vds.exe,-100; C:\Windows\System32\vds.exe [2009-07-14 452608]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2009-07-14 1202688]
S3 WbioSrvc;@%systemroot%\system32\wbiosrvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wcncsvc;@%SystemRoot%\system32\wcncsvc.dll,-3; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WcsPlugInService;@%SystemRoot%\system32\WcsPlugInService.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WdiSystemHost;@%systemroot%\system32\wdi.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Wecsvc;@%SystemRoot%\system32\wecsvc.dll,-200; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 wercplsupport;@%SystemRoot%\System32\wercplsupport.dll,-101; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WerSvc;@%SystemRoot%\System32\wersvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WinHttpAutoProxySvc;@%SystemRoot%\system32\winhttp.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WinRM;@%Systemroot%\system32\wsmsvc.dll,-101; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Wlansvc;@%SystemRoot%\System32\wlansvc.dll,-257; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WPCSvc;@%SystemRoot%\system32\wpcsvc.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WPDBusEnum;@%SystemRoot%\system32\wpdbusenum.dll,-100; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 WwanSvc;@%SystemRoot%\System32\wwansvc.dll,-257; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 Mcx2Svc;@%SystemRoot%\ehome\ehres.dll,-15501; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 NetTcpPortSharing;@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8201; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 128848]

-----------------EOF-----------------

[jaro3]

Vypni rez. ochranu u NOD32.

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

[Renee]

ComboFix 10-04-26.02 - Renee 26.04.2010 20:16:56.1.1 - x86
Microsoft Windows 7 Enterprise 6.1.7600.0.1250.420.1029.18.2048.1340 [GMT 2:00]
Spuštěný z: c:\users\Renee\programy\ComboFix.exe
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-03-26 do 2010-04-26 )))))))))))))))))))))))))))))))
.

