PC-HELP.CZ

Logfile of Advanced SystemCare 3 Security Analyzer
Scan saved at 18:22:09, on 26.6.2011
Platform: Windows Vista (WinNT 6.1)
MSIE: Internet Explorer v9.0 (9.0.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files\Mouse\Amoumain.exe
C:\Program Files (x86)\Glary Utilities\memdefrag.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Seznam.cz\postak.exe
C:\Program Files (x86)\NCsoft\Launcher\NCLauncher.exe
C:\Users\Taťka a mamka\AppData\Local\Playata Client\PlayataClient.exe
G:\World of Warcraft\INstal addons\.ptmp213913\Wowhead_Client.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Driver-Soft\SuperOvladac\TaskTray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe
C:\Program Files (x86)\Lavalys\EVEREST Ultimate Edition\everest.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 3\Awc.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Groove GFS Browser Helper - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Groove GFS Browser Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Groove GFS Browser Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Ask Toolbar BHO - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files (x86)\Seznam.cz\core.3.dll
O3 - Toolbar: Sopcast Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O4 - HKCU\..\Run: [Glary Memory Optimizer] "C:\Program Files (x86)\Glary Utilities\memdefrag.exe" /autostart
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files (x86)\Seznam.cz\postak.exe" -s
O4 - HKCU\..\Run: [NCsoft Launcher] C:\Program Files (x86)\NCsoft\Launcher\NCLauncher.exe /Minimized
O4 - HKCU\..\Run: [PlayataClient] "C:\Users\Taťka a mamka\AppData\Local\Playata Client\PlayataClient.exe" -silent
O4 - HKCU\..\Run: [Wowhead_Client] "G:\World of Warcraft\INstal addons\.ptmp213913\Wowhead_Client.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Badoo Desktop] "C:\ProgramData\Badoo\Badoo Desktop\1.5.3.949\Badoo.Desktop.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [TaskTray] C:\Program Files (x86)\Driver-Soft\SuperOvladac\TaskTray.exe
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [BtTray] "C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe"
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Send by Bluetooth - C:\Program Files (x86)\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm
O8 - Extra context menu item: Send via &Message... - C:\Program Files (x86)\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} -
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} -
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} -
O9 - Extra button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe
O9 - Extra button: Propojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} -
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} -
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 1.6.0_25) - http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} (Java Plug-in 1.6.0_25) - http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Plug-in 1.6.0_25) - http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: (AMD External Events Utility) - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BlueSoleilCS - Unknown owner - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: BsHelpCS - Unknown owner - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe
O23 - Service: BsMobileCS - Unknown owner - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown - %ProgramFiles(x86)%\WinPcap\rpcapd.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown - %PROGRAMFILES%\Windows Media Player\wmpnetwk.exe

Nějaké problémy? Logy dělej přímo v HJT a ne Advanced SystemCare 3 Security Analyzer

Odinstaluj ASK Toolbar

Fixni:
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

problem je podezreni na hacknutej ucet u acc jedne hry logy uz dělam hned budou

Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Verze databáze: 6955

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

26.6.2011 20:22:33
mbam-log-2011-06-26 (20-22-33).txt

Typ: Rychlá kontrola
Kontrolované objekty: 167484
Uplynulý čas: 4 minut, 5 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 20:25:27, on 26.6.2011
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files\Mouse\Amoumain.exe
C:\Program Files (x86)\Glary Utilities\memdefrag.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Seznam.cz\postak.exe
C:\Program Files (x86)\NCsoft\Launcher\NCLauncher.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\TrendMicro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://search.centrum.cz/index.php?tool ... trum-1.0.0
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files (x86)\Seznam.cz\core.3.dll
O3 - Toolbar: Sopcast Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [TaskTray] C:\Program Files (x86)\Driver-Soft\SuperOvladac\TaskTray.exe
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [BtTray] "C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKLM\..\RunOnce: [InnoSetupRegFile.0000000001] "C:\Windows\is-06G7M.exe" /REG /REGSVRMODE
O4 - HKCU\..\Run: [Glary Memory Optimizer] "C:\Program Files (x86)\Glary Utilities\memdefrag.exe" /autostart
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files (x86)\Seznam.cz\postak.exe" -s
O4 - HKCU\..\Run: [NCsoft Launcher] C:\Program Files (x86)\NCsoft\Launcher\NCLauncher.exe /Minimized
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Badoo Desktop] "C:\ProgramData\Badoo\Badoo Desktop\1.5.3.949\Badoo.Desktop.exe"
O4 - Startup: CurseClientStartup.ccip
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Send by Bluetooth - C:\Program Files (x86)\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm
O8 - Extra context menu item: Send via &Message... - C:\Program Files (x86)\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D478DE80-DC8B-40BB-9F2D-9410A09378E7}: NameServer = 10.0.0.138
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BlueSoleilCS - Unknown owner - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: BsHelpCS - Unknown owner - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe
O23 - Service: BsMobileCS - Unknown owner - C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11297 bytes

jen vsuvka:

