Prosím o kontrolu logu - mám zavirováno, spěchá Vyřešeno

[M4RTY]

Čau, jsem tu celkem často, ale mám tam pořád viry . To je ta mládež, pořád chodí tam kam nemá
//Pocítil jsem to na spomalení netu
//Zjistil jsem, že Backdoor-em může hacker ovládat moje pc
Virustotal: Backdoor.bot

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:15:20, on 27.1.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\Martin\Desktop\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [RGSC] C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O17 - HKLM\System\CCS\Services\Tcpip\..\{26A0AE98-9276-4FBB-AA80-3214767AE065}: NameServer = 10.10.10.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{26A0AE98-9276-4FBB-AA80-3214767AE065}: NameServer = 10.10.10.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{26A0AE98-9276-4FBB-AA80-3214767AE065}: NameServer = 10.10.10.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\System32\guard32.dll C:\Windows\system32\guard32.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 4680 bytes


Malwarebytes' Anti-Malware 1.50.1.1100
http://www.malwarebytes.org

Verze databáze: 5617

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

27.1.2011 15:14:17
mbam-log-2011-01-27 (15-14-15).txt

Typ kontroly: Rychlý test
Testované objekty: 223115
Uplynulý čas: 6 minut, 12 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\$RECYCLE.BIN\s-1-5-21-2389715676-1705300900-3093446007-1000\$RHGYY8Y.exe (Backdoor.Bot) -> No action taken.
c:\Windows\temp\NOD1.tmp (Spyware.OnlineGames) -> No action taken.

[Reklama]

[memphisto]

- Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

[M4RTY]

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 5617

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

27.1.2011 15:51:13
mbam-log-2011-01-27 (15-51-13).txt

Typ kontroly: Rychlý test
Testované objekty: 223381
Uplynulý čas: 5 minut, 51 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\$RECYCLE.BIN\s-1-5-21-2389715676-1705300900-3093446007-1000\$RHGYY8Y.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\Windows\temp\NOD1.tmp (Spyware.OnlineGames) -> Quarantined and deleted successfully.

Jdu na ComboFix.

[M4RTY]

ComboFix 11-01-26.02 - Martin 27.01.2011 15:58:20.5.3 - x86
Microsoft Windows 7 Professional 6.1.7600.0.1250.420.1029.18.2047.1269 [GMT 1:00]
Spuštěný z: c:\users\Martin\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: COMODO Firewall *Disabled* {5F676F4C-DD6D-A47C-12D6-C449366C71EE}
SP: COMODO Defense+ *Disabled/Updated* {DC3D0F8D-B138-AAAA-0339-560EB3387C28}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-12-27 do 2011-01-27 )))))))))))))))))))))))))))))))
.