2010-04-26 18:23 . 2010-04-26 18:23 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-04-26 16:26 . 2010-04-26 17:54 -------- d-----w- C:\rsit
2010-04-26 14:03 . 2010-04-26 14:03 -------- d-----w- c:\users\Renee\AppData\Roaming\Malwarebytes
2010-04-26 14:03 . 2010-03-29 13:24 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-26 14:03 . 2010-04-26 14:03 -------- d-----w- c:\programdata\Malwarebytes
2010-04-26 14:03 . 2010-03-29 13:24 20824 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-04-26 14:03 . 2010-04-26 14:03 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-04-25 17:41 . 2010-04-25 17:41 -------- d-----w- c:\program files\AMD
2010-04-25 17:40 . 2010-04-25 17:40 -------- d-----w- c:\users\Renee\AppData\Local\Downloaded Installations
2010-04-25 16:38 . 2010-04-25 16:38 388096 ----a-r- c:\users\Renee\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-04-25 16:38 . 2010-04-26 17:54 -------- d-----w- c:\program files\Trend Micro
2010-04-25 16:20 . 2010-04-25 16:24 -------- d-----w- c:\program files\RegCleaner
2010-04-25 16:09 . 2010-04-25 16:09 -------- d-----w- c:\program files\CCleaner
2010-04-25 12:37 . 2010-04-25 12:37 10134 ----a-r- c:\users\Renee\AppData\Roaming\Microsoft\Installer\{9903001D-2728-9D9B-3D8B-F593A502A972}\ARPPRODUCTICON.exe
2010-04-25 12:10 . 2009-02-17 16:22 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-04-25 12:10 . 2009-02-17 16:22 30976 ----a-w- c:\windows\system32\drivers\ATKDispLowFilter.sys
2010-04-25 12:10 . 2009-02-17 16:22 15232 ----a-w- c:\windows\system32\drivers\asusgsb.sys
2010-04-22 19:05 . 2010-04-22 19:05 -------- d-----w- c:\windows\system32\URTTEMP
2010-04-22 18:33 . 2010-04-22 18:33 -------- d-----w- c:\program files\Razor
2010-04-19 12:48 . 2010-04-19 12:48 2427248 ----a-w- c:\windows\system32\pbsvc_heroes.exe
2010-04-18 18:01 . 2010-04-18 18:01 116144 ----a-w- c:\users\Renee\AppData\Roaming\IDM\idmmzcc2\components\idmmzcc.dll
2010-04-18 18:00 . 2010-04-18 18:10 -------- d-----w- c:\users\Renee\AppData\Roaming\DMCache
2010-04-18 18:00 . 2010-04-18 18:08 -------- d-----w- c:\users\Renee\AppData\Roaming\IDM
2010-04-18 18:00 . 2010-04-18 18:11 -------- d-----w- c:\program files\Internet Download Manager
2010-04-15 15:55 . 2010-04-15 15:55 -------- d-----w- c:\program files\Sony Ericsson
2010-04-14 13:39 . 2010-02-27 07:32 221696 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-04-14 13:39 . 2010-02-27 07:32 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-04-14 13:39 . 2010-02-27 07:32 95744 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2010-04-14 13:39 . 2010-03-08 21:33 427520 ----a-w- c:\windows\system32\vbscript.dll
2010-04-14 13:39 . 2010-02-27 12:07 3899280 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-04-14 13:39 . 2010-02-27 12:07 3954568 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-04-14 13:38 . 2010-01-09 06:52 132608 ----a-w- c:\windows\system32\cabview.dll
2010-04-14 13:38 . 2009-12-29 06:55 172032 ----a-w- c:\windows\system32\wintrust.dll
2010-04-08 19:36 . 2009-06-22 16:58 89600 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\HPZPPLHN.DLL
2010-04-08 18:13 . 2010-04-08 18:48 -------- d-----w- c:\programdata\TrackMania
2010-04-04 08:44 . 2010-04-23 12:48 138184 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-04-04 08:44 . 2010-04-23 12:47 215016 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-04-04 08:44 . 2010-04-04 08:44 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-04-03 12:05 . 2010-04-03 12:05 -------- d-----w- c:\users\Renee\AppData\Roaming\GRETECH
2010-04-03 12:05 . 2010-04-03 12:05 -------- d-----w- c:\program files\GRETECH
2010-04-02 21:30 . 2010-04-02 21:30 -------- d-----w- c:\users\Renee\AppData\Local\PunkBuster
2010-04-02 21:21 . 2010-04-19 12:49 138056 ----a-w- c:\users\Renee\AppData\Roaming\PnkBstrK.sys
2010-04-02 21:05 . 2010-04-22 19:45 -------- d-----w- c:\program files\EA Games
2010-04-02 20:35 . 2010-04-02 20:35 -------- d-----w- c:\users\Renee\.thumbnails
2010-04-02 20:35 . 2010-04-15 19:38 -------- d-----w- c:\users\Renee\AppData\Roaming\gtk-2.0
2010-04-02 20:33 . 2010-04-15 19:42 -------- d-----w- c:\users\Renee\.gimp-2.6
2010-04-02 20:31 . 2010-04-02 20:31 -------- d-----w- c:\program files\GIMP-2.0
2010-04-02 18:06 . 2010-04-02 18:06 -------- d-----w- c:\program files\SQUARE ENIX - Eidos Interactive
2010-04-02 16:22 . 2000-07-14 22:00 101888 ----a-w- c:\windows\system32\VB6STKIT.DLL
2010-04-02 16:22 . 2010-04-02 16:24 -------- d-----w- c:\program files\FootballArena
2010-04-02 16:01 . 2010-04-26 14:05 1 ----a-w- c:\users\Renee\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-04-02 16:01 . 2010-04-02 16:01 -------- d-----w- c:\users\Renee\AppData\Roaming\OpenOffice.org
2010-04-02 10:43 . 2010-04-17 15:57 -------- d-----w- c:\users\Renee\AppData\Roaming\Hamachi
2010-04-02 10:43 . 2010-04-02 10:43 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2010-04-02 10:43 . 2010-04-02 10:43 -------- d-----w- c:\program files\Hamachi
2010-04-02 09:32 . 2010-04-02 09:32 -------- d-----w- c:\users\Renee\AppData\Roaming\TuneUp Software
2010-04-02 09:32 . 2010-04-02 09:32 -------- d-----w- c:\programdata\TuneUp Software
2010-04-02 09:32 . 2010-04-02 09:32 -------- d-sh--w- c:\programdata\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-04-02 09:27 . 2010-04-08 18:13 -------- d-----w- c:\program files\TmNationsForever
2010-04-02 09:14 . 2010-04-02 09:14 -------- d-----w- c:\program files\OpenOffice.org 3
2010-04-02 07:50 . 2009-09-10 05:52 257024 ----a-w- c:\windows\system32\msv1_0.dll
2010-04-02 07:47 . 2010-02-11 07:10 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-04-02 07:44 . 2009-10-19 14:10 70656 ----a-w- c:\windows\system32\fontsub.dll
2010-04-01 23:47 . 2010-04-01 23:47 29410816 ----a-w- c:\programdata\Microsoft\Windows Defender\LocalCopy\{DE8A95BE-8F10-D4E0-8D39-041606B67235}-Borderlands.exe
2010-04-01 23:19 . 2010-04-01 23:19 -------- d-----w- c:\windows\system32\AGEIA
2010-04-01 23:19 . 2010-04-01 23:19 -------- d-----w- c:\program files\AGEIA Technologies
2010-04-01 23:19 . 2010-04-01 23:19 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-04-01 23:18 . 2010-04-02 16:48 -------- d-----w- C:\Renee
2010-04-01 23:06 . 2010-04-01 23:06 -------- d-----w- c:\program files\2K Games
2010-04-01 23:05 . 2010-04-01 23:18 -------- d-----w- C:\BDS
2010-04-01 23:04 . 2010-04-07 20:27 -------- d-----w- c:\users\Renee\AppData\Local\Diagnostics
2010-04-01 22:48 . 2010-04-01 22:48 60416 ----a-w- c:\windows\ALCFDRTM.EXE
2010-04-01 22:41 . 2010-04-01 22:41 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-04-01 22:39 . 2010-04-01 22:41 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-04-01 22:38 . 2010-04-01 23:05 -------- d-----w- c:\users\Renee\AppData\Roaming\DAEMON Tools Lite
2010-04-01 22:38 . 2010-04-01 22:38 -------- d-----w- c:\programdata\DAEMON Tools Lite
2010-04-01 21:43 . 2010-04-25 17:55 -------- d-----w- c:\users\Renee\AppData\Roaming\AIMP
2010-04-01 21:42 . 2010-04-15 16:02 -------- d-----r- c:\users\Renee\Obrázky
2010-04-01 21:42 . 2010-04-26 12:47 -------- d-----r- c:\users\Renee\Filmy
2010-04-01 21:42 . 2010-04-02 16:37 -------- d-----r- c:\users\Renee\HUDBA
2010-04-01 21:14 . 2006-12-29 12:48 4026112 ----a-r- c:\windows\system32\drivers\alcxwdm.sys
2010-04-01 21:14 . 2006-10-18 00:53 147456 ----a-w- c:\windows\system32\RtlCPAPI.dll
2010-04-01 21:13 . 2006-11-17 03:42 577536 ----a-w- c:\windows\soundman.exe
2010-04-01 21:13 . 2006-08-01 13:02 49152 ----a-w- c:\windows\system32\ChCfg.exe
2010-04-01 21:13 . 2006-12-08 13:20 10528768 ----a-w- c:\windows\system32\RTLCPL.exe
2010-04-01 21:03 . 2010-04-01 21:13 -------- d-----w- c:\program files\Realtek AC97
2010-04-01 21:03 . 2006-07-31 09:19 315392 ----a-w- c:\windows\alcupd.exe
2010-04-01 21:03 . 2006-07-31 09:27 217088 ----a-w- c:\windows\alcrmv.exe
2010-04-01 21:03 . 2010-04-25 12:27 -------- d-----w- c:\program files\Common Files\InstallShield
2010-04-01 20:49 . 2010-04-01 20:49 -------- d-----w- c:\windows\system32\Macromed
2010-04-01 20:42 . 2010-04-01 20:42 -------- d-----w- c:\users\Renee\mobajl
2010-04-01 20:41 . 2010-04-01 20:42 -------- d-----w- c:\program files\AIMP2
2010-04-01 20:37 . 2010-04-01 20:37 -------- d-----w- c:\program files\QIP
2010-04-01 20:36 . 2010-04-15 20:44 -------- d-----w- c:\users\Renee\škola
2010-04-01 20:31 . 2010-04-26 18:09 -------- d-----w- c:\users\Renee\programy
2010-04-01 19:49 . 2010-04-01 18:59 -------- d-----w- c:\windows\Panther
2010-04-01 19:39 . 2010-04-08 18:13 -------- d-----w- c:\users\Renee\hry
2010-04-01 19:30 . 2010-04-26 18:10 -------- d-----w- c:\users\Renee\AppData\Local\ElevatedDiagnostics
2010-04-01 19:29 . 2010-04-01 19:29 -------- d-----w- c:\program files\ESET
2010-04-01 19:15 . 2010-02-24 08:16 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-04-01 19:14 . 2010-04-01 19:15 -------- d-----w- c:\users\Renee\AppData\Local\Google
2010-04-01 19:14 . 2010-04-01 19:14 -------- d-----w- c:\users\Renee\AppData\Local\Deployment
2010-04-01 19:11 . 2010-04-02 09:23 62952 ----a-w- c:\users\Renee\AppData\Local\GDIPFONTCACHEV1.DAT
2010-04-01 19:10 . 2010-04-01 19:10 -------- d-----w- c:\users\Renee\AppData\Roaming\ATI
2010-04-01 19:10 . 2010-04-01 19:10 -------- d-----w- c:\programdata\ATI
2010-04-01 19:10 . 2010-04-01 19:10 -------- d-----w- c:\program files\Common Files\ATI Technologies
2010-04-01 19:09 . 2010-04-25 17:48 -------- d-sh--w- c:\windows\Installer
2010-04-01 19:09 . 2010-04-01 19:09 -------- d-----w- c:\program files\ATI
2010-04-01 19:08 . 2010-04-01 19:10 -------- d-----w- c:\program files\ATI Technologies
2010-04-01 19:08 . 2010-04-01 19:08 -------- d-----w- C:\ATI
2010-04-01 19:07 . 2010-04-25 12:29 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-04-01 19:02 . 2010-04-23 15:01 -------- d-----w- c:\windows\system32\wbem\Performance
2010-04-01 18:53 . 2010-04-01 18:53 0 ----a-w- c:\windows\ativpsrm.bin