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

ComboFix 11-06-27.01 - Taťka a mamka 27.06.2011 22:38:41.5.2 - x64 MINIMAL
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4095.3390 [GMT 2:00]
Spuštěný z: c:\users\Taťka a mamka\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-05-27 do 2011-06-27 )))))))))))))))))))))))))))))))
.
.
2011-06-27 20:42 . 2011-06-27 20:42 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-06-27 10:28 . 2011-06-27 10:28 -------- d-----w- c:\users\Taťka a mamka\AppData\Local\Winamp Toolbar
2011-06-27 06:29 . 2009-09-04 15:29 1892184 ----a-w- c:\windows\SysWow64\D3DX9_42.dll
2011-06-27 06:29 . 2011-06-27 06:29 -------- d-----w- c:\program files (x86)\Winamp Detect
2011-06-27 06:28 . 2011-06-27 06:29 -------- d-----w- c:\program files (x86)\Winamp Toolbar
2011-06-27 06:28 . 2011-06-27 06:28 -------- d-----w- c:\programdata\Winamp Toolbar
2011-06-27 06:28 . 2011-06-27 06:28 -------- d-----w- c:\program files (x86)\Common Files\Software Update Utility
2011-06-27 06:28 . 2011-06-27 06:31 -------- d-----w- c:\program files\Zrychleni Pocitace
2011-06-27 06:28 . 2011-06-27 06:28 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine
2011-06-27 06:28 . 2011-06-27 13:03 -------- d-----w- c:\users\Taťka a mamka\AppData\Local\OpenCandy
2011-06-27 06:28 . 2011-06-27 06:40 -------- d-----w- c:\users\Taťka a mamka\AppData\Roaming\Winamp
2011-06-27 06:28 . 2011-06-27 06:30 -------- d-----w- c:\program files (x86)\Winamp
2011-06-27 06:28 . 2011-06-27 06:28 -------- d-----w- c:\users\Taťka a mamka\AppData\Roaming\OpenCandy
2011-06-26 21:01 . 2011-06-26 21:01 2106216 ----a-w- c:\program files (x86)\Mozilla Firefox\D3DCompiler_43.dll
2011-06-26 21:01 . 2011-06-26 21:01 1998168 ----a-w- c:\program files (x86)\Mozilla Firefox\d3dx9_43.dll
2011-06-26 16:06 . 2011-06-26 16:06 -------- d-----w- c:\users\Taťka a mamka\AppData\Roaming\IObit
2011-06-26 16:05 . 2011-06-26 16:05 -------- d-----w- c:\program files (x86)\IObit
2011-06-25 12:21 . 2011-06-25 12:21 -------- d-----w- c:\programdata\Badoo
2011-06-25 06:11 . 2011-06-07 17:10 8873296 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{6BB0BEF7-8C1C-498D-83DD-7CEF620BC4B0}\mpengine.dll
2011-06-18 17:34 . 2011-06-18 17:58 -------- d-----w- c:\program files (x86)\World of Warcraft
2011-06-18 17:11 . 2011-06-18 17:11 -------- d-----w- c:\program files (x86)\Elaborate Bytes
2011-06-16 09:57 . 2011-04-25 05:33 1923968 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-06-16 09:57 . 2011-04-25 02:34 499200 ----a-w- c:\windows\system32\drivers\afd.sys
2011-06-16 09:57 . 2011-04-27 02:39 289280 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-06-16 09:57 . 2011-04-27 02:40 158208 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-06-16 09:57 . 2011-04-27 02:39 128000 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-06-16 09:56 . 2011-05-28 03:06 3135488 ----a-w- c:\windows\system32\win32k.sys
2011-06-16 09:56 . 2011-04-29 03:05 410112 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-06-16 09:56 . 2011-04-29 03:06 467456 ----a-w- c:\windows\system32\drivers\srv.sys
2011-06-16 09:56 . 2011-04-29 03:05 168448 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-06-16 09:56 . 2011-02-25 06:22 861696 ----a-w- c:\windows\system32\oleaut32.dll
2011-06-16 09:56 . 2011-02-25 05:34 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2011-06-16 09:56 . 2011-05-03 05:29 976896 ----a-w- c:\windows\system32\inetcomm.dll
2011-06-16 09:56 . 2011-05-03 04:30 741376 ----a-w- c:\windows\SysWow64\inetcomm.dll
2011-06-15 04:26 . 2011-06-15 04:26 -------- d-----w- c:\windows\SysWow64\ivtMobCache
2011-06-10 19:20 . 2011-06-10 19:20 -------- d-----w- c:\users\Taťka a mamka\AppData\Local\bluesoleil
2011-06-10 17:44 . 2011-06-10 17:44 -------- d-----w- c:\program files (x86)\Nokia
2011-06-10 17:44 . 2008-05-07 05:39 66560 ----a-w- c:\windows\system32\nmwcdclsx64.dll
2011-06-10 17:44 . 2008-08-28 10:44 25600 ----a-w- c:\windows\system32\drivers\pccsmcfdx64.sys
2011-06-10 17:44 . 2011-06-10 17:44 -------- d-----w- c:\program files (x86)\PC Connectivity Solution
2011-06-10 17:43 . 2011-06-10 17:43 -------- d-----w- c:\programdata\Installations
2011-06-10 17:18 . 2011-06-10 17:22 -------- d-----w- c:\program files (x86)\Bluetooth File Sender
2011-06-10 16:50 . 2011-06-10 16:50 -------- d-----w- c:\program files (x86)\IVT Corporation
2011-06-10 16:26 . 2011-06-10 17:44 -------- d-----w- c:\program files\DIFX
2011-06-09 12:25 . 2011-06-09 12:25 -------- d-----w- c:\program files (x86)\Lavalys
2011-06-09 12:19 . 2011-06-09 12:19 -------- d-----w- c:\program files (x86)\HD Tune
2011-06-07 17:36 . 2011-06-07 17:36 -------- d-----w- c:\users\Taťka a mamka\AppData\Roaming\ts3overlay
2011-06-07 17:36 . 2011-06-07 20:17 -------- d-----w- c:\users\Taťka a mamka\AppData\Roaming\TS3Client
2011-06-07 17:24 . 2011-06-07 17:27 -------- d-----w- c:\users\Taťka a mamka\AppData\Roaming\Ventrilo
2011-06-07 11:34 . 2011-06-07 11:34 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-06-07 11:33 . 2011-06-07 11:33 -------- d-----w- c:\program files (x86)\Java
2011-06-02 08:49 . 2011-06-02 08:49 -------- d-----w- c:\users\Taťka a mamka\AppData\Roaming\MobMapUpdater
2011-06-02 08:49 . 2011-06-02 08:49 -------- d-----w- c:\program files (x86)\MobMapUpdater
2011-06-02 04:48 . 2011-06-02 04:48 -------- d-----w- c:\users\Taťka a mamka\AppData\Local\assembly
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-24 04:25 . 2011-05-19 06:14 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-06-07 11:34 . 2010-12-27 01:30 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-05-29 07:11 . 2011-04-12 15:34 39984 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-05-29 07:11 . 2011-04-12 15:34 25912 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-05-24 17:14 . 2010-12-26 20:51 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-05-10 12:10 . 2011-04-15 09:22 40112 ----a-w- c:\windows\avastSS.scr