2011-01-27 15:08 . 2011-01-27 15:08 -------- d-----w- c:\users\Public\AppData\Local\temp
2011-01-27 15:08 . 2011-01-27 15:08 -------- d-----w- c:\users\Ostatní\AppData\Local\temp
2011-01-27 15:08 . 2011-01-27 15:08 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-27 13:30 . 2011-01-27 13:30 -------- d-----w- c:\users\Martin\AppData\Local\Opera
2011-01-27 13:29 . 2011-01-27 13:30 -------- d-----w- c:\program files\Opera
2011-01-25 15:14 . 2011-01-25 15:14 -------- d-sh--w- c:\programdata\SecuROM
2011-01-25 15:08 . 2011-01-25 15:10 -------- d-----w- c:\program files\MouseExtender
2011-01-25 06:07 . 2011-01-13 09:41 5890896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4AA0E980-E152-4715-9E97-EF8581D54C3A}\mpengine.dll
2011-01-24 13:54 . 2011-01-25 15:14 -------- d-----w- c:\users\Martin\AppData\Local\Rockstar Games
2011-01-24 13:50 . 2011-01-24 13:50 -------- d--h--r- c:\users\Martin\AppData\Roaming\SecuROM
2011-01-24 13:49 . 2011-01-24 13:49 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-01-24 13:24 . 2011-01-25 15:14 -------- d-----w- c:\program files\Rockstar Games
2011-01-21 12:08 . 2011-01-21 12:08 -------- d-----w- c:\program files\ESET
2011-01-19 14:28 . 2011-01-19 14:28 -------- d-----w- c:\users\Martin\AppData\Roaming\Publish Providers
2011-01-19 14:28 . 2011-01-19 14:30 -------- d-----w- c:\users\Martin\AppData\Roaming\Sony
2011-01-19 14:28 . 2011-01-19 14:28 -------- d-----w- c:\users\Martin\AppData\Local\Sony
2011-01-19 14:14 . 2011-01-19 14:14 -------- d-----w- c:\program files\Vstplugins
2011-01-19 14:13 . 2011-01-19 14:13 -------- d-----w- c:\programdata\Sony
2011-01-19 14:13 . 2011-01-19 14:13 -------- d-----w- c:\program files\Sony
2011-01-19 14:11 . 2011-01-19 14:11 -------- d-----w- c:\program files\Sony Setup
2011-01-19 13:43 . 2011-01-19 13:43 -------- d-----w- c:\program files\Microsoft Works
2011-01-19 13:43 . 2011-01-19 13:43 -------- d-----w- c:\windows\PCHEALTH
2011-01-19 13:43 . 2011-01-19 13:43 -------- d-----w- c:\program files\Microsoft.NET
2011-01-19 13:41 . 2011-01-19 13:41 -------- d-----w- c:\users\Martin\AppData\Local\Microsoft Help
2011-01-19 13:41 . 2011-01-19 13:45 -------- d-----w- c:\programdata\Microsoft Help
2011-01-18 15:12 . 2011-01-27 14:51 -------- d-----w- c:\users\Martin\AppData\Roaming\AIMP3
2011-01-18 15:12 . 2011-01-18 15:12 -------- d-----w- c:\program files\AIMP3
2011-01-18 13:09 . 2011-01-27 15:08 -------- d-----w- c:\users\Martin\AppData\Local\temp
2011-01-17 13:51 . 2011-01-18 17:41 -------- d-----w- c:\users\Public\CyberLink
2011-01-17 13:51 . 2011-01-17 13:51 -------- d-----w- c:\users\Martin\AppData\Roaming\CyberLink
2011-01-17 13:51 . 2011-01-17 13:57 -------- d-----w- c:\programdata\CyberLink
2011-01-17 13:51 . 2011-01-17 13:51 -------- d-----w- c:\programdata\SmartSound Software Inc
2011-01-17 13:51 . 2011-01-17 13:51 -------- d-----w- c:\programdata\eSellerate
2011-01-17 13:51 . 2011-01-17 13:51 -------- d-----w- c:\program files\SmartSound Software
2011-01-17 13:49 . 2011-01-17 13:50 -------- d-----w- c:\program files\CyberLink
2011-01-16 12:57 . 2011-01-16 12:57 -------- d-----w- c:\users\Martin\AppData\Roaming\Funambol
2011-01-16 12:42 . 2011-01-16 12:42 -------- d-----w- c:\users\Martin\AppData\Roaming\Maxthon3
2011-01-16 12:42 . 2011-01-16 12:42 -------- d-----w- c:\program files\Maxthon3
2011-01-14 13:33 . 2011-01-14 13:33 -------- d-----w- c:\program files\EA Sports
2011-01-14 12:25 . 2011-01-14 12:25 -------- d-----w- c:\users\Martin\AppData\Local\MotionDSP
2011-01-14 12:24 . 2011-01-14 12:24 -------- d-----w- c:\users\Martin\AppData\Roaming\MotionDSP
2011-01-14 12:24 . 2011-01-14 12:24 -------- d-----w- c:\program files\vReveal
2011-01-12 17:59 . 2010-10-02 18:05 -------- d-----w- c:\program files\Miranda IM
2011-01-11 18:02 . 2011-01-11 18:02 -------- d-----w- c:\program files\MSECache
2011-01-11 17:07 . 2011-01-11 17:07 -------- d-----w- c:\programdata\Codemasters
2011-01-11 17:03 . 2009-07-13 18:04 839680 ----a-w- c:\windows\system32\mkl_vml_p4.dll
2011-01-11 17:03 . 2009-07-13 18:04 532480 ----a-w- c:\windows\system32\mkl_vml_p3.dll
2011-01-11 17:03 . 2009-07-13 18:04 512000 ----a-w- c:\windows\system32\mkl_vml_def.dll
2011-01-11 17:03 . 2009-07-13 18:04 3485696 ----a-w- c:\windows\system32\mkl_p4.dll
2011-01-11 17:03 . 2009-07-13 18:04 2793472 ----a-w- c:\windows\system32\mkl_p3.dll
2011-01-11 17:03 . 2009-07-13 18:04 2174976 ----a-w- c:\windows\system32\mkl_lapack32.dll
2011-01-11 17:03 . 2009-07-13 18:04 2125824 ----a-w- c:\windows\system32\mkl_lapack64.dll
2011-01-11 17:03 . 2009-10-16 10:19 872448 ----a-w- c:\windows\system32\rapture3d_oal.dll
2011-01-11 17:03 . 2009-07-13 18:04 2441216 ----a-w- c:\windows\system32\mkl_def.dll
2011-01-11 17:03 . 2009-07-13 18:04 184320 ----a-w- c:\windows\system32\libguide40.dll
2011-01-11 17:03 . 2011-01-11 17:03 -------- d-----w- c:\program files\BRS
2011-01-11 17:02 . 2011-01-11 17:02 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2011-01-11 17:02 . 2011-01-11 17:02 -------- d-----w- c:\windows\system32\xlive
2011-01-11 17:02 . 2011-01-11 17:02 445016 ----a-w- c:\windows\system32\wrap_oal.dll
2011-01-11 17:02 . 2011-01-11 17:02 109144 ----a-w- c:\windows\system32\OpenAL32.dll
2011-01-11 17:02 . 2011-01-11 17:02 -------- d-----w- c:\program files\OpenAL
2011-01-11 16:53 . 2011-01-11 16:53 -------- d-----w- c:\program files\Codemasters
2011-01-10 14:59 . 2011-01-10 14:59 -------- d-----w- c:\programdata\FLEXnet
2011-01-10 14:57 . 2011-01-10 14:57 -------- d-----w- c:\program files\Bonjour
2011-01-10 14:51 . 2011-01-10 14:51 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2011-01-09 16:44 . 2011-01-09 16:58 137464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-01-09 16:44 . 2011-01-09 16:58 214520 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-01-09 16:43 . 2011-01-09 16:58 214520 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-01-09 16:43 . 2011-01-09 16:43 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-01-09 16:43 . 2011-01-09 16:43 -------- d-----w- c:\users\Martin\AppData\Local\PunkBuster
2011-01-08 16:30 . 2011-01-08 16:30 -------- d-----w- c:\users\Ostatní\AppData\Roaming\Real
2011-01-08 15:00 . 2011-01-09 13:55 -------- d-----w- c:\program files\Real
2011-01-07 21:28 . 2011-01-07 21:28 -------- d-----w- c:\program files\GamePark
2011-01-07 19:38 . 2011-01-07 19:51 -------- d-----w- c:\users\Martin\AppData\Roaming\TuneUp Software
2011-01-07 19:30 . 2011-01-07 19:39 -------- d-----w- c:\programdata\TuneUp Software
2011-01-07 19:30 . 2011-01-07 19:30 -------- d-sh--w- c:\programdata\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-01-07 18:19 . 2011-01-07 18:19 -------- d-----w- c:\program files\Common Files\Adobe AIR
2011-01-07 13:02 . 2011-01-07 13:02 -------- d-----w- c:\users\Martin\AppData\Local\Zoner
2011-01-06 17:20 . 2011-01-12 18:00 -------- d-----w- c:\program files\QIP Infium bz™Pack
2011-01-05 20:37 . 2011-01-22 12:33 -------- d-----w- c:\users\Martin\AppData\Roaming\skypePM
2011-01-05 20:36 . 2011-01-05 20:36 -------- d-----w- c:\program files\Common Files\Skype
2011-01-05 20:36 . 2011-01-08 19:45 -------- d-----r- c:\program files\Skype
2011-01-05 20:35 . 2011-01-22 13:16 -------- d-----w- c:\users\Martin\AppData\Roaming\Skype
2011-01-05 20:35 . 2011-01-05 20:35 -------- d-----w- c:\programdata\Skype
2011-01-05 18:56 . 2011-01-05 18:57 -------- d-----w- c:\users\Martin\AppData\Local\Google
2011-01-05 13:55 . 2010-09-01 22:37 -------- d-----w- c:\program files\QIP Infium PafoPack 9040
2011-01-04 15:43 . 2011-01-04 15:44 -------- d-----w- c:\program files\AGEIA Technologies
2011-01-04 15:43 . 2011-01-04 15:43 -------- d-----w- c:\windows\system32\AGEIA
2011-01-04 15:43 . 2011-01-04 15:43 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2011-01-04 15:32 . 2011-01-04 15:43 -------- d-----w- c:\program files\Common Files\BioWare
2011-01-04 15:32 . 2011-01-04 15:38 -------- d-----w- c:\program files\Mass Effect 2
2011-01-04 15:10 . 2011-01-04 15:10 -------- d-----w- c:\program files\COMODO
2011-01-04 15:09 . 2011-01-04 15:29 -------- d-----w- c:\programdata\Comodo
2011-01-03 17:56 . 2011-01-03 17:56 -------- d-----w- c:\program files\Common Files\Java
2011-01-03 17:55 . 2011-01-03 17:55 472808 ----a-w- c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
2011-01-03 17:55 . 2011-01-03 17:55 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-01-03 17:55 . 2011-01-03 17:55 -------- d-----w- c:\program files\Java
2011-01-03 17:54 . 2011-01-03 18:32 -------- d-----w- c:\program files\JDownloader
2011-01-02 12:16 . 2011-01-02 12:16 -------- d-----w- c:\users\Martin\AppData\Roaming\GameRanger
2011-01-01 19:49 . 2011-01-01 19:49 -------- d-----w- c:\users\Martin\AppData\Local\ESET
2010-12-31 18:08 . 2011-01-01 09:41 -------- d-----w- c:\program files\Common Files\Steam
2010-12-31 13:04 . 2010-12-31 13:31 -------- d-----w- c:\users\Martin\AppData\Roaming\Winter Sports 2011
2010-12-30 20:03 . 2010-12-30 20:03 -------- d-----w- c:\program files\RocketDock
2010-12-30 19:10 . 2010-12-30 19:10 -------- d-----w- c:\users\Ostatní\AppData\Local\VirtualStore
2010-12-30 18:40 . 2010-12-30 18:40 -------- d-----w- c:\program files\VS Revo Group
2010-12-30 16:27 . 2010-12-30 16:27 -------- d-----w- c:\program files\WhoCrashed
2010-12-30 15:06 . 2010-12-30 15:06 -------- d-----w- c:\program files\uTorrent
2010-12-30 15:06 . 2010-12-31 12:43 -------- d-----w- c:\users\Martin\AppData\Roaming\uTorrent
2010-12-30 13:36 . 2010-12-30 13:36 -------- d-----w- c:\users\Martin\AppData\Roaming\Ashampoo