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-23 15:01 . 2009-07-14 08:14 631116 ----a-w- c:\windows\system32\perfh005.dat
2010-04-23 15:01 . 2009-07-14 08:14 123556 ----a-w- c:\windows\system32\perfc005.dat
2010-04-01 19:06 . 2010-04-01 19:06 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_09_00.Wdf
2010-04-01 18:59 . 2010-04-01 18:59 -------- d-sh--we c:\programdata\Plocha
2010-04-01 18:59 . 2010-04-01 18:59 -------- d-sh--we c:\programdata\Oblíbené položky
2010-04-01 18:59 . 2010-04-01 18:59 -------- d-sh--we c:\programdata\Šablony
2010-04-01 18:59 . 2010-04-01 18:59 -------- d-sh--we c:\programdata\Nabídka Start
2010-04-01 18:59 . 2010-04-01 18:59 -------- d-sh--we c:\programdata\Dokumenty
2010-04-01 18:59 . 2010-04-01 18:59 -------- d-sh--we c:\programdata\Data aplikací
2010-03-03 04:22 . 2010-03-03 04:22 5340160 ----a-w- c:\windows\system32\drivers\atipmdag.sys
2010-03-03 04:22 . 2010-03-03 04:22 5340160 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2010-03-03 04:16 . 2010-03-03 04:16 143360 ----a-w- c:\windows\system32\atiapfxx.exe
2010-03-03 04:16 . 2010-03-03 04:16 446464 ----a-w- c:\windows\system32\aticfx32.dll
2010-03-03 04:13 . 2010-03-03 04:13 446464 ----a-w- c:\windows\system32\ATIDEMGX.dll
2010-03-03 04:12 . 2010-03-03 04:12 372736 ----a-w- c:\windows\system32\atieclxx.exe
2010-03-03 04:11 . 2010-03-03 04:11 172032 ----a-w- c:\windows\system32\atiesrxx.exe
2010-03-03 04:10 . 2010-03-03 04:10 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2010-03-03 04:10 . 2010-03-03 04:10 356352 ----a-w- c:\windows\system32\atipdlxx.dll
2010-03-03 04:09 . 2010-03-03 04:09 274432 ----a-w- c:\windows\system32\Oemdspif.dll
2010-03-03 04:09 . 2010-03-03 04:09 11776 ----a-w- c:\windows\system32\atimuixx.dll
2010-03-03 04:09 . 2010-03-03 04:09 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2010-03-03 04:06 . 2009-07-13 22:09 3131392 ----a-w- c:\windows\system32\atidxx32.dll
2010-03-03 03:46 . 2010-03-03 03:46 3703808 ----a-w- c:\windows\system32\atiumdag.dll
2010-03-03 03:45 . 2010-03-03 03:45 14226944 ----a-w- c:\windows\system32\atioglxx.dll
2010-03-03 03:24 . 2010-03-03 03:24 2993152 ----a-w- c:\windows\system32\atiumdva.dll
2010-03-03 03:23 . 2010-03-03 03:23 50176 ----a-w- c:\windows\system32\coinst.dll
2010-03-03 03:20 . 2010-03-03 03:20 53248 ----a-w- c:\windows\system32\aticalrt.dll
2010-03-03 03:20 . 2010-03-03 03:20 53248 ----a-w- c:\windows\system32\aticalcl.dll
2010-03-03 03:18 . 2010-03-03 03:18 3657728 ----a-w- c:\windows\system32\aticaldd.dll
2010-03-03 03:08 . 2010-03-03 03:08 52224 ----a-w- c:\windows\system32\atimpc32.dll
2010-03-03 03:08 . 2010-03-03 03:08 52224 ----a-w- c:\windows\system32\amdpcom32.dll
2010-03-03 03:08 . 2010-03-03 03:08 237568 ----a-w- c:\windows\system32\atiadlxx.dll
2010-03-03 03:07 . 2010-03-03 03:07 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2010-03-03 03:07 . 2010-03-03 03:07 15360 ----a-w- c:\windows\system32\atigktxx.dll
2010-03-03 03:07 . 2010-03-03 03:07 152064 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2010-03-03 03:06 . 2010-03-03 03:06 27648 ----a-w- c:\windows\system32\atiuxpag.dll
2010-03-03 03:06 . 2010-03-03 03:06 20480 ----a-w- c:\windows\system32\atiu9pag.dll
2010-03-03 03:05 . 2010-03-03 03:05 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2010-02-26 04:41 . 2010-02-26 04:41 96896 ----a-w- c:\windows\system32\drivers\epfwwfpr.sys
2010-02-26 04:41 . 2010-02-26 04:41 114984 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2010-02-26 04:39 . 2010-02-26 04:39 133512 ----a-w- c:\windows\system32\drivers\eamonm.sys
2010-02-25 19:55 . 2010-02-25 19:55 201875 ----a-w- c:\windows\system32\atiicdxx.dat
2010-02-23 16:15 . 2010-02-23 16:15 1105 ----a-w- c:\windows\system32\atipblag.dat
2010-02-23 07:56 . 2010-04-02 07:45 977920 ----a-w- c:\windows\system32\wininet.dll
2010-02-02 07:45 . 2010-04-02 07:44 2048 ----a-w- c:\windows\system32\tzres.dll
2010-01-28 14:33 . 2010-01-28 14:33 100352 ----a-w- c:\windows\system32\drivers\AtiHdmi.sys
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"QIP2005"="c:\program files\QIP\qip.exe" [2009-08-13 3276288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-02-26 2140880]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKLM\~\startupfolder\C:^Users^Renee^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
path=c:\users\Renee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
backup=c:\windows\pss\OpenOffice.org 3.2.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2010-04-01 09:16 357696 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2010-04-01 19:14 136176 ----atw- c:\users\Renee\AppData\Local\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan]
2010-04-18 18:11 2553264 ----a-w- c:\program files\Internet Download Manager\IDMan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2006-11-17 03:42 577536 ----a-w- c:\windows\soundman.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2010-03-02 20:23 98304 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-04-01 691696]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-02-26 114984]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-03-03 172032]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-02-26 133512]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-02-26 810120]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-02-26 96896]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [2010-03-03 5340160]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-03-03 152064]