2011-05-10 12:10 . 2011-04-15 09:22 199304 ----a-w- c:\windows\SysWow64\aswBoot.exe
2011-05-10 12:10 . 2011-01-19 17:36 253888 ----a-w- c:\windows\system32\aswBoot.exe
2011-05-10 12:04 . 2011-04-15 09:22 600920 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-05-10 12:04 . 2011-04-15 09:22 287576 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-05-10 12:02 . 2011-04-15 09:22 53592 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-05-10 11:59 . 2011-04-15 09:22 31064 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-05-10 11:59 . 2011-04-15 09:22 64344 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-05-10 11:59 . 2011-04-15 09:22 22360 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-04-22 22:15 . 2011-05-24 19:10 27520 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2011-04-18 15:14 . 2011-04-18 15:14 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2011-04-18 15:14 . 2011-04-18 15:14 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2011-04-18 15:14 . 2011-04-18 15:14 1126912 ----a-w- c:\windows\SysWow64\wininet.dll
2011-04-18 15:14 . 2011-04-18 15:14 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2011-04-18 15:14 . 2011-04-18 15:14 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2011-04-18 15:14 . 2011-04-18 15:14 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2011-04-18 15:14 . 2011-04-18 15:14 85504 ----a-w- c:\windows\system32\iesetup.dll
2011-04-18 15:14 . 2011-04-18 15:14 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2011-04-18 15:14 . 2011-04-18 15:14 76800 ----a-w- c:\windows\system32\tdc.ocx
2011-04-18 15:14 . 2011-04-18 15:14 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2011-04-18 15:14 . 2011-04-18 15:14 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2011-04-18 15:14 . 2011-04-18 15:14 603648 ----a-w- c:\windows\system32\vbscript.dll
2011-04-18 15:14 . 2011-04-18 15:14 49664 ----a-w- c:\windows\system32\imgutil.dll
2011-04-18 15:14 . 2011-04-18 15:14 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2011-04-18 15:14 . 2011-04-18 15:14 48640 ----a-w- c:\windows\system32\mshtmler.dll
2011-04-18 15:14 . 2011-04-18 15:14 448512 ----a-w- c:\windows\system32\html.iec
2011-04-18 15:14 . 2011-04-18 15:14 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2011-04-18 15:14 . 2011-04-18 15:14 367104 ----a-w- c:\windows\SysWow64\html.iec
2011-04-18 15:14 . 2011-04-18 15:14 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2011-04-18 15:14 . 2011-04-18 15:14 30720 ----a-w- c:\windows\system32\licmgr10.dll
2011-04-18 15:14 . 2011-04-18 15:14 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2011-04-18 15:14 . 2011-04-18 15:14 222208 ----a-w- c:\windows\system32\msls31.dll
2011-04-18 15:14 . 2011-04-18 15:14 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2011-04-18 15:14 . 2011-04-18 15:14 165888 ----a-w- c:\windows\system32\iexpress.exe
2011-04-18 15:14 . 2011-04-18 15:14 160256 ----a-w- c:\windows\system32\wextract.exe
2011-04-18 15:14 . 2011-04-18 15:14 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2011-04-18 15:14 . 2011-04-18 15:14 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2011-04-18 15:14 . 2011-04-18 15:14 1492992 ----a-w- c:\windows\system32\inetcpl.cpl
2011-04-18 15:14 . 2011-04-18 15:14 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2011-04-18 15:14 . 2011-04-18 15:14 1427456 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2011-04-18 15:14 . 2011-04-18 15:14 1389056 ----a-w- c:\windows\system32\wininet.dll
2011-04-18 15:14 . 2011-04-18 15:14 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2011-04-18 15:14 . 2011-04-18 15:14 12288 ----a-w- c:\windows\system32\mshta.exe
2011-04-18 15:14 . 2011-04-18 15:14 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2011-04-18 15:14 . 2011-04-18 15:14 114176 ----a-w- c:\windows\system32\admparse.dll
2011-04-18 15:14 . 2011-04-18 15:14 111616 ----a-w- c:\windows\system32\iesysprep.dll
2011-04-18 15:14 . 2011-04-18 15:14 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2011-04-18 15:14 . 2011-04-18 15:14 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2011-04-18 15:09 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-04-18 15:09 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-04-13 18:30 . 2008-02-13 14:20 17920 ----a-w- c:\windows\system32\drivers\Amusbx64.sys
2011-04-13 18:30 . 2007-10-15 09:41 12288 ----a-w- c:\windows\system32\drivers\Arfumx64.sys
2011-04-13 18:30 . 2007-10-15 09:39 21504 ----a-w- c:\windows\system32\drivers\Amps2x64.sys
2011-04-13 18:30 . 2007-10-15 09:37 12288 ----a-w- c:\windows\system32\drivers\Amfltx64.sys
2011-04-13 18:30 . 2007-04-06 12:05 32768 ----a-w- c:\windows\SysWow64\Amhooker.dll
2011-04-12 21:22 . 2011-04-12 21:16 301568 ----a-w- c:\windows\SysWow64\cmd.execf
2011-04-12 21:17 . 2011-04-12 21:16 8704 ----a-w- c:\windows\system32\drivers\PROCEXP90.SYS
2011-04-12 21:17 . 2011-04-12 21:17 301568 ----a-w- c:\windows\SysWow64\CF7874.exe
2011-04-12 21:16 . 2011-04-12 21:16 301568 ----a-w- c:\windows\SysWow64\CF7659.exe
2011-04-12 15:10 . 2011-04-12 15:10 388096 ----a-r- c:\users\Taťka a mamka\AppData\Roaming\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe
2011-04-12 15:10 . 2011-04-12 15:10 388096 ----a-r- c:\users\Taťka a mamka\AppData\Roaming\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe
2011-04-12 15:00 . 2011-04-12 15:00 388096 ----a-r- c:\users\Taťka a mamka\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-04-12 15:00 . 2011-04-12 15:00 388096 ----a-r- c:\users\Taťka a mamka\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-04-12 14:43 . 2011-04-12 14:43 632064 ----a-w- c:\windows\SysWow64\msvcr80.dll