2010-12-30 13:36 . 2010-12-30 13:36 -------- d-----w- c:\users\Martin\AppData\Local\ashampoo
2010-12-30 13:36 . 2010-12-30 13:36 -------- d-----w- c:\programdata\ashampoo
2010-12-30 13:36 . 2010-12-30 13:36 -------- d-----w- c:\program files\Ashampoo
2010-12-30 10:23 . 2010-06-02 03:55 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2010-12-30 10:23 . 2010-06-02 03:55 527192 ----a-w- c:\windows\system32\XAudio2_7.dll
2010-12-30 10:23 . 2010-05-26 10:41 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2010-12-30 10:23 . 2010-05-26 10:41 248672 ----a-w- c:\windows\system32\d3dx11_43.dll
2010-12-30 10:23 . 2010-05-26 10:41 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2010-12-30 10:23 . 2010-05-26 10:41 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2010-12-30 10:23 . 2010-05-26 10:41 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll
2010-12-30 10:23 . 2010-02-04 09:01 22360 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2010-12-29 00:42 . 2010-12-29 00:42 285480 ----a-w- c:\windows\system32\guard32.dll
2010-12-29 00:41 . 2011-01-18 14:33 80064 ----a-w- c:\windows\system32\drivers\inspect.sys
2010-12-29 00:41 . 2011-01-18 14:33 35768 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2010-12-29 00:41 . 2011-01-18 14:33 236600 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2010-12-29 00:41 . 2011-01-18 14:33 17256 ----a-w- c:\windows\system32\drivers\cmderd.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-23 10:02 . 2010-12-23 10:02 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-12-22 07:48 . 2010-12-22 07:48 176488 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10136.bin
2010-12-20 17:09 . 2010-12-26 18:20 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 17:08 . 2010-12-26 18:20 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\UC.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\RAR.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\PKZIP.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\PKUNZIP.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\NOCLOSE.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\LHA.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\ARJ.PIF
2010-12-02 08:25 . 2010-12-02 08:25 86016 ----a-w- c:\windows\system32\frapsvid.dll
2010-11-30 16:23 . 2010-12-22 15:22 553984 ----a-w- c:\windows\system32\RCoRes.dat
2010-11-30 16:06 . 2010-12-22 15:22 3317800 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2010-11-29 17:48 . 2010-12-22 15:22 1723536 ----a-w- c:\windows\system32\WavesGUILib.dll
2010-11-29 17:48 . 2010-12-22 15:22 1439064 ----a-w- c:\windows\system32\MaxxAudioRealtek.dll
2010-11-26 04:19 . 2010-11-26 04:19 6650368 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2010-11-26 03:02 . 2010-11-26 03:02 16702976 ----a-w- c:\windows\system32\atioglxx.dll
2010-11-26 02:58 . 2010-11-26 02:58 143360 ----a-w- c:\windows\system32\atiapfxx.exe
2010-11-26 02:58 . 2010-12-20 19:22 550400 ----a-w- c:\windows\system32\aticfx32.dll
2010-11-26 02:54 . 2010-11-26 02:54 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2010-11-26 02:54 . 2010-11-26 02:54 393216 ----a-w- c:\windows\system32\atieclxx.exe
2010-11-26 02:54 . 2010-11-26 02:54 176128 ----a-w- c:\windows\system32\atiesrxx.exe
2010-11-26 02:52 . 2010-11-26 02:52 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2010-11-26 02:52 . 2010-11-26 02:52 356352 ----a-w- c:\windows\system32\atipdlxx.dll
2010-11-26 02:52 . 2010-11-26 02:52 278528 ----a-w- c:\windows\system32\Oemdspif.dll
2010-11-26 02:52 . 2010-11-26 02:52 15872 ----a-w- c:\windows\system32\atimuixx.dll
2010-11-26 02:52 . 2010-11-26 02:52 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2010-11-26 02:49 . 2010-12-20 19:22 4066816 ----a-w- c:\windows\system32\atidxx32.dll
2010-11-26 02:30 . 2010-12-20 19:22 4122624 ----a-w- c:\windows\system32\atiumdag.dll
2010-11-26 02:30 . 2010-11-26 02:30 46080 ----a-w- c:\windows\system32\aticalrt.dll
2010-11-26 02:30 . 2010-11-26 02:30 44032 ----a-w- c:\windows\system32\aticalcl.dll
2010-11-26 02:28 . 2010-11-26 02:28 5441024 ----a-w- c:\windows\system32\aticaldd.dll
2010-11-26 02:24 . 2010-12-20 19:22 52736 ----a-w- c:\windows\system32\coinst.dll
2010-11-26 02:22 . 2010-12-20 19:22 3460096 ----a-w- c:\windows\system32\atiumdva.dll
2010-11-26 02:17 . 2010-11-26 02:17 249856 ----a-w- c:\windows\system32\atiadlxx.dll
2010-11-26 02:17 . 2010-11-26 02:17 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2010-11-26 02:16 . 2010-11-26 02:16 27136 ----a-w- c:\windows\system32\atigktxx.dll
2010-11-26 02:16 . 2010-11-26 02:16 231936 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2010-11-26 02:15 . 2010-12-20 19:22 30720 ----a-w- c:\windows\system32\atiuxpag.dll
2010-11-26 02:15 . 2010-12-20 19:22 28672 ----a-w- c:\windows\system32\atiu9pag.dll
2010-11-26 02:15 . 2010-11-26 02:15 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2010-11-26 02:09 . 2010-11-26 02:09 52736 ----a-w- c:\windows\system32\atimpc32.dll
2010-11-26 02:09 . 2010-11-26 02:09 52736 ----a-w- c:\windows\system32\amdpcom32.dll
2010-11-24 13:24 . 2010-12-22 15:22 3790440 ----a-w- c:\windows\system32\RtkAPO.dll
2010-11-24 13:24 . 2010-12-22 15:22 1976936 ----a-w- c:\windows\system32\RtkPgExt.dll
2010-11-22 10:39 . 2010-12-22 15:22 469608 ----a-w- c:\windows\system32\RtkApoApi.dll
2010-11-11 12:27 . 2010-12-22 15:22 69224 ----a-w- c:\windows\system32\RtkCoInst.dll
2010-11-08 22:57 . 2010-11-08 22:57 353592 ----a-w- c:\windows\system32\DivXControlPanelApplet.cpl
2010-11-08 06:31 . 2010-12-22 15:22 78680 ----a-w- c:\windows\system32\RTEEL32A.dll
2010-11-08 06:31 . 2010-12-22 15:22 359768 ----a-w- c:\windows\system32\RTEEP32A.dll
2010-11-08 06:31 . 2010-12-22 15:22 64856 ----a-w- c:\windows\system32\RTEEG32A.dll
2010-11-08 06:31 . 2010-12-22 15:22 295768 ----a-w- c:\windows\system32\RP3DHT32.dll
2010-11-08 06:31 . 2010-12-22 15:22 295768 ----a-w- c:\windows\system32\RP3DAA32.dll
2010-11-08 06:31 . 2010-12-22 15:22 170840 ----a-w- c:\windows\system32\RTEED32A.dll
2010-11-04 05:52 . 2010-12-21 08:55 978944 ----a-w- c:\windows\system32\wininet.dll
2010-11-04 05:48 . 2010-12-21 08:55 44544 ----a-w- c:\windows\system32\licmgr10.dll
2010-11-04 04:41 . 2010-12-21 08:55 386048 ----a-w- c:\windows\system32\html.iec
2010-11-04 04:08 . 2010-12-21 08:55 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2010-11-03 17:27 . 2010-12-22 15:22 1084008 ----a-w- c:\windows\system32\RTSndMgr.cpl
2010-11-03 17:25 . 2010-12-22 15:22 429160 ----a-w- c:\windows\system32\DTSSymmetryDLL.dll
2010-11-03 17:25 . 2010-12-22 15:22 406120 ----a-w- c:\windows\system32\DTSVoiceClarityDLL.dll
2010-11-03 17:25 . 2010-12-22 15:22 962664 ----a-w- c:\windows\system32\DTSS2HeadphoneDLL.dll
2010-11-03 17:25 . 2010-12-22 15:22 291432 ----a-w- c:\windows\system32\DTSNeoPCDLL.dll
2010-11-03 17:25 . 2010-12-22 15:22 224360 ----a-w- c:\windows\system32\DTSLimiterDLL.dll
2010-11-03 17:25 . 2010-12-22 15:22 1132648 ----a-w- c:\windows\system32\DTSS2SpeakerDLL.dll
2010-11-03 17:25 . 2010-12-22 15:22 107112 ----a-w- c:\windows\system32\DTSLFXAPO.dll
2010-11-03 17:25 . 2010-12-22 15:22 107112 ----a-w- c:\windows\system32\DTSGFXAPO.dll
2010-11-03 17:25 . 2010-12-22 15:22 106600 ----a-w- c:\windows\system32\DTSGFXAPONS.dll
2010-11-03 17:25 . 2010-12-22 15:22 901224 ----a-w- c:\windows\system32\DTSBoostDLL.dll
2010-11-03 17:25 . 2010-12-22 15:22 448616 ----a-w- c:\windows\system32\DTSBassEnhancementDLL.dll
2010-11-03 17:25 . 2010-12-22 15:22 236648 ----a-w- c:\windows\system32\DTSGainCompensatorDLL.dll
2010-11-02 08:32 . 2010-12-22 15:22 1705816 ----a-w- c:\windows\system32\R4EEP32A.dll
2010-11-02 08:32 . 2010-12-22 15:22 96600 ----a-w- c:\windows\system32\R4EEL32A.dll
2010-11-02 08:32 . 2010-12-22 15:22 61784 ----a-w- c:\windows\system32\R4EEG32A.dll
2010-11-02 08:32 . 2010-12-22 15:22 341848 ----a-w- c:\windows\system32\R4EED32A.dll
2010-11-02 08:31 . 2010-12-22 15:22 81240 ----a-w- c:\windows\system32\R4EEA32A.dll
2010-11-02 04:41 . 2010-12-21 08:55 351232 ----a-w- c:\windows\system32\wmicmiplugin.dll
2010-11-02 04:40 . 2010-12-21 08:55 496128 ----a-w- c:\windows\system32\taskschd.dll
2010-11-02 04:40 . 2010-12-21 08:55 305152 ----a-w- c:\windows\system32\taskcomp.dll
2010-11-02 04:39 . 2010-12-21 08:55 749056 ----a-w- c:\windows\system32\schedsvc.dll
2010-11-02 04:34 . 2010-12-21 08:55 192000 ----a-w- c:\windows\system32\taskeng.exe
2010-11-02 04:34 . 2010-12-21 08:55 179712 ----a-w- c:\windows\system32\schtasks.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-11-30 9914984]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-11-25 336384]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-01-18 2548040]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-11-18 2219184]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\guard32.dll c:\windows\System32\guard32.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2010-04-01 09:16 357696 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivX Download Manager]
2010-12-08 21:15 63360 ----a-w- c:\program files\DivX\DivX Plus Web Player\DDMService.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2010-12-09 19:28 1226608 ----a-w- c:\program files\DivX\DivX Update\DivXUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON SX210 Series]
2008-11-05 14:00 199680 ----a-w- c:\windows\System32\spool\drivers\w32x86\3\E_FATIFDE.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-05-14 10:44 248552 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Google Update"="c:\users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe" /c