.
Obsah adresáře 'Naplánované úlohy'

2010-04-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3066638169-474057053-1295839724-1001Core.job
- c:\users\Renee\AppData\Local\Google\Update\GoogleUpdate.exe [2010-04-01 19:14]

2010-04-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3066638169-474057053-1295839724-1001UA.job
- c:\users\Renee\AppData\Local\Google\Update\GoogleUpdate.exe [2010-04-01 19:14]
.
.
------- Doplňkový sken -------
.
IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
LSP: c:\windows\system32\idmmbc.dll
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2010-04-26 20:25:32
ComboFix-quarantined-files.txt 2010-04-26 18:25

Před spuštěním: Volných bajtů: 45 914 619 904
Po spuštění: Volných bajtů: 45 835 694 080

- - End Of File - - 13601AFBF84D282D2D93DF69471A5199

[jaro3]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

File::
c:\windows\ativpsrm.bin

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"=-
"ConsentPromptBehaviorUser"=-
"EnableLUA"=-
"EnableUIADesktopToggle"=-
"PromptOnSecureDesktop"=-

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

[Renee]

ComboFix:

ComboFix 10-04-26.02 - Renee 26.04.2010 21:57:54.2.1 - x86
Microsoft Windows 7 Enterprise 6.1.7600.0.1250.420.1029.18.2048.1447 [GMT 2:00]
Spuštěný z: c:\users\Renee\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Renee\Desktop\CFScript.txt
* Rezidentní štít AV je zapnutý


FILE ::
"c:\windows\ativpsrm.bin"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\ativpsrm.bin

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-03-26 do 2010-04-26 )))))))))))))))))))))))))))))))
.