2011-04-12 14:43 . 2011-04-12 14:43 554240 ----a-w- c:\windows\SysWow64\msvcp80.dll
2011-04-12 14:43 . 2011-04-12 14:43 34048 ----a-w- c:\windows\SysWow64\eEmpty.exe
2011-04-09 07:02 . 2011-05-11 14:38 5562240 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-04-09 06:58 . 2011-05-24 11:08 142336 ----a-w- c:\windows\system32\poqexec.exe
2011-04-09 06:02 . 2011-05-11 14:38 3967872 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2011-04-09 06:02 . 2011-05-11 14:38 3912576 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2011-04-09 05:56 . 2011-05-24 11:08 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{57BCA5FA-5DBB-45a2-B558-1755C3F6253B}"= "c:\program files (x86)\Winamp Toolbar\winamptb.dll" [2011-03-11 1373512]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2011-05-17 1490312]
.
[HKEY_CLASSES_ROOT\clsid\{57bca5fa-5dbb-45a2-b558-1755c3f6253b}]
[HKEY_CLASSES_ROOT\WinampTb.AOLTBSearch.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WinampTb.AOLTBSearch]
.
[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2011-05-17 11:29 1490312 ----a-w- c:\program files (x86)\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2011-05-17 1490312]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Glary Memory Optimizer"="c:\program files (x86)\Glary Utilities\memdefrag.exe" [2010-12-24 108344]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"Seznam Postak"="c:\program files (x86)\Seznam.cz\postak.exe" [2011-01-19 489584]
"NCsoft Launcher"="c:\program files (x86)\NCsoft\Launcher\NCLauncher.exe" [2011-06-02 38184]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-06-15 15141768]
"Badoo Desktop"="c:\programdata\Badoo\Badoo Desktop\1.5.3.949\Badoo.Desktop.exe" [2011-06-07 1017344]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-11-25 336384]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-05-10 3459712]
"TaskTray"="c:\program files (x86)\Driver-Soft\SuperOvladac\TaskTray.exe" [2011-01-27 284016]
"ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2011-05-17 395144]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-01-07 253672]
"BtTray"="c:\program files (x86)\IVT Corporation\BlueSoleil\BtTray.exe" [2009-02-27 315478]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-05-29 449584]
"WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2011-03-17 74752]
.
c:\users\Taśka a mamka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
CurseClientStartup.ccip [2011-5-23 0]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-disabled]
"NBKeyScan"="c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"SweetIM"=c:\program files (x86)\SweetIM\Messenger\SweetIM.exe
.
R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
R1 aswSnx;aswSnx; [x]
R1 aswSP;aswSP; [x]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
R2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
R2 aswFsBlk;aswFsBlk; [x]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
R2 BsMobileCS;BsMobileCS;c:\program files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe [2009-02-27 143467]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys [x]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-26 136176]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-05-29 366640]
R2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [x]
R2 TeamViewer5;TeamViewer 5;c:\program files (x86)\TeamViewer\Version5\TeamViewer_Service.exe [2010-07-06 173352]
R3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
R3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
R3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\Drivers\btnetBus.sys [x]
R3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files (x86)\Lavalys\EVEREST Ultimate Edition\kerneld.amd64 [2010-03-30 26752]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-26 136176]
R3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\Drivers\IvtBtBus.sys [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 51456888]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 BtHidBus;Bluetooth HID Bus Service;c:\windows\System32\Drivers\BtHidBus.sys [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2011-06-27 c:\windows\Tasks\AWC Startup.job
- c:\program files (x86)\IObit\Advanced SystemCare 3\AWC.exe [2011-06-26 13:33]
.
2011-06-27 c:\windows\Tasks\GlaryInitialize.job
- c:\program files (x86)\Glary Utilities\initialize.exe [2011-02-15 13:13]
.
2011-06-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-26 23:36]
.
2011-06-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-26 23:36]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-05-10 12:10 134384 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
"WheelMouse"="c:\program files\Mouse\Amoumain.exe" [2011-04-13 270336]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: Send by Bluetooth - c:\program files (x86)\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm
IE: Send via &Message... - c:\program files (x86)\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm
IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - c:\program files (x86)\ICQ7.4\ICQ.exe
TCP: Interfaces\{D478DE80-DC8B-40BB-9F2D-9410A09378E7}: NameServer = 10.0.0.138
FF - ProfilePath - c:\users\Taťka a mamka\AppData\Roaming\Mozilla\Firefox\Profiles\j8xnt307.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://websearch.ask.com/redirect?clien ... YYYYYCZ&q=
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-MMOUI Minion Installer - c:\windows\system32\javaws.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EverestDriver]
"ImagePath"="\??\c:\program files (x86)\Lavalys\EVEREST Ultimate Edition\kerneld.amd64"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Celkový čas: 2011-06-27 22:44:20
ComboFix-quarantined-files.txt 2011-06-27 20:44
.
Před spuštěním: 4 086 865 920
Po spuštění: 4 022 247 424
.
- - End Of File - - D0EE667085B008B5257FFFAC2832E05D