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-12-21 1343400]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-12-23 691696]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2011-01-18 236600]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2011-01-18 35768]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-11-26 176128]
S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 140224]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-09-03 137144]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-11-18 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 96920]
S3 amdiox86;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox86.sys [2010-02-18 37944]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2010-11-26 6650368]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-11-26 231936]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]

.
Obsah adresáře 'Naplánované úlohy'

2011-01-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2389715676-1705300900-3093446007-1000Core.job
- c:\users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-05 18:56]

2011-01-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2389715676-1705300900-3093446007-1000UA.job
- c:\users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-05 18:56]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
TCP: {26A0AE98-9276-4FBB-AA80-3214767AE065} = 10.10.10.1
FF - ProfilePath - c:\users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\730ycoe2.default\
FF - prefs.js: browser.startup.homepage - www.google.cz
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: DivX Plus Web Player HTML5 &lt;video&gt;: {23fcfd51-4958-4f00-80a3-ae97e717ed8b} - c:\program files\DivX\DivX Plus Web Player\firefox\html5video
FF - Ext: DivX HiQ: {6904342A-8307-11DF-A508-4AE2DFD72085} - c:\program files\DivX\DivX Plus Web Player\firefox\wpa
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-RGSC - c:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe


.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-2389715676-1705300900-3093446007-1000\Software\SecuROM\License information*]
"datasecu"=hex:b3,d6,b8,10,4d,b0,09,ee,3f,00,0e,cf,5b,bb,f7,20,95,4f,8b,03,dc,
d7,9e,f4,f3,67,d9,9f,d3,fb,35,a0,e9,17,72,c8,50,a1,ae,a1,f6,aa,f9,c4,24,e4,\
"rkeysecu"=hex:66,e2,77,8a,0f,b4,d6,2c,27,b5,3e,f6,03,af,e0,a5
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(680)
c:\windows\System32\guard32.dll

- - - - - - - > 'lsass.exe'(608)
c:\windows\system32\guard32.dll

- - - - - - - > 'Explorer.exe'(3676)
c:\windows\system32\guard32.dll
.
Celkový čas: 2011-01-27 16:10:56
ComboFix-quarantined-files.txt 2011-01-27 15:10
ComboFix2.txt 2011-01-18 13:14

Před spuštěním: Volných bajtů: 43 430 600 704
Po spuštění: Volných bajtů: 43 209 699 328

- - End Of File - - 1AFE784616DC72E50AA94DADB382C3CF

[memphisto]

Ten log je čistý. Nic tam není. Jen zbytečnosti ...