2010-04-26 20:04 . 2010-04-26 20:04 -------- d-----w- c:\users\Renee\AppData\Local\temp
2010-04-26 20:04 . 2010-04-26 20:04 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-04-26 20:04 . 2010-04-26 20:04 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-04-26 19:57 . 2010-04-26 19:57 -------- d-----w- c:\users\Renee\AppData\Local\ESET
2010-04-26 16:26 . 2010-04-26 17:54 -------- d-----w- C:\rsit
2010-04-26 14:03 . 2010-04-26 14:03 -------- d-----w- c:\users\Renee\AppData\Roaming\Malwarebytes
2010-04-26 14:03 . 2010-03-29 13:24 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-26 14:03 . 2010-04-26 14:03 -------- d-----w- c:\programdata\Malwarebytes
2010-04-26 14:03 . 2010-03-29 13:24 20824 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-04-26 14:03 . 2010-04-26 14:03 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-04-25 17:41 . 2010-04-25 17:41 -------- d-----w- c:\program files\AMD
2010-04-25 17:40 . 2010-04-25 17:40 -------- d-----w- c:\users\Renee\AppData\Local\Downloaded Installations
2010-04-25 16:38 . 2010-04-25 16:38 388096 ----a-r- c:\users\Renee\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-04-25 16:38 . 2010-04-26 17:54 -------- d-----w- c:\program files\Trend Micro
2010-04-25 16:20 . 2010-04-25 16:24 -------- d-----w- c:\program files\RegCleaner
2010-04-25 16:09 . 2010-04-25 16:09 -------- d-----w- c:\program files\CCleaner
2010-04-25 12:37 . 2010-04-25 12:37 10134 ----a-r- c:\users\Renee\AppData\Roaming\Microsoft\Installer\{9903001D-2728-9D9B-3D8B-F593A502A972}\ARPPRODUCTICON.exe
2010-04-25 12:10 . 2009-02-17 16:22 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-04-25 12:10 . 2009-02-17 16:22 30976 ----a-w- c:\windows\system32\drivers\ATKDispLowFilter.sys
2010-04-25 12:10 . 2009-02-17 16:22 15232 ----a-w- c:\windows\system32\drivers\asusgsb.sys
2010-04-22 19:05 . 2010-04-22 19:05 -------- d-----w- c:\windows\system32\URTTEMP
2010-04-22 18:33 . 2010-04-22 18:33 -------- d-----w- c:\program files\Razor
2010-04-19 12:48 . 2010-04-19 12:48 2427248 ----a-w- c:\windows\system32\pbsvc_heroes.exe
2010-04-18 18:01 . 2010-04-18 18:01 116144 ----a-w- c:\users\Renee\AppData\Roaming\IDM\idmmzcc2\components\idmmzcc.dll
2010-04-18 18:00 . 2010-04-18 18:10 -------- d-----w- c:\users\Renee\AppData\Roaming\DMCache
2010-04-18 18:00 . 2010-04-18 18:08 -------- d-----w- c:\users\Renee\AppData\Roaming\IDM
2010-04-18 18:00 . 2010-04-18 18:11 -------- d-----w- c:\program files\Internet Download Manager
2010-04-15 15:55 . 2010-04-15 15:55 -------- d-----w- c:\program files\Sony Ericsson
2010-04-14 13:39 . 2010-02-27 07:32 221696 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-04-14 13:39 . 2010-02-27 07:32 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-04-14 13:39 . 2010-02-27 07:32 95744 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2010-04-14 13:39 . 2010-03-08 21:33 427520 ----a-w- c:\windows\system32\vbscript.dll
2010-04-14 13:39 . 2010-02-27 12:07 3899280 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-04-14 13:39 . 2010-02-27 12:07 3954568 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-04-14 13:38 . 2010-01-09 06:52 132608 ----a-w- c:\windows\system32\cabview.dll
2010-04-14 13:38 . 2009-12-29 06:55 172032 ----a-w- c:\windows\system32\wintrust.dll
2010-04-08 19:36 . 2009-06-22 16:58 89600 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\HPZPPLHN.DLL
2010-04-08 18:13 . 2010-04-08 18:48 -------- d-----w- c:\programdata\TrackMania
2010-04-04 08:44 . 2010-04-23 12:48 138184 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-04-04 08:44 . 2010-04-23 12:47 215016 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-04-04 08:44 . 2010-04-04 08:44 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-04-03 12:05 . 2010-04-03 12:05 -------- d-----w- c:\users\Renee\AppData\Roaming\GRETECH
2010-04-03 12:05 . 2010-04-03 12:05 -------- d-----w- c:\program files\GRETECH
2010-04-02 21:30 . 2010-04-02 21:30 -------- d-----w- c:\users\Renee\AppData\Local\PunkBuster
2010-04-02 21:21 . 2010-04-19 12:49 138056 ----a-w- c:\users\Renee\AppData\Roaming\PnkBstrK.sys
2010-04-02 21:05 . 2010-04-22 19:45 -------- d-----w- c:\program files\EA Games
2010-04-02 20:35 . 2010-04-02 20:35 -------- d-----w- c:\users\Renee\.thumbnails
2010-04-02 20:35 . 2010-04-15 19:38 -------- d-----w- c:\users\Renee\AppData\Roaming\gtk-2.0
2010-04-02 20:33 . 2010-04-15 19:42 -------- d-----w- c:\users\Renee\.gimp-2.6
2010-04-02 20:31 . 2010-04-02 20:31 -------- d-----w- c:\program files\GIMP-2.0
2010-04-02 18:06 . 2010-04-02 18:06 -------- d-----w- c:\program files\SQUARE ENIX - Eidos Interactive
2010-04-02 16:22 . 2000-07-14 22:00 101888 ----a-w- c:\windows\system32\VB6STKIT.DLL
2010-04-02 16:22 . 2010-04-02 16:24 -------- d-----w- c:\program files\FootballArena
2010-04-02 16:01 . 2010-04-26 18:50 1 ----a-w- c:\users\Renee\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-04-02 16:01 . 2010-04-02 16:01 -------- d-----w- c:\users\Renee\AppData\Roaming\OpenOffice.org
2010-04-02 10:43 . 2010-04-17 15:57 -------- d-----w- c:\users\Renee\AppData\Roaming\Hamachi
2010-04-02 10:43 . 2010-04-02 10:43 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2010-04-02 10:43 . 2010-04-02 10:43 -------- d-----w- c:\program files\Hamachi
2010-04-02 09:32 . 2010-04-02 09:32 -------- d-----w- c:\users\Renee\AppData\Roaming\TuneUp Software
2010-04-02 09:32 . 2010-04-02 09:32 -------- d-----w- c:\programdata\TuneUp Software
2010-04-02 09:32 . 2010-04-02 09:32 -------- d-sh--w- c:\programdata\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-04-02 09:27 . 2010-04-08 18:13 -------- d-----w- c:\program files\TmNationsForever
2010-04-02 09:14 . 2010-04-02 09:14 -------- d-----w- c:\program files\OpenOffice.org 3
2010-04-02 07:50 . 2009-09-10 05:52 257024 ----a-w- c:\windows\system32\msv1_0.dll
2010-04-02 07:47 . 2010-02-11 07:10 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-04-02 07:44 . 2009-10-19 14:10 70656 ----a-w- c:\windows\system32\fontsub.dll
2010-04-01 23:47 . 2010-04-01 23:47 29410816 ----a-w- c:\programdata\Microsoft\Windows Defender\LocalCopy\{DE8A95BE-8F10-D4E0-8D39-041606B67235}-Borderlands.exe
2010-04-01 23:19 . 2010-04-01 23:19 -------- d-----w- c:\windows\system32\AGEIA
2010-04-01 23:19 . 2010-04-01 23:19 -------- d-----w- c:\program files\AGEIA Technologies
2010-04-01 23:19 . 2010-04-01 23:19 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-04-01 23:18 . 2010-04-02 16:48 -------- d-----w- C:\Renee
2010-04-01 23:06 . 2010-04-01 23:06 -------- d-----w- c:\program files\2K Games
2010-04-01 23:05 . 2010-04-01 23:18 -------- d-----w- C:\BDS
2010-04-01 23:04 . 2010-04-07 20:27 -------- d-----w- c:\users\Renee\AppData\Local\Diagnostics
2010-04-01 22:48 . 2010-04-01 22:48 60416 ----a-w- c:\windows\ALCFDRTM.EXE
2010-04-01 22:41 . 2010-04-01 22:41 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-04-01 22:39 . 2010-04-01 22:41 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-04-01 22:38 . 2010-04-01 23:05 -------- d-----w- c:\users\Renee\AppData\Roaming\DAEMON Tools Lite
2010-04-01 22:38 . 2010-04-01 22:38 -------- d-----w- c:\programdata\DAEMON Tools Lite
2010-04-01 21:43 . 2010-04-25 17:55 -------- d-----w- c:\users\Renee\AppData\Roaming\AIMP
2010-04-01 21:42 . 2010-04-15 16:02 -------- d-----r- c:\users\Renee\Obrázky
2010-04-01 21:42 . 2010-04-26 12:47 -------- d-----r- c:\users\Renee\Filmy
2010-04-01 21:42 . 2010-04-02 16:37 -------- d-----r- c:\users\Renee\HUDBA
2010-04-01 21:14 . 2006-12-29 12:48 4026112 ----a-r- c:\windows\system32\drivers\alcxwdm.sys
2010-04-01 21:14 . 2006-10-18 00:53 147456 ----a-w- c:\windows\system32\RtlCPAPI.dll
2010-04-01 21:13 . 2006-11-17 03:42 577536 ----a-w- c:\windows\soundman.exe
2010-04-01 21:13 . 2006-08-01 13:02 49152 ----a-w- c:\windows\system32\ChCfg.exe
2010-04-01 21:13 . 2006-12-08 13:20 10528768 ----a-w- c:\windows\system32\RTLCPL.exe
2010-04-01 21:03 . 2010-04-01 21:13 -------- d-----w- c:\program files\Realtek AC97
2010-04-01 21:03 . 2006-07-31 09:19 315392 ----a-w- c:\windows\alcupd.exe
2010-04-01 21:03 . 2006-07-31 09:27 217088 ----a-w- c:\windows\alcrmv.exe
2010-04-01 21:03 . 2010-04-25 12:27 -------- d-----w- c:\program files\Common Files\InstallShield
2010-04-01 20:49 . 2010-04-01 20:49 -------- d-----w- c:\windows\system32\Macromed
2010-04-01 20:42 . 2010-04-01 20:42 -------- d-----w- c:\users\Renee\mobajl
2010-04-01 20:41 . 2010-04-01 20:42 -------- d-----w- c:\program files\AIMP2
2010-04-01 20:37 . 2010-04-01 20:37 -------- d-----w- c:\program files\QIP
2010-04-01 20:36 . 2010-04-15 20:44 -------- d-----w- c:\users\Renee\škola
2010-04-01 20:31 . 2010-04-26 18:09 -------- d-----w- c:\users\Renee\programy
2010-04-01 19:49 . 2010-04-01 18:59 -------- d-----w- c:\windows\Panther
2010-04-01 19:39 . 2010-04-08 18:13 -------- d-----w- c:\users\Renee\hry
2010-04-01 19:30 . 2010-04-26 18:28 -------- d-----w- c:\users\Renee\AppData\Local\ElevatedDiagnostics
2010-04-01 19:29 . 2010-04-01 19:29 -------- d-----w- c:\program files\ESET
2010-04-01 19:15 . 2010-02-24 08:16 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-04-01 19:14 . 2010-04-01 19:15 -------- d-----w- c:\users\Renee\AppData\Local\Google
2010-04-01 19:14 . 2010-04-01 19:14 -------- d-----w- c:\users\Renee\AppData\Local\Deployment
2010-04-01 19:11 . 2010-04-02 09:23 62952 ----a-w- c:\users\Renee\AppData\Local\GDIPFONTCACHEV1.DAT
2010-04-01 19:10 . 2010-04-01 19:10 -------- d-----w- c:\users\Renee\AppData\Roaming\ATI
2010-04-01 19:10 . 2010-04-01 19:10 -------- d-----w- c:\programdata\ATI
2010-04-01 19:10 . 2010-04-01 19:10 -------- d-----w- c:\program files\Common Files\ATI Technologies
2010-04-01 19:09 . 2010-04-25 17:48 -------- d-sh--w- c:\windows\Installer
2010-04-01 19:09 . 2010-04-01 19:09 -------- d-----w- c:\program files\ATI
2010-04-01 19:08 . 2010-04-01 19:10 -------- d-----w- c:\program files\ATI Technologies
2010-04-01 19:08 . 2010-04-01 19:08 -------- d-----w- C:\ATI
2010-04-01 19:07 . 2010-04-25 12:29 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-04-01 19:02 . 2010-04-23 15:01 -------- d-----w- c:\windows\system32\wbem\Performance