COMBOFIX SPUSTEN V NOUZOVEM REZIMU

Máš celkem málo místa na disku. Pořeš si trochu ty aplikace na optimalizaci. Máš tak Advance system care, utilitu na paměť, apod. Zybtečné....

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu

Toto otestuj na Virustotal
c:\windows\SysWow64\cmd.execf
c:\windows\SysWow64\CF7874.exe
c:\windows\SysWow64\CF7659.exe

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/40 , nebo 1/40. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

virus total scan

cmd.execf

CF7874.exe

CF7659.exe

ComboFix 11-06-27.01 - Taťka a mamka 28.06.2011 18:43:45.6.2 - x64 MINIMAL
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4095.3514 [GMT 2:00]
Spuštěný z: c:\users\Taťka a mamka\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Taťka a mamka\Desktop\CFScript.txt
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
FILE ::
"c:\windows\system32\drivers\cpuz135_x64.sys"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Ask.com
c:\program files (x86)\Ask.com\assets\oobe\b.png
c:\program files (x86)\Ask.com\assets\oobe\bl.png
c:\program files (x86)\Ask.com\assets\oobe\br.png
c:\program files (x86)\Ask.com\assets\oobe\l.png
c:\program files (x86)\Ask.com\assets\oobe\pointer.png
c:\program files (x86)\Ask.com\assets\oobe\r.png
c:\program files (x86)\Ask.com\assets\oobe\t.png
c:\program files (x86)\Ask.com\assets\oobe\tl.png
c:\program files (x86)\Ask.com\assets\oobe\tr.png
c:\program files (x86)\Ask.com\cb_1fb6.ico
c:\program files (x86)\Ask.com\cobrand.ico
c:\program files (x86)\Ask.com\config.xml
c:\program files (x86)\Ask.com\favicon.ico
c:\program files (x86)\Ask.com\fv_1901.ico
c:\program files (x86)\Ask.com\GenericAskToolbar.dll
c:\program files (x86)\Ask.com\mupcfg.xml
c:\program files (x86)\Ask.com\precache.exe
c:\program files (x86)\Ask.com\SaUpdate.exe
c:\program files (x86)\Ask.com\Updater\config.xml
c:\program files (x86)\Ask.com\Updater\Updater.exe
c:\program files (x86)\Ask.com\UpdateTask.exe
c:\program files (x86)\Winamp Toolbar
c:\program files (x86)\Winamp Toolbar\apopup.dll
c:\program files (x86)\Winamp Toolbar\install.log
c:\program files (x86)\Winamp Toolbar\msvcr71.dll
c:\program files (x86)\Winamp Toolbar\uninstall.exe
c:\program files (x86)\Winamp Toolbar\winamptb.dll
c:\program files (x86)\Winamp Toolbar\winamptbServer.exe
c:\program files (x86)\Winamp Toolbar\winamptbServerPS.dll
c:\program files (x86)\Winamp Toolbar\xprt5.dll
c:\programdata\Winamp Toolbar
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\buttons\defaultButtons.xml
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\images\arrow_left.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\images\arrow_left_on.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\images\arrow_right.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\images\arrow_right_on.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\images\qap_buy.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\images\qap_buy_on.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\images\qap_enqall_off.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\images\qap_enqall_on.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\images\qap_info.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\images\qap_info_on.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\images\qap_play.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\images\qap_play_on.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\images\qap_playall_off.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\images\qap_playall_on.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\images\qap_playlist.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\images\qap_playlist_on.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\mediamonitor.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\mediamonitor\mediamonitor.js
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\winamp\bg.jpg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\winamp\winamp.css
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\winamp\winamp.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\plugins\winamp\winamp.js
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\rss\bullet.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\rss\qap.js
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\rss\rss.css
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\rss\rss.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\rss\rss.js
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\00.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\01.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\02.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\03.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\04.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\05.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\06.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\07.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\08.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\09.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\about.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\addbuddybutton.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\addcustombutton.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\ani_media_icon.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\blocker.js
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\blue_input_down_0.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\blue_input_down_1.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\blue_input_down_2.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\blue_input_normal_0.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\blue_input_normal_1.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\blue_input_normal_2.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\blue_input_over_0.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\blue_input_over_1.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\blue_input_over_2.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\branding.js
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\buddy.js
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_movedowndisabled.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_movedowndown.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_movedownover.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_movedownup.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_moveupdisabled.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_moveupdown.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_moveupover.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_moveupup.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_nextdown.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_nextover.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_nextup.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_prevdown.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_prevover.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_prevup.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\buttonManager.js
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\buttons.js
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\buttons_frame.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\clearprints.js
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\clearprints_confirm.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\custombutton.js