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

File::
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2389715676-1705300900-3093446007-1000Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2389715676-1705300900-3093446007-1000UA.job


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu

[M4RTY]

ComboFix 11-01-26.02 - Martin 27.01.2011 16:27:07.6.3 - x86
Microsoft Windows 7 Professional 6.1.7600.0.1250.420.1029.18.2047.1356 [GMT 1:00]
Spuštěný z: c:\users\Martin\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Martin\Desktop\CFScript.txt
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: COMODO Firewall *Disabled* {5F676F4C-DD6D-A47C-12D6-C449366C71EE}
SP: COMODO Defense+ *Disabled/Updated* {DC3D0F8D-B138-AAAA-0339-560EB3387C28}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FILE ::
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2389715676-1705300900-3093446007-1000Core.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2389715676-1705300900-3093446007-1000UA.job"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2389715676-1705300900-3093446007-1000Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2389715676-1705300900-3093446007-1000UA.job

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-12-27 do 2011-01-27 )))))))))))))))))))))))))))))))
.

2011-01-27 15:32 . 2011-01-27 15:32 -------- d-----w- c:\users\Martin\AppData\Local\temp
2011-01-27 15:32 . 2011-01-27 15:32 -------- d-----w- c:\users\Public\AppData\Local\temp
2011-01-27 15:32 . 2011-01-27 15:32 -------- d-----w- c:\users\Ostatní\AppData\Local\temp
2011-01-27 15:32 . 2011-01-27 15:32 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-27 13:30 . 2011-01-27 13:30 -------- d-----w- c:\users\Martin\AppData\Local\Opera
2011-01-27 13:29 . 2011-01-27 13:30 -------- d-----w- c:\program files\Opera
2011-01-25 15:14 . 2011-01-25 15:14 -------- d-sh--w- c:\programdata\SecuROM
2011-01-25 15:08 . 2011-01-25 15:10 -------- d-----w- c:\program files\MouseExtender
2011-01-25 06:07 . 2011-01-13 09:41 5890896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4AA0E980-E152-4715-9E97-EF8581D54C3A}\mpengine.dll
2011-01-24 13:54 . 2011-01-25 15:14 -------- d-----w- c:\users\Martin\AppData\Local\Rockstar Games
2011-01-24 13:50 . 2011-01-24 13:50 -------- d--h--r- c:\users\Martin\AppData\Roaming\SecuROM
2011-01-24 13:49 . 2011-01-24 13:49 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-01-24 13:24 . 2011-01-25 15:14 -------- d-----w- c:\program files\Rockstar Games
2011-01-21 12:08 . 2011-01-21 12:08 -------- d-----w- c:\program files\ESET
2011-01-19 14:28 . 2011-01-19 14:28 -------- d-----w- c:\users\Martin\AppData\Roaming\Publish Providers
2011-01-19 14:28 . 2011-01-19 14:30 -------- d-----w- c:\users\Martin\AppData\Roaming\Sony
2011-01-19 14:28 . 2011-01-19 14:28 -------- d-----w- c:\users\Martin\AppData\Local\Sony
2011-01-19 14:14 . 2011-01-19 14:14 -------- d-----w- c:\program files\Vstplugins
2011-01-19 14:13 . 2011-01-19 14:13 -------- d-----w- c:\programdata\Sony
2011-01-19 14:13 . 2011-01-19 14:13 -------- d-----w- c:\program files\Sony
2011-01-19 14:11 . 2011-01-19 14:11 -------- d-----w- c:\program files\Sony Setup
2011-01-19 13:43 . 2011-01-19 13:43 -------- d-----w- c:\program files\Microsoft Works
2011-01-19 13:43 . 2011-01-19 13:43 -------- d-----w- c:\windows\PCHEALTH
2011-01-19 13:43 . 2011-01-19 13:43 -------- d-----w- c:\program files\Microsoft.NET
2011-01-19 13:41 . 2011-01-19 13:41 -------- d-----w- c:\users\Martin\AppData\Local\Microsoft Help
2011-01-19 13:41 . 2011-01-19 13:45 -------- d-----w- c:\programdata\Microsoft Help
2011-01-18 15:12 . 2011-01-27 14:51 -------- d-----w- c:\users\Martin\AppData\Roaming\AIMP3
2011-01-18 15:12 . 2011-01-18 15:12 -------- d-----w- c:\program files\AIMP3
2011-01-17 13:51 . 2011-01-18 17:41 -------- d-----w- c:\users\Public\CyberLink
2011-01-17 13:51 . 2011-01-17 13:51 -------- d-----w- c:\users\Martin\AppData\Roaming\CyberLink
2011-01-17 13:51 . 2011-01-17 13:57 -------- d-----w- c:\programdata\CyberLink
2011-01-17 13:51 . 2011-01-17 13:51 -------- d-----w- c:\programdata\SmartSound Software Inc
2011-01-17 13:51 . 2011-01-17 13:51 -------- d-----w- c:\programdata\eSellerate
2011-01-17 13:51 . 2011-01-17 13:51 -------- d-----w- c:\program files\SmartSound Software
2011-01-17 13:49 . 2011-01-17 13:50 -------- d-----w- c:\program files\CyberLink
2011-01-16 12:57 . 2011-01-16 12:57 -------- d-----w- c:\users\Martin\AppData\Roaming\Funambol
2011-01-16 12:42 . 2011-01-16 12:42 -------- d-----w- c:\users\Martin\AppData\Roaming\Maxthon3
2011-01-16 12:42 . 2011-01-16 12:42 -------- d-----w- c:\program files\Maxthon3
2011-01-14 13:33 . 2011-01-14 13:33 -------- d-----w- c:\program files\EA Sports
2011-01-14 12:25 . 2011-01-14 12:25 -------- d-----w- c:\users\Martin\AppData\Local\MotionDSP
2011-01-14 12:24 . 2011-01-14 12:24 -------- d-----w- c:\users\Martin\AppData\Roaming\MotionDSP
2011-01-14 12:24 . 2011-01-14 12:24 -------- d-----w- c:\program files\vReveal
2011-01-12 17:59 . 2010-10-02 18:05 -------- d-----w- c:\program files\Miranda IM
2011-01-11 18:02 . 2011-01-11 18:02 -------- d-----w- c:\program files\MSECache
2011-01-11 17:07 . 2011-01-11 17:07 -------- d-----w- c:\programdata\Codemasters
2011-01-11 17:03 . 2009-07-13 18:04 839680 ----a-w- c:\windows\system32\mkl_vml_p4.dll
2011-01-11 17:03 . 2009-07-13 18:04 532480 ----a-w- c:\windows\system32\mkl_vml_p3.dll
2011-01-11 17:03 . 2009-07-13 18:04 512000 ----a-w- c:\windows\system32\mkl_vml_def.dll
2011-01-11 17:03 . 2009-07-13 18:04 3485696 ----a-w- c:\windows\system32\mkl_p4.dll
2011-01-11 17:03 . 2009-07-13 18:04 2793472 ----a-w- c:\windows\system32\mkl_p3.dll
2011-01-11 17:03 . 2009-07-13 18:04 2174976 ----a-w- c:\windows\system32\mkl_lapack32.dll
2011-01-11 17:03 . 2009-07-13 18:04 2125824 ----a-w- c:\windows\system32\mkl_lapack64.dll
2011-01-11 17:03 . 2009-10-16 10:19 872448 ----a-w- c:\windows\system32\rapture3d_oal.dll
2011-01-11 17:03 . 2009-07-13 18:04 2441216 ----a-w- c:\windows\system32\mkl_def.dll
2011-01-11 17:03 . 2009-07-13 18:04 184320 ----a-w- c:\windows\system32\libguide40.dll
2011-01-11 17:03 . 2011-01-11 17:03 -------- d-----w- c:\program files\BRS
2011-01-11 17:02 . 2011-01-11 17:02 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2011-01-11 17:02 . 2011-01-11 17:02 -------- d-----w- c:\windows\system32\xlive
2011-01-11 17:02 . 2011-01-11 17:02 445016 ----a-w- c:\windows\system32\wrap_oal.dll
2011-01-11 17:02 . 2011-01-11 17:02 109144 ----a-w- c:\windows\system32\OpenAL32.dll
2011-01-11 17:02 . 2011-01-11 17:02 -------- d-----w- c:\program files\OpenAL
2011-01-11 16:53 . 2011-01-11 16:53 -------- d-----w- c:\program files\Codemasters
2011-01-10 14:59 . 2011-01-10 14:59 -------- d-----w- c:\programdata\FLEXnet
2011-01-10 14:57 . 2011-01-10 14:57 -------- d-----w- c:\program files\Bonjour