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-23 15:01 . 2009-07-14 08:14 631116 ----a-w- c:\windows\system32\perfh005.dat
2010-04-23 15:01 . 2009-07-14 08:14 123556 ----a-w- c:\windows\system32\perfc005.dat
2010-04-01 19:06 . 2010-04-01 19:06 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_09_00.Wdf
2010-04-01 18:59 . 2010-04-01 18:59 -------- d-sh--we c:\programdata\Plocha
2010-04-01 18:59 . 2010-04-01 18:59 -------- d-sh--we c:\programdata\Oblíbené položky
2010-04-01 18:59 . 2010-04-01 18:59 -------- d-sh--we c:\programdata\Šablony
2010-04-01 18:59 . 2010-04-01 18:59 -------- d-sh--we c:\programdata\Nabídka Start
2010-04-01 18:59 . 2010-04-01 18:59 -------- d-sh--we c:\programdata\Dokumenty
2010-04-01 18:59 . 2010-04-01 18:59 -------- d-sh--we c:\programdata\Data aplikací
2010-03-03 04:22 . 2010-03-03 04:22 5340160 ----a-w- c:\windows\system32\drivers\atipmdag.sys
2010-03-03 04:22 . 2010-03-03 04:22 5340160 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2010-03-03 04:16 . 2010-03-03 04:16 143360 ----a-w- c:\windows\system32\atiapfxx.exe
2010-03-03 04:16 . 2010-03-03 04:16 446464 ----a-w- c:\windows\system32\aticfx32.dll
2010-03-03 04:13 . 2010-03-03 04:13 446464 ----a-w- c:\windows\system32\ATIDEMGX.dll
2010-03-03 04:12 . 2010-03-03 04:12 372736 ----a-w- c:\windows\system32\atieclxx.exe
2010-03-03 04:11 . 2010-03-03 04:11 172032 ----a-w- c:\windows\system32\atiesrxx.exe
2010-03-03 04:10 . 2010-03-03 04:10 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2010-03-03 04:10 . 2010-03-03 04:10 356352 ----a-w- c:\windows\system32\atipdlxx.dll
2010-03-03 04:09 . 2010-03-03 04:09 274432 ----a-w- c:\windows\system32\Oemdspif.dll
2010-03-03 04:09 . 2010-03-03 04:09 11776 ----a-w- c:\windows\system32\atimuixx.dll
2010-03-03 04:09 . 2010-03-03 04:09 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2010-03-03 04:06 . 2009-07-13 22:09 3131392 ----a-w- c:\windows\system32\atidxx32.dll
2010-03-03 03:46 . 2010-03-03 03:46 3703808 ----a-w- c:\windows\system32\atiumdag.dll
2010-03-03 03:45 . 2010-03-03 03:45 14226944 ----a-w- c:\windows\system32\atioglxx.dll
2010-03-03 03:24 . 2010-03-03 03:24 2993152 ----a-w- c:\windows\system32\atiumdva.dll
2010-03-03 03:23 . 2010-03-03 03:23 50176 ----a-w- c:\windows\system32\coinst.dll
2010-03-03 03:20 . 2010-03-03 03:20 53248 ----a-w- c:\windows\system32\aticalrt.dll
2010-03-03 03:20 . 2010-03-03 03:20 53248 ----a-w- c:\windows\system32\aticalcl.dll
2010-03-03 03:18 . 2010-03-03 03:18 3657728 ----a-w- c:\windows\system32\aticaldd.dll
2010-03-03 03:08 . 2010-03-03 03:08 52224 ----a-w- c:\windows\system32\atimpc32.dll
2010-03-03 03:08 . 2010-03-03 03:08 52224 ----a-w- c:\windows\system32\amdpcom32.dll
2010-03-03 03:08 . 2010-03-03 03:08 237568 ----a-w- c:\windows\system32\atiadlxx.dll
2010-03-03 03:07 . 2010-03-03 03:07 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2010-03-03 03:07 . 2010-03-03 03:07 15360 ----a-w- c:\windows\system32\atigktxx.dll
2010-03-03 03:07 . 2010-03-03 03:07 152064 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2010-03-03 03:06 . 2010-03-03 03:06 27648 ----a-w- c:\windows\system32\atiuxpag.dll
2010-03-03 03:06 . 2010-03-03 03:06 20480 ----a-w- c:\windows\system32\atiu9pag.dll
2010-03-03 03:05 . 2010-03-03 03:05 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2010-02-26 04:41 . 2010-02-26 04:41 96896 ----a-w- c:\windows\system32\drivers\epfwwfpr.sys
2010-02-26 04:41 . 2010-02-26 04:41 114984 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2010-02-26 04:39 . 2010-02-26 04:39 133512 ----a-w- c:\windows\system32\drivers\eamonm.sys
2010-02-25 19:55 . 2010-02-25 19:55 201875 ----a-w- c:\windows\system32\atiicdxx.dat
2010-02-23 16:15 . 2010-02-23 16:15 1105 ----a-w- c:\windows\system32\atipblag.dat
2010-02-23 07:56 . 2010-04-02 07:45 977920 ----a-w- c:\windows\system32\wininet.dll
2010-02-02 07:45 . 2010-04-02 07:44 2048 ----a-w- c:\windows\system32\tzres.dll
2010-01-28 14:33 . 2010-01-28 14:33 100352 ----a-w- c:\windows\system32\drivers\AtiHdmi.sys
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