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\customize_icon.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\defaultsearch.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\disabled_input_0.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\disabled_input_1.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\disabled_input_2.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\dot.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\dropcustombutton.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\firsttimepage.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\footprints.js
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\footprints_frame.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\general_icon.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\green_input_down_0.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\green_input_down_1.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\green_input_down_2.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\green_input_normal_0.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\green_input_normal_1.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\green_input_normal_2.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\green_input_over_0.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\green_input_over_1.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\green_input_over_2.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\latest.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\metrics.js
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\olderversion.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\options.js
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\options_frame.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_bottom_left.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_bottom_right.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_bottom_tile.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_left_tile.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_right_tile.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_top_left.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_top_left_bot.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_top_left_large.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_top_right.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_top_right_bot.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_top_right_large.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_top_tile.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\popup_icon.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\popups_frame.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\popups_icon.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\preferences.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\preferences.js
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\privacy_icon.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\renamecustombutton.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\resettoolbar.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\search.js
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\search_frame.htm
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\search_icon.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\SettingTabActive.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\SettingTabNormal.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\SettingTabOver.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\sidebar_bg.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\sidebar_bottom.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\sidebar_left.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\sidebar_top.gif
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\ui\stylesheet.css
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\winamptb.cfg
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\winamptbres.dll
c:\users\Taťka a mamka\AppData\Local\Winamp Toolbar
c:\users\Taťka a mamka\AppData\Local\Winamp Toolbar\ieToolbar\en-US\buttons.xml
c:\users\Taťka a mamka\AppData\Local\Winamp Toolbar\ieToolbar\en-US\default_winamp.xml
c:\users\Taťka a mamka\AppData\Local\Winamp Toolbar\ieToolbar\en-US\domains.xml
c:\users\Taťka a mamka\AppData\Local\Winamp Toolbar\ieToolbar\en-US\ietbconfig.xml
c:\users\Taťka a mamka\AppData\Local\Winamp Toolbar\ieToolbar\en-US\pagealerts.xml
c:\users\Taťka a mamka\AppData\Local\Winamp Toolbar\ieToolbar\en-US\publish.xml
c:\windows\system32\drivers\cpuz135_x64.sys
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_CPUZ135
-------\Service_cpuz135
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-05-28 do 2011-06-28 )))))))))))))))))))))))))))))))
.
.
2011-06-28 16:49 . 2011-06-28 16:49 -------- d-----w- c:\users\Public\AppData\Local\temp
2011-06-28 16:49 . 2011-06-28 16:49 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-06-28 16:49 . 2011-06-28 16:49 -------- d-----w- c:\users\Administrator\AppData\Local\temp
2011-06-28 07:31 . 2011-06-07 17:10 8873296 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{964DE222-224C-4D3D-86DB-97D44799CA31}\mpengine.dll
2011-06-27 06:29 . 2009-09-04 15:29 1892184 ----a-w- c:\windows\SysWow64\D3DX9_42.dll
2011-06-27 06:29 . 2011-06-27 06:29 -------- d-----w- c:\program files (x86)\Winamp Detect
2011-06-27 06:28 . 2011-06-27 06:28 -------- d-----w- c:\program files (x86)\Common Files\Software Update Utility
2011-06-27 06:28 . 2011-06-27 06:31 -------- d-----w- c:\program files\Zrychleni Pocitace
2011-06-27 06:28 . 2011-06-27 06:28 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine
2011-06-27 06:28 . 2011-06-27 13:03 -------- d-----w- c:\users\Taťka a mamka\AppData\Local\OpenCandy
2011-06-27 06:28 . 2011-06-28 09:08 -------- d-----w- c:\users\Taťka a mamka\AppData\Roaming\Winamp
2011-06-27 06:28 . 2011-06-27 06:30 -------- d-----w- c:\program files (x86)\Winamp
2011-06-27 06:28 . 2011-06-27 06:28 -------- d-----w- c:\users\Taťka a mamka\AppData\Roaming\OpenCandy
2011-06-26 21:01 . 2011-06-26 21:01 2106216 ----a-w- c:\program files (x86)\Mozilla Firefox\D3DCompiler_43.dll
2011-06-26 21:01 . 2011-06-26 21:01 1998168 ----a-w- c:\program files (x86)\Mozilla Firefox\d3dx9_43.dll
2011-06-26 16:06 . 2011-06-26 16:06 -------- d-----w- c:\users\Taťka a mamka\AppData\Roaming\IObit
2011-06-26 16:05 . 2011-06-26 16:05 -------- d-----w- c:\program files (x86)\IObit
2011-06-25 12:21 . 2011-06-25 12:21 -------- d-----w- c:\programdata\Badoo
2011-06-18 17:34 . 2011-06-18 17:58 -------- d-----w- c:\program files (x86)\World of Warcraft
2011-06-18 17:11 . 2011-06-18 17:11 -------- d-----w- c:\program files (x86)\Elaborate Bytes
2011-06-16 09:57 . 2011-04-25 05:33 1923968 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-06-16 09:57 . 2011-04-25 02:34 499200 ----a-w- c:\windows\system32\drivers\afd.sys
2011-06-16 09:57 . 2011-04-27 02:39 289280 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-06-16 09:57 . 2011-04-27 02:40 158208 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-06-16 09:57 . 2011-04-27 02:39 128000 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-06-16 09:56 . 2011-05-28 03:06 3135488 ----a-w- c:\windows\system32\win32k.sys
2011-06-16 09:56 . 2011-04-29 03:05 410112 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-06-16 09:56 . 2011-04-29 03:06 467456 ----a-w- c:\windows\system32\drivers\srv.sys
2011-06-16 09:56 . 2011-04-29 03:05 168448 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-06-16 09:56 . 2011-02-25 06:22 861696 ----a-w- c:\windows\system32\oleaut32.dll
2011-06-16 09:56 . 2011-02-25 05:34 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2011-06-16 09:56 . 2011-05-03 05:29 976896 ----a-w- c:\windows\system32\inetcomm.dll
2011-06-16 09:56 . 2011-05-03 04:30 741376 ----a-w- c:\windows\SysWow64\inetcomm.dll
2011-06-15 04:26 . 2011-06-15 04:26 -------- d-----w- c:\windows\SysWow64\ivtMobCache