2011-01-10 14:51 . 2011-01-10 14:51 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2011-01-09 16:44 . 2011-01-09 16:58 137464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-01-09 16:44 . 2011-01-09 16:58 214520 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-01-09 16:43 . 2011-01-09 16:58 214520 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-01-09 16:43 . 2011-01-09 16:43 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-01-09 16:43 . 2011-01-09 16:43 -------- d-----w- c:\users\Martin\AppData\Local\PunkBuster
2011-01-08 16:30 . 2011-01-08 16:30 -------- d-----w- c:\users\Ostatní\AppData\Roaming\Real
2011-01-08 15:00 . 2011-01-09 13:55 -------- d-----w- c:\program files\Real
2011-01-07 21:28 . 2011-01-07 21:28 -------- d-----w- c:\program files\GamePark
2011-01-07 19:38 . 2011-01-07 19:51 -------- d-----w- c:\users\Martin\AppData\Roaming\TuneUp Software
2011-01-07 19:30 . 2011-01-07 19:39 -------- d-----w- c:\programdata\TuneUp Software
2011-01-07 19:30 . 2011-01-07 19:30 -------- d-sh--w- c:\programdata\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-01-07 18:19 . 2011-01-07 18:19 -------- d-----w- c:\program files\Common Files\Adobe AIR
2011-01-07 13:02 . 2011-01-07 13:02 -------- d-----w- c:\users\Martin\AppData\Local\Zoner
2011-01-06 17:20 . 2011-01-12 18:00 -------- d-----w- c:\program files\QIP Infium bz™Pack
2011-01-05 20:37 . 2011-01-22 12:33 -------- d-----w- c:\users\Martin\AppData\Roaming\skypePM
2011-01-05 20:36 . 2011-01-05 20:36 -------- d-----w- c:\program files\Common Files\Skype
2011-01-05 20:36 . 2011-01-08 19:45 -------- d-----r- c:\program files\Skype
2011-01-05 20:35 . 2011-01-22 13:16 -------- d-----w- c:\users\Martin\AppData\Roaming\Skype
2011-01-05 20:35 . 2011-01-05 20:35 -------- d-----w- c:\programdata\Skype
2011-01-05 18:56 . 2011-01-05 18:57 -------- d-----w- c:\users\Martin\AppData\Local\Google
2011-01-05 13:55 . 2010-09-01 22:37 -------- d-----w- c:\program files\QIP Infium PafoPack 9040
2011-01-04 15:43 . 2011-01-04 15:44 -------- d-----w- c:\program files\AGEIA Technologies
2011-01-04 15:43 . 2011-01-04 15:43 -------- d-----w- c:\windows\system32\AGEIA
2011-01-04 15:43 . 2011-01-04 15:43 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2011-01-04 15:32 . 2011-01-04 15:43 -------- d-----w- c:\program files\Common Files\BioWare
2011-01-04 15:32 . 2011-01-04 15:38 -------- d-----w- c:\program files\Mass Effect 2
2011-01-04 15:10 . 2011-01-04 15:10 -------- d-----w- c:\program files\COMODO
2011-01-04 15:09 . 2011-01-04 15:29 -------- d-----w- c:\programdata\Comodo
2011-01-03 17:56 . 2011-01-03 17:56 -------- d-----w- c:\program files\Common Files\Java
2011-01-03 17:55 . 2011-01-03 17:55 472808 ----a-w- c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
2011-01-03 17:55 . 2011-01-03 17:55 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-01-03 17:55 . 2011-01-03 17:55 -------- d-----w- c:\program files\Java
2011-01-03 17:54 . 2011-01-03 18:32 -------- d-----w- c:\program files\JDownloader
2011-01-02 12:16 . 2011-01-02 12:16 -------- d-----w- c:\users\Martin\AppData\Roaming\GameRanger
2011-01-01 19:49 . 2011-01-01 19:49 -------- d-----w- c:\users\Martin\AppData\Local\ESET
2010-12-31 18:08 . 2011-01-01 09:41 -------- d-----w- c:\program files\Common Files\Steam
2010-12-31 13:04 . 2010-12-31 13:31 -------- d-----w- c:\users\Martin\AppData\Roaming\Winter Sports 2011
2010-12-30 20:03 . 2010-12-30 20:03 -------- d-----w- c:\program files\RocketDock
2010-12-30 19:10 . 2010-12-30 19:10 -------- d-----w- c:\users\Ostatní\AppData\Local\VirtualStore
2010-12-30 18:40 . 2010-12-30 18:40 -------- d-----w- c:\program files\VS Revo Group
2010-12-30 16:27 . 2010-12-30 16:27 -------- d-----w- c:\program files\WhoCrashed
2010-12-30 15:06 . 2010-12-30 15:06 -------- d-----w- c:\program files\uTorrent
2010-12-30 15:06 . 2010-12-31 12:43 -------- d-----w- c:\users\Martin\AppData\Roaming\uTorrent
2010-12-30 13:36 . 2010-12-30 13:36 -------- d-----w- c:\users\Martin\AppData\Roaming\Ashampoo
2010-12-30 13:36 . 2010-12-30 13:36 -------- d-----w- c:\users\Martin\AppData\Local\ashampoo
2010-12-30 13:36 . 2010-12-30 13:36 -------- d-----w- c:\programdata\ashampoo
2010-12-30 13:36 . 2010-12-30 13:36 -------- d-----w- c:\program files\Ashampoo
2010-12-30 10:23 . 2010-06-02 03:55 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2010-12-30 10:23 . 2010-06-02 03:55 527192 ----a-w- c:\windows\system32\XAudio2_7.dll
2010-12-30 10:23 . 2010-05-26 10:41 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2010-12-30 10:23 . 2010-05-26 10:41 248672 ----a-w- c:\windows\system32\d3dx11_43.dll
2010-12-30 10:23 . 2010-05-26 10:41 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2010-12-30 10:23 . 2010-05-26 10:41 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2010-12-30 10:23 . 2010-05-26 10:41 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll
2010-12-30 10:23 . 2010-02-04 09:01 22360 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2010-12-29 00:42 . 2010-12-29 00:42 285480 ----a-w- c:\windows\system32\guard32.dll
2010-12-29 00:41 . 2011-01-18 14:33 80064 ----a-w- c:\windows\system32\drivers\inspect.sys
2010-12-29 00:41 . 2011-01-18 14:33 35768 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2010-12-29 00:41 . 2011-01-18 14:33 236600 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2010-12-29 00:41 . 2011-01-18 14:33 17256 ----a-w- c:\windows\system32\drivers\cmderd.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-23 10:02 . 2010-12-23 10:02 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-12-22 07:48 . 2010-12-22 07:48 176488 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10136.bin
2010-12-20 17:09 . 2010-12-26 18:20 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 17:08 . 2010-12-26 18:20 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\UC.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\RAR.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\PKZIP.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\PKUNZIP.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\NOCLOSE.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\LHA.PIF
2010-12-17 06:56 . 2010-12-21 16:59 545 ----a-w- c:\windows\ARJ.PIF
2010-12-02 08:25 . 2010-12-02 08:25 86016 ----a-w- c:\windows\system32\frapsvid.dll
2010-11-30 16:23 . 2010-12-22 15:22 553984 ----a-w- c:\windows\system32\RCoRes.dat
2010-11-30 16:06 . 2010-12-22 15:22 3317800 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2010-11-29 17:48 . 2010-12-22 15:22 1723536 ----a-w- c:\windows\system32\WavesGUILib.dll
2010-11-29 17:48 . 2010-12-22 15:22 1439064 ----a-w- c:\windows\system32\MaxxAudioRealtek.dll
2010-11-26 04:19 . 2010-11-26 04:19 6650368 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2010-11-26 03:02 . 2010-11-26 03:02 16702976 ----a-w- c:\windows\system32\atioglxx.dll