((((((((((((((((((((((((((((( SnapShot@2010-04-26_18.23.49 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-04-01 23:04 . 2010-04-26 18:32 19686 c:\windows\System32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 04:55 . 2010-04-26 19:58 36954 c:\windows\System32\wdi\BootPerformanceDiagnostics_SystemData.bin
- 2010-04-01 18:56 . 2010-04-26 12:49 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-04-01 18:56 . 2010-04-26 18:32 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-04-01 18:56 . 2010-04-26 18:32 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-04-01 18:56 . 2010-04-26 12:49 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:41 . 2010-04-26 12:49 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:41 . 2010-04-26 18:32 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-04-01 21:42 . 2010-04-26 19:54 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-04-01 21:42 . 2010-04-26 18:15 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-04-01 21:42 . 2010-04-26 19:54 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-04-01 21:42 . 2010-04-26 18:15 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2010-04-01 21:42 . 2010-04-26 19:54 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-04-01 21:42 . 2010-04-26 18:15 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-04-01 21:42 . 2010-04-26 18:15 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-04-01 21:42 . 2010-04-26 19:54 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-04-02 09:09 . 2010-04-26 18:16 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\Temporary Internet Files\Content.IE5\index.dat
+ 2010-04-02 09:09 . 2010-04-26 20:04 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\Temporary Internet Files\Content.IE5\index.dat
- 2010-04-02 09:09 . 2010-04-26 18:16 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\History\History.IE5\index.dat
+ 2010-04-02 09:09 . 2010-04-26 20:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\History\History.IE5\index.dat
+ 2010-04-02 09:09 . 2010-04-26 20:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\Cookies\index.dat
- 2010-04-02 09:09 . 2010-04-26 18:16 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\Cookies\index.dat
+ 2010-04-01 21:42 . 2010-04-26 20:04 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-04-01 21:42 . 2010-04-26 18:16 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-04-01 21:42 . 2010-04-26 18:15 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-04-01 21:42 . 2010-04-26 19:54 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-04-01 23:59 . 2010-04-26 19:58 4974 c:\windows\System32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3066638169-474057053-1295839724-1001_UserData.bin
+ 2010-04-26 19:52 . 2010-04-26 19:52 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2010-04-26 18:13 . 2010-04-26 18:13 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2010-04-26 18:13 . 2010-04-26 18:13 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2010-04-26 19:52 . 2010-04-26 19:52 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-07-14 02:03 . 2010-04-26 12:59 6815744 c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT
+ 2009-07-14 02:03 . 2010-04-26 18:58 6815744 c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"QIP2005"="c:\program files\QIP\qip.exe" [2009-08-13 3276288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-02-26 2140880]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKLM\~\startupfolder\C:^Users^Renee^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
path=c:\users\Renee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
backup=c:\windows\pss\OpenOffice.org 3.2.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2010-04-01 09:16 357696 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2010-04-01 19:14 136176 ----atw- c:\users\Renee\AppData\Local\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan]
2010-04-18 18:11 2553264 ----a-w- c:\program files\Internet Download Manager\IDMan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2006-11-17 03:42 577536 ----a-w- c:\windows\soundman.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2010-03-02 20:23 98304 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-04-01 691696]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-02-26 114984]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-03-03 172032]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-02-26 133512]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-02-26 810120]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-02-26 96896]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [2010-03-03 5340160]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-03-03 152064]