2011-06-10 19:20 . 2011-06-10 19:20 -------- d-----w- c:\users\Taťka a mamka\AppData\Local\bluesoleil
2011-06-10 17:44 . 2011-06-10 17:44 -------- d-----w- c:\program files (x86)\Nokia
2011-06-10 17:44 . 2008-05-07 05:39 66560 ----a-w- c:\windows\system32\nmwcdclsx64.dll
2011-06-10 17:44 . 2008-08-28 10:44 25600 ----a-w- c:\windows\system32\drivers\pccsmcfdx64.sys
2011-06-10 17:44 . 2011-06-10 17:44 -------- d-----w- c:\program files (x86)\PC Connectivity Solution
2011-06-10 17:43 . 2011-06-10 17:43 -------- d-----w- c:\programdata\Installations
2011-06-10 17:18 . 2011-06-10 17:22 -------- d-----w- c:\program files (x86)\Bluetooth File Sender
2011-06-10 16:50 . 2011-06-10 16:50 -------- d-----w- c:\program files (x86)\IVT Corporation
2011-06-10 16:26 . 2011-06-10 17:44 -------- d-----w- c:\program files\DIFX
2011-06-09 12:25 . 2011-06-09 12:25 -------- d-----w- c:\program files (x86)\Lavalys
2011-06-09 12:19 . 2011-06-09 12:19 -------- d-----w- c:\program files (x86)\HD Tune
2011-06-07 17:36 . 2011-06-07 17:36 -------- d-----w- c:\users\Taťka a mamka\AppData\Roaming\ts3overlay
2011-06-07 17:36 . 2011-06-07 20:17 -------- d-----w- c:\users\Taťka a mamka\AppData\Roaming\TS3Client
2011-06-07 17:24 . 2011-06-07 17:27 -------- d-----w- c:\users\Taťka a mamka\AppData\Roaming\Ventrilo
2011-06-07 11:34 . 2011-06-07 11:34 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-06-07 11:33 . 2011-06-07 11:33 -------- d-----w- c:\program files (x86)\Java
2011-06-02 08:49 . 2011-06-02 08:49 -------- d-----w- c:\users\Taťka a mamka\AppData\Roaming\MobMapUpdater
2011-06-02 08:49 . 2011-06-02 08:49 -------- d-----w- c:\program files (x86)\MobMapUpdater
2011-06-02 04:48 . 2011-06-02 04:48 -------- d-----w- c:\users\Taťka a mamka\AppData\Local\assembly
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-24 04:25 . 2011-05-19 06:14 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-06-07 11:34 . 2010-12-27 01:30 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-05-29 07:11 . 2011-04-12 15:34 39984 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-05-29 07:11 . 2011-04-12 15:34 25912 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-05-24 17:14 . 2010-12-26 20:51 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-05-10 12:10 . 2011-04-15 09:22 40112 ----a-w- c:\windows\avastSS.scr
2011-05-10 12:10 . 2011-04-15 09:22 199304 ----a-w- c:\windows\SysWow64\aswBoot.exe
2011-05-10 12:10 . 2011-01-19 17:36 253888 ----a-w- c:\windows\system32\aswBoot.exe
2011-05-10 12:04 . 2011-04-15 09:22 600920 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-05-10 12:04 . 2011-04-15 09:22 287576 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-05-10 12:02 . 2011-04-15 09:22 53592 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-05-10 11:59 . 2011-04-15 09:22 31064 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-05-10 11:59 . 2011-04-15 09:22 64344 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-05-10 11:59 . 2011-04-15 09:22 22360 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-04-22 22:15 . 2011-05-24 19:10 27520 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2011-04-18 15:14 . 2011-04-18 15:14 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2011-04-18 15:14 . 2011-04-18 15:14 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2011-04-18 15:14 . 2011-04-18 15:14 1126912 ----a-w- c:\windows\SysWow64\wininet.dll
2011-04-18 15:14 . 2011-04-18 15:14 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2011-04-18 15:14 . 2011-04-18 15:14 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2011-04-18 15:14 . 2011-04-18 15:14 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2011-04-18 15:14 . 2011-04-18 15:14 85504 ----a-w- c:\windows\system32\iesetup.dll
2011-04-18 15:14 . 2011-04-18 15:14 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2011-04-18 15:14 . 2011-04-18 15:14 76800 ----a-w- c:\windows\system32\tdc.ocx
2011-04-18 15:14 . 2011-04-18 15:14 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2011-04-18 15:14 . 2011-04-18 15:14 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2011-04-18 15:14 . 2011-04-18 15:14 603648 ----a-w- c:\windows\system32\vbscript.dll
2011-04-18 15:14 . 2011-04-18 15:14 49664 ----a-w- c:\windows\system32\imgutil.dll
2011-04-18 15:14 . 2011-04-18 15:14 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2011-04-18 15:14 . 2011-04-18 15:14 48640 ----a-w- c:\windows\system32\mshtmler.dll
2011-04-18 15:14 . 2011-04-18 15:14 448512 ----a-w- c:\windows\system32\html.iec
2011-04-18 15:14 . 2011-04-18 15:14 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2011-04-18 15:14 . 2011-04-18 15:14 367104 ----a-w- c:\windows\SysWow64\html.iec
2011-04-18 15:14 . 2011-04-18 15:14 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2011-04-18 15:14 . 2011-04-18 15:14 30720 ----a-w- c:\windows\system32\licmgr10.dll
2011-04-18 15:14 . 2011-04-18 15:14 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2011-04-18 15:14 . 2011-04-18 15:14 222208 ----a-w- c:\windows\system32\msls31.dll
2011-04-18 15:14 . 2011-04-18 15:14 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2011-04-18 15:14 . 2011-04-18 15:14 165888 ----a-w- c:\windows\system32\iexpress.exe
2011-04-18 15:14 . 2011-04-18 15:14 160256 ----a-w- c:\windows\system32\wextract.exe
2011-04-18 15:14 . 2011-04-18 15:14 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2011-04-18 15:14 . 2011-04-18 15:14 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2011-04-18 15:14 . 2011-04-18 15:14 1492992 ----a-w- c:\windows\system32\inetcpl.cpl
2011-04-18 15:14 . 2011-04-18 15:14 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2011-04-18 15:14 . 2011-04-18 15:14 1427456 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2011-04-18 15:14 . 2011-04-18 15:14 1389056 ----a-w- c:\windows\system32\wininet.dll
2011-04-18 15:14 . 2011-04-18 15:14 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2011-04-18 15:14 . 2011-04-18 15:14 12288 ----a-w- c:\windows\system32\mshta.exe
2011-04-18 15:14 . 2011-04-18 15:14 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2011-04-18 15:14 . 2011-04-18 15:14 114176 ----a-w- c:\windows\system32\admparse.dll
2011-04-18 15:14 . 2011-04-18 15:14 111616 ----a-w- c:\windows\system32\iesysprep.dll
2011-04-18 15:14 . 2011-04-18 15:14 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2011-04-18 15:14 . 2011-04-18 15:14 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2011-04-18 15:09 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-04-18 15:09 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-04-13 18:30 . 2008-02-13 14:20 17920 ----a-w- c:\windows\system32\drivers\Amusbx64.sys
2011-04-13 18:30 . 2007-10-15 09:41 12288 ----a-w- c:\windows\system32\drivers\Arfumx64.sys
2011-04-13 18:30 . 2007-10-15 09:39 21504 ----a-w- c:\windows\system32\drivers\Amps2x64.sys
2011-04-13 18:30 . 2007-10-15 09:37 12288 ----a-w- c:\windows\system32\drivers\Amfltx64.sys
2011-04-13 18:30 . 2007-04-06 12:05 32768 ----a-w- c:\windows\SysWow64\Amhooker.dll
2011-04-12 21:22 . 2011-04-12 21:16 301568 ----a-w- c:\windows\SysWow64\cmd.execf
2011-04-12 21:17 . 2011-04-12 21:16 8704 ----a-w- c:\windows\system32\drivers\PROCEXP90.SYS
2011-04-12 21:17 . 2011-04-12 21:17 301568 ----a-w- c:\windows\SysWow64\CF7874.exe
2011-04-12 21:16 . 2011-04-12 21:16 301568 ----a-w- c:\windows\SysWow64\CF7659.exe
2011-04-12 15:10 . 2011-04-12 15:10 388096 ----a-r- c:\users\Taťka a mamka\AppData\Roaming\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe
2011-04-12 15:10 . 2011-04-12 15:10 388096 ----a-r- c:\users\Taťka a mamka\AppData\Roaming\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe
2011-04-12 15:00 . 2011-04-12 15:00 388096 ----a-r- c:\users\Taťka a mamka\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-04-12 15:00 . 2011-04-12 15:00 388096 ----a-r- c:\users\Taťka a mamka\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-04-12 14:43 . 2011-04-12 14:43 632064 ----a-w- c:\windows\SysWow64\msvcr80.dll
2011-04-12 14:43 . 2011-04-12 14:43 554240 ----a-w- c:\windows\SysWow64\msvcp80.dll
2011-04-12 14:43 . 2011-04-12 14:43 34048 ----a-w- c:\windows\SysWow64\eEmpty.exe
2011-04-09 07:02 . 2011-05-11 14:38 5562240 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-04-09 06:58 . 2011-05-24 11:08 142336 ----a-w- c:\windows\system32\poqexec.exe
2011-04-09 06:02 . 2011-05-11 14:38 3967872 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2011-04-09 06:02 . 2011-05-11 14:38 3912576 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2011-04-09 05:56 . 2011-05-24 11:08 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
.
.
((((((((((((((((((((((((((((( SnapShot@2011-06-27_20.42.57 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-07-14 04:54 . 2011-06-27 20:29 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2011-06-28 16:51 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2011-06-28 16:51 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2011-06-27 20:29 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2011-06-27 20:29 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2011-06-28 16:51 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-12-26 23:21 . 2011-06-28 16:20 64710 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
- 2009-07-14 05:10 . 2011-06-27 13:05 39948 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-06-28 16:52 39948 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2010-12-26 21:32 . 2011-06-28 16:52 19258 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-800867951-441533802-1533705285-1000_UserData.bin
+ 2010-12-26 20:31 . 2011-06-28 08:09 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-12-26 20:31 . 2011-06-27 06:29 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-12-26 20:31 . 2011-06-28 08:09 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-12-26 20:31 . 2011-06-27 06:29 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2011-06-27 06:29 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2011-06-28 08:09 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:46 . 2011-06-28 16:21 91600 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2011-06-28 16:50 . 2011-06-28 16:50 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-06-27 20:30 . 2011-06-27 20:30 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-06-27 20:30 . 2011-06-27 20:30 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-06-28 16:50 . 2011-06-28 16:50 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-07-14 05:01 . 2011-06-27 20:25 388188 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2011-06-28 16:34 388188 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-05-20 17:38 . 2011-06-28 14:30 3096176 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
- 2011-05-20 17:38 . 2011-06-27 11:44 3096176 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2011-01-19 18:45 . 2011-06-28 14:30 3914456 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-800867951-441533802-1533705285-1000-12288.dat
- 2011-01-19 18:45 . 2011-06-27 11:44 3914456 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-800867951-441533802-1533705285-1000-12288.dat
+ 2010-12-30 17:35 . 2011-06-28 16:34 29676732 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-800867951-441533802-1533705285-1000-8192.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Glary Memory Optimizer"="c:\program files (x86)\Glary Utilities\memdefrag.exe" [2010-12-24 108344]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"Seznam Postak"="c:\program files (x86)\Seznam.cz\postak.exe" [2011-01-19 489584]
"NCsoft Launcher"="c:\program files (x86)\NCsoft\Launcher\NCLauncher.exe" [2011-06-02 38184]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-06-15 15141768]
"Badoo Desktop"="c:\programdata\Badoo\Badoo Desktop\1.5.3.949\Badoo.Desktop.exe" [2011-06-07 1017344]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-11-25 336384]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-05-10 3459712]
"TaskTray"="c:\program files (x86)\Driver-Soft\SuperOvladac\TaskTray.exe" [2011-01-27 284016]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-01-07 253672]
"BtTray"="c:\program files (x86)\IVT Corporation\BlueSoleil\BtTray.exe" [2009-02-27 315478]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-05-29 449584]
"WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2011-03-17 74752]
.
c:\users\Taśka a mamka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
CurseClientStartup.ccip [2011-5-23 0]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-disabled]
"NBKeyScan"="c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"SweetIM"=c:\program files (x86)\SweetIM\Messenger\SweetIM.exe
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-26 136176]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-26 136176]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 51456888]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 BtHidBus;Bluetooth HID Bus Service;c:\windows\System32\Drivers\BtHidBus.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 BsMobileCS;BsMobileCS;c:\program files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe [2009-02-27 143467]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-05-29 366640]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [x]
S2 TeamViewer5;TeamViewer 5;c:\program files (x86)\TeamViewer\Version5\TeamViewer_Service.exe [2010-07-06 173352]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
S3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\Drivers\btnetBus.sys [x]
S3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\Drivers\IvtBtBus.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*Deregistered* - EverestDriver
.
Obsah adresáře 'Naplánované úlohy'
.
2011-06-28 c:\windows\Tasks\GlaryInitialize.job
- c:\program files (x86)\Glary Utilities\initialize.exe [2011-02-15 13:13]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-05-10 12:10 134384 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"combofix"="c:\combofix\CF19557.cfxxe" [X]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
"WheelMouse"="c:\program files\Mouse\Amoumain.exe" [2011-04-13 270336]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: Send by Bluetooth - c:\program files (x86)\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm
IE: Send via &Message... - c:\program files (x86)\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm
IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - c:\program files (x86)\ICQ7.4\ICQ.exe
TCP: Interfaces\{D478DE80-DC8B-40BB-9F2D-9410A09378E7}: NameServer = 10.0.0.138
FF - ProfilePath - c:\users\Taťka a mamka\AppData\Roaming\Mozilla\Firefox\Profiles\j8xnt307.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-ApnUpdater - c:\program files (x86)\Ask.com\Updater\Updater.exe
AddRemove-Winamp Toolbar - c:\program files (x86)\Winamp Toolbar\uninstall.exe
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
.
**************************************************************************
.
Celkový čas: 2011-06-28 18:59:17 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-06-28 16:59
ComboFix2.txt 2011-06-27 20:44
.
Před spuštěním: 3 963 383 808
Po spuštění: 3 728 330 752
.
- - End Of File - - 15A4A2F688C807A5E1E40C2D7C5CFC5D

tyto soubory jso nejake podezrele zrovna se jedna o podezreni hcknuti acc hry wow
slozka SysWow64 patri do systemu windows?


c:\windows\SysWow64\cmd.execf
c:\windows\SysWow64\CF7874.exe
c:\windows\SysWow64\CF7659.exe