2010-11-26 02:58 . 2010-11-26 02:58 143360 ----a-w- c:\windows\system32\atiapfxx.exe
2010-11-26 02:58 . 2010-12-20 19:22 550400 ----a-w- c:\windows\system32\aticfx32.dll
2010-11-26 02:54 . 2010-11-26 02:54 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2010-11-26 02:54 . 2010-11-26 02:54 393216 ----a-w- c:\windows\system32\atieclxx.exe
2010-11-26 02:54 . 2010-11-26 02:54 176128 ----a-w- c:\windows\system32\atiesrxx.exe
2010-11-26 02:52 . 2010-11-26 02:52 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2010-11-26 02:52 . 2010-11-26 02:52 356352 ----a-w- c:\windows\system32\atipdlxx.dll
2010-11-26 02:52 . 2010-11-26 02:52 278528 ----a-w- c:\windows\system32\Oemdspif.dll
2010-11-26 02:52 . 2010-11-26 02:52 15872 ----a-w- c:\windows\system32\atimuixx.dll
2010-11-26 02:52 . 2010-11-26 02:52 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2010-11-26 02:49 . 2010-12-20 19:22 4066816 ----a-w- c:\windows\system32\atidxx32.dll
2010-11-26 02:30 . 2010-12-20 19:22 4122624 ----a-w- c:\windows\system32\atiumdag.dll
2010-11-26 02:30 . 2010-11-26 02:30 46080 ----a-w- c:\windows\system32\aticalrt.dll
2010-11-26 02:30 . 2010-11-26 02:30 44032 ----a-w- c:\windows\system32\aticalcl.dll
2010-11-26 02:28 . 2010-11-26 02:28 5441024 ----a-w- c:\windows\system32\aticaldd.dll
2010-11-26 02:24 . 2010-12-20 19:22 52736 ----a-w- c:\windows\system32\coinst.dll
2010-11-26 02:22 . 2010-12-20 19:22 3460096 ----a-w- c:\windows\system32\atiumdva.dll
2010-11-26 02:17 . 2010-11-26 02:17 249856 ----a-w- c:\windows\system32\atiadlxx.dll
2010-11-26 02:17 . 2010-11-26 02:17 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2010-11-26 02:16 . 2010-11-26 02:16 27136 ----a-w- c:\windows\system32\atigktxx.dll
2010-11-26 02:16 . 2010-11-26 02:16 231936 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2010-11-26 02:15 . 2010-12-20 19:22 30720 ----a-w- c:\windows\system32\atiuxpag.dll
2010-11-26 02:15 . 2010-12-20 19:22 28672 ----a-w- c:\windows\system32\atiu9pag.dll
2010-11-26 02:15 . 2010-11-26 02:15 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2010-11-26 02:09 . 2010-11-26 02:09 52736 ----a-w- c:\windows\system32\atimpc32.dll
2010-11-26 02:09 . 2010-11-26 02:09 52736 ----a-w- c:\windows\system32\amdpcom32.dll
2010-11-24 13:24 . 2010-12-22 15:22 3790440 ----a-w- c:\windows\system32\RtkAPO.dll
2010-11-24 13:24 . 2010-12-22 15:22 1976936 ----a-w- c:\windows\system32\RtkPgExt.dll
2010-11-22 10:39 . 2010-12-22 15:22 469608 ----a-w- c:\windows\system32\RtkApoApi.dll
2010-11-11 12:27 . 2010-12-22 15:22 69224 ----a-w- c:\windows\system32\RtkCoInst.dll
2010-11-08 22:57 . 2010-11-08 22:57 353592 ----a-w- c:\windows\system32\DivXControlPanelApplet.cpl
2010-11-08 06:31 . 2010-12-22 15:22 78680 ----a-w- c:\windows\system32\RTEEL32A.dll
2010-11-08 06:31 . 2010-12-22 15:22 359768 ----a-w- c:\windows\system32\RTEEP32A.dll
2010-11-08 06:31 . 2010-12-22 15:22 64856 ----a-w- c:\windows\system32\RTEEG32A.dll
2010-11-08 06:31 . 2010-12-22 15:22 295768 ----a-w- c:\windows\system32\RP3DHT32.dll
2010-11-08 06:31 . 2010-12-22 15:22 295768 ----a-w- c:\windows\system32\RP3DAA32.dll
2010-11-08 06:31 . 2010-12-22 15:22 170840 ----a-w- c:\windows\system32\RTEED32A.dll
2010-11-04 05:52 . 2010-12-21 08:55 978944 ----a-w- c:\windows\system32\wininet.dll
2010-11-04 05:48 . 2010-12-21 08:55 44544 ----a-w- c:\windows\system32\licmgr10.dll
2010-11-04 04:41 . 2010-12-21 08:55 386048 ----a-w- c:\windows\system32\html.iec
2010-11-04 04:08 . 2010-12-21 08:55 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2010-11-03 17:27 . 2010-12-22 15:22 1084008 ----a-w- c:\windows\system32\RTSndMgr.cpl
2010-11-03 17:25 . 2010-12-22 15:22 429160 ----a-w- c:\windows\system32\DTSSymmetryDLL.dll
2010-11-03 17:25 . 2010-12-22 15:22 406120 ----a-w- c:\windows\system32\DTSVoiceClarityDLL.dll
2010-11-03 17:25 . 2010-12-22 15:22 962664 ----a-w- c:\windows\system32\DTSS2HeadphoneDLL.dll
2010-11-03 17:25 . 2010-12-22 15:22 291432 ----a-w- c:\windows\system32\DTSNeoPCDLL.dll
2010-11-03 17:25 . 2010-12-22 15:22 224360 ----a-w- c:\windows\system32\DTSLimiterDLL.dll
2010-11-03 17:25 . 2010-12-22 15:22 1132648 ----a-w- c:\windows\system32\DTSS2SpeakerDLL.dll
2010-11-03 17:25 . 2010-12-22 15:22 107112 ----a-w- c:\windows\system32\DTSLFXAPO.dll
2010-11-03 17:25 . 2010-12-22 15:22 107112 ----a-w- c:\windows\system32\DTSGFXAPO.dll
2010-11-03 17:25 . 2010-12-22 15:22 106600 ----a-w- c:\windows\system32\DTSGFXAPONS.dll
2010-11-03 17:25 . 2010-12-22 15:22 901224 ----a-w- c:\windows\system32\DTSBoostDLL.dll
2010-11-03 17:25 . 2010-12-22 15:22 448616 ----a-w- c:\windows\system32\DTSBassEnhancementDLL.dll
2010-11-03 17:25 . 2010-12-22 15:22 236648 ----a-w- c:\windows\system32\DTSGainCompensatorDLL.dll
2010-11-02 08:32 . 2010-12-22 15:22 1705816 ----a-w- c:\windows\system32\R4EEP32A.dll
2010-11-02 08:32 . 2010-12-22 15:22 96600 ----a-w- c:\windows\system32\R4EEL32A.dll
2010-11-02 08:32 . 2010-12-22 15:22 61784 ----a-w- c:\windows\system32\R4EEG32A.dll
2010-11-02 08:32 . 2010-12-22 15:22 341848 ----a-w- c:\windows\system32\R4EED32A.dll
2010-11-02 08:31 . 2010-12-22 15:22 81240 ----a-w- c:\windows\system32\R4EEA32A.dll
2010-11-02 04:41 . 2010-12-21 08:55 351232 ----a-w- c:\windows\system32\wmicmiplugin.dll
2010-11-02 04:40 . 2010-12-21 08:55 496128 ----a-w- c:\windows\system32\taskschd.dll
2010-11-02 04:40 . 2010-12-21 08:55 305152 ----a-w- c:\windows\system32\taskcomp.dll
2010-11-02 04:39 . 2010-12-21 08:55 749056 ----a-w- c:\windows\system32\schedsvc.dll
2010-11-02 04:34 . 2010-12-21 08:55 192000 ----a-w- c:\windows\system32\taskeng.exe
2010-11-02 04:34 . 2010-12-21 08:55 179712 ----a-w- c:\windows\system32\schtasks.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-11-30 9914984]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-11-25 336384]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-01-18 2548040]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-11-18 2219184]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\guard32.dll c:\windows\System32\guard32.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2010-04-01 09:16 357696 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivX Download Manager]
2010-12-08 21:15 63360 ----a-w- c:\program files\DivX\DivX Plus Web Player\DDMService.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2010-12-09 19:28 1226608 ----a-w- c:\program files\DivX\DivX Update\DivXUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON SX210 Series]
2008-11-05 14:00 199680 ----a-w- c:\windows\System32\spool\drivers\w32x86\3\E_FATIFDE.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-05-14 10:44 248552 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Google Update"="c:\users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe" /c