.
Obsah adresáře 'Naplánované úlohy'

2010-04-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3066638169-474057053-1295839724-1001Core.job
- c:\users\Renee\AppData\Local\Google\Update\GoogleUpdate.exe [2010-04-01 19:14]

2010-04-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3066638169-474057053-1295839724-1001UA.job
- c:\users\Renee\AppData\Local\Google\Update\GoogleUpdate.exe [2010-04-01 19:14]
.
.
------- Doplňkový sken -------
.
IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
LSP: c:\windows\system32\idmmbc.dll
.
.
Celkový čas: 2010-04-26 22:06:35
ComboFix-quarantined-files.txt 2010-04-26 20:06
ComboFix2.txt 2010-04-26 18:25

Před spuštěním: Volných bajtů: 45 644 541 952
Po spuštění: Volných bajtů: 45 589 467 136

- - End Of File - - 706D426EAA670A3225DD5BEABF2E26B8



HJT:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:13:50, on 26.4.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\explorer.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renee\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [QIP2005] C:\Program Files\QIP\qip.exe
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

--
End of file - 2747 bytes

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

vyčisti systém CCleanerem

a použij i T-Cleaner
smaže vše po Combu,MWAVu atd.-stáhneš>spustíš

Stáhni si OTL
na plochu. Ujisti se , že máš zavřena všechna ostatní okna a poklepej na ikonu OTL.Nahoře v okně pod Výstup klikni na minimální výstup.Pod Běžné registry změň na Vše. Zatrhni Kontrola na havěť “LOP“ a Kontrola na havěť “ Purity“ . Klikni na Prohledat. Všechny ostatní nastavení ponech jak jsou. Sken může trvat dlouho, až skončí otevřou se dva logy:
OTL.Txt
Extras.Txt
Jsou uloženy ve stejném místě jako OTL. Oba logy sem prosím zkopíruj.