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-12-21 1343400]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-12-23 691696]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2011-01-18 236600]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2011-01-18 35768]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-11-26 176128]
S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 140224]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-09-03 137144]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-11-18 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 96920]
S3 amdiox86;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox86.sys [2010-02-18 37944]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2010-11-26 6650368]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-11-26 231936]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]

.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
TCP: {26A0AE98-9276-4FBB-AA80-3214767AE065} = 10.10.10.1
FF - ProfilePath - c:\users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\730ycoe2.default\
FF - prefs.js: browser.startup.homepage - www.google.cz
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: DivX Plus Web Player HTML5 &lt;video&gt;: {23fcfd51-4958-4f00-80a3-ae97e717ed8b} - c:\program files\DivX\DivX Plus Web Player\firefox\html5video
FF - Ext: DivX HiQ: {6904342A-8307-11DF-A508-4AE2DFD72085} - c:\program files\DivX\DivX Plus Web Player\firefox\wpa
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-2389715676-1705300900-3093446007-1000\Software\SecuROM\License information*]
"datasecu"=hex:b3,d6,b8,10,4d,b0,09,ee,3f,00,0e,cf,5b,bb,f7,20,95,4f,8b,03,dc,
d7,9e,f4,f3,67,d9,9f,d3,fb,35,a0,e9,17,72,c8,50,a1,ae,a1,f6,aa,f9,c4,24,e4,\
"rkeysecu"=hex:66,e2,77,8a,0f,b4,d6,2c,27,b5,3e,f6,03,af,e0,a5
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(680)
c:\windows\System32\guard32.dll

- - - - - - - > 'lsass.exe'(608)
c:\windows\system32\guard32.dll
.
Celkový čas: 2011-01-27 16:34:27
ComboFix-quarantined-files.txt 2011-01-27 15:34
ComboFix2.txt 2011-01-27 15:10
ComboFix3.txt 2011-01-18 13:14

Před spuštěním: Volných bajtů: 43 261 779 968
Po spuštění: Volných bajtů: 43 211 583 488

- - End Of File - - 56CE2D3419CE91146E1C7A0AA0AE8139

[memphisto]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

vyčisti systém CCleanerem

a použij i T-Cleaner
smaže vše po Combu,MWAVu atd.-stáhneš>spustíš

pozn. před stažením T-Cleaneru a po dobu čištění deaktivuj AVG , Avast,Avira či Microsoft Security Essentials následně T-Cleaner smaž a zapni si AVG , Avast, Avira či Microsoft Security Essentials


+HJT

Jak se chová PC?

[M4RTY]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:28:01, on 27.1.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\Martin\Desktop\HijackThis.exe
C:\Windows\system32\DllHost.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O17 - HKLM\System\CCS\Services\Tcpip\..\{26A0AE98-9276-4FBB-AA80-3214767AE065}: NameServer = 10.10.10.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{26A0AE98-9276-4FBB-AA80-3214767AE065}: NameServer = 10.10.10.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{26A0AE98-9276-4FBB-AA80-3214767AE065}: NameServer = 10.10.10.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\System32\guard32.dll C:\Windows\System32\guard32.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 4733 bytes

Už se chová lépe :)

[memphisto]

Log HJT taky ok. Pokud nejsou problémy, můžeš dát zelenou fajku

[M4RTY]

OK, dávám a díky za rychlé řešení